last executing test programs: 23.100886491s ago: executing program 4 (id=9126): socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) bind$packet(r1, &(0x7f0000000180)={0x11, 0x2, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 22.948883511s ago: executing program 4 (id=9128): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001300010027bd7000fedbdf250700", @ANYRES32=r1, @ANYBLOB="006401002000000014001a80100002"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x800) 22.759703969s ago: executing program 4 (id=9130): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100"/48], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept$inet6(r0, 0x0, 0x0) 21.337126492s ago: executing program 4 (id=9140): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000008000000e27f00000100000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) r1 = socket$kcm(0x2, 0x0, 0x84) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x58, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4001, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast1, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x81}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc, 0xff}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}, 0x80ff}}]}, 0x138}}, 0x844) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x2, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x70bd29, 0x2, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c0001"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r10}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r12, &(0x7f00000004c0)="ac", &(0x7f0000000080)=""/32}, 0x20) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, r6, 0x25, 0xc, @void}, 0x10) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES64=r6], 0x20}}, 0x44800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 20.792163135s ago: executing program 4 (id=9149): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000006c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x0, 0xfe}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x2, @loopback}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="1807000000000008000000000080001085100000030000009500007b0000000085000000812cc9130000009500000000"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x50}, 0x94) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340)={0xf}, 0x4) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c0002800800014057f9c185c319479157ebf760116dce67846fbfe9593f4ffd6dc1bc8d0a435ad324b6178ea4"], 0x44}, 0x1, 0x0, 0x0, 0x10004046}, 0x4000050) 19.463762956s ago: executing program 1 (id=9160): bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000002d00)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x43, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0xaa00, @udp={{0x5, 0x4, 0x0, 0x0, 0x35, 0x2, 0x1, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x21, 0x0, @wg=@data={0x4, 0x8d6, 0xfffffffffffffffd, "9c67524ed6ed152d4f"}}}}}}, 0x0) 18.68823207s ago: executing program 1 (id=9164): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100"/48], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept$inet6(r1, 0x0, 0x0) 18.548147866s ago: executing program 0 (id=9165): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) socket$kcm(0x2, 0x3, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x8000) 18.436046258s ago: executing program 2 (id=9167): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a0000000200", 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000300), &(0x7f0000000400)=0x8) 18.417035387s ago: executing program 0 (id=9168): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000001240)=""/181, &(0x7f0000001340)=0xb5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/163, 0xfeb2}], 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) write$cgroup_int(r3, &(0x7f0000000140), 0xfffffdef) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x2c, r7, 0x705, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x4004004) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="980000001000010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="24040100000000001400030076657468315f746f5f626f6e6400000014001680100001800c"], 0x98}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options]}, 0x24}, 0x1, 0x0, 0x0, 0x408d1}, 0x0) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) close(r1) 17.959187539s ago: executing program 3 (id=9172): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x200, 0x98, 0x98, 0x298, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x200}}, {{@ip={@private=0xa010100, @local, 0x0, 0xff, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x0, 0x0, 0x48}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x6, 0x0, 0x0, 0x2, 0x4, 0xc]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x11, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @private=0xa010100, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@cred={{0x1c}}], 0x20}, 0x40000002) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0xf) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 4) 17.641180252s ago: executing program 1 (id=9173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FLAGS={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 17.602461637s ago: executing program 3 (id=9174): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000580)={@local, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x1, @rand_addr=' \x01\x00', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x40, {[@exp_fastopen={0xfe, 0x7, 0xf989, "23377f"}]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000580)={@local, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x1, @rand_addr=' \x01\x00', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x40, {[@exp_fastopen={0xfe, 0x7, 0xf989, "23377f"}]}}}}}}}}, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) (async) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x50, 0x1, 0x2, 0x9}, {0x6, 0x0, 0x3, 0x365}]}) (async) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x50, 0x1, 0x2, 0x9}, {0x6, 0x0, 0x3, 0x365}]}) write$ppp(r4, &(0x7f0000000400)='k\'', 0x2) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a8008000280", @ANYRES16=r1, @ANYRES32=r3], 0x44}}, 0x2000800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000000000000000000000000000304a63fce5565cab15d0ea3081e30a3b43ed9fcc63e1b718699f8739cea611d45732e64639c299ba977da2a121c3cd64c0fb0cef8820e102b34bfbf369bbed3ba10df92651020e2d6ed22599296d0e3726524743bf125e7adda7de31ac5ee5e4f204c60b4fb75cf70f01c67cd0d428f197c19f43ca51d867dbb5cec0916b03e16403d78c05fc13bcaa4601f339283870688e5b1c62864a263236585e9c263024ac3ee8406b9034f725bad5c7f2a0e863bee31e169c32fdead2b1fabce993d2d1231445cc7c03bf000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f4956000000"], 0x44}}, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) 17.559062293s ago: executing program 1 (id=9175): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f00000018c0)=""/4108, 0x100c}, {&(0x7f0000001680)=""/109, 0x6d}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f00000005c0)=""/61, 0x3d}], 0x5}, 0x7}, {{0x0, 0x0, 0x0}, 0xd3a7}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8000005}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xa9e5}], 0x8, 0x2000, 0x0) 17.421895733s ago: executing program 1 (id=9176): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000100", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf25050000"], 0x14}, 0x1, 0x0, 0x0, 0x4c445}, 0x40140) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x44000) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000280)={r4, 0x7, 0x104, 0x7ff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f00000006c0)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88) 17.406643833s ago: executing program 0 (id=9177): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f00000018c0)=""/4108, 0x100c}, {&(0x7f0000001680)=""/109, 0x6d}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f00000005c0)=""/61, 0x3d}], 0x5}, 0x7}, {{0x0, 0x0, 0x0}, 0xd3a7}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8000005}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xa9e5}], 0x8, 0x2000, 0x0) 17.360897892s ago: executing program 2 (id=9178): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) socket$kcm(0x2, 0x3, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x8000) 17.360406485s ago: executing program 3 (id=9179): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000280)={&(0x7f0000000200)=@ax25={{0x3, @default, 0x4}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x80, &(0x7f00000015c0), 0x0, &(0x7f0000001600)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x20004c00) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000fe800000000000000000000000000018ff0200000000000000000000000000010000000800000edf0a00008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000090000000001000000000000800600000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a00000000000004516185f844db031900000080400002000000000000080500"/119], 0xb8}}, 0x80) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000080)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000000c0)=r3) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x20000}, 0xc) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000016c0)=ANY=[@ANYBLOB="a0000000210001000400000000000000fc020000000000000000000000000001ff02000000000000000000000000000100000000000000020a0000a02e000000a055a8d414825a782019726d1a4f04aa3010e22e2939531cb4a69662cb74abc6d7828489c96699e3058c4cc697a2163f86538f13eabfd18397607c794b47e2e086", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100fc0000000000000000000000000000017f000001000000000000000000000000fc020000000000000000000000000001e00000010000000000000000000000003c040000000000000a000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x439, 0x70bd2b, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x13, 0x618c4}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vti={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x27}}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x3}, @IFLA_VTI_LINK={0x8}], @IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010101}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="58010000100013070000000000000001fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r5, @ANYRESOCT=r5, @ANYBLOB="06"], 0x158}}, 0x1) 17.268087366s ago: executing program 2 (id=9180): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001300010027bd7000fedbdf25070000", @ANYRES32=r1, @ANYBLOB="006401002000000014001a80100002"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x800) 17.179138796s ago: executing program 3 (id=9181): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x402, @empty, 0x10004}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x41, 0xdffffff7}}], 0x18}, 0x4404c004) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="58000000100039040200000000000000000000001957e143bf42938766f996fb7e0cbcd2a5733fb7601923f212a4888483d737cf3b78a5bffa4d8571ed9e67db5513d6e2bcc408", @ANYRES32, @ANYBLOB="40100000004104002800128008000100677265001c000280080007000a010100080014"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="680000001000ffff64e4ff030000df2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500480012800e00010069703665727370616e00000034000280060003003000000014000700fc02000000000000000000000000000014000600fc"], 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 17.169543275s ago: executing program 0 (id=9182): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000001240)=""/181, &(0x7f0000001340)=0xb5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/163, 0xfeb2}], 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) write$cgroup_int(r3, &(0x7f0000000140), 0xfffffdef) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x2c, r7, 0x705, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x4004004) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="24040100000000001400030076657468315f746f5f626f6e6400000014001680100001800c0003007fff"], 0x98}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options]}, 0x24}, 0x1, 0x0, 0x0, 0x408d1}, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) close(0x4) close(r1) 17.115429403s ago: executing program 2 (id=9183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 17.00082459s ago: executing program 3 (id=9184): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) socket$kcm(0x2, 0x3, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0102000000000000000001000000090001"], 0xe8}}, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r3, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r1], 0x44}}, 0x8000) 16.975095508s ago: executing program 2 (id=9185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 16.814030964s ago: executing program 3 (id=9186): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x50) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000001040), &(0x7f0000000100)) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 16.783875964s ago: executing program 2 (id=9187): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000007c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000ff000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000aa00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "b0bf9bcf534a9fae", "7d517cd5adb2dc80e463f1b729f4669b9b8a7e1450160d10a006bcde23bf7cb6", "6dcda213", "e6674e4c17afe9dd"}, 0x38) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r9, {0xa, 0xffff}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x110, 0x110, 0xa, [@type_tag={0x2, 0x0, 0x0, 0x12, 0x4}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x34, 0x0, 0x6d, 0x6}, @enum={0x4, 0x4, 0x0, 0x6, 0x4, [{0x8, 0x9493}, {0x10, 0x4}, {0xb, 0x2}, {0x4, 0x3}]}, @restrict={0xe, 0x0, 0x0, 0xb, 0x5}, @union={0xc, 0x3, 0x0, 0x5, 0x0, 0x8, [{0x3, 0x3, 0xffffffff}, {0x7, 0x0, 0x5789}, {0x1, 0x4, 0x7a023a0b}]}, @struct={0x6, 0x3, 0x0, 0x4, 0x0, 0x8, [{0xc}, {0x3, 0x2}, {0x4, 0x2, 0x6}]}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xa, 0x4}, {0x7, 0x1}, {0x7, 0x1}, {0x3, 0x4}, {0x5, 0x1}, {0xe}, {0xb, 0x5}, {0xd, 0x5}]}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0xa}]}, {0x0, [0x61, 0x30, 0x61, 0x47b9fee6a352629c, 0x5f, 0x2e, 0x0, 0x0]}}, &(0x7f0000000600), 0x132, 0x0, 0x1, 0x6}, 0x28) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x87}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5802}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f00000007c0)={r6, &(0x7f00000006c0)='GPL\x00', 0x101000, &(0x7f0000000700)={@align=0x3c, {0x9, 0x47e0, 0x7ff, 0x477}}, 0x8, &(0x7f0000000740)={@_ha_fsid}, &(0x7f0000000780)=0x7}) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00', 0x0, 0x18}, 0x18) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{r4, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%pB \x00'}, 0x20) r17 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0xd, &(0x7f0000000380)=@raw=[@call={0x85, 0x0, 0x0, 0x6b}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x36}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff7fff}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000400)='GPL\x00', 0x2, 0x45, &(0x7f0000000440)=""/69, 0x40f00, 0x20, '\x00', r9, 0x25, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x0, 0x9, 0x6, 0x7fff}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000a40)=[r11, r12, r13, 0x1, r14, r0, r15, 0xffffffffffffffff, r16, r17], &(0x7f0000000a80)=[{0x4, 0x5, 0x8, 0x9}, {0x0, 0x1, 0xa, 0x1}, {0x2, 0x1, 0xb, 0x4}, {0x2, 0x4, 0x3, 0xc}, {0x3, 0x2, 0x5, 0x9}, {0x3, 0x1, 0xf, 0x2}, {0x4, 0x4, 0xf, 0xc}, {0x5, 0x4, 0x3, 0xc}, {0x4, 0x1, 0xe, 0xa}], 0x10, 0x7}, 0x94) 16.18801241s ago: executing program 0 (id=9188): r0 = socket(0x1d, 0x2, 