last executing test programs: 3.720643672s ago: executing program 0 (id=10476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000050900010073797a30000000000900030073797a320000000060000000060a010400000000000000000100000208000b400000000038000480340001800b00010065787468647200002400028008000140000000140800044000000022050002000900000008000640000000020900010073797a30000000001400000011000100"], 0xd4}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) socket$inet(0x2, 0x5, 0x8) socket$kcm(0x10, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x420c03, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a80), 0x82c03, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000002ac0)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000002b00), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000002b40)={{r5, &(0x7f0000002bc0)='\xbb\xbb\xbb\xbb\xbb\xbb', 0x800, &(0x7f0000002c00)={@_ha_fsid={[0x2, 0xd3]}, {0x9, 0xf, 0x1ff}}, 0xc676, &(0x7f0000002c40)={@_ha_fsid}, &(0x7f0000002c80)=0xffffffff}, {[0x3978042c, 0x0, 0x3, 0x7]}, 0x1, 0xa0, &(0x7f0000002cc0)=""/160}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000002d80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002e40)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002ec0)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002f00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f80)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000003080), 0x56) sendmsg$kcm(r9, &(0x7f00000030c0)={&(0x7f0000003100)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f0000003180)=[{&(0x7f00000031c0)="27030200dc0f14000e0003000024c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000003200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r2, 0x400454cd, 0x118) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000003240)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000003280)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000032c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003300)={0x0, 0x0, &(0x7f0000003340)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x0) 3.719893966s ago: executing program 1 (id=10477): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001ec0)={'syztnl0\x00', &(0x7f0000001e40)={'erspan0\x00', 0x0, 0x8000, 0x10, 0x9, 0x1, {{0x15, 0x4, 0x2, 0x3c, 0x54, 0x67, 0x0, 0x6, 0x2f, 0x0, @empty, @rand_addr=0x64010102, {[@cipso={0x86, 0x33, 0x3, [{0x5, 0x12, "aa929a59373e3875426ac617f6f0949b"}, {0x1, 0x12, "4aea3dbe616bd9db39808af52e658859"}, {0x6, 0x9, "b71f5010248637"}]}, @noop, @generic={0x86, 0x9, "9a9eaa38cbe5dd"}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)=@gettfilter={0x5c, 0x2e, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xb, 0xc}, {0xb}, {0x3, 0xfff3}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x12}, {0x8, 0xb, 0xff}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'wg1\x00', {0x2}, 0x108}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0xf543, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000840), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000880)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) writev(r2, &(0x7f00000008c0)=[{0x0}], 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000001540)={0x500, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=ANY=[@ANYBLOB="020300000e0000000000000000000000050006003a0000000a00000400000000fc00000000000000000000000000000000000000000000000200010000000000000003180000000005000500000000000a"], 0x70}}, 0x0) socketpair(0x2c, 0x5, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x0, 0xc, &(0x7f0000001740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0xa, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001940)={0x18, 0x5, &(0x7f0000001d40)=ANY=[@ANYBLOB="0000000000d3dcff976d40b1a22b9cee0c3d0b404b8f24e65ccbe4c392ae7dfdeae2635065bf34836b92801b67fe7fb3883e402651d7a75460729d2a91ddec5c6cfa7761d17211ad8603ee6a55e1b3abc71386b2a3dcbb80f8e64da98d1f143cbebb812094a0aebecaf6e036f21c44d0f621fd5809135de46a152fe6d1c002001a684498c3c86375d17e24335117ab4bde8964308e5df9dbdb3da6b6e330d5250829deabbd1b0634fdbe7d9540f0390dec46b6487df60afdb1fef491eadfc6ea39c44dc7f44083218679bfb88f8605f194df763129bb17d3ca306e"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0xe, 0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x6, 0xc, &(0x7f0000001c00)=ANY=[], &(0x7f0000001c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c80)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000001d00)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000180)={0x0, 'bridge_slave_0\x00', {0x4}, 0xf1ee}) syz_80211_inject_frame(&(0x7f0000000f80)=@broadcast, 0x0, 0x4a6) 3.136044104s ago: executing program 0 (id=10483): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000100040000000000091931007b1140000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x16) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0xffff) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000023c0)}, &(0x7f0000002400)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x25, &(0x7f0000002440)={r3, @in6={{0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fffffff}}, 0x40, 0x100}, 0x90) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan1\x00', 0x0}) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000185a00000a0000000000000000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7910e0008000000b7030000040000008500000006000000"], &(0x7f0000000800)='syzkaller\x00', 0x5, 0x9b, &(0x7f0000002500)=""/155, 0x0, 0x39, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x1002, 0x8, 0x9, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000980)=[0x1, 0x1], &(0x7f0000000840)=[{0x0, 0x1, 0x0, 0xa}, {0x1, 0x1, 0x4, 0x1}, {0x1, 0x3, 0x0, 0xc}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r8, 0x0, 0x34, 0x0, &(0x7f0000000ac0)="5eb62788ecd1fe7f42e4aef38559af2d395eb652c9f8b99a2dd70318b3f673a0903c71503aae9e9e010d095dd94bf0f8891180ce", &(0x7f0000000b00), 0xa0, 0x0, 0xab, 0x0, &(0x7f0000000b40)="24f2319e8da38ac1031aa8085e7b1f73bc5e2b04052f2ac22afc13d8ba595fda24cd5ab55e73a13c964e2d5d896de90be54fb6255d25ee329a8e4b1607f29abd27b7adc2ed30bf69a3b0630fe2a39af9b74558c3311e55f8991854dc866615442574cad5dbff6ae003c970e14e58d1e1be7c61cba92a49d0110989a24ee4908c7ffd406faac66ace0a40a1a56d5c8c0acdf1931485671cae03467246f523393d92766c44ede51de998bb55", 0x0, 0x3, 0x0, 0x8}, 0x50) (async) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000c00)='ns/cgroup\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000c40)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f0000000e40)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r9, 0xc0c89425, &(0x7f0000000e80)={"9102fb09b95cd846f38d86bd744d83eb", r11, r12, {0x2755, 0x7}, {0x4a7, 0x2}, 0x0, [0x2, 0x4, 0x52, 0xffffffffffff35cf, 0x738, 0xffff, 0x8, 0x1, 0x3, 0x3, 0xdb4, 0x9, 0x7, 0x8, 0x7, 0x80000001]}) ioctl$BTRFS_IOC_WAIT_SYNC(r8, 0x40089416, &(0x7f0000000f80)=r12) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000fc0)={0x0, 0x1, 0x9765}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000013c0)={{r0}, r12, 0x8, @unused=[0x1, 0x2, 0x50000, 0x2], @devid=r13}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x82990100}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020027bd7000fbdbdf251c00400008000300", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r14, @ANYBLOB="0c00060003000000030000000c0006000200000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x800) 2.935433746s ago: executing program 2 (id=10486): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="5c010000100001002bbd7000fdffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000001f8ffffffffffff020000000000000000000000000000000000000400000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000020000000000000004000000000000000100000000000000000000000a0000000b000000000000001c0017000000000000000000fbffffff000000000000000004004000480001007368613235360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050021"], 0x15c}}, 0x14000000) 2.682011645s ago: executing program 2 (id=10488): syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd606ff1af00302f00fc08100000000000000000000000000000000000010000883e00307f7801000000485392a90164e9a0f695ee47cd5da4b76f31c15687b94ba7c2e25ea5ca579b8d2ea79715"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd606ff1af00302f00fc08100000000000000000000000000000000000010000883e00307f7801000000485392a90164e9a0f695ee47cd5da4b76f31c15687b94ba7c2e25ea5ca579b8d2ea79715"], 0x0) (async) 2.560237895s ago: executing program 2 (id=10489): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote, 0x4, 0x0, 0x3, 0x6, 0x5}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000003e00290200000000fcdbdb250a"], 0x18}}, 0x8000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}]}, &(0x7f0000000500)=0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000540)=@assoc_value, &(0x7f0000000580)=0x8) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000680)=[{{&(0x7f0000000740)={0x2, 0x4e20, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x70}}], 0x2, 0x2000c844) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) sendto$inet(r6, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x6, 0x2, 0x0, 0x5, 0x40, 0x2, 0x80, 0xbc, 0x1, 0x1, 0x5, 0x5, 0x6e, 0x1}, 0xfffffe53) pipe(&(0x7f0000000000)) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES8=r2, @ANYRESHEX=r2], 0x0, 0x8e}, 0x28) r9 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'dummy0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000020000000000000000000000aafebe11c4b11a3adae5aa08fec981ccafc4d233ffab65ea9089577cc3fff91f7d8b80ff6262a7904f30b85d59bfb82bfae4836e93820b5c5cdc7fbc9e1cd56c74f72acd3f6bc797cf3f5ffe3cea61768ccba7cf340f369457710e00babdd9f801743f3b87e86453a0f874", @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="010000000300"/28], 0x50) connect$pppoe(r9, &(0x7f00000008c0)={0x18, 0x0, {0x4, @remote, 'veth1_virt_wifi\x00'}}, 0x1e) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="200000000400000008000000000000"], 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ffffff7f000000005b21000018110000", @ANYRES32=r10, @ANYBLOB="00000000000000009402000014000000b7030000a00000008500000083000000bf0900000002500055090100000000009500000000000000bf91000000000000b702006113a8000020000085000000851c0000b700000000000000950000000135a6ced7257087374a056c136c3ee3fb054e4e2b7160afd0a2c4114c0895"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 2.193075222s ago: executing program 0 (id=10491): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0xfffd, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000002140)=@l2tp={0x2, 0x0, @remote, 0x2}, 0x80, &(0x7f0000002240)=[{&(0x7f0000000c40)="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", 0x3f3}, {&(0x7f0000002b40)="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", 0x1b9}, {&(0x7f0000000200)="f2", 0x1}], 0x3}, 0x8400) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x110, 0x0, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000040), {[{{@arp={@rand_addr=0x64010101, @multicast1, 0x0, 0xff, 0xd, 0xe, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0xff, 0xc98d4097861f677a]}}, 0x3, 0xffff, 0x5, 0x9, 0x85f, 0x6, 'tunl0\x00', 'wg2\x00', {}, {0xff}, 0x0, 0x240}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@multicast, @loopback, @rand_addr=0x64010100, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @empty, @broadcast, @empty, 0xf}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d906deb5e8ec", @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) 2.190397231s ago: executing program 1 (id=10492): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket(0xa, 0x3, 0x87) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(r2) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt(r4, 0x0, 0xc, 0x0, 0x0) (async) ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, &(0x7f00000001c0)={0x9}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000001c0), &(0x7f0000000200)=""/10, 0x2}, 0x20) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000440)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x29, 0x35, 0x7, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x1, 0x7800, 0x2, 0x1ff}}) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x328, 0xffffffff, 0xe8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0xc0, 0xe8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@ttl={{0x28}, {0x1, 0x1}}, @common=@unspec=@connlabel={{0x28}, {0x9, 0x6}}]}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0xffffff00, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@set={{0x40}, {{0x1, [0x7, 0x5, 0x2, 0x1, 0x0, 0x1], 0x6, 0x1}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) 1.853562231s ago: executing program 1 (id=10494): socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40480, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x200}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r1, 0x40585883, &(0x7f0000000440)={r2, 0x0, 0x4, 0xa, 0x1, 0x4, [0x9, 0x6, 0x5, 0x6, 0x4, 0x7]}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r1) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000000c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="feee7676ed9500d8886809e62202f5383babd25582729fa1e34fe6bb4831c1cb85d1e59350506d50213d015275d907243c46ea370110f5c3848d1aaff290cfb66124d72d6e76eae26b936024962f0b705edbb896954bb05e8e2428e221736ad48326babc4699e535b4c4cbfe156bedcfe6296092056c081d691d32b93d98ee5ecd8fa52278b6c7270c8ff01e62e916fa24cd2ee33f649d7b1bb967898c5ae19e3ef2d75486bdda95ce5f8351b0c74d5e38243f00"/195, @ANYRES16=r3, @ANYBLOB="000825bd7000fcdbdf2507000000050022000000000000000a000300000008001900ac1414bb00001d00150000001400080070696d7265670000000000000000000000000b000300000006001a004e240000"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4008081) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000006c0)={0x87, @empty, 0x4e20, 0x2, 'lblcr\x00', 0xc, 0x8, 0x6a}, 0x2c) connect$inet6(0xffffffffffffffff, &(0x7f0000000700)={0xa, 0x4001, 0x0, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x3}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000740)=0x2, 0x4) writev(r4, &(0x7f0000000780)=[{&(0x7f00000007c0)="580000001400192340834b80040d8c560a06ffffff7f070000004001000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000880)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000825bd7000fedbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x4855}, 0x20005) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="200000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000080ff03000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x4049004) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x48) close(0x3) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200), 0xc) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r10, &(0x7f0000000240)={0xa, 0x4e22, 0xffffffff, @local, 0xb}, 0x1c) listen(r10, 0x0) 1.819307663s ago: executing program 0 (id=10495): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x100) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004880)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x1fb, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="140000000000000029"], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=[@dstopts={{0x18, 0x29, 0x37, {0x88}}}], 0x18}}, {{&(0x7f0000003700)={0xa, 0x4e24, 0x5, @loopback, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000003a80)=[@tclass={{0x14, 0x29, 0x43, 0x808}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x33, 0x0, 0x1, 0x7}}}], 0x30}}], 0x3, 0x888) 1.410870344s ago: executing program 2 (id=10498): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dffbfe, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x33822}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x480c1}, 0x240408d0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xf, 0x8}, {0x8, 0xfffe}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x1, 0x6, 0x5, 0x8, 0x7, 0x3ff, 0x5, 0x4}}}}]}, 0x58}}, 0x4048090) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) close(0x4) sendto$inet(r2, &(0x7f0000000340)='^', 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0xa0, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) socket$packet(0x11, 0x2, 0x300) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) listen(r2, 0xda90) accept4(r2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000740)="58ddb007", 0x4}], 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20) unshare(0x2c020680) unshare(0x8040480) 1.364739348s ago: executing program 1 (id=10499): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f00000005c0)=0x101, 0x4) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000001c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "34cdc7293e557b11", "ec92dbb991aa4f493444a38061aa7938", "cdd2e760", "6b4ea72521f742e4"}, 0x28) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f00000006c0)=@ccm_128={{0x304}, "b398a992143a240d", "d036788c4aaf9c6ef96dda7201d2d2a5", "1a13ecde", "0597b7f1463f0f33"}, 0x28) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000200)=0x2, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000280), 0x0, 0x20008000) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) close(0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="578d2dbd7000fbdbdf250200000014000180080003007f00000106000100020000009eab6a3fd27620bafa71a354e80ef72a71602878561596adebec691ae78c58893578e33f7b7c994c5764822db62d198cf854f7de83660c923acb90f9c3e3fbee4e2d6339c503f3a6dbcc476a3409f4c909aee3c9e8ec9f79b728e4cd1b25f70195944efb0010f0a9d1efb1802ee737c2f519c762460401947954aee138f8b66db06ce54c2e52788c0d9a42c7cf7f535968ea620784ec1118315a89f586e38d83190ce86f7c26496acc027f835a6f785b209696cce8f6abeac34bd125c5cc5cc1bb000471981b1a126b1cce7c0d4a989788000000"], 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) r4 = socket(0xb, 0x80000, 0x0) sendmsg$inet_sctp(r4, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)=')', 0x1}], 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000001e00840000000000000000970f0005000000786763741ec00ae0021c1ce57a3c10daab591d04543d128662df8882dadb3477048e51a00547b0f95a4524efe564b04c94226854911cb18f21b14f9257b8723fff48ccfd91d9f9455cdcf789d0f516c3e8b4661d6e696b4581e105b82b38dabf5cb5893f6667f18eb3a54cfa0dad270ff09a0f4490a6fed5b9a542e2d931e5296a10be7977b19cb4168c3d08a091e823edbe430da2952ec94613cceccc3446acfdcee5128523f1483b17a67d1554d83615802a5274ef537a6534a676fc7d271aa707cbf3fd5916c5658fdf23a2d09f09188b64c01063abb21a29d73853627546"], 0x18, 0x4008000}, 0x280488c5) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1000}, 0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000007c0)={0x0, 0x1c, &(0x7f0000000800)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000840)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000880)={r6, @in6={{0xa, 0x4e24, 0x800, @private1, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf5}, &(0x7f0000000940)=0x9c) sendmsg$key(0xffffffffffffffff, 0x0, 0x200cc841) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3e, &(0x7f00000004c0)=0xfffffffe, 0x4) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000500)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000540)={0x4, &(0x7f0000000180)=[{0x20, 0xff, 0x0, 0xbfff7038}, {0x6, 0x0, 0x7f, 0xfffffffd}, {0x7, 0x2, 0xa, 0xfff}, {0x0, 0x2, 0x2, 0x71d}]}, 0x10) 1.253668648s ago: executing program 4 (id=10500): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x6, 0xc, &(0x7f0000001ac0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000001b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000140)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad", 0x1c, 0x40880, &(0x7f0000000180)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @local}, 0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24040085}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b80)={r0, 0x0, 0x2100, 0x0, &(0x7f0000001c00), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x6, 0xc, &(0x7f0000001ac0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000001b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x40) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$ipvs(0x0, r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async) sendto$packet(0xffffffffffffffff, &(0x7f0000000140)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad", 0x1c, 0x40880, &(0x7f0000000180)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @local}, 0x14) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24040085}, 0x4000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b80)={r0, 0x0, 0x2100, 0x0, &(0x7f0000001c00), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) 1.036629268s ago: executing program 4 (id=10502): socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r2, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2b}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x3c}}, 0x400400c) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000001840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001800)={&(0x7f0000000480)={0x1350, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xcf8, 0x52}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x198, 0x3, 0x0, 0x1, [{0xd4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xce, 0x2, "1ba078a0d89ff79169d428d1a1c1cad066aaf56796ceeb40f76221327d72e2c5599e73793eeeff21ecea639df1fa161cceadbd6eb4aeb03527bd764eda3f5a5c352d12a7755c73cc1046437053398c2bd624d3c6e6668a76a9c2d5d16940e13070eb8934c01c41ecacae69a9b6d46f7f55af5fef56a8d42d39653e06d0a0719dde096e2c5151b0cfc270df638e02f29b6c1d5b770e33e62c52254b5b5625fe7538b884f11a6ea18bbcaf0f3bb74f92856ce3c7feccc197c94a23e3471142df82cd765a812d26228a1e9b"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}}, {0xb4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xb0, 