last executing test programs: 1m12.628392034s ago: executing program 3 (id=867): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000400)=r2, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000440)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x2, @multicast1}, 0x10) sendmmsg(r3, &(0x7f00000004c0), 0x800001d, 0x300) connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8d}, 0x1c) write$cgroup_subtree(r0, &(0x7f00000005c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x810, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x4800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0xc40) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000980)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket(0x840000000002, 0x3, 0x100) connect$can_bcm(r10, &(0x7f00000009c0), 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000a40)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newtfilter={0x94, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x2e37}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffff7, 0x5, 0x20000000, 0x7, 0x401}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x94}}, 0x0) write$tun(r7, &(0x7f0000000c80)=ANY=[], 0x6e) 1m9.873071967s ago: executing program 4 (id=878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000acc1aaae11100010000000000000000000000000a"], 0x28}}, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x237a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xb2, 0x4) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/35, 0x23}, 0x1}], 0x1, 0x12141, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000002880)={0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000028c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002980)={0x3c, r4, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x3c}}, 0x400400c) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x1c, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '&{*'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4040010) sendmmsg$inet6(r1, &(0x7f00000027c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x2, @mcast2, 0x7}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="d9cbd4bf5e56c0d6e65d02c7ea6b2baa4a906798c90b99dfbf885cebe48abfdc1176b72280734f908ca61ae1de61063467b789334e69b6d5b8e0ce4b30b756ec0c8b6d7c676f", 0x46}, {&(0x7f0000001300)="bbc4c813c56173f5f869d8e631bb5fe8c3d3127738f191a33216e130205f436398c5ec8e80dd8fb1f45e2df6c2a6ae77c7b6eb350e7e16cba8a203fa3b6e470ec3fc6bb07e7577bf25a03176966a710df43942711d92ff4cb51fee61f0fa12243c7b73f24d68dab9a30b5a679ec3633431c800a5ee38df9f34712293a0de96d7426f7c877c032d213e474277d4973d78d8a95f24ddca6d868d1b28ffa8b5a9ffb0fffced0f79340bcff886762d6dbb8094a355ba3412ac720e6d137ac52863afea048f05ed608c42b30465f5b65499403c5c3804faf1578e19c08fbae2e76642913aa4a67a1d48213145200b1e2d", 0xee}, {&(0x7f0000001400)="8e3599b43eeaa0df36399916767c03d744f197c9888f06f116c0b49c80f2f44db0bb30810d11a55fe533c8b5901805e3f0bf124ee091e5c0d6e342b6f9e1262304102bcc", 0x44}], 0x4, &(0x7f00000014c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x401}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}], 0x30}}, {{&(0x7f0000001500)={0xa, 0x4e22, 0x34b7, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000001540)="a49c753bab83589ff76e5ff37694a73ece1471f1bc74ca06fac9f58298d4cc70d8f87ed71752f29c6c30ee88df4013270f6951bd095f8372fdc2e56b2c5cdb07186c2f9708ca823169794ef9dbdd3c91cf2b452d9ca1d505be25df43a7129160fe9aee1c979124e4c188189b75843a64e0c5b7eba6d1ea10c32bd75190b0db629bee034afbc21b964108ebdc5f18f9e37423", 0x92}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000002600)="38a80ecdd650c8ec2dcabd5f6dc1abf44f6766af08be4823aceca462e2d43af7fa552dfddaee7e44559c9f90294b714b3a84170ad148", 0x36}, {&(0x7f0000002640)="7672050e415cf981a284b9c50af57c0d27a8828e77e24d33f1561d2a4c646852cd9fab309075205d7fad007ae79520e390d4d829e28e33eafa326e11cdc7a9785ee9646d3bdad40c6336c2af26bbb40c0ec8c4cdd1b9", 0x56}], 0x4, &(0x7f0000002700)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x33, 0x0, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @tclass={{0x14, 0x29, 0x43, 0x8}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2170}}, @hoplimit={{0x14, 0x29, 0x34, 0x59b3a2e4}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}], 0xb0}}], 0x2, 0x4000010) 1m9.462970326s ago: executing program 4 (id=881): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 62) 1m9.340341103s ago: executing program 1 (id=882): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) close(0x4) bind$packet(r0, &(0x7f0000000000)={0x11, 0x3, 0x1, 0x1, 0x0, 0x6, @random="ee52e7e07522"}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000500)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m8.734766923s ago: executing program 3 (id=883): bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000004000000040000000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0}, 0x50) close(0x3) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0x280, [0x0, 0x200000001700, 0x200000001730, 0x200000001950], 0x0, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/642]}, 0x2fa) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002080)={0x11, 0xc, &(0x7f0000002140)=ANY=[@ANYBLOB="18010000010001000000000000000000850000007500000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000021c0)='GPL\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00(I\x00'/30], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x0, 0x0, &(0x7f0000000740)='syzkaller\x00', 0xb, 0xff6, &(0x7f0000001040)=""/4086, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000d80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0), 0x3a, 0x10, &(0x7f0000000e00), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e40)={r4, 0x10ff, 0x10ff, 0x0, &(0x7f0000000ec0)="f17b85654f877025428d584dffcd", 0x0, 0x100, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000f80)="dec8b3e9a45e0bbbe0ce791cdc00d0bc2b6e3c9039b42647"}, 0x50) socketpair(0x23, 0x6, 0xfffff901, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000002040)=0x9, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501f97305ef7f66845a009f", 0x24) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000900)=0x474c, 0x4) bind$inet(r7, &(0x7f0000000940)={0x2, 0x0, @local}, 0x6f) connect$inet(r7, &(0x7f0000000980)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f00000009c0), 0x800001d, 0x300) 1m8.677070719s ago: executing program 0 (id=884): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x9e, @loopback, 0x23}, 0x1c) sendto$inet(r1, &(0x7f00000000c0)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000380)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="6000000012000103000000feff0d0000020000000000000000000000000000000000000000000000000000000100"/55, @ANYRES32=0x0, @ANYBLOB="0100000000000000ffffffff0000000014000100071010"], 0x60}}, 0x4044804) 1m8.533455559s ago: executing program 4 (id=885): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x76dc, 0x0, 0xfffffff7, 0xfffffffc}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000200)={0x0, 0x2}, 0x8) sendmmsg$sock(r2, &(0x7f0000000240)=[{{&(0x7f00000002c0)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[@txtime={{0x18, 0x1, 0x3d, 0x1000000000002}}], 0x18}}], 0x1, 0x20008855) write(r1, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0xf, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x7ffd}, @broadcast, @broadcast, @from_mac=@broadcast, {0xd, 0x1}, @value=@ver_80211n={0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x35, @void}, 0x1e) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000280)={'wlan0\x00'}) 1m7.863926827s ago: executing program 1 (id=886): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a78000000060a010400240000000000000a0000010900010073797a31000000004c0004802800018007000100637400001c00020005000300010000000800014000000009080002400000000720000180070001006374000014000280080002400000000a08000140000000010900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1m7.712869494s ago: executing program 1 (id=887): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="61000000000000001800128008000100687372000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) close(r2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000002040)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000004010000000000007f"], 0x50) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000002a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r7}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x10, 0xfffffffffffffffd}) socket$netlink(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001cc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0d0027bd7000fddbdf2530000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40) 1m7.66464403s ago: executing program 0 (id=888): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010040000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f00000006c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m7.593987268s ago: executing program 0 (id=889): close(0x4) 1m7.488634119s ago: executing program 2 (id=890): bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000800)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0006801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) connect$can_bcm(0xffffffffffffffff, &(0x7f00000009c0), 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1m7.484382546s ago: executing program 3 (id=891): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000380)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000480)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)='bbr', 0x3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000008c0)="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", 0x144}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000cc0)=0xdf8, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0x7fbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x80) 1m7.380909808s ago: executing program 0 (id=892): mmap(0x0, 0x0, 0xa, 0x50, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000005c0)={0x10, 0x0, 0x1, 0x10000000}, 0xc) write(r2, &(0x7f0000000780)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r2, &(0x7f00000007c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000800)=0x8, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000840)={0x0, 0xea60}, 0x10) write(r2, &(0x7f0000000880)="fb", 0x1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="98115e79", @ANYRES16=r1, @ANYBLOB="00012bbd7000fedbdf2503000000050003007900000005000300c30000000500020007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000004) r3 = socket(0x2b, 0x80801, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000fcffffff000000000946000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000002850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000003c0)="b80a000500000000", &(0x7f0000000400)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x11e) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="640000001900010000000000000000001d0109005000108049000000990d59906040c6226d83b3dd9fa584140a972beb7bb2e6afdd6ee1b52f5b7186508ea84b4900077fd8998d20bae80da358cd54297825c2d1c678d77df25140553e000000ba"], 0x64}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000427bd000180080003000200000000008c13acfd39c95bcb3fe25c16d3856e9f1dc9192a3910ec5a8113dce822c3f528547af75e5a330e6fec5d1df5c5022aae708381abca732a5bf2bc14ae4d65ba64e86fe1cc5c19f2e39d6ed6e72571b125df749d3902d021f25f6aad5f374b91ff7eef9b6d3b5bb3ea9162c847cc9c3d2957193d38a55cbf0f936c94a9809d1ba0c51b5ec7e09966fd8b311cba2cb6a588b534c8f5e9b9fe0bfb8a13d653cc869cc2a458998e3c9a709f12482c1573f9c5bb57aa7b393ea641a3b6e9b80402166e23bb22e8cce100"/228], 0x20}, 0x1, 0x0, 0x0, 0x20000815}, 0x4000) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000000)={0x70, "6496a38454c3cd9de088b2104b11695d84d29c8871bf4d94ed85530d11fd7950b8fb319382f7303d0fcc3c24ae08964f1561ab3baa58e05b08fe8d167f2c5603a2ea7c7a3e4941e608ac590ed7afc0ccd71068506d9008e87c04e475c2bfe1851ff4e35920c2848fdc10fbbfa07b2d139272e8e4a60ad3b8ce206853e1c97641"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="7400000040000901feffffff00000000027c0000040042800c000180060006000806"], 0x74}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) unshare(0x8000400) r8 = socket$inet_udp(0x2, 0x2, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000008c0), 0x4) bind$inet(r8, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x200, @remote, 0x3}}, 0x8, 0x4, 0x5fac, 0x3, 0x20, 0x7, 0x3a}, 0x9c) 1m7.300361135s ago: executing program 4 (id=893): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f00000003c0)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000400)=r2, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000440)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x2, @multicast1}, 0x10) sendmmsg(r3, &(0x7f00000004c0), 0x800001d, 0x300) connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8d}, 0x1c) write$cgroup_subtree(r0, &(0x7f00000005c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x810, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x4800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0xc40) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000980)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket(0x840000000002, 0x3, 0x100) connect$can_bcm(r10, &(0x7f00000009c0), 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000a40)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newtfilter={0x94, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x2e37}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffff7, 0x5, 0x20000000, 0x7, 0x401}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x94}}, 0x0) write$tun(r7, &(0x7f0000000c80)=ANY=[], 0x6e) 1m7.265537881s ago: executing program 3 (id=894): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x31, 0x9, 0x70bd2a, 0x3000000, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x46810}, 0x22000084) 1m7.153105979s ago: executing program 2 (id=896): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e000000040000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000440)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000004c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fddbdf25030000001c000180060005004e20000008000300ac1414bb0600010002000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m6.976056813s ago: executing program 0 (id=897): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) close(0x4) bind$packet(r0, &(0x7f0000000000)={0x11, 0x3, 0x1, 0x1, 0x0, 0x6, @random="ee52e7e07522"}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000500)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m6.889261258s ago: executing program 2 (id=898): r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1001, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"], 0x28}, 0x0) 1m6.757021988s ago: executing program 1 (id=899): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x8, &(0x7f00000001c0)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="0008000000000001000000000000", 0x0, 0xfeff, 0x20000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m6.636302762s ago: executing program 2 (id=900): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010040000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f00000006c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m6.380417571s ago: executing program 3 (id=901): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$rfkill(r0, &(0x7f0000000040)={0x2, 0x5, 0x3, 0x1, 0x1}, 0xffb1) vmsplice(r0, &(0x7f0000000c40)=[{&(0x7f0000001100)="a6", 0x1}], 0x1, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtaction={0x44, 0x32, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x30, 0x1, [@m_xt={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m6.330365417s ago: executing program 2 (id=902): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x5, 0x3100, 0x0, &(0x7f00000003c0), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000c80)={r0, 0xffffffffffffffff, 0x12, 0x0, @val=@tracing={0x0, 0x3}}, 0x20) 1m5.965062748s ago: executing program 1 (id=903): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000600)={0x6, 0x0, 0x6, 0x691}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000640)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)}], 0x1, &(0x7f0000000740)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x49, 0x4bc, 0x2}}], 0x20, 0x40801}, 0x50) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000780)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000007c0)={0x0, 0x6, 0xffcb}, 0x8) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000800)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}, 0xa) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) close(r0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000880)={r0, &(0x7f00000008c0)='\x00', 0x0, &(0x7f0000000900)={@_ha_fsid={[0x2, 0x9]}, {0x8, 0x5, 0x8, 0x7b}}, 0xfb44, &(0x7f0000000940)={@_ha_fsid}, &(0x7f0000000980)=0x5}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f00000009c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000a00)="ab", 0xfffd, 0x2000c8d4, &(0x7f0000000a40)={0x2, 0x4e22, @local}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(0x4) 1m5.899545201s ago: executing program 2 (id=904): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x2, 0xd7, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)=ANY=[], 0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000280)={r2, 0xff, 0x2, 0x7fff, 0x7, 0x8400, 0xffe0, 0x5, {r2, @in={{0x2, 0x4e23, @loopback}}, 0x2, 0x3df05115, 0x7fff, 0x9, 0x7f}}, &(0x7f0000000340)=0xb0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010426bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000400000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x200040cc) 1m5.781098147s ago: executing program 1 (id=905): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x22b7b6683ba65fec, 0x11}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x6}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x178}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x1b, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a00)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a40)={r5, r7, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000b80)=ANY=[], 0x0) setsockopt$inet_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "951c1d0c7e3567e8", "09520d80c3482801562c40d06ce451b2", "b5060d81", "45a38317ec6b0a08"}, 0x28) syz_emit_ethernet(0x32, &(0x7f0000000b40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x6, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x9, 0x100}}}}}}}, 0x0) 1m5.580693372s ago: executing program 0 (id=906): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x51) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000340), 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="340000001100010027bd7046b57d5400fddbdf25", @ANYRES32=0x0, @ANYBLOB="20100000001f04001400030076657468315f766c616e"], 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4004000) 1m5.328609407s ago: executing program 3 (id=907): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newsa={0x14c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x67}, {@in6=@mcast2, 0x4d8, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffff, 0x0, 0x800, 0x1}, {0x3, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x1}, @offload={0xc}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10, 0x80000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000200)={'gre0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x20, 0x10, 0x5, 0x9, {{0x8, 0x4, 0x1, 0x3, 0x20, 0x65, 0x0, 0x3, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xa}, {[@end, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x87, [@multicast2]}]}}}}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x4, 0xf}, 0x50) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x44}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x10, 0x10}}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000ac0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x10}}]}}}]}, 0x40}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000b40)={0x0, 0x0, 0x0}, &(0x7f0000000b80)=0xc) sendmmsg$unix(r7, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0x20, 0x40800}}], 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000c40)={{{@in=@private=0xa010102, @in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4e22, 0x6, 0x4e20, 0x0, 0x2, 0x20, 0x10, 0x32, r6, r9}, {0x0, 0x7, 0x2, 0x0, 0x2, 0x2, 0x280, 0x7}, {0x0, 0x7188, 0xff, 0x4}, 0x8, 0x0, 0x2, 0x0, 0x2}, {{@in=@multicast2, 0x4d2, 0x3c}, 0x8b2b82596f6c9aa5, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3505, 0x5, 0x2, 0x40, 0x9, 0x18926321, 0x1}}, 0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000f40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d40)=@migrate={0x1a8, 0x21, 0x200, 0x70bd25, 0x25dfdbff, {{@in6=@mcast2, @in6=@remote, 0x4e24, 0x1, 0x4e22, 0x1, 0x0, 0x0, 0xa0, 0x2b, r2, r9}, 0x6e6bb9, 0x2}, [@algo_aead={0x127, 0x12, {{'morus1280-avx2\x00'}, 0x6d8, 0xc0, "5ce8dffed2d5b0b5cc228b057bb00957bedd947593a7d72c8d352806c7a27b337a72c95af9296e704a5cebbfc16b6f0091e936a8d48c66f3057f12f5a6fa2ecb098c613a37638da65612ff21017f240618c9e8744016532a89b52fab04c14938c03a712dc472ced3a037f9a49479ba6387110a026ae12b34916673fd6ec96c14366ed8c41bf90bfdfc388e911fffd2653c3a56761104934fe8413a8a67127d3fbb4afd1182e71ed18c03870193378099a0534536102757a6130ba870cb1436ab94ed2a0a100f0c6c925bcd99b12c66dc32948685370d63a0af03b7"}}, @mark={0xc, 0x15, {0x35075c, 0x8}}, @iptfs_pkt_size={0x8, 0x29, 0x9}, @tfcpad={0x8, 0x16, 0x3}, @srcaddr={0x14, 0xd, @in=@local}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20018849}, 0x20004010) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000005c0)=@nat={'nat\x00', 0x1b, 0x5, 0x480, 0x318, 0xb0, 0xffffffff, 0x1e8, 0xb0, 0x3e8, 0x3e8, 0xffffffff, 0x3e8, 0x3e8, 0x5, &(0x7f0000000100), {[{{@ip={@loopback, @local, 0x0, 0xffffffff, 'pim6reg\x00', 'veth1_virt_wifi\x00', {}, {}, 0xff, 0x3, 0xa}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3b76622cd581d07e920b95a92548ceb891983311f425b688a6081cbd6742"}}, {{@uncond, 0x0, 0x100, 0x138, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x4, 0x3, 0x3, 0x5, 0x5], 0x4, 0x4}}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x1, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @port=0x4e22, @icmp_id=0x65}}}}, {{@ip={@remote, @remote, 0x0, 0x0, 'team_slave_1\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x6, 0x3}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x3, 0x1, 0x2}}, @common=@ttl={{0x28}, {0x2, 0xaa}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x13, @ipv6=@private1, @ipv4=@rand_addr=0x64010102, @port=0x4e20, @port=0x4e23}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x11, "61ad"}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xf, @rand_addr=0x64010102, @loopback, @port=0x4e24, @gre_key=0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) 