0x6) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074e204e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbff240047000000000000000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0400000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000021700"/28], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x6}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1c000002", @ANYRES16=r5, @ANYBLOB="9db625bd7000ffdbdf25010000000500040001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$alg(0x26, 0x5, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 15.852205655s ago: executing program 0 (id=9189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000050000000300000000000011030000000000000000000000000000040000000000000000010000040000000000100000002e00"], 0x0, 0x51}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc8000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'pimreg\x00', 0x200}) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x3}, 0x7}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000080000"], 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r3, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r3, &(0x7f00000001c0), 0x20000000}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x48080}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r11], 0x5c}}, 0x40) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 15.792505958s ago: executing program 1 (id=9190): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000004c0)=@broute={'broute\x00', 0x20, 0x4, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000100], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/302]}, 0x1a6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x8, 0x5, 0x6, 0x3, 0x1]}, &(0x7f0000000080)=0x78) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010100000000fedbdf25030000005800018044000400200001000a000000000000000000000000000000000000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73797a3000000000"], 0x6c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYBLOB="03800000000000003000128009000100766c616e000000002000028006000100030000000c0002000c0000001c0000000600050088a8000008000500", @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 15.237275305s ago: executing program 4 (id=9191): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000009000000000000000100000091118200000000009500000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x400040, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400000000000000000000030000bcec40594700000100000001000000060000"], 0x0, 0x34}, 0x28) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000300)={0x2, 'bridge0\x00', 0x1}, 0x18) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fcdbdf250100000009000a005e5e402d5b00000010000780a1fe018008000100", @ANYRES32, @ANYBLOB="0c0008000369ad000000000000000c00060001000000000000000c000200010000000000000050d7815fd5045d48724d8f61c3"], 0x54}, 0x1, 0x0, 0x0, 0x40040}, 0x8c0) (async) pipe(&(0x7f0000000140)) (async) unshare(0x6020400) (async) pselect6(0x40, &(0x7f0000000340)={0x7f, 0x100, 0x8, 0x7, 0x9, 0x3, 0x800, 0x5}, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000001200"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000008000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000080), &(0x7f00000000c0)=r8}, 0x20) 1.504699564s ago: executing program 32 (id=9187): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000007c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000ff000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000aa00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "b0bf9bcf534a9fae", "7d517cd5adb2dc80e463f1b729f4669b9b8a7e1450160d10a006bcde23bf7cb6", "6dcda213", "e6674e4c17afe9dd"}, 0x38) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r9, {0xa, 0xffff}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x110, 0x110, 0xa, [@type_tag={0x2, 0x0, 0x0, 0x12, 0x4}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x34, 0x0, 0x6d, 0x6}, @enum={0x4, 0x4, 0x0, 0x6, 0x4, [{0x8, 0x9493}, {0x10, 0x4}, {0xb, 0x2}, {0x4, 0x3}]}, @restrict={0xe, 0x0, 0x0, 0xb, 0x5}, @union={0xc, 0x3, 0x0, 0x5, 0x0, 0x8, [{0x3, 0x3, 0xffffffff}, {0x7, 0x0, 0x5789}, {0x1, 0x4, 0x7a023a0b}]}, @struct={0x6, 0x3, 0x0, 0x4, 0x0, 0x8, [{0xc}, {0x3, 0x2}, {0x4, 0x2, 0x6}]}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xa, 0x4}, {0x7, 0x1}, {0x7, 0x1}, {0x3, 0x4}, {0x5, 0x1}, {0xe}, {0xb, 0x5}, {0xd, 0x5}]}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0xa}]}, {0x0, [0x61, 0x30, 0x61, 0x47b9fee6a352629c, 0x5f, 0x2e, 0x0, 0x0]}}, &(0x7f0000000600), 0x132, 0x0, 0x1, 0x6}, 0x28) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x87}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5802}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f00000007c0)={r6, &(0x7f00000006c0)='GPL\x00', 0x101000, &(0x7f0000000700)={@align=0x3c, {0x9, 0x47e0, 0x7ff, 0x477}}, 0x8, &(0x7f0000000740)={@_ha_fsid}, &(0x7f0000000780)=0x7}) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00', 0x0, 0x18}, 0x18) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{r4, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%pB \x00'}, 0x20) r17 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0xd, &(0x7f0000000380)=@raw=[@call={0x85, 0x0, 0x0, 0x6b}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x36}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff7fff}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000400)='GPL\x00', 0x2, 0x45, &(0x7f0000000440)=""/69, 0x40f00, 0x20, '\x00', r9, 0x25, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x0, 0x9, 0x6, 0x7fff}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000a40)=[r11, r12, r13, 0x1, r14, r0, r15, 0xffffffffffffffff, r16, r17], &(0x7f0000000a80)=[{0x4, 0x5, 0x8, 0x9}, {0x0, 0x1, 0xa, 0x1}, {0x2, 0x1, 0xb, 0x4}, {0x2, 0x4, 0x3, 0xc}, {0x3, 0x2, 0x5, 0x9}, {0x3, 0x1, 0xf, 0x2}, {0x4, 0x4, 0xf, 0xc}, {0x5, 0x4, 0x3, 0xc}, {0x4, 0x1, 0xe, 0xa}], 0x10, 0x7}, 0x94) 1.47237862s ago: executing program 33 (id=9186): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x50) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000001040), &(0x7f0000000100)) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 500.95284ms ago: executing program 34 (id=9189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000050000000300000000000011030000000000000000000000000000040000000000000000010000040000000000100000002e00"], 0x0, 0x51}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc8000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'pimreg\x00', 0x200}) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x3}, 0x7}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000080000"], 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r3, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r3, &(0x7f00000001c0), 0x20000000}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x48080}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r11], 0x5c}}, 0x40) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 464.37796ms ago: executing program 35 (id=9190): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000004c0)=@broute={'broute\x00', 0x20, 0x4, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000100], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/302]}, 0x1a6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x8, 0x5, 0x6, 0x3, 0x1]}, &(0x7f0000000080)=0x78) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010100000000fedbdf25030000005800018044000400200001000a000000000000000000000000000000000000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73797a3000000000"], 0x6c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYBLOB="03800000000000003000128009000100766c616e000000002000028006000100030000000c0002000c0000001c0000000600050088a8000008000500", @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 0s ago: executing program 36 (id=9191): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000009000000000000000100000091118200000000009500000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x400040, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400000000000000000000030000bcec40594700000100000001000000060000"], 0x0, 0x34}, 0x28) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000300)={0x2, 'bridge0\x00', 0x1}, 0x18) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fcdbdf250100000009000a005e5e402d5b00000010000780a1fe018008000100", @ANYRES32, @ANYBLOB="0c0008000369ad000000000000000c00060001000000000000000c000200010000000000000050d7815fd5045d48724d8f61c3"], 0x54}, 0x1, 0x0, 0x0, 0x40040}, 0x8c0) (async) pipe(&(0x7f0000000140)) (async) unshare(0x6020400) (async) pselect6(0x40, &(0x7f0000000340)={0x7f, 0x100, 0x8, 0x7, 0x9, 0x3, 0x800, 0x5}, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000001200"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000008000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000080), &(0x7f00000000c0)=r8}, 0x20) kernel console output (not intermixed with test programs): 969.534548][T30573] openvswitch: netlink: Key 6 has unexpected len 18 expected 2 [ 969.870440][T29953] Bluetooth: hci0: command 0x0406 tx timeout [ 970.567647][T30595] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 970.575131][T30595] IPv6: NLM_F_CREATE should be set when creating new route [ 970.582901][T30595] IPv6: NLM_F_CREATE should be set when creating new route [ 970.590285][T30595] IPv6: NLM_F_CREATE should be set when creating new route [ 971.002395][ T5651] Bluetooth: hci4: command 0x0406 tx timeout [ 971.096869][T30609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 971.143133][T30610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7667'. [ 971.183409][T30600] lo speed is unknown, defaulting to 1000 [ 971.247438][T30600] erspan0 speed is unknown, defaulting to 1000 [ 971.682736][T30623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7670'. [ 971.952280][T30641] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7671'. [ 972.055458][T30626] netlink: 'syz.4.7671': attribute type 1 has an invalid length. [ 972.086473][T30638] syzkaller1: entered promiscuous mode [ 972.104907][T30638] syzkaller1: entered allmulticast mode [ 972.425324][T30663] FAULT_INJECTION: forcing a failure. [ 972.425324][T30663] name failslab, interval 1, probability 0, space 0, times 0 [ 972.438936][T30663] CPU: 0 UID: 0 PID: 30663 Comm: syz.0.7679 Not tainted syzkaller #0 PREEMPT(full) [ 972.438965][T30663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 972.438977][T30663] Call Trace: [ 972.438985][T30663] [ 972.438995][T30663] dump_stack_lvl+0xe8/0x150 [ 972.439024][T30663] should_fail_ex+0x412/0x560 [ 972.439053][T30663] should_failslab+0xa8/0x100 [ 972.439082][T30663] ? skb_clone+0x212/0x3a0 [ 972.439102][T30663] kmem_cache_alloc_noprof+0x87/0x650 [ 972.439129][T30663] ? __netlink_lookup+0xc6/0x8b0 [ 972.439157][T30663] skb_clone+0x212/0x3a0 [ 972.439188][T30663] __netlink_deliver_tap+0x404/0x850 [ 972.439222][T30663] ? netlink_deliver_tap+0x2e/0x1b0 [ 972.439245][T30663] netlink_deliver_tap+0x19c/0x1b0 [ 972.439267][T30663] netlink_unicast+0x730/0x8e0 [ 972.439309][T30663] netlink_sendmsg+0x813/0xb40 [ 972.439340][T30663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 972.439364][T30663] ? aa_sock_msg_perm+0xf1/0x1b0 [ 972.439391][T30663] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 972.439421][T30663] ____sys_sendmsg+0x972/0x9f0 [ 972.439441][T30663] ? __might_fault+0xaf/0x130 [ 972.439481][T30663] ? __pfx_____sys_sendmsg+0x10/0x10 [ 972.439510][T30663] ? import_iovec+0x73/0xa0 [ 972.439541][T30663] ___sys_sendmsg+0x2a5/0x360 [ 972.439557][T30663] ? __lock_acquire+0x6b5/0x2cf0 [ 972.439582][T30663] ? __pfx____sys_sendmsg+0x10/0x10 [ 972.439656][T30663] ? __fget_files+0x2a/0x420 [ 972.439678][T30663] ? __fget_files+0x3a0/0x420 [ 972.439714][T30663] __x64_sys_sendmsg+0x1bd/0x2a0 [ 972.439737][T30663] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 972.439779][T30663] ? __pfx_ksys_write+0x10/0x10 [ 972.439816][T30663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.439837][T30663] do_syscall_64+0x15f/0xf80 [ 972.439863][T30663] ? trace_irq_disable+0x3b/0x140 [ 972.439890][T30663] ? clear_bhb_loop+0x40/0x90 [ 972.439913][T30663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.439931][T30663] RIP: 0033:0x7f5eee79ce59 [ 972.439951][T30663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 972.439967][T30663] RSP: 002b:00007f5eef63c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 972.439990][T30663] RAX: ffffffffffffffda RBX: 00007f5eeea15fa0 RCX: 00007f5eee79ce59 [ 972.440005][T30663] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 972.440016][T30663] RBP: 00007f5eef63c090 R08: 0000000000000000 R09: 0000000000000000 [ 972.440027][T30663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 972.440039][T30663] R13: 00007f5eeea16038 R14: 00007f5eeea15fa0 R15: 00007ffedbdd12b8 [ 972.440072][T30663] [ 972.939648][T30673] netlink: 'syz.3.7680': attribute type 13 has an invalid length. [ 973.012667][T30665] lo speed is unknown, defaulting to 1000 [ 973.133077][T30676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 973.145945][T30665] erspan0 speed is unknown, defaulting to 1000 [ 973.335670][T30683] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 973.407313][T30690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7688'. [ 973.417893][T30691] netlink: 'syz.1.7686': attribute type 13 has an invalid length. [ 973.453427][T30691] netlink: 'syz.1.7686': attribute type 17 has an invalid length. [ 973.526678][T30683] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.534607][T30683] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.775964][T30683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 973.800728][T30683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 974.236919][T30691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.263196][T30691] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.285325][T30691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 974.336888][T30691] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.344180][T30691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.359197][T30691] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.366403][T30691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 974.387078][T30691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 974.400660][T30691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 974.411438][T30707] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7691'. [ 974.426286][T30691] hsr0: left promiscuous mode [ 974.437405][T30691] veth1_vlan: left promiscuous mode [ 974.444419][T30691] veth0_vlan: left promiscuous mode [ 974.451201][T30691] veth0_vlan: entered promiscuous mode [ 974.465075][T30691] veth1_vlan: entered promiscuous mode [ 974.482154][T30691] veth1_macvtap: left promiscuous mode [ 974.489668][T30691] veth0_macvtap: left promiscuous mode [ 974.497442][T30691] veth0_macvtap: entered promiscuous mode [ 974.512019][T30691] veth1_macvtap: entered promiscuous mode [ 974.526962][T30691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 974.538830][T30691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 974.549995][T30691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 974.561496][T30691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 974.596960][T30691] bridge1: left allmulticast mode [ 974.603833][T30691] mac80211_hwsim hwsim56 wlan0: entered promiscuous mode [ 974.614919][T30691] bond1: left promiscuous mode [ 974.620036][T30691] bridge2: left promiscuous mode [ 974.625301][T30691] bond1: left allmulticast mode [ 974.632302][T30691] bridge2: left allmulticast mode [ 974.639185][T30691] 8021q: adding VLAN 0 to HW filter on device bond1 [ 974.648140][T30691] 8021q: adding VLAN 0 to HW filter on device bond2 [ 974.656293][T30691] 8021q: adding VLAN 0 to HW filter on device bond3 [ 974.707609][T30694] bond0: left promiscuous mode [ 974.712716][T30694] bond_slave_0: left