0x2, "773494064c31a943647338a5850561b9e8152d57e8ab0cdbee56122f18ac46ddde19f11bfd5f818b648b0ee1d6aa178fde1b932f7f227189f22c82e367705f91c7c156bf5feeec81c45adcc4051b85c0ad3bb4f0227013f99d0d5e63043a9e47966d125a969b7e84bf01459a66128811792f4e1a25a29c8a22af4c0d0c4753a65f8e9ee0c8f23e40c6c2007d1e4e648597e8d8a0c4328c539b7538d6c73013e03c16c38d46a3505f138cf8c9"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x100c, 0x3, 0x0, 0x1, [{0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "4bb79631fd142516494ff02ecb7b3a01c3c109f3cb53fc26f5f488b3e6b94f06f7d4388896069103595ee6af0fc5df4097c9484a42ace6a57976225de1fdfdf5694993071c6e4e7b6c6f9f1ddaa180c35f57aaf2606e413dd4b7be6fce416503d0a1aab983e8c36cf4b3dcf16fbe44488b8ee915b5be6647d71266b0f17f856e4b840b7bc82ace96f15491bc7e8cd740df7bf1535f56f8b4b7553cf8fc52767f38399870f42c1a71cbc71d790a1640d082af5089f69b0fb28f2d727f4b116057a813b6068a29ea1827e084f9cb6e2be3791c73b73dbb3c2d79ded72b1470be39a4c6d7bdc1ddc485e8f98daf952a44968c54a575ee8294ebc7f8b403199e3a52e754ff13610450b0566cdbf0f972fc8567778dba04c4fa8ca1bff8b2039ce57ae3f331f57d00141967e2a1361d906f23757629e7e7865c3ad887974cee169580b135a851b96ffd37554839933c448b00e705b6b162937c816299c2c46936f7a6c1d59062775188b0de60746d7e0af9b595560e8e8082b48403befdffd4b6d087270d5c606f37ec8c6a613102a56ea72fbcb4f248480f804f1ded271931623f8959da319100d68a8dba0387e63b61c6af25bd3ef92adc4148c8b4722a55f96d52ff9b5c9766d4b401ce8d8df30aaf9c6e397fbdcd9568447e48a603f583bd9baec7e18dd248047d92edd9cdc4acd9cb9bfeaae15c7d6f1878760a6aa0a83237a2fa908f44bc85f0a7465d943288d9a080ed4d668825da339fcb7b0f787a1b22499273bee1606452986c6ab137f3ca5fe6f80242957b14e8ecb92c142e89b806a8f93da73dc7249c20c71e2ae7ac01a28d499783052c0d519e02fffd3b3c881ed6b77d36b3c588aac6d152c78d40a338ba67cbc95bb673787da466135a27cd10f08acddea59512850ee2ea6e0dc5b3f767516f579e0c56dc65038dbf13ffa263117850bb0fb6978becbfbc0b02bab1259fe103cd92ff42145f4478725527a1649651d076c1e1ed4836fba5a5e1e99941f8e1e8b01256cd1c8c14353e7e73901ee8f344fa86f863ff36d2d96281815bfe7b29b835ec2841b834e82ad1c917235803d4961bd58898e1e43f948474b7e903ba524b1a85dfcb3880d4b8dddf44e9304893a353f1b110f35a804f75dae6a6ff9b66062afb9d9c92cb774495c6a8b10303accfbf03733f9ad1e547dbaa58ce4e92fc9fb296c05c0f63197b224386e6548ae249abe5097dbea70bddeff6ad390e854d45383b77c0144c86c905cb2a251d1bae99c1465cca8ce05f459d31eb96f08667b3b5c62bf24c5d957a365c235b33a89df9c0100e0a8e31ad3c21fc578aa24a162e011ea33318ed8681817439b257e674716644e387f2f2bfb8e6f0602157faed605ef74396724cf4f8a47998b92068053d492049425987ed4638e3ed1abfda9de68d439678b31c23faf394e4c1e457555b4a35c3b3ce73376f100d2bddd27ec0128f46b2cae0aa98b2bed96d243c0255aee2805a93cc070d62ace88fe15869c75171e95af68e3b018344f9988254c67df3d873ff1a2f7fa44508429f734d01ae8d2b3d738bb711dc50e884dc907148238ce36e1bb00356c1adaeab1c266641d749d1d1bf3d1d89231a556a12cf82a0f90c27989fc95880b63801f895890b151ef02f3c5a45b6460c747327e9f13feac30ef17ceac812137cc062e25ec6e97d4021feed1e5fa89030ab775e8476615ac84de2c6a64efae9404e0fc117716cbfb23dcd1db75b049659d3130dbe7111e1c8cb05f309c9a5543663066a2d8f2172d85ddc557625a75c15ad593786502b382b58f544da216573d92ffcad450960c55b23ee4978d71213ecaac538af8f74244e37d47033fa00db4f3d93a772af1d1deb06c0394e761fe03c4be01f78aeca4baec1d8694d592c60146405c65496fd7e7eb2df01b5b84e17aa760f1f65f7762197ca63b3d55570f6a560c49f6ee04ac3943d11c2395430d80e9e8df3944d6efae52b3b82e1b3989dd899f53c10116be8a62307c4353195d0c54bfea9aa998db8e5def4a27bf5169c8de81eccf538833c8975a5b2d9fa2b2c8f9e03e8c8b250cbc6ec06086bdc07b36e20a2249792fbaf9f00885a86ba9a80b3451939e7358c1a58738429e7443b64dcf604fea4aff778957d9231e556273bcf6cbf29c56038be6b996dea5f0557559936a9b0c2299b42672c769877f30fecf45aa3355f9df0d536c167d1d06acad2cbd29b2659068a6184ad2e1807a547f5d4f4b62c609318235b3426097ba7fe0d26742fce39378967323b056ee201764f5a07f8e98838ee52dac8e7a3b4832b8687bb843afd387637342710157eb6ff08a8633932c4aae2a07276be6b56065b3e3aba861dd5edb6364b561595786fee99201d928ebe65d7e8db7f9707df65b13a15ce8d9d1df89a3b46101b682e3206f3ed756dfb5c6681a7c86de3c062dd50ecda3e49200f2ff4271598bdc64588662bcec48ab4f41a33f4bbc7992823df3b50b8b53eafc2f34bab0b88b0de6e9e8a48d8501eedefe399bb8787fa7df9f86aa3fb314e1df0aede79e06a868c4a0796870010952e262383638f49f31de672dd4f3a041cbba7cc5ca21304de1f2dd50123a5dedf59976be8522d8aa038e1acfa7d59da5ee4bb8205f080388a9d2f230413bb7facb51e656fb4c0277fdf9047744f7f57b53ef2e9fe4976c812607bc79618304df333ca715cc56e099844107f924f463c0bace2e1c8cea632af0ce276e798891bdafecb9f3964f823c062efa4d003fd25e3e625bbe3569abb814cc02e7c5bb125edf39593193205aac4f1bd9e29ab53b215dbdba72a15e4d92f1d1493b65f8b6831de6d7e2ad953501a9f79dd253fc4c3019bc55f02da18c38bce5ab9b0019bb75ee9484fac3089ff2b2bd4853b1831f71d1326731f23312d39d4772525fa41ff1a17d0407aa565e672f16852bb04a8a2352dc122d3236318a379d780f29095543d04f033e6b516972dc663693ade1aa9dd84088fe47dd0bfbb868f08e7cae918042344f441718aee22e9a286789d4a64306edeb9a7d6e037c0f7d39f3369aa228d15dbe2be350add9ae2ca459962eacb734d3a54d2e1729d219fe958746643fd686c3ffa042403cd3c2bb4e1840e0cb9e9133554076ba0fd92a26366f42a0bf60f6c1f130ebe1f825f36d0ecb40416355feb2c0bcb4e5a15c043a8bda7d20f8de4d986be479c8ca345862470d1f119118506cb24b4753068e6930e6876465c5752c0009d48de5ab0ca6b330bf3c6cf29547ce1e38bf241a5675a5eda78288e9ff2797aa81ae89015ed9bb1c812ff388b1f2947c4688f3d23adb87acf7d89c933562a47f5178feafd40c75913d1ab46d40300f83cdff23ec6769c65eeb2132f3897cd67a24a6c04ca3cb57ff9ace3fb3836f4d2236d21dc117a6df1390e78aee0935792621d371fd354a66ab0ef6e6dc6dd34e13885d239e9fdc7b8cc693f41ca250ab922a7006b13d5034ce4d5cd41a1e124ee45eb845c8d6a6c4eb8f43f8eb96e0879a509c79220dd22ead8b67381c13401551d5c858631e2dafd6704e5510a692a5c88d13957f259d0c23a0ced0f1a39c6bb4f8cedcf3caf28fc0b085b0df31051a60488ad99f1cad637de6b746c403e777ce4f3e299dbfc8a99b067a5ebbd1dea0ffb16909c069625f98886ccdaa47bcd20a5beffc1c033022f67279e67696a8ca8719ebbdf57c227959f0e424dcace1c8a4acf305276cb9a800a146d63a4be4b50a46d68f169f24a21a007e30a4c4cbd4087c57c993d9eb4dba4f3eee2155007344cc8d3074e03e3bfad3eb61ae40d54796686814fc34d2c275c4185c2aacbce68c8ee9c6966b06030f2ab84e81e4e2d999da077bf2699650c33afbfe646c525192fb675737f770df3c7563fa4be274dc2207be9ff5317b0c11d4160960fd610e4135266622014ad2097c9eeb1c558a47e2f6a43d67891432837a14fea788679c1c0738fba0c676309811a1414f60746a6ad7029aa2b932e3c2c09776b7bac5d8a8ba21264f911cd764eb57dda4ba849f6da4970a65c493fe2a05b955abf7d018b67414aa207465772015941afed7035b05ce7ce23c6ebd18f0ce66a999f8bcfb9d2282ae01de1ffa674d0e397b7209f2edb97af0e59c351259ac99582fdc6c7665b70569187d9507ceda42b79013f97cb9ddb05f7b5077db23d3607e9710f544991f5717e908ba740f8088759c5abc30b47ba2c63df03154fe306dabd7febb6d0e40aa442fcdc195eb816aaf71d3b974987509386edec6846013f051f3816bab0df589bbd54f98160b18bae277443b8496ae68b505fe8cd7a8ad60bb8d6cf11c6262fd556ac7bdd28fe05e2f1cb9d75beac45cf1d2579b61cfdc1a8ce83ff80ebaf750349884e7d06f2a08b38a07d017be610294447d30f347b330688447504d2c714a062002d0c79ee8e6ab09386395018551186512f43637a5d6635c03f163a390a80bfee9c22affb8152abd81607b3adb4c205dda87bb00d19bca0b4a1309b456c33b5a47ebcdaab67a439fdcae66c245a3216c48a08b8a48b0c95e38ee7086958bb5dbadc9c1cc07f84d2b88d999f19c148e74a2b0bb154656b2c1711fb6778b0ac95562a24b656c61027093d2c3e9560a3e2e0b0b7bd52a6f9c0472470e3115b58e189d1ac1584b85aea2c8c90203660a85f0b8021dea1364d59f243ab8137064ff201c019bf250ebf29060469af679deffcf0118811d7bdec29b7f1b6a47522b84f94326c7e723d6567f5d1c1a16799745661380f9b4853379a0eb06115cd4d724a58f5f4a6fe69e5cce0e8f4343c0aeb19f34356431a3e78e3370d47f9c3a8101eeeb538c47d8f715d3d06e5c3aa63b4ac531dd94fb972eccd5735a09256c019bb17aa1fc9658bf40749fe970be4b51290ffe3615d3541c163b7ff564eae6efc395d1bfc0a11e53bf905193f44ef387c81488b6ca8022b19235d87476bc743a165c949d2808238fd234db73fd7ff27be0659a74fbf80ec490dedd1a487aeecf12bbc302da5617e20fa00dff00dbf17520de90683e94c8ca2ccf981d62116a7df38eab2c01ae728901305b54ef23c63692ff51610fcc600cb3f15bdd44dba0cdfebd80970402882b509644e3a3df508a8a63bfc796ebe785c9d7db081a1f90257c850e399c127f77aabddc7f9cbfb599dd232256f7e7d0922bb9bf2af1a6311619895d16c5448fd304480accbf43f93c53597a5d23685255df55cbdf19539adac3cfad024ccf044ab8c4a59b187a27f04618f26df9afd6c13387d4ed05f20851713be0c5d50eba0f254e9f1506ea4c0f54e68a07f7767771bfb381b53794e70f76a1e6b3b682a55d6f13a653bf41f89487f0e44f9df9a3ed9b1c57d53854332dd63851582fb26242647d8d43ec8e1e002b6b5c5e8d1316e130489e8e759657a740cea85234469d05e5a599220efe25e8f2964f66415805354a724001dc6a3e8f9c0591acd66c3d727d57c41fb6aae5eefc09b90c7c3e72143fd2ed4324c984dea3177e812fe261862892a0dd0b802a162624971c23bf775516cee884830d24b4c9f934ce5958c3d3329bf05a116b8530d51aa1de244123426e73536514116f7e2596803234573eb8c53c61e5f582ead040e750a6c6c1f27deb93dac6f7ed415ca5d5683cdde04e238f32071820c690b9e0b57144f778e6383296131ea1417b4dee404a165fc07d9d458021edffedc031c4b87f8bbf4db16222e27dbf792b439455f292e0d5e6a8f4522af5d89373a56c3dd47e672b83ce787dd462f23ec37de1a"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xb8, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x51, 0x2, "7d77a25f64d71dee61ef5268a9d94d530ce514a620c9aa56a089abf1c8362841071c43dd1ee1f163eb5bd338fad25e8ac9e45c0b012ee65fe1da4c140a8baa63878856223c7b84943c7a42b6a3"}}, {0x5c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x57, 0x1, "5c22983ee65a1a5e0bc6c83e8b367074464abf9d1e56e272e1bdd089090447bf585b857654f10ecb93639ad2bb8136776ad872e8fc83c5024be8269dd3e6cf8be61ecba433ddc3699875bea804d62d2629a7dc"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xbc, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8}}, {0xac, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xa7, 0x1, "6d87d8629a12b99ad58609c80aca7ec7c3707fbca9bd526981e9a4365d582f3b71ce979ec7ad2d2d830051293672d269a03571417c48894c1a28d3bf587b46742f211e951d727b03d29d6c161124262e3d1fb2e91b4fccc47468eaa5ff717953bee8e4e9ab8a59563e70da9a6797550ca52cc577476bd8f845595b3f3b2fe9243eee2cf01145ef0a3e42781f0bfeb82fac5740031e6d8dfcd45c830a0b83bc2df98be2"}}]}]}, 0x1350}, 0x1, 0x0, 0x0, 0x4014}, 0xd7e9e106eeec35f3) 1.016625209s ago: executing program 3 (id=10503): unshare(0x20000400) listen(0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="94da5eccb51e", 0x6}], 0x1}, 0x20000001) (async) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/151, 0x97}], 0x1}, 0x2001) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="07000000040000001800000003"], 0x50) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x38, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2fdb}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0xfff, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000ffffffff000000000300000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000018110000", @ANYRES16=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r6, r2}, 0xc) 861.676612ms ago: executing program 3 (id=10504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0040070900010073797a31000000000900030073"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) 785.065469ms ago: executing program 0 (id=10505): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000054000500010000000000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="01000000ef010101000000000000000ffe000000080000002800028005000300010000001c0002800c000180080001000a0000010c000180080001000a"], 0x60}}, 0x0) 699.146658ms ago: executing program 3 (id=10506): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000003c0)=@base={0x9, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0xdef}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000207900000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000079004001000000001800000000fd00000000000000000000950000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100}, 0x94) 617.81749ms ago: executing program 4 (id=10507): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100001060000000000000000000000000000000001000000010000000e00030076736f636b6d6f6e30000000140012800d00010076736f636b6d6f6e"], 0x44}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0) 497.853347ms ago: executing program 4 (id=10508): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 497.384228ms ago: executing program 0 (id=10509): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote, 0x4, 0x0, 0x3, 0x6, 0x5}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000003e00290200000000fcdbdb250a"], 0x18}}, 0x8000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}]}, &(0x7f0000000500)=0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000540)=@assoc_value, &(0x7f0000000580)=0x8) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000680)=[{{&(0x7f0000000740)={0x2, 0x4e20, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x70}}], 0x2, 0x2000c844) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) sendto$inet(r6, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x6, 0x2, 0x0, 0x5, 0x40, 0x2, 0x80, 0xbc, 0x1, 0x1, 0x5, 0x5, 0x6e, 0x1}, 0xfffffe53) pipe(&(0x7f0000000000)) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES8=r2, @ANYRESHEX=r2], 0x0, 0x8e}, 0x28) r9 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'dummy0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000020000000000000000000000aafebe11c4b11a3adae5aa08fec981ccafc4d233ffab65ea9089577cc3fff91f7d8b80ff6262a7904f30b85d59bfb82bfae4836e93820b5c5cdc7fbc9e1cd56c74f72acd3f6bc797cf3f5ffe3cea61768ccba7cf340f369457710e00babdd9f801743f3b87e86453a0f874", @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="010000000300"/28], 0x50) connect$pppoe(r9, &(0x7f00000008c0)={0x18, 0x0, {0x4, @remote, 'veth1_virt_wifi\x00'}}, 0x1e) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="200000000400000008000000000000"], 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ffffff7f000000005b21000018110000", @ANYRES32=r10, @ANYBLOB="00000000000000009402000014000000b703000fd80000008500000083000000bf0900000002500055090100000000009500000000000000bf91000000000000b702006113a8000020000085000000851c0000b700000000000000950000000135a6ced7257087374a056c136c3ee3fb054e4e2b7160afd0a2c4114c0895"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 478.981841ms ago: executing program 3 (id=10510): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008001800", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 386.089086ms ago: executing program 4 (id=10511): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000001c0), 0x3) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000200)=0x2, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="578d2dbd7000fbdbdf250200000014000180080003007f0000010600010002ff1f009eab6a3fd27620bafa71a354e80ef72a71602878561596adebec691ae78c58893578e33f7b7c994c5764822db62d198cf854f7de83660c923acb90f9c3e3fbee4e2d6339c503f3a6dbcc476a3409f4c909aee3c9e8ec9f79b728e4cd1b25f70195944efb0010f0a9d1efb1802ee737c2f519c762460401947954aee138f8b66db06ce54c2e52788c0d9a42c7cf7f535968ea620784ec1118315a89f586e38d83190ce86f7c26496acc027f835a6f785b209696cce8f6abeac34bd125c5cc5cc1bb000471981b1a126b1cce7c0d4a98978800"/253], 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) 323.146336ms ago: executing program 1 (id=10512): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="050000007f00000000000100000000", @ANYRES64=0x2710], 0x48}, 0x1, 0x225c17d03}, 0x0) 210.641403ms ago: executing program 3 (id=10513): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind(r0, &(0x7f0000000040)=@un=@file={0x0, './file0\x00'}, 0x80) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) socket$inet6(0xa, 0x1, 0x100) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$can_raw(r2, &(0x7f0000000200)={&(0x7f0000000240)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f00000002c0)=@can={{0x1}, 0x8, 0x0, 0x0, 0x0, "0100"}, 0x10}}, 0x1) sendmsg$inet(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="2a82bf7192abdc29b820bd052dea4f1b52efa37c3c6b25c5d13e81165e9f7149f3d97df89c3f73562399f8d358b939d48a4238ce7d15d3b71d4e264ffe09041be9eb88e9afea73a8876fe82a365683098c8aaab7f2134f9134a4b50447889b0dc4cd2a310cf36ab4cfa90658ca2dd4ef72f671fc29bc0f6790ce1aa6272cd16fc20d358619d9271d0e7706528cad72084046d471fc6cfa05d6db46c8f39f2eb4", 0xa0}, {&(0x7f0000000300)="8f759b0d72c0a3b2b487cc89da11188044b6043066ce7c7c5620a8c029599ed7f69dbf6feae242ce5f657d48b1baf9aadf467e07fd8804e52712fbac8b75e0dac6655d75", 0x44}, {&(0x7f0000000380)="841ce341a7bfae7c8158bf8a21b644268f4f330337df166fab1ebc1b636d8585d0a277a9530389108b1f3ea3a0a4e7", 0x2f}, {&(0x7f00000003c0)="4919bbf7", 0x4}, {&(0x7f0000000400)="6550439d8991b8757f853f41aa0a9e37924477c8161df3416d78cb5bb3d15ec12da82da4a0c1d5c80e520cd32147009a5b47c21b3183be6512d78e", 0x3b}], 0x5}, 0x4) read(r0, &(0x7f0000001300)=""/100, 0x64) socket(0x1d, 0x2, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) (async) bind(r0, &(0x7f0000000040)=@un=@file={0x0, './file0\x00'}, 0x80) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$inet6(0xa, 0x3, 0xff) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) socket$inet6(0xa, 0x1, 0x100) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) sendmsg$can_raw(r2, &(0x7f0000000200)={&(0x7f0000000240)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f00000002c0)=@can={{0x1}, 0x8, 0x0, 0x0, 0x0, "0100"}, 0x10}}, 0x1) (async) sendmsg$inet(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="2a82bf7192abdc29b820bd052dea4f1b52efa37c3c6b25c5d13e81165e9f7149f3d97df89c3f73562399f8d358b939d48a4238ce7d15d3b71d4e264ffe09041be9eb88e9afea73a8876fe82a365683098c8aaab7f2134f9134a4b50447889b0dc4cd2a310cf36ab4cfa90658ca2dd4ef72f671fc29bc0f6790ce1aa6272cd16fc20d358619d9271d0e7706528cad72084046d471fc6cfa05d6db46c8f39f2eb4", 0xa0}, {&(0x7f0000000300)="8f759b0d72c0a3b2b487cc89da11188044b6043066ce7c7c5620a8c029599ed7f69dbf6feae242ce5f657d48b1baf9aadf467e07fd8804e52712fbac8b75e0dac6655d75", 0x44}, {&(0x7f0000000380)="841ce341a7bfae7c8158bf8a21b644268f4f330337df166fab1ebc1b636d8585d0a277a9530389108b1f3ea3a0a4e7", 0x2f}, {&(0x7f00000003c0)="4919bbf7", 0x4}, {&(0x7f0000000400)="6550439d8991b8757f853f41aa0a9e37924477c8161df3416d78cb5bb3d15ec12da82da4a0c1d5c80e520cd32147009a5b47c21b3183be6512d78e", 0x3b}], 0x5}, 0x4) (async) read(r0, &(0x7f0000001300)=""/100, 0x64) (async) 208.458061ms ago: executing program 2 (id=10514): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000001b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001b80), 0x0, 0x10, &(0x7f0000001bc0), 0xffa3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfdffffff}, 0x48) 142.188022ms ago: executing program 4 (id=10515): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000000bc0)=""/4107, &(0x7f0000001c00)=0x1012) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="9b060000003800001c00128009000100626f6e64000000000c0002800500010006"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'bond0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r9, &(0x7f0000000b00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000500)={0x28, r8, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20004081) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000a80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000700)={0x328, r10, 0x4, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_WOL_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_WOL_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0xb2, 0x3, "dee3dc1ae301e0648d852e32045e5123463bffe0ec42183ec34f135d899ac0419491a315ec267e6d980ad2ba6d5c88e76d126c9c33f1a61e01cf54d8d6e5227fceb96ecdd071af55f82b4cdddd75b8a9b24b00c6f912113ab7a00c2076c97d159c7939debfef2dad2fa9f881d589840072561df0600d06e6de86a2f49ee1cd0bab7b9eec7186bd22de6fe2de1767ec79a8bb90f01537a96f8435925e386e0cc2c3d9690ed60f4d29923a2a935597"}, @ETHTOOL_A_WOL_SOPASS={0xb7, 0x3, "ed02d048ff986bf82aeb5f200cc7fef37b39e6bdc3011623d7c6724df3bbe788f35c823c889f695ae2b4585dd662890634b31f7aebf3e18acbbb98fb212b842dd300949bbac50f7fcbfd2d8da2deb92c90fc95b1990fda19ac709882b81fc40573d492ea5ab838fa106a22aeacc5716c10f708941717f5125c247035db4ddacd7344e1241a98e3321a368d58ffcc7d2dd071517ec4da6ea0df9601545301f4d459f81c8ba5fd58fb198c1f550e08e72b9b5e6d"}, @ETHTOOL_A_WOL_SOPASS={0xf9, 0x3, "69b07cecf22525a2935fb30259e50ff72b28826673d522ae5dd79c6722fb74f02718ead79c2986fd6a377edea995b27090f675506754f13d5b31561359a720966e9551d94e0740b8efd37ddaead182e9593609caba75fd17faa89d6f5468812508ede308c937e260a0b9a67697564163869b099fe9bd37a55d53c8e50f4b9ccb0a0799ebaf15206bc31d0961e7d8ca491d49e491a907c084a2cc22619659b2c254732a823f8ddd5c8d7b3f8612e1ec86095f9bb01d1d66ed0b85657d53b9cefb0095bf3641f812f0365903e794eecc57d24df3edc632b678d39c746383e6d11ab3d16e1092e5ecf7b13840fe9667bad95f44e03830"}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb0, 0x1403, 0x400, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_macvtap\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'rose0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x41}, 0x4014) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000b40)=@newlink={0x50, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_IFALIASn={0x4}]}, 0x50}}, 0x4008010) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) 120.165344ms ago: executing program 2 (id=10516): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000540)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000580)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, r8, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r8, 0x100, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xe7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1499}]}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x40000) connect$pppl2tp(r4, &(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x4, {0xa, 0x4e22, 0xe38, @private0={0xfc, 0x0, '\x00', 0x81}}}}, 0x32) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r9) sendmsg$L2TP_CMD_TUNNEL_GET(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) 85.727285ms ago: executing program 1 (id=10517): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x1d, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000100000000000000010001b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000102b6000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=10518): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100001060000000000000000000000000000000001000000010000000e00030076736f636b6d6f6e30000000140012800d00010076736f636b6d6f6e"], 