1m4.638347117s ago: executing program 4 (id=908): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0xa, 0x4e20, 0x7c, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="30000000000300002900000004000000840230040030", @ANYRES64=r1, @ANYRES16=r0], 0x30}, 0x800) 1m4.517045277s ago: executing program 4 (id=909): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="61000000000000001800128008000100687372000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) close(r2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000002040)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000004010000000000007f"], 0x50) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000002a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r7}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x10, 0xfffffffffffffffd}) socket$netlink(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001cc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0d0027bd7000fddbdf2530000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x40) 0s ago: executing program 32 (id=906): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x51) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000340), 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="340000001100010027bd7046b57d5400fddbdf25", @ANYRES32=0x0, @ANYBLOB="20100000001f04001400030076657468315f766c616e"], 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4004000) kernel console output (not intermixed with test programs): anon:5429 inactive_anon:0 isolated_anon:0 [ 129.694088][ T6799] active_file:0 inactive_file:43253 isolated_file:0 [ 129.694088][ T6799] unevictable:0 dirty:101 writeback:0 [ 129.694088][ T6799] slab_reclaimable:10724 slab_unreclaimable:96970 [ 129.694088][ T6799] mapped:30551 shmem:572 pagetables:1187 [ 129.694088][ T6799] sec_pagetables:0 bounce:0 [ 129.694088][ T6799] kernel_misc_reclaimable:0 [ 129.694088][ T6799] free:1287144 free_pcp:10345 free_cma:0 [ 129.694150][ T6799] Node 0 active_anon:21716kB inactive_anon:0kB active_file:0kB inactive_file:172812kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122204kB dirty:404kB writeback:0kB shmem:2288kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12432kB pagetables:4580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 129.694213][ T6799] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 129.694270][ T6799] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.694344][ T6799] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 129.694387][ T6799] Node 0 DMA32 free:1190508kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:21716kB inactive_anon:0kB active_file:0kB inactive_file:172812kB unevictable:0kB writepending:404kB zspages:0kB present:3129332kB managed:2523116kB mlocked:0kB bounce:0kB free_pcp:41376kB local_pcp:21312kB free_cma:0kB [ 129.695917][ T6799] lowmem_reserve[]: 0 0 1 1 1 [ 129.695977][ T6799] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 129.832019][ T6799] lowmem_reserve[]: 0 0 0 0 0 [ 129.832154][ T6799] Node 1 Normal free:3942708kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.832322][ T6799] lowmem_reserve[]: 0 0 0 0 0 [ 129.832426][ T6799] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 129.832893][ T6799] Node 0 DMA32: 45*4kB (UM) 23*8kB (M) 14*16kB (UME) 9*32kB (ME) 11*64kB (UME) 6*128kB (M) 6*256kB (UM) 5*512kB (ME) 2*1024kB (M) 3*2048kB (M) 287*4096kB (M) = 1190188kB [ 129.833101][ T6799] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 129.833229][ T6799] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 4*16kB (UM) 11*32kB (UM) 6*64kB (UM) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3942708kB [ 129.833778][ T6799] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 129.833820][ T6799] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 129.836013][ T6799] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 129.836226][ T6799] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 129.836277][ T6799] 43821 total pagecache pages [ 129.836316][ T6799] 0 pages in swap cache [ 129.836346][ T6799] Free swap = 124996kB [ 129.836368][ T6799] Total swap = 124996kB [ 129.836396][ T6799] 2097051 pages RAM [ 129.836417][ T6799] 0 pages HighMem/MovableOnly [ 129.836437][ T6799] 434241 pages reserved [ 129.836459][ T6799] 0 pages cma reserved [ 130.433318][ T6801] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.434235][ T6801] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.567274][ T6801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.594794][ T6801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.787694][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.787748][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.787785][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.787824][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.995337][ T6809] netlink: 28 bytes leftover after parsing attributes in process `syz.3.317'. [ 130.995659][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.317'. [ 131.038628][ T6808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.776268][ T6762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 131.954888][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.322'. [ 132.071842][ T6828] FAULT_INJECTION: forcing a failure. [ 132.071842][ T6828] name failslab, interval 1, probability 0, space 0, times 0 [ 132.071876][ T6828] CPU: 1 UID: 0 PID: 6828 Comm: syz.2.323 Not tainted syzkaller #0 PREEMPT(full) [ 132.071901][ T6828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 132.071914][ T6828] Call Trace: [ 132.071922][ T6828] [ 132.071932][ T6828] dump_stack_lvl+0xe8/0x150 [ 132.071973][ T6828] should_fail_ex+0x3eb/0x540 [ 132.072006][ T6828] should_failslab+0xa8/0x100 [ 132.072043][ T6828] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 132.072074][ T6828] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 132.072114][ T6828] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 132.072148][ T6828] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 132.072180][ T6828] krealloc_node_align_noprof+0x19a/0x390 [ 132.072209][ T6828] ? rcu_is_watching+0x16/0xb0 [ 132.072247][ T6828] kvrealloc_node_align_noprof+0x7b/0xf0 [ 132.072281][ T6828] add_expr+0x2fd/0x6e0 [ 132.072306][ T6828] ? __kvmalloc_node_noprof+0x340/0x820 [ 132.072335][ T6828] ? bpf_init_scev+0x167/0x460 [ 132.072368][ T6828] bpf_init_scev+0x1a2/0x460 [ 132.072396][ T6828] bpf_check+0x2fd8/0x34e0 [ 132.072433][ T6828] ? ktime_get_with_offset+0x93/0x2d0 [ 132.072464][ T6828] ? ktime_get_with_offset+0x93/0x2d0 [ 132.072496][ T6828] ? __pfx_bpf_check+0x10/0x10 [ 132.072523][ T6828] ? bpf_obj_name_cpy+0x194/0x1e0 [ 132.072557][ T6828] bpf_prog_load+0x14da/0x1c60 [ 132.072594][ T6828] ? __pfx_bpf_prog_load+0x10/0x10 [ 132.072635][ T6828] ? __might_fault+0xaf/0x130 [ 132.072666][ T6828] __sys_bpf+0xd86/0xe00 [ 132.072698][ T6828] ? __pfx___sys_bpf+0x10/0x10 [ 132.072733][ T6828] ? __fget_files+0x2a/0x420 [ 132.072781][ T6828] ? ksys_write+0x242/0x270 [ 132.072813][ T6828] ? __pfx_ksys_write+0x10/0x10 [ 132.072849][ T6828] __x64_sys_bpf+0xba/0xd0 [ 132.072884][ T6828] do_syscall_64+0x166/0x520 [ 132.072910][ T6828] ? trace_irq_disable+0x3b/0x140 [ 132.072940][ T6828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.072963][ T6828] ? clear_bhb_loop+0x70/0xc0 [ 132.072992][ T6828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.073014][ T6828] RIP: 0033:0x7f103fb9fb19 [ 132.073035][ T6828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.073053][ T6828] RSP: 002b:00007f103ddf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 132.073078][ T6828] RAX: ffffffffffffffda RBX: 00007f103fe25fa0 RCX: 00007f103fb9fb19 [ 132.073101][ T6828] RDX: 0000000000000094 RSI: 0000200000002c80 RDI: 0000000000000005 [ 132.073115][ T6828] RBP: 00007f103ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 132.073129][ T6828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 132.073142][ T6828] R13: 00007f103fe26038 R14: 00007f103fe25fa0 R15: 00007ffcdff69098 [ 132.073183][ T6828] [ 132.416852][ T6831] netlink: 20 bytes leftover after parsing attributes in process `syz.3.324'. [ 132.423651][ T6831] FAULT_INJECTION: forcing a failure. [ 132.423651][ T6831] name failslab, interval 1, probability 0, space 0, times 0 [ 132.423684][ T6831] CPU: 0 UID: 0 PID: 6831 Comm: syz.3.324 Not tainted syzkaller #0 PREEMPT(full) [ 132.423712][ T6831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 132.423726][ T6831] Call Trace: [ 132.423733][ T6831] [ 132.423742][ T6831] dump_stack_lvl+0xe8/0x150 [ 132.423783][ T6831] should_fail_ex+0x3eb/0x540 [ 132.423816][ T6831] should_failslab+0xa8/0x100 [ 132.423849][ T6831] ? skb_clone+0x212/0x3a0 [ 132.423874][ T6831] kmem_cache_alloc_noprof+0x9c/0x600 [ 132.423903][ T6831] ? skb_clone+0x212/0x3a0 [ 132.423935][ T6831] skb_clone+0x212/0x3a0 [ 132.423964][ T6831] __netlink_deliver_tap+0x355/0x6e0 [ 132.424007][ T6831] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.424039][ T6831] netlink_deliver_tap+0x19c/0x1b0 [ 132.424080][ T6831] netlink_sendskb+0x68/0x140 [ 132.424109][ T6831] netlink_rcv_skb+0x2a4/0x4a0 [ 132.424143][ T6831] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 132.424167][ T6831] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 132.424215][ T6831] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.424247][ T6831] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.424286][ T6831] netlink_unicast+0x8ef/0xa80 [ 132.424334][ T6831] netlink_sendmsg+0x7f0/0xb20 [ 132.424374][ T6831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.424411][ T6831] ? aa_sock_msg_perm+0x144/0x210 [ 132.424439][ T6831] ? apparmor_socket_sendmsg+0x18b/0x360 [ 132.424475][ T6831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.424505][ T6831] sock_sendmsg_nosec+0x14e/0x190 [ 132.424538][ T6831] ____sys_sendmsg+0x54e/0x850 [ 132.424569][ T6831] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.424602][ T6831] ? import_iovec+0x73/0xa0 [ 132.424635][ T6831] ___sys_sendmsg+0x2a5/0x360 [ 132.424656][ T6831] ? __lock_acquire+0x747/0x2de0 [ 132.424691][ T6831] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.424757][ T6831] ? __fget_files+0x3a2/0x420 [ 132.424783][ T6831] ? __fget_files+0x2a/0x420 [ 132.424820][ T6831] __x64_sys_sendmsg+0x1b1/0x290 [ 132.424849][ T6831] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 132.424898][ T6831] do_syscall_64+0x166/0x520 [ 132.424924][ T6831] ? trace_irq_disable+0x3b/0x140 [ 132.424953][ T6831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.424975][ T6831] ? clear_bhb_loop+0x70/0xc0 [ 132.425002][ T6831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.425023][ T6831] RIP: 0033:0x7f64c879fb19 [ 132.425067][ T6831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.425085][ T6831] RSP: 002b:00007f64c9650028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.425107][ T6831] RAX: ffffffffffffffda RBX: 00007f64c8a25fa0 RCX: 00007f64c879fb19 [ 132.425123][ T6831] RDX: 00000000200040cc RSI: 0000200000000080 RDI: 0000000000000003 [ 132.425136][ T6831] RBP: 00007f64c9650090 R08: 0000000000000000 R09: 0000000000000000 [ 132.425149][ T6831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.425162][ T6831] R13: 00007f64c8a26038 R14: 00007f64c8a25fa0 R15: 00007ffdd45ff8c8 [ 132.425198][ T6831] [ 133.009878][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.009948][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.081079][ T6854] IPVS: set_ctl: invalid protocol: 46 172.20.20.63:20001 [ 133.101156][ T6857] IPVS: set_ctl: invalid protocol: 46 172.20.20.63:20001 [ 133.294648][ T6873] FAULT_INJECTION: forcing a failure. [ 133.294648][ T6873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.294682][ T6873] CPU: 1 UID: 0 PID: 6873 Comm: syz.1.337 Not tainted syzkaller #0 PREEMPT(full) [ 133.294707][ T6873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 133.294720][ T6873] Call Trace: [ 133.294729][ T6873] [ 133.294738][ T6873] dump_stack_lvl+0xe8/0x150 [ 133.294781][ T6873] should_fail_ex+0x3eb/0x540 [ 133.294814][ T6873] _copy_to_user+0x31/0xb0 [ 133.294845][ T6873] bpf_verifier_vlog+0x496/0x900 [ 133.294883][ T6873] bpf_log+0x113/0x1a0 [ 133.294906][ T6873] ? bpf_compute_loops+0x2dd9/0x3e80 [ 133.294927][ T6873] ? trace_kmalloc+0x2a/0xf0 [ 133.294956][ T6873] ? __pfx_bpf_log+0x10/0x10 [ 133.294980][ T6873] ? __kvmalloc_node_noprof+0x340/0x820 [ 133.295010][ T6873] ? bpf_compute_loops+0x2dd9/0x3e80 [ 133.295032][ T6873] ? bpf_compute_loops+0x2dd9/0x3e80 [ 133.295062][ T6873] bpf_compute_loops+0x34cf/0x3e80 [ 133.295112][ T6873] bpf_check+0x2ce7/0x34e0 [ 133.295149][ T6873] ? ktime_get_with_offset+0x93/0x2d0 [ 133.295180][ T6873] ? ktime_get_with_offset+0x93/0x2d0 [ 133.295216][ T6873] ? __pfx_bpf_check+0x10/0x10 [ 133.295243][ T6873] ? bpf_obj_name_cpy+0x194/0x1e0 [ 133.295275][ T6873] bpf_prog_load+0x14da/0x1c60 [ 133.295312][ T6873] ? __pfx_bpf_prog_load+0x10/0x10 [ 133.295352][ T6873] ? __might_fault+0xaf/0x130 [ 133.295383][ T6873] __sys_bpf+0xd86/0xe00 [ 133.295414][ T6873] ? __pfx___sys_bpf+0x10/0x10 [ 133.295449][ T6873] ? __fget_files+0x2a/0x420 [ 133.295504][ T6873] ? ksys_write+0x242/0x270 [ 133.295535][ T6873] ? __pfx_ksys_write+0x10/0x10 [ 133.295571][ T6873] __x64_sys_bpf+0xba/0xd0 [ 133.295606][ T6873] do_syscall_64+0x166/0x520 [ 133.295632][ T6873] ? trace_irq_disable+0x3b/0x140 [ 133.295661][ T6873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.295685][ T6873] ? clear_bhb_loop+0x70/0xc0 [ 133.295712][ T6873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.295734][ T6873] RIP: 0033:0x7fa33eb9fb19 [ 133.295755][ T6873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.295774][ T6873] RSP: 002b:00007fa33fb2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 133.295799][ T6873] RAX: ffffffffffffffda RBX: 00007fa33ee25fa0 RCX: 00007fa33eb9fb19 [ 133.295815][ T6873] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 133.295829][ T6873] RBP: 00007fa33fb2c090 R08: 0000000000000000 R09: 0000000000000000 [ 133.295843][ T6873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 133.295854][ T6873] R13: 00007fa33ee26038 R14: 00007fa33ee25fa0 R15: 00007ffeb7d7e568 [ 133.295888][ T6873] [ 133.354089][ T6870] syzkaller0: entered promiscuous mode [ 133.355956][ T6870] syzkaller0: entered allmulticast mode [ 133.730036][ T6879] FAULT_INJECTION: forcing a failure. [ 133.730036][ T6879] name failslab, interval 1, probability 0, space 0, times 0 [ 133.730070][ T6879] CPU: 1 UID: 0 PID: 6879 Comm: syz.1.340 Not tainted syzkaller #0 PREEMPT(full) [ 133.730094][ T6879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 133.730107][ T6879] Call Trace: [ 133.730116][ T6879] [ 133.730125][ T6879] dump_stack_lvl+0xe8/0x150 [ 133.730167][ T6879] should_fail_ex+0x3eb/0x540 [ 133.730200][ T6879] should_failslab+0xa8/0x100 [ 133.730236][ T6879] __kmalloc_cache_noprof+0x9e/0x600 [ 133.730265][ T6879] ? bpf_init_scev+0x54/0x460 [ 133.730287][ T6879] ? bpf_init_scev+0x54/0x460 [ 133.730318][ T6879] bpf_init_scev+0x54/0x460 [ 133.730339][ T6879] ? bpf_check+0x2d6b/0x34e0 [ 133.730366][ T6879] bpf_check+0x2fd8/0x34e0 [ 133.730402][ T6879] ? ktime_get_with_offset+0x93/0x2d0 [ 133.730434][ T6879] ? ktime_get_with_offset+0x93/0x2d0 [ 133.730466][ T6879] ? __pfx_bpf_check+0x10/0x10 [ 133.730493][ T6879] ? bpf_obj_name_cpy+0x194/0x1e0 [ 133.730526][ T6879] bpf_prog_load+0x14da/0x1c60 [ 133.730563][ T6879] ? __pfx_bpf_prog_load+0x10/0x10 [ 133.730609][ T6879] ? __might_fault+0xaf/0x130 [ 133.730640][ T6879] __sys_bpf+0xd86/0xe00 [ 133.730671][ T6879] ? __pfx___sys_bpf+0x10/0x10 [ 133.730705][ T6879] ? __fget_files+0x2a/0x420 [ 133.730752][ T6879] ? ksys_write+0x242/0x270 [ 133.730785][ T6879] ? __pfx_ksys_write+0x10/0x10 [ 133.730821][ T6879] __x64_sys_bpf+0xba/0xd0 [ 133.730856][ T6879] do_syscall_64+0x166/0x520 [ 133.730882][ T6879] ? trace_irq_disable+0x3b/0x140 [ 133.730912][ T6879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.730935][ T6879] ? clear_bhb_loop+0x70/0xc0 [ 133.730971][ T6879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.730993][ T6879] RIP: 0033:0x7fa33eb9fb19 [ 133.731014][ T6879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.731032][ T6879] RSP: 002b:00007fa33fb2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 133.731054][ T6879] RAX: ffffffffffffffda RBX: 00007fa33ee25fa0 RCX: 00007fa33eb9fb19 [ 133.731070][ T6879] RDX: 0000000000000094 RSI: 0000200000001600 RDI: 0000000000000005 [ 133.731084][ T6879] RBP: 00007fa33fb2c090 R08: 0000000000000000 R09: 0000000000000000 [ 133.731097][ T6879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 133.731110][ T6879] R13: 00007fa33ee26038 R14: 00007fa33ee25fa0 R15: 00007ffeb7d7e568 [ 133.731145][ T6879] [ 133.824506][ T6878] Dead loop on virtual device lo (net 38), fix it urgently! [ 133.825113][ T6878] Dead loop on virtual device lo (net 38), fix it urgently! [ 133.825605][ T6878] Dead loop on virtual device lo (net 38), fix it urgently! [ 133.852611][ T6878] Dead loop on virtual device lo (net 38), fix it urgently! [ 133.853226][ T6878] Dead loop on virtual device lo (net 38), fix it urgently! [ 133.853722][ T6878] Dead loop on virtual device lo (net 38), fix it urgently! [ 133.872404][ T6878] Dead loop on virtual device lo (net 38), fix it urgently! [ 133.872649][ T6878] Dead loop on virtual device lo (net 38), fix it urgently! [ 133.872836][ T6878] Dead loop on virtual device lo (net 38), fix it urgently! [ 133.873325][ T6878] Dead loop on virtual device lo (net 38), fix it urgently! [ 134.090992][ T6882] syz_tun: entered allmulticast mode [ 134.095339][ T6876] syz.2.338 (6876) used greatest stack depth: 16448 bytes left [ 134.120165][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.341'. [ 134.138514][ T6882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.341'. [ 134.157868][ T6886] FAULT_INJECTION: forcing a failure. [ 134.157868][ T6886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.157899][ T6886] CPU: 1 UID: 0 PID: 6886 Comm: syz.3.342 Not tainted syzkaller #0 PREEMPT(full) [ 134.157929][ T6886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 134.157942][ T6886] Call Trace: [ 134.157950][ T6886] [ 134.157958][ T6886] dump_stack_lvl+0xe8/0x150 [ 134.158001][ T6886] should_fail_ex+0x3eb/0x540 [ 134.158033][ T6886] _copy_from_user+0x2d/0xb0 [ 134.158062][ T6886] btf_new_fd+0x2df/0x8f0 [ 134.158089][ T6886] __sys_bpf+0xda7/0xe00 [ 134.158120][ T6886] ? __pfx___sys_bpf+0x10/0x10 [ 134.158154][ T6886] ? __fget_files+0x2a/0x420 [ 134.158202][ T6886] ? ksys_write+0x242/0x270 [ 134.158233][ T6886] ? __pfx_ksys_write+0x10/0x10 [ 134.158266][ T6886] __x64_sys_bpf+0xba/0xd0 [ 134.158299][ T6886] do_syscall_64+0x166/0x520 [ 134.158324][ T6886] ? trace_irq_disable+0x3b/0x140 [ 134.158354][ T6886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.158377][ T6886] ? clear_bhb_loop+0x70/0xc0 [ 134.158404][ T6886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.158426][ T6886] RIP: 0033:0x7f64c879fb19 [ 134.158447][ T6886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.158465][ T6886] RSP: 002b:00007f64c9650028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 134.158489][ T6886] RAX: ffffffffffffffda RBX: 00007f64c8a25fa0 RCX: 00007f64c879fb19 [ 134.158504][ T6886] RDX: 0000000000000028 RSI: 0000200000001780 RDI: 0000000000000012 [ 134.158517][ T6886] RBP: 00007f64c9650090 R08: 0000000000000000 R09: 0000000000000000 [ 134.158531][ T6886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.158543][ T6886] R13: 00007f64c8a26038 R14: 00007f64c8a25fa0 R15: 00007ffdd45ff8c8 [ 134.158579][ T6886] [ 134.415176][ T6882] dvmrp6: entered allmulticast mode [ 134.515946][ T6880] syz_tun: left allmulticast mode [ 135.320789][ T6931] syz_tun: entered allmulticast mode [ 135.400447][ T6930] syz_tun: left allmulticast mode [ 135.539850][ T6935] batman_adv: batadv0: Adding interface: syzkaller0 [ 135.539872][ T6935] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.539906][ T6935] batman_adv: batadv0: Interface activated: syzkaller0 [ 135.593690][ T6933] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 135.657832][ T6933] batman_adv: batadv0: Removing interface: syzkaller0 [ 136.335369][ T6963] netlink: 48 bytes leftover after parsing attributes in process `syz.4.370'. [ 136.839373][ T6974] tipc: Enabling of bearer rejected, failed to enable media [ 136.911106][ T6991] netlink: 36 bytes leftover after parsing attributes in process `syz.3.375'. [ 137.316235][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'. [ 137.341244][ T7012] netlink: 'syz.1.381': attribute type 31 has an invalid length. [ 137.578713][ T7023] ÿÿÿÿÿÿ: renamed from team_slave_1 (while UP) [ 137.650464][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.389'. [ 137.650493][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.389'. [ 137.650508][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.389'. [ 138.660764][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.405'. [ 138.864996][ T7074] FAULT_INJECTION: forcing a failure. [ 138.864996][ T7074] name failslab, interval 1, probability 0, space 0, times 0 [ 138.865030][ T7074] CPU: 0 UID: 0 PID: 7074 Comm: syz.0.408 Not tainted syzkaller #0 PREEMPT(full) [ 138.865054][ T7074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 138.865075][ T7074] Call Trace: [ 138.865084][ T7074] [ 138.865093][ T7074] dump_stack_lvl+0xe8/0x150 [ 138.865135][ T7074] should_fail_ex+0x3eb/0x540 [ 138.865172][ T7074] should_failslab+0xa8/0x100 [ 138.865204][ T7074] ? skb_clone+0x212/0x3a0 [ 138.865230][ T7074] kmem_cache_alloc_noprof+0x9c/0x600 [ 138.865252][ T7074] ? lock_acquire+0x115/0x350 [ 138.865280][ T7074] ? skb_clone+0x212/0x3a0 [ 138.865312][ T7074] skb_clone+0x212/0x3a0 [ 138.865335][ T7074] ? dev_queue_xmit_nit+0x270/0xac0 [ 138.865360][ T7074] dev_queue_xmit_nit+0x28d/0xac0 [ 138.865381][ T7074] ? dev_queue_xmit_nit+0x2d/0xac0 [ 138.865411][ T7074] dev_hard_start_xmit+0x1c1/0x830 [ 138.865438][ T7074] ? validate_xmit_skb+0xecb/0x1a60 [ 138.865479][ T7074] __dev_queue_xmit+0x14d1/0x3920 [ 138.865510][ T7074] ? __dev_queue_xmit+0x29b/0x3920 [ 138.865543][ T7074] ? __might_fault+0xaf/0x130 [ 138.865571][ T7074] ? _copy_from_iter+0x21b/0x1680 [ 138.865598][ T7074] ? __pfx___dev_queue_xmit+0x10/0x10 [ 138.865631][ T7074] ? __pfx__copy_from_iter+0x10/0x10 [ 138.865664][ T7074] ? packet_parse_headers+0x2b2/0x790 [ 138.865696][ T7074] ? packet_parse_headers+0x5b1/0x790 [ 138.865730][ T7074] ? __pfx_packet_parse_headers+0x10/0x10 [ 138.865761][ T7074] ? packet_xmit+0x68/0x330 [ 138.865787][ T7074] ? skb_put+0x112/0x210 [ 138.865809][ T7074] packet_sendmsg+0x406f/0x5330 [ 138.865852][ T7074] ? process_measurement+0x7b2/0x1c10 [ 138.865881][ T7074] ? up_write+0x19d/0x4a0 [ 138.865910][ T7074] ? __lock_acquire+0x747/0x2de0 [ 138.865948][ T7074] ? __pfx_packet_sendmsg+0x10/0x10 [ 138.865969][ T7074] ? aa_sk_perm+0x6ff/0x8f0 [ 138.865994][ T7074] ? __lock_acquire+0x747/0x2de0 [ 138.866023][ T7074] ? lockdep_count_forward_deps+0x100/0x170 [ 138.866046][ T7074] ? __pfx_aa_sk_perm+0x10/0x10 [ 138.866086][ T7074] ? aa_sock_msg_perm+0x144/0x210 [ 138.866111][ T7074] ? apparmor_socket_sendmsg+0x98/0x360 [ 138.866144][ T7074] ? __pfx_packet_sendmsg+0x10/0x10 [ 138.866169][ T7074] sock_sendmsg_nosec+0x14e/0x190 [ 138.866202][ T7074] ____sys_sendmsg+0x54e/0x850 [ 138.866232][ T7074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.866264][ T7074] ? import_iovec+0x73/0xa0 [ 138.866296][ T7074] ___sys_sendmsg+0x2a5/0x360 [ 138.866316][ T7074] ? __lock_acquire+0x747/0x2de0 [ 138.866349][ T7074] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.866379][ T7074] ? kstrtouint+0x6e/0xe0 [ 138.866443][ T7074] ? __fget_files+0x3a2/0x420 [ 138.866469][ T7074] ? __fget_files+0x2a/0x420 [ 138.866508][ T7074] __sys_sendmmsg+0x273/0x4e0 [ 138.866539][ T7074] ? __pfx___sys_sendmmsg+0x10/0x10 [ 138.866575][ T7074] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 138.866620][ T7074] ? ksys_write+0x242/0x270 [ 138.866652][ T7074] ? __pfx_ksys_write+0x10/0x10 [ 138.866690][ T7074] __x64_sys_sendmmsg+0xa0/0xc0 [ 138.866717][ T7074] do_syscall_64+0x166/0x520 [ 138.866742][ T7074] ? trace_irq_disable+0x3b/0x140 [ 138.866773][ T7074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.866796][ T7074] ? clear_bhb_loop+0x70/0xc0 [ 138.866824][ T7074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.866846][ T7074] RIP: 0033:0x7faeb819fb19 [ 138.866867][ T7074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.866886][ T7074] RSP: 002b:00007faeb903a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 138.866909][ T7074] RAX: ffffffffffffffda RBX: 00007faeb8425fa0 RCX: 00007faeb819fb19 [ 138.866926][ T7074] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000005 [ 138.866939][ T7074] RBP: 00007faeb903a090 R08: 0000000000000000 R09: 0000000000000000 [ 138.866953][ T7074] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 138.866965][ T7074] R13: 00007faeb8426038 R14: 00007faeb8425fa0 R15: 00007ffe71830f68 [ 138.867001][ T7074] [ 139.055728][ T7081] FAULT_INJECTION: forcing a failure. [ 139.055728][ T7081] name failslab, interval 1, probability 0, space 0, times 0 [ 139.055813][ T7081] CPU: 1 UID: 0 PID: 7081 Comm: syz.3.410 Not tainted syzkaller #0 PREEMPT(full) [ 139.055875][ T7081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 139.055918][ T7081] Call Trace: [ 139.055938][ T7081] [ 139.055960][ T7081] dump_stack_lvl+0xe8/0x150 [ 139.056068][ T7081] should_fail_ex+0x3eb/0x540 [ 139.056153][ T7081] should_failslab+0xa8/0x100 [ 139.056239][ T7081] __kvmalloc_node_noprof+0x171/0x820 [ 139.056336][ T7081] ? bpf_compute_idoms+0x307/0x1940 [ 139.056390][ T7081] ? bpf_compute_idoms+0x307/0x1940 [ 139.056471][ T7081] bpf_compute_idoms+0x307/0x1940 [ 139.056566][ T7081] ? __pfx_bpf_compute_subprog_ret_regs+0x10/0x10 [ 139.056638][ T7081] ? prepare_subprog_args+0x40f/0x450 [ 139.056731][ T7081] bpf_check+0x2cc3/0x34e0 [ 139.056826][ T7081] ? ktime_get_with_offset+0x93/0x2d0 [ 139.056901][ T7081] ? ktime_get_with_offset+0x93/0x2d0 [ 139.056968][ T7081] ? __pfx_bpf_check+0x10/0x10 [ 139.056993][ T7081] ? bpf_obj_name_cpy+0x194/0x1e0 [ 139.057026][ T7081] bpf_prog_load+0x14da/0x1c60 [ 139.057125][ T7081] ? __pfx_bpf_prog_load+0x10/0x10 [ 139.057253][ T7081] ? __might_fault+0xaf/0x130 [ 139.057331][ T7081] __sys_bpf+0xd86/0xe00 [ 139.057405][ T7081] ? __pfx___sys_bpf+0x10/0x10 [ 139.057497][ T7081] ? __fget_files+0x2a/0x420 [ 139.057613][ T7081] ? ksys_write+0x242/0x270 [ 139.057695][ T7081] ? __pfx_ksys_write+0x10/0x10 [ 139.057782][ T7081] __x64_sys_bpf+0xba/0xd0 [ 139.057875][ T7081] do_syscall_64+0x166/0x520 [ 139.057938][ T7081] ? trace_irq_disable+0x3b/0x140 [ 139.058020][ T7081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.058069][ T7081] ? clear_bhb_loop+0x70/0xc0 [ 139.058135][ T7081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.058194][ T7081] RIP: 0033:0x7f64c879fb19 [ 139.058247][ T7081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.058291][ T7081] RSP: 002b:00007f64c9650028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 139.058352][ T7081] RAX: ffffffffffffffda RBX: 00007f64c8a25fa0 RCX: 00007f64c879fb19 [ 139.058393][ T7081] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 139.058426][ T7081] RBP: 00007f64c9650090 R08: 0000000000000000 R09: 0000000000000000 [ 139.058459][ T7081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 139.058492][ T7081] R13: 00007f64c8a26038 R14: 00007f64c8a25fa0 R15: 00007ffdd45ff8c8 [ 139.058605][ T7081] [ 139.382721][ T7083] syzkaller0: entered promiscuous mode [ 139.382796][ T7083] syzkaller0: entered allmulticast mode [ 139.514678][ T7078] tipc: Started in network mode [ 139.514789][ T7078] tipc: Node identity 3a7e9822163e, cluster identity 4711 [ 139.570639][ T7078] tipc: Enabled bearer , priority 0 [ 139.588853][ T7076] tipc: Resetting bearer [ 139.662018][ T7076] tipc: Disabling bearer [ 139.713547][ T7092] net_ratelimit: 44 callbacks suppressed [ 139.713569][ T7092] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 139.764378][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.413'. [ 139.799746][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.413'. [ 140.043700][ T7106] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 140.059212][ T7106] netlink: 'syz.0.419': attribute type 3 has an invalid length. [ 140.059237][ T7106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.419'. [ 140.059257][ T7106] netlink: 'syz.0.419': attribute type 3 has an invalid length. [ 140.059270][ T7106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.419'. [ 140.114941][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'. [ 140.385272][ T101] IPVS: starting estimator thread 0... [ 140.476259][ T7116] IPVS: using max 27 ests per chain, 64800 per kthread [ 140.868986][ T7124] tipc: Started in network mode [ 140.869035][ T7124] tipc: Node identity fe6c0c099df2, cluster identity 4711 [ 140.869349][ T7124] tipc: Enabled bearer , priority 0 [ 140.870196][ T7124] syzkaller0: entered promiscuous mode [ 140.870218][ T7124] syzkaller0: entered allmulticast mode [ 140.961384][ T7123] tipc: Resetting bearer [ 141.035991][ T7123] tipc: Disabling bearer [ 141.754953][ T7163] Cannot find map_set index 2 as target [ 142.064922][ T7182] netlink: 'syz.3.439': attribute type 1 has an invalid length. [ 142.135748][ T7182] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.149606][ T7188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.153341][ T7184] C: renamed from veth1_to_team (while UP) [ 142.527565][ T7184] netlink: 'syz.3.439': attribute type 4 has an invalid length. [ 142.527589][ T7184] __nla_validate_parse: 1 callbacks suppressed [ 142.527601][ T7184] netlink: 108 bytes leftover after parsing attributes in process `syz.3.439'. [ 142.528133][ T7184] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 143.058456][ T7211] block nbd0: Unsupported socket: should be TCP or UNIX. [ 143.441880][ T7222] x_tables: unsorted underflow at hook 1 [ 143.807163][ T7241] netlink: 10 bytes leftover after parsing attributes in process `syz.3.458'. [ 144.048821][ T7255] gre2: entered allmulticast mode [ 144.197883][ T7255] netlink: 308 bytes leftover after parsing attributes in process `syz.2.463'. [ 144.972927][ T7285] block nbd0: not configured, cannot reconfigure [ 145.007618][ T7286] FAULT_INJECTION: forcing a failure. [ 145.007618][ T7286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.007650][ T7286] CPU: 0 UID: 0 PID: 7286 Comm: syz.3.475 Not tainted syzkaller #0 PREEMPT(full) [ 145.007675][ T7286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 145.007688][ T7286] Call Trace: [ 145.007696][ T7286] [ 145.007705][ T7286] dump_stack_lvl+0xe8/0x150 [ 145.007748][ T7286] should_fail_ex+0x3eb/0x540 [ 145.007782][ T7286] _copy_from_user+0x2d/0xb0 [ 145.007811][ T7286] __sys_bpf+0x2e7/0xe00 [ 145.007844][ T7286] ? __pfx___sys_bpf+0x10/0x10 [ 145.007880][ T7286] ? __fget_files+0x2a/0x420 [ 145.007927][ T7286] ? ksys_write+0x242/0x270 [ 145.007960][ T7286] ? __pfx_ksys_write+0x10/0x10 [ 145.007995][ T7286] __x64_sys_bpf+0xba/0xd0 [ 145.008032][ T7286] do_syscall_64+0x166/0x520 [ 145.008058][ T7286] ? trace_irq_disable+0x3b/0x140 [ 145.008088][ T7286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.008111][ T7286] ? clear_bhb_loop+0x70/0xc0 [ 145.008139][ T7286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.008162][ T7286] RIP: 0033:0x7f64c879fb19 [ 145.008183][ T7286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.008201][ T7286] RSP: 002b:00007f64c9650028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 145.008224][ T7286] RAX: ffffffffffffffda RBX: 00007f64c8a25fa0 RCX: 00007f64c879fb19 [ 145.008241][ T7286] RDX: 0000000000000050 RSI: 0000200000000480 RDI: 000000000000000a [ 145.008255][ T7286] RBP: 00007f64c9650090 R08: 0000000000000000 R09: 0000000000000000 [ 145.008268][ T7286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.008281][ T7286] R13: 00007f64c8a26038 R14: 00007f64c8a25fa0 R15: 00007ffdd45ff8c8 [ 145.008318][ T7286] [ 145.187314][ T7280] netlink: 48 bytes leftover after parsing attributes in process `syz.2.473'. [ 145.257607][ T7291] netlink: 56 bytes leftover after parsing attributes in process `syz.1.477'. [ 145.358877][ T7297] netlink: 132 bytes leftover after parsing attributes in process `syz.3.479'. [ 145.433604][ T7299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.480'. [ 145.433643][ T7299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.480'. [ 145.472383][ T7299] erspan0: entered promiscuous mode [ 145.475671][ T7299] gretap0: entered promiscuous mode [ 145.753277][ T7314] sctp: [Deprecated]: syz.3.484 (pid 7314) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.753277][ T7314] Use struct sctp_sack_info instead [ 145.754087][ T7311] bond0: entered promiscuous mode [ 145.754829][ T7311] bond_slave_0: entered promiscuous mode [ 145.755149][ T7311] bond_slave_1: entered promiscuous mode [ 145.795685][ T7311] batadv0: entered promiscuous mode [ 145.809607][ T7311] debugfs: 'hsr1' already exists in 'hsr' [ 145.809634][ T7311] Cannot create hsr debugfs directory [ 145.813884][ T7311] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 146.016656][ T7321] netlink: 104 bytes leftover after parsing attributes in process `syz.4.488'. [ 146.119833][ T7331] netlink: 'syz.0.492': attribute type 4 has an invalid length. [ 146.343762][ T7339] netlink: 28 bytes leftover after parsing attributes in process `syz.0.495'. [ 146.563267][ T7348] ip_tables: iptables: counters copy to user failed while replacing table [ 146.919021][ T7367] FAULT_INJECTION: forcing a failure. [ 146.919021][ T7367] name failslab, interval 1, probability 0, space 0, times 0 [ 146.919072][ T7367] CPU: 0 UID: 0 PID: 7367 Comm: syz.3.505 Not tainted syzkaller #0 PREEMPT(full) [ 146.919097][ T7367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 146.919111][ T7367] Call Trace: [ 146.919119][ T7367] [ 146.919129][ T7367] dump_stack_lvl+0xe8/0x150 [ 146.919171][ T7367] should_fail_ex+0x3eb/0x540 [ 146.919204][ T7367] should_failslab+0xa8/0x100 [ 146.919240][ T7367] __kvmalloc_node_noprof+0x171/0x820 [ 146.919273][ T7367] ? __kvmalloc_node_noprof+0x340/0x820 [ 146.919301][ T7367] ? bpf_compute_loops+0x137/0x3e80 [ 146.919325][ T7367] ? bpf_compute_loops+0x137/0x3e80 [ 146.919355][ T7367] bpf_compute_loops+0x137/0x3e80 [ 146.919378][ T7367] ? bpf_compute_idoms+0x18b5/0x1940 [ 146.919426][ T7367] bpf_check+0x2ce7/0x34e0 [ 146.919463][ T7367] ? ktime_get_with_offset+0x93/0x2d0 [ 146.919495][ T7367] ? ktime_get_with_offset+0x93/0x2d0 [ 146.919527][ T7367] ? __pfx_bpf_check+0x10/0x10 [ 146.919553][ T7367] ? bpf_obj_name_cpy+0x194/0x1e0 [ 146.919586][ T7367] bpf_prog_load+0x14da/0x1c60 [ 146.919623][ T7367] ? __pfx_bpf_prog_load+0x10/0x10 [ 146.919663][ T7367] ? __might_fault+0xaf/0x130 [ 146.919694][ T7367] __sys_bpf+0xd86/0xe00 [ 146.919725][ T7367] ? __pfx___sys_bpf+0x10/0x10 [ 146.919760][ T7367] ? __fget_files+0x2a/0x420 [ 146.919807][ T7367] ? ksys_write+0x242/0x270 [ 146.919846][ T7367] ? __pfx_ksys_write+0x10/0x10 [ 146.919881][ T7367] __x64_sys_bpf+0xba/0xd0 [ 146.919917][ T7367] do_syscall_64+0x166/0x520 [ 146.919942][ T7367] ? trace_irq_disable+0x3b/0x140 [ 146.919973][ T7367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.919996][ T7367] ? clear_bhb_loop+0x70/0xc0 [ 146.920024][ T7367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.920047][ T7367] RIP: 0033:0x7f64c879fb19 [ 146.920068][ T7367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.920087][ T7367] RSP: 002b:00007f64c9650028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 146.920111][ T7367] RAX: ffffffffffffffda RBX: 00007f64c8a25fa0 RCX: 00007f64c879fb19 [ 146.920128][ T7367] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 146.920142][ T7367] RBP: 00007f64c9650090 R08: 0000000000000000 R09: 0000000000000000 [ 146.920155][ T7367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 146.920168][ T7367] R13: 00007f64c8a26038 R14: 00007f64c8a25fa0 R15: 00007ffdd45ff8c8 [ 146.920205][ T7367] [ 147.490662][ T7385] netlink: 'syz.0.512': attribute type 1 has an invalid length. [ 147.599106][ T7389] __nla_validate_parse: 6 callbacks suppressed [ 147.599131][ T7389] netlink: 292 bytes leftover after parsing attributes in process `syz.1.510'. [ 147.659939][ T7394] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 148.133730][ T7412] FAULT_INJECTION: forcing a failure. [ 148.133730][ T7412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.133764][ T7412] CPU: 0 UID: 0 PID: 7412 Comm: syz.1.523 Not tainted syzkaller #0 PREEMPT(full) [ 148.133789][ T7412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 148.133803][ T7412] Call Trace: [ 148.133811][ T7412] [ 148.133821][ T7412] dump_stack_lvl+0xe8/0x150 [ 148.133862][ T7412] should_fail_ex+0x3eb/0x540 [ 148.133895][ T7412] _copy_from_user+0x2d/0xb0 [ 148.133926][ T7412] btf_new_fd+0x2df/0x8f0 [ 148.133958][ T7412] __sys_bpf+0xda7/0xe00 [ 148.133991][ T7412] ? __pfx___sys_bpf+0x10/0x10 [ 148.134027][ T7412] ? __fget_files+0x2a/0x420 [ 148.134075][ T7412] ? ksys_write+0x242/0x270 [ 148.134108][ T7412] ? __pfx_ksys_write+0x10/0x10 [ 148.134144][ T7412] __x64_sys_bpf+0xba/0xd0 [ 148.134180][ T7412] do_syscall_64+0x166/0x520 [ 148.134205][ T7412] ? trace_irq_disable+0x3b/0x140 [ 148.134236][ T7412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.134259][ T7412] ? clear_bhb_loop+0x70/0xc0 [ 148.134287][ T7412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.134309][ T7412] RIP: 0033:0x7fa33eb9fb19 [ 148.134337][ T7412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.134355][ T7412] RSP: 002b:00007fa33fb2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.134380][ T7412] RAX: ffffffffffffffda RBX: 00007fa33ee25fa0 RCX: 00007fa33eb9fb19 [ 148.134396][ T7412] RDX: 0000000000000028 RSI: 0000200000001780 RDI: 0000000000000012 [ 148.134410][ T7412] RBP: 00007fa33fb2c090 R08: 0000000000000000 R09: 0000000000000000 [ 148.134424][ T7412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.134437][ T7412] R13: 00007fa33ee26038 R14: 00007fa33ee25fa0 R15: 00007ffeb7d7e568 [ 148.134474][ T7412] [ 148.743329][ T7420] tipc: Started in network mode [ 148.743365][ T7420] tipc: Node identity 46b4572e7108, cluster identity 4711 [ 148.743538][ T7420] tipc: Enabled bearer , priority 0 [ 148.744899][ T7420] syzkaller0: entered promiscuous mode [ 148.744919][ T7420] syzkaller0: entered allmulticast mode [ 148.785818][ T7420] tipc: Resetting bearer [ 148.868141][ T7424] tipc: Resetting bearer [ 148.893367][ T7424] tipc: Disabling bearer [ 149.187839][ T7432] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 149.705759][ T7451] netlink: 'syz.1.539': attribute type 4 has an invalid length. [ 149.716888][ T7451] netlink: 'syz.1.539': attribute type 4 has an invalid length. [ 150.553840][ T7473] FAULT_INJECTION: forcing a failure. [ 150.553840][ T7473] name failslab, interval 1, probability 0, space 0, times 0 [ 150.553875][ T7473] CPU: 0 UID: 0 PID: 7473 Comm: syz.2.545 Not tainted syzkaller #0 PREEMPT(full) [ 150.553899][ T7473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 150.553912][ T7473] Call Trace: [ 150.553920][ T7473] [ 150.553930][ T7473] dump_stack_lvl+0xe8/0x150 [ 150.553971][ T7473] should_fail_ex+0x3eb/0x540 [ 150.554005][ T7473] should_failslab+0xa8/0x100 [ 150.554040][ T7473] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 150.554069][ T7473] ? __pfx_stack_trace_save+0x10/0x10 [ 150.554096][ T7473] ? aa_label_sk_perm+0x532/0x6e0 [ 150.554129][ T7473] ? rds_rm_size+0x413/0x760 [ 150.554156][ T7473] ? rds_rm_size+0x413/0x760 [ 150.554187][ T7473] ? rds_rm_size+0x413/0x760 [ 150.554217][ T7473] krealloc_node_align_noprof+0x19a/0x390 [ 150.554246][ T7473] ? reacquire_held_locks+0x117/0x1a0 [ 150.554278][ T7473] ? release_sock+0x2f/0x260 [ 150.554314][ T7473] rds_rm_size+0x413/0x760 [ 150.554361][ T7473] rds_sendmsg+0xcbc/0x21e0 [ 150.554408][ T7473] ? __pfx_rds_sendmsg+0x10/0x10 [ 150.554442][ T7473] ? lock_acquire+0x115/0x350 [ 150.554469][ T7473] ? __pfx_aa_sk_perm+0x10/0x10 [ 150.554515][ T7473] ? aa_sock_msg_perm+0x144/0x210 [ 150.554549][ T7473] ? apparmor_socket_sendmsg+0x98/0x360 [ 150.554584][ T7473] ? __pfx_rds_sendmsg+0x10/0x10 [ 150.554610][ T7473] sock_sendmsg_nosec+0x14e/0x190 [ 150.554644][ T7473] ____sys_sendmsg+0x54e/0x850 [ 150.554674][ T7473] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.554710][ T7473] ? import_iovec+0x73/0xa0 [ 150.554746][ T7473] ___sys_sendmsg+0x2a5/0x360 [ 150.554768][ T7473] ? __lock_acquire+0x747/0x2de0 [ 150.554802][ T7473] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.554870][ T7473] ? __fget_files+0x3a2/0x420 [ 150.554896][ T7473] ? __fget_files+0x2a/0x420 [ 150.554934][ T7473] __x64_sys_sendmsg+0x1b1/0x290 [ 150.554961][ T7473] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 150.555012][ T7473] do_syscall_64+0x166/0x520 [ 150.555038][ T7473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.555061][ T7473] ? clear_bhb_loop+0x70/0xc0 [ 150.555089][ T7473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.555112][ T7473] RIP: 0033:0x7f103fb9fb19 [ 150.555133][ T7473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.555152][ T7473] RSP: 002b:00007f103ddf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.555175][ T7473] RAX: ffffffffffffffda RBX: 00007f103fe25fa0 RCX: 00007f103fb9fb19 [ 150.555192][ T7473] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000006 [ 150.555206][ T7473] RBP: 00007f103ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 150.555219][ T7473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.555232][ T7473] R13: 00007f103fe26038 R14: 00007f103fe25fa0 R15: 00007ffcdff69098 [ 150.555269][ T7473] [ 150.937602][ T7478] netlink: 84 bytes leftover after parsing attributes in process `syz.4.547'. [ 151.060453][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.547'. [ 151.588422][ T7493] netlink: 104 bytes leftover after parsing attributes in process `syz.3.553'. [ 151.962047][ T7500] FAULT_INJECTION: forcing a failure. [ 151.962047][ T7500] name failslab, interval 1, probability 0, space 0, times 0 [ 151.962079][ T7500] CPU: 1 UID: 0 PID: 7500 Comm: syz.3.555 Not tainted syzkaller #0 PREEMPT(full) [ 151.962104][ T7500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 151.962117][ T7500] Call Trace: [ 151.962125][ T7500] [ 151.962135][ T7500] dump_stack_lvl+0xe8/0x150 [ 151.962176][ T7500] should_fail_ex+0x3eb/0x540 [ 151.962210][ T7500] should_failslab+0xa8/0x100 [ 151.962246][ T7500] __kmalloc_noprof+0xf9/0x710 [ 151.962275][ T7500] ? security_sk_alloc+0x52/0x360 [ 151.962301][ T7500] ? security_sk_alloc+0x52/0x360 [ 151.962336][ T7500] security_sk_alloc+0x52/0x360 [ 151.962376][ T7500] sk_prot_alloc+0x101/0x210 [ 151.962397][ T7500] ? sk_alloc+0x27/0x390 [ 151.962421][ T7500] sk_alloc+0x3a/0x390 [ 151.962447][ T7500] bpf_prog_test_run_skb+0x3a6/0x22c0 [ 151.962480][ T7500] ? lock_acquire+0x115/0x350 [ 151.962519][ T7500] ? __fget_files+0x2a/0x420 [ 151.962550][ T7500] ? __fget_files+0x2a/0x420 [ 151.962576][ T7500] ? __fget_files+0x3a2/0x420 [ 151.962601][ T7500] ? __fget_files+0x2a/0x420 [ 151.962635][ T7500] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 151.962669][ T7500] bpf_prog_test_run+0x2c5/0x340 [ 151.962697][ T7500] __sys_bpf+0xb1e/0xe00 [ 151.962729][ T7500] ? __pfx___sys_bpf+0x10/0x10 [ 151.962764][ T7500] ? __fget_files+0x2a/0x420 [ 151.962812][ T7500] ? ksys_write+0x242/0x270 [ 151.962844][ T7500] ? __pfx_ksys_write+0x10/0x10 [ 151.962881][ T7500] __x64_sys_bpf+0xba/0xd0 [ 151.962916][ T7500] do_syscall_64+0x166/0x520 [ 151.962942][ T7500] ? trace_irq_disable+0x3b/0x140 [ 151.962973][ T7500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.962996][ T7500] ? clear_bhb_loop+0x70/0xc0 [ 151.963024][ T7500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.963046][ T7500] RIP: 0033:0x7f64c879fb19 [ 151.963067][ T7500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.963085][ T7500] RSP: 002b:00007f64c9650028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 151.963109][ T7500] RAX: ffffffffffffffda RBX: 00007f64c8a25fa0 RCX: 00007f64c879fb19 [ 151.963125][ T7500] RDX: 0000000000000050 RSI: 0000200000000580 RDI: 000000000000000a [ 151.963139][ T7500] RBP: 00007f64c9650090 R08: 0000000000000000 R09: 0000000000000000 [ 151.963153][ T7500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.963166][ T7500] R13: 00007f64c8a26038 R14: 00007f64c8a25fa0 R15: 00007ffdd45ff8c8 [ 151.963203][ T7500] [ 153.205864][ T7524] FAULT_INJECTION: forcing a failure. [ 153.205864][ T7524] name failslab, interval 1, probability 0, space 0, times 0 [ 153.205896][ T7524] CPU: 1 UID: 0 PID: 7524 Comm: syz.4.564 Not tainted syzkaller #0 PREEMPT(full) [ 153.205934][ T7524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 153.205951][ T7524] Call Trace: [ 153.205959][ T7524] [ 153.205969][ T7524] dump_stack_lvl+0xe8/0x150 [ 153.206014][ T7524] should_fail_ex+0x3eb/0x540 [ 153.206046][ T7524] should_failslab+0xa8/0x100 [ 153.206082][ T7524] __kmalloc_noprof+0xf9/0x710 [ 153.206108][ T7524] ? __netlink_lookup+0x82e/0x8f0 [ 153.206141][ T7524] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 153.206165][ T7524] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 153.206199][ T7524] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 153.206235][ T7524] genl_start+0x180/0x6d0 [ 153.206276][ T7524] __netlink_dump_start+0x442/0x7b0 [ 153.206315][ T7524] genl_family_rcv_msg_dumpit+0x213/0x310 [ 153.206345][ T7524] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 153.206381][ T7524] ? __pfx_genl_start+0x10/0x10 [ 153.206402][ T7524] ? __pfx_genl_dumpit+0x10/0x10 [ 153.206425][ T7524] ? __pfx_genl_done+0x10/0x10 [ 153.206454][ T7524] ? bpf_lsm_capable+0x9/0x20 [ 153.206474][ T7524] ? security_capable+0x7e/0x2c0 [ 153.206516][ T7524] genl_rcv_msg+0x5e1/0x7a0 [ 153.206549][ T7524] ? __pfx_genl_rcv_msg+0x10/0x10 [ 153.206573][ T7524] ? __pfx_nl802154_dump_llsec_key+0x10/0x10 [ 153.206618][ T7524] netlink_rcv_skb+0x226/0x4a0 [ 153.206651][ T7524] ? __pfx_genl_rcv_msg+0x10/0x10 [ 153.206678][ T7524] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 153.206727][ T7524] ? down_read+0x2b9/0x320 [ 153.206762][ T7524] genl_rcv+0x28/0x40 [ 153.206785][ T7524] netlink_unicast+0x8ef/0xa80 [ 153.206835][ T7524] netlink_sendmsg+0x7f0/0xb20 [ 153.206875][ T7524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.206911][ T7524] ? aa_sock_msg_perm+0x144/0x210 [ 153.206940][ T7524] ? apparmor_socket_sendmsg+0x98/0x360 [ 153.206976][ T7524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.207007][ T7524] sock_sendmsg_nosec+0x14e/0x190 [ 153.207041][ T7524] ____sys_sendmsg+0x54e/0x850 [ 153.207072][ T7524] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.207107][ T7524] ? import_iovec+0x73/0xa0 [ 153.207139][ T7524] ___sys_sendmsg+0x2a5/0x360 [ 153.207161][ T7524] ? __lock_acquire+0x747/0x2de0 [ 153.207196][ T7524] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.207271][ T7524] ? __fget_files+0x3a2/0x420 [ 153.207298][ T7524] ? __fget_files+0x2a/0x420 [ 153.207336][ T7524] __x64_sys_sendmsg+0x1b1/0x290 [ 153.207365][ T7524] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 153.207415][ T7524] do_syscall_64+0x166/0x520 [ 153.207440][ T7524] ? trace_irq_disable+0x3b/0x140 [ 153.207471][ T7524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.207494][ T7524] ? clear_bhb_loop+0x70/0xc0 [ 153.207522][ T7524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.207544][ T7524] RIP: 0033:0x7fe9aa59fb19 [ 153.207565][ T7524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.207583][ T7524] RSP: 002b:00007fe9ab385028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.207607][ T7524] RAX: ffffffffffffffda RBX: 00007fe9aa825fa0 RCX: 00007fe9aa59fb19 [ 153.207624][ T7524] RDX: 000000000400c014 RSI: 0000200000000800 RDI: 0000000000000004 [ 153.207638][ T7524] RBP: 00007fe9ab385090 R08: 0000000000000000 R09: 0000000000000000 [ 153.207652][ T7524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.207665][ T7524] R13: 00007fe9aa826038 R14: 00007fe9aa825fa0 R15: 00007ffe15db73b8 [ 153.207702][ T7524] [ 153.844981][ T7538] netlink: 'syz.1.567': attribute type 10 has an invalid length. [ 153.849001][ T7539] netlink: 84 bytes leftover after parsing attributes in process `syz.0.569'. [ 153.872971][ T7538] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 153.884482][ T7538] team0: Port device netdevsim1 added [ 154.196932][ T7548] netlink: 16 bytes leftover after parsing attributes in process `syz.3.572'. [ 154.242452][ T7549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.572'. [ 154.555805][ T7549] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.555942][ T7549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.556371][ T7549] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.556505][ T7549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.672032][ T7562] netlink: 32 bytes leftover after parsing attributes in process `syz.1.574'. [ 154.923154][ T7559] tipc: Enabling of bearer rejected, failed to enable media [ 155.021401][ T7567] netlink: 196 bytes leftover after parsing attributes in process `syz.1.576'. [ 155.164241][ T7574] netlink: 36 bytes leftover after parsing attributes in process `syz.0.579'. [ 155.254910][ T7575] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 155.330416][ T7579] FAULT_INJECTION: forcing a failure. [ 155.330416][ T7579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.330449][ T7579] CPU: 0 UID: 0 PID: 7579 Comm: syz.4.580 Not tainted syzkaller #0 PREEMPT(full) [ 155.330474][ T7579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 155.330487][ T7579] Call Trace: [ 155.330496][ T7579] [ 155.330506][ T7579] dump_stack_lvl+0xe8/0x150 [ 155.330548][ T7579] should_fail_ex+0x3eb/0x540 [ 155.330581][ T7579] _copy_from_user+0x2d/0xb0 [ 155.330611][ T7579] kstrtouint_from_user+0xd6/0x180 [ 155.330639][ T7579] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 155.330673][ T7579] ? lock_acquire+0x115/0x350 [ 155.330707][ T7579] proc_fail_nth_write+0x8e/0x210 [ 155.330744][ T7579] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 155.330793][ T7579] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 155.330826][ T7579] vfs_write+0x296/0xba0 [ 155.330864][ T7579] ? __pfx_vfs_write+0x10/0x10 [ 155.330895][ T7579] ? __fget_files+0x2a/0x420 [ 155.330920][ T7579] ? __fget_files+0x3a2/0x420 [ 155.330945][ T7579] ? __fget_files+0x2a/0x420 [ 155.330977][ T7579] ? fdget+0x1ac/0x250 [ 155.331012][ T7579] ksys_write+0x150/0x270 [ 155.331045][ T7579] ? __pfx_ksys_write+0x10/0x10 [ 155.331098][ T7579] do_syscall_64+0x166/0x520 [ 155.331125][ T7579] ? trace_irq_disable+0x3b/0x140 [ 155.331156][ T7579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.331179][ T7579] ? clear_bhb_loop+0x70/0xc0 [ 155.331208][ T7579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.331230][ T7579] RIP: 0033:0x7fe9aa56034e [ 155.331251][ T7579] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 155.331269][ T7579] RSP: 002b:00007fe9ab384fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 155.331293][ T7579] RAX: ffffffffffffffda RBX: 00007fe9ab3856c0 RCX: 00007fe9aa56034e [ 155.331309][ T7579] RDX: 0000000000000001 RSI: 00007fe9ab3850a0 RDI: 0000000000000006 [ 155.331323][ T7579] RBP: 00007fe9ab385090 R08: 0000000000000000 R09: 0000000000000000 [ 155.331336][ T7579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.331348][ T7579] R13: 00007fe9aa826038 R14: 00007fe9aa825fa0 R15: 00007ffe15db73b8 [ 155.331386][ T7579] [ 156.015119][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 156.015320][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 156.037335][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 156.037538][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 156.382547][ T7615] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 156.382566][ T7615] IPv6: NLM_F_CREATE should be set when creating new route [ 156.382655][ T7615] IPv6: NLM_F_CREATE should be set when creating new route [ 156.610367][ T7622] FAULT_INJECTION: forcing a failure. [ 156.610367][ T7622] name failslab, interval 1, probability 0, space 0, times 0 [ 156.610398][ T7622] CPU: 1 UID: 0 PID: 7622 Comm: syz.2.590 Not tainted syzkaller #0 PREEMPT(full) [ 156.610452][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 156.610466][ T7622] Call Trace: [ 156.610475][ T7622] [ 156.610485][ T7622] dump_stack_lvl+0xe8/0x150 [ 156.610536][ T7622] should_fail_ex+0x3eb/0x540 [ 156.610570][ T7622] should_failslab+0xa8/0x100 [ 156.610606][ T7622] __kmalloc_cache_noprof+0x9e/0x600 [ 156.610633][ T7622] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 156.610659][ T7622] ? __request_module+0x2d0/0x630 [ 156.610678][ T7622] ? __request_module+0x2d0/0x630 [ 156.610707][ T7622] __request_module+0x2d0/0x630 [ 156.610732][ T7622] ? rtnl_link_ops_get+0x23/0x250 [ 156.610759][ T7622] ? __pfx___request_module+0x10/0x10 [ 156.610795][ T7622] ? rtnl_link_ops_get+0x23/0x250 [ 156.610818][ T7622] ? rtnl_link_ops_get+0x23/0x250 [ 156.610844][ T7622] ? rtnl_link_ops_get+0x215/0x250 [ 156.610873][ T7622] rtnl_newlink+0x66c/0x1c30 [ 156.610896][ T7622] ? __lock_acquire+0x730/0x2de0 [ 156.610929][ T7622] ? kasan_save_track+0x4f/0x80 [ 156.610956][ T7622] ? kasan_save_track+0x3e/0x80 [ 156.610981][ T7622] ? kasan_save_free_info+0x40/0x50 [ 156.611001][ T7622] ? __kasan_slab_free+0x5c/0x80 [ 156.611030][ T7622] ? __pfx_rtnl_newlink+0x10/0x10 [ 156.611048][ T7622] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 156.611076][ T7622] ? netlink_deliver_tap+0x19c/0x1b0 [ 156.611102][ T7622] ? netlink_unicast+0x8c1/0xa80 [ 156.611126][ T7622] ? netlink_sendmsg+0x7f0/0xb20 [ 156.611154][ T7622] ? sock_sendmsg_nosec+0x14e/0x190 [ 156.611181][ T7622] ? ____sys_sendmsg+0x54e/0x850 [ 156.611204][ T7622] ? ___sys_sendmsg+0x2a5/0x360 [ 156.611225][ T7622] ? __x64_sys_sendmsg+0x1b1/0x290 [ 156.611246][ T7622] ? do_syscall_64+0x166/0x520 [ 156.611270][ T7622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.611331][ T7622] ? kasan_quarantine_put+0xbb/0x1f0 [ 156.611359][ T7622] ? lockdep_hardirqs_on+0x7b/0x110 [ 156.611386][ T7622] ? nlmon_xmit+0xb0/0x100 [ 156.611409][ T7622] ? kmem_cache_free+0x182/0x650 [ 156.611443][ T7622] ? __lock_acquire+0x747/0x2de0 [ 156.611477][ T7622] ? __pfx_hook_capable+0x10/0x10 [ 156.611497][ T7622] ? __dev_queue_xmit+0x29b/0x3920 [ 156.611535][ T7622] ? __pfx_hook_capable+0x10/0x10 [ 156.611556][ T7622] ? lockdep_hardirqs_on+0x7b/0x110 [ 156.611607][ T7622] ? __pfx_rtnl_newlink+0x10/0x10 [ 156.611627][ T7622] rtnetlink_rcv_msg+0x802/0xc00 [ 156.611653][ T7622] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 156.611674][ T7622] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 156.611700][ T7622] ? __copy_skb_header+0xa3/0x4a0 [ 156.611727][ T7622] ? __asan_memcpy+0x40/0x70 [ 156.611761][ T7622] netlink_rcv_skb+0x226/0x4a0 [ 156.611795][ T7622] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 156.611820][ T7622] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 156.611867][ T7622] ? netlink_deliver_tap+0x2e/0x1b0 [ 156.611898][ T7622] ? netlink_deliver_tap+0x2e/0x1b0 [ 156.611937][ T7622] netlink_unicast+0x8ef/0xa80 [ 156.611987][ T7622] netlink_sendmsg+0x7f0/0xb20 [ 156.612026][ T7622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.612063][ T7622] ? aa_sock_msg_perm+0x144/0x210 [ 156.612092][ T7622] ? apparmor_socket_sendmsg+0x98/0x360 [ 156.612127][ T7622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.612158][ T7622] sock_sendmsg_nosec+0x14e/0x190 [ 156.612192][ T7622] ____sys_sendmsg+0x54e/0x850 [ 156.612222][ T7622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.612258][ T7622] ? import_iovec+0x73/0xa0 [ 156.612290][ T7622] ___sys_sendmsg+0x2a5/0x360 [ 156.612312][ T7622] ? __lock_acquire+0x747/0x2de0 [ 156.612345][ T7622] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.612411][ T7622] ? __fget_files+0x3a2/0x420 [ 156.612437][ T7622] ? __fget_files+0x2a/0x420 [ 156.612475][ T7622] __x64_sys_sendmsg+0x1b1/0x290 [ 156.612504][ T7622] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 156.612560][ T7622] do_syscall_64+0x166/0x520 [ 156.612585][ T7622] ? trace_irq_disable+0x3b/0x140 [ 156.612616][ T7622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.612639][ T7622] ? clear_bhb_loop+0x70/0xc0 [ 156.612667][ T7622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.612691][ T7622] RIP: 0033:0x7f103fb9fb19 [ 156.612711][ T7622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.612731][ T7622] RSP: 002b:00007f103ddf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.612755][ T7622] RAX: ffffffffffffffda RBX: 00007f103fe25fa0 RCX: 00007f103fb9fb19 [ 156.612772][ T7622] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 156.612787][ T7622] RBP: 00007f103ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 156.612801][ T7622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.612814][ T7622] R13: 00007f103fe26038 R14: 00007f103fe25fa0 R15: 00007ffcdff69098 [ 156.612851][ T7622] [ 157.397534][ T7636] FAULT_INJECTION: forcing a failure. [ 157.397534][ T7636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.397569][ T7636] CPU: 1 UID: 0 PID: 7636 Comm: syz.0.595 Not tainted syzkaller #0 PREEMPT(full) [ 157.397594][ T7636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 157.397607][ T7636] Call Trace: [ 157.397615][ T7636] [ 157.397625][ T7636] dump_stack_lvl+0xe8/0x150 [ 157.397666][ T7636] should_fail_ex+0x3eb/0x540 [ 157.397700][ T7636] _copy_from_user+0x2d/0xb0 [ 157.397730][ T7636] ___sys_sendmsg+0x1c6/0x360 [ 157.397752][ T7636] ? __lock_acquire+0x747/0x2de0 [ 157.397787][ T7636] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.397852][ T7636] ? __fget_files+0x3a2/0x420 [ 157.397882][ T7636] ? __fget_files+0x2a/0x420 [ 157.397920][ T7636] __x64_sys_sendmsg+0x1b1/0x290 [ 157.397947][ T7636] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.397996][ T7636] do_syscall_64+0x166/0x520 [ 157.398022][ T7636] ? trace_irq_disable+0x3b/0x140 [ 157.398053][ T7636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.398077][ T7636] ? clear_bhb_loop+0x70/0xc0 [ 157.398105][ T7636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.398128][ T7636] RIP: 0033:0x7faeb819fb19 [ 157.398149][ T7636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.398169][ T7636] RSP: 002b:00007faeb903a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.398193][ T7636] RAX: ffffffffffffffda RBX: 00007faeb8425fa0 RCX: 00007faeb819fb19 [ 157.398210][ T7636] RDX: 0000000004000080 RSI: 0000200000000300 RDI: 0000000000000006 [ 157.398225][ T7636] RBP: 00007faeb903a090 R08: 0000000000000000 R09: 0000000000000000 [ 157.398240][ T7636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.398253][ T7636] R13: 00007faeb8426038 R14: 00007faeb8425fa0 R15: 00007ffe71830f68 [ 157.398289][ T7636] [ 157.782929][ T7647] ip_tables: iptables: counters copy to user failed while replacing table [ 157.803495][ T7647] syzkaller1: entered promiscuous mode [ 157.803520][ T7647] syzkaller1: entered allmulticast mode [ 158.390814][ T7658] pim6reg1: entered promiscuous mode [ 158.390838][ T7658] pim6reg1: entered allmulticast mode [ 158.533127][ T7667] syz_tun: entered allmulticast mode [ 158.546882][ T7665] syz_tun: left allmulticast mode [ 158.578438][ T7671] FAULT_INJECTION: forcing a failure. [ 158.578438][ T7671] name failslab, interval 1, probability 0, space 0, times 0 [ 158.578470][ T7671] CPU: 1 UID: 0 PID: 7671 Comm: syz.2.607 Not tainted syzkaller #0 PREEMPT(full) [ 158.578491][ T7671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 158.578503][ T7671] Call Trace: [ 158.578510][ T7671] [ 158.578523][ T7671] dump_stack_lvl+0xe8/0x150 [ 158.578564][ T7671] should_fail_ex+0x3eb/0x540 [ 158.578596][ T7671] should_failslab+0xa8/0x100 [ 158.578629][ T7671] __kvmalloc_node_noprof+0x171/0x820 [ 158.578658][ T7671] ? __kvmalloc_node_noprof+0x340/0x820 [ 158.578682][ T7671] ? bpf_compute_idoms+0x307/0x1940 [ 158.578703][ T7671] ? bpf_compute_idoms+0x307/0x1940 [ 158.578731][ T7671] bpf_compute_idoms+0x307/0x1940 [ 158.578762][ T7671] ? __pfx_bpf_compute_subprog_ret_regs+0x10/0x10 [ 158.578785][ T7671] ? prepare_subprog_args+0x40f/0x450 [ 158.578817][ T7671] bpf_check+0x2cc3/0x34e0 [ 158.578851][ T7671] ? ktime_get_with_offset+0x93/0x2d0 [ 158.578879][ T7671] ? ktime_get_with_offset+0x93/0x2d0 [ 158.578910][ T7671] ? __pfx_bpf_check+0x10/0x10 [ 158.578935][ T7671] ? bpf_obj_name_cpy+0x194/0x1e0 [ 158.578963][ T7671] bpf_prog_load+0x14da/0x1c60 [ 158.578997][ T7671] ? __pfx_bpf_prog_load+0x10/0x10 [ 158.579033][ T7671] ? __might_fault+0xaf/0x130 [ 158.579063][ T7671] __sys_bpf+0xd86/0xe00 [ 158.579092][ T7671] ? __pfx___sys_bpf+0x10/0x10 [ 158.579125][ T7671] ? __fget_files+0x2a/0x420 [ 158.579171][ T7671] ? ksys_write+0x242/0x270 [ 158.579199][ T7671] ? __pfx_ksys_write+0x10/0x10 [ 158.579229][ T7671] __x64_sys_bpf+0xba/0xd0 [ 158.579263][ T7671] do_syscall_64+0x166/0x520 [ 158.579288][ T7671] ? trace_irq_disable+0x3b/0x140 [ 158.579327][ T7671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.579350][ T7671] ? clear_bhb_loop+0x70/0xc0 [ 158.579377][ T7671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.579398][ T7671] RIP: 0033:0x7f103fb9fb19 [ 158.579415][ T7671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.579432][ T7671] RSP: 002b:00007f103ddf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 158.579453][ T7671] RAX: ffffffffffffffda RBX: 00007f103fe25fa0 RCX: 00007f103fb9fb19 [ 158.579468][ T7671] RDX: 0000000000000094 RSI: 0000200000000580 RDI: 0000000000000005 [ 158.579481][ T7671] RBP: 00007f103ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 158.579494][ T7671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 158.579506][ T7671] R13: 00007f103fe26038 R14: 00007f103fe25fa0 R15: 00007ffcdff69098 [ 158.579540][ T7671] [ 159.025589][ T7677] netlink: 'syz.3.608': attribute type 46 has an invalid length. [ 159.398221][ T7703] FAULT_INJECTION: forcing a failure. [ 159.398221][ T7703] name failslab, interval 1, probability 0, space 0, times 0 [ 159.398263][ T7703] CPU: 0 UID: 0 PID: 7703 Comm: syz.2.618 Not tainted syzkaller #0 PREEMPT(full) [ 159.398288][ T7703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 159.398301][ T7703] Call Trace: [ 159.398310][ T7703] [ 159.398319][ T7703] dump_stack_lvl+0xe8/0x150 [ 159.398361][ T7703] should_fail_ex+0x3eb/0x540 [ 159.398396][ T7703] should_failslab+0xa8/0x100 [ 159.398432][ T7703] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 159.398464][ T7703] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 159.398493][ T7703] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 159.398527][ T7703] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 159.398560][ T7703] krealloc_node_align_noprof+0x19a/0x390 [ 159.398589][ T7703] ? rcu_is_watching+0x16/0xb0 [ 159.398630][ T7703] kvrealloc_node_align_noprof+0x7b/0xf0 [ 159.398665][ T7703] add_expr+0x2fd/0x6e0 [ 159.398689][ T7703] ? __kvmalloc_node_noprof+0x340/0x820 [ 159.398718][ T7703] ? bpf_init_scev+0x167/0x460 [ 159.398750][ T7703] bpf_init_scev+0x1a2/0x460 [ 159.398778][ T7703] bpf_check+0x2fd8/0x34e0 [ 159.398815][ T7703] ? ktime_get_with_offset+0x93/0x2d0 [ 159.398846][ T7703] ? ktime_get_with_offset+0x93/0x2d0 [ 159.398878][ T7703] ? __pfx_bpf_check+0x10/0x10 [ 159.398908][ T7703] ? bpf_obj_name_cpy+0x194/0x1e0 [ 159.398942][ T7703] bpf_prog_load+0x14da/0x1c60 [ 159.398979][ T7703] ? __pfx_bpf_prog_load+0x10/0x10 [ 159.399020][ T7703] ? __might_fault+0xaf/0x130 [ 159.399051][ T7703] __sys_bpf+0xd86/0xe00 [ 159.399083][ T7703] ? __pfx___sys_bpf+0x10/0x10 [ 159.399119][ T7703] ? __fget_files+0x2a/0x420 [ 159.399167][ T7703] ? ksys_write+0x242/0x270 [ 159.399199][ T7703] ? __pfx_ksys_write+0x10/0x10 [ 159.399241][ T7703] __x64_sys_bpf+0xba/0xd0 [ 159.399277][ T7703] do_syscall_64+0x166/0x520 [ 159.399302][ T7703] ? trace_irq_disable+0x3b/0x140 [ 159.399333][ T7703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.399357][ T7703] ? clear_bhb_loop+0x70/0xc0 [ 159.399386][ T7703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.399408][ T7703] RIP: 0033:0x7f103fb9fb19 [ 159.399431][ T7703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.399450][ T7703] RSP: 002b:00007f103ddf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 159.399475][ T7703] RAX: ffffffffffffffda RBX: 00007f103fe25fa0 RCX: 00007f103fb9fb19 [ 159.399492][ T7703] RDX: 0000000000000023 RSI: 0000200000001900 RDI: 0000000000000005 [ 159.399507][ T7703] RBP: 00007f103ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 159.399521][ T7703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 159.399534][ T7703] R13: 00007f103fe26038 R14: 00007f103fe25fa0 R15: 00007ffcdff69098 [ 159.399572][ T7703] [ 159.982461][ T7715] netlink: 'syz.1.622': attribute type 32 has an invalid length. [ 160.144554][ T7726] FAULT_INJECTION: forcing a failure. [ 160.144554][ T7726] name failslab, interval 1, probability 0, space 0, times 0 [ 160.144587][ T7726] CPU: 1 UID: 0 PID: 7726 Comm: syz.2.623 Not tainted syzkaller #0 PREEMPT(full) [ 160.144612][ T7726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 160.144624][ T7726] Call Trace: [ 160.144632][ T7726] [ 160.144642][ T7726] dump_stack_lvl+0xe8/0x150 [ 160.144697][ T7726] should_fail_ex+0x3eb/0x540 [ 160.144729][ T7726] should_failslab+0xa8/0x100 [ 160.144761][ T7726] ? skb_clone+0x212/0x3a0 [ 160.144786][ T7726] kmem_cache_alloc_noprof+0x9c/0x600 [ 160.144814][ T7726] ? skb_clone+0x212/0x3a0 [ 160.144846][ T7726] skb_clone+0x212/0x3a0 [ 160.144880][ T7726] __netlink_deliver_tap+0x355/0x6e0 [ 160.144926][ T7726] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.144960][ T7726] netlink_deliver_tap+0x19c/0x1b0 [ 160.144994][ T7726] netlink_unicast+0x8c1/0xa80 [ 160.145035][ T7726] netlink_sendmsg+0x7f0/0xb20 [ 160.145071][ T7726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.145103][ T7726] ? aa_sock_msg_perm+0x144/0x210 [ 160.145128][ T7726] ? apparmor_socket_sendmsg+0x18b/0x360 [ 160.145164][ T7726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.145193][ T7726] sock_sendmsg_nosec+0x14e/0x190 [ 160.145223][ T7726] ____sys_sendmsg+0x54e/0x850 [ 160.145251][ T7726] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.145281][ T7726] ? import_iovec+0x73/0xa0 [ 160.145309][ T7726] ___sys_sendmsg+0x2a5/0x360 [ 160.145329][ T7726] ? __lock_acquire+0x747/0x2de0 [ 160.145364][ T7726] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.145424][ T7726] ? __fget_files+0x3a2/0x420 [ 160.145447][ T7726] ? __fget_files+0x2a/0x420 [ 160.145480][ T7726] __x64_sys_sendmsg+0x1b1/0x290 [ 160.145505][ T7726] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.145549][ T7726] do_syscall_64+0x166/0x520 [ 160.145572][ T7726] ? trace_irq_disable+0x3b/0x140 [ 160.145600][ T7726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.145621][ T7726] ? clear_bhb_loop+0x70/0xc0 [ 160.145646][ T7726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.145665][ T7726] RIP: 0033:0x7f103fb9fb19 [ 160.145691][ T7726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.145709][ T7726] RSP: 002b:00007f103ddb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.145730][ T7726] RAX: ffffffffffffffda RBX: 00007f103fe26180 RCX: 00007f103fb9fb19 [ 160.145745][ T7726] RDX: 0000000020000800 RSI: 00002000000034c0 RDI: 0000000000000003 [ 160.145758][ T7726] RBP: 00007f103ddb4090 R08: 0000000000000000 R09: 0000000000000000 [ 160.145771][ T7726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.145782][ T7726] R13: 00007f103fe26218 R14: 00007f103fe26180 R15: 00007ffcdff69098 [ 160.145815][ T7726] [ 160.446918][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807a6e8400: rx timeout, send abort [ 160.479183][ T7730] __nla_validate_parse: 63 callbacks suppressed [ 160.479206][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.624'. [ 160.479247][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.624'. [ 160.564443][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.624'. [ 160.606372][ T4953] Bluetooth: hci4: command 0x0405 tx timeout [ 160.677167][ T7733] netlink: 64 bytes leftover after parsing attributes in process `syz.4.625'. [ 160.686264][ T7733] syzkaller1: entered promiscuous mode [ 160.686289][ T7733] syzkaller1: entered