promiscuous mode [ 974.720844][T30694] bond_slave_1: left promiscuous mode [ 974.730611][T30694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.740937][T30694] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.763189][T30694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 974.794318][T30694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 974.804235][T30694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 974.820113][T30694] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 974.836924][T30694] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 974.855613][T30694] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 974.866287][T30694] veth1_macvtap: left promiscuous mode [ 974.877122][T30716] netlink: 'syz.1.7692': attribute type 12 has an invalid length. [ 974.885739][T30694] veth0_macvtap: left promiscuous mode [ 974.891689][T30716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7692'. [ 974.902961][T30694] veth0_macvtap: entered promiscuous mode [ 974.910144][T30694] veth1_macvtap: entered promiscuous mode [ 974.923675][T30694] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 974.932160][T30694] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 974.941788][T30694] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 974.951731][T30694] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 974.963293][T30694] 8021q: adding VLAN 0 to HW filter on device bond1 [ 974.971887][T30694] mac80211_hwsim hwsim55 wlan1: entered promiscuous mode [ 974.980283][T30694] batman_adv: batadv0: Interface activated: macvtap1 [ 974.990585][T30694] erspan1: left promiscuous mode [ 974.995672][T30694] erspan1: left allmulticast mode [ 975.005761][T30694] 8021q: adding VLAN 0 to HW filter on device bond2 [ 975.033738][T30694] batman_adv: batadv0: Interface activated: macvtap2 [ 975.041161][T30694] bond3: left promiscuous mode [ 975.047061][T30694] batman_adv: batadv0: Interface activated: macvtap3 [ 975.057048][T30694] 8021q: adding VLAN 0 to HW filter on device bond5 [ 975.065651][T30694] gre2: left allmulticast mode [ 975.127024][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.134198][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 975.147127][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.154374][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.211205][T30716] bond0: option primary_reselect: invalid value (22) [ 975.230602][T30718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7693'. [ 975.263744][ T7227] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.312281][ T7227] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.325778][T30719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7693'. [ 975.340692][T30719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7693'. [ 975.352886][T30722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 975.416603][T30723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 975.442935][T30721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7694'. [ 975.463019][ T7227] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.589915][ T7227] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.632618][T30727] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7696'. [ 975.835266][T29488] bond4: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 975.857832][T29488] bond4: (slave veth5): making interface the new active one [ 975.873259][T29488] bond4: active interface up! [ 975.994658][T30741] netlink: 'syz.0.7697': attribute type 13 has an invalid length. [ 976.056827][T30743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 976.180565][T30746] ip6erspan0: entered allmulticast mode [ 976.412999][T30758] x_tables: duplicate underflow at hook 1 [ 976.414431][T30757] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7704'. [ 976.441302][T30760] FAULT_INJECTION: forcing a failure. [ 976.441302][T30760] name failslab, interval 1, probability 0, space 0, times 0 [ 976.472841][T30760] CPU: 0 UID: 0 PID: 30760 Comm: syz.2.7705 Not tainted syzkaller #0 PREEMPT(full) [ 976.472869][T30760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 976.472881][T30760] Call Trace: [ 976.472890][T30760] [ 976.472899][T30760] dump_stack_lvl+0xe8/0x150 [ 976.472928][T30760] should_fail_ex+0x412/0x560 [ 976.472958][T30760] should_failslab+0xa8/0x100 [ 976.472989][T30760] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 976.473019][T30760] ? kasprintf+0xe2/0x140 [ 976.473053][T30760] kvasprintf+0xeb/0x1a0 [ 976.473077][T30760] ? nf_tables_newset+0x1393/0x2580 [ 976.473100][T30760] ? nfnetlink_rcv+0x123e/0x27b0 [ 976.473125][T30760] ? netlink_unicast+0x75c/0x8e0 [ 976.473153][T30760] ? __pfx_kvasprintf+0x10/0x10 [ 976.473177][T30760] ? do_syscall_64+0x15f/0xf80 [ 976.473221][T30760] kasprintf+0xe2/0x140 [ 976.473255][T30760] ? __pfx_kasprintf+0x10/0x10 [ 976.473299][T30760] nf_tables_set_alloc_name+0x109/0x710 [ 976.473323][T30760] ? trace_kmalloc+0x2a/0xf0 [ 976.473352][T30760] ? __kmalloc_noprof+0x37d/0x760 [ 976.473376][T30760] ? __pfx_nf_tables_set_alloc_name+0x10/0x10 [ 976.473395][T30760] ? nla_strdup+0xb8/0x140 [ 976.473434][T30760] nf_tables_newset+0x13b4/0x2580 [ 976.473476][T30760] ? __pfx_nf_tables_newset+0x10/0x10 [ 976.473526][T30760] ? __nla_parse+0x40/0x60 [ 976.473557][T30760] nfnetlink_rcv+0x123e/0x27b0 [ 976.473625][T30760] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 976.473673][T30760] ? ref_tracker_free+0x693/0x840 [ 976.473733][T30760] ? __netlink_deliver_tap+0x807/0x850 [ 976.473765][T30760] ? netlink_deliver_tap+0x2e/0x1b0 [ 976.473784][T30760] ? netlink_deliver_tap+0x2e/0x1b0 [ 976.473839][T30760] netlink_unicast+0x75c/0x8e0 [ 976.473878][T30760] netlink_sendmsg+0x813/0xb40 [ 976.473908][T30760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 976.473931][T30760] ? aa_sock_msg_perm+0xf1/0x1b0 [ 976.473959][T30760] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 976.473989][T30760] ____sys_sendmsg+0x972/0x9f0 [ 976.474010][T30760] ? __might_fault+0xaf/0x130 [ 976.474041][T30760] ? __pfx_____sys_sendmsg+0x10/0x10 [ 976.474072][T30760] ? import_iovec+0x73/0xa0 [ 976.474103][T30760] ___sys_sendmsg+0x2a5/0x360 [ 976.474122][T30760] ? __lock_acquire+0x6b5/0x2cf0 [ 976.474148][T30760] ? __pfx____sys_sendmsg+0x10/0x10 [ 976.474208][T30760] ? __fget_files+0x2a/0x420 [ 976.474231][T30760] ? __fget_files+0x3a0/0x420 [ 976.474264][T30760] __x64_sys_sendmsg+0x1bd/0x2a0 [ 976.474287][T30760] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 976.474325][T30760] ? __pfx_ksys_write+0x10/0x10 [ 976.474362][T30760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.474384][T30760] do_syscall_64+0x15f/0xf80 [ 976.474411][T30760] ? trace_irq_disable+0x3b/0x140 [ 976.474440][T30760] ? clear_bhb_loop+0x40/0x90 [ 976.474465][T30760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.474483][T30760] RIP: 0033:0x7f1e0299ce59 [ 976.474503][T30760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 976.474521][T30760] RSP: 002b:00007f1e03917028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 976.474543][T30760] RAX: ffffffffffffffda RBX: 00007f1e02c15fa0 RCX: 00007f1e0299ce59 [ 976.474556][T30760] RDX: 0000000020008844 RSI: 00002000000000c0 RDI: 0000000000000003 [ 976.474570][T30760] RBP: 00007f1e03917090 R08: 0000000000000000 R09: 0000000000000000 [ 976.474582][T30760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 976.474594][T30760] R13: 00007f1e02c16038 R14: 00007f1e02c15fa0 R15: 00007fff843c62c8 [ 976.474629][T30760] [ 977.037922][T30774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 977.067485][T30772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7710'. [ 977.084635][T30775] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.085833][T30772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 977.116041][T30778] netlink: 'syz.1.7711': attribute type 13 has an invalid length. [ 977.235245][T30782] FAULT_INJECTION: forcing a failure. [ 977.235245][T30782] name failslab, interval 1, probability 0, space 0, times 0 [ 977.295130][T30782] CPU: 1 UID: 0 PID: 30782 Comm: syz.4.7714 Not tainted syzkaller #0 PREEMPT(full) [ 977.295160][T30782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 977.295171][T30782] Call Trace: [ 977.295181][T30782] [ 977.295190][T30782] dump_stack_lvl+0xe8/0x150 [ 977.295226][T30782] should_fail_ex+0x412/0x560 [ 977.295259][T30782] should_failslab+0xa8/0x100 [ 977.295288][T30782] __kmalloc_noprof+0xe8/0x760 [ 977.295315][T30782] ? netlbl_mgmt_add_common+0x156/0x13b0 [ 977.295334][T30782] ? __kmalloc_cache_noprof+0x15b/0x660 [ 977.295365][T30782] netlbl_mgmt_add_common+0x156/0x13b0 [ 977.295394][T30782] ? apparmor_current_getlsmprop_subj+0xce/0x150 [ 977.295424][T30782] netlbl_mgmt_add+0x2bf/0x360 [ 977.295454][T30782] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 977.295483][T30782] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 977.295508][T30782] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 977.295540][T30782] genl_family_rcv_msg_doit+0x22a/0x330 [ 977.295572][T30782] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 977.295610][T30782] ? bpf_lsm_capable+0x9/0x20 [ 977.295628][T30782] ? security_capable+0x7e/0x2c0 [ 977.295660][T30782] genl_rcv_msg+0x61c/0x7a0 [ 977.295692][T30782] ? __pfx_genl_rcv_msg+0x10/0x10 [ 977.295717][T30782] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 977.295772][T30782] netlink_rcv_skb+0x232/0x4b0 [ 977.295793][T30782] ? __pfx_genl_rcv_msg+0x10/0x10 [ 977.295820][T30782] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 977.295859][T30782] ? down_read+0x270/0x2e0 [ 977.295877][T30782] ? genl_rcv+0xd/0x40 [ 977.295903][T30782] genl_rcv+0x28/0x40 [ 977.295924][T30782] netlink_unicast+0x75c/0x8e0 [ 977.295972][T30782] netlink_sendmsg+0x813/0xb40 [ 977.296002][T30782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 977.296023][T30782] ? aa_sock_msg_perm+0xf1/0x1b0 [ 977.296049][T30782] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 977.296075][T30782] ____sys_sendmsg+0x972/0x9f0 [ 977.296095][T30782] ? __might_fault+0xaf/0x130 [ 977.296125][T30782] ? __pfx_____sys_sendmsg+0x10/0x10 [ 977.296156][T30782] ? import_iovec+0x73/0xa0 [ 977.296188][T30782] ___sys_sendmsg+0x2a5/0x360 [ 977.296206][T30782] ? __lock_acquire+0x6b5/0x2cf0 [ 977.296233][T30782] ? __pfx____sys_sendmsg+0x10/0x10 [ 977.296306][T30782] ? __fget_files+0x2a/0x420 [ 977.296329][T30782] ? __fget_files+0x3a0/0x420 [ 977.296366][T30782] __x64_sys_sendmsg+0x1bd/0x2a0 [ 977.296390][T30782] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 977.296422][T30782] ? __pfx_ksys_write+0x10/0x10 [ 977.296460][T30782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.296482][T30782] do_syscall_64+0x15f/0xf80 [ 977.296518][T30782] ? trace_irq_disable+0x3b/0x140 [ 977.296546][T30782] ? clear_bhb_loop+0x40/0x90 [ 977.296571][T30782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.296590][T30782] RIP: 0033:0x7f18b139ce59 [ 977.296611][T30782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 977.296627][T30782] RSP: 002b:00007f18b231e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 977.296649][T30782] RAX: ffffffffffffffda RBX: 00007f18b1615fa0 RCX: 00007f18b139ce59 [ 977.296661][T30782] RDX: 0000000000000000 RSI: 0000200000000d80 RDI: 0000000000000004 [ 977.296673][T30782] RBP: 00007f18b231e090 R08: 0000000000000000 R09: 0000000000000000 [ 977.296686][T30782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.296697][T30782] R13: 00007f18b1616038 R14: 00007f18b1615fa0 R15: 00007ffceffd68d8 [ 977.296732][T30782] [ 977.742971][T30780] lo speed is unknown, defaulting to 1000 [ 977.751576][T30780] erspan0 speed is unknown, defaulting to 1000 [ 978.124687][T30804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 978.395546][T30814] netlink: 'syz.1.7728': attribute type 13 has an invalid length. [ 978.413791][T30818] FAULT_INJECTION: forcing a failure. [ 978.413791][T30818] name failslab, interval 1, probability 0, space 0, times 0 [ 978.426866][T30818] CPU: 1 UID: 0 PID: 30818 Comm: syz.0.7730 Not tainted syzkaller #0 PREEMPT(full) [ 978.426893][T30818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 978.426905][T30818] Call Trace: [ 978.426913][T30818] [ 978.426921][T30818] dump_stack_lvl+0xe8/0x150 [ 978.426951][T30818] should_fail_ex+0x412/0x560 [ 978.426981][T30818] should_failslab+0xa8/0x100 [ 978.427021][T30818] __kmalloc_noprof+0xe8/0x760 [ 978.427048][T30818] ? bpf_test_init+0x9f/0x150 [ 978.427074][T30818] bpf_test_init+0x9f/0x150 [ 978.427097][T30818] bpf_prog_test_run_xdp+0x529/0x1160 [ 978.427136][T30818] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 978.427163][T30818] ? __fget_files+0x2a/0x420 [ 978.427193][T30818] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 978.427216][T30818] bpf_prog_test_run+0x2c7/0x340 [ 978.427241][T30818] __sys_bpf+0x643/0x950 [ 978.427273][T30818] ? __pfx___sys_bpf+0x10/0x10 [ 978.427319][T30818] ? ksys_write+0x242/0x270 [ 978.427350][T30818] ? __pfx_ksys_write+0x10/0x10 [ 978.427382][T30818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.427405][T30818] __x64_sys_bpf+0x7c/0x90 [ 978.427433][T30818] do_syscall_64+0x15f/0xf80 [ 978.427460][T30818] ? trace_irq_disable+0x3b/0x140 [ 978.427488][T30818] ? clear_bhb_loop+0x40/0x90 [ 978.427512][T30818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.427532][T30818] RIP: 0033:0x7f5eee79ce59 [ 978.427553][T30818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.427569][T30818] RSP: 002b:00007f5eef63c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 978.427591][T30818] RAX: ffffffffffffffda RBX: 00007f5eeea15fa0 RCX: 00007f5eee79ce59 [ 978.427605][T30818] RDX: 000000000000003b RSI: 00002000000008c0 RDI: 000000000000000a [ 978.427618][T30818] RBP: 00007f5eef63c090 R08: 0000000000000000 R09: 0000000000000000 [ 978.427630][T30818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 978.427642][T30818] R13: 00007f5eeea16038 R14: 00007f5eeea15fa0 R15: 00007ffedbdd12b8 [ 978.427675][T30818] [ 978.737986][T30826] __nla_validate_parse: 6 callbacks suppressed [ 978.738006][T30826] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7733'. [ 978.822966][T30826] ip6erspan0: entered allmulticast mode [ 978.838815][T30828] siw: device registration error -23 [ 978.942524][T30832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 978.954893][T30835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7737'. [ 979.003835][T30835] netlink: 'syz.0.7737': attribute type 6 has an invalid length. [ 979.215499][T30839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7739'. [ 979.344929][T30843] syzkaller0: entered promiscuous mode [ 979.352136][T30843] syzkaller0: entered allmulticast mode [ 979.401309][T30845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7742'. [ 979.435691][T30845] macsec1: entered promiscuous mode [ 979.443352][T30847] syz_tun: entered allmulticast mode [ 979.451036][T30846] syz_tun: left allmulticast mode [ 979.467888][T30845] netlink: 'syz.1.7742': attribute type 39 has an invalid length. [ 979.554395][T30849] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7744'. [ 979.674404][T30855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7746'. [ 979.885147][T30865] netlink: 'syz.1.7749': attribute type 1 has an invalid length. [ 979.899011][T30865] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7749'. [ 979.915250][T30872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7753'. [ 979.925628][T30872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7753'. [ 979.935826][T30872] netlink: 'syz.2.7753': attribute type 15 has an invalid length. [ 979.952180][T30861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7749'. [ 980.099201][T30861] macsec2: entered promiscuous mode [ 980.126148][T30861] bridge0: entered promiscuous mode [ 980.132233][T30861] macsec2: entered allmulticast mode [ 980.137805][T30861] bridge0: entered allmulticast mode [ 980.153156][T30861] bridge0: left allmulticast mode [ 980.198042][T27239] bridge0: left promiscuous mode [ 980.423092][T30875] syzkaller0: entered promiscuous mode [ 980.430733][T30875] syzkaller0: entered allmulticast mode [ 980.444068][T30885] syz_tun: entered allmulticast mode [ 980.461381][T30883] syz_tun: left allmulticast mode [ 980.481507][T30895] syzkaller1: entered promiscuous mode [ 980.500089][T30895] syzkaller1: entered allmulticast mode [ 980.683300][T30899] syzkaller1: entered promiscuous mode [ 980.705735][T30899] syzkaller1: entered allmulticast mode [ 981.151401][T30919] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 981.158762][T30919] IPv6: NLM_F_CREATE should be set when creating new route [ 981.166058][T30919] IPv6: NLM_F_CREATE should be set when creating new route [ 981.173374][T30919] IPv6: NLM_F_CREATE should be set when creating new route [ 985.199756][T30936] __nla_validate_parse: 2 callbacks suppressed [ 985.199779][T30936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7776'. [ 985.243510][T30936] netlink: 'syz.0.7776': attribute type 2 has an invalid length. [ 985.345229][T30943] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7775'. [ 985.401904][T30947] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7779'. [ 985.647463][T30954] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7782'. [ 985.782096][T30965] syzkaller1: entered promiscuous mode [ 985.788020][T30965] syzkaller1: entered allmulticast mode [ 986.212338][T30975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7790'. [ 986.261394][T30978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7791'. [ 986.701451][T30999] syzkaller1: entered promiscuous mode [ 986.707254][T30999] syzkaller1: entered allmulticast mode [ 986.957428][T31009] netlink: 204 bytes leftover after parsing attributes in process `syz.0.7800'. [ 987.027614][T31010] syz_tun: entered allmulticast mode [ 987.074214][T31008] syz_tun: left allmulticast mode [ 987.347413][T31020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7805'. [ 987.576452][T31031] syzkaller0: entered promiscuous mode [ 987.585838][T31031] syzkaller0: entered allmulticast mode [ 987.696159][T31037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7813'. [ 987.846004][T31035] netlink: 1244 bytes leftover after parsing attributes in process `syz.0.7812'. [ 987.897563][T31048] FAULT_INJECTION: forcing a failure. [ 987.897563][T31048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 987.912401][T31048] CPU: 0 UID: 0 PID: 31048 Comm: syz.1.7816 Not tainted syzkaller #0 PREEMPT(full) [ 987.912429][T31048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 987.912441][T31048] Call Trace: [ 987.912450][T31048] [ 987.912459][T31048] dump_stack_lvl+0xe8/0x150 [ 987.912488][T31048] should_fail_ex+0x412/0x560 [ 987.912519][T31048] _copy_to_iter+0x1e4/0x17d0 [ 987.912548][T31048] ? do_raw_spin_lock+0x12b/0x2f0 [ 987.912585][T31048] ? __pfx__copy_to_iter+0x10/0x10 [ 987.912609][T31048] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 987.912636][T31048] ? lockdep_hardirqs_on+0x7a/0x110 [ 987.912661][T31048] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 987.912686][T31048] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 987.912714][T31048] __skb_datagram_iter+0xf8/0x980 [ 987.912737][T31048] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 987.912768][T31048] skb_copy_datagram_iter+0xb5/0x240 [ 987.912794][T31048] packet_recvmsg+0x699/0x1630 [ 987.912829][T31048] ? __pfx_packet_recvmsg+0x10/0x10 [ 987.912848][T31048] ? __pfx_aa_sk_perm+0x10/0x10 [ 987.912886][T31048] ? aa_sock_msg_perm+0xf1/0x1b0 [ 987.912912][T31048] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 987.912935][T31048] ? security_socket_recvmsg+0x7e/0x2c0 [ 987.912956][T31048] ? __pfx_packet_recvmsg+0x10/0x10 [ 987.912967][T31048] sock_recvmsg+0x172/0x1b0 [ 987.912984][T31048] sock_read_iter+0x251/0x320 [ 987.912999][T31048] ? __pfx_sock_read_iter+0x10/0x10 [ 987.913025][T31048] do_iter_readv_writev+0x619/0x8c0 [ 987.913045][T31048] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 987.913064][T31048] ? bpf_lsm_file_permission+0x9/0x20 [ 987.913079][T31048] ? security_file_permission+0x75/0x260 [ 987.913092][T31048] ? rw_verify_area+0x2a6/0x4d0 [ 987.913111][T31048] vfs_readv+0x288/0x840 [ 987.913129][T31048] ? __pfx_vfs_readv+0x10/0x10 [ 987.913150][T31048] ? __fget_files+0x2a/0x420 [ 987.913165][T31048] ? __fget_files+0x3a0/0x420 [ 987.913178][T31048] ? __fget_files+0x2a/0x420 [ 987.913196][T31048] do_readv+0x154/0x2e0 [ 987.913210][T31048] ? __pfx_do_readv+0x10/0x10 [ 987.913227][T31048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.913239][T31048] do_syscall_64+0x15f/0xf80 [ 987.913254][T31048] ? trace_irq_disable+0x3b/0x140 [ 987.913271][T31048] ? clear_bhb_loop+0x40/0x90 [ 987.913285][T31048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.913296][T31048] RIP: 0033:0x7f97a219ce59 [ 987.913309][T31048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.913319][T31048] RSP: 002b:00007f97a2f81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 987.913333][T31048] RAX: ffffffffffffffda RBX: 00007f97a2415fa0 RCX: 00007f97a219ce59 [ 987.913341][T31048] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000003 [ 987.913349][T31048] RBP: 00007f97a2f81090 R08: 0000000000000000 R09: 0000000000000000 [ 987.913356][T31048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.913363][T31048] R13: 00007f97a2416038 R14: 00007f97a2415fa0 R15: 00007ffdf783e1f8 [ 987.913381][T31048] [ 988.374007][T31051] syzkaller1: entered promiscuous mode [ 988.380163][T31051] syzkaller1: entered allmulticast mode [ 988.742208][T31064] syzkaller1: entered promiscuous mode [ 988.757250][T31064] syzkaller1: entered allmulticast mode [ 989.007532][T31071] ip6erspan1: entered allmulticast mode [ 989.203050][T31081] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 989.286163][T31082] syz_tun: entered allmulticast mode [ 989.377805][T31079] syz_tun: left allmulticast mode [ 989.541803][T31088] netlink: 'syz.1.7833': attribute type 1 has an invalid length. [ 989.573819][T31088] netlink: 'syz.1.7833': attribute type 2 has an invalid length. [ 989.596939][T31093] netlink: 'syz.1.7833': attribute type 1 has an invalid length. [ 989.719091][T31097] netlink: 'syz.0.7837': attribute type 2 has an invalid length. [ 989.876047][T31101] netlink: 'syz.4.7839': attribute type 16 has an invalid length. [ 989.901642][T31106] syz_tun: entered allmulticast mode [ 989.907292][T31101] netlink: 'syz.4.7839': attribute type 17 has an invalid length. [ 989.930634][T31108] netlink: 'syz.0.7841': attribute type 9 has an invalid length. [ 989.938644][T31098] syz_tun: left allmulticast mode [ 990.060631][T31112] ip6erspan0: entered allmulticast mode [ 990.147549][T31120] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.493432][T31144] __nla_validate_parse: 8 callbacks suppressed [ 990.493453][T31144] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7852'. [ 990.955665][T31166] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7858'. [ 991.046325][T31168] syzkaller1: entered promiscuous mode [ 991.060747][T31170] FAULT_INJECTION: forcing a failure. [ 991.060747][T31170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 991.065138][T31168] syzkaller1: entered allmulticast mode [ 991.083010][T31170] CPU: 0 UID: 0 PID: 31170 Comm: syz.4.7860 Not tainted syzkaller #0 PREEMPT(full) [ 991.083037][T31170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 991.083048][T31170] Call Trace: [ 991.083057][T31170] [ 991.083064][T31170] dump_stack_lvl+0xe8/0x150 [ 991.083090][T31170] should_fail_ex+0x412/0x560 [ 991.083127][T31170] _copy_from_user+0x2d/0xb0 [ 991.083155][T31170] sock_do_ioctl+0x195/0x320 [ 991.083180][T31170] ? __pfx_sock_do_ioctl+0x10/0x10 [ 991.083198][T31170] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 991.083242][T31170] sock_ioctl+0x5c6/0x7f0 [ 991.083265][T31170] ? __pfx_sock_ioctl+0x10/0x10 [ 991.083288][T31170] ? __fget_files+0x2a/0x420 [ 991.083309][T31170] ? __fget_files+0x3a0/0x420 [ 991.083331][T31170] ? __fget_files+0x2a/0x420 [ 991.083355][T31170] ? bpf_lsm_file_ioctl+0x9/0x20 [ 991.083382][T31170] ? __pfx_sock_ioctl+0x10/0x10 [ 991.083404][T31170] __se_sys_ioctl+0xfc/0x170 [ 991.083431][T31170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.083453][T31170] do_syscall_64+0x15f/0xf80 [ 991.083478][T31170] ? trace_irq_disable+0x3b/0x140 [ 991.083502][T31170] ? clear_bhb_loop+0x40/0x90 [ 991.083525][T31170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.083549][T31170] RIP: 0033:0x7f18b139ce59 [ 991.083568][T31170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 991.083583][T31170] RSP: 002b:00007f18b231e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 991.083602][T31170] RAX: ffffffffffffffda RBX: 00007f18b1615fa0 RCX: 00007f18b139ce59 [ 991.083616][T31170] RDX: 0000200000000040 RSI: 0000000000008927 RDI: 0000000000000003 [ 991.083627][T31170] RBP: 00007f18b231e090 R08: 0000000000000000 R09: 0000000000000000 [ 991.083639][T31170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 991.083651][T31170] R13: 00007f18b1616038 R14: 00007f18b1615fa0 R15: 00007ffceffd68d8 [ 991.083682][T31170] [ 991.487296][T31181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7863'. [ 991.570037][T31181] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 991.581834][T31182] FAULT_INJECTION: forcing a failure. [ 991.581834][T31182] name failslab, interval 1, probability 0, space 0, times 0 [ 991.608576][T31182] CPU: 0 UID: 0 PID: 31182 Comm: syz.2.7864 Not tainted syzkaller #0 PREEMPT(full) [ 991.608608][T31182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 991.608620][T31182] Call Trace: [ 991.608628][T31182] [ 991.608637][T31182] dump_stack_lvl+0xe8/0x150 [ 991.608668][T31182] should_fail_ex+0x412/0x560 [ 991.608697][T31182] ? alloc_inode+0xb8/0x1b0 [ 991.608718][T31182] should_failslab+0xa8/0x100 [ 991.608748][T31182] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 991.608783][T31182] alloc_inode+0xb8/0x1b0 [ 991.608816][T31182] path_from_stashed+0x200/0x5c0 [ 991.608841][T31182] ? bpf_map_offload_info_fill_ns+0x183/0x1f0 [ 991.608876][T31182] bpf_map_offload_info_fill+0xbe/0x290 [ 991.608905][T31182] ? __pfx_bpf_map_offload_info_fill+0x10/0x10 [ 991.608937][T31182] ? bpf_obj_get_info_by_fd+0xbb8/0x32f0 [ 991.608965][T31182] bpf_obj_get_info_by_fd+0x10cf/0x32f0 [ 991.608984][T31182] ? __lock_acquire+0x6b5/0x2cf0 [ 991.609019][T31182] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 991.609042][T31182] ? __lock_acquire+0x6b5/0x2cf0 [ 991.609076][T31182] ? get_pid_task+0x20/0x1f0 [ 991.609100][T31182] ? get_pid_task+0x20/0x1f0 [ 991.609119][T31182] ? get_pid_task+0x20/0x1f0 [ 991.609146][T31182] ? __might_fault+0xaf/0x130 [ 991.609171][T31182] ? __might_fault+0xaf/0x130 [ 991.609211][T31182] ? bpf_lsm_bpf+0x9/0x20 [ 991.609227][T31182] ? security_bpf+0x7e/0x2d0 [ 991.609252][T31182] __sys_bpf+0x66e/0x950 [ 991.609281][T31182] ? __pfx___sys_bpf+0x10/0x10 [ 991.609327][T31182] ? ksys_write+0x242/0x270 [ 991.609356][T31182] ? __pfx_ksys_write+0x10/0x10 [ 991.609385][T31182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.609407][T31182] __x64_sys_bpf+0x7c/0x90 [ 991.609433][T31182] do_syscall_64+0x15f/0xf80 [ 991.609460][T31182] ? trace_irq_disable+0x3b/0x140 [ 991.609488][T31182] ? clear_bhb_loop+0x40/0x90 [ 991.609513][T31182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.609531][T31182] RIP: 0033:0x7f1e0299ce59 [ 991.609551][T31182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 991.609573][T31182] RSP: 002b:00007f1e03917028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 991.609594][T31182] RAX: ffffffffffffffda RBX: 00007f1e02c15fa0 RCX: 00007f1e0299ce59 [ 991.609608][T31182] RDX: 0000000000000010 RSI: 0000200000000800 RDI: 000000000000000f [ 991.609620][T31182] RBP: 00007f1e03917090 R08: 0000000000000000 R09: 0000000000000000 [ 991.609643][T31182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 991.609655][T31182] R13: 00007f1e02c16038 R14: 00007f1e02c15fa0 R15: 00007fff843c62c8 [ 991.609690][T31182] [ 992.315126][T31210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7875'. [ 992.592580][T31232] netlink: 'syz.1.7880': attribute type 12 has an invalid length. [ 992.604296][T31219] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7877'. [ 992.606587][T31221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7878'. [ 992.617254][T31232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7880'. [ 992.850450][T31221] bond1: entered promiscuous mode [ 992.943612][T31221] 8021q: adding VLAN 0 to HW filter on device bond1 [ 992.956961][T31232] bond0: option primary_reselect: invalid value (22) [ 992.984775][T31230] lo speed is unknown, defaulting to 1000 [ 993.015723][T31230] erspan0 speed is unknown, defaulting to 1000 [ 993.392658][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.480052][T31267] netlink: 'syz.1.7886': attribute type 2 has an invalid length. [ 994.505538][T31310] netlink: 428 bytes leftover after parsing attributes in process `syz.1.7899'. [ 994.551383][T31314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7901'. [ 994.667356][T31320] sctp: [Deprecated]: syz.1.7899 (pid 31320) Use of int in max_burst socket option. [ 994.667356][T31320] Use struct sctp_assoc_value instead [ 994.894628][T31331] IPv6: Can't replace route, no match found [ 995.025987][T31338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7905'. [ 995.513546][T31366] FAULT_INJECTION: forcing a failure. [ 995.513546][T31366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 995.552817][T31366] CPU: 0 UID: 0 PID: 31366 Comm: syz.1.7913 Not tainted syzkaller #0 PREEMPT(full) [ 995.552846][T31366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 995.552859][T31366] Call Trace: [ 995.552868][T31366] [ 995.552877][T31366] dump_stack_lvl+0xe8/0x150 [ 995.552907][T31366] should_fail_ex+0x412/0x560 [ 995.552939][T31366] _copy_from_user+0x2d/0xb0 [ 995.552968][T31366] ___sys_sendmsg+0x1c6/0x360 [ 995.552987][T31366] ? __lock_acquire+0x6b5/0x2cf0 [ 995.553015][T31366] ? __pfx____sys_sendmsg+0x10/0x10 [ 995.553040][T31366] ? kstrtouint+0x6e/0xe0 [ 995.553092][T31366] ? __fget_files+0x2a/0x420 [ 995.553114][T31366] ? __fget_files+0x3a0/0x420 [ 995.553147][T31366] __sys_sendmmsg+0x27c/0x4e0 [ 995.553174][T31366] ? __pfx___sys_sendmmsg+0x10/0x10 [ 995.553191][T31366] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 995.553248][T31366] ? ksys_write+0x242/0x270 [ 995.553277][T31366] ? __pfx_ksys_write+0x10/0x10 [ 995.553317][T31366] __x64_sys_sendmmsg+0xa0/0xc0 [ 995.553337][T31366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.553359][T31366] do_syscall_64+0x15f/0xf80 [ 995.553385][T31366] ? trace_irq_disable+0x3b/0x140 [ 995.553413][T31366] ? clear_bhb_loop+0x40/0x90 [ 995.553437][T31366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.553456][T31366] RIP: 0033:0x7f97a219ce59 [ 995.553476][T31366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 995.553493][T31366] RSP: 002b:00007f97a2f81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 995.553516][T31366] RAX: ffffffffffffffda RBX: 00007f97a2415fa0 RCX: 00007f97a219ce59 [ 995.553530][T31366] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 995.553543][T31366] RBP: 00007f97a2f81090 R08: 0000000000000000 R09: 0000000000000000 [ 995.553554][T31366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 995.553566][T31366] R13: 00007f97a2416038 R14: 00007f97a2415fa0 R15: 00007ffdf783e1f8 [ 995.553597][T31366] [ 995.923842][T31371] syz_tun: entered promiscuous mode [ 995.940639][T31371] macvtap2: entered promiscuous mode [ 995.993956][T31371] syz_tun: left promiscuous mode [ 996.051227][T31381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 