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) kernel console output (not intermixed with test programs): 81][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9444'. [ 1106.287699][ T986] bond2: (slave bridge0): failed to get link speed/duplex [ 1106.413223][ T5994] syzkaller0: entered promiscuous mode [ 1106.413249][ T5994] syzkaller0: entered allmulticast mode [ 1106.421637][ T197] bond2: (slave bridge0): failed to get link speed/duplex [ 1106.457347][ T5997] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 1106.463874][ T5994] 0: reclassify loop, rule prio 0, protocol 800 [ 1106.673536][ T5632] block nbd110: Receive control failed (result -32) [ 1106.673544][T16742] block nbd110: Receive control failed (result -32) [ 1106.918547][ T6019] FAULT_INJECTION: forcing a failure. [ 1106.918547][ T6019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1106.918585][ T6019] CPU: 1 UID: 0 PID: 6019 Comm: syz.3.9451 Not tainted syzkaller #0 PREEMPT(full) [ 1106.918611][ T6019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1106.918627][ T6019] Call Trace: [ 1106.918636][ T6019] [ 1106.918646][ T6019] dump_stack_lvl+0xe8/0x150 [ 1106.918683][ T6019] should_fail_ex+0x410/0x560 [ 1106.918720][ T6019] _copy_from_user+0x2d/0xb0 [ 1106.918756][ T6019] bpf_prog_test_run_skb+0x17c2/0x2230 [ 1106.918815][ T6019] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1106.918840][ T6019] bpf_prog_test_run+0x2c5/0x340 [ 1106.918874][ T6019] __sys_bpf+0xa22/0xd90 [ 1106.918909][ T6019] ? __pfx___sys_bpf+0x10/0x10 [ 1106.918948][ T6019] ? __fget_files+0x2a/0x420 [ 1106.919010][ T6019] ? ksys_write+0x242/0x270 [ 1106.919038][ T6019] ? __pfx_ksys_write+0x10/0x10 [ 1106.919067][ T6019] __x64_sys_bpf+0xba/0xd0 [ 1106.919095][ T6019] do_syscall_64+0x166/0x520 [ 1106.919125][ T6019] ? trace_irq_disable+0x3b/0x140 [ 1106.919150][ T6019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.919174][ T6019] ? clear_bhb_loop+0x70/0xc0 [ 1106.919203][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.919225][ T6019] RIP: 0033:0x7f19b139e559 [ 1106.919247][ T6019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1106.919267][ T6019] RSP: 002b:00007f19b2244028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1106.919292][ T6019] RAX: ffffffffffffffda RBX: 00007f19b1625fa0 RCX: 00007f19b139e559 [ 1106.919310][ T6019] RDX: 0000000000000050 RSI: 0000200000002980 RDI: 000000000000000a [ 1106.919326][ T6019] RBP: 00007f19b2244090 R08: 0000000000000000 R09: 0000000000000000 [ 1106.919341][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1106.919354][ T6019] R13: 00007f19b1626038 R14: 00007f19b1625fa0 R15: 00007ffc24995a68 [ 1106.919391][ T6019] [ 1107.362000][ T6023] netlink: 'syz.1.9453': attribute type 1 has an invalid length. [ 1107.362029][ T6023] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9453'. [ 1108.075609][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1108.130124][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9462'. [ 1108.303505][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9463'. [ 1108.686110][ T6076] netlink: 'syz.2.9467': attribute type 1 has an invalid length. [ 1108.686142][ T6076] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9467'. [ 1108.736134][ T5729] veth0_vlan: entered promiscuous mode [ 1108.775065][ T5729] veth1_vlan: entered promiscuous mode [ 1108.895058][ T5729] veth0_macvtap: entered promiscuous mode [ 1108.909221][ T5729] veth1_macvtap: entered promiscuous mode [ 1108.934306][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1108.991986][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1109.154249][T13021] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.154412][T13021] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.154452][T13021] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.154489][T13021] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.411358][ T9161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.411384][ T9161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.533210][ T31] audit: type=1800 audit(1792441676.989:193): pid=6090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9472" name="memory.events" dev="tmpfs" ino=628 res=0 errno=0 [ 1109.562928][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9473'. [ 1109.603163][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.603188][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.308508][ T42] net_ratelimit: 22 callbacks suppressed [ 1110.308532][ T42] bond2: (slave bridge0): failed to get link speed/duplex [ 1110.419882][ T986] bond2: (slave bridge0): failed to get link speed/duplex [ 1110.470388][ T6110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9476'. [ 1110.497654][ T6112] Bluetooth: MGMT ver 1.23 [ 1110.547829][ T9160] bond2: (slave bridge0): failed to get link speed/duplex [ 1110.635464][ T6113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9476'. [ 1110.664825][ T6119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9480'. [ 1110.736741][ T6119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9480'. [ 1110.736772][ T6119] block nbd111: Unsupported socket: should be TCP or UNIX. [ 1110.750074][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1111.334526][ T5632] block nbd111: Receive control failed (result -32) [ 1111.420224][ T6113] veth1_vlan: left promiscuous mode [ 1111.452559][ T6131] ip_tables: iptables: counters copy to user failed while replacing table [ 1111.482445][ T6113] veth0_vlan: left promiscuous mode [ 1111.502309][ T6113] veth0_vlan: entered promiscuous mode [ 1111.519539][ T6113] veth1_vlan: entered promiscuous mode [ 1111.564183][ T6113] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1111.578438][ T6113] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1111.595925][ T6113] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1111.614630][ T6113] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1111.654270][ T6113] bridge1: left promiscuous mode [ 1111.667577][ T9160] bond2: (slave bridge0): failed to get link speed/duplex [ 1111.840879][ T197] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.840942][ T197] bond2: (slave bridge0): failed to get link speed/duplex [ 1111.841466][ T197] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.841542][ T197] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.841604][ T197] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.957152][ T197] bond2: (slave bridge0): failed to get link speed/duplex [ 1112.089270][ T9162] bond2: (slave bridge0): failed to get link speed/duplex [ 1112.201673][ T5632] block nbd112: Receive control failed (result -32) [ 1112.207229][ T9162] bond2: (slave bridge0): failed to get link speed/duplex [ 1112.318039][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1112.476163][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9486'. [ 1112.855712][ T6166] syz_tun: entered allmulticast mode [ 1112.921073][ T6164] syz_tun: left allmulticast mode [ 1113.003987][ T6172] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9494'. [ 1113.004027][ T6172] lo: left promiscuous mode [ 1113.015688][ T6171] netlink: 'syz.0.9493': attribute type 1 has an invalid length. [ 1113.057931][ T6172] tunl0: left promiscuous mode [ 1113.058819][ T6172] gre0: left promiscuous mode [ 1113.059514][ T6172] gretap0: left promiscuous mode [ 1113.094237][ T6172] erspan0: left promiscuous mode [ 1113.095442][ T5811] udevd[5811]: inotify_add_watch(7, /dev/nbd113, 10) failed: No such file or directory [ 1113.124005][ T6172] ip_vti0: left promiscuous mode [ 1113.143854][ T6172] ip6_vti0: left promiscuous mode [ 1113.144348][ T6172] sit0: left promiscuous mode [ 1113.144773][ T6172] ip6tnl0: left promiscuous mode [ 1113.145271][ T6172] ip6gre0: left promiscuous mode [ 1113.161663][ T6172] syz_tun: left promiscuous mode [ 1113.210141][ T6172] ip6gretap0: left promiscuous mode [ 1113.250004][ T6172] vcan0: left promiscuous mode [ 1113.254232][ T6172] bond0: left promiscuous mode [ 1113.255593][ T6172] team0: left promiscuous mode [ 1113.275005][ T6172] dummy0: left promiscuous mode [ 1113.275873][ T6172] nlmon0: left promiscuous mode [ 1113.325334][ T6172] batadv0: left promiscuous mode [ 1113.334662][ T6172] veth0: left promiscuous mode [ 1113.335513][ T6172] veth1: left promiscuous mode [ 1113.365041][ T6172] wg0: left promiscuous mode [ 1113.368112][ T6172] wg1: left promiscuous mode [ 1113.392450][ T6172] wg2: left promiscuous mode [ 1113.416610][ T6172] veth0_to_bridge: left promiscuous mode [ 1113.418505][ T6172] veth1_to_bridge: left promiscuous mode [ 1113.420793][ T6172] veth0_to_bond: left promiscuous mode [ 1113.421584][ T6172] bond_slave_0: left promiscuous mode [ 1113.422358][ T6172] veth1_to_bond: left promiscuous mode [ 1113.463848][ T6172] bond_slave_1: left promiscuous mode [ 1113.464667][ T6172] veth0_to_team: left promiscuous mode [ 1113.465468][ T6172] team_slave_0: left promiscuous mode [ 1113.466190][ T6172] veth1_to_team: left promiscuous mode [ 1113.494620][ T6172] team_slave_1: left promiscuous mode [ 1113.495441][ T6172] veth0_to_batadv: left promiscuous mode [ 1113.509366][ T6172] batadv_slave_0: left promiscuous mode [ 1113.513114][ T6172] veth1_to_batadv: left promiscuous mode [ 1113.513951][ T6172] batadv_slave_1: left promiscuous mode [ 1113.514882][ T6172] xfrm0: left promiscuous mode [ 1113.515599][ T6172] veth0_to_hsr: left promiscuous mode [ 1113.552449][ T6172] veth1_to_hsr: left promiscuous mode [ 1113.562262][ T6172] hsr0: left promiscuous mode [ 1113.563116][ T6172] veth1_virt_wifi: left promiscuous mode [ 1113.614983][ T6172] veth0_virt_wifi: left promiscuous mode [ 1113.633061][ T6172] virt_wifi0: left promiscuous mode [ 1113.678673][ T6172] vlan0: left promiscuous mode [ 1113.694549][ T6172] vlan1: left promiscuous mode [ 1113.712375][ T6172] macvlan0: left promiscuous mode [ 1113.713530][ T6172] macvlan1: left promiscuous mode [ 1113.772569][ T6172] ipvlan1: left promiscuous mode [ 1113.794862][ T6172] macvtap0: left promiscuous mode [ 1113.804966][ T6183] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1113.805135][ T6183] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1113.805254][ T6183] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1113.900269][ T6194] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9499'. [ 1113.960042][ T6172] macsec0: left promiscuous mode [ 1113.981435][ T6172] geneve0: left promiscuous mode [ 1113.982268][ T6172] geneve1: left promiscuous mode [ 1114.004137][ T6172] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1114.067952][ T6172] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 1114.120589][ T6172] netdevsim netdevsim1 netdevsim2: left promiscuous mode [ 1114.138612][ T6202] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9501'. [ 1114.140778][ T6172] netdevsim netdevsim1 netdevsim3: left promiscuous mode [ 1114.143173][ T6202] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9501'. [ 1114.146113][ T6172] mac80211_hwsim hwsim63 wlan0: left promiscuous mode [ 1114.158999][ T6202] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9501'. [ 1114.173583][ T6172] mac80211_hwsim hwsim64 wlan1: left promiscuous mode [ 1114.210307][ T6172] gretap1: left promiscuous mode [ 1114.213645][ T6202] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9501'. [ 1114.234955][ T6172] bond1: left promiscuous mode [ 1114.239380][ T6172] gretap2: left promiscuous mode [ 1114.282815][ T6172] bond2: left promiscuous mode [ 1114.297958][ T6172] vlan2: left promiscuous mode [ 1114.301783][ T6172] bridge1: left promiscuous mode [ 1114.304864][ T6172] bridge0.257: left promiscuous mode [ 1114.304885][ T6172] bridge0: left promiscuous mode [ 1114.352525][ T6210] FAULT_INJECTION: forcing a failure. [ 1114.352525][ T6210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1114.352565][ T6210] CPU: 0 UID: 0 PID: 6210 Comm: syz.0.9502 Not tainted syzkaller #0 PREEMPT(full) [ 1114.352606][ T6210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1114.352629][ T6210] Call Trace: [ 1114.352644][ T6210] [ 1114.352661][ T6210] dump_stack_lvl+0xe8/0x150 [ 1114.352718][ T6210] should_fail_ex+0x410/0x560 [ 1114.352779][ T6210] _copy_from_user+0x2d/0xb0 [ 1114.352836][ T6210] bpf_prog_test_run_skb+0x17c2/0x2230 [ 1114.352941][ T6210] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1114.352977][ T6210] bpf_prog_test_run+0x2c5/0x340 [ 1114.353011][ T6210] __sys_bpf+0xa22/0xd90 [ 1114.353049][ T6210] ? __pfx___sys_bpf+0x10/0x10 [ 1114.353090][ T6210] ? __fget_files+0x2a/0x420 [ 1114.353147][ T6210] ? ksys_write+0x242/0x270 [ 1114.353171][ T6210] ? __pfx_ksys_write+0x10/0x10 [ 1114.353211][ T6210] __x64_sys_bpf+0xba/0xd0 [ 1114.353240][ T6210] do_syscall_64+0x166/0x520 [ 1114.353276][ T6210] ? trace_irq_disable+0x3b/0x140 [ 1114.353301][ T6210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.353325][ T6210] ? clear_bhb_loop+0x70/0xc0 [ 1114.353354][ T6210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.353378][ T6210] RIP: 0033:0x7fe26c99e559 [ 1114.353399][ T6210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1114.353419][ T6210] RSP: 002b:00007fe26d914028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1114.353444][ T6210] RAX: ffffffffffffffda RBX: 00007fe26cc25fa0 RCX: 00007fe26c99e559 [ 1114.353462][ T6210] RDX: 0000000000000050 RSI: 0000200000002980 RDI: 000000000000000a [ 1114.353477][ T6210] RBP: 00007fe26d914090 R08: 0000000000000000 R09: 0000000000000000 [ 1114.353492][ T6210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1114.353507][ T6210] R13: 00007fe26cc26038 R14: 00007fe26cc25fa0 R15: 00007ffc9ee962e8 [ 1114.353544][ T6210] [ 1114.663419][ T6194] vxcan3: entered allmulticast mode [ 1115.243744][T13032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.243769][T13032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.382359][ T42] net_ratelimit: 10 callbacks suppressed [ 1115.382384][ T42] bond2: (slave bridge0): failed to get link speed/duplex [ 1115.502166][ T9159] bond2: (slave bridge0): failed to get link speed/duplex [ 1115.575700][ T5632] block nbd113: Receive control failed (result -32) [ 1115.607154][ T9159] bond2: (slave bridge0): failed to get link speed/duplex [ 1115.722012][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1115.743551][ T5811] block device autoloading is deprecated and will be removed. [ 1115.827896][T13032] bond2: (slave bridge0): failed to get link speed/duplex [ 1115.852281][ T6246] nbd1: detected capacity change from 0 to 4089370 [ 1115.879712][ T2688] block nbd1: Dead connection, failed to find a fallback [ 1115.941073][ T6249] ip_tables: iptables: counters copy to user failed while replacing table [ 1115.955908][ T986] bond2: (slave bridge0): failed to get link speed/duplex [ 1116.022743][ T6249] tap0: tun_chr_ioctl cmd 1074025677 [ 1116.022867][ T6249] tap0: linktype set to 6 [ 1116.057247][T13032] bond2: (slave bridge0): failed to get link speed/duplex [ 1116.211191][ T986] bond2: (slave bridge0): failed to get link speed/duplex [ 1116.347420][ T9160] bond2: (slave bridge0): failed to get link speed/duplex [ 1116.798259][ T6282] netlink: 'syz.0.9525': attribute type 1 has an invalid length. [ 1116.798287][ T6282] __nla_validate_parse: 65 callbacks suppressed [ 1116.798315][ T6282] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9525'. [ 1117.248355][ T6294] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9527'. [ 1117.368814][ T6300] netlink: 'syz.3.9529': attribute type 4 has an invalid length. [ 1117.368838][ T6300] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9529'. [ 1117.599287][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9532'. [ 1118.332951][ T6331] ip6gretap0: entered promiscuous mode [ 1118.333150][ T6331] macsec0: entered allmulticast mode [ 1118.333169][ T6331] ip6gretap0: entered allmulticast mode [ 1118.389355][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9539'. [ 1118.474665][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9539'. [ 1118.756989][ T6344] netlink: 88 bytes leftover after parsing attributes in process `syz.0.9541'. [ 1119.004992][ T31] audit: type=1800 audit(1792441686.459:194): pid=6341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9540" name="memory.events" dev="tmpfs" ino=699 res=0 errno=0 [ 1119.729157][ T6365] netlink: 'syz.0.9547': attribute type 1 has an invalid length. [ 1119.918561][ T6365] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9547'. [ 1120.096151][ T6369] bond1: (slave geneve2): making interface the new active one [ 1120.125457][ T6369] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1120.125592][T13032] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1120.127058][T13032] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1120.134783][ T9160] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1120.134935][ T9160] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1120.149967][ T6365] bond1: entered promiscuous mode [ 1120.150091][ T6365] geneve2: entered promiscuous mode [ 1120.209783][ T6382] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9550'. [ 1120.209959][ T6365] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1120.613767][ T6403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9550'. [ 1120.679387][ T6397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1120.977320][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1121.337883][ T9159] net_ratelimit: 29 callbacks suppressed [ 1121.337909][ T9159] bond2: (slave bridge0): failed to get link speed/duplex [ 1121.487346][ T9159] bond2: (slave bridge0): failed to get link speed/duplex [ 1121.600114][ T9159] bond2: (slave bridge0): failed to get link speed/duplex [ 1121.659083][ T5632] block nbd114: Receive control failed (result -32) [ 1121.661010][T16742] block nbd114: Receive control failed (result -32) [ 1121.711353][ T9161] bond2: (slave bridge0): failed to get link speed/duplex [ 1121.794155][ T6424] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:21 [ 1121.818242][ T9159] bond2: (slave bridge0): failed to get link speed/duplex [ 1121.883738][ T6428] __nla_validate_parse: 4 callbacks suppressed [ 1121.883760][ T6428] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9562'. [ 1121.947034][ T42] bond2: (slave bridge0): failed to get link speed/duplex [ 1121.987717][ T6427] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 1122.058149][ T9159] bond2: (slave bridge0): failed to get link speed/duplex [ 1122.151955][ T6434] batadv0: entered promiscuous mode [ 1122.162216][ T6434] vlan2: entered promiscuous mode [ 1122.500912][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1122.609081][ T42] bond2: (slave bridge0): failed to get link speed/duplex [ 1122.850261][ T6451] vlan3: entered allmulticast mode [ 1122.850285][ T6451] bond0: entered allmulticast mode [ 1122.850300][ T6451] bond_slave_0: entered allmulticast mode [ 1122.850320][ T6451] bond_slave_1: entered allmulticast mode [ 1122.922658][ T6449] syzkaller0: entered promiscuous mode [ 1122.922680][ T6449] syzkaller0: entered allmulticast mode [ 1123.044070][ T6457] xt_ipcomp: unknown flags 1D [ 1124.034667][ T6493] macsec1: entered promiscuous mode [ 1124.087616][ T9161] IPVS: starting estimator thread 0... [ 1124.089347][ T6488] batadv0: entered promiscuous mode [ 1124.089511][ T6488] vlan2: entered promiscuous mode [ 1124.180349][ T6501] IPVS: using max 28 ests per chain, 67200 per kthread [ 1124.208527][ T6495] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9584'. [ 1124.538338][ T6513] netlink: 'syz.4.9588': attribute type 1 has an invalid length. [ 1124.538365][ T6513] netlink: 244 bytes leftover after parsing attributes in process `syz.4.9588'. [ 1124.637923][ T6517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9589'. [ 1124.639877][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9589'. [ 1124.783884][ T6520] netlink: 'syz.4.9588': attribute type 4 has an invalid length. [ 1124.783911][ T6520] netlink: 17 bytes leftover after parsing attributes in process `syz.4.9588'. [ 1124.861929][ T6529] netlink: 'syz.0.9593': attribute type 10 has an invalid length. [ 1124.895003][ T6529] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.932439][ T6529] bond0: (slave team0): Enslaving as an active interface with an up link [ 1125.065554][ T6537] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9596'. [ 1125.169146][ T6539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9596'. [ 1125.495141][ T6539] bond1: left promiscuous mode [ 1125.495165][ T6539] geneve2: left promiscuous mode [ 1126.207902][ T6563] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9603'. [ 1126.494923][ T6568] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.520890][ T6568] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.755400][ T5811] udevd[5811]: inotify_add_watch(7, /dev/nbd115, 10) failed: No such file or directory [ 1126.832515][ T6587] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9611'. [ 1126.840983][ T9159] net_ratelimit: 24 callbacks suppressed [ 1126.841037][ T9159] bond2: (slave bridge0): failed to get link speed/duplex [ 1126.953063][ T9159] bond2: (slave bridge0): failed to get link speed/duplex [ 1127.000441][ T6595] FAULT_INJECTION: forcing a failure. [ 1127.000441][ T6595] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1127.000480][ T6595] CPU: 0 UID: 0 PID: 6595 Comm: syz.3.9613 Not tainted syzkaller #0 PREEMPT(full) [ 1127.000506][ T6595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1127.000521][ T6595] Call Trace: [ 1127.000530][ T6595] [ 1127.000541][ T6595] dump_stack_lvl+0xe8/0x150 [ 1127.000590][ T6595] should_fail_ex+0x410/0x560 [ 1127.000627][ T6595] prepare_alloc_pages+0x223/0x600 [ 1127.000663][ T6595] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1127.000697][ T6595] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1127.000735][ T6595] ? __pfx_policy_nodemask+0x10/0x10 [ 1127.000781][ T6595] alloc_pages_mpol+0x21e/0x390 [ 1127.000819][ T6595] alloc_pages_noprof+0xb1/0x2b0 [ 1127.000855][ T6595] bpf_prog_test_run_skb+0x140f/0x2230 [ 1127.000913][ T6595] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1127.000939][ T6595] bpf_prog_test_run+0x2c5/0x340 [ 1127.000973][ T6595] __sys_bpf+0xa22/0xd90 [ 1127.001010][ T6595] ? __pfx___sys_bpf+0x10/0x10 [ 1127.001051][ T6595] ? __fget_files+0x2a/0x420 [ 1127.001106][ T6595] ? ksys_write+0x242/0x270 [ 1127.001133][ T6595] ? __pfx_ksys_write+0x10/0x10 [ 1127.001163][ T6595] __x64_sys_bpf+0xba/0xd0 [ 1127.001192][ T6595] do_syscall_64+0x166/0x520 [ 1127.001222][ T6595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.001247][ T6595] ? clear_bhb_loop+0x70/0xc0 [ 1127.001275][ T6595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.001299][ T6595] RIP: 0033:0x7f19b139e559 [ 1127.001320][ T6595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1127.001340][ T6595] RSP: 002b:00007f19b2244028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1127.001366][ T6595] RAX: ffffffffffffffda RBX: 00007f19b1625fa0 RCX: 00007f19b139e559 [ 1127.001384][ T6595] RDX: 0000000000000050 RSI: 0000200000002980 RDI: 000000000000000a [ 1127.001399][ T6595] RBP: 00007f19b2244090 R08: 0000000000000000 R09: 0000000000000000 [ 1127.001414][ T6595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1127.001428][ T6595] R13: 00007f19b1626038 R14: 00007f19b1625fa0 R15: 00007ffc24995a68 [ 1127.001466][ T6595] [ 1127.058629][ T9162] bond2: (slave bridge0): failed to get link speed/duplex [ 1127.170742][ T9159] bond2: (slave bridge0): failed to get link speed/duplex [ 1127.281457][ T9162] bond2: (slave bridge0): failed to get link speed/duplex [ 1127.392373][ T9160] bond2: (slave bridge0): failed to get link speed/duplex [ 1127.497395][ T9160] bond2: (slave bridge0): failed to get link speed/duplex [ 1127.621884][ T9161] bond2: (slave bridge0): failed to get link speed/duplex [ 1127.628581][ T6562] block nbd115: Receive control failed (result -32) [ 1127.732310][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1127.837667][ T45] bond2: (slave bridge0): failed to get link speed/duplex [ 1127.908209][ T6616] FAULT_INJECTION: forcing a failure. [ 1127.908209][ T6616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1127.908248][ T6616] CPU: 1 UID: 0 PID: 6616 Comm: syz.1.9618 Not tainted syzkaller #0 PREEMPT(full) [ 1127.908274][ T6616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1127.908288][ T6616] Call Trace: [ 1127.908297][ T6616] [ 1127.908308][ T6616] dump_stack_lvl+0xe8/0x150 [ 1127.908351][ T6616] should_fail_ex+0x410/0x560 [ 1127.908380][ T6616] _copy_from_iter+0x1d3/0x1660 [ 1127.908403][ T6616] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1127.908428][ T6616] ? __pfx_policy_nodemask+0x10/0x10 [ 1127.908451][ T6616] ? lock_acquire+0x115/0x350 [ 1127.908468][ T6616] ? __pfx__copy_from_iter+0x10/0x10 [ 1127.908492][ T6616] ? alloc_pages_mpol+0x256/0x390 [ 1127.908521][ T6616] copy_page_from_iter+0x219/0x2d0 [ 1127.908547][ T6616] tun_get_user+0x20b7/0x4450 [ 1127.908572][ T6616] ? tun_get_user+0x6de/0x4450 [ 1127.908604][ T6616] ? aa_file_perm+0x4ed/0x15f0 [ 1127.908620][ T6616] ? __pfx_tun_get_user+0x10/0x10 [ 1127.908649][ T6616] ? __lock_acquire+0x747/0x2de0 [ 1127.908678][ T6616] ? ref_tracker_alloc+0x172/0x530 [ 1127.908701][ T6616] ? lock_acquire+0x115/0x350 [ 1127.908719][ T6616] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1127.908745][ T6616] ? lock_acquire+0x115/0x350 [ 1127.908762][ T6616] ? tun_get+0x1c/0x2f0 [ 1127.908787][ T6616] ? tun_get+0x1c/0x2f0 [ 1127.908807][ T6616] ? tun_get+0x1c/0x2f0 [ 1127.908832][ T6616] tun_chr_write_iter+0x113/0x200 [ 1127.908855][ T6616] vfs_write+0x612/0xba0 [ 1127.908878][ T6616] ? __pfx_vfs_write+0x10/0x10 [ 1127.908902][ T6616] ? __fget_files+0x2a/0x420 [ 1127.908933][ T6616] ksys_write+0x150/0x270 [ 1127.908951][ T6616] ? __pfx_ksys_write+0x10/0x10 [ 1127.908976][ T6616] do_syscall_64+0x166/0x520 [ 1127.908997][ T6616] ? trace_irq_disable+0x3b/0x140 [ 1127.909013][ T6616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.909030][ T6616] ? clear_bhb_loop+0x70/0xc0 [ 1127.909050][ T6616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.909065][ T6616] RIP: 0033:0x7f545c55ed8e [ 1127.909081][ T6616] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1127.909094][ T6616] RSP: 002b:00007f545d3fdfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1127.909112][ T6616] RAX: ffffffffffffffda RBX: 00007f545d3fe6c0 RCX: 00007f545c55ed8e [ 1127.909124][ T6616] RDX: 000000000000003a RSI: 0000200000000000 RDI: 00000000000000c8 [ 1127.909137][ T6616] RBP: 00007f545d3fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1127.909147][ T6616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1127.909157][ T6616] R13: 00007f545c826128 R14: 00007f545c826090 R15: 00007ffe888f9ef8 [ 1127.909183][ T6616] [ 1128.188145][ T6562] Bluetooth: hci4: command 0x0405 tx timeout [ 1128.654469][ T6622] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9622'. [ 1128.700402][ T6624] sit0: entered promiscuous mode [ 1128.700428][ T6624] sit0: left allmulticast mode [ 1128.724021][ T6624] netlink: 'syz.1.9623': attribute type 1 has an invalid length. [ 1128.724043][ T6624] netlink: 1 bytes leftover after parsing attributes in process `syz.1.9623'. [ 1128.902616][ T6630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9627'. [ 1128.965794][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9627'. [ 1129.041411][ T6630] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1130.143364][ T6660] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1130.152814][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9637'. [ 1130.748014][ T6683] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9644'. [ 1130.853506][ T6686] syzkaller0: entered promiscuous mode [ 1130.853533][ T6686] syzkaller0: entered allmulticast mode [ 1131.420275][ T6700] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9651'. [ 1131.815374][ T6708] syzkaller0: entered promiscuous mode [ 1131.815401][ T6708] syzkaller0: entered allmulticast mode [ 1131.935894][ T6708] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1131.957874][ T6714] netlink: 9 bytes leftover after parsing attributes in process `syz.0.9655'. [ 1132.010151][T13021] net_ratelimit: 29 callbacks suppressed [ 1132.010176][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1132.097895][ T6721] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 1132.128322][ T45] bond2: (slave bridge0): failed to get link speed/duplex [ 1132.258534][ T5632] block nbd116: Receive control failed (result -32) [ 1132.317067][ T6720] rxe_eth0 speed is unknown, defaulting to 1000 [ 1132.327516][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1132.447189][ T9159] bond2: (slave bridge0): failed to get link speed/duplex [ 1132.557144][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1132.621227][ T6734] macsec0: entered promiscuous mode [ 1132.667106][ T45] bond2: (slave bridge0): failed to get link speed/duplex [ 1132.776676][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1132.866761][ T6720] dummy0 speed is unknown, defaulting to 1000 [ 1132.871826][ T6720] lo speed is unknown, defaulting to 1000 [ 1133.116012][ T6730] macsec0: left promiscuous mode [ 1133.314562][T13032] bond2: (slave bridge0): failed to get link speed/duplex [ 1133.358441][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9664'. [ 1133.417881][ T197] bond2: (slave bridge0): failed to get link speed/duplex [ 1133.534932][T13032] bond2: (slave bridge0): failed to get link speed/duplex [ 1133.599299][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9666'. [ 1134.234743][ T5632] block nbd117: Receive control failed (result -32) [ 1134.437369][ T6781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9674'. [ 1134.700774][ T6773] vlan2: entered promiscuous mode [ 1134.753441][ T6779] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9671'. [ 1134.781887][ T6779] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9671'. [ 1135.208835][ T6808] syzkaller0: entered promiscuous mode [ 1135.208854][ T6808] syzkaller0: entered allmulticast mode [ 1136.110258][ T6822] FAULT_INJECTION: forcing a failure. [ 1136.110258][ T6822] name failslab, interval 1, probability 0, space 0, times 0 [ 1136.110295][ T6822] CPU: 1 UID: 0 PID: 6822 Comm: syz.1.9686 Not tainted syzkaller #0 PREEMPT(full) [ 1136.110321][ T6822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1136.110336][ T6822] Call Trace: [ 1136.110345][ T6822] [ 1136.110355][ T6822] dump_stack_lvl+0xe8/0x150 [ 1136.110392][ T6822] should_fail_ex+0x410/0x560 [ 1136.110430][ T6822] should_failslab+0xa8/0x100 [ 1136.110464][ T6822] __kmalloc_cache_noprof+0xa3/0x600 [ 1136.110492][ T6822] ? nbd_dev_add+0x12b/0xb60 [ 1136.110520][ T6822] ? nbd_dev_add+0x12b/0xb60 [ 1136.110556][ T6822] nbd_dev_add+0x12b/0xb60 [ 1136.110591][ T6822] ? __pfx_nbd_dev_add+0x10/0x10 [ 1136.110640][ T6822] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 1136.110670][ T6822] ? bpf_lsm_capable+0x9/0x20 [ 1136.110692][ T6822] ? security_capable+0x7e/0x2c0 [ 1136.110731][ T6822] nbd_genl_connect+0x96c/0x1cd0 [ 1136.110771][ T6822] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1136.110803][ T6822] ? rcu_is_watching+0x16/0xb0 [ 1136.110832][ T6822] ? trace_kmalloc+0x2a/0xf0 [ 1136.110861][ T6822] ? __kmalloc_noprof+0x38c/0x720 [ 1136.110890][ T6822] ? __nla_parse+0x40/0x60 [ 1136.110941][ T6822] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1136.110984][ T6822] genl_family_rcv_msg_doit+0x233/0x340 [ 1136.111023][ T6822] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1136.111066][ T6822] ? __lock_acquire+0x747/0x2de0 [ 1136.111104][ T6822] genl_rcv_msg+0x614/0x7a0 [ 1136.111143][ T6822] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1136.111173][ T6822] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1136.111218][ T6822] netlink_rcv_skb+0x226/0x4a0 [ 1136.111244][ T6822] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1136.111276][ T6822] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1136.111322][ T6822] ? down_read+0x2be/0x330 [ 1136.111359][ T6822] genl_rcv+0x28/0x40 [ 1136.111386][ T6822] netlink_unicast+0x8ef/0xa80 [ 1136.111441][ T6822] netlink_sendmsg+0x813/0xb40 [ 1136.111478][ T6822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1136.111513][ T6822] ? apparmor_socket_sendmsg+0x98/0x360 [ 1136.111547][ T6822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1136.111570][ T6822] sock_sendmsg_nosec+0x14e/0x190 [ 1136.111598][ T6822] ____sys_sendmsg+0x54e/0x850 [ 1136.111638][ T6822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1136.111681][ T6822] ? import_iovec+0x73/0xa0 [ 1136.111721][ T6822] ___sys_sendmsg+0x2a5/0x360 [ 1136.111752][ T6822] ? __lock_acquire+0x747/0x2de0 [ 1136.111781][ T6822] ? __pfx____sys_sendmsg+0x10/0x10 [ 1136.111856][ T6822] ? __fget_files+0x2a/0x420 [ 1136.111890][ T6822] ? __fget_files+0x3a2/0x420 [ 1136.111950][ T6822] __x64_sys_sendmsg+0x1b1/0x290 [ 1136.111986][ T6822] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1136.112044][ T6822] do_syscall_64+0x166/0x520 [ 1136.112074][ T6822] ? trace_irq_disable+0x3b/0x140 [ 1136.112100][ T6822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.112125][ T6822] ? clear_bhb_loop+0x70/0xc0 [ 1136.112154][ T6822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.112178][ T6822] RIP: 0033:0x7f545c59e559 [ 1136.112200][ T6822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1136.112220][ T6822] RSP: 002b:00007f545d41f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1136.112246][ T6822] RAX: ffffffffffffffda RBX: 00007f545c825fa0 RCX: 00007f545c59e559 [ 1136.112264][ T6822] RDX: 00000000000008c0 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1136.112279][ T6822] RBP: 00007f545d41f090 R08: 0000000000000000 R09: 0000000000000000 [ 1136.112294][ T6822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1136.112308][ T6822] R13: 00007f545c826038 R14: 00007f545c825fa0 R15: 00007ffe888f9ef8 [ 1136.112347][ T6822] [ 1136.112391][ T6822] nbd: failed to add new device [ 1137.067293][ T9161] net_ratelimit: 23 callbacks suppressed [ 1137.067322][ T9161] bond2: (slave bridge0): failed to get link speed/duplex [ 1137.180957][ T9162] bond2: (slave bridge0): failed to get link speed/duplex [ 1137.258801][ T6421] udevd[6421]: inotify_add_watch(7, /dev/nbd118, 10) failed: No such file or directory [ 1137.284914][ T5811] udevd[5811]: inotify_add_watch(7, /dev/nbd118, 10) failed: No such file or directory [ 1137.293823][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1137.413733][ T9161] bond2: (slave bridge0): failed to get link speed/duplex [ 1137.507359][ T6861] vlan2: entered promiscuous mode [ 1137.559811][ T9162] bond2: (slave bridge0): failed to get link speed/duplex [ 1137.687302][ T986] bond2: (slave bridge0): failed to get link speed/duplex [ 1137.797340][ T9162] bond2: (slave bridge0): failed to get link speed/duplex [ 1137.917816][ T9159] bond2: (slave bridge0): failed to get link speed/duplex [ 1138.027257][ T9162] bond2: (slave bridge0): failed to get link speed/duplex [ 1138.137119][ T9159] bond2: (slave bridge0): failed to get link speed/duplex [ 1138.179259][ T5632] block nbd118: Receive control failed (result -32) [ 1138.282076][ T6884] tipc: Failed to remove unknown binding: 66,0,0/0:719593941/719593943 [ 1138.282110][ T6884] tipc: Failed to remove unknown binding: 66,0,0/0:719593941/719593942 [ 1138.326118][ T6884] tipc: Failed to remove unknown binding: 66,0,0/0:719593941/719593943 [ 1138.326155][ T6884] tipc: Failed to remove unknown binding: 66,0,0/0:719593941/719593942 [ 1138.355504][ T6884] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9706'. [ 1138.589762][ T6893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9712'. [ 1138.632540][ T6897] netlink: 'syz.0.9714': attribute type 1 has an invalid length. [ 1138.632566][ T6897] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9714'. [ 1139.243131][ T6926] netlink: 'syz.1.9720': attribute type 1 has an invalid length. [ 1139.255995][ T6926] dummy0: left allmulticast mode [ 1139.310823][ T6926] netlink: 'syz.1.9720': attribute type 10 has an invalid length. [ 1139.310850][ T6926] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9720'. [ 1139.311024][ T6926] dummy0: entered promiscuous mode [ 1139.406150][ T31] audit: type=1800 audit(1792441706.859:195): pid=6922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9721" name="memory.events" dev="tmpfs" ino=817 res=0 errno=0 [ 1139.873904][ T6934] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.9725'. [ 1140.141252][ T6933] netlink: 'syz.3.9725': attribute type 1 has an invalid length. [ 1140.344501][ T6927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1140.594211][ T6934] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 1140.698868][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9731'. [ 1141.379126][ T6976] nbd0: detected capacity change from 8388608 to 4089370 [ 1141.380560][ T6250] blk_print_req_error: 24 callbacks suppressed [ 1141.380580][ T6250] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1141.380608][ T6250] buffer_io_error: 23 callbacks suppressed [ 1141.380621][ T6250] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1141.381906][ T6250] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1141.381938][ T6250] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1141.382048][ T6250] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1141.382077][ T6250] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1141.382215][ T6250] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1141.382243][ T6250] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1141.382720][ T6250] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1141.382749][ T6250] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1141.383129][ T6250] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1141.383156][ T6250] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1141.383274][ T6250] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1141.383300][ T6250] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1141.385791][ T6250] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1141.385824][ T6250] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1141.385959][ T6250] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1141.385988][ T6250] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1141.386113][ T6250] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1141.386140][ T6250] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1141.614012][ T5811] ldm_validate_partition_table(): Disk read failed. [ 1141.640193][ T5811] Dev nbd0: unable to read RDB block 0 [ 1141.641817][ T5811] nbd0: unable to read partition table [ 1141.670886][ T5811] ldm_validate_partition_table(): Disk read failed. [ 1141.672438][ T5811] Dev nbd0: unable to read RDB block 0 [ 1141.710285][ T5811] nbd0: unable to read partition table [ 1141.896649][ T31] audit: type=1800 audit(1792441709.359:196): pid=6973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9736" name="memory.events" dev="tmpfs" ino=898 res=0 errno=0 [ 1141.939321][ T5632] Bluetooth: hci3: command 0x0401 tx timeout [ 1142.177106][ T986] net_ratelimit: 29 callbacks suppressed [ 1142.177131][ T986] bond2: (slave bridge0): failed to get link speed/duplex [ 1142.289879][ T42] bond2: (slave bridge0): failed to get link speed/duplex [ 1142.397270][ T9161] bond2: (slave bridge0): failed to get link speed/duplex [ 1142.518401][ T9161] bond2: (slave bridge0): failed to get link speed/duplex [ 1142.627747][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1142.711498][ T6421] udevd[6421]: inotify_add_watch(7, /dev/nbd119, 10) failed: No such file or directory [ 1142.732983][ T5811] udevd[5811]: inotify_add_watch(7, /dev/nbd119, 10) failed: No such file or directory [ 1142.917561][ T9159] bond2: (slave bridge0): failed to get link speed/duplex [ 1142.985253][ T7019] ovs-s: entered promiscuous mode [ 1143.028723][ T9159] bond2: (slave bridge0): failed to get link speed/duplex [ 1143.148470][ T9160] bond2: (slave bridge0): failed to get link speed/duplex [ 1143.172629][ T7026] netlink: 'syz.2.9760': attribute type 1 has an invalid length. [ 1143.245467][ T7030] FAULT_INJECTION: forcing a failure. [ 1143.245467][ T7030] name failslab, interval 1, probability 0, space 0, times 0 [ 1143.245504][ T7030] CPU: 0 UID: 0 PID: 7030 Comm: syz.0.9759 Not tainted syzkaller #0 PREEMPT(full) [ 1143.245529][ T7030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1143.245544][ T7030] Call Trace: [ 1143.245553][ T7030] [ 1143.245564][ T7030] dump_stack_lvl+0xe8/0x150 [ 1143.245602][ T7030] should_fail_ex+0x410/0x560 [ 1143.245639][ T7030] should_failslab+0xa8/0x100 [ 1143.245671][ T7030] ? skb_clone+0x212/0x3a0 [ 1143.245703][ T7030] kmem_cache_alloc_noprof+0xa1/0x600 [ 1143.245742][ T7030] ? skb_clone+0x212/0x3a0 [ 1143.245782][ T7030] skb_clone+0x212/0x3a0 [ 1143.245827][ T7030] __netlink_deliver_tap+0x355/0x6e0 [ 1143.245864][ T7030] ? netlink_deliver_tap+0x2e/0x1b0 [ 1143.245889][ T7030] netlink_deliver_tap+0x19c/0x1b0 [ 1143.245914][ T7030] netlink_unicast+0x8c1/0xa80 [ 1143.245966][ T7030] netlink_sendmsg+0x813/0xb40 [ 1143.245993][ T7030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1143.246019][ T7030] ? apparmor_socket_sendmsg+0x98/0x360 [ 1143.246055][ T7030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1143.246073][ T7030] sock_sendmsg_nosec+0x14e/0x190 [ 1143.246095][ T7030] ____sys_sendmsg+0x54e/0x850 [ 1143.246124][ T7030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1143.246157][ T7030] ? import_iovec+0x73/0xa0 [ 1143.246187][ T7030] ___sys_sendmsg+0x2a5/0x360 [ 1143.246228][ T7030] ? __lock_acquire+0x747/0x2de0 [ 1143.246261][ T7030] ? __pfx____sys_sendmsg+0x10/0x10 [ 1143.246340][ T7030] ? __fget_files+0x2a/0x420 [ 1143.246374][ T7030] ? __fget_files+0x3a2/0x420 [ 1143.246425][ T7030] __x64_sys_sendmsg+0x1b1/0x290 [ 1143.246465][ T7030] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1143.246521][ T7030] do_syscall_64+0x166/0x520 [ 1143.246566][ T7030] ? trace_irq_disable+0x3b/0x140 [ 1143.246590][ T7030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.246613][ T7030] ? clear_bhb_loop+0x70/0xc0 [ 1143.246641][ T7030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.246664][ T7030] RIP: 0033:0x7fe26c99e559 [ 1143.246685][ T7030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1143.246704][ T7030] RSP: 002b:00007fe26d914028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1143.246729][ T7030] RAX: ffffffffffffffda RBX: 00007fe26cc25fa0 RCX: 00007fe26c99e559 [ 1143.246746][ T7030] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1143.246761][ T7030] RBP: 00007fe26d914090 R08: 0000000000000000 R09: 0000000000000000 [ 1143.246775][ T7030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1143.246796][ T7030] R13: 00007fe26cc26038 R14: 00007fe26cc25fa0 R15: 00007ffc9ee962e8 [ 1143.246834][ T7030] [ 1143.257297][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9759'. [ 1143.271223][T27159] bond2: (slave bridge0): failed to get link speed/duplex [ 1143.384667][ T42] bond2: (slave bridge0): failed to get link speed/duplex [ 1143.862694][ T6562] block nbd119: Receive control failed (result -32) [ 1144.107888][ T6562] Bluetooth: hci3: command 0x0401 tx timeout [ 1145.098694][ T31] audit: type=1800 