allmulticast mode [ 161.069157][ T7745] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 161.098067][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.628'. [ 161.185850][ T7749] netlink: 'syz.2.631': attribute type 11 has an invalid length. [ 161.214310][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.630'. [ 161.282002][ T7753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.630'. [ 161.354447][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'. [ 161.474068][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.634'. [ 161.475405][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.634'. [ 161.527456][ T7761] Bluetooth: MGMT ver 1.23 [ 161.545707][ T7764] ip_tables: iptables: counters copy to user failed while replacing table [ 162.035364][ T7788] batadv_slave_1: entered promiscuous mode [ 162.061144][ T7785] batman_adv: batadv0: Adding interface: syzkaller0 [ 162.061164][ T7785] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.061196][ T7785] batman_adv: batadv0: Interface activated: syzkaller0 [ 162.698626][ T7784] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 162.761600][ T7784] batman_adv: batadv0: Removing interface: syzkaller0 [ 162.829554][ T7810] GUP no longer grows the stack in syz.1.652 (7810): 200000003000-20000000a000 (200000001000) [ 162.829595][ T7810] CPU: 1 UID: 0 PID: 7810 Comm: syz.1.652 Not tainted syzkaller #0 PREEMPT(full) [ 162.829622][ T7810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 162.829636][ T7810] Call Trace: [ 162.829645][ T7810] [ 162.829656][ T7810] dump_stack_lvl+0xe8/0x150 [ 162.829700][ T7810] __get_user_pages+0x23b1/0x2750 [ 162.829739][ T7810] ? lock_acquire+0x115/0x350 [ 162.829787][ T7810] ? __gup_longterm_locked+0xcb2/0x16f0 [ 162.829822][ T7810] ? rcu_is_watching+0x16/0xb0 [ 162.829862][ T7810] __gup_longterm_locked+0xe24/0x16f0 [ 162.829923][ T7810] gup_fast_fallback+0x360/0x27a0 [ 162.830023][ T7810] ? __pfx_gup_fast_fallback+0x10/0x10 [ 162.830060][ T7810] ? is_valid_gup_args+0x11f/0x200 [ 162.830095][ T7810] ? get_user_pages_fast+0x4d/0xb0 [ 162.830131][ T7810] __iov_iter_get_pages_alloc+0x378/0xa40 [ 162.830168][ T7810] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 162.830200][ T7810] ? __fget_files+0x2a/0x420 [ 162.830232][ T7810] iov_iter_get_pages2+0x5e/0xa0 [ 162.830266][ T7810] __se_sys_vmsplice+0x844/0x16f0 [ 162.830321][ T7810] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 162.830352][ T7810] ? __pfx_futex_wait+0x10/0x10 [ 162.830466][ T7810] do_syscall_64+0x166/0x520 [ 162.830496][ T7810] ? trace_irq_disable+0x3b/0x140 [ 162.830529][ T7810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.830553][ T7810] ? clear_bhb_loop+0x70/0xc0 [ 162.830582][ T7810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.830606][ T7810] RIP: 0033:0x7fa33eb9fb19 [ 162.830627][ T7810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.830648][ T7810] RSP: 002b:00007fa33fb2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 162.830673][ T7810] RAX: ffffffffffffffda RBX: 00007fa33ee25fa0 RCX: 00007fa33eb9fb19 [ 162.830691][ T7810] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000007 [ 162.830705][ T7810] RBP: 00007fa33ec37b70 R08: 0000000000000000 R09: 0000000000000000 [ 162.830720][ T7810] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 162.830734][ T7810] R13: 00007fa33ee26038 R14: 00007fa33ee25fa0 R15: 00007ffeb7d7e568 [ 162.830774][ T7810] [ 163.264057][ T7821] FAULT_INJECTION: forcing a failure. [ 163.264057][ T7821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.265022][ T7821] CPU: 1 UID: 0 PID: 7821 Comm: syz.4.653 Not tainted syzkaller #0 PREEMPT(full) [ 163.265050][ T7821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 163.265064][ T7821] Call Trace: [ 163.265072][ T7821] [ 163.265081][ T7821] dump_stack_lvl+0xe8/0x150 [ 163.265137][ T7821] should_fail_ex+0x3eb/0x540 [ 163.265172][ T7821] _copy_to_user+0x31/0xb0 [ 163.265204][ T7821] simple_read_from_buffer+0xe1/0x170 [ 163.265239][ T7821] proc_fail_nth_read+0x1bb/0x230 [ 163.265278][ T7821] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 163.265317][ T7821] ? rw_verify_area+0x24a/0x4c0 [ 163.265357][ T7821] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 163.265392][ T7821] vfs_read+0x213/0xa80 [ 163.265428][ T7821] ? __pfx___mutex_lock+0x10/0x10 [ 163.265457][ T7821] ? __pfx_vfs_read+0x10/0x10 [ 163.265487][ T7821] ? __fget_files+0x2a/0x420 [ 163.265512][ T7821] ? __fget_files+0x3a2/0x420 [ 163.265537][ T7821] ? __fget_files+0x2a/0x420 [ 163.265569][ T7821] ? fdget+0x1ac/0x250 [ 163.265604][ T7821] ksys_read+0x150/0x270 [ 163.265640][ T7821] ? __pfx_ksys_read+0x10/0x10 [ 163.265683][ T7821] do_syscall_64+0x166/0x520 [ 163.265708][ T7821] ? trace_irq_disable+0x3b/0x140 [ 163.265740][ T7821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.265763][ T7821] ? clear_bhb_loop+0x70/0xc0 [ 163.265792][ T7821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.265814][ T7821] RIP: 0033:0x7fe9aa56034e [ 163.265836][ T7821] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 163.265856][ T7821] RSP: 002b:00007fe9ab384fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 163.265881][ T7821] RAX: ffffffffffffffda RBX: 00007fe9ab3856c0 RCX: 00007fe9aa56034e [ 163.265898][ T7821] RDX: 000000000000000f RSI: 00007fe9ab3850a0 RDI: 0000000000000004 [ 163.265913][ T7821] RBP: 00007fe9ab385090 R08: 0000000000000000 R09: 0000000000000000 [ 163.265927][ T7821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.265940][ T7821] R13: 00007fe9aa826038 R14: 00007fe9aa825fa0 R15: 00007ffe15db73b8 [ 163.265978][ T7821] [ 163.566264][ T5641] Bluetooth: hci2: command 0x0401 tx timeout [ 163.566696][ T4953] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 163.868847][ T7833] ip6tnl1: entered allmulticast mode [ 163.886779][ T4953] Bluetooth: hci1: command 0x0c24 tx timeout [ 163.886859][ T5646] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 164.080526][ T7849] FAULT_INJECTION: forcing a failure. [ 164.080526][ T7849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.080562][ T7849] CPU: 1 UID: 0 PID: 7849 Comm: syz.0.666 Not tainted syzkaller #0 PREEMPT(full) [ 164.080588][ T7849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 164.080601][ T7849] Call Trace: [ 164.080609][ T7849] [ 164.080618][ T7849] dump_stack_lvl+0xe8/0x150 [ 164.080659][ T7849] should_fail_ex+0x3eb/0x540 [ 164.080693][ T7849] _copy_from_user+0x2d/0xb0 [ 164.080723][ T7849] ___sys_recvmsg+0x173/0x5a0 [ 164.080755][ T7849] ? __pfx____sys_recvmsg+0x10/0x10 [ 164.080786][ T7849] ? lock_acquire+0x115/0x350 [ 164.080848][ T7849] do_recvmmsg+0x31a/0x800 [ 164.080883][ T7849] ? __pfx_do_recvmmsg+0x10/0x10 [ 164.080921][ T7849] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 164.080958][ T7849] ? fdget+0x1ac/0x250 [ 164.081000][ T7849] __x64_sys_recvmmsg+0x198/0x250 [ 164.081027][ T7849] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 164.081065][ T7849] do_syscall_64+0x166/0x520 [ 164.081089][ T7849] ? trace_irq_disable+0x3b/0x140 [ 164.081119][ T7849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.081143][ T7849] ? clear_bhb_loop+0x70/0xc0 [ 164.081169][ T7849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.081191][ T7849] RIP: 0033:0x7faeb819fb19 [ 164.081211][ T7849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.081231][ T7849] RSP: 002b:00007faeb903a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 164.081254][ T7849] RAX: ffffffffffffffda RBX: 00007faeb8425fa0 RCX: 00007faeb819fb19 [ 164.081271][ T7849] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004 [ 164.081286][ T7849] RBP: 00007faeb903a090 R08: 0000000000000000 R09: 0000000000000000 [ 164.081300][ T7849] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 164.081314][ T7849] R13: 00007faeb8426038 R14: 00007faeb8425fa0 R15: 00007ffe71830f68 [ 164.081351][ T7849] [ 164.086831][ T50] IPVS: starting estimator thread 0... [ 164.138175][ T7848] netlink: 'syz.1.664': attribute type 1 has an invalid length. [ 164.197335][ T7851] IPVS: using max 25 ests per chain, 60000 per kthread [ 164.328418][ T7848] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.373835][ T7853] bond1: (slave geneve2): making interface the new active one [ 164.391311][ T7853] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 164.446439][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.446523][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.446563][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.446601][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.929652][ T7883] FAULT_INJECTION: forcing a failure. [ 164.929652][ T7883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.929687][ T7883] CPU: 1 UID: 0 PID: 7883 Comm: syz.2.676 Not tainted syzkaller #0 PREEMPT(full) [ 164.929712][ T7883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 164.929726][ T7883] Call Trace: [ 164.929735][ T7883] [ 164.929754][ T7883] dump_stack_lvl+0xe8/0x150 [ 164.929795][ T7883] should_fail_ex+0x3eb/0x540 [ 164.929828][ T7883] _copy_from_user+0x2d/0xb0 [ 164.929857][ T7883] ___sys_recvmsg+0x173/0x5a0 [ 164.929889][ T7883] ? __pfx____sys_recvmsg+0x10/0x10 [ 164.929920][ T7883] ? lock_acquire+0x115/0x350 [ 164.929982][ T7883] do_recvmmsg+0x31a/0x800 [ 164.930015][ T7883] ? __pfx_do_recvmmsg+0x10/0x10 [ 164.930051][ T7883] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 164.930083][ T7883] ? fdget+0x1ac/0x250 [ 164.930118][ T7883] __x64_sys_recvmmsg+0x198/0x250 [ 164.930148][ T7883] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 164.930187][ T7883] do_syscall_64+0x166/0x520 [ 164.930211][ T7883] ? trace_irq_disable+0x3b/0x140 [ 164.930242][ T7883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.930265][ T7883] ? clear_bhb_loop+0x70/0xc0 [ 164.930297][ T7883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.930319][ T7883] RIP: 0033:0x7f103fb9fb19 [ 164.930340][ T7883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.930360][ T7883] RSP: 002b:00007f103ddf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 164.930384][ T7883] RAX: ffffffffffffffda RBX: 00007f103fe25fa0 RCX: 00007f103fb9fb19 [ 164.930400][ T7883] RDX: 0000000000010106 RSI: 0000200000000780 RDI: 0000000000000004 [ 164.930415][ T7883] RBP: 00007f103ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 164.930428][ T7883] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 164.930440][ T7883] R13: 00007f103fe26038 R14: 00007f103fe25fa0 R15: 00007ffcdff69098 [ 164.930475][ T7883] [ 164.964462][ T7881] vcan1: entered promiscuous mode [ 164.964518][ T7881] vcan1: entered allmulticast mode [ 165.143942][ T7886] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.722717][ T7903] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.774923][ T7905] sctp: [Deprecated]: syz.0.682 (pid 7905) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.774923][ T7905] Use struct sctp_sack_info instead [ 165.786825][ T7905] __nla_validate_parse: 7 callbacks suppressed [ 165.786889][ T7905] netlink: 32 bytes leftover after parsing attributes in process `syz.0.682'. [ 165.858166][ T7905] macvlan0: entered promiscuous mode [ 165.858540][ T7905] netlink: 'syz.0.682': attribute type 1 has an invalid length. [ 165.858559][ T7905] netlink: 'syz.0.682': attribute type 2 has an invalid length. [ 165.920850][ T7907] netlink: 56 bytes leftover after parsing attributes in process `syz.2.684'. [ 165.921064][ T7907] netlink: 56 bytes leftover after parsing attributes in process `syz.2.684'. [ 165.921255][ T7907] netlink: 56 bytes leftover after parsing attributes in process `syz.2.684'. [ 165.921444][ T7907] netlink: 56 bytes leftover after parsing attributes in process `syz.2.684'. [ 165.921665][ T7907] netlink: 56 bytes leftover after parsing attributes in process `syz.2.684'. [ 165.921867][ T7907] netlink: 56 bytes leftover after parsing attributes in process `syz.2.684'. [ 165.922063][ T7907] netlink: 56 bytes leftover after parsing attributes in process `syz.2.684'. [ 165.922275][ T7907] netlink: 56 bytes leftover after parsing attributes in process `syz.2.684'. [ 165.954060][ T7907] netlink: 56 bytes leftover after parsing attributes in process `syz.2.684'. [ 166.488124][ T7923] ip6gretap1: entered allmulticast mode [ 166.490773][ T7923] batman_adv: batadv0: Adding interface: ip6gretap1 [ 166.490791][ T7923] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.490825][ T7923] batman_adv: batadv0: Interface activated: ip6gretap1 [ 166.783895][ T7937] netlink: 'syz.3.691': attribute type 1 has an invalid length. [ 167.031580][ T7941] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 167.159538][ T7949] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.159647][ T7949] FAULT_INJECTION: forcing a failure. [ 167.159647][ T7949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.159674][ T7949] CPU: 0 UID: 0 PID: 7949 Comm: syz.3.695 Not tainted syzkaller #0 PREEMPT(full) [ 167.159699][ T7949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 167.159713][ T7949] Call Trace: [ 167.159721][ T7949] [ 167.159731][ T7949] dump_stack_lvl+0xe8/0x150 [ 167.159773][ T7949] should_fail_ex+0x3eb/0x540 [ 167.159806][ T7949] _copy_to_user+0x31/0xb0 [ 167.159838][ T7949] simple_read_from_buffer+0xe1/0x170 [ 167.159873][ T7949] proc_fail_nth_read+0x1bb/0x230 [ 167.159915][ T7949] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.159955][ T7949] ? rw_verify_area+0x24a/0x4c0 [ 167.159986][ T7949] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.160021][ T7949] vfs_read+0x213/0xa80 [ 167.160056][ T7949] ? __pfx___mutex_lock+0x10/0x10 [ 167.160084][ T7949] ? __pfx_vfs_read+0x10/0x10 [ 167.160115][ T7949] ? __fget_files+0x2a/0x420 [ 167.160141][ T7949] ? __fget_files+0x3a2/0x420 [ 167.160166][ T7949] ? __fget_files+0x2a/0x420 [ 167.160198][ T7949] ? fdget+0x1ac/0x250 [ 167.160233][ T7949] ksys_read+0x150/0x270 [ 167.160265][ T7949] ? __pfx_ksys_read+0x10/0x10 [ 167.160308][ T7949] do_syscall_64+0x166/0x520 [ 167.160333][ T7949] ? trace_irq_disable+0x3b/0x140 [ 167.160365][ T7949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.160388][ T7949] ? clear_bhb_loop+0x70/0xc0 [ 167.160417][ T7949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.160439][ T7949] RIP: 0033:0x7f64c876034e [ 167.160460][ T7949] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 167.160481][ T7949] RSP: 002b:00007f64c964ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 167.160504][ T7949] RAX: ffffffffffffffda RBX: 00007f64c96506c0 RCX: 00007f64c876034e [ 167.160521][ T7949] RDX: 000000000000000f RSI: 00007f64c96500a0 RDI: 0000000000000003 [ 167.160535][ T7949] RBP: 00007f64c9650090 R08: 0000000000000000 R09: 0000000000000000 [ 167.160557][ T7949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.160571][ T7949] R13: 00007f64c8a26038 R14: 00007f64c8a25fa0 R15: 00007ffdd45ff8c8 [ 167.160608][ T7949] [ 168.383654][ T8004] FAULT_INJECTION: forcing a failure. [ 168.383654][ T8004] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 168.383687][ T8004] CPU: 1 UID: 0 PID: 8004 Comm: syz.0.710 Not tainted syzkaller #0 PREEMPT(full) [ 168.383711][ T8004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 168.383725][ T8004] Call Trace: [ 168.383733][ T8004] [ 168.383743][ T8004] dump_stack_lvl+0xe8/0x150 [ 168.383783][ T8004] should_fail_ex+0x3eb/0x540 [ 168.383816][ T8004] prepare_alloc_pages+0x21e/0x5f0 [ 168.383853][ T8004] __alloc_frozen_pages_noprof+0x17c/0x410 [ 168.383883][ T8004] ? __lock_acquire+0x747/0x2de0 [ 168.383914][ T8004] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 168.383949][ T8004] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 168.383976][ T8004] ? __get_vm_area_node+0x155/0x2f0 [ 168.383997][ T8004] ? __vmalloc_node_range_noprof+0x36e/0x16f0 [ 168.384025][ T8004] ? policy_nodemask+0x31b/0x980 [ 168.384055][ T8004] ? __x64_sys_bpf+0xba/0xd0 [ 168.384084][ T8004] ? do_syscall_64+0x166/0x520 [ 168.384109][ T8004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.384138][ T8004] alloc_pages_mpol+0x21e/0x390 [ 168.384179][ T8004] alloc_pages_noprof+0xb1/0x2b0 [ 168.384216][ T8004] get_free_pages_noprof+0xf/0x80 [ 168.384246][ T8004] __kasan_populate_vmalloc+0x38/0x1c0 [ 168.384275][ T8004] ? do_raw_spin_unlock+0xf5/0x200 [ 168.384303][ T8004] alloc_vmap_area+0xd10/0x1410 [ 168.384347][ T8004] ? __pfx_alloc_vmap_area+0x10/0x10 [ 168.384367][ T8004] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 168.384396][ T8004] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 168.384431][ T8004] ? __get_vm_area_node+0x155/0x2f0 [ 168.384460][ T8004] __get_vm_area_node+0x200/0x2f0 [ 168.384491][ T8004] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 168.384517][ T8004] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 168.384540][ T8004] ? lock_acquire+0x115/0x350 [ 168.384571][ T8004] ? __lock_acquire+0x747/0x2de0 [ 168.384614][ T8004] ? hook_capable+0x1c3/0x5e0 [ 168.384649][ T8004] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 168.384685][ T8004] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 168.384705][ T8004] __vmalloc_noprof+0xd2/0x120 [ 168.384729][ T8004] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 168.384754][ T8004] bpf_prog_alloc_no_stats+0x47/0x550 [ 168.384775][ T8004] ? bpf_prog_alloc+0x2a/0x1a0 [ 168.384799][ T8004] bpf_prog_alloc+0x3c/0x1a0 [ 168.384823][ T8004] bpf_prog_load+0x7f8/0x1c60 [ 168.384860][ T8004] ? __pfx_bpf_prog_load+0x10/0x10 [ 168.384901][ T8004] ? __might_fault+0xaf/0x130 [ 168.384933][ T8004] __sys_bpf+0xd86/0xe00 [ 168.384964][ T8004] ? __pfx___sys_bpf+0x10/0x10 [ 168.384998][ T8004] ? __fget_files+0x2a/0x420 [ 168.385047][ T8004] ? ksys_write+0x242/0x270 [ 168.385079][ T8004] ? __pfx_ksys_write+0x10/0x10 [ 168.385114][ T8004] __x64_sys_bpf+0xba/0xd0 [ 168.385150][ T8004] do_syscall_64+0x166/0x520 [ 168.385176][ T8004] ? trace_irq_disable+0x3b/0x140 [ 168.385218][ T8004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.385240][ T8004] ? clear_bhb_loop+0x70/0xc0 [ 168.385267][ T8004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.385288][ T8004] RIP: 0033:0x7faeb819fb19 [ 168.385309][ T8004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.385346][ T8004] RSP: 002b:00007faeb903a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 168.385371][ T8004] RAX: ffffffffffffffda RBX: 00007faeb8425fa0 RCX: 00007faeb819fb19 [ 168.385409][ T8004] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 168.385431][ T8004] RBP: 00007faeb903a090 R08: 0000000000000000 R09: 0000000000000000 [ 168.385445][ T8004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.385458][ T8004] R13: 00007faeb8426038 R14: 00007faeb8425fa0 R15: 00007ffe71830f68 [ 168.385496][ T8004] [ 168.389569][ T8004] syz.0.710: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 168.389793][ T8004] CPU: 1 UID: 0 PID: 8004 Comm: syz.0.710 Not tainted syzkaller #0 PREEMPT(full) [ 168.389863][ T8004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 168.389904][ T8004] Call Trace: [ 168.389918][ T8004] [ 168.389939][ T8004] dump_stack_lvl+0xe8/0x150 [ 168.390044][ T8004] warn_alloc+0x24d/0x270 [ 168.390118][ T8004] ? lockdep_hardirqs_on+0x7b/0x110 [ 168.390203][ T8004] ? __pfx_warn_alloc+0x10/0x10 [ 168.390267][ T8004] ? kfree+0x1c5/0x650 [ 168.390343][ T8004] ? __get_vm_area_node+0x219/0x2f0 [ 168.390433][ T8004] __vmalloc_node_range_noprof+0x396/0x16f0 [ 168.390506][ T8004] ? lock_acquire+0x115/0x350 [ 168.390588][ T8004] ? __lock_acquire+0x747/0x2de0 [ 168.390711][ T8004] ? hook_capable+0x1c3/0x5e0 [ 168.390803][ T8004] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 168.390883][ T8004] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 168.390930][ T8004] __vmalloc_noprof+0xd2/0x120 [ 168.390993][ T8004] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 168.391057][ T8004] bpf_prog_alloc_no_stats+0x47/0x550 [ 168.391117][ T8004] ? bpf_prog_alloc+0x2a/0x1a0 [ 168.391188][ T8004] bpf_prog_alloc+0x3c/0x1a0 [ 168.391257][ T8004] bpf_prog_load+0x7f8/0x1c60 [ 168.391344][ T8004] ? __pfx_bpf_prog_load+0x10/0x10 [ 168.391449][ T8004] ? __might_fault+0xaf/0x130 [ 168.391531][ T8004] __sys_bpf+0xd86/0xe00 [ 168.391613][ T8004] ? __pfx___sys_bpf+0x10/0x10 [ 168.391699][ T8004] ? __fget_files+0x2a/0x420 [ 168.391825][ T8004] ? ksys_write+0x242/0x270 [ 168.391909][ T8004] ? __pfx_ksys_write+0x10/0x10 [ 168.391999][ T8004] __x64_sys_bpf+0xba/0xd0 [ 168.392092][ T8004] do_syscall_64+0x166/0x520 [ 168.392156][ T8004] ? trace_irq_disable+0x3b/0x140 [ 168.392232][ T8004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.392294][ T8004] ? clear_bhb_loop+0x70/0xc0 [ 168.392368][ T8004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.392429][ T8004] RIP: 0033:0x7faeb819fb19 [ 168.392482][ T8004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.392541][ T8004] RSP: 002b:00007faeb903a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 168.392619][ T8004] RAX: ffffffffffffffda RBX: 00007faeb8425fa0 RCX: 00007faeb819fb19 [ 168.392669][ T8004] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 168.392708][ T8004] RBP: 00007faeb903a090 R08: 0000000000000000 R09: 0000000000000000 [ 168.392742][ T8004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.392774][ T8004] R13: 00007faeb8426038 R14: 00007faeb8425fa0 R15: 00007ffe71830f68 [ 168.392869][ T8004] [ 168.397672][ T8004] Mem-Info: [ 168.397711][ T8004] active_anon:5394 inactive_anon:0 isolated_anon:0 [ 168.397711][ T8004] active_file:0 inactive_file:43799 isolated_file:0 [ 168.397711][ T8004] unevictable:0 dirty:556 writeback:0 [ 168.397711][ T8004] slab_reclaimable:10965 slab_unreclaimable:97558 [ 168.397711][ T8004] mapped:30876 shmem:575 pagetables:1119 [ 168.397711][ T8004] sec_pagetables:0 bounce:0 [ 168.397711][ T8004] kernel_misc_reclaimable:0 [ 168.397711][ T8004] free:1282644 free_pcp:12917 free_cma:0 [ 168.397996][ T8004] Node 0 active_anon:21576kB inactive_anon:0kB active_file:0kB inactive_file:174996kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123504kB dirty:2224kB writeback:0kB shmem:2300kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12324kB pagetables:4308kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 168.398193][ T8004] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 168.398342][ T8004] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 168.398515][ T8004] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 168.398612][ T8004] Node 0 DMA32 free:1172508kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:21576kB inactive_anon:0kB active_file:0kB inactive_file:174996kB unevictable:0kB writepending:2224kB zspages:0kB present:3129332kB managed:2523116kB mlocked:0kB bounce:0kB free_pcp:51664kB local_pcp:31044kB free_cma:0kB [ 168.398784][ T8004] lowmem_reserve[]: 0 0 1 1 1 [ 168.398879][ T8004] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 168.401551][ T8004] lowmem_reserve[]: 0 0 0 0 0 [ 168.403902][ T8004] Node 1 Normal free:3942708kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 168.404082][ T8004] lowmem_reserve[]: 0 0 0 0 0 [ 168.404179][ T8004] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 168.409694][ T8004] Node 0 DMA32: 582*4kB (UME) 159*8kB (UME) 126*16kB (UME) 197*32kB (UME) 73*64kB (UME) 17*128kB (UME) 7*256kB (UE) 4*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 279*4096kB (UM) = 1172560kB [ 168.412857][ T8004] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 168.413182][ T8004] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 4*16kB (UM) 11*32kB (UM) 6*64kB (UM) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3942708kB [ 168.413662][ T8004] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 168.413692][ T8004] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 168.413735][ T8004] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 168.414563][ T8004] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 168.414615][ T8004] 44370 total pagecache pages [ 168.414636][ T8004] 0 pages in swap cache [ 168.414664][ T8004] Free swap = 124996kB [ 168.414685][ T8004] Total swap = 124996kB [ 168.414708][ T8004] 2097051 pages RAM [ 168.414729][ T8004] 0 pages HighMem/MovableOnly [ 168.414750][ T8004] 434241 pages reserved [ 168.414770][ T8004] 0 pages cma reserved [ 169.603673][ T8016] FAULT_INJECTION: forcing a failure. [ 169.603673][ T8016] name failslab, interval 1, probability 0, space 0, times 0 [ 169.603709][ T8016] CPU: 0 UID: 0 PID: 8016 Comm: syz.3.716 Not tainted syzkaller #0 PREEMPT(full) [ 169.603733][ T8016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 169.603748][ T8016] Call Trace: [ 169.603756][ T8016] [ 169.603766][ T8016] dump_stack_lvl+0xe8/0x150 [ 169.603808][ T8016] should_fail_ex+0x3eb/0x540 [ 169.603841][ T8016] should_failslab+0xa8/0x100 [ 169.603877][ T8016] __kvmalloc_node_noprof+0x171/0x820 [ 169.603907][ T8016] ? resolve_func_ptrs+0xc7a/0xe50 [ 169.603934][ T8016] ? bpf_compute_postorder+0x7f/0x9a0 [ 169.603965][ T8016] ? bpf_compute_postorder+0x7f/0x9a0 [ 169.604003][ T8016] bpf_compute_postorder+0x7f/0x9a0 [ 169.604036][ T8016] ? __pfx_resolve_func_ptrs+0x10/0x10 [ 169.604059][ T8016] ? check_unwind_insns+0x670/0x910 [ 169.604095][ T8016] bpf_check+0x298f/0x34e0 [ 169.604131][ T8016] ? ktime_get_with_offset+0x93/0x2d0 [ 169.604163][ T8016] ? ktime_get_with_offset+0x93/0x2d0 [ 169.604194][ T8016] ? __pfx_bpf_check+0x10/0x10 [ 169.604221][ T8016] ? bpf_obj_name_cpy+0x194/0x1e0 [ 169.604254][ T8016] bpf_prog_load+0x14da/0x1c60 [ 169.604299][ T8016] ? __pfx_bpf_prog_load+0x10/0x10 [ 169.604338][ T8016] ? __might_fault+0xaf/0x130 [ 169.604369][ T8016] __sys_bpf+0xd86/0xe00 [ 169.604401][ T8016] ? __pfx___sys_bpf+0x10/0x10 [ 169.604436][ T8016] ? __fget_files+0x2a/0x420 [ 169.604483][ T8016] ? ksys_write+0x242/0x270 [ 169.604515][ T8016] ? __pfx_ksys_write+0x10/0x10 [ 169.604551][ T8016] __x64_sys_bpf+0xba/0xd0 [ 169.604586][ T8016] do_syscall_64+0x166/0x520 [ 169.604612][ T8016] ? trace_irq_disable+0x3b/0x140 [ 169.604642][ T8016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.604665][ T8016] ? clear_bhb_loop+0x70/0xc0 [ 169.604694][ T8016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.604716][ T8016] RIP: 0033:0x7f64c879fb19 [ 169.604736][ T8016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.604755][ T8016] RSP: 002b:00007f64c9650028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 169.604779][ T8016] RAX: ffffffffffffffda RBX: 00007f64c8a25fa0 RCX: 00007f64c879fb19 [ 169.604795][ T8016] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005 [ 169.604810][ T8016] RBP: 00007f64c9650090 R08: 0000000000000000 R09: 0000000000000000 [ 169.604824][ T8016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 169.604836][ T8016] R13: 00007f64c8a26038 R14: 00007f64c8a25fa0 R15: 00007ffdd45ff8c8 [ 169.604872][ T8016] [ 170.067484][ T8025] nbd: must specify a size in bytes for the device [ 170.128131][ T5646] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 170.128240][ T4953] Bluetooth: hci2: command 0x0401 tx timeout [ 170.192218][ T8029] FAULT_INJECTION: forcing a failure. [ 170.192218][ T8029] name failslab, interval 1, probability 0, space 0, times 0 [ 170.192260][ T8029] CPU: 1 UID: 0 PID: 8029 Comm: syz.4.719 Not tainted syzkaller #0 PREEMPT(full) [ 170.192286][ T8029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 170.192300][ T8029] Call Trace: [ 170.192308][ T8029] [ 170.192318][ T8029] dump_stack_lvl+0xe8/0x150 [ 170.192359][ T8029] should_fail_ex+0x3eb/0x540 [ 170.192392][ T8029] should_failslab+0xa8/0x100 [ 170.192427][ T8029] __kvmalloc_node_noprof+0x171/0x820 [ 170.192455][ T8029] ? __nf_unregister_net_hook+0x8d/0x770 [ 170.192482][ T8029] ? __nf_hook_entries_try_shrink+0x34e/0x720 [ 170.192503][ T8029] ? __nf_hook_entries_try_shrink+0x34e/0x720 [ 170.192539][ T8029] __nf_hook_entries_try_shrink+0x34e/0x720 [ 170.192577][ T8029] __nf_unregister_net_hook+0x4c3/0x770 [ 170.192612][ T8029] nf_unregister_net_hooks+0xcb/0x140 [ 170.192640][ T8029] nf_synproxy_ipv6_fini+0x75/0xa0 [ 170.192670][ T8029] nft_synproxy_do_destroy+0x109/0x180 [ 170.192701][ T8029] ? __pfx_nft_synproxy_destroy+0x10/0x10 [ 170.192733][ T8029] nf_tables_abort+0x7d6e/0x8bb0 [ 170.192788][ T8029] ? __pfx_nf_tables_abort+0x10/0x10 [ 170.192838][ T8029] ? __kmalloc_cache_noprof+0x148/0x600 [ 170.192863][ T8029] ? nfnetlink_rcv+0x1021/0x28c0 [ 170.192891][ T8029] ? nfnetlink_rcv+0x1021/0x28c0 [ 170.192928][ T8029] nfnetlink_rcv+0x1f30/0x28c0 [ 170.192997][ T8029] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 170.193077][ T8029] ? skb_clone+0x246/0x3a0 [ 170.193120][ T8029] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.193152][ T8029] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.193191][ T8029] netlink_unicast+0x8ef/0xa80 [ 170.193247][ T8029] netlink_sendmsg+0x7f0/0xb20 [ 170.193289][ T8029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.193326][ T8029] ? aa_sock_msg_perm+0x144/0x210 [ 170.193356][ T8029] ? apparmor_socket_sendmsg+0x18b/0x360 [ 170.193392][ T8029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.193423][ T8029] sock_sendmsg_nosec+0x14e/0x190 [ 170.193458][ T8029] ____sys_sendmsg+0x54e/0x850 [ 170.193489][ T8029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.193526][ T8029] ? import_iovec+0x73/0xa0 [ 170.193558][ T8029] ___sys_sendmsg+0x2a5/0x360 [ 170.193580][ T8029] ? __lock_acquire+0x747/0x2de0 [ 170.193616][ T8029] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.193685][ T8029] ? __fget_files+0x3a2/0x420 [ 170.193712][ T8029] ? __fget_files+0x2a/0x420 [ 170.193751][ T8029] __x64_sys_sendmsg+0x1b1/0x290 [ 170.193780][ T8029] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 170.193832][ T8029] do_syscall_64+0x166/0x520 [ 170.193859][ T8029] ? trace_irq_disable+0x3b/0x140 [ 170.193890][ T8029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.193913][ T8029] ? clear_bhb_loop+0x70/0xc0 [ 170.193942][ T8029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.193965][ T8029] RIP: 0033:0x7fe9aa59fb19 [ 170.193987][ T8029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.194007][ T8029] RSP: 002b:00007fe9ab385028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.194032][ T8029] RAX: ffffffffffffffda RBX: 00007fe9aa825fa0 RCX: 00007fe9aa59fb19 [ 170.194049][ T8029] RDX: 0000000020000040 RSI: 0000200000000200 RDI: 0000000000000003 [ 170.194064][ T8029] RBP: 00007fe9ab385090 R08: 0000000000000000 R09: 0000000000000000 [ 170.194078][ T8029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 170.194092][ T8029] R13: 00007fe9aa826038 R14: 00007fe9aa825fa0 R15: 00007ffe15db73b8 [ 170.194131][ T8029] [ 170.685466][ T8042] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 170.797257][ T8053] netlink: 'syz.1.725': attribute type 1 has an invalid length. [ 170.853645][ T8053] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.005797][ T8065] __nla_validate_parse: 26 callbacks suppressed [ 171.005832][ T8065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.727'. [ 171.175334][ T8069] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 171.776949][ T8093] syzkaller0: entered promiscuous mode [ 171.776974][ T8093] syzkaller0: entered allmulticast mode [ 173.159503][ T8137] netlink: 128 bytes leftover after parsing attributes in process `syz.1.749'. [ 173.458524][ T8144] FAULT_INJECTION: forcing a failure. [ 173.458524][ T8144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.458558][ T8144] CPU: 0 UID: 0 PID: 8144 Comm: syz.0.751 Not tainted syzkaller #0 PREEMPT(full) [ 173.458582][ T8144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 173.458596][ T8144] Call Trace: [ 173.458605][ T8144] [ 173.458615][ T8144] dump_stack_lvl+0xe8/0x150 [ 173.458656][ T8144] should_fail_ex+0x3eb/0x540 [ 173.458690][ T8144] _copy_to_user+0x31/0xb0 [ 173.458722][ T8144] bpf_verifier_vlog+0x496/0x900 [ 173.458761][ T8144] bpf_verifier_log_write+0x11d/0x1a0 [ 173.458798][ T8144] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 173.458825][ T8144] ? kasan_check_range+0x97/0x2c0 [ 173.458858][ T8144] ? analyze_subprog+0xa98f/0xac60 [ 173.458897][ T8144] analyze_subprog+0x5e60/0xac60 [ 173.458996][ T8144] ? __pfx_analyze_subprog+0x10/0x10 [ 173.459026][ T8144] ? kasan_save_track+0x4f/0x80 [ 173.459054][ T8144] ? kasan_save_track+0x3e/0x80 [ 173.459080][ T8144] ? __kasan_kmalloc+0x93/0xb0 [ 173.459109][ T8144] ? __kvmalloc_node_noprof+0x50a/0x820 [ 173.459137][ T8144] ? call_instance+0x263/0x560 [ 173.459164][ T8144] ? bpf_compute_subprog_arg_access+0x2cb/0x15c0 [ 173.459208][ T8144] ? bpf_compute_live_registers+0x10b0/0x1df0 [ 173.459237][ T8144] ? bpf_check+0x2d0b/0x34e0 [ 173.459257][ T8144] ? bpf_prog_load+0x14da/0x1c60 [ 173.459277][ T8144] ? __sys_bpf+0xd86/0xe00 [ 173.459296][ T8144] ? __x64_sys_bpf+0xba/0xd0 [ 173.459324][ T8144] ? do_syscall_64+0x166/0x520 [ 173.459349][ T8144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.459417][ T8144] ? call_instance+0x263/0x560 [ 173.459445][ T8144] ? rcu_is_watching+0x16/0xb0 [ 173.459479][ T8144] ? call_instance+0x263/0x560 [ 173.459505][ T8144] ? trace_kmalloc+0x2a/0xf0 [ 173.459533][ T8144] ? call_instance+0x263/0x560 [ 173.459560][ T8144] ? __kvmalloc_node_noprof+0x52a/0x820 [ 173.459591][ T8144] ? __kvmalloc_node_noprof+0x340/0x820 [ 173.459620][ T8144] ? call_instance+0x263/0x560 [ 173.459647][ T8144] ? call_instance+0x263/0x560 [ 173.459695][ T8144] bpf_compute_subprog_arg_access+0x2f1/0x15c0 [ 173.459744][ T8144] ? bpf_compute_live_registers+0x142/0x1df0 [ 173.459774][ T8144] ? rcu_is_watching+0x16/0xb0 [ 173.459810][ T8144] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 173.459848][ T8144] ? __kvmalloc_node_noprof+0x340/0x820 [ 173.459877][ T8144] ? bpf_compute_live_registers+0x142/0x1df0 [ 173.459906][ T8144] ? bpf_compute_live_registers+0x142/0x1df0 [ 173.459952][ T8144] bpf_compute_live_registers+0x10b0/0x1df0 [ 173.460010][ T8144] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 173.460054][ T8144] bpf_check+0x2d0b/0x34e0 [ 173.460091][ T8144] ? ktime_get_with_offset+0x93/0x2d0 [ 173.460122][ T8144] ? ktime_get_with_offset+0x93/0x2d0 [ 173.460155][ T8144] ? __pfx_bpf_check+0x10/0x10 [ 173.460182][ T8144] ? bpf_obj_name_cpy+0x194/0x1e0 [ 173.460215][ T8144] bpf_prog_load+0x14da/0x1c60 [ 173.460252][ T8144] ? __pfx_bpf_prog_load+0x10/0x10 [ 173.460293][ T8144] ? __might_fault+0xaf/0x130 [ 173.460325][ T8144] __sys_bpf+0xd86/0xe00 [ 173.460357][ T8144] ? __pfx___sys_bpf+0x10/0x10 [ 173.460392][ T8144] ? __fget_files+0x2a/0x420 [ 173.460440][ T8144] ? ksys_write+0x242/0x270 [ 173.460472][ T8144] ? __pfx_ksys_write+0x10/0x10 [ 173.460508][ T8144] __x64_sys_bpf+0xba/0xd0 [ 173.460544][ T8144] do_syscall_64+0x166/0x520 [ 173.460570][ T8144] ? trace_irq_disable+0x3b/0x140 [ 173.460601][ T8144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.460624][ T8144] ? clear_bhb_loop+0x70/0xc0 [ 173.460653][ T8144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.460676][ T8144] RIP: 0033:0x7faeb819fb19 [ 173.460697][ T8144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.460717][ T8144] RSP: 002b:00007faeb903a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 173.460741][ T8144] RAX: ffffffffffffffda RBX: 00007faeb8425fa0 RCX: 00007faeb819fb19 [ 173.460758][ T8144] RDX: 0000000000000048 RSI: 0000200000000940 RDI: 0000000000000005 [ 173.460773][ T8144] RBP: 00007faeb903a090 R08: 0000000000000000 R09: 0000000000000000 [ 173.460787][ T8144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.460800][ T8144] R13: 00007faeb8426038 R14: 00007faeb8425fa0 R15: 00007ffe71830f68 [ 173.460837][ T8144] [ 174.331225][ T8158] macvtap1: entered promiscuous mode [ 174.331251][ T8158] bridge0: entered promiscuous mode [ 174.765003][ T8174] syzkaller0: entered promiscuous mode [ 174.765031][ T8174] syzkaller0: entered allmulticast mode [ 174.804822][ T8176] hsr_slave_0: left promiscuous mode [ 174.805695][ T8176] hsr_slave_1: left promiscuous mode [ 175.363701][ T8189] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 175.378417][ T8189] FAULT_INJECTION: forcing a failure. [ 175.378417][ T8189] name failslab, interval 1, probability 0, space 0, times 0 [ 175.378452][ T8189] CPU: 0 UID: 0 PID: 8189 Comm: syz.4.765 Not tainted syzkaller #0 PREEMPT(full) [ 175.378477][ T8189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 175.378505][ T8189] Call Trace: [ 175.378513][ T8189] [ 175.378522][ T8189] dump_stack_lvl+0xe8/0x150 [ 175.378564][ T8189] should_fail_ex+0x3eb/0x540 [ 175.378597][ T8189] should_failslab+0xa8/0x100 [ 175.378631][ T8189] __kmalloc_cache_noprof+0x9e/0x600 [ 175.378658][ T8189] ? __kmalloc_cache_noprof+0x148/0x600 [ 175.378684][ T8189] ? sctp_add_bind_addr+0x8c/0x370 [ 175.378709][ T8189] ? sctp_add_bind_addr+0x8c/0x370 [ 175.378742][ T8189] sctp_add_bind_addr+0x8c/0x370 [ 175.378783][ T8189] sctp_copy_local_addr_list+0x31a/0x4e0 [ 175.378813][ T8189] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 175.378840][ T8189] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 175.378866][ T8189] ? sctp_v6_is_any+0x64/0x80 [ 175.378903][ T8189] ? sctp_copy_one_addr+0x93/0x360 [ 175.378933][ T8189] sctp_bind_addr_copy+0xb3/0x3c0 [ 175.378971][ T8189] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 175.379013][ T8189] sctp_connect_new_asoc+0x2ff/0x6b0 [ 175.379049][ T8189] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 175.379090][ T8189] ? __local_bh_enable_ip+0xd6/0x140 [ 175.379118][ T8189] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 175.379149][ T8189] ? security_sctp_bind_connect+0x7e/0x2c0 [ 175.379184][ T8189] sctp_sendmsg+0x159b/0x2d00 [ 175.379228][ T8189] ? kstrtouint+0x6e/0xe0 [ 175.379264][ T8189] ? __pfx_sctp_sendmsg+0x10/0x10 [ 175.379294][ T8189] ? lock_acquire+0x115/0x350 [ 175.379346][ T8189] ? aa_sock_msg_perm+0xf5/0x210 [ 175.379367][ T8189] ? sock_rps_record_flow+0x19/0x350 [ 175.379396][ T8189] ? inet_sendmsg+0x298/0x320 [ 175.379422][ T8189] ? __pfx_inet_sendmsg+0x10/0x10 [ 175.379444][ T8189] sock_sendmsg_nosec+0x10f/0x190 [ 175.379479][ T8189] __sys_sendto+0x408/0x5a0 [ 175.379514][ T8189] ? ksys_write+0x1e6/0x270 [ 175.379547][ T8189] ? __pfx___sys_sendto+0x10/0x10 [ 175.379579][ T8189] ? __mutex_unlock_slowpath+0x731/0x900 [ 175.379629][ T8189] ? fdget+0x1ac/0x250 [ 175.379671][ T8189] ? __pfx_ksys_write+0x10/0x10 [ 175.379707][ T8189] __x64_sys_sendto+0xde/0x100 [ 175.379746][ T8189] do_syscall_64+0x166/0x520 [ 175.379771][ T8189] ? trace_irq_disable+0x3b/0x140 [ 175.379802][ T8189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.379826][ T8189] ? clear_bhb_loop+0x70/0xc0 [ 175.379854][ T8189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.379877][ T8189] RIP: 0033:0x7fe9aa59fb19 [ 175.379906][ T8189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.379925][ T8189] RSP: 002b:00007fe9ab385028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 175.379948][ T8189] RAX: ffffffffffffffda RBX: 00007fe9aa825fa0 RCX: 00007fe9aa59fb19 [ 175.379965][ T8189] RDX: 0000000000034000 RSI: 0000200000000b00 RDI: 0000000000000004 [ 175.379979][ T8189] RBP: 00007fe9ab385090 R08: 0000200000000b40 R09: 000000000000001c [ 175.379994][ T8189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 175.380008][ T8189] R13: 00007fe9aa826038 R14: 00007fe9aa825fa0 R15: 00007ffe15db73b8 [ 175.380046][ T8189] [ 175.831651][ T8199] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 176.120559][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'. [ 176.120590][ T8216] openvswitch: netlink: Invalid VLAN frame [ 177.844873][ T8258] batman_adv: batadv0: Adding interface: wlan1 [ 177.844893][ T8258] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.844926][ T8258] batman_adv: batadv0: Interface activated: wlan1 [ 178.431926][ T8276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.789'. [ 178.431955][ T8276] netlink: 24 bytes leftover after parsing attributes in process `syz.4.789'. [ 178.434908][ T8276] x_tables: duplicate underflow at hook 1 [ 178.775532][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.793'. [ 178.796559][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.793'. [ 179.466764][ T8304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.803'. [ 179.466794][ T8304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.803'. [ 179.816253][ T8313] netlink: 20 bytes leftover after parsing attributes in process `syz.1.807'. [ 179.918097][ T8318] netlink: 'syz.1.807': attribute type 1 has an invalid length. [ 180.061382][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.811'. [ 180.113786][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'. [ 180.993476][ T8334] syzkaller0: entered promiscuous mode [ 180.993505][ T8334] syzkaller0: entered allmulticast mode [ 181.288690][ T8369] netlink: 'syz.3.819': attribute type 10 has an invalid length. [ 181.288718][ T8369] netlink: 55 bytes leftover after parsing attributes in process `syz.3.819'. [ 181.568410][ T8377] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.821'. [ 181.573483][ T8377] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.821'. [ 187.066855][ T8409] netlink: 20 bytes leftover after parsing attributes in process `syz.0.825'. [ 187.162561][ T8415] netlink: 'syz.0.825': attribute type 1 has an invalid length. [ 187.253000][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.827'. [ 187.338805][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.827'. [ 187.593789][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.829'. [ 187.799270][ T8425] syz_tun: entered promiscuous mode [ 187.799479][ T8425] macvtap0: entered allmulticast mode [ 187.799496][ T8425] syz_tun: entered allmulticast mode [ 187.874494][ T8425] syz_tun: left allmulticast mode [ 187.874532][ T8425] syz_tun: left promiscuous mode [ 188.455564][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.832'. [ 188.815780][ T8452] sctp: [Deprecated]: syz.4.838 (pid 8452) Use of int in maxseg socket option. [ 188.815780][ T8452] Use struct sctp_assoc_value instead [ 188.896334][ T8455] ip_tables: iptables: counters copy to user failed while replacing table [ 188.962497][ T8458] syz_tun: mtu less than device minimum [ 189.109956][ T8462] netlink: 'syz.0.841': attribute type 21 has an invalid length. [ 189.109988][ T8462] IPv6: NLM_F_CREATE should be specified when creating new route [ 189.110323][ T8462] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 189.110338][ T8462] IPv6: NLM_F_CREATE should be set when creating new route [ 189.110390][ T8462] IPv6: NLM_F_CREATE should be set when creating new route [ 189.110417][ T8462] IPv6: NLM_F_CREATE should be set when creating new route [ 189.287888][ T8464] Bluetooth: hci0: unsupported parameter 5161 [ 189.287915][ T8464] Bluetooth: hci0: unsupported parameter 8192 [ 189.287947][ T8464] Bluetooth: hci0: unsupported parameter 5161 [ 189.287961][ T8464] Bluetooth: hci0: unsupported parameter 8192 [ 189.612151][ T8472] ip_tables: iptables: counters copy to user failed while replacing table [ 190.925395][ T8495] sctp: [Deprecated]: syz.3.852 (pid 8495) Use of int in maxseg socket option. [ 190.925395][ T8495] Use struct sctp_assoc_value instead [ 191.774010][ T8492] syzkaller0: entered promiscuous mode [ 191.774037][ T8492] syzkaller0: entered allmulticast mode [ 191.969822][ T8507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.855'. [ 192.029605][ T8507] macvtap1: entered allmulticast mode [ 192.029630][ T8507] syz_tun: entered allmulticast mode [ 192.150784][ T8507] syz_tun: left allmulticast mode [ 192.386579][ T8509] sctp: [Deprecated]: syz.3.866 (pid 8509) Use of int in maxseg socket option. [ 192.386579][ T8509] Use struct sctp_assoc_value instead [ 192.985696][ T8524] ip_tables: iptables: counters copy to user failed while replacing table [ 193.101238][ T8524] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 193.145554][ T8528] ip_tables: iptables: counters copy to user failed while replacing table [ 193.407570][ T8530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.858'. [ 194.450339][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.450406][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.451383][ T8554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.598910][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.871'. [ 195.193197][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.872'. [ 195.590422][ T8568] ip_tables: iptables: counters copy to user failed while replacing table [ 195.749547][ T8563] macvtap1: entered allmulticast mode [ 195.749574][ T8563] syz_tun: entered allmulticast mode [ 195.896933][ T8570] netlink: 80 bytes leftover after parsing attributes in process `syz.2.874'. [ 195.896971][ T8570] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 195.970973][ T8563] syz_tun: left allmulticast mode [ 196.300646][ T8581] block nbd0: server does not support multiple connections per device. [ 196.302083][ T8581] block nbd0: shutting down sockets [ 196.811661][ T8583] FAULT_INJECTION: forcing a failure. [ 196.811661][ T8583] name failslab, interval 1, probability 0, space 0, times 0 [ 196.811697][ T8583] CPU: 1 UID: 0 PID: 8583 Comm: syz.4.881 Not tainted syzkaller #0 PREEMPT(full) [ 196.811724][ T8583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 196.811738][ T8583] Call Trace: [ 196.811746][ T8583] [ 196.811756][ T8583] dump_stack_lvl+0xe8/0x150 [ 196.811798][ T8583] should_fail_ex+0x3eb/0x540 [ 196.811831][ T8583] should_failslab+0xa8/0x100 [ 196.811865][ T8583] __kmalloc_cache_noprof+0x9e/0x600 [ 196.811894][ T8583] ? do_check_common+0x28d/0x7590 [ 196.811921][ T8583] ? do_check_common+0x28d/0x7590 [ 196.811950][ T8583] ? security_capable+0x7e/0x2c0 [ 196.811988][ T8583] do_check_common+0x28d/0x7590 [ 196.812017][ T8583] ? lockdown_is_locked_down+0x3a/0xf0 [ 196.812043][ T8583] ? bpf_lsm_locked_down+0x9/0x20 [ 196.812064][ T8583] ? security_locked_down+0x70/0x230 [ 196.812109][ T8583] ? bpf_base_func_proto+0x9fc/0xb00 [ 196.812143][ T8583] ? bpf_get_call_summary+0xb99/0x1130 [ 196.812165][ T8583] ? kasan_save_track+0x3e/0x80 [ 196.812203][ T8583] ? __pfx_bpf_get_call_summary+0x10/0x10 [ 196.812258][ T8583] ? __pfx_do_check_common+0x10/0x10 [ 196.812301][ T8583] ? mark_fastcall_patterns+0x10e1/0x1140 [ 196.812349][ T8583] do_check_main+0x95/0x1f0 [ 196.812384][ T8583] bpf_check+0x302b/0x34e0 [ 196.812421][ T8583] ? ktime_get_with_offset+0x93/0x2d0 [ 196.812458][ T8583] ? ktime_get_with_offset+0x93/0x2d0 [ 196.812490][ T8583] ? __pfx_bpf_check+0x10/0x10 [ 196.812516][ T8583] ? bpf_obj_name_cpy+0x194/0x1e0 [ 196.812549][ T8583] bpf_prog_load+0x14da/0x1c60 [ 196.812584][ T8583] ? __pfx_bpf_prog_load+0x10/0x10 [ 196.812623][ T8583] ? __might_fault+0xaf/0x130 [ 196.812653][ T8583] __sys_bpf+0xd86/0xe00 [ 196.812683][ T8583] ? __pfx___sys_bpf+0x10/0x10 [ 196.812715][ T8583] ? __fget_files+0x2a/0x420 [ 196.812763][ T8583] ? ksys_write+0x242/0x270 [ 196.812795][ T8583] ? __pfx_ksys_write+0x10/0x10 [ 196.812830][ T8583] __x64_sys_bpf+0xba/0xd0 [ 196.812867][ T8583] do_syscall_64+0x166/0x520 [ 196.812892][ T8583] ? trace_irq_disable+0x3b/0x140 [ 196.812923][ T8583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.812946][ T8583] ? clear_bhb_loop+0x70/0xc0 [ 196.812974][ T8583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.812998][ T8583] RIP: 0033:0x7fe9aa59fb19 [ 196.813019][ T8583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.813040][ T8583] RSP: 002b:00007fe9ab385028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 196.813064][ T8583] RAX: ffffffffffffffda RBX: 00007fe9aa825fa0 RCX: 00007fe9aa59fb19 [ 196.813080][ T8583] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 196.813105][ T8583] RBP: 00007fe9ab385090 R08: 0000000000000000 R09: 0000000000000000 [ 196.813119][ T8583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.813133][ T8583] R13: 00007fe9aa826038 R14: 00007fe9aa825fa0 R15: 00007ffe15db73b8 [ 196.813169][ T8583] [ 197.289587][ T8585] netlink: 'syz.2.880': attribute type 10 has an invalid length. [ 197.289613][ T8585] netlink: 55 bytes leftover after parsing attributes in process `syz.2.880'. [ 197.818865][ T8603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.883'. [ 197.916686][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.883'. [ 198.109709][ T8602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.374029][ T8608] ip_tables: iptables: counters copy to user failed while replacing table [ 198.963399][ T8619] netlink: 80 bytes leftover after parsing attributes in process `syz.0.892'. [ 198.963435][ T8619] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 200.592913][ T8649] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 200.595968][ T8649] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 201.559699][ T8664] ip_tables: iptables: counters copy to user failed while replacing table [ 205.356031][ C1] sched: DL replenish lagged too much [ 212.932822][ T5649] Bluetooth: hci0: command 0x0406 tx timeout [ 213.412831][ T5649] Bluetooth: hci1: command 0x0c24 tx timeout [ 213.412879][ T5649] Bluetooth: hci3: command 0x0406 tx timeout [ 213.412953][ T5649] Bluetooth: hci2: command 0x0401 tx timeout [ 256.189451][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.215633][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 298.991104][ T5646] Bluetooth: hci4: command 0x0405 tx timeout [ 317.478336][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.487871][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 349.834851][ T33] INFO: task kworker/u8:8:1158 blocked for more than 143 seconds. [ 349.834883][ T33] Not tainted syzkaller #0 [ 349.834896][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 349.834907][ T33] task:kworker/u8:8 state:D stack:23176 pid:1158 tgid:1158 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 349.834991][ T33] Workqueue: ipv6_addrconf addrconf_dad_work [ 349.835033][ T33] Call Trace: [ 349.835041][ T33] [ 349.835058][ T33] __schedule+0x17dd/0x5830 [ 349.835102][ T33] ? ret_from_fork_asm+0x1a/0x30 [ 349.835127][ T33] ? unwind_next_frame+0x8f/0x2550 [ 349.835171][ T33] ? __pfx___schedule+0x10/0x10 [ 349.835207][ T33] ? schedule+0x90/0x2b0 [ 349.835235][ T33] schedule+0x164/0x2b0 [ 349.835262][ T33] schedule_preempt_disabled+0x13/0x30 [ 349.835286][ T33] __mutex_lock+0x7c4/0x15a0 [ 349.835319][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 349.835352][ T33] ? addrconf_dad_work+0x116/0x15c0 [ 349.835383][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 349.835433][ T33] addrconf_dad_work+0x116/0x15c0 [ 349.835474][ T33] ? __pfx_addrconf_dad_work+0x10/0x10 [ 349.835513][ T33] ? rcu_is_watching+0x16/0xb0 [ 349.835550][ T33] ? process_scheduled_works+0x97a/0x1630 [ 349.835586][ T33] process_scheduled_works+0xc3d/0x1630 [ 349.835656][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 349.835700][ T33] ? assign_work+0x3cf/0x5d0 [ 349.835741][ T33] worker_thread+0xa47/0xfb0 [ 349.835809][ T33] kthread+0x38b/0x480 [ 349.835836][ T33] ? __pfx_worker_thread+0x10/0x10 [ 349.835870][ T33] ? __pfx_kthread+0x10/0x10 [ 349.835899][ T33] ret_from_fork+0x514/0xb70 [ 349.851296][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 349.851338][ T33] ? __switch_to+0xc78/0x1410 [ 349.851379][ T33] ? __pfx_kthread+0x10/0x10 [ 349.851409][ T33] ret_from_fork_asm+0x1a/0x30 [ 349.851454][ T33] [ 349.851569][ T33] INFO: task kworker/0:4:5752 blocked for more than 143 seconds. [ 349.851587][ T33] Not tainted syzkaller #0 [ 349.851598][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 349.851609][ T33] task:kworker/0:4 state:D stack:22976 pid:5752 tgid:5752 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 349.851676][ T33] Workqueue: events netdev_work_proc [ 349.851707][ T33] Call Trace: [ 349.851715][ T33] [ 349.851729][ T33] __schedule+0x17dd/0x5830 [ 349.851778][ T33] ? do_raw_spin_lock+0x12b/0x2f0 [ 349.851810][ T33] ? __pfx___schedule+0x10/0x10 [ 349.851845][ T33] ? schedule+0x90/0x2b0 [ 349.851873][ T33] schedule+0x164/0x2b0 [ 349.851900][ T33] schedule_preempt_disabled+0x13/0x30 [ 349.851934][ T33] __mutex_lock+0x7c4/0x15a0 [ 349.851967][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 349.852000][ T33] ? netdev_work_proc+0x209/0x780 [ 349.852032][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 349.852058][ T33] ? kthread+0x38b/0x480 [ 349.852088][ T33] ? netdev_work_proc+0x12b/0x780 [ 349.852116][ T33] ? __local_bh_enable_ip+0xd6/0x140 [ 349.852145][ T33] netdev_work_proc+0x209/0x780 [ 349.852174][ T33] ? __pfx_netdev_work_proc+0x10/0x10 [ 349.852208][ T33] ? rcu_is_watching+0x16/0xb0 [ 349.852240][ T33] ? process_scheduled_works+0x97a/0x1630 [ 349.852275][ T33] process_scheduled_works+0xc3d/0x1630 [ 349.852344][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 349.852386][ T33] ? assign_work+0x3cf/0x5d0 [ 349.852427][ T33] worker_thread+0xa47/0xfb0 [ 349.852494][ T33] kthread+0x38b/0x480 [ 349.852521][ T33] ? __pfx_worker_thread+0x10/0x10 [ 349.852555][ T33] ? __pfx_kthread+0x10/0x10 [ 349.852583][ T33] ret_from_fork+0x514/0xb70 [ 349.852613][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 349.852640][ T33] ? __switch_to+0xc78/0x1410 [ 349.852679][ T33] ? __pfx_kthread+0x10/0x10 [ 349.852708][ T33] ret_from_fork_asm+0x1a/0x30 [ 349.852752][ T33] [ 349.852778][ T33] INFO: task syz.2.904:8649 blocked for more than 143 seconds. [ 349.852795][ T33] Not tainted syzkaller #0 [ 349.852805][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 349.852815][ T33] task:syz.2.904 state:D stack:23320 pid:8649 tgid:8648 ppid:5636 task_flags:0x400140 flags:0x00080002 [ 349.852880][ T33] Call Trace: [ 349.852887][ T33] [ 349.852901][ T33] __schedule+0x17dd/0x5830 [ 349.852967][ T33] ? __pfx___schedule+0x10/0x10 [ 349.853003][ T33] ? schedule+0x90/0x2b0 [ 349.853031][ T33] schedule+0x164/0x2b0 [ 349.853058][ T33] schedule_preempt_disabled+0x13/0x30 [ 349.853082][ T33] __mutex_lock+0x7c4/0x15a0 [ 349.853114][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 349.853147][ T33] ? netdev_run_todo+0x70b/0x1090 [ 349.853178][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 349.853213][ T33] ? rcu_barrier+0x523/0x610 [ 349.853242][ T33] ? msleep+0xdd/0x100 [ 349.853274][ T33] netdev_run_todo+0x70b/0x1090 [ 349.853306][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 349.853334][ T33] ? __pfx_netdev_run_todo+0x10/0x10 [ 349.853370][ T33] ? ns_capable+0x84/0xe0 [ 349.853410][ T33] rtnl_newlink+0x16e3/0x1c30 [ 349.853449][ T33] ? __pfx_rtnl_newlink+0x10/0x10 [ 349.853471][ T33] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 349.853503][ T33] ? netlink_deliver_tap+0x19c/0x1b0 [ 349.853533][ T33] ? netlink_unicast+0x8c1/0xa80 [ 349.853560][ T33] ? netlink_sendmsg+0x7f0/0xb20 [ 349.853592][ T33] ? sock_sendmsg_nosec+0x14e/0x190 [ 349.853621][ T33] ? ____sys_sendmsg+0x54e/0x850 [ 349.853642][ T33] ? ___sys_sendmsg+0x2a5/0x360 [ 349.853664][ T33] ? __x64_sys_sendmsg+0x1b1/0x290 [ 349.853686][ T33] ? do_syscall_64+0x166/0x520 [ 349.853711][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.853778][ T33] ? kasan_quarantine_put+0xbb/0x1f0 [ 349.853808][ T33] ? lockdep_hardirqs_on+0x7b/0x110 [ 349.853839][ T33] ? nlmon_xmit+0xb0/0x100 [ 349.853866][ T33] ? kmem_cache_free+0x182/0x650 [ 349.853906][ T33] ? __lock_acquire+0x747/0x2de0 [ 349.853951][ T33] ? __pfx_hook_capable+0x10/0x10 [ 349.853973][ T33] ? __dev_queue_xmit+0x29b/0x3920 [ 349.854005][ T33] ? __pfx_hook_capable+0x10/0x10 [ 349.854030][ T33] ? lockdep_hardirqs_on+0x7b/0x110 [ 349.854086][ T33] ? __pfx_rtnl_newlink+0x10/0x10 [ 349.854107][ T33] rtnetlink_rcv_msg+0x802/0xc00 [ 349.854136][ T33] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 349.854159][ T33] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 349.854186][ T33] ? __copy_skb_header+0xa3/0x4a0 [ 349.854226][ T33] netlink_rcv_skb+0x226/0x4a0 [ 349.854260][ T33] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 349.854286][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 349.873463][ T33] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.873509][ T33] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.873549][ T33] netlink_unicast+0x8ef/0xa80 [ 349.873601][ T33] netlink_sendmsg+0x7f0/0xb20 [ 349.873643][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.873681][ T33] ? aa_sock_msg_perm+0x144/0x210 [ 349.873710][ T33] ? apparmor_socket_sendmsg+0x18b/0x360 [ 349.873747][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.873779][ T33] sock_sendmsg_nosec+0x14e/0x190 [ 349.873814][ T33] ____sys_sendmsg+0x54e/0x850 [ 349.873845][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.873882][ T33] ? import_iovec+0x73/0xa0 [ 349.873922][ T33] ___sys_sendmsg+0x2a5/0x360 [ 349.873945][ T33] ? __lock_acquire+0x747/0x2de0 [ 349.873981][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.874018][ T33] ? futex_wait+0x2a2/0x390 [ 349.874082][ T33] ? __fget_files+0x3a2/0x420 [ 349.874109][ T33] ? __fget_files+0x2a/0x420 [ 349.874148][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 349.874177][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 349.874227][ T33] do_syscall_64+0x166/0x520 [ 349.874253][ T33] ? trace_irq_disable+0x3b/0x140 [ 349.874285][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.874309][ T33] ? clear_bhb_loop+0x70/0xc0 [ 349.874338][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.874362][ T33] RIP: 0033:0x7f103fb9fb19 [ 349.874383][ T33] RSP: 002b:00007f103ddf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.874409][ T33] RAX: ffffffffffffffda RBX: 00007f103fe25fa0 RCX: 00007f103fb9fb19 [ 349.874427][ T33] RDX: 00000000200040cc RSI: 0000200000000080 RDI: 0000000000000003 [ 349.874443][ T33] RBP: 00007f103fc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 349.874457][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.874471][ T33] R13: 00007f103fe26038 R14: 00007f103fe25fa0 R15: 00007ffcdff69098 [ 349.874509][ T33] [ 349.874521][ T33] INFO: task syz.1.905:8650 blocked for more than 143 seconds. [ 349.874538][ T33] Not tainted syzkaller #0 [ 349.874549][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 349.874560][ T33] task:syz.1.905 state:D stack:24552 pid:8650 tgid:8650 ppid:5640 task_flags:0x400040 flags:0x00080002 [ 349.874626][ T33] Call Trace: [ 349.874633][ T33] [ 349.874648][ T33] __schedule+0x17dd/0x5830 [ 349.874691][ T33] ? __pfx_clockevents_program_event+0x10/0x10 [ 349.874729][ T33] ? __pfx___schedule+0x10/0x10 [ 349.874763][ T33] ? schedule+0x90/0x2b0 [ 349.874792][ T33] schedule+0x164/0x2b0 [ 349.874818][ T33] schedule_preempt_disabled+0x13/0x30 [ 349.874842][ T33] __mutex_lock+0x7c4/0x15a0 [ 349.874875][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 349.874906][ T33] ? bpf_xdp_link_release+0x26/0x520 [ 349.874951][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 349.874994][ T33] ? bpf_link_free+0x8f/0x440 [ 349.875033][ T33] bpf_xdp_link_release+0x26/0x520 [ 349.875072][ T33] bpf_link_free+0xe2/0x440 [ 349.875109][ T33] ? __pfx_bpf_link_release+0x10/0x10 [ 349.875131][ T33] bpf_link_release+0x6b/0x80 [ 349.875152][ T33] __fput+0x408/0xa40 [ 349.875187][ T33] fput_close_sync+0x11f/0x240 [ 349.875212][ T33] ? __pfx_fput_close_sync+0x10/0x10 [ 349.875249][ T33] filp_close_sync+0x6e/0xa0 [ 349.875277][ T33] __se_sys_close_range+0xa77/0xef0 [ 349.875327][ T33] ? __pfx___se_sys_close_range+0x10/0x10 [ 349.875370][ T33] do_syscall_64+0x166/0x520 [ 349.875397][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.875420][ T33] ? clear_bhb_loop+0x70/0xc0 [ 349.875449][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.875472][ T33] RIP: 0033:0x7fa33eb9fb19 [ 349.875491][ T33] RSP: 002b:00007ffeb7d7e6c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 349.875514][ T33] RAX: ffffffffffffffda RBX: 00007fa33ee27da0 RCX: 00007fa33eb9fb19 [ 349.875531][ T33] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 349.875545][ T33] RBP: 00007fa33ee27da0 R08: 00007fa33ee26128 R09: 0000000000000000 [ 349.875561][ T33] R10: 00000000003ffcd0 R11: 0000000000000246 R12: 00000000000311b6 [ 349.875576][ T33] R13: 00007fa33ee2618c R14: 0000000000030f5d R15: 00007fa33ee26180 [ 349.875613][ T33] [ 349.875623][ T33] INFO: task syz.3.907:8659 blocked for more than 143 seconds. [ 349.875639][ T33] Not tainted syzkaller #0 [ 349.875651][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 349.875661][ T33] task:syz.3.907 state:D stack:26864 pid:8659 tgid:8656 ppid:5635 task_flags:0x400140 flags:0x00080002 [ 349.875729][ T33] Call Trace: [ 349.875736][ T33] [ 349.875750][ T33] __schedule+0x17dd/0x5830 [ 349.875792][ T33] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 349.875829][ T33] ? __pfx___schedule+0x10/0x10 [ 349.875864][ T33] ? schedule+0x90/0x2b0 [ 349.875892][ T33] schedule+0x164/0x2b0 [ 349.886344][ T33] schedule_preempt_disabled+0x13/0x30 [ 349.886383][ T33] __mutex_lock+0x7c4/0x15a0 [ 349.886417][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 349.886450][ T33] ? rtnl_newlink+0xc1d/0x1c30 [ 349.886476][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 349.886516][ T33] ? ns_capable+0x84/0xe0 [ 349.886550][ T33] ? rtnl_nets_add+0x16c/0x300 [ 349.886573][ T33] ? refcount_inc+0x46/0x70 [ 349.886609][ T33] rtnl_newlink+0xc1d/0x1c30 [ 349.886642][ T33] ? kasan_save_free_info+0x40/0x50 [ 349.886670][ T33] ? __pfx_rtnl_newlink+0x10/0x10 [ 349.886691][ T33] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 349.886722][ T33] ? netlink_deliver_tap+0x19c/0x1b0 [ 349.886751][ T33] ? netlink_unicast+0x8c1/0xa80 [ 349.886778][ T33] ? netlink_sendmsg+0x7f0/0xb20 [ 349.886808][ T33] ? sock_sendmsg_nosec+0x14e/0x190 [ 349.886837][ T33] ? ____sys_sendmsg+0x54e/0x850 [ 349.886859][ T33] ? ___sys_sendmsg+0x2a5/0x360 [ 349.886880][ T33] ? __x64_sys_sendmsg+0x1b1/0x290 [ 349.886902][ T33] ? do_syscall_64+0x166/0x520 [ 349.886936][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.887002][ T33] ? kasan_quarantine_put+0xbb/0x1f0 [ 349.887031][ T33] ? lockdep_hardirqs_on+0x7b/0x110 [ 349.887062][ T33] ? nlmon_xmit+0xb0/0x100 [ 349.887088][ T33] ? kmem_cache_free+0x182/0x650 [ 349.887127][ T33] ? __lock_acquire+0x747/0x2de0 [ 349.887165][ T33] ? __pfx_hook_capable+0x10/0x10 [ 349.887187][ T33] ? __dev_queue_xmit+0x29b/0x3920 [ 349.887219][ T33] ? __pfx_hook_capable+0x10/0x10 [ 349.887242][ T33] ? lockdep_hardirqs_on+0x7b/0x110 [ 349.887298][ T33] ? __pfx_rtnl_newlink+0x10/0x10 [ 349.887321][ T33] rtnetlink_rcv_msg+0x802/0xc00 [ 349.887350][ T33] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 349.887372][ T33] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 349.887399][ T33] ? __copy_skb_header+0xa3/0x4a0 [ 349.887438][ T33] netlink_rcv_skb+0x226/0x4a0 [ 349.887473][ T33] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 349.887498][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 349.887546][ T33] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.887578][ T33] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.887617][ T33] netlink_unicast+0x8ef/0xa80 [ 349.887667][ T33] netlink_sendmsg+0x7f0/0xb20 [ 349.887708][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.887746][ T33] ? aa_sock_msg_perm+0x144/0x210 [ 349.887774][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 349.887811][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.887842][ T33] sock_sendmsg_nosec+0x14e/0x190 [ 349.887876][ T33] ____sys_sendmsg+0x54e/0x850 [ 349.887907][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.887952][ T33] ? import_iovec+0x73/0xa0 [ 349.887984][ T33] ___sys_sendmsg+0x2a5/0x360 [ 349.888007][ T33] ? __lock_acquire+0x747/0x2de0 [ 349.888041][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.888070][ T33] ? futex_wait+0x2a2/0x390 [ 349.888135][ T33] ? __fget_files+0x3a2/0x420 [ 349.888162][ T33] ? __fget_files+0x2a/0x420 [ 349.888201][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 349.888230][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 349.888280][ T33] do_syscall_64+0x166/0x520 [ 349.888306][ T33] ? trace_irq_disable+0x3b/0x140 [ 349.888337][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.888361][ T33] ? clear_bhb_loop+0x70/0xc0 [ 349.888389][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.888413][ T33] RIP: 0033:0x7f64c879fb19 [ 349.888433][ T33] RSP: 002b:00007f64c962f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.888459][ T33] RAX: ffffffffffffffda RBX: 00007f64c8a26090 RCX: 00007f64c879fb19 [ 349.888476][ T33] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 349.888490][ T33] RBP: 00007f64c8837b70 R08: 0000000000000000 R09: 0000000000000000 [ 349.888505][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.888518][ T33] R13: 00007f64c8a26128 R14: 00007f64c8a26090 R15: 00007ffdd45ff8c8 [ 349.888555][ T33] [ 349.888566][ T33] INFO: task syz.3.907:8660 blocked for more than 143 seconds. [ 349.888583][ T33] Not tainted syzkaller #0 [ 349.888594][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 349.888604][ T33] task:syz.3.907 state:D stack:26864 pid:8660 tgid:8656 ppid:5635 task_flags:0x400140 flags:0x00080002 [ 349.888671][ T33] Call Trace: [ 349.888679][ T33] [ 349.888692][ T33] __schedule+0x17dd/0x5830 [ 349.888749][ T33] ? __pfx___schedule+0x10/0x10 [ 349.888783][ T33] ? schedule+0x90/0x2b0 [ 349.888810][ T33] schedule+0x164/0x2b0 [ 349.888835][ T33] schedule_preempt_disabled+0x13/0x30 [ 349.888858][ T33] __mutex_lock+0x7c4/0x15a0 [ 349.888890][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 349.888928][ T33] ? rtnl_newlink+0xc1d/0x1c30 [ 349.888952][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 349.888990][ T33] ? ns_capable+0x84/0xe0 [ 349.889021][ T33] ? rtnl_nets_add+0x16c/0x300 [ 349.889043][ T33] ? refcount_inc+0x46/0x70 [ 349.889078][ T33] rtnl_newlink+0xc1d/0x1c30 [ 349.889110][ T33] ? kasan_save_free_info+0x40/0x50 [ 349.889136][ T33] ? __pfx_rtnl_newlink+0x10/0x10 [ 349.889156][ T33] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 349.889186][ T33] ? netlink_deliver_tap+0x19c/0x1b0 [ 349.889216][ T33] ? netlink_unicast+0x8c1/0xa80 [ 349.889242][ T33] ? netlink_sendmsg+0x7f0/0xb20 [ 349.889271][ T33] ? sock_sendmsg_nosec+0x14e/0x190 [ 349.889299][ T33] ? ____sys_sendmsg+0x54e/0x850 [ 349.889320][ T33] ? ___sys_sendmsg+0x2a5/0x360 [ 349.889341][ T33] ? __x64_sys_sendmsg+0x1b1/0x290 [ 349.889363][ T33] ? do_syscall_64+0x166/0x520 [ 349.889386][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.889451][ T33] ? kasan_quarantine_put+0xbb/0x1f0 [ 349.889479][ T33] ? lockdep_hardirqs_on+0x7b/0x110 [ 349.889510][ T33] ? nlmon_xmit+0xb0/0x100 [ 349.889534][ T33] ? kmem_cache_free+0x182/0x650 [ 349.889573][ T33] ? __lock_acquire+0x747/0x2de0 [ 349.889609][ T33] ? __pfx_hook_capable+0x10/0x10 [ 349.889630][ T33] ? __dev_queue_xmit+0x29b/0x3920 [ 349.889660][ T33] ? __pfx_hook_capable+0x10/0x10 [ 349.889683][ T33] ? lockdep_hardirqs_on+0x7b/0x110 [ 349.889738][ T33] ? __pfx_rtnl_newlink+0x10/0x10 [ 349.889759][ T33] rtnetlink_rcv_msg+0x802/0xc00 [ 349.889786][ T33] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 349.889808][ T33] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 349.889834][ T33] ? __copy_skb_header+0xa3/0x4a0 [ 349.889872][ T33] netlink_rcv_skb+0x226/0x4a0 [ 349.889905][ T33] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 349.889936][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 349.889984][ T33] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.890015][ T33] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.890054][ T33] netlink_unicast+0x8ef/0xa80 [ 349.890103][ T33] netlink_sendmsg+0x7f0/0xb20 [ 349.890143][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.890181][ T33] ? aa_sock_msg_perm+0x144/0x210 [ 349.890209][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 349.890245][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.890276][ T33] sock_sendmsg_nosec+0x14e/0x190 [ 349.890310][ T33] ____sys_sendmsg+0x54e/0x850 [ 349.890342][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.890377][ T33] ? import_iovec+0x73/0xa0 [ 349.890410][ T33] ___sys_sendmsg+0x2a5/0x360 [ 349.890433][ T33] ? __lock_acquire+0x747/0x2de0 [ 349.890468][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.890497][ T33] ? tomoyo_path_number_perm+0x219/0x5f0 [ 349.890567][ T33] ? __fget_files+0x3a2/0x420 [ 349.890593][ T33] ? __fget_files+0x2a/0x420 [ 349.890632][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 349.890660][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 349.890683][ T33] ? kfree+0x4d/0x650 [ 349.890715][ T33] ? __pfx_kcov_ioctl+0x10/0x10 [ 349.890758][ T33] do_syscall_64+0x166/0x520 [ 349.890783][ T33] ? trace_irq_disable+0x3b/0x140 [ 349.890814][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.890838][ T33] ? clear_bhb_loop+0x70/0xc0 [ 349.890866][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.890889][ T33] RIP: 0033:0x7f64c879fb19 [ 349.890916][ T33] RSP: 002b:00007f64c960e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.890940][ T33] RAX: ffffffffffffffda RBX: 00007f64c8a26180 RCX: 00007f64c879fb19 [ 349.890957][ T33] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000006 [ 349.890971][ T33] RBP: 00007f64c8837b70 R08: 0000000000000000 R09: 0000000000000000 [ 349.890986][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.891000][ T33] R13: 00007f64c8a26218 R14: 00007f64c8a26180 R15: 00007ffdd45ff8c8 [ 349.891037][ T33] [ 349.891066][ T33] [ 349.891066][ T33] Showing all locks held in the system: [ 349.891076][ T33] locks held by kthreadd/2: 2, last CPU#0: [ 349.891093][ T33] #0: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 349.891159][ T33] #1: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 349.891224][ T33] locks held by kworker/0:0/9: 3, last CPU#0: [ 349.891240][ T33] #0: ffff88807bc0c948 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.891311][ T33] #1: ffffc900000e7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.891403][ T33] #2: ffff88801eb4f028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 349.891461][ T33] locks held by kworker/0:1/10: 3, last CPU#0: [ 349.891477][ T33] #0: ffff888059abd948 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.891548][ T33] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.891633][ T33] #2: ffff88803571bea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 349.891690][ T33] locks held by kworker/u8:0/12: 3, last CPU#0: [ 349.891706][ T33] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.891772][ T33] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.891837][ T33] #2: ffff888057ad0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 349.891897][ T33] locks held by kworker/u8:1/13: 3, last CPU#0: [ 349.891922][ T33] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.891987][ T33] #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.892053][ T33] #2: ffff888056a10800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 349.892113][ T33] locks held by kworker/R-mm_pe/14: 1, on CPU#1: [ 349.892129][ T33] #0: ffffffff8fdf6480 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xdbe/0x12a0 [ 349.892185][ T33] locks held by kworker/1:0/24: 3, last CPU#1: [ 349.892200][ T33] #0: ffff888059abd948 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.892271][ T33] #1: ffffc900001e7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.892356][ T33] #2: ffff88803571bea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 349.892412][ T33] locks held by kworker/1:1/29: 3, last CPU#1: [ 349.892428][ T33] #0: ffff88807f810548 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.892500][ T33] #1: ffffc90000a47c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.892582][ T33] #2: ffff88807f375480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 349.892640][ T33] locks held by kworker/u8:2/31: 3, last CPU#0: [ 349.892656][ T33] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.892721][ T33] #1: ffffc90000a77c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.892786][ T33] #2: ffff8880570f0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 349.892845][ T33] locks held by pr/ttyS0/32: 1, last CPU#0: [ 349.892861][ T33] #0: ffffffff8fe33dd8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 349.892929][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 349.892945][ T33] #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 349.893005][ T33] locks held by kworker/u8:3/50: 4, last CPU#0: [ 349.893022][ T33] #0: ffff88807939f148 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.893086][ T33] #1: ffffc90000ba7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.893153][ T33] #2: ffff888036fc9480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 349.893209][ T33] #3: ffff88807bea7028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 349.893267][ T33] locks held by kworker/u8:4/62: 4, last CPU#0: [ 349.893283][ T33] #0: ffff88807939f948 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.893352][ T33] #1: ffffc9000203fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.893419][ T33] #2: ffff88807f375480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 349.893475][ T33] #3: ffff88807bea3ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 349.893532][ T33] locks held by kworker/u8:5/101: 4, last CPU#0: [ 349.893549][ T33] #0: ffff8880371d0948 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.893618][ T33] #1: ffffc900025b7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.893683][ T33] #2: ffff88807f7ad480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 349.893740][ T33] #3: ffff88807bea5c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 349.893796][ T33] locks held by kworker/R-ksmbd/116: 1, on CPU#1: [ 349.893813][ T33] #0: ffffffff8fdf6480 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 349.893879][ T33] locks held by kworker/u8:6/122: 4, last CPU#0: [ 349.893896][ T33] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.893966][ T33] #1: ffffc9000295fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.894032][ T33] #2: ffff888056b70800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 349.894091][ T33] #3: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 349.894156][ T33] locks held by kworker/0:2/991: 3, last CPU#0: [ 349.894173][ T33] #0: ffff888059aed948 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.894238][ T33] #1: ffffc90004be7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.894317][ T33] #2: ffff88807f7a9480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 349.894374][ T33] locks held by kworker/1:2/994: 3, last CPU#1: [ 349.894390][ T33] #0: ffff88807bc0c948 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.894459][ T33] #1: ffffc90004c07c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.894542][ T33] #2: ffff88807bea0330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 349.894982][ T33] locks held by kworker/u8:7/1042: 3, last CPU#0: [ 349.894999][ T33] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.895062][ T33] #1: ffffc90004c37c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.895128][ T33] #2: ffff888057460800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 349.895183][ T33] locks held by kworker/u8:8/1158: 3, on CPU#0: [ 349.895197][ T33] #0: ffff88801eb41948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.895257][ T33] #1: ffffc90005127c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.895320][ T33] #2: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 349.895378][ T33] locks held by kworker/u8:9/1181: 3, last CPU#0: [ 349.895394][ T33] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.895459][ T33] #1: ffffc900051d7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.895525][ T33] #2: ffff88807b7aa258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 349.895596][ T33] locks held by kworker/u8:10/3011: 3, last CPU#0: [ 349.895612][ T33] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.895677][ T33] #1: ffffc9000de0fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.895744][ T33] #2: ffff88803419b258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 349.895807][ T33] locks held by kworker/u8:11/3052: 3, last CPU#0: [ 349.895824][ T33] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 349.895889][ T33] #1: ffffc9000e0efc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 354.476489][ T33] #2: ffff8880577d0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 354.476557][ T33] locks held by kworker/R-bat_e/3231: 6, last CPU#0: [ 354.476575][ T33] #0: ffff888033f7c148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 354.476640][ T33] #1: ffffc9000e5afc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 354.476705][ T33] #2: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 354.476787][ T33] #3: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 354.476847][ T33] #4: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 354.476909][ T33] #5: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 354.476968][ T33] locks held by udevd/5002: 1, last CPU#1: [ 354.476983][ T33] #0: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 354.477051][ T33] locks held by dhcpcd/5297: 5, last CPU#1: [ 354.477067][ T33] #0: ffffffff9003a4f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x470 [ 354.477128][ T33] #1: ffff88807f7f0f80 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x18a/0x1e10 [ 354.477182][ T33] #2: ffff88807cadb440 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x277/0x1e10 [ 354.477241][ T33] #3: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 354.477298][ T33] #4: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 354.477361][ T33] locks held by kworker/0:3/5368: 3, last CPU#0: [ 354.477377][ T33] #0: ffff88807f810548 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 354.477448][ T33] #1: ffffc900035afc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 354.477533][ T33] #2: ffff88807bea4888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 354.477592][ T33] locks held by getty/5391: 2, on CPU#0: [ 354.477608][ T33] #0: ffff8880371dd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 354.477666][ T33] #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 354.477733][ T33] locks held by syz-executor/5623: 2, last CPU#1: [ 354.477750][ T33] #0: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 354.477807][ T33] #1: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 354.477870][ T33] locks held by syz-executor/5634: 2, last CPU#1: [ 354.477886][ T33] #0: ffffffff90701b18 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 354.477949][ T33] #1: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 354.478013][ T33] locks held by kworker/1:3/5639: 4, last CPU#1: [ 354.478030][ T33] #0: ffff888059550548 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 354.478100][ T33] #1: ffffc90003a5fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 354.478185][ T33] #2: ffff888036fc9480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 354.478241][ T33] #3: ffff88807bea7028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 354.478300][ T33] locks held by kworker/R-wg-cr/5719: 1, on CPU#1: [ 354.478317][ T33] #0: ffffffff8fdf6480 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xdbe/0x12a0 [ 354.478371][ T33] locks held by kworker/R-wg-cr/5720: 1, on CPU#1: [ 354.478387][ T33] #0: ffffffff8fdf6480 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xdbe/0x12a0 [ 354.478442][ T33] locks held by kworker/R-wg-cr/5722: 1, on CPU#1: [ 354.478458][ T33] #0: ffffffff8fdf6480 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xdbe/0x12a0 [ 354.478511][ T33] locks held by kworker/R-wg-cr/5723: 1, last CPU#0: [ 354.478528][ T33] #0: ffffffff8fdf6480 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 354.478595][ T33] locks held by kworker/R-wg-cr/5724: 1, on CPU#0: [ 354.478611][ T33] #0: ffffffff8fdf6480 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xdbe/0x12a0 [ 354.478665][ T33] locks held by kworker/R-wg-cr/5726: 1, last CPU#0: [ 354.478682][ T33] #0: ffffffff8fdf6480 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xdbe/0x12a0 [ 354.478735][ T33] locks held by kworker/R-wg-cr/5728: 1, on CPU#0: [ 354.478751][ T33] #0: ffffffff8fdf6480 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 354.478817][ T33] locks held by kworker/R-wg-cr/5729: 1, on CPU#1: [ 354.478834][ T33] #0: ffffffff8fdf6480 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xdbe/0x12a0 [ 354.478897][ T33] locks held by kworker/0:4/5752: 3, on CPU#0: [ 354.478913][ T33] #0: ffff88813ff4ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 354.478978][ T33] #1: ffffc90004bd7c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 354.479048][ T33] #2: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x209/0x780 [ 354.479109][ T33] locks held by kworker/0:5/5759: 3, last CPU#0: [ 354.479125][ T33] #0: ffff888059abc148 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 354.479194][ T33] #1: ffffc90004df7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 354.479278][ T33] #2: ffff88803571e640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 354.479341][ T33] locks held by kworker/1:4/5766: 4, last CPU#1: [ 354.479357][ T33] #0: ffff888059aed948 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 354.479426][ T33] #1: ffffc90004ec7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 354.479510][ T33] #2: ffff88807f7a9480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 354.479568][ T33] #3: ffff88803571d270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 354.479623][ T33] locks held by kworker/0:6/5773: 2, last CPU#0: [ 354.479646][ T33] #0: ffff888078921d48 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 354.479717][ T33] #1: ffffc90004f37c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 354.479801][ T33] locks held by kworker/1:5/5774: 3, last CPU#1: [ 354.479817][ T33] #0: ffff888078921d48 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 354.479887][ T33] #1: ffffc90004f47c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 354.479973][ T33] #2: ffff88801f371480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 354.480041][ T33] locks held by kworker/1:6/5779: 4, last CPU#1: [ 354.480058][ T33] #0: ffff888059ba1d48 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 354.480129][ T33] #1: ffffc90004f77c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 354.480212][ T33] #2: ffff88807e959480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 354.480268][ T33] #3: ffff888035719700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 354.480325][ T33] locks held by kworker/0:7/5831: 3, last CPU#0: [ 354.480341][ T33] #0: ffff888059550548 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 354.480409][ T33] #1: ffffc90005077c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 354.480493][ T33] #2: ffff888036fc9480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 354.480553][ T33] locks held by kworker/R-bond1/6780: 1, on CPU#1: [ 354.480570][ T33] #0: ffffffff8fdf6480 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 354.480637][ T33] locks held by kworker/R-bond2/7185: 1, on CPU#1: [ 354.480653][ T33] #0: ffffffff8fdf6480 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 354.480720][ T33] locks held by kworker/R-bond1/7852: 1, on CPU#1: [ 354.480736][ T33] #0: ffffffff8fdf6480 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 354.480802][ T33] locks held by kworker/R-bond2/8055: 1, on CPU#1: [ 354.480819][ T33] #0: ffffffff8fdf6480 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 354.480884][ T33] locks held by syz.2.904/8649: 2, on CPU#0: [ 354.480900][ T33] #0: ffffffff90bb1808 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 354.480960][ T33] #1: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x70b/0x1090 [ 354.481025][ T33] locks held by syz.1.905/8650: 1, on CPU#0: [ 354.481041][ T33] #0: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: bpf_xdp_link_release+0x26/0x520 [ 354.481105][ T33] locks held by syz.0.906/8654: 1, last CPU#1: [ 354.481121][ T33] #0: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x419/0x810 [ 354.481174][ T33] locks held by syz.3.907/8659: 2, on CPU#0: [ 354.481190][ T33] #0: ffffffff919f3520 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 354.481251][ T33] #1: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 354.481304][ T33] locks held by syz.3.907/8660: 2, on CPU#0: [ 354.481320][ T33] #0: ffffffff919f3520 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 354.481380][ T33] #1: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 354.481433][ T33] locks held by kworker/u8:12/8666: 4, last CPU#1: [ 354.481449][ T33] #0: ffff888036650148 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 354.481518][ T33] #1: ffffc9000e7afc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 354.481584][ T33] #2: ffff88807885d480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 354.481640][ T33] #3: ffff88803571aad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 354.481696][ T33] locks held by kworker/u8:13/8668: 4, last CPU#1: [ 354.481712][ T33] #0: ffff888036650148 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 354.481782][ T33] #1: ffffc9001be87c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 354.481847][ T33] #2: ffff88807885d480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 354.481902][ T33] #3: ffff88803571a0e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 354.481958][ T33] locks held by kworker/u8:14/8669: 4, last CPU#1: [ 354.481975][ T33] #0: ffff8880371d6948 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 354.482051][ T33] #1: ffffc9001bec7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 354.482117][ T33] #2: ffff88807e959480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 354.482173][ T33] #3: ffff888035718d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 354.482229][ T33] locks held by kworker/0:8/8670: 1, on CPU#0: [ 354.482245][ T33] #0: ffffffff8fdf6480 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 354.482314][ T33] [ 354.482320][ T33] ============================================= [ 354.482320][ T33] [ 354.482346][ T33] NMI backtrace for cpu 1 [ 354.482362][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 354.482386][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 354.482400][ T33] Call Trace: [ 354.482409][ T33] [ 354.482419][ T33] dump_stack_lvl+0xe8/0x150 [ 354.482458][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 354.482495][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 354.482524][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 354.482563][ T33] sys_info+0x135/0x170 [ 354.482593][ T33] watchdog+0x1073/0x10f0 [ 354.482633][ T33] ? watchdog+0x209/0x10f0 [ 354.482672][ T33] kthread+0x38b/0x480 [ 354.482699][ T33] ? __pfx_watchdog+0x10/0x10 [ 354.482726][ T33] ? __pfx_kthread+0x10/0x10 [ 354.482754][ T33] ret_from_fork+0x514/0xb70 [ 354.482781][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 354.482804][ T33] ? __switch_to+0xc78/0x1410 [ 354.482840][ T33] ? __pfx_kthread+0x10/0x10 [ 354.482866][ T33] ret_from_fork_asm+0x1a/0x30 [ 354.482906][ T33] [ 354.482913][ T33] Sending NMI from CPU 1 to CPUs 0: [ 354.482952][ C0] NMI backtrace for cpu 0 [ 354.482966][ C0] CPU: 0 UID: 0 PID: 3231 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 354.482988][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 354.483001][ C0] Workqueue: bat_events batadv_tt_purge [ 354.483034][ C0] RIP: 0010:lock_acquire+0xcd/0x350 [ 354.483060][ C0] Code: a4 0b 00 00 00 0f 85 c0 00 00 00 48 89 5c 24 08 4c 89 fb 9c 41 5f fa 48 c7 c7 95 d0 6b 8e e8 7a a9 5e 0a 65 ff 05 0b 3c 1c 13 <45> 31 c9 4c 89 7c 24 10 41 f7 c7 00 02 00 00 41 0f 94 c1 8b 85 a8 [ 354.483077][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00000002 [ 354.483093][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 8000000000000102 [ 354.483106][ C0] RDX: 0000000000000000 RSI: ffffffff8e6bd095 RDI: ffffffff8c8e8c80 [ 354.483119][ C0] RBP: ffff888033f31f40 R08: 0000000000000001 R09: 0000000000000000 [ 354.483132][ C0] R10: dffffc0000000000 R11: fffffbfff233ae38 R12: ffff888032f410c8 [ 354.483146][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000246 [ 354.483158][ C0] FS: 0000000000000000(0000) GS:ffff88812361f000(0000) knlGS:0000000000000000 [ 354.483174][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.483187][ C0] CR2: 00007f9c02dfff7c CR3: 000000007efd0000 CR4: 00000000003526f0 [ 354.483204][ C0] Call Trace: [ 354.483211][ C0] [ 354.483219][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 354.483240][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 354.483261][ C0] _raw_spin_lock+0x2e/0x40 [ 354.483277][ C0] ? mrp_join_timer+0x56e/0x7f0 [ 354.483297][ C0] mrp_join_timer+0x56e/0x7f0 [ 354.483320][ C0] call_timer_fn+0x18d/0x5f0 [ 354.483337][ C0] ? __pfx_mrp_join_timer+0x10/0x10 [ 354.483356][ C0] ? call_timer_fn+0xd5/0x5f0 [ 354.483372][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 354.483406][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.483423][ C0] ? __pfx_mrp_join_timer+0x10/0x10 [ 354.483444][ C0] __run_timer_base+0x652/0x8b0 [ 354.483477][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 354.483514][ C0] ? try_to_wake_up+0x8ce/0x14e0 [ 354.483542][ C0] run_timer_softirq+0xb7/0x170 [ 354.483570][ C0] handle_softirqs+0x265/0x8d0 [ 354.483601][ C0] ? batadv_tt_purge+0x4ee/0xa40 [ 354.483628][ C0] do_softirq+0x77/0xd0 [ 354.483652][ C0] [ 354.483658][ C0] [ 354.483665][ C0] __local_bh_enable_ip+0x100/0x140 [ 354.483690][ C0] batadv_tt_purge+0x4ee/0xa40 [ 354.483722][ C0] ? process_scheduled_works+0x97a/0x1630 [ 354.483750][ C0] process_scheduled_works+0xc3d/0x1630 [ 354.483793][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 354.483825][ C0] ? assign_work+0x3af/0x5d0 [ 354.483854][ C0] rescuer_thread+0x84a/0x12a0 [ 354.483876][ C0] ? rescuer_thread+0xb8/0x12a0 [ 354.483903][ C0] kthread+0x38b/0x480 [ 354.483924][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 354.483941][ C0] ? __pfx_kthread+0x10/0x10 [ 354.483962][ C0] ret_from_fork+0x514/0xb70 [ 354.483984][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 354.484004][ C0] ? __switch_to+0xc78/0x1410 [ 354.484035][ C0] ? __pfx_kthread+0x10/0x10 [ 354.484056][ C0] ret_from_fork_asm+0x1a/0x30 [ 354.484084][ C0] [ 354.484959][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 358.859751][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 358.868933][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 358.879025][ T33] Call Trace: [ 358.882337][ T33] [ 358.885485][ T33] vpanic+0x26f/0x710 [ 358.889522][ T33] panic+0xc5/0xd0 [ 358.893276][ T33] ? __pfx_panic+0x10/0x10 [ 358.897752][ T33] ? wq_watchdog_touch+0xf9/0x160 [ 358.902835][ T33] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 358.909064][ T33] watchdog+0x10e7/0x10f0 [ 358.913453][ T33] ? watchdog+0x209/0x10f0 [ 358.917923][ T33] kthread+0x38b/0x480 [ 358.922039][ T33] ? __pfx_watchdog+0x10/0x10 [ 358.926756][ T33] ? __pfx_kthread+0x10/0x10 [ 358.931400][ T33] ret_from_fork+0x514/0xb70 [ 358.936034][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 358.941202][ T33] ? __switch_to+0xc78/0x1410 [ 358.945929][ T33] ? __pfx_kthread+0x10/0x10 [ 358.950557][ T33] ret_from_fork_asm+0x1a/0x30 [ 358.955376][ T33] [ 358.958598][ T33] Kernel Offset: disabled [ 358.962942][ T33] Rebooting in 86400 seconds..