996.073804][T31373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7914'. [ 996.091670][T31374] team0: entered promiscuous mode [ 996.096773][T31374] team_slave_0: entered promiscuous mode [ 996.103000][T31374] team_slave_1: entered promiscuous mode [ 996.111253][T31374] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 996.351403][T31385] syzkaller1: entered promiscuous mode [ 996.360313][T31385] syzkaller1: entered allmulticast mode [ 996.613397][T31406] tap0: tun_chr_ioctl cmd 1074025676 [ 996.618999][T31406] tap0: owner set to 0 [ 997.605325][T31417] syzkaller1: entered promiscuous mode [ 997.621613][T31417] syzkaller1: entered allmulticast mode [ 998.029207][T31440] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7935'. [ 998.140121][T31444] IPVS: ip_vs_edit_dest(): server weight less than zero [ 998.140324][T31437] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7937'. [ 998.287503][T31449] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.7940'. [ 998.391300][T31455] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:0 [ 998.732912][T31467] FAULT_INJECTION: forcing a failure. [ 998.732912][T31467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 998.751773][T31467] CPU: 1 UID: 0 PID: 31467 Comm: syz.0.7946 Not tainted syzkaller #0 PREEMPT(full) [ 998.751802][T31467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 998.751814][T31467] Call Trace: [ 998.751822][T31467] [ 998.751832][T31467] dump_stack_lvl+0xe8/0x150 [ 998.751862][T31467] should_fail_ex+0x412/0x560 [ 998.751894][T31467] _copy_from_user+0x2d/0xb0 [ 998.751923][T31467] generic_map_update_batch+0x648/0x990 [ 998.751960][T31467] ? __pfx_generic_map_update_batch+0x10/0x10 [ 998.751985][T31467] ? __fget_files+0x2a/0x420 [ 998.752016][T31467] ? __pfx_generic_map_update_batch+0x10/0x10 [ 998.752041][T31467] bpf_map_do_batch+0x39b/0x630 [ 998.752077][T31467] __sys_bpf+0x7c1/0x950 [ 998.752108][T31467] ? __pfx___sys_bpf+0x10/0x10 [ 998.752154][T31467] ? ksys_write+0x242/0x270 [ 998.752184][T31467] ? __pfx_ksys_write+0x10/0x10 [ 998.752217][T31467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.752239][T31467] __x64_sys_bpf+0x7c/0x90 [ 998.752267][T31467] do_syscall_64+0x15f/0xf80 [ 998.752295][T31467] ? trace_irq_disable+0x3b/0x140 [ 998.752323][T31467] ? clear_bhb_loop+0x40/0x90 [ 998.752348][T31467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.752368][T31467] RIP: 0033:0x7f5eee79ce59 [ 998.752388][T31467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 998.752405][T31467] RSP: 002b:00007f5eef63c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 998.752427][T31467] RAX: ffffffffffffffda RBX: 00007f5eeea15fa0 RCX: 00007f5eee79ce59 [ 998.752442][T31467] RDX: 0000000000000038 RSI: 00002000000001c0 RDI: 000000000000001a [ 998.752455][T31467] RBP: 00007f5eef63c090 R08: 0000000000000000 R09: 0000000000000000 [ 998.752467][T31467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.752479][T31467] R13: 00007f5eeea16038 R14: 00007f5eeea15fa0 R15: 00007ffedbdd12b8 [ 998.752512][T31467] [ 999.140098][T31470] syzkaller1: entered promiscuous mode [ 999.155916][T31470] syzkaller1: entered allmulticast mode [ 999.173178][T31474] syz_tun: entered allmulticast mode [ 999.180433][T31479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7952'. [ 999.227692][T31479] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 999.277892][T31476] netlink: 'syz.2.7951': attribute type 4 has an invalid length. [ 999.291561][T31476] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.7951'. [ 999.352443][T31488] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7955'. [ 999.758611][T31514] netlink: 'syz.0.7966': attribute type 12 has an invalid length. [ 999.766729][T31514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7966'. [ 1000.449913][T31552] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7981'. [ 1001.344683][T31571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.703453][T31571] team_slave_1: left promiscuous mode [ 1001.728285][T31571] team_slave_1: left allmulticast mode [ 1001.781831][T31571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1001.832755][T31571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1002.166498][T31571] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 1002.175333][T31571] mac80211_hwsim hwsim52 wlan0: left allmulticast mode [ 1002.192262][T31571] veth3: left promiscuous mode [ 1002.230676][T31571] ip6erspan0: left allmulticast mode [ 1002.287654][T31589] lo: entered allmulticast mode [ 1002.295556][T31589] lo: left allmulticast mode [ 1002.340735][T29490] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.455838][T29490] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.495695][T29490] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.533130][T29490] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.623534][T31622] netlink: zone id is out of range [ 1002.630063][T31622] netlink: zone id is out of range [ 1002.635546][T31622] netlink: zone id is out of range [ 1002.642254][T31622] netlink: zone id is out of range [ 1002.647579][T31622] netlink: zone id is out of range [ 1002.654789][T31622] netlink: zone id is out of range [ 1002.660739][T31624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7999'. [ 1002.671564][T31622] netlink: zone id is out of range [ 1002.677641][T31622] netlink: zone id is out of range [ 1002.687061][T31622] netlink: zone id is out of range [ 1002.719522][T31622] netlink: zone id is out of range [ 1002.941225][T31631] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8002'. [ 1003.176059][T31647] bond0: entered promiscuous mode [ 1003.196109][T31647] bond_slave_0: entered promiscuous mode [ 1003.203662][T31647] bond_slave_1: entered promiscuous mode [ 1003.211314][T31647] batadv0: entered promiscuous mode [ 1003.217688][T31647] debugfs: 'hsr1' already exists in 'hsr' [ 1003.230346][T31647] Cannot create hsr debugfs directory [ 1003.239013][T31647] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1003.261148][T31647] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1003.283745][T31647] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1003.291206][T31652] netlink: 'syz.4.8008': attribute type 2 has an invalid length. [ 1003.305402][T31647] bond0: left promiscuous mode [ 1003.319860][T31647] bond_slave_0: left promiscuous mode [ 1003.326628][T31647] bond_slave_1: left promiscuous mode [ 1003.333833][T31647] batadv0: left promiscuous mode [ 1003.371013][T31656] netlink: 'syz.1.8011': attribute type 29 has an invalid length. [ 1003.388893][T31656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8011'. [ 1003.410474][T31656] netlink: 'syz.1.8011': attribute type 29 has an invalid length. [ 1003.420755][T31656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8011'. [ 1003.430580][T31656] netlink: 'syz.1.8011': attribute type 29 has an invalid length. [ 1003.450544][T31656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8011'. [ 1003.477625][T31656] netlink: 'syz.1.8011': attribute type 29 has an invalid length. [ 1003.492032][T31660] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1003.497780][T31656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8011'. [ 1003.524834][T31656] netlink: 'syz.1.8011': attribute type 29 has an invalid length. [ 1003.533573][T31656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8011'. [ 1003.559669][T31656] netlink: 'syz.1.8011': attribute type 29 has an invalid length. [ 1003.578127][T31656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8011'. [ 1003.590348][T31656] netlink: 'syz.1.8011': attribute type 29 has an invalid length. [ 1003.601213][T31656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8011'. [ 1003.663929][T31656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8011'. [ 1004.305952][T31700] lo: entered allmulticast mode [ 1004.462445][T31696] FAULT_INJECTION: forcing a failure. [ 1004.462445][T31696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1004.476714][T31696] CPU: 1 UID: 0 PID: 31696 Comm: syz.0.8029 Not tainted syzkaller #0 PREEMPT(full) [ 1004.476742][T31696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1004.476754][T31696] Call Trace: [ 1004.476762][T31696] [ 1004.476770][T31696] dump_stack_lvl+0xe8/0x150 [ 1004.476800][T31696] should_fail_ex+0x412/0x560 [ 1004.476832][T31696] _copy_to_user+0x31/0xb0 [ 1004.476859][T31696] bpf_test_finish+0x22c/0x6b0 [ 1004.476883][T31696] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1004.476904][T31696] ? __pfx_bpf_test_finish+0x10/0x10 [ 1004.476929][T31696] ? _copy_from_user+0x94/0xb0 [ 1004.476950][T31696] ? bpf_test_init+0x113/0x150 [ 1004.476969][T31696] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 1004.477003][T31696] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1004.477026][T31696] ? __fget_files+0x2a/0x420 [ 1004.477052][T31696] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1004.477069][T31696] bpf_prog_test_run+0x2c7/0x340 [ 1004.477090][T31696] __sys_bpf+0x643/0x950 [ 1004.477131][T31696] ? __pfx___sys_bpf+0x10/0x10 [ 1004.477183][T31696] ? ksys_write+0x242/0x270 [ 1004.477211][T31696] ? __pfx_ksys_write+0x10/0x10 [ 1004.477243][T31696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.477265][T31696] __x64_sys_bpf+0x7c/0x90 [ 1004.477292][T31696] do_syscall_64+0x15f/0xf80 [ 1004.477319][T31696] ? trace_irq_disable+0x3b/0x140 [ 1004.477345][T31696] ? clear_bhb_loop+0x40/0x90 [ 1004.477367][T31696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.477384][T31696] RIP: 0033:0x7f5eee79ce59 [ 1004.477404][T31696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1004.477420][T31696] RSP: 002b:00007f5eef63c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1004.477441][T31696] RAX: ffffffffffffffda RBX: 00007f5eeea15fa0 RCX: 00007f5eee79ce59 [ 1004.477455][T31696] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 1004.477467][T31696] RBP: 00007f5eef63c090 R08: 0000000000000000 R09: 0000000000000000 [ 1004.477478][T31696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1004.477489][T31696] R13: 00007f5eeea16038 R14: 00007f5eeea15fa0 R15: 00007ffedbdd12b8 [ 1004.477522][T31696] [ 1005.313722][T31736] syzkaller1: entered promiscuous mode [ 1005.330286][T31736] syzkaller1: entered allmulticast mode [ 1005.859531][T31766] syz_tun: entered allmulticast mode [ 1005.879415][T31765] syz_tun: left allmulticast mode [ 1005.916646][T31771] FAULT_INJECTION: forcing a failure. [ 1005.916646][T31771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1005.934236][T31771] CPU: 1 UID: 0 PID: 31771 Comm: syz.4.8059 Not tainted syzkaller #0 PREEMPT(full) [ 1005.934266][T31771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1005.934278][T31771] Call Trace: [ 1005.934287][T31771] [ 1005.934297][T31771] dump_stack_lvl+0xe8/0x150 [ 1005.934326][T31771] should_fail_ex+0x412/0x560 [ 1005.934357][T31771] _copy_from_user+0x2d/0xb0 [ 1005.934386][T31771] ____sys_sendmsg+0x308/0x9f0 [ 1005.934406][T31771] ? __might_fault+0xaf/0x130 [ 1005.934438][T31771] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1005.934465][T31771] ? import_iovec+0x73/0xa0 [ 1005.934496][T31771] ___sys_sendmsg+0x2a5/0x360 [ 1005.934514][T31771] ? __lock_acquire+0x6b5/0x2cf0 [ 1005.934541][T31771] ? __pfx____sys_sendmsg+0x10/0x10 [ 1005.934567][T31771] ? kstrtouint+0x6e/0xe0 [ 1005.934618][T31771] ? __fget_files+0x2a/0x420 [ 1005.934641][T31771] ? __fget_files+0x3a0/0x420 [ 1005.934675][T31771] __sys_sendmmsg+0x27c/0x4e0 [ 1005.934702][T31771] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1005.934719][T31771] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1005.934784][T31771] ? ksys_write+0x242/0x270 [ 1005.934814][T31771] ? __pfx_ksys_write+0x10/0x10 [ 1005.934848][T31771] __x64_sys_sendmmsg+0xa0/0xc0 [ 1005.934868][T31771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.934889][T31771] do_syscall_64+0x15f/0xf80 [ 1005.934914][T31771] ? trace_irq_disable+0x3b/0x140 [ 1005.934940][T31771] ? clear_bhb_loop+0x40/0x90 [ 1005.934964][T31771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.934983][T31771] RIP: 0033:0x7f18b139ce59 [ 1005.935003][T31771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1005.935019][T31771] RSP: 002b:00007f18b231e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1005.935040][T31771] RAX: ffffffffffffffda RBX: 00007f18b1615fa0 RCX: 00007f18b139ce59 [ 1005.935054][T31771] RDX: 0000000000000001 RSI: 0000200000006340 RDI: 0000000000000003 [ 1005.935067][T31771] RBP: 00007f18b231e090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.935078][T31771] R10: 0000000004000014 R11: 0000000000000246 R12: 0000000000000001 [ 1005.935089][T31771] R13: 00007f18b1616038 R14: 00007f18b1615fa0 R15: 00007ffceffd68d8 [ 1005.935123][T31771] [ 1006.734007][T31799] syz_tun: entered allmulticast mode [ 1006.756141][T31798] syz_tun: left allmulticast mode [ 1007.161401][T31819] FAULT_INJECTION: forcing a failure. [ 1007.161401][T31819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1007.218491][T31819] CPU: 0 UID: 0 PID: 31819 Comm: syz.2.8072 Not tainted syzkaller #0 PREEMPT(full) [ 1007.218519][T31819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1007.218532][T31819] Call Trace: [ 1007.218541][T31819] [ 1007.218549][T31819] dump_stack_lvl+0xe8/0x150 [ 1007.218579][T31819] should_fail_ex+0x412/0x560 [ 1007.218612][T31819] _copy_to_user+0x31/0xb0 [ 1007.218644][T31819] bpf_test_finish+0x1db/0x6b0 [ 1007.218672][T31819] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1007.218695][T31819] ? __pfx_bpf_test_finish+0x10/0x10 [ 1007.218722][T31819] ? _copy_from_user+0x94/0xb0 [ 1007.218747][T31819] ? bpf_test_init+0x113/0x150 [ 1007.218768][T31819] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 1007.218807][T31819] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1007.218833][T31819] ? __fget_files+0x2a/0x420 [ 1007.218863][T31819] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1007.218886][T31819] bpf_prog_test_run+0x2c7/0x340 [ 1007.218912][T31819] __sys_bpf+0x643/0x950 [ 1007.218944][T31819] ? __pfx___sys_bpf+0x10/0x10 [ 1007.218989][T31819] ? ksys_write+0x242/0x270 [ 1007.219018][T31819] ? __pfx_ksys_write+0x10/0x10 [ 1007.219063][T31819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.219083][T31819] __x64_sys_bpf+0x7c/0x90 [ 1007.219111][T31819] do_syscall_64+0x15f/0xf80 [ 1007.219136][T31819] ? trace_irq_disable+0x3b/0x140 [ 1007.219162][T31819] ? clear_bhb_loop+0x40/0x90 [ 1007.219185][T31819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.219204][T31819] RIP: 0033:0x7f1e0299ce59 [ 1007.219221][T31819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1007.219237][T31819] RSP: 002b:00007f1e03917028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1007.219258][T31819] RAX: ffffffffffffffda RBX: 00007f1e02c15fa0 RCX: 00007f1e0299ce59 [ 1007.219271][T31819] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 1007.219283][T31819] RBP: 00007f1e03917090 R08: 0000000000000000 R09: 0000000000000000 [ 1007.219294][T31819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1007.219305][T31819] R13: 00007f1e02c16038 R14: 00007f1e02c15fa0 R15: 00007fff843c62c8 [ 1007.219337][T31819] [ 1007.585271][T31829] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 3, id = 0 [ 1007.616137][T31831] lo speed is unknown, defaulting to 1000 [ 1007.695359][T31831] erspan0 speed is unknown, defaulting to 1000 [ 1007.716155][T31826] __nla_validate_parse: 30 callbacks suppressed [ 1007.716177][T31826] netlink: 192 bytes leftover after parsing attributes in process `syz.1.8075'. [ 1008.061246][T31843] validate_nla: 16 callbacks suppressed [ 1008.061395][T31843] netlink: 'syz.3.8080': attribute type 24 has an invalid length. [ 1008.607541][T31866] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8089'. [ 1008.913311][T31876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8091'. [ 