audit(1792441712.559:197): pid=7086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9779" name="memory.events" dev="tmpfs" ino=639 res=0 errno=0 [ 1145.556003][ T5811] udevd[5811]: inotify_add_watch(7, /dev/nbd120, 10) failed: No such file or directory [ 1145.871455][ T31] audit: type=1800 audit(1792441713.329:198): pid=7111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9788" name="memory.events" dev="tmpfs" ino=893 res=0 errno=0 [ 1146.383042][ T7142] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 1146.861596][ T7156] batadv0: entered promiscuous mode [ 1146.861916][ T7156] vlan2: entered promiscuous mode [ 1147.259364][T13032] net_ratelimit: 37 callbacks suppressed [ 1147.259835][T13032] bond2: (slave bridge0): failed to get link speed/duplex [ 1147.261302][ T7199] ip_tables: iptables: counters copy to user failed while replacing table [ 1147.371125][ T7188] bond2: (slave bridge0): failed to get link speed/duplex [ 1147.467995][ T7208] netlink: 'syz.2.9808': attribute type 1 has an invalid length. [ 1147.468023][ T7208] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9808'. [ 1147.548849][T13032] bond2: (slave bridge0): failed to get link speed/duplex [ 1147.657365][T13032] bond2: (slave bridge0): failed to get link speed/duplex [ 1147.791223][T13032] bond2: (slave bridge0): failed to get link speed/duplex [ 1147.898497][T13031] bond2: (slave bridge0): failed to get link speed/duplex [ 1148.018328][ T7182] bond2: (slave bridge0): failed to get link speed/duplex [ 1148.127521][T13031] bond2: (slave bridge0): failed to get link speed/duplex [ 1148.208618][ T31] audit: type=1800 audit(1792441715.669:199): pid=7202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9804" name="memory.events" dev="tmpfs" ino=919 res=0 errno=0 [ 1148.247559][ T7182] bond2: (slave bridge0): failed to get link speed/duplex [ 1148.495326][ T7238] netlink: 'syz.2.9816': attribute type 21 has an invalid length. [ 1148.495357][ T7238] IPv6: NLM_F_CREATE should be specified when creating new route [ 1148.495459][ T7238] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1148.495471][ T7238] IPv6: NLM_F_CREATE should be set when creating new route [ 1148.495651][ T7238] IPv6: NLM_F_CREATE should be set when creating new route [ 1148.495680][ T7238] IPv6: NLM_F_CREATE should be set when creating new route [ 1148.647839][ T7238] syzkaller1: entered promiscuous mode [ 1148.647858][ T7238] syzkaller1: entered allmulticast mode [ 1148.855853][ T7255] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9820'. [ 1148.942313][ T7258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9820'. [ 1149.447857][ T7242] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1149.448120][ T7246] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1149.704481][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9825'. [ 1149.776056][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9823'. [ 1149.854993][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9825'. [ 1149.855023][ T7275] block nbd120: Unsupported socket: should be TCP or UNIX. [ 1149.982839][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9828'. [ 1149.983087][ T7284] FAULT_INJECTION: forcing a failure. [ 1149.983087][ T7284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1149.983118][ T7284] CPU: 0 UID: 0 PID: 7284 Comm: syz.4.9828 Not tainted syzkaller #0 PREEMPT(full) [ 1149.983144][ T7284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1149.983159][ T7284] Call Trace: [ 1149.983168][ T7284] [ 1149.983179][ T7284] dump_stack_lvl+0xe8/0x150 [ 1149.983217][ T7284] should_fail_ex+0x410/0x560 [ 1149.983256][ T7284] _copy_to_user+0x31/0xb0 [ 1149.983294][ T7284] simple_read_from_buffer+0xe1/0x170 [ 1149.983335][ T7284] proc_fail_nth_read+0x1bb/0x230 [ 1149.983361][ T7284] ? common_file_perm+0x20e/0x2b0 [ 1149.983406][ T7284] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1149.983436][ T7284] ? rw_verify_area+0x24a/0x4c0 [ 1149.983462][ T7284] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1149.983488][ T7284] vfs_read+0x213/0xa80 [ 1149.983517][ T7284] ? __pfx___mutex_lock+0x10/0x10 [ 1149.983550][ T7284] ? __pfx_vfs_read+0x10/0x10 [ 1149.983574][ T7284] ? __fget_files+0x2a/0x420 [ 1149.983612][ T7284] ? __fget_files+0x3a2/0x420 [ 1149.983644][ T7284] ? __fget_files+0x2a/0x420 [ 1149.983689][ T7284] ksys_read+0x150/0x270 [ 1149.983715][ T7284] ? __pfx_ksys_read+0x10/0x10 [ 1149.983752][ T7284] do_syscall_64+0x166/0x520 [ 1149.983782][ T7284] ? trace_irq_disable+0x3b/0x140 [ 1149.983807][ T7284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.983831][ T7284] ? clear_bhb_loop+0x70/0xc0 [ 1149.983860][ T7284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.983883][ T7284] RIP: 0033:0x7f99be55ed8e [ 1149.983904][ T7284] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1149.983925][ T7284] RSP: 002b:00007f99bf38dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1149.983949][ T7284] RAX: ffffffffffffffda RBX: 00007f99bf38e6c0 RCX: 00007f99be55ed8e [ 1149.983966][ T7284] RDX: 000000000000000f RSI: 00007f99bf38e0a0 RDI: 0000000000000004 [ 1149.983987][ T7284] RBP: 00007f99bf38e090 R08: 0000000000000000 R09: 0000000000000000 [ 1149.984002][ T7284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1149.984016][ T7284] R13: 00007f99be826038 R14: 00007f99be825fa0 R15: 00007ffee7275c68 [ 1149.984054][ T7284] [ 1150.744540][ T7292] syzkaller0: entered promiscuous mode [ 1150.744569][ T7292] syzkaller0: entered allmulticast mode [ 1152.091855][ T31] audit: type=1800 audit(1792441719.529:200): pid=7328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9842" name="memory.events" dev="tmpfs" ino=955 res=0 errno=0 [ 1155.845895][ T7333] syzkaller0: entered promiscuous mode [ 1155.845923][ T7333] syzkaller0: entered allmulticast mode [ 1155.987465][T31202] net_ratelimit: 19 callbacks suppressed [ 1155.987491][T31202] bond2: (slave bridge0): failed to get link speed/duplex [ 1156.104050][T13031] bond2: (slave bridge0): failed to get link speed/duplex [ 1156.141445][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9844'. [ 1156.475690][ T7182] bond2: (slave bridge0): failed to get link speed/duplex [ 1156.592195][ T7182] bond2: (slave bridge0): failed to get link speed/duplex [ 1156.707855][T31202] bond2: (slave bridge0): failed to get link speed/duplex [ 1156.766011][ T7375] ip_tables: iptables: counters copy to user failed while replacing table [ 1156.820843][ T7160] bond2: (slave bridge0): failed to get link speed/duplex [ 1156.927967][ T7188] bond2: (slave bridge0): failed to get link speed/duplex [ 1157.038211][ T7384] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 1157.043320][ T7188] bond2: (slave bridge0): failed to get link speed/duplex [ 1157.147064][ T7188] bond2: (slave bridge0): failed to get link speed/duplex [ 1157.331612][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9855'. [ 1157.334330][ T7394] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9854'. [ 1158.030996][ T7408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1158.062311][ T7408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1158.349189][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9863'. [ 1158.723359][ T7428] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9866'. [ 1158.899903][ T7433] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9868'. [ 1159.004062][ T7437] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9868'. [ 1159.123810][ T7441] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9871'. [ 1159.285976][ T7444] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9871'. [ 1159.292721][ T7444] sit0: left promiscuous mode [ 1159.388911][ T7444] dummy0: left promiscuous mode [ 1159.595924][ T7444] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 1159.636176][ T7444] macsec1: left promiscuous mode [ 1159.672985][ T7454] sctp: [Deprecated]: syz.4.9875 (pid 7454) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1159.672985][ T7454] Use struct sctp_sack_info instead [ 1160.624678][ T7472] macsec1: entered promiscuous mode [ 1161.051947][ T7494] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9889'. [ 1161.107442][T13032] net_ratelimit: 28 callbacks suppressed [ 1161.107465][T13032] bond2: (slave bridge0): failed to get link speed/duplex [ 1161.158279][ T7495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9889'. [ 1161.343469][ T7495] macsec1: left promiscuous mode [ 1161.438452][T13031] bond2: (slave bridge0): failed to get link speed/duplex [ 1161.477406][ T31] audit: type=1800 audit(1792441728.939:201): pid=7485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9885" name="memory.events" dev="tmpfs" ino=756 res=0 errno=0 [ 1161.548256][ T7182] bond2: (slave bridge0): failed to get link speed/duplex [ 1161.665320][T13031] bond2: (slave bridge0): failed to get link speed/duplex [ 1161.767145][T13031] bond2: (slave bridge0): failed to get link speed/duplex [ 1161.877700][T31202] bond2: (slave bridge0): failed to get link speed/duplex [ 1161.987238][T13031] bond2: (slave bridge0): failed to get link speed/duplex [ 1162.101124][ T7161] bond2: (slave bridge0): failed to get link speed/duplex [ 1162.117041][ T7504] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9891'. [ 1162.208561][ T7161] bond2: (slave bridge0): failed to get link speed/duplex [ 1162.327212][ T7161] bond2: (slave bridge0): failed to get link speed/duplex [ 1163.790646][ T7513] FAULT_INJECTION: forcing a failure. [ 1163.790646][ T7513] name failslab, interval 1, probability 0, space 0, times 0 [ 1163.790683][ T7513] CPU: 0 UID: 0 PID: 7513 Comm: syz.2.9893 Not tainted syzkaller #0 PREEMPT(full) [ 1163.790708][ T7513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1163.790724][ T7513] Call Trace: [ 1163.790733][ T7513] [ 1163.790744][ T7513] dump_stack_lvl+0xe8/0x150 [ 1163.790792][ T7513] should_fail_ex+0x410/0x560 [ 1163.790830][ T7513] should_failslab+0xa8/0x100 [ 1163.790866][ T7513] __kvmalloc_node_noprof+0x176/0x820 [ 1163.790896][ T7513] ? __nf_register_net_hook+0x1f1/0x940 [ 1163.790927][ T7513] ? nf_hook_entries_grow+0x287/0x740 [ 1163.790953][ T7513] ? nf_hook_entries_grow+0x287/0x740 [ 1163.790988][ T7513] nf_hook_entries_grow+0x287/0x740 [ 1163.791031][ T7513] __nf_register_net_hook+0x26f/0x940 [ 1163.791079][ T7513] ? nf_register_net_hook+0xc8/0x190 [ 1163.791109][ T7513] nf_register_net_hook+0xb2/0x190 [ 1163.791139][ T7513] nf_register_net_hooks+0x44/0x1b0 [ 1163.791170][ T7513] nf_ct_netns_do_get+0x3bf/0x5c0 [ 1163.791298][ T7513] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 1163.791328][ T7513] ? nft_parse_register_load+0x315/0x3a0 [ 1163.791437][ T7513] ? nf_ct_netns_get+0xe9/0x320 [ 1163.791470][ T7513] nf_tables_newrule+0x179e/0x28a0 [ 1163.791526][ T7513] ? __pfx_nf_tables_newrule+0x10/0x10 [ 1163.791558][ T7513] ? lock_acquire+0x115/0x350 [ 1163.791583][ T7513] ? nfnl_pernet+0x23/0x240 [ 1163.791626][ T7513] ? __nla_parse+0x40/0x60 [ 1163.791666][ T7513] nfnetlink_rcv+0x1288/0x28c0 [ 1163.791737][ T7513] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1163.791828][ T7513] ? skb_clone+0x246/0x3a0 [ 1163.791877][ T7513] ? netlink_deliver_tap+0x2e/0x1b0 [ 1163.791901][ T7513] ? netlink_deliver_tap+0x2e/0x1b0 [ 1163.791931][ T7513] netlink_unicast+0x8ef/0xa80 [ 1163.791985][ T7513] netlink_sendmsg+0x813/0xb40 [ 1163.792019][ T7513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1163.792052][ T7513] ? apparmor_socket_sendmsg+0x98/0x360 [ 1163.792085][ T7513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1163.792106][ T7513] sock_sendmsg_nosec+0x14e/0x190 [ 1163.792132][ T7513] ____sys_sendmsg+0x54e/0x850 [ 1163.792168][ T7513] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1163.792209][ T7513] ? import_iovec+0x73/0xa0 [ 1163.792247][ T7513] ___sys_sendmsg+0x2a5/0x360 [ 1163.792276][ T7513] ? __lock_acquire+0x747/0x2de0 [ 1163.792306][ T7513] ? __pfx____sys_sendmsg+0x10/0x10 [ 1163.792376][ T7513] ? __fget_files+0x2a/0x420 [ 1163.792408][ T7513] ? __fget_files+0x3a2/0x420 [ 1163.792453][ T7513] __x64_sys_sendmsg+0x1b1/0x290 [ 1163.792487][ T7513] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1163.792543][ T7513] do_syscall_64+0x166/0x520 [ 1163.792570][ T7513] ? trace_irq_disable+0x3b/0x140 [ 1163.792593][ T7513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.792615][ T7513] ? clear_bhb_loop+0x70/0xc0 [ 1163.792643][ T7513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.792665][ T7513] RIP: 0033:0x7f92afd9e559 [ 1163.792685][ T7513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1163.792705][ T7513] RSP: 002b:00007f92b0bf1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1163.792729][ T7513] RAX: ffffffffffffffda RBX: 00007f92b0025fa0 RCX: 00007f92afd9e559 [ 1163.792746][ T7513] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1163.792761][ T7513] RBP: 00007f92b0bf1090 R08: 0000000000000000 R09: 0000000000000000 [ 1163.792783][ T7513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1163.792797][ T7513] R13: 00007f92b0026038 R14: 00007f92b0025fa0 R15: 00007ffed09538c8 [ 1163.792833][ T7513] [ 1164.484728][ T7520] syzkaller0: entered promiscuous mode [ 1164.484755][ T7520] syzkaller0: entered allmulticast mode [ 1164.568605][ T7520] tipc: Started in network mode [ 1164.568674][ T7520] tipc: Node identity caeaea8d20b3, cluster identity 4711 [ 1164.568975][ T7520] tipc: Enabled bearer , priority 0 [ 1164.640561][ T6421] udevd[6421]: inotify_add_watch(7, /dev/nbd120, 10) failed: No such file or directory [ 1164.673319][ T7519] tipc: Resetting bearer [ 1164.696973][ T7526] syz.1.9898: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1164.697047][ T7526] CPU: 0 UID: 0 PID: 7526 Comm: syz.1.9898 Not tainted syzkaller #0 PREEMPT(full) [ 1164.697072][ T7526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1164.697086][ T7526] Call Trace: [ 1164.697096][ T7526] [ 1164.697106][ T7526] dump_stack_lvl+0xe8/0x150 [ 1164.697144][ T7526] warn_alloc+0x24d/0x270 [ 1164.697171][ T7526] ? kasan_save_track+0x4f/0x80 [ 1164.697197][ T7526] ? kasan_save_track+0x3e/0x80 [ 1164.697223][ T7526] ? __pfx_warn_alloc+0x10/0x10 [ 1164.697242][ T7526] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1164.697268][ T7526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.697310][ T7526] __vmalloc_node_range_noprof+0x127/0x1540 [ 1164.697354][ T7526] ? rcu_is_watching+0x16/0xb0 [ 1164.697387][ T7526] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1164.697410][ T7526] ? __kmalloc_cache_noprof+0x321/0x600 [ 1164.697437][ T7526] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1164.697462][ T7526] ? xskq_create+0x56/0x220 [ 1164.697494][ T7526] xskq_create+0x148/0x220 [ 1164.697521][ T7526] ? xsk_init_queue+0x8a/0xe0 [ 1164.697551][ T7526] xsk_init_queue+0x8a/0xe0 [ 1164.697580][ T7526] xsk_setsockopt+0x5e0/0x960 [ 1164.697608][ T7526] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1164.697634][ T7526] ? __pfx_aa_sk_perm+0x10/0x10 [ 1164.697670][ T7526] ? aa_sock_opt_perm+0x142/0x1e0 [ 1164.697710][ T7526] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1164.697755][ T7526] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1164.697782][ T7526] do_sock_setsockopt+0x17c/0x1b0 [ 1164.697817][ T7526] __x64_sys_setsockopt+0x13d/0x1b0 [ 1164.697854][ T7526] do_syscall_64+0x166/0x520 [ 1164.697883][ T7526] ? trace_irq_disable+0x3b/0x140 [ 1164.697907][ T7526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.697931][ T7526] ? clear_bhb_loop+0x70/0xc0 [ 1164.697959][ T7526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.697982][ T7526] RIP: 0033:0x7f545c59e559 [ 1164.698004][ T7526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1164.698023][ T7526] RSP: 002b:00007f545d41f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1164.698047][ T7526] RAX: ffffffffffffffda RBX: 00007f545c825fa0 RCX: 00007f545c59e559 [ 1164.698064][ T7526] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 1164.698077][ T7526] RBP: 00007f545c635ad8 R08: 0000000000000004 R09: 0000000000000000 [ 1164.698092][ T7526] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1164.698107][ T7526] R13: 00007f545c826038 R14: 00007f545c825fa0 R15: 00007ffe888f9ef8 [ 1164.698143][ T7526] [ 1164.700101][ T7526] Mem-Info: [ 1164.700115][ T7526] active_anon:8819 inactive_anon:0 isolated_anon:0 [ 1164.700115][ T7526] active_file:33 inactive_file:44350 isolated_file:0 [ 1164.700115][ T7526] unevictable:0 dirty:257 writeback:0 [ 1164.700115][ T7526] slab_reclaimable:16455 slab_unreclaimable:189787 [ 1164.700115][ T7526] mapped:30431 shmem:673 pagetables:3391 [ 1164.700115][ T7526] sec_pagetables:0 bounce:0 [ 1164.700115][ T7526] kernel_misc_reclaimable:0 [ 1164.700115][ T7526] free:1156659 free_pcp:9406 free_cma:0 [ 1164.700165][ T7526] Node 0 active_anon:35276kB inactive_anon:0kB active_file:132kB inactive_file:177196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121724kB dirty:1028kB writeback:0kB shmem:2692kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:22912kB pagetables:13412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1164.700216][ T7526] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1164.700264][ T7526] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1164.700317][ T7526] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 1164.700353][ T7526] Node 0 DMA32 free:660236kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:35276kB inactive_anon:0kB active_file:132kB inactive_file:177196kB unevictable:0kB writepending:1028kB zspages:0kB present:3129332kB managed:2527420kB mlocked:0kB bounce:0kB free_pcp:37624kB local_pcp:22060kB free_cma:0kB [ 1164.700408][ T7526] lowmem_reserve[]: 0 0 0 0 0 [ 1164.700441][ T7526] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1164.700491][ T7526] lowmem_reserve[]: 0 0 0 0 0 [ 1164.700535][ T7526] Node 1 Normal free:3951040kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1164.700586][ T7526] lowmem_reserve[]: 0 0 0 0 0 [ 1164.700618][ T7526] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 1164.700731][ T7526] Node 0 DMA32: 1461*4kB (UME) 475*8kB (UME) 311*16kB (UM) 144*32kB (UME) 46*64kB (UME) 13*128kB (UME) 238*256kB (UM) 196*512kB (UM) 68*1024kB (U) 6*2048kB (UME) 96*4096kB (UM) = 660252kB [ 1164.700875][ T7526] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1164.700964][ T7526] Node 1 Normal: 2*4kB (UM) 5*8kB (UM) 11*16kB (UM) 11*32kB (UM) 12*64kB (UM) 5*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 963*4096kB (UM) = 3951040kB [ 1164.701101][ T7526] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1164.701148][ T7526] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1164.701164][ T7526] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1164.701178][ T7526] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1164.701193][ T7526] 45052 total pagecache pages [ 1164.701201][ T7526] 0 pages in swap cache [ 1164.701208][ T7526] Free swap = 124996kB [ 1164.701215][ T7526] Total swap = 124996kB [ 1164.701224][ T7526] 2097051 pages RAM [ 1164.701231][ T7526] 0 pages HighMem/MovableOnly [ 1164.701238][ T7526] 433580 pages reserved [ 1164.701245][ T7526] 0 pages cma reserved [ 1165.371247][ T7529] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9898'. [ 1165.405059][ T7519] tipc: Disabling bearer [ 1165.615647][ T7541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9901'. [ 1165.731747][ T7541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9901'. [ 1165.731779][ T7541] block nbd120: Unsupported socket: should be TCP or UNIX. [ 1166.020519][ T7560] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9906'. [ 1166.020561][ T7560] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9906'. [ 1166.181935][ T7566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9908'. [ 1166.190890][ T7190] net_ratelimit: 22 callbacks suppressed [ 1166.190951][ T7190] bond2: (slave bridge0): failed to get link speed/duplex [ 1166.298750][T13031] bond2: (slave bridge0): failed to get link speed/duplex [ 1166.407179][ T7182] bond2: (slave bridge0): failed to get link speed/duplex [ 1166.518066][ T7191] bond2: (slave bridge0): failed to get link speed/duplex [ 1166.627720][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1166.740845][T13031] bond2: (slave bridge0): failed to get link speed/duplex [ 1166.846461][ T7190] bond2: (slave bridge0): failed to get link speed/duplex [ 1166.958236][ T7190] bond2: (slave bridge0): failed to get link speed/duplex [ 1167.056500][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1167.074649][T13032] bond2: (slave bridge0): failed to get link speed/duplex [ 1167.178190][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1167.333875][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9915'. [ 1167.351039][ T7585] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9915'. [ 1167.367433][ T7585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9915'. [ 1167.618231][ T7578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1167.760275][ T6562] block nbd120: Receive control failed (result -32) [ 1168.101591][ T6562] block nbd121: Receive control failed (result -32) [ 1168.390103][ T31] audit: type=1800 audit(1792441735.849:202): pid=7602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9920" name="memory.events" dev="tmpfs" ino=697 res=0 errno=0 [ 1168.391485][ T7602] FAULT_INJECTION: forcing a failure. [ 1168.391485][ T7602] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.391518][ T7602] CPU: 1 UID: 0 PID: 7602 Comm: syz.2.9920 Not tainted syzkaller #0 PREEMPT(full) [ 1168.391542][ T7602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1168.391556][ T7602] Call Trace: [ 1168.391565][ T7602] [ 1168.391576][ T7602] dump_stack_lvl+0xe8/0x150 [ 1168.391619][ T7602] should_fail_ex+0x410/0x560 [ 1168.391657][ T7602] should_failslab+0xa8/0x100 [ 1168.391690][ T7602] __kmalloc_cache_noprof+0xa3/0x600 [ 1168.391718][ T7602] ? ima_d_path+0xd4/0x230 [ 1168.391822][ T7602] ? ima_d_path+0xd4/0x230 [ 1168.391854][ T7602] ima_d_path+0xd4/0x230 [ 1168.391882][ T7602] ? __pfx_ima_d_path+0x10/0x10 [ 1168.391910][ T7602] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1168.391990][ T7602] process_measurement+0x154a/0x1c10 [ 1168.392033][ T7602] ? __pfx_process_measurement+0x10/0x10 [ 1168.392057][ T7602] ? lock_acquire+0x115/0x350 [ 1168.392116][ T7602] ? get_pid_task+0x20/0x1f0 [ 1168.392138][ T7602] ? get_pid_task+0x20/0x1f0 [ 1168.392176][ T7602] ima_file_mmap+0x1b0/0x200 [ 1168.392202][ T7602] ? __pfx_ima_file_mmap+0x10/0x10 [ 1168.392223][ T7602] ? vfs_write+0x9ce/0xba0 [ 1168.392250][ T7602] ? common_file_perm+0x20e/0x2b0 [ 1168.392289][ T7602] security_mmap_file+0x773/0xa20 [ 1168.392321][ T7602] vm_mmap_pgoff+0x134/0x4e0 [ 1168.392351][ T7602] ? lock_acquire+0x115/0x350 [ 1168.392380][ T7602] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1168.392411][ T7602] ? __fget_files+0x2a/0x420 [ 1168.392451][ T7602] ? __fget_files+0x3a2/0x420 [ 1168.392484][ T7602] ? __fget_files+0x2a/0x420 [ 1168.392523][ T7602] ksys_mmap_pgoff+0x4dc/0x760 [ 1168.392566][ T7602] do_syscall_64+0x166/0x520 [ 1168.392594][ T7602] ? trace_irq_disable+0x3b/0x140 [ 1168.392618][ T7602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.392642][ T7602] ? clear_bhb_loop+0x70/0xc0 [ 1168.392672][ T7602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.392695][ T7602] RIP: 0033:0x7f92afd9e559 [ 1168.392716][ T7602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1168.392736][ T7602] RSP: 002b:00007f92b0bd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1168.392760][ T7602] RAX: ffffffffffffffda RBX: 00007f92b0026090 RCX: 00007f92afd9e559 [ 1168.392778][ T7602] RDX: 000000000100000c RSI: 0000000000001000 RDI: 0000200000ffe000 [ 1168.392794][ T7602] RBP: 00007f92b0bd0090 R08: 0000000000000003 R09: 0000000000000000 [ 1168.392810][ T7602] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 1168.392824][ T7602] R13: 00007f92b0026128 R14: 00007f92b0026090 R15: 00007ffed09538c8 [ 1168.392863][ T7602] [ 1169.339026][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9929'. [ 1169.601722][ T6562] block nbd122: Receive control failed (result -32) [ 1169.890458][ T7648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9937'. [ 1169.996526][ T7648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9937'. [ 1169.996557][ T7648] block nbd123: Unsupported socket: should be TCP or UNIX. [ 1170.305735][ T31] audit: type=1800 audit(1792441737.759:203): pid=7654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.9939" name="memory.events" dev="tmpfs" ino=418 res=0 errno=0 [ 1170.781063][ T6562] block nbd123: Receive control failed (result -32) [ 1170.869243][ T7672] netlink: 'syz.0.9948': attribute type 1 has an invalid length. [ 1170.948232][ T7679] netlink: 'syz.2.9946': attribute type 1 has an invalid length. [ 1170.948256][ T7679] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9946'. [ 1170.950606][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9945'. [ 1170.954539][ T7675] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9945'. [ 1171.183288][ T7686] batadv0: entered promiscuous mode [ 1171.183563][ T7686] vlan3: entered promiscuous mode [ 1171.340765][ T7190] net_ratelimit: 33 callbacks suppressed [ 1171.340790][ T7190] bond2: (slave bridge0): failed to get link speed/duplex [ 1171.468316][ T7182] bond2: (slave bridge0): failed to get link speed/duplex [ 1171.590961][ T7182] bond2: (slave bridge0): failed to get link speed/duplex [ 1171.715622][ T7161] bond2: (slave bridge0): failed to get link speed/duplex [ 1171.777515][ T7711] nbd: must specify a device to reconfigure [ 1171.817315][ T7161] bond2: (slave bridge0): failed to get link speed/duplex [ 1171.939257][ T7190] bond2: (slave bridge0): failed to get link speed/duplex [ 1171.959263][ T7715] __nla_validate_parse: 3 callbacks suppressed [ 1171.959285][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9960'. [ 1171.960318][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9960'. [ 1172.048686][ T7161] bond2: (slave bridge0): failed to get link speed/duplex [ 1172.098549][ T6562] block nbd124: Receive control failed (result -32) [ 1172.160286][ T7161] bond2: (slave bridge0): failed to get link speed/duplex [ 1172.161843][ T7727] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1172.232336][ T7731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9967'. [ 1172.268265][ T7190] bond2: (slave bridge0): failed to get link speed/duplex [ 1172.342254][ T7732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9967'. [ 1172.515655][ T7737] netlink: 260 bytes leftover after parsing attributes in process `syz.1.9970'. [ 1172.788890][ T7745] nbd: must specify a device to reconfigure [ 1173.081073][ T7732] geneve2: left promiscuous mode [ 1173.081934][ T7732] gretap0: entered promiscuous mode [ 1173.199920][ T7191] bond2: (slave bridge0): failed to get link speed/duplex [ 1173.204941][ T7757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9978'. [ 1173.288103][ T7759] x_tables: duplicate entry at hook 2 [ 1173.431779][ T7757] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9978'. [ 1173.551750][ T7766] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9979'. [ 1173.721987][ T7746] FAULT_INJECTION: forcing a failure. [ 1173.721987][ T7746] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.722027][ T7746] CPU: 1 UID: 0 PID: 7746 Comm: syz.4.9972 Not tainted syzkaller #0 PREEMPT(full) [ 1173.722053][ T7746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1173.722068][ T7746] Call Trace: [ 1173.722077][ T7746] [ 1173.722088][ T7746] dump_stack_lvl+0xe8/0x150 [ 1173.722128][ T7746] should_fail_ex+0x410/0x560 [ 1173.722168][ T7746] should_failslab+0xa8/0x100 [ 1173.722199][ T7746] ? mas_alloc_nodes+0x291/0x350 [ 1173.722301][ T7746] kmem_cache_alloc_noprof+0xa1/0x600 [ 1173.722329][ T7746] ? mas_alloc_nodes+0x291/0x350 [ 1173.722366][ T7746] mas_alloc_nodes+0x291/0x350 [ 1173.722401][ T7746] mas_preallocate+0x42a/0x840 [ 1173.722430][ T7746] ? rcu_is_watching+0x16/0xb0 [ 1173.722461][ T7746] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1173.722485][ T7746] ? __pfx_mas_preallocate+0x10/0x10 [ 1173.722523][ T7746] ? anon_vma_name+0x61/0x210 [ 1173.722555][ T7746] ? __mas_set_range+0x11a/0x3a0 [ 1173.722600][ T7746] __split_vma+0x2fb/0xa60 [ 1173.722640][ T7746] ? __pfx___split_vma+0x10/0x10 [ 1173.722677][ T7746] ? __lock_acquire+0x651/0x2de0 [ 1173.722708][ T7746] ? lock_acquire+0x115/0x350 [ 1173.722737][ T7746] vms_gather_munmap_vmas+0x322/0x1370 [ 1173.722776][ T7746] ? mtree_range_walk+0x707/0x8b0 [ 1173.722846][ T7746] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1173.722885][ T7746] ? mas_walk+0x37e/0x490 [ 1173.722925][ T7746] mmap_region+0x925/0x25b0 [ 1173.722969][ T7746] ? stack_trace_save+0xa9/0x100 [ 1173.722997][ T7746] ? __pfx_mmap_region+0x10/0x10 [ 1173.723029][ T7746] ? stack_depot_save_flags+0x33/0x7f0 [ 1173.723062][ T7746] ? __lock_acquire+0x747/0x2de0 [ 1173.723091][ T7746] ? kasan_save_track+0x4f/0x80 [ 1173.723117][ T7746] ? kasan_save_track+0x3e/0x80 [ 1173.723143][ T7746] ? kasan_save_free_info+0x40/0x50 [ 1173.723164][ T7746] ? __kasan_slab_free+0x5c/0x80 [ 1173.723191][ T7746] ? kfree+0x1c5/0x650 [ 1173.723209][ T7746] ? process_measurement+0x13ea/0x1c10 [ 1173.723234][ T7746] ? ima_file_mmap+0x1b0/0x200 [ 1173.723255][ T7746] ? security_mmap_file+0x773/0xa20 [ 1173.723282][ T7746] ? vm_mmap_pgoff+0x134/0x4e0 [ 1173.723309][ T7746] ? ksys_mmap_pgoff+0x4dc/0x760 [ 1173.723341][ T7746] ? do_syscall_64+0x166/0x520 [ 1173.723374][ T7746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.723469][ T7746] ? arch_get_unmapped_area_topdown+0x269/0xc30 [ 1173.723524][ T7746] ? mm_get_unmapped_area+0xd3/0x100 [ 1173.723565][ T7746] ? shmem_get_unmapped_area+0x2cf/0x8f0 [ 1173.723610][ T7746] ? cap_mmap_addr+0xaf/0x100 [ 1173.723639][ T7746] ? bpf_lsm_mmap_addr+0x9/0x50 [ 1173.723674][ T7746] ? security_mmap_addr+0x71/0x240 [ 1173.723706][ T7746] ? shmem_mapping+0xd/0x50 [ 1173.723731][ T7746] ? memfd_check_seals_mmap+0x16f/0x220 [ 1173.723768][ T7746] do_mmap+0xe0a/0x1300 [ 1173.723800][ T7746] ? get_pid_task+0x20/0x1f0 [ 1173.723832][ T7746] ? __pfx_do_mmap+0x10/0x10 [ 1173.723879][ T7746] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 1173.723906][ T7746] ? down_write_killable+0x17e/0x240 [ 1173.723944][ T7746] ? __pfx_down_write_killable+0x10/0x10 [ 1173.723989][ T7746] vm_mmap_pgoff+0x272/0x4e0 [ 1173.724020][ T7746] ? lock_acquire+0x115/0x350 [ 1173.724049][ T7746] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1173.724082][ T7746] ? __fget_files+0x2a/0x420 [ 1173.724122][ T7746] ? __fget_files+0x3a2/0x420 [ 1173.724154][ T7746] ? __fget_files+0x2a/0x420 [ 1173.724193][ T7746] ksys_mmap_pgoff+0x4dc/0x760 [ 1173.724235][ T7746] do_syscall_64+0x166/0x520 [ 1173.724264][ T7746] ? trace_irq_disable+0x3b/0x140 [ 1173.724307][ T7746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.724331][ T7746] ? clear_bhb_loop+0x70/0xc0 [ 1173.724361][ T7746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.724385][ T7746] RIP: 0033:0x7f99be59e559 [ 1173.724408][ T7746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1173.724429][ T7746] RSP: 002b:00007f99bc7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1173.724455][ T7746] RAX: ffffffffffffffda RBX: 00007f99be826090 RCX: 00007f99be59e559 [ 1173.724472][ T7746] RDX: 000000000100000c RSI: 0000000000001000 RDI: 0000200000ffe000 [ 1173.724489][ T7746] RBP: 00007f99bc7f6090 R08: 0000000000000003 R09: 0000000000000000 [ 1173.724504][ T7746] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000002 [ 1173.724519][ T7746] R13: 00007f99be826128 R14: 00007f99be826090 R15: 00007ffee7275c68 [ 1173.724558][ T7746] [ 1174.582360][ T7781] nbd3: detected capacity change from 0 to 4089370 [ 1174.584460][ T6250] block nbd3: Dead connection, failed to find a fallback [ 1174.612199][ T7782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9987'. [ 1174.780077][ T7789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9987'. [ 1176.446252][ T7820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.446982][ T7820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.595811][ T7820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1176.621158][ T7820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1176.853498][T13031] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.853570][T13031] net_ratelimit: 25 callbacks suppressed [ 1176.853587][T13031] bond2: (slave bridge0): failed to get link speed/duplex [ 1176.853641][T13031] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.853688][T13031] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.853733][T13031] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.000737][ T7182] bond2: (slave bridge0): failed to get link speed/duplex [ 1177.227112][T13032] bond2: (slave bridge0): failed to get link speed/duplex [ 1177.338159][T13032] bond2: (slave bridge0): failed to get link speed/duplex [ 1177.474985][ T7161] bond2: (slave bridge0): failed to get link speed/duplex [ 1177.578095][ T7161] bond2: (slave bridge0): failed to get link speed/duplex [ 1177.594824][ T4985] udevd[4985]: worker [5937] /devices/virtual/block/nbd1 is taking a long time [ 1177.687257][T31202] bond2: (slave bridge0): failed to get link speed/duplex [ 1177.805133][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1177.907591][ T7161] bond2: (slave bridge0): failed to get link speed/duplex [ 1178.029680][T13032] bond2: (slave bridge0): failed to get link speed/duplex [ 1178.200509][ T7871] vlan2: entered promiscuous mode [ 1178.413141][ T6421] udevd[6421]: inotify_add_watch(7, /dev/nbd125, 10) failed: No such file or directory [ 1178.638657][ T7897] __nla_validate_parse: 3 callbacks suppressed [ 1178.638681][ T7897] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10023'. [ 1178.711988][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10025'. [ 1178.731642][ T7901] netlink: 'syz.0.10025': attribute type 2 has an invalid length. [ 1178.816023][ T7897] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10023'. [ 1179.392421][ T5632] Bluetooth: hci2: command 0x0406 tx timeout [ 1179.634707][ T7929] sock: sock_timestamping_bind_phc: sock not bind to device [ 1179.721786][ T7897] vlan2: left promiscuous mode [ 1179.721812][ T7897] bridge0: left promiscuous mode [ 1179.821145][ T7924] syzkaller1: entered promiscuous mode [ 1179.821168][ T7924] syzkaller1: entered allmulticast mode [ 1179.880827][ T6562] block nbd125: Receive control failed (result -32) [ 1180.140102][ T7941] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10038'. [ 1180.140132][ T7941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10038'. [ 1180.251779][ T7946] syzkaller0: entered promiscuous mode [ 1180.251807][ T7946] syzkaller0: entered allmulticast mode [ 1180.813212][ T7963] netlink: 'syz.0.10045': attribute type 1 has an invalid length. [ 1180.887793][ T7969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10048'. [ 1181.038337][ T7969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10048'. [ 1181.192744][ T7978] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10050'. [ 1181.314577][ T7985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10050'. [ 1181.907475][T13021] net_ratelimit: 23 callbacks suppressed [ 1181.907499][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1182.018464][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1182.127706][ T986] bond2: (slave bridge0): failed to get link speed/duplex [ 1182.237211][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1182.347307][ T986] bond2: (slave bridge0): failed to get link speed/duplex [ 1182.457654][ T7161] bond2: (slave bridge0): failed to get link speed/duplex [ 1182.469790][ T8010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10061'. [ 1182.569551][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1182.678283][ T7161] bond2: (slave bridge0): failed to get link speed/duplex [ 1182.790922][T13031] bond2: (slave bridge0): failed to get link speed/duplex [ 1182.898115][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1183.768622][ T8052] __nla_validate_parse: 4 callbacks suppressed [ 1183.768646][ T8052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10077'. [ 1184.284641][ T8067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10083'. [ 1184.284669][ T8067] netlink: 468 bytes leftover after parsing attributes in process `syz.0.10083'. [ 1184.284691][ T8067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10083'. [ 1184.942931][ T8096] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10095'. [ 1185.042667][ T8097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10095'. [ 1185.763138][ T8125] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1185.925458][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10104'. [ 1185.925486][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10104'. [ 1186.095557][ T8134] syzkaller0: entered promiscuous mode [ 1186.095589][ T8134] syzkaller0: entered allmulticast mode [ 1186.523624][ T8154] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1187.542256][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1187.751242][ T8188] net_ratelimit: 535 callbacks suppressed [ 1187.751261][ T8188] ip_tables: iptables: counters copy to user failed while replacing table [ 1191.687362][ T8160] syzkaller0: entered promiscuous mode [ 1191.687391][ T8160] syzkaller0: entered allmulticast mode [ 1191.769833][ T8197] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10120'. [ 1191.917227][ T8202] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10120'. [ 1196.459216][ T8202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1196.469879][ T8202] 8021q: adding VLAN 0 to HW filter on device team0 [ 1196.511785][ T8202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1196.589016][ T8219] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10126'. [ 1196.591282][ T8202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1196.598089][ T8202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1196.624954][ T8202] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1196.624984][ T8202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1196.650682][ T8202] veth1_vlan: left promiscuous mode [ 1196.655046][ T8202] veth0_vlan: left promiscuous mode [ 1196.667673][ T8202] veth0_vlan: entered promiscuous mode [ 1196.674265][ T8202] veth1_vlan: entered promiscuous mode [ 1196.702690][ T8202] veth1_macvtap: left promiscuous mode [ 1196.703667][ T8202] veth0_macvtap: left promiscuous mode [ 1196.710748][ T8202] veth0_macvtap: entered promiscuous mode [ 1196.722215][ T8202] veth1_macvtap: entered promiscuous mode [ 1196.767898][ T8221] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10126'. [ 1196.796709][ T8202] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1196.798188][ T8202] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1196.799006][ T8202] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1196.799878][ T8202] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1196.936001][T13032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.936113][T13032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1196.969032][ T8227] ip_tables: iptables: counters copy to user failed while replacing table [ 1196.975752][T13032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.975866][T13032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1197.165445][ T8229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10130'. [ 1197.325262][ T8221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1197.489683][ T7191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.489739][ T7191] bond2: (slave bridge0): failed to get link speed/duplex [ 1197.824228][ T8234] syzkaller0: entered promiscuous mode [ 1197.824258][ T8234] syzkaller0: entered allmulticast mode [ 1197.862841][ T7191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.862900][ T7191] bond2: (slave bridge0): failed to get link speed/duplex [ 1197.863862][ T7191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.072100][ T7160] bond2: (slave bridge0): failed to get link speed/duplex [ 1198.072154][ T7160] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.413408][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10133'. [ 1198.613419][ T31] audit: type=1800 audit(1792441766.069:204): pid=8256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.10132" name="memory.events" dev="tmpfs" ino=1226 res=0 errno=0 [ 1199.865342][ T5632] Bluetooth: hci5: command 0x0406 tx timeout [ 1202.967841][ T7182] bond2: (slave bridge0): failed to get link speed/duplex [ 1203.079112][ T7191] bond2: (slave bridge0): failed to get link speed/duplex [ 1203.415559][ T6562] block nbd126: Receive control failed (result -32) [ 1203.792652][ T8270] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1203.834450][ T8270] syzkaller0: entered promiscuous mode [ 1203.834477][ T8270] syzkaller0: entered allmulticast mode [ 1204.027843][ T7191] bond2: (slave bridge0): failed to get link speed/duplex [ 1204.109499][ T31] audit: type=1800 audit(1792441771.569:205): pid=8313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.10147" name="memory.events" dev="tmpfs" ino=1247 res=0 errno=0 [ 1204.148582][ T7160] bond2: (slave bridge0): failed to get link speed/duplex [ 1204.259294][ T7182] bond2: (slave bridge0): failed to get link speed/duplex [ 1204.386077][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1204.498551][T31202] bond2: (slave bridge0): failed to get link speed/duplex [ 1204.638278][T13032] bond2: (slave bridge0): failed to get link speed/duplex [ 1204.678204][ T8330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10149'. [ 1204.743221][ T8327] syzkaller0: entered promiscuous mode [ 1204.743261][ T8327] syzkaller0: entered allmulticast mode [ 1205.027239][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1205.147493][ T7161] bond2: (slave bridge0): failed to get link speed/duplex [ 1205.306009][ T8350] netlink: 'syz.3.10157': attribute type 1 has an invalid length. [ 1205.306038][ T8350] netlink: 256 bytes leftover after parsing attributes in process `syz.3.10157'. [ 1205.819766][ T8366] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1206.284605][ T6562] block nbd127: Receive control failed (result -32) [ 1206.534075][ T8384] ipt_REJECT: ECHOREPLY no longer supported. [ 1208.027365][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1210.777263][ T7191] net_ratelimit: 1 callbacks suppressed [ 1210.777289][ T7191] bond2: (slave bridge0): failed to get link speed/duplex [ 1210.888717][ T7191] bond2: (slave bridge0): failed to get link speed/duplex [ 1210.995174][ T8395] hsr0: entered allmulticast mode [ 1210.995200][ T8395] hsr_slave_0: entered allmulticast mode [ 1210.995221][ T8395] hsr_slave_1: entered allmulticast mode [ 1210.998436][ T7191] bond2: (slave bridge0): failed to get link speed/duplex [ 1211.014111][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10167'. [ 1211.020974][ T8395] hsr_slave_0: left promiscuous mode [ 1211.095763][ T8395] hsr_slave_1: left promiscuous mode [ 1211.120490][ T8395] hsr0 (unregistering): left allmulticast mode [ 1211.142516][ T7191] bond2: (slave bridge0): failed to get link speed/duplex [ 1211.258900][T13031] bond2: (slave bridge0): failed to get link speed/duplex [ 1211.322148][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10169'. [ 1211.380034][T13031] bond2: (slave bridge0): failed to get link speed/duplex [ 1211.499590][ T7160] bond2: (slave bridge0): failed to get link speed/duplex [ 1211.607272][ T7182] bond2: (slave bridge0): failed to get link speed/duplex [ 1211.863410][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1211.969703][ T7160] bond2: (slave bridge0): failed to get link speed/duplex [ 1212.443158][ T8442] syzkaller0: entered promiscuous mode [ 1212.443188][ T8442] syzkaller0: entered allmulticast mode [ 1212.569378][ T8447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10178'. [ 1212.781922][ T31] audit: type=1800 audit(1792441780.239:206): pid=8432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10174" name="memory.events" dev="tmpfs" ino=930 res=0 errno=0 [ 1212.902577][ T8450] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1214.138543][ T8493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10186'. [ 1218.151354][T13031] net_ratelimit: 6 callbacks suppressed [ 1218.151381][T13031] bond2: (slave bridge0): failed to get link speed/duplex [ 1218.283289][ T7191] bond2: (slave bridge0): failed to get link speed/duplex [ 1218.392322][T13031] bond2: (slave bridge0): failed to get link speed/duplex [ 1218.500441][ T7161] bond2: (slave bridge0): failed to get link speed/duplex [ 1218.610123][ T986] bond2: (slave bridge0): failed to get link speed/duplex [ 1218.718475][ T7191] bond2: (slave bridge0): failed to get link speed/duplex [ 1218.808141][ T8529] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1218.847075][T13031] bond2: (slave bridge0): failed to get link speed/duplex [ 1219.093425][ T8522] syzkaller0: entered promiscuous mode [ 1219.095474][ T8522] syzkaller0: entered allmulticast mode [ 1219.280232][ T8534] syzkaller0: entered promiscuous mode [ 1219.280264][ T8534] syzkaller0: entered allmulticast mode [ 1219.303603][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1219.823909][ T8562] ip_tables: iptables: counters copy to user failed while replacing table [ 1220.359917][ T8571] netlink: 'syz.3.10210': attribute type 21 has an invalid length. [ 1220.359943][ T8571] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10210'. [ 1224.555759][ T8564] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1224.559093][ T8568] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10210'. [ 1224.559121][ T8568] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10210'. [ 1224.559575][ T8569] netlink: 220 bytes leftover after parsing attributes in process `syz.3.10210'. [ 1224.559597][ T8569] tc_dump_action: action bad kind [ 1224.559777][ T8571] netlink: 'syz.3.10210': attribute type 4 has an invalid length. [ 1224.559796][ T8571] netlink: 'syz.3.10210': attribute type 3 has an invalid length. [ 1224.559810][ T8571] netlink: 3 bytes leftover after parsing attributes in process `syz.3.10210'. [ 1224.691709][ T8572] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1225.053774][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10215'. [ 1225.162594][ T8594] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10216'. [ 1226.149194][ T8598] ip_tables: iptables: counters copy to user failed while replacing table [ 1226.330142][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10217'. [ 1230.838440][ T8590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1230.843990][ T8590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1231.092415][ T8590] batman_adv: batadv0: Interface deactivated: gretap1 [ 1231.161357][ T8591] bridge6: entered promiscuous mode [ 1231.192742][ T8595] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10216'. [ 1231.248859][ T986] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.248922][ T986] bond2: (slave bridge0): failed to get link speed/duplex [ 1231.251179][ T45] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.251228][ T45] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.251269][ T45] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.369887][ T986] bond2: (slave bridge0): failed to get link speed/duplex [ 1231.459030][ T8632] ip_tables: iptables: counters copy to user failed while replacing table [ 1231.482167][T13031] bond2: (slave bridge0): failed to get link speed/duplex [ 1231.521572][ T6562] Bluetooth: hci1: unexpected cc 0x203d length: 9 > 1 [ 1231.521640][ T6562] Bluetooth: hci1: unexpected event for opcode 0x203d [ 1231.590574][ T7160] bond2: (slave bridge0): failed to get link speed/duplex [ 1231.700779][T13031] bond2: (slave bridge0): failed to get link speed/duplex [ 1231.819815][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1231.927717][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1232.002596][ T1694] blk_print_req_error: 123 callbacks suppressed [ 1232.002619][ T1694] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1232.002647][ T1694] buffer_io_error: 122 callbacks suppressed [ 1232.002659][ T1694] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1232.002792][ T1694] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1232.002819][ T1694] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1232.002925][ T1694] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1232.002953][ T1694] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1232.003074][ T1694] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1232.003101][ T1694] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1232.003226][ T1694] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1232.003253][ T1694] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1232.003359][ T1694] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1232.003386][ T1694] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1232.003488][ T1694] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1232.003515][ T1694] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1232.004220][ T1694] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1232.004258][ T1694] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1232.005923][ T1694] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1232.005956][ T1694] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1232.006062][ T1694] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1232.006089][ T1694] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1232.071600][ T7182] bond2: (slave bridge0): failed to get link speed/duplex [ 1232.194674][ T7879] ldm_validate_partition_table(): Disk read failed. [ 1232.202303][ T7191] bond2: (slave bridge0): failed to get link speed/duplex [ 1232.231242][ T7879] Dev nbd0: unable to read RDB block 0 [ 1232.253649][ T7879] nbd0: unable to read partition table [ 1232.295349][ T7879] ldm_validate_partition_table(): Disk read failed. [ 1232.308927][ T7879] Dev nbd0: unable to read RDB block 0 [ 1232.310587][ T7879] nbd0: unable to read partition table [ 1232.490340][ T6562] block nbd128: Receive control failed (result -32) [ 1232.831050][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10233'. [ 1232.963076][ T8679] netlink: 'syz.0.10235': attribute type 10 has an invalid length. [ 1232.963105][ T8679] netlink: 55 bytes leftover after parsing attributes in process `syz.0.10235'. [ 1233.328365][ T8687] netlink: 'syz.1.10240': attribute type 1 has an invalid length. [ 1233.328392][ T8687] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10240'. [ 1233.788331][ T8697] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10243'. [ 1233.789739][ T8697] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1233.931273][ T8699] FAULT_INJECTION: forcing a failure. [ 1233.931273][ T8699] name failslab, interval 1, probability 0, space 0, times 0 [ 1233.931314][ T8699] CPU: 0 UID: 0 PID: 8699 Comm: syz.2.10244 Not tainted syzkaller #0 PREEMPT(full) [ 1233.931345][ T8699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1233.931360][ T8699] Call Trace: [ 1233.931370][ T8699] [ 1233.931380][ T8699] dump_stack_lvl+0xe8/0x150 [ 1233.931419][ T8699] should_fail_ex+0x410/0x560 [ 1233.931457][ T8699] should_failslab+0xa8/0x100 [ 1233.931492][ T8699] __kmalloc_noprof+0xfe/0x720 [ 1233.931519][ T8699] ? sk_prot_alloc+0xe7/0x210 [ 1233.931548][ T8699] ? sk_prot_alloc+0xe7/0x210 [ 1233.931595][ T8699] sk_prot_alloc+0xe7/0x210 [ 1233.931622][ T8699] ? sk_alloc+0x27/0x390 [ 1233.931655][ T8699] sk_alloc+0x3a/0x390 [ 1233.931689][ T8699] bpf_prog_test_run_skb+0x3a6/0x2230 [ 1233.931715][ T8699] ? lock_acquire+0x115/0x350 [ 1233.931758][ T8699] ? __fget_files+0x3a2/0x420 [ 1233.931792][ T8699] ? __fget_files+0x2a/0x420 [ 1233.931832][ T8699] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1233.931858][ T8699] bpf_prog_test_run+0x2c5/0x340 [ 1233.931893][ T8699] __sys_bpf+0xa22/0xd90 [ 1233.931930][ T8699] ? __pfx___sys_bpf+0x10/0x10 [ 1233.931971][ T8699] ? __fget_files+0x2a/0x420 [ 1233.932025][ T8699] ? ksys_write+0x242/0x270 [ 1233.932052][ T8699] ? __pfx_ksys_write+0x10/0x10 [ 1233.932081][ T8699] __x64_sys_bpf+0xba/0xd0 [ 1233.932110][ T8699] do_syscall_64+0x166/0x520 [ 1233.932140][ T8699] ? trace_irq_disable+0x3b/0x140 [ 1233.932165][ T8699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.932188][ T8699] ? clear_bhb_loop+0x70/0xc0 [ 1233.932217][ T8699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.932240][ T8699] RIP: 0033:0x7f92afd9e559 [ 1233.932261][ T8699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1233.932281][ T8699] RSP: 002b:00007f92b0bf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1233.932306][ T8699] RAX: ffffffffffffffda RBX: 00007f92b0025fa0 RCX: 00007f92afd9e559 [ 1233.932323][ T8699] RDX: 0000000000000050 RSI: 0000200000000580 RDI: 000000000000000a [ 1233.932338][ T8699] RBP: 00007f92b0bf1090 R08: 0000000000000000 R09: 0000000000000000 [ 1233.932353][ T8699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1233.932368][ T8699] R13: 00007f92b0026038 R14: 00007f92b0025fa0 R15: 00007ffed09538c8 [ 1233.932405][ T8699] [ 1234.450252][ T8709] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10247'. [ 1234.458812][ T6562] block nbd129: Receive control failed (result -32) [ 1234.587247][ T8711] syzkaller0: entered promiscuous mode [ 1234.587274][ T8711] syzkaller0: entered allmulticast mode [ 1236.362110][ T8767] netlink: 'syz.4.10262': attribute type 1 has an invalid length. [ 1236.362140][ T8767] netlink: 256 bytes leftover after parsing attributes in process `syz.4.10262'. [ 1236.547296][T13021] net_ratelimit: 27 callbacks suppressed [ 1236.547321][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1236.757297][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1237.317006][ T45] bond2: (slave bridge0): failed to get link speed/duplex [ 1237.362814][ T8782] ip_tables: iptables: counters copy to user failed while replacing table [ 1237.437432][T13031] bond2: (slave bridge0): failed to get link speed/duplex [ 1237.992410][T13032] bond2: (slave bridge0): failed to get link speed/duplex [ 1238.101845][T13032] bond2: (slave bridge0): failed to get link speed/duplex [ 1238.207237][T13031] bond2: (slave bridge0): failed to get link speed/duplex [ 1238.357856][ T7160] bond2: (slave bridge0): failed to get link speed/duplex [ 1238.448983][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10267'. [ 1238.467219][ T7161] bond2: (slave bridge0): failed to get link speed/duplex [ 1239.232061][ T8836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10280'. [ 1239.420557][ T8840] bond1 (unregistering): Released all slaves [ 1239.862546][ T6562] block nbd130: Receive control failed (result -32) [ 1239.863887][ T5632] block nbd130: Receive control failed (result -32) [ 1239.962851][ T8861] x_tables: duplicate underflow at hook 1 [ 1239.962977][ T8862] x_tables: duplicate underflow at hook 1 [ 1240.231005][ T8878] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10295'. [ 1240.260336][ T8878] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10295'. [ 1240.295892][ T8868] vlan2: entered promiscuous mode [ 1240.392422][ T8882] bond1 (unregistering): Released all slaves [ 1240.455532][ T8887] netlink: 'syz.1.10298': attribute type 4 has an invalid length. [ 1240.482498][ T8896] netlink: 84 bytes leftover after parsing attributes in process `syz.0.10300'. [ 1240.503953][ T8896] netlink: 84 bytes leftover after parsing attributes in process `syz.0.10300'. [ 1240.534469][ T8896] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10300'. [ 1240.549784][ T8896] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10300'. [ 1240.570927][ T8896] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10300'. [ 1240.575143][ T8896] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10300'. [ 1240.974080][ T8911] netlink: 'syz.2.10304': attribute type 1 has an invalid length. [ 1241.173350][ T31] audit: type=1800 audit(1792441808.629:207): pid=8902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10301" name="memory.events" dev="tmpfs" ino=786 res=0 errno=0 [ 1241.258218][ T8922] xt_HMARK: proto mask must be zero with L3 mode [ 1241.570354][T13021] net_ratelimit: 25 callbacks suppressed [ 1241.570380][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1241.630047][ T8933] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 1241.759131][ T7161] bond2: (slave bridge0): failed to get link speed/duplex [ 1241.879114][T13031] bond2: (slave bridge0): failed to get link speed/duplex [ 1242.415479][ T8957] ip_tables: iptables: counters copy to user failed while replacing table [ 1242.418721][ T7161] bond2: (slave bridge0): failed to get link speed/duplex [ 1242.528206][ T7191] bond2: (slave bridge0): failed to get link speed/duplex [ 1242.647517][T13031] bond2: (slave bridge0): failed to get link speed/duplex [ 1242.757543][ T7182] bond2: (slave bridge0): failed to get link speed/duplex [ 1242.867076][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1243.082593][ T8979] netlink: 'syz.3.10326': attribute type 1 has an invalid length. [ 1244.198637][ T9006] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1244.203929][ T9006] team0: Port device bond2 added [ 1244.364422][ T8993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1244.638690][ T6562] block nbd131: Receive control failed (result -32) [ 1244.643545][ T5632] block nbd131: Receive control failed (result -32) [ 1245.171114][ T9032] __nla_validate_parse: 65 callbacks suppressed [ 1245.171138][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10341'. [ 1245.231776][ T9032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10341'. [ 1246.173075][ T9066] syzkaller0: entered promiscuous mode [ 1246.173101][ T9066] syzkaller0: entered allmulticast mode [ 1246.174339][ T9070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10354'. [ 1246.328378][ T9070] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1246.658818][ T7182] net_ratelimit: 22 callbacks suppressed [ 1246.658841][ T7182] bond2: (slave bridge0): failed to get link speed/duplex [ 1246.768812][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1246.882633][T13032] bond2: (slave bridge0): failed to get link speed/duplex [ 1246.999750][ T45] bond2: (slave bridge0): failed to get link speed/duplex [ 1247.059322][ T9089] FAULT_INJECTION: forcing a failure. [ 1247.059322][ T9089] name failslab, interval 1, probability 0, space 0, times 0 [ 1247.059358][ T9089] CPU: 0 UID: 0 PID: 9089 Comm: syz.3.10361 Not tainted syzkaller #0 PREEMPT(full) [ 1247.059383][ T9089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1247.059398][ T9089] Call Trace: [ 1247.059407][ T9089] [ 1247.059418][ T9089] dump_stack_lvl+0xe8/0x150 [ 1247.059456][ T9089] should_fail_ex+0x410/0x560 [ 1247.059493][ T9089] should_failslab+0xa8/0x100 [ 1247.059527][ T9089] __kmalloc_noprof+0xfe/0x720 [ 1247.059554][ T9089] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1247.059587][ T9089] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1247.059628][ T9089] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1247.059670][ T9089] genl_family_rcv_msg_doit+0xda/0x340 [ 1247.059710][ T9089] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1247.059743][ T9089] ? __pfx___mutex_lock+0x10/0x10 [ 1247.059775][ T9089] ? __pfx_genl_get_cmd+0x10/0x10 [ 1247.059803][ T9089] ? __pfx_nfc_genl_llc_get_params+0x10/0x10 [ 1247.059941][ T9089] ? __lock_acquire+0x747/0x2de0 [ 1247.059978][ T9089] genl_rcv_msg+0x614/0x7a0 [ 1247.060017][ T9089] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1247.060048][ T9089] ? __pfx_nfc_genl_llc_get_params+0x10/0x10 [ 1247.060100][ T9089] netlink_rcv_skb+0x226/0x4a0 [ 1247.060126][ T9089] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1247.060158][ T9089] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1247.060201][ T9089] ? down_read+0x2be/0x330 [ 1247.060239][ T9089] genl_rcv+0x28/0x40 [ 1247.060267][ T9089] netlink_unicast+0x8ef/0xa80 [ 1247.060326][ T9089] netlink_sendmsg+0x813/0xb40 [ 1247.060363][ T9089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1247.060398][ T9089] ? apparmor_socket_sendmsg+0x98/0x360 [ 1247.060432][ T9089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1247.060456][ T9089] sock_sendmsg_nosec+0x14e/0x190 [ 1247.060483][ T9089] ____sys_sendmsg+0x54e/0x850 [ 1247.060521][ T9089] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1247.060564][ T9089] ? import_iovec+0x73/0xa0 [ 1247.060604][ T9089] ___sys_sendmsg+0x2a5/0x360 [ 1247.060635][ T9089] ? __lock_acquire+0x747/0x2de0 [ 1247.060664][ T9089] ? __pfx____sys_sendmsg+0x10/0x10 [ 1247.060739][ T9089] ? __fget_files+0x2a/0x420 [ 1247.060772][ T9089] ? __fget_files+0x3a2/0x420 [ 1247.060831][ T9089] __x64_sys_sendmsg+0x1b1/0x290 [ 1247.060867][ T9089] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1247.060925][ T9089] do_syscall_64+0x166/0x520 [ 1247.060955][ T9089] ? trace_irq_disable+0x3b/0x140 [ 1247.060980][ T9089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.061003][ T9089] ? clear_bhb_loop+0x70/0xc0 [ 1247.061032][ T9089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.061055][ T9089] RIP: 0033:0x7f19b139e559 [ 1247.061077][ T9089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1247.061097][ T9089] RSP: 002b:00007f19b2244028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1247.061123][ T9089] RAX: ffffffffffffffda RBX: 00007f19b1625fa0 RCX: 00007f19b139e559 [ 1247.061140][ T9089] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 1247.061156][ T9089] RBP: 00007f19b2244090 R08: 0000000000000000 R09: 0000000000000000 [ 1247.061171][ T9089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1247.061184][ T9089] R13: 00007f19b1626038 R14: 00007f19b1625fa0 R15: 00007ffc24995a68 [ 1247.061222][ T9089] [ 1247.236782][ T5632] Bluetooth: hci1: command 0x0405 tx timeout [ 1247.540667][ T45] bond2: (slave bridge0): failed to get link speed/duplex [ 1247.667960][T13032] bond2: (slave bridge0): failed to get link speed/duplex [ 1247.675807][ T9097] tipc: Started in network mode [ 1247.675843][ T9097] tipc: Node identity 0e6f26fb787a, cluster identity 4711 [ 1247.676012][ T9097] tipc: Enabled bearer , priority 0 [ 1247.690080][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10363'. [ 1247.695343][ T9097] +: renamed from syzkaller0 [ 1247.831503][ T9097] tipc: Disabling bearer [ 1247.855245][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10360'. [ 1247.974814][ T7191] bond2: (slave bridge0): failed to get link speed/duplex [ 1248.062582][ T9115] netlink: 600 bytes leftover after parsing attributes in process `syz.0.10367'. [ 1248.099870][ T7190] bond2: (slave bridge0): failed to get link speed/duplex [ 1248.120466][ T9117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10365'. [ 1248.146423][ T9112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10365'. [ 1248.218700][ T7190] bond2: (slave bridge0): failed to get link speed/duplex [ 1248.328092][ T7161] bond2: (slave bridge0): failed to get link speed/duplex [ 1248.773277][ T9150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10373'. [ 1249.361138][ T9179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10383'. [ 1250.301819][ T9205] Cannot find set identified by id 65535 to match [ 1250.702328][T13031] IPVS: starting estimator thread 0... [ 1250.741232][ T9225] __nla_validate_parse: 1 callbacks suppressed [ 1250.741256][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10397'. [ 1250.764518][ T9225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10397'. [ 1250.798523][ T9224] IPVS: using max 28 ests per chain, 67200 per kthread [ 1250.928273][ T9233] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10398'. [ 1250.962563][ T4985] udevd[4985]: worker [5811] /devices/virtual/block/nbd3 is taking a long time [ 1250.994497][ T9225] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1250.994636][ T9225] syzkaller1: linktype set to 769 [ 1251.012302][ T9225] syzkaller1: tun_chr_ioctl cmd 3391657013 [ 1251.478678][ T5632] block nbd132: Receive control failed (result -32) [ 1251.493870][ T6562] block nbd132: Receive control failed (result -32) [ 1251.748061][ T7191] net_ratelimit: 34 callbacks suppressed [ 1251.748086][ T7191] bond2: (slave bridge0): failed to get link speed/duplex [ 1251.860474][ T7191] bond2: (slave bridge0): failed to get link speed/duplex [ 1251.967861][T13032] bond2: (slave bridge0): failed to get link speed/duplex [ 1252.078559][ T986] bond2: (slave bridge0): failed to get link speed/duplex [ 1252.205280][ T9270] tipc: Invalid UDP bearer configuration [ 1252.205335][ T9270] tipc: Enabling of bearer rejected, failed to enable media [ 1252.208536][T13032] bond2: (slave bridge0): failed to get link speed/duplex [ 1252.231407][ T9270] netlink: 'syz.0.10407': attribute type 5 has an invalid length. [ 1252.253093][ T9267] syzkaller0: entered promiscuous mode [ 1252.253116][ T9267] syzkaller0: entered allmulticast mode [ 1252.265770][ T9272] netlink: 100 bytes leftover after parsing attributes in process `syz.4.10406'. [ 1252.317508][T13032] bond2: (slave bridge0): failed to get link speed/duplex [ 1252.420313][ T9278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10409'. [ 1252.541131][ T9281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10409'. [ 1252.821441][ T7161] bond2: (slave bridge0): failed to get link speed/duplex [ 1252.938008][ T7190] bond2: (slave bridge0): failed to get link speed/duplex [ 1253.048104][ T45] bond2: (slave bridge0): failed to get link speed/duplex [ 1253.159442][ T7182] bond2: (slave bridge0): failed to get link speed/duplex [ 1253.412309][ T9293] batadv0: entered promiscuous mode [ 1253.425879][ T9293] vlan5: entered promiscuous mode [ 1253.925825][ T9315] syzkaller0: entered promiscuous mode [ 1253.925853][ T9315] syzkaller0: entered allmulticast mode [ 1253.990202][ T9318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10423'. [ 1254.161792][ T9327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10423'. [ 1254.442313][ T9327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1254.499854][ T9327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1254.931011][ T9327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1254.968566][ T9327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1255.049904][ T9327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1255.049935][ T9327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1255.109821][ T9327] veth1_vlan: left promiscuous mode [ 1255.148857][ T9327] veth0_vlan: left promiscuous mode [ 1255.150964][ T9327] veth0_vlan: entered promiscuous mode [ 1255.178208][ T9327] veth1_vlan: entered promiscuous mode [ 1255.227462][ T9327] veth1_macvtap: left promiscuous mode [ 1255.249180][ T9327] veth0_macvtap: left promiscuous mode [ 1255.252167][ T9327] veth0_macvtap: entered promiscuous mode [ 1255.274005][ T9327] veth1_macvtap: entered promiscuous mode [ 1255.303901][ T9327] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1255.331336][ T9327] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1255.335493][ T9327] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1255.375921][ T9327] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1255.410939][ T9327] mac80211_hwsim hwsim63 wlan0: left promiscuous mode [ 1255.435274][ T9327] batman_adv: batadv0: Interface activated: gretap1 [ 1255.463921][ T9327] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1255.478752][ T9327] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1255.545612][ T9327] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 1255.577995][ T9327] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1255.661142][ T7182] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.661259][ T7182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1255.664659][ T7182] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.664767][ T7182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1255.941187][ T45] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.969877][ T45] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.990508][ T45] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.058719][T13031] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.147183][ T9351] syzkaller0: entered promiscuous mode [ 1256.147208][ T9351] syzkaller0: entered allmulticast mode [ 1256.154224][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10432'. [ 1256.313613][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10433'. [ 1256.736054][ T9378] FAULT_INJECTION: forcing a failure. [ 1256.736054][ T9378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1256.736094][ T9378] CPU: 0 UID: 0 PID: 9378 Comm: syz.2.10439 Not tainted syzkaller #0 PREEMPT(full) [ 1256.736119][ T9378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1256.736134][ T9378] Call Trace: [ 1256.736143][ T9378] [ 1256.736158][ T9378] dump_stack_lvl+0xe8/0x150 [ 1256.736195][ T9378] should_fail_ex+0x410/0x560 [ 1256.736232][ T9378] _copy_from_iter+0x1d3/0x1660 [ 1256.736273][ T9378] ? __alloc_skb+0x27a/0x7a0 [ 1256.736302][ T9378] ? __alloc_skb+0x27a/0x7a0 [ 1256.736331][ T9378] ? __alloc_skb+0x27a/0x7a0 [ 1256.736358][ T9378] ? __pfx__copy_from_iter+0x10/0x10 [ 1256.736387][ T9378] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1256.736411][ T9378] ? __alloc_skb+0x27a/0x7a0 [ 1256.736445][ T9378] ? __alloc_skb+0x27a/0x7a0 [ 1256.736480][ T9378] ? netlink_sendmsg+0x650/0xb40 [ 1256.736503][ T9378] ? skb_put+0x112/0x210 [ 1256.736535][ T9378] netlink_sendmsg+0x6c0/0xb40 [ 1256.736569][ T9378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1256.736602][ T9378] ? apparmor_socket_sendmsg+0x98/0x360 [ 1256.736636][ T9378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1256.736659][ T9378] sock_sendmsg_nosec+0x14e/0x190 [ 1256.736685][ T9378] ____sys_sendmsg+0x54e/0x850 [ 1256.736723][ T9378] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1256.736765][ T9378] ? import_iovec+0x73/0xa0 [ 1256.736802][ T9378] ___sys_sendmsg+0x2a5/0x360 [ 1256.736831][ T9378] ? __lock_acquire+0x747/0x2de0 [ 1256.736862][ T9378] ? __pfx____sys_sendmsg+0x10/0x10 [ 1256.736933][ T9378] ? __fget_files+0x2a/0x420 [ 1256.736965][ T9378] ? __fget_files+0x3a2/0x420 [ 1256.737010][ T9378] __x64_sys_sendmsg+0x1b1/0x290 [ 1256.737045][ T9378] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1256.737101][ T9378] do_syscall_64+0x166/0x520 [ 1256.737135][ T9378] ? trace_irq_disable+0x3b/0x140 [ 1256.737159][ T9378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.737182][ T9378] ? clear_bhb_loop+0x70/0xc0 [ 1256.737211][ T9378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.737234][ T9378] RIP: 0033:0x7f92afd9e559 [ 1256.737254][ T9378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1256.737274][ T9378] RSP: 002b:00007f92b0bf1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1256.737300][ T9378] RAX: ffffffffffffffda RBX: 00007f92b0025fa0 RCX: 00007f92afd9e559 [ 1256.737317][ T9378] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 1256.737332][ T9378] RBP: 00007f92b0bf1090 R08: 0000000000000000 R09: 0000000000000000 [ 1256.737345][ T9378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1256.737358][ T9378] R13: 00007f92b0026038 R14: 00007f92b0025fa0 R15: 00007ffed09538c8 [ 1256.737394][ T9378] [ 1257.097068][ T9375] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1257.098854][ T9375] team0: Port device bond1 added [ 1257.132585][ T7191] net_ratelimit: 16 callbacks suppressed [ 1257.132607][ T7191] bond2: (slave bridge0): failed to get link speed/duplex [ 1257.240673][ T7190] bond2: (slave bridge0): failed to get link speed/duplex [ 1257.324664][ T9387] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10442'. [ 1257.324698][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10442'. [ 1257.349952][ T45] bond2: (slave bridge0): failed to get link speed/duplex [ 1257.462469][T13032] bond2: (slave bridge0): failed to get link speed/duplex [ 1257.569584][T31202] bond2: (slave bridge0): failed to get link speed/duplex [ 1257.677329][T31202] bond2: (slave bridge0): failed to get link speed/duplex [ 1257.702443][ T9398] syzkaller0: entered promiscuous mode [ 1257.702469][ T9398] syzkaller0: entered allmulticast mode [ 1257.788331][ T7161] bond2: (slave bridge0): failed to get link speed/duplex [ 1257.945576][ T9412] SET target dimension over the limit! [ 1258.000734][ T45] bond2: (slave bridge0): failed to get link speed/duplex [ 1258.169034][T31202] bond2: (slave bridge0): failed to get link speed/duplex [ 1258.668137][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1258.907687][ T9428] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10455'. [ 1258.952111][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10452'. [ 1259.597889][ T9449] syzkaller0: entered promiscuous mode [ 1259.597917][ T9449] syzkaller0: entered allmulticast mode [ 1259.864909][ T9425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1259.985333][ T9459] nbd: couldn't find a device at index 4194304 [ 1260.239749][ T6562] block nbd133: Receive control failed (result -32) [ 1260.565234][ T9478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10468'. [ 1260.603186][ T9478] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10468'. [ 1260.652397][ T9478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1260.695925][ T9478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1260.730115][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10470'. [ 1260.751179][ T9478] bond0 (unregistering): Released all slaves [ 1260.893383][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10470'. [ 1261.309825][ T9506] syzkaller0: entered promiscuous mode [ 1261.309852][ T9506] syzkaller0: entered allmulticast mode [ 1261.861667][ T9527] __nla_validate_parse: 1 callbacks suppressed [ 1261.861690][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10482'. [ 1261.968887][ T9503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1262.158071][T13021] net_ratelimit: 24 callbacks suppressed [ 1262.158098][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1262.267546][ T7161] bond2: (slave bridge0): failed to get link speed/duplex [ 1262.379193][T13032] bond2: (slave bridge0): failed to get link speed/duplex [ 1262.486577][ T7186] bond2: (slave bridge0): failed to get link speed/duplex [ 1262.598278][ T7191] bond2: (slave bridge0): failed to get link speed/duplex [ 1262.709596][T13032] bond2: (slave bridge0): failed to get link speed/duplex [ 1262.820628][T13032] bond2: (slave bridge0): failed to get link speed/duplex [ 1262.929044][ T7186] bond2: (slave bridge0): failed to get link speed/duplex [ 1263.008215][ T9561] Unknown options in mask 6 [ 1263.037337][T13021] bond2: (slave bridge0): failed to get link speed/duplex [ 1263.045151][ T9556] x_tables: duplicate underflow at hook 1 [ 1263.155176][ T7191] bond2: (slave bridge0): failed to get link speed/duplex [ 1263.290438][ T9566] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20000 [ 1263.389977][ T9570] syzkaller0: entered promiscuous mode [ 1263.390002][ T9570] syzkaller0: entered allmulticast mode [ 1263.788112][ T9582] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1263.795480][ T9582] team0: Port device bond3 added [ 1264.288961][ T6562] block nbd134: Receive control failed (result -32) [ 1264.673209][ T9623] netlink: 'syz.3.10510': attribute type 24 has an invalid length. [ 1264.980999][ T32] INFO: task kworker/1:1H:2688 blocked for more than 143 seconds. [ 1264.981026][ T32] Not tainted syzkaller #0 [ 1264.981040][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1264.981051][ T32] task:kworker/1:1H state:D stack:26912 pid:2688 tgid:2688 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1264.981122][ T32] Workqueue: kblockd blk_mq_run_work_fn [ 1264.981151][ T32] Call Trace: [ 1264.981160][ T32] [ 1264.981176][ T32] __schedule+0x17db/0x58f0 [ 1264.981239][ T32] ? __pfx___schedule+0x10/0x10 [ 1264.981279][ T32] ? schedule+0x90/0x2b0 [ 1264.981311][ T32] schedule+0x164/0x2b0 [ 1264.981342][ T32] schedule_timeout+0x152/0x2c0 [ 1264.981368][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 1264.981393][ T32] ? __pfx_process_timeout+0x10/0x10 [ 1264.981422][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1264.981450][ T32] ? prepare_to_wait_event+0x436/0x480 [ 1264.981493][ T32] nbd_queue_rq+0x96f/0xff0 [ 1264.981538][ T32] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1264.981570][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1264.981602][ T32] ? lock_acquire+0x115/0x350 [ 1264.981628][ T32] ? blk_queue_exit+0x26/0x240 [ 1264.981763][ T32] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1264.981820][ T32] ? sbitmap_get+0x229/0x390 [ 1264.981850][ T32] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1264.981884][ T32] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1264.981922][ T32] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1264.981980][ T32] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1264.982017][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 1264.982053][ T32] ? lock_acquire+0x115/0x350 [ 1264.982083][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1264.982116][ T32] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1264.982150][ T32] ? blk_mq_run_work_fn+0x144/0x300 [ 1264.982172][ T32] blk_mq_run_work_fn+0x16c/0x300 [ 1264.982196][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1264.982226][ T32] process_scheduled_works+0xc3d/0x1630 [ 1264.982292][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1264.982332][ T32] ? assign_work+0x3cf/0x5d0 [ 1264.982367][ T32] worker_thread+0xa47/0xfb0 [ 1264.982414][ T32] ? __kthread_parkme+0x71/0x1f0 [ 1264.982458][ T32] kthread+0x38b/0x480 [ 1265.251913][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1265.251954][ T32] ? __pfx_kthread+0x10/0x10 [ 1265.251978][ T32] ret_from_fork+0x514/0xb70 [ 1265.252016][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1265.252050][ T32] ? __switch_to+0xc89/0x1420 [ 1265.252083][ T32] ? __pfx_kthread+0x10/0x10 [ 1265.252106][ T32] ret_from_fork_asm+0x1a/0x30 [ 1265.252170][ T32] [ 1265.252489][ T32] [ 1265.252489][ T32] Showing all locks held in the system: [ 1265.252504][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 1265.252523][ T32] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1265.252600][ T32] locks held by kworker/1:1H/2688: 4, on CPU#1: [ 1265.252617][ T32] #0: ffff88801fad2540 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1265.252682][ T32] #1: ffffc9000bfafc40 ((work_completion)(&(&hctx->run_work)->work)){+.+.} ** replaying previous printk message ** [ 1265.252682][ T32] #1: ffffc9000bfafc40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1265.252745][ T32] #2: ffff8880286e0998 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 1265.252798][ T32] #3: ffff88804e240178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 1265.252879][ T32] locks held by getty/5375: 2, on CPU#0: [ 1265.252896][ T32] #0: ffff8880379800a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1265.253021][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1265.253118][ T32] locks held by kworker/u8:20/13021: 4, last CPU#0: [ 1265.253136][ T32] #0: ffff88804df07940 ((wq_completion)krds_cp_wq#7/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1265.253201][ T32] #1: ffffc900024ffc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1265.253266][ T32] #2: ffff88804e5aaa80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1265.253368][ T32] #3: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __inet_dev_addr_type+0x159/0x560 [ 1265.253457][ T32] locks held by kworker/u8:31/13032: 4, last CPU#0: [ 1265.253474][ T32] #0: ffff88807a8cf140 ((wq_completion)krds_cp_wq#9/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1265.253535][ T32] #1: ffffc90004e77c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1265.253593][ T32] #2: ffff88807f856480 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1265.253649][ T32] #3: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __inet_dev_addr_type+0x159/0x560 [ 1265.253741][ T32] locks held by udevd/5811: 1, on CPU#1: [ 1265.253758][ T32] #0: ffff8880247d8350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1265.253863][ T32] locks held by udevd/5937: 1, on CPU#1: [ 1265.253879][ T32] #0: ffff888026ac8350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1265.253939][ T32] locks held by kworker/1:2H/6250: 4, on CPU#1: [ 1265.253954][ T32] #0: ffff88801fad2540 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1265.254014][ T32] #1: ffffc90004b4fc40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1265.254076][ T32] #2: ffff888028579f18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 1265.254132][ T32] #3: ffff88807be17178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 1265.254197][ T32] locks held by kworker/u8:39/7186: 2, last CPU#0: [ 1265.254214][ T32] #0: ffff88803461b940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1265.254278][ T32] #1: ffffc90010057c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1265.254337][ T32] locks held by kworker/u8:43/7190: 4, last CPU#0: [ 1265.254352][ T32] #0: ffff88804594c940 ((wq_completion)krds_cp_wq#21/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1265.254417][ T32] #1: ffffc9000fbb7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1265.254480][ T32] #2: ffff88804e5a8c80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1265.254550][ T32] #3: ffff8880b843bb20 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 1265.254624][ T32] [ 1265.254631][ T32] ============================================= [ 1265.254631][ T32] [ 1265.254650][ T32] NMI backtrace for cpu 1 [ 1265.254665][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1265.254689][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1265.254704][ T32] Call Trace: [ 1265.254739][ T32] [ 1265.254749][ T32] dump_stack_lvl+0xe8/0x150 [ 1265.254799][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1265.254834][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1265.254874][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1265.254902][ T32] sys_info+0x135/0x170 [ 1265.254936][ T32] watchdog+0xfd7/0x1030 [ 1265.254970][ T32] ? watchdog+0x1c7/0x1030 [ 1265.255002][ T32] kthread+0x38b/0x480 [ 1265.255024][ T32] ? __pfx_watchdog+0x10/0x10 [ 1265.255047][ T32] ? __pfx_kthread+0x10/0x10 [ 1265.255071][ T32] ret_from_fork+0x514/0xb70 [ 1265.255111][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1265.255145][ T32] ? __switch_to+0xc89/0x1420 [ 1265.255180][ T32] ? __pfx_kthread+0x10/0x10 [ 1265.255205][ T32] ret_from_fork_asm+0x1a/0x30 [ 1265.255257][ T32] [ 1265.255267][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1265.255298][ C0] NMI backtrace for cpu 0 [ 1265.255321][ C0] CPU: 0 UID: 0 PID: 13032 Comm: kworker/u8:31 Not tainted syzkaller #0 PREEMPT(full) [ 1265.255343][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1265.255357][ C0] Workqueue: krds_cp_wq#9/0 rds_connect_worker [ 1265.255436][ C0] RIP: 0010:lock_is_held_type+0xce/0x150 [ 1265.255523][ C0] Code: c7 30 af c2 8f 4c 89 fe e8 7f 7f 33 f9 eb cb 31 db eb 1c 83 fd ff 74 12 31 c0 f6 43 22 03 0f 95 c0 31 db 39 c5 0f 94 c3 eb 05 01 00 00 00 48 c7 c7 e2 85 6e 8e e8 71 1b 00 00 b8 ff ff ff ff [ 1265.255540][ C0] RSP: 0018:ffffc90004e774c0 EFLAGS: 00000046 [ 1265.255568][ C0] RAX: 0000000000000001 RBX: ffff888033328c28 RCX: 0000000000000046 [ 1265.255581][ C0] RDX: 0000000000000000 RSI: ffffffff8fd5c8e0 RDI: ffff888033328c28 [ 1265.255595][ C0] RBP: 00000000ffffffff R08: ffffc90004e776cf R09: 0000000000000000 [ 1265.255623][ C0] R10: ffffc90004e776a0 R11: fffff520009ceeda R12: 0000000000000246 [ 1265.255638][ C0] R13: ffff888033328000 R14: ffffffff8fd5c8e0 R15: 0000000000000003 [ 1265.255651][ C0] FS: 0000000000000000(0000) GS:ffff888123abd000(0000) knlGS:0000000000000000 [ 1265.255667][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1265.255699][ C0] CR2: 0000001b3271aff8 CR3: 0000000073dac000 CR4: 00000000003526f0 [ 1265.255717][ C0] Call Trace: [ 1265.255725][ C0] [ 1265.255734][ C0] fib_table_lookup+0x2c0/0x17d0 [ 1265.255778][ C0] __inet_dev_addr_type+0x2fc/0x560 [ 1265.255800][ C0] ? __inet_dev_addr_type+0x159/0x560 [ 1265.255841][ C0] ? __pfx___inet_dev_addr_type+0x10/0x10 [ 1265.255864][ C0] ? irqentry_exit+0x218/0x920 [ 1265.255888][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1265.255918][ C0] ? l3mdev_fib_table_by_index+0x7f/0x2d0 [ 1265.255947][ C0] __inet_bind+0x132/0xaa0 [ 1265.255969][ C0] ? kernel_bind+0xf0/0x1c0 [ 1265.256028][ C0] kernel_bind+0x13e/0x1c0 [ 1265.256058][ C0] ? __pfx_kernel_bind+0x10/0x10 [ 1265.256096][ C0] rds_tcp_conn_path_connect+0x53b/0x920 [ 1265.256124][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1265.256150][ C0] ? lock_acquire+0x115/0x350 [ 1265.256177][ C0] rds_connect_worker+0x1d8/0x290 [ 1265.256210][ C0] ? process_scheduled_works+0x97a/0x1630 [ 1265.256239][ C0] process_scheduled_works+0xc3d/0x1630 [ 1265.256285][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1265.256325][ C0] ? assign_work+0x3cf/0x5d0 [ 1265.256356][ C0] worker_thread+0xa47/0xfb0 [ 1265.256401][ C0] kthread+0x38b/0x480 [ 1265.256455][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1265.256503][ C0] ? __pfx_kthread+0x10/0x10 [ 1265.256525][ C0] ret_from_fork+0x514/0xb70 [ 1265.256561][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1265.256595][ C0] ? __switch_to+0xc89/0x1420 [ 1265.256627][ C0] ? __pfx_kthread+0x10/0x10 [ 1265.256648][ C0] ret_from_fork_asm+0x1a/0x30 [ 1265.256692][ C0] [ 1265.350999][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1266.079552][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1266.088688][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1266.098774][ T32] Call Trace: [ 1266.102085][ T32] [ 1266.105035][ T32] vpanic+0x56d/0xa60 [ 1266.109047][ T32] ? __pfx___schedule+0x10/0x10 [ 1266.113924][ T32] ? __pfx_vpanic+0x10/0x10 [ 1266.118465][ T32] panic+0xc5/0xd0 [ 1266.122217][ T32] ? __pfx_panic+0x10/0x10 [ 1266.126662][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1266.132157][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1266.137568][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1266.143771][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1266.149958][ T32] watchdog+0x1030/0x1030 [ 1266.154338][ T32] ? watchdog+0x1c7/0x1030 [ 1266.158790][ T32] kthread+0x38b/0x480 [ 1266.162893][ T32] ? __pfx_watchdog+0x10/0x10 [ 1266.167613][ T32] ? __pfx_kthread+0x10/0x10 [ 1266.172242][ T32] ret_from_fork+0x514/0xb70 [ 1266.176879][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1266.182053][ T32] ? __switch_to+0xc89/0x1420 [ 1266.186779][ T32] ? __pfx_kthread+0x10/0x10 [ 1266.191402][ T32] ret_from_fork_asm+0x1a/0x30 [ 1266.196228][ T32] [ 1266.199874][ T32] Kernel Offset: disabled [ 1266.204219][ T32] Rebooting in 86400 seconds..