1008.933595][T31885] FAULT_INJECTION: forcing a failure. [ 1008.933595][T31885] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.951416][T31887] net_ratelimit: 335 callbacks suppressed [ 1008.951437][T31887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1008.967147][T31885] CPU: 1 UID: 0 PID: 31885 Comm: syz.4.8095 Not tainted syzkaller #0 PREEMPT(full) [ 1008.967177][T31885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1008.967190][T31885] Call Trace: [ 1008.967199][T31885] [ 1008.967208][T31885] dump_stack_lvl+0xe8/0x150 [ 1008.967238][T31885] should_fail_ex+0x412/0x560 [ 1008.967270][T31885] should_failslab+0xa8/0x100 [ 1008.967302][T31885] __kmalloc_noprof+0xe8/0x760 [ 1008.967329][T31885] ? tomoyo_encode+0x28b/0x550 [ 1008.967362][T31885] tomoyo_encode+0x28b/0x550 [ 1008.967396][T31885] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1008.967426][T31885] ? tomoyo_domain+0xd7/0x130 [ 1008.967460][T31885] ? tomoyo_path_number_perm+0x219/0x630 [ 1008.967484][T31885] tomoyo_path_number_perm+0x246/0x630 [ 1008.967510][T31885] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1008.967532][T31885] ? __lock_acquire+0x6b5/0x2cf0 [ 1008.967572][T31885] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1008.967625][T31885] ? __fget_files+0x2a/0x420 [ 1008.967659][T31885] ? __fget_files+0x2a/0x420 [ 1008.967680][T31885] ? __fget_files+0x3a0/0x420 [ 1008.967702][T31885] ? __fget_files+0x2a/0x420 [ 1008.967730][T31885] security_file_ioctl+0xc3/0x2a0 [ 1008.967756][T31885] __se_sys_ioctl+0x47/0x170 [ 1008.967784][T31885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.967806][T31885] do_syscall_64+0x15f/0xf80 [ 1008.967833][T31885] ? trace_irq_disable+0x3b/0x140 [ 1008.967861][T31885] ? clear_bhb_loop+0x40/0x90 [ 1008.967886][T31885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.967904][T31885] RIP: 0033:0x7f18b139ce59 [ 1008.967924][T31885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1008.967939][T31885] RSP: 002b:00007f18b231e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1008.967957][T31885] RAX: ffffffffffffffda RBX: 00007f18b1615fa0 RCX: 00007f18b139ce59 [ 1008.967970][T31885] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000004 [ 1008.967983][T31885] RBP: 00007f18b231e090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.967995][T31885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1008.968007][T31885] R13: 00007f18b1616038 R14: 00007f18b1615fa0 R15: 00007ffceffd68d8 [ 1008.968041][T31885] [ 1008.968110][T31885] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1009.197415][T31893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8094'. [ 1009.308957][T31893] bond0: option arp_all_targets: invalid value (22) [ 1009.554718][T31899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8097'. [ 1009.735675][T31904] netlink: 'syz.4.8100': attribute type 1 has an invalid length. [ 1009.861299][T31911] FAULT_INJECTION: forcing a failure. [ 1009.861299][T31911] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.876139][T31911] CPU: 0 UID: 0 PID: 31911 Comm: syz.2.8102 Not tainted syzkaller #0 PREEMPT(full) [ 1009.876166][T31911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1009.876181][T31911] Call Trace: [ 1009.876190][T31911] [ 1009.876199][T31911] dump_stack_lvl+0xe8/0x150 [ 1009.876231][T31911] should_fail_ex+0x412/0x560 [ 1009.876261][T31911] should_failslab+0xa8/0x100 [ 1009.876287][T31911] ? skb_clone+0x212/0x3a0 [ 1009.876306][T31911] kmem_cache_alloc_noprof+0x87/0x650 [ 1009.876326][T31911] ? dev_queue_xmit_nit+0x2d/0xad0 [ 1009.876361][T31911] skb_clone+0x212/0x3a0 [ 1009.876379][T31911] ? dev_queue_xmit_nit+0x268/0xad0 [ 1009.876410][T31911] dev_queue_xmit_nit+0x29a/0xad0 [ 1009.876439][T31911] ? dev_queue_xmit_nit+0x2d/0xad0 [ 1009.876478][T31911] dev_hard_start_xmit+0x1c1/0x830 [ 1009.876519][T31911] __dev_queue_xmit+0x14d9/0x3950 [ 1009.876539][T31911] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 1009.876568][T31911] ? __dev_queue_xmit+0x2b6/0x3950 [ 1009.876606][T31911] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1009.876638][T31911] ? __copy_skb_header+0xa3/0x4a0 [ 1009.876681][T31911] ? skb_clone+0x246/0x3a0 [ 1009.876704][T31911] __netlink_deliver_tap+0x5ad/0x850 [ 1009.876739][T31911] ? netlink_deliver_tap+0x2e/0x1b0 [ 1009.876762][T31911] netlink_deliver_tap+0x19c/0x1b0 [ 1009.876784][T31911] netlink_unicast+0x730/0x8e0 [ 1009.876826][T31911] netlink_sendmsg+0x813/0xb40 [ 1009.876857][T31911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1009.876882][T31911] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1009.876908][T31911] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1009.876937][T31911] ____sys_sendmsg+0x972/0x9f0 [ 1009.876956][T31911] ? __might_fault+0xaf/0x130 [ 1009.876985][T31911] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1009.877014][T31911] ? import_iovec+0x73/0xa0 [ 1009.877045][T31911] ___sys_sendmsg+0x2a5/0x360 [ 1009.877062][T31911] ? __lock_acquire+0x6b5/0x2cf0 [ 1009.877097][T31911] ? __pfx____sys_sendmsg+0x10/0x10 [ 1009.877162][T31911] ? __fget_files+0x2a/0x420 [ 1009.877185][T31911] ? __fget_files+0x3a0/0x420 [ 1009.877219][T31911] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1009.877243][T31911] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1009.877274][T31911] ? __pfx_ksys_write+0x10/0x10 [ 1009.877310][T31911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.877333][T31911] do_syscall_64+0x15f/0xf80 [ 1009.877361][T31911] ? trace_irq_disable+0x3b/0x140 [ 1009.877390][T31911] ? clear_bhb_loop+0x40/0x90 [ 1009.877416][T31911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.877436][T31911] RIP: 0033:0x7f1e0299ce59 [ 1009.877456][T31911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1009.877472][T31911] RSP: 002b:00007f1e03917028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1009.877494][T31911] RAX: ffffffffffffffda RBX: 00007f1e02c15fa0 RCX: 00007f1e0299ce59 [ 1009.877508][T31911] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1009.877519][T31911] RBP: 00007f1e03917090 R08: 0000000000000000 R09: 0000000000000000 [ 1009.877530][T31911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1009.877542][T31911] R13: 00007f1e02c16038 R14: 00007f1e02c15fa0 R15: 00007fff843c62c8 [ 1009.877577][T31911] [ 1010.203907][T31913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8097'. [ 1010.276194][T31904] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1010.341228][T31909] bond6: (slave veth3): Enslaving as an active interface with a down link [ 1010.374289][T31912] bond6: (slave veth5): Enslaving as an active interface with a down link [ 1010.384636][T31913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1010.434695][T31913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1010.476125][T31922] bond6: entered allmulticast mode [ 1010.680445][T31933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.227621][T31962] tipc: Enabling of bearer rejected, failed to enable media [ 1011.413693][T31969] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8122'. [ 1011.452593][T31969] netlink: 19 bytes leftover after parsing attributes in process `syz.4.8122'. [ 1011.873616][T31989] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1012.026511][T31995] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.8131'. [ 1012.374777][T32002] sctp: [Deprecated]: syz.3.8134 (pid 32002) Use of int in max_burst socket option. [ 1012.374777][T32002] Use struct sctp_assoc_value instead [ 1016.043693][T32005] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1016.340458][T32035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8143'. [ 1016.356741][T32035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8143'. [ 1016.374022][T32037] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1016.500444][T32041] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.8145'. [ 1016.554691][T32047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8146'. [ 1016.570344][T32037] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 1016.613121][T32037] netlink: 288 bytes leftover after parsing attributes in process `syz.0.8144'. [ 1016.647964][T32049] netlink: 'syz.2.8147': attribute type 58 has an invalid length. [ 1016.657504][T32049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8147'. [ 1016.667806][T32051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8146'. [ 1016.708690][T32051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8146'. [ 1016.734379][T32056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1016.774125][T32051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8146'. [ 1016.897506][T32060] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8151'. [ 1016.954291][T32065] syzkaller0: entered promiscuous mode [ 1016.962172][T32065] syzkaller0: entered allmulticast mode [ 1017.086289][T32068] lo speed is unknown, defaulting to 1000 [ 1017.102032][T32068] erspan0 speed is unknown, defaulting to 1000 [ 1017.727786][T32095] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1017.737069][T32095] tipc: Enabled bearer , priority 26 [ 1017.981063][T32103] mac80211_hwsim hwsim54 wlan0: entered promiscuous mode [ 1017.996845][T32103] mac80211_hwsim hwsim54 wlan0: entered allmulticast mode [ 1018.005847][T32103] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1018.320378][T32125] FAULT_INJECTION: forcing a failure. [ 1018.320378][T32125] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.366945][T32125] CPU: 0 UID: 0 PID: 32125 Comm: syz.4.8173 Not tainted syzkaller #0 PREEMPT(full) [ 1018.366974][T32125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1018.366986][T32125] Call Trace: [ 1018.366995][T32125] [ 1018.367004][T32125] dump_stack_lvl+0xe8/0x150 [ 1018.367034][T32125] should_fail_ex+0x412/0x560 [ 1018.367067][T32125] should_failslab+0xa8/0x100 [ 1018.367094][T32125] ? ovs_flow_alloc+0x24/0x1f0 [ 1018.367116][T32125] kmem_cache_alloc_noprof+0x87/0x650 [ 1018.367140][T32125] ? __alloc_skb+0x4e5/0x7d0 [ 1018.367177][T32125] ovs_flow_alloc+0x24/0x1f0 [ 1018.367201][T32125] ovs_packet_cmd_execute+0x585/0xea0 [ 1018.367236][T32125] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 1018.367264][T32125] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1018.367290][T32125] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1018.367324][T32125] genl_family_rcv_msg_doit+0x22a/0x330 [ 1018.367357][T32125] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1018.367397][T32125] ? bpf_lsm_capable+0x9/0x20 [ 1018.367416][T32125] ? security_capable+0x7e/0x2c0 [ 1018.367448][T32125] genl_rcv_msg+0x61c/0x7a0 [ 1018.367485][T32125] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1018.367509][T32125] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 1018.367548][T32125] netlink_rcv_skb+0x232/0x4b0 [ 1018.367570][T32125] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1018.367597][T32125] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1018.367636][T32125] ? down_read+0x270/0x2e0 [ 1018.367655][T32125] ? genl_rcv+0xd/0x40 [ 1018.367680][T32125] genl_rcv+0x28/0x40 [ 1018.367703][T32125] netlink_unicast+0x75c/0x8e0 [ 1018.367745][T32125] netlink_sendmsg+0x813/0xb40 [ 1018.367774][T32125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1018.367797][T32125] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1018.367831][T32125] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1018.367857][T32125] ____sys_sendmsg+0x972/0x9f0 [ 1018.367875][T32125] ? __might_fault+0xaf/0x130 [ 1018.367905][T32125] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1018.367931][T32125] ? import_iovec+0x73/0xa0 [ 1018.367959][T32125] ___sys_sendmsg+0x2a5/0x360 [ 1018.367975][T32125] ? __lock_acquire+0x6b5/0x2cf0 [ 1018.368001][T32125] ? __pfx____sys_sendmsg+0x10/0x10 [ 1018.368059][T32125] ? __fget_files+0x2a/0x420 [ 1018.368079][T32125] ? __fget_files+0x3a0/0x420 [ 1018.368110][T32125] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1018.368131][T32125] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1018.368158][T32125] ? rcu_is_watching+0x15/0xb0 [ 1018.368191][T32125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.368212][T32125] do_syscall_64+0x15f/0xf80 [ 1018.368237][T32125] ? trace_irq_disable+0x3b/0x140 [ 1018.368263][T32125] ? clear_bhb_loop+0x40/0x90 [ 1018.368286][T32125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.368305][T32125] RIP: 0033:0x7f18b139ce59 [ 1018.368325][T32125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1018.368341][T32125] RSP: 002b:00007f18b231e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1018.368362][T32125] RAX: ffffffffffffffda RBX: 00007f18b1615fa0 RCX: 00007f18b139ce59 [ 1018.368375][T32125] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1018.368386][T32125] RBP: 00007f18b231e090 R08: 0000000000000000 R09: 0000000000000000 [ 1018.368398][T32125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.368409][T32125] R13: 00007f18b1616038 R14: 00007f18b1615fa0 R15: 00007ffceffd68d8 [ 1018.368442][T32125] [ 1018.707709][T32121] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1018.858647][ T808] tipc: Node number set to 1 [ 1018.936507][T32132] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1018.945567][T32132] tipc: Enabled bearer , priority 26 [ 1019.152484][T32141] syz_tun: entered allmulticast mode [ 1019.167567][T32140] syz_tun: left allmulticast mode [ 1019.398812][T32149] netlink: 'syz.2.8185': attribute type 11 has an invalid length. [ 1019.513865][T32158] netlink: 'syz.4.8188': attribute type 10 has an invalid length. [ 1019.575174][T32155] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1019.625131][T32157] mac80211_hwsim hwsim46 wlan0: entered promiscuous mode [ 1019.647804][T32166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1019.649391][T32157] mac80211_hwsim hwsim46 wlan0: entered allmulticast mode [ 1019.691107][T32166] ieee802154 phy0 wpan0: encryption failed: -126 [ 1019.693809][T32158] team0: Port device dummy0 added [ 1019.804370][T32167] tipc: Enabling of bearer rejected, failed to enable media [ 1019.845417][T27050] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1019.977665][T32179] netlink: 'syz.2.8195': attribute type 4 has an invalid length. [ 1019.990501][T32178] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1020.078416][T32184] netlink: 'syz.1.8196': attribute type 12 has an invalid length. [ 1020.562628][T29490] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1020.675524][T27050] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1020.715174][T32213] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1020.728093][T32213] tipc: Enabled bearer , priority 26 [ 1021.273620][T32188] sctp: [Deprecated]: syz.4.8197 (pid 32188) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1021.273620][T32188] Use struct sctp_sack_info instead [ 1021.507988][T32237] __nla_validate_parse: 15 callbacks suppressed [ 1021.508058][T32237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8216'. [ 1021.534244][T32239] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8217'. [ 1021.557703][T32237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8216'. [ 1021.597352][T32237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8216'. [ 1021.641949][T32239] xfrm1: entered allmulticast mode [ 1021.649583][T29520] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1021.695114][T29520] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1021.728490][T27050] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1021.827594][T32243] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8219'. [ 1022.140725][T32255] netlink: 'syz.1.8222': attribute type 4 has an invalid length. [ 1022.161046][T32255] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8222'. [ 1022.269273][T32255] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1022.433679][T32269] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8232'. [ 1022.470785][T32270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8231'. [ 1023.384483][T32308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8249'. [ 1023.544108][T32311] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8255'. [ 1024.037731][T32337] netlink: 'syz.1.8263': attribute type 1 has an invalid length. [ 1024.787750][T32367] netlink: 'syz.1.8277': attribute type 1 has an invalid length. [ 1024.818701][T32367] NCSI netlink: No device for ifindex 0 [ 1025.121495][T32382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.108832][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1028.384607][T32484] __nla_validate_parse: 9 callbacks suppressed [ 1028.384628][T32484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8332'. [ 1029.345970][T32524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8349'. [ 1029.374379][T32524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8349'. [ 1029.398946][T32524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8349'. [ 1029.423895][T32524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8349'. [ 1029.569409][T29521] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1029.826173][T32543] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8360'. [ 1029.857529][T32543] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.865287][T32543] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.155930][T32558] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8365'. [ 1030.178706][T32558] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8365'. [ 1030.246608][T32561] netlink: 288 bytes leftover after parsing attributes in process `syz.2.8367'. [ 1030.545065][T32573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8373'. [ 1032.393120][T32666] veth0_macvtap: entered allmulticast mode [ 1032.556403][T32676] netlink: 'syz.3.8422': attribute type 2 has an invalid length. [ 1033.742010][T32743] netlink: 'syz.4.8453': attribute type 2 has an invalid length. [ 1034.503813][T32756] __nla_validate_parse: 4 callbacks suppressed [ 1034.503836][T32756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8461'. [ 1034.997613][ T304] syzkaller0: entered promiscuous mode [ 1035.004129][ T304] syzkaller0: entered allmulticast mode [ 1035.341481][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.348901][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.360595][ T330] bridge_slave_0: left allmulticast mode [ 1035.367810][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.469347][ T338] openvswitch: netlink: IP tunnel dst address not specified [ 1035.628340][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1035.658048][ T350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8487'. [ 1035.885426][ T360] syzkaller0: entered promiscuous mode [ 1035.904479][ T360] syzkaller0: entered allmulticast mode [ 1036.607042][ T392] syzkaller0: entered promiscuous mode [ 1036.628331][ T392] syzkaller0: entered allmulticast mode [ 1036.963983][ T405] syzkaller0: entered promiscuous mode [ 1036.969660][ T405] syzkaller0: entered allmulticast mode [ 1037.666547][ T451] netlink: 'syz.1.8531': attribute type 1 has an invalid length. [ 1037.676934][ T451] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8531'. [ 1037.876488][ T457] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.8534'. [ 1037.902388][ T461] tipc: Enabling of bearer rejected, already enabled [ 1038.063065][ T471] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8538'. [ 1038.617436][ T486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8545'. [ 1038.634013][ T486] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1038.982438][ T505] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8553'. [ 1039.737657][ T537] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8566'. [ 1039.818763][ T541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8567'. [ 1040.557596][ T563] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8578'. [ 1040.736196][ T569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8581'. [ 1040.927392][ T569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8581'. [ 1041.475792][ T598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8594'. [ 1041.602254][ T600] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.8595'. [ 1041.978362][ T618] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8602'. [ 1042.181848][ T624] netlink: 'syz.4.8605': attribute type 1 has an invalid length. [ 1042.220521][ T624] sctp: [Deprecated]: syz.4.8605 (pid 624) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1042.220521][ T624] Use struct sctp_sack_info instead [ 1042.277329][ T624] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 1042.280382][ T628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8607'. [ 1042.345337][ T628] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1042.405254][ T630] syzkaller0: entered promiscuous mode [ 1042.414237][ T630] syzkaller0: entered allmulticast mode [ 1042.647992][ T632] smc: ib device syz0 ibport 2 erased user defined pnetid SYZ2 [ 1042.865409][ T645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8614'. [ 1042.940206][ T648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1043.125147][ T654] syzkaller0: entered promiscuous mode [ 1043.140336][ T654] syzkaller0: entered allmulticast mode [ 1043.246601][ T470] Set syz1 is full, maxelem 65536 reached [ 1043.547557][ T672] syzkaller0: entered promiscuous mode [ 1043.578746][ T672] syzkaller0: entered allmulticast mode [ 1043.839748][ T685] syzkaller0: entered promiscuous mode [ 1043.866698][ T685] syzkaller0: entered allmulticast mode [ 1044.478653][ T721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1044.631409][ T730] syzkaller0: entered promiscuous mode [ 1044.647184][ T730] syzkaller0: entered allmulticast mode [ 1045.078787][ T758] __nla_validate_parse: 8 callbacks suppressed [ 1045.078810][ T758] netlink: 192 bytes leftover after parsing attributes in process `syz.1.8667'. [ 1045.111496][ T757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8668'. [ 1045.135987][ T758] openvswitch: netlink: Flow key attr not present in new flow. [ 1045.146740][ T762] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8670'. [ 1045.259130][ T762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8670'. [ 1045.641184][ T784] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8679'. [ 1046.040871][ T816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8693'. [ 1046.105752][ T821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8693'. [ 1046.131673][ T821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8693'. [ 1046.142574][ T821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8693'. [ 1046.152392][ T821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8693'. [ 1046.168629][ T821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1046.925793][ T857] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1047.221379][ T871] syzkaller0: entered promiscuous mode [ 1047.241873][ T871] syzkaller0: entered allmulticast mode [ 1047.883281][ T907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1048.223057][ T922] syzkaller0: entered promiscuous mode [ 1048.242450][ T922] syzkaller0: entered allmulticast mode [ 1048.335189][ T925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1048.381250][ T925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1049.304528][ T992] openvswitch: netlink: Flow actions attr not present in new flow. [ 1049.779466][ T1018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1050.360430][ T1063] __nla_validate_parse: 22 callbacks suppressed [ 1050.360446][ T1063] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8771'. [ 1050.416834][ T1056] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8769'. [ 1050.620649][ T1078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8775'. [ 1050.650334][ T1078] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1051.444004][ T1130] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8798'. [ 1051.612615][ T1130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8798'. [ 1051.623108][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1051.656473][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1051.974768][ T1152] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8808'. [ 1052.479976][ T1184] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8822'. [ 1052.748375][ T1199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8828'. [ 1052.859844][ T1202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8829'. [ 1052.922661][ T1208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8829'. [ 1052.942958][ T1208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1053.548334][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1054.830484][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.792752][ T1376] syz_tun: entered allmulticast mode [ 1056.141018][ T1392] __nla_validate_parse: 13 callbacks suppressed [ 1056.141051][ T1392] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8900'. [ 1056.565467][ T1412] lo speed is unknown, defaulting to 1000 [ 1056.581865][ T1412] erspan0 speed is unknown, defaulting to 1000 [ 1056.630438][ T1375] syz_tun: left allmulticast mode [ 1056.691904][ T1419] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.8912'. [ 1057.788404][ T1459] netlink: 298 bytes leftover after parsing attributes in process `syz.2.8928'. [ 1057.799906][ T1459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1057.885251][ T1462] lo speed is unknown, defaulting to 1000 [ 1057.904473][ T1462] erspan0 speed is unknown, defaulting to 1000 [ 1058.164902][ T1476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8936'. [ 1058.401376][ T1485] syzkaller0: entered promiscuous mode [ 1058.431635][ T1485] syzkaller0: entered allmulticast mode [ 1058.436345][ T1483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8936'. [ 1058.789042][ T1498] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8944'. [ 1059.277933][ T1513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1059.672077][ T1523] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8955'. [ 1060.006323][ T1523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8955'. [ 1060.194874][T29507] vlan3: left allmulticast mode [ 1060.205377][ T1541] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8963'. [ 1060.213940][T29507] geneve0: left allmulticast mode [ 1060.241843][T29507] vlan3: left promiscuous mode [ 1060.268069][T29507] geneve0: left promiscuous mode [ 1060.291369][T29507] bridge0: port 2(vlan3) entered disabled state [ 1060.328481][T29507] bridge_slave_0: left allmulticast mode [ 1060.339709][T29507] bridge_slave_0: left promiscuous mode [ 1060.349963][T29507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.780619][T29507] team0: Port device ip6gre1 removed [ 1061.707402][T29507] bond0 (unregistering): Released all slaves [ 1061.727656][T29507] bond1 (unregistering): Released all slaves [ 1061.754314][T29507] bond2 (unregistering): Released all slaves [ 1061.786017][T29507] bond3 (unregistering): Released all slaves [ 1062.133596][T29507] gretap0 (unregistering): left promiscuous mode [ 1062.185663][T29507] bond5 (unregistering): (slave gretap1): Releasing backup interface [ 1062.495204][T29507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1062.504445][T29507] bond_slave_0: left promiscuous mode [ 1062.510809][T29507] bond_slave_0: left allmulticast mode [ 1062.518741][T29507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1062.527903][T29507] bond_slave_1: left promiscuous mode [ 1062.535328][T29507] bond_slave_1: left allmulticast mode [ 1062.542266][T29507] bond0 (unregistering): Released all slaves [ 1062.554005][T29507] bond1 (unregistering): (slave veth3): Releasing active interface [ 1062.563805][T29507] bond1 (unregistering): Released all slaves [ 1062.579141][T29507] bond2 (unregistering): Released all slaves [ 1062.595851][T29507] bond3 (unregistering): Released all slaves [ 1062.616912][T29507] bond4 (unregistering): Released all slaves [ 1062.632785][T29507] bond5 (unregistering): (slave bond6): Releasing backup interface [ 1062.641708][T29507] bond5 (unregistering): Released all slaves [ 1062.662713][T29507] bond6 (unregistering): Released all slaves [ 1062.968411][ T1596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8978'. [ 1063.081253][ T1591] bridge_slave_0: left allmulticast mode [ 1063.094334][ T1591] bridge_slave_0: left promiscuous mode [ 1063.124985][ T1591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.146830][ T1606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1063.159143][ T1591] bridge_slave_1: left allmulticast mode [ 1063.165130][ T1591] bridge_slave_1: left promiscuous mode [ 1063.172406][ T1591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.212835][ T1591] bond0: (slave bond_slave_0): Releasing backup interface [ 1063.266800][ T1591] bond0: (slave bond_slave_1): Releasing backup interface [ 1063.326657][ T1591] team0: Port device team_slave_0 removed [ 1063.355353][ T1591] team0: Port device team_slave_1 removed [ 1063.380529][ T1591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1063.392037][ T1591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1063.415972][ T1591] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1063.448304][ T1596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8978'. [ 1063.466129][T29507] tipc: Disabling bearer [ 1063.478855][T29507] tipc: Left network mode [ 1063.538396][T29507] tipc: Disabling bearer [ 1063.550750][T29507] tipc: Left network mode [ 1063.963220][ T1631] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8989'. [ 1064.178027][T29507] IPVS: stopping master sync thread 20989 ... [ 1064.507992][ T1656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8997'. [ 1064.813686][ T1656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8997'. [ 1064.862206][ T1656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1064.978699][T29507] batman_adv: batadv0: Removing interface: macvtap1 [ 1065.027255][T29507] batman_adv: batadv0: Removing interface: macvtap2 [ 1065.063567][T29507] batman_adv: batadv0: Removing interface: macvtap3 [ 1065.107518][T29507] batman_adv: batadv0: Removing interface: macvtap4 [ 1065.222850][ T1678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9003'. [ 1065.695955][T29507] batman_adv: batadv0: Removing interface: macvtap1 [ 1065.696329][ T1692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9007'. [ 1065.734667][ T1692] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9007'. [ 1065.764400][ T1696] netlink: 'syz.4.9008': attribute type 12 has an invalid length. [ 1065.772560][T29507] batman_adv: batadv0: Removing interface: macvtap2 [ 1065.780751][ T1696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9008'. [ 1065.841708][ T1697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9009'. [ 1065.877479][ T1697] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1066.251522][ T1709] block nbd0: not configured, cannot reconfigure [ 1066.263961][ T1713] FAULT_INJECTION: forcing a failure. [ 1066.263961][ T1713] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.309789][ T1713] CPU: 1 UID: 0 PID: 1713 Comm: syz.2.9013 Not tainted syzkaller #0 PREEMPT(full) [ 1066.309817][ T1713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1066.309830][ T1713] Call Trace: [ 1066.309839][ T1713] [ 1066.309847][ T1713] dump_stack_lvl+0xe8/0x150 [ 1066.309878][ T1713] should_fail_ex+0x412/0x560 [ 1066.309909][ T1713] should_failslab+0xa8/0x100 [ 1066.309939][ T1713] __kmalloc_cache_noprof+0x88/0x660 [ 1066.309966][ T1713] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1066.309992][ T1713] ? sctp_add_bind_addr+0x8c/0x370 [ 1066.310036][ T1713] sctp_add_bind_addr+0x8c/0x370 [ 1066.310067][ T1713] sctp_copy_local_addr_list+0x314/0x4f0 [ 1066.310098][ T1713] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1066.310123][ T1713] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1066.310152][ T1713] ? sctp_v6_is_any+0x64/0x80 [ 1066.310178][ T1713] ? sctp_copy_one_addr+0x93/0x360 [ 1066.310209][ T1713] sctp_bind_addr_copy+0xb3/0x3c0 [ 1066.310236][ T1713] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1066.310263][ T1713] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1066.310287][ T1713] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1066.310315][ T1713] ? __local_bh_enable_ip+0xd0/0x130 [ 1066.310335][ T1713] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1066.310362][ T1713] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1066.310388][ T1713] sctp_sendmsg+0x1576/0x2c50 [ 1066.310436][ T1713] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1066.310471][ T1713] ? aa_sk_perm+0x6d5/0x900 [ 1066.310494][ T1713] ? __might_fault+0xaf/0x130 [ 1066.310525][ T1713] ? __pfx_aa_sk_perm+0x10/0x10 [ 1066.310554][ T1713] ? sock_rps_record_flow+0x19/0x350 [ 1066.310581][ T1713] ? __pfx_inet_sendmsg+0x10/0x10 [ 1066.310609][ T1713] ? inet_sendmsg+0x2f4/0x370 [ 1066.310635][ T1713] ? __pfx_inet_sendmsg+0x10/0x10 [ 1066.310663][ T1713] __sys_sendto+0x5de/0x710 [ 1066.310696][ T1713] ? __pfx___sys_sendto+0x10/0x10 [ 1066.310721][ T1713] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1066.310766][ T1713] ? __fget_files+0x3a0/0x420 [ 1066.310801][ T1713] ? ksys_write+0x242/0x270 [ 1066.310833][ T1713] ? __pfx_ksys_write+0x10/0x10 [ 1066.310868][ T1713] __x64_sys_sendto+0xde/0x100 [ 1066.310897][ T1713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.310919][ T1713] do_syscall_64+0x15f/0xf80 [ 1066.310947][ T1713] ? trace_irq_disable+0x3b/0x140 [ 1066.310976][ T1713] ? clear_bhb_loop+0x40/0x90 [ 1066.311001][ T1713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.311021][ T1713] RIP: 0033:0x7f1e0299ce59 [ 1066.311051][ T1713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1066.311067][ T1713] RSP: 002b:00007f1e03917028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1066.311089][ T1713] RAX: ffffffffffffffda RBX: 00007f1e02c15fa0 RCX: 00007f1e0299ce59 [ 1066.311104][ T1713] RDX: 0000000000034000 RSI: 0000200000000180 RDI: 0000000000000005 [ 1066.311116][ T1713] RBP: 00007f1e03917090 R08: 0000200000000480 R09: 000000000000001c [ 1066.311129][ T1713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1066.311141][ T1713] R13: 00007f1e02c16038 R14: 00007f1e02c15fa0 R15: 00007fff843c62c8 [ 1066.311177][ T1713] [ 1066.388204][ T1718] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1066.637975][ T1718] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1067.746900][T29507] hsr_slave_0: left promiscuous mode [ 1067.781263][T29507] veth1_to_team: left promiscuous mode [ 1067.825588][T29507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1067.843520][ T5651] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1067.846293][T29507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.865559][ T5651] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1067.877706][ T5651] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1067.890024][ T5651] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1067.902578][ T5651] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1067.960590][T29507] veth1_macvtap: left promiscuous mode [ 1067.966859][T29507] veth0_macvtap: left promiscuous mode [ 1067.990084][T29507] veth1_vlan: left promiscuous mode [ 1068.002356][T29507] veth0_vlan: left promiscuous mode [ 1069.174208][T29507] team0 (unregistering): Port device team_slave_1 removed [ 1069.201787][T29507] team0 (unregistering): Port device team_slave_0 removed [ 1069.581804][T25517] syz_tun (unregistering): left allmulticast mode [ 1069.643552][ T1775] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1069.949082][ T5651] Bluetooth: hci1: command tx timeout [ 1070.327771][ T1825] __nla_validate_parse: 9 callbacks suppressed [ 1070.327793][ T1825] netlink: 88 bytes leftover after parsing attributes in process `syz.2.9041'. [ 1070.497026][ T1763] lo speed is unknown, defaulting to 1000 [ 1070.524132][ T1763] erspan0 speed is unknown, defaulting to 1000 [ 1070.739177][ T1841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9045'. [ 1070.765408][ T1841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9045'. [ 1070.812928][ T1842] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9045'. [ 1070.826671][T29507] IPVS: stop unused estimator thread 0... [ 1070.859630][T29507] IPVS: stop unused estimator thread 0... [ 1070.866356][ T1842] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9045'. [ 1070.898005][ T1842] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9045'. [ 1070.921120][ T1842] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9045'. [ 1071.718434][ T1867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9053'. [ 1071.795441][ T1873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9053'. [ 1071.806664][ T1873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9053'. [ 1071.822929][ T1873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1072.030957][ T5651] Bluetooth: hci1: command tx timeout [ 1072.080446][ T1882] FAULT_INJECTION: forcing a failure. [ 1072.080446][ T1882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1072.095264][ T1882] CPU: 1 UID: 0 PID: 1882 Comm: syz.0.9056 Not tainted syzkaller #0 PREEMPT(full) [ 1072.095291][ T1882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1072.095303][ T1882] Call Trace: [ 1072.095311][ T1882] [ 1072.095320][ T1882] dump_stack_lvl+0xe8/0x150 [ 1072.095351][ T1882] should_fail_ex+0x412/0x560 [ 1072.095383][ T1882] _copy_to_user+0x31/0xb0 [ 1072.095414][ T1882] simple_read_from_buffer+0xe1/0x170 [ 1072.095446][ T1882] proc_fail_nth_read+0x1bb/0x230 [ 1072.095476][ T1882] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1072.095507][ T1882] ? rw_verify_area+0x2a6/0x4d0 [ 1072.095533][ T1882] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1072.095560][ T1882] vfs_read+0x20c/0xa70 [ 1072.095592][ T1882] ? __pfx___mutex_lock+0x10/0x10 [ 1072.095612][ T1882] ? __pfx_vfs_read+0x10/0x10 [ 1072.095645][ T1882] ? __fget_files+0x2a/0x420 [ 1072.095674][ T1882] ? __fget_files+0x3a0/0x420 [ 1072.095696][ T1882] ? __fget_files+0x2a/0x420 [ 1072.095730][ T1882] ksys_read+0x150/0x270 [ 1072.095769][ T1882] ? __pfx_ksys_read+0x10/0x10 [ 1072.095807][ T1882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.095830][ T1882] do_syscall_64+0x15f/0xf80 [ 1072.095858][ T1882] ? trace_irq_disable+0x3b/0x140 [ 1072.095887][ T1882] ? clear_bhb_loop+0x40/0x90 [ 1072.095912][ T1882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.095931][ T1882] RIP: 0033:0x7f5eee75d68e [ 1072.095951][ T1882] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1072.095969][ T1882] RSP: 002b:00007f5eef63bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1072.095990][ T1882] RAX: ffffffffffffffda RBX: 00007f5eef63c6c0 RCX: 00007f5eee75d68e [ 1072.096004][ T1882] RDX: 000000000000000f RSI: 00007f5eef63c0a0 RDI: 0000000000000004 [ 1072.096016][ T1882] RBP: 00007f5eef63c090 R08: 0000000000000000 R09: 0000000000000000 [ 1072.096028][ T1882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1072.096040][ T1882] R13: 00007f5eeea16038 R14: 00007f5eeea15fa0 R15: 00007ffedbdd12b8 [ 1072.096075][ T1882] [ 1072.464066][ T1763] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.472084][ T1763] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.479793][ T1763] bridge_slave_0: entered allmulticast mode [ 1072.488880][ T1763] bridge_slave_0: entered promiscuous mode [ 1072.498288][ T1763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.505700][ T1763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.513382][ T1763] bridge_slave_1: entered allmulticast mode [ 1072.521777][ T1763] bridge_slave_1: entered promiscuous mode [ 1072.620852][ T1763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1072.633015][ T1893] syz_tun: entered allmulticast mode [ 1072.650979][ T1763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1072.711684][ T1763] team0: Port device team_slave_0 added [ 1072.735414][ T1763] team0: Port device team_slave_1 added [ 1072.781885][ T1901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1072.816536][ T1763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.835440][ T1763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.886021][ T1763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.941564][ T1763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.950486][ T1763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1073.020805][ T1763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1073.130536][ T1763] hsr_slave_0: entered promiscuous mode [ 1073.137750][ T1763] hsr_slave_1: entered promiscuous mode [ 1073.365432][ T1763] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1073.433028][ T1892] syz_tun: left allmulticast mode [ 1073.574362][ T1763] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1073.742358][ T1763] netdevsim netdevsim4 netdevsim1 (unregistering): left allmulticast mode [ 1073.758313][ T1763] netdevsim netdevsim4 netdevsim1 (unregistering): left promiscuous mode [ 1073.771749][ T1763] bridge0: port 3(netdevsim1) entered disabled state [ 1073.790829][ T1763] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1074.085752][ T1920] netlink: 'syz.1.9066': attribute type 12 has an invalid length. [ 1074.109113][ T5651] Bluetooth: hci1: command tx timeout [ 1074.246377][ T1763] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1074.267836][ T1763] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1074.289421][ T1763] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1074.302710][ T1763] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1074.312088][ T1763] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1074.328896][ T1763] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1074.345767][ T1763] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1074.369451][ T1763] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1074.572800][ T1943] syz_tun: entered allmulticast mode [ 1074.630641][ T1763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1074.687031][ T1763] 8021q: adding VLAN 0 to HW filter on device team0 [ 1074.708629][T29521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.715954][T29521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1074.719323][ T1950] netlink: 'syz.0.9077': attribute type 12 has an invalid length. [ 1074.746311][ T1950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1074.770075][T29521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.777362][T29521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1075.368569][ T1968] bond4: entered allmulticast mode [ 1075.374835][ T1941] syz_tun: left allmulticast mode [ 1075.828994][ T1763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1076.188798][ T5651] Bluetooth: hci1: command tx timeout [ 1076.376883][T27050] erspan0 speed is unknown, defaulting to 1000 [ 1076.401611][ T5737] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1076.819476][ T5737] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1076.828965][ T2019] __nla_validate_parse: 9 callbacks suppressed [ 1076.828984][ T2019] netlink: 244 bytes leftover after parsing attributes in process `syz.3.9096'. [ 1076.863494][ T1763] veth0_vlan: entered promiscuous mode [ 1077.040263][ T1763] veth1_vlan: entered promiscuous mode [ 1077.164359][ T1763] veth0_macvtap: entered promiscuous mode [ 1077.193967][ T1763] veth1_macvtap: entered promiscuous mode [ 1077.263812][ T1763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1077.302269][ T1763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1077.338778][ T7227] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.360890][ T7227] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.389761][ T7227] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.419715][ T7227] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.682738][T29521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.711353][T29521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1077.813556][T29490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1077.820208][ T2047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9106'. [ 1077.834070][T29490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1077.850181][ T2047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1077.879877][ T2047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1077.901120][ T2047] batman_adv: batadv0: Interface deactivated: macvtap1 [ 1077.918595][ T2047] batman_adv: batadv0: Removing interface: macvtap1 [ 1078.764133][ T2076] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9116'. [ 1079.466944][ T2097] ip6tnl1: entered allmulticast mode [ 1079.759172][ T2108] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9125'. [ 1080.610489][ T2132] xt_hashlimit: size too large, truncated to 1048576 [ 1080.673003][ T2137] FAULT_INJECTION: forcing a failure. [ 1080.673003][ T2137] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.702850][ T2137] CPU: 1 UID: 0 PID: 2137 Comm: syz.2.9139 Not tainted syzkaller #0 PREEMPT(full) [ 1080.702878][ T2137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1080.702889][ T2137] Call Trace: [ 1080.702897][ T2137] [ 1080.702905][ T2137] dump_stack_lvl+0xe8/0x150 [ 1080.702934][ T2137] should_fail_ex+0x412/0x560 [ 1080.702965][ T2137] should_failslab+0xa8/0x100 [ 1080.702996][ T2137] __kmalloc_cache_noprof+0x88/0x660 [ 1080.703027][ T2137] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 1080.703050][ T2137] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1080.703072][ T2137] ? sctp_add_bind_addr+0x8c/0x370 [ 1080.703102][ T2137] sctp_add_bind_addr+0x8c/0x370 [ 1080.703131][ T2137] sctp_copy_local_addr_list+0x314/0x4f0 [ 1080.703165][ T2137] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1080.703187][ T2137] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1080.703213][ T2137] ? sctp_v6_is_any+0x64/0x80 [ 1080.703240][ T2137] ? sctp_copy_one_addr+0x93/0x360 [ 1080.703266][ T2137] sctp_bind_addr_copy+0xb3/0x3c0 [ 1080.703290][ T2137] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1080.703317][ T2137] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1080.703340][ T2137] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1080.703368][ T2137] ? __local_bh_enable_ip+0xd0/0x130 [ 1080.703386][ T2137] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1080.703411][ T2137] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1080.703437][ T2137] sctp_sendmsg+0x1576/0x2c50 [ 1080.703483][ T2137] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1080.703514][ T2137] ? aa_sk_perm+0x6d5/0x900 [ 1080.703547][ T2137] ? __pfx_aa_sk_perm+0x10/0x10 [ 1080.703574][ T2137] ? sock_rps_record_flow+0x19/0x350 [ 1080.703604][ T2137] ? inet_sendmsg+0x2f4/0x370 [ 1080.703633][ T2137] ____sys_sendmsg+0x80a/0x9f0 [ 1080.703665][ T2137] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1080.703697][ T2137] ? import_iovec+0x73/0xa0 [ 1080.703726][ T2137] ___sys_sendmsg+0x2a5/0x360 [ 1080.703743][ T2137] ? __lock_acquire+0x6b5/0x2cf0 [ 1080.703770][ T2137] ? __pfx____sys_sendmsg+0x10/0x10 [ 1080.703795][ T2137] ? kstrtouint+0x6e/0xe0 [ 1080.703844][ T2137] ? __fget_files+0x2a/0x420 [ 1080.703865][ T2137] ? __fget_files+0x3a0/0x420 [ 1080.703898][ T2137] __sys_sendmmsg+0x27c/0x4e0 [ 1080.703924][ T2137] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1080.703942][ T2137] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1080.704001][ T2137] ? ksys_write+0x242/0x270 [ 1080.704041][ T2137] ? __pfx_ksys_write+0x10/0x10 [ 1080.704076][ T2137] __x64_sys_sendmmsg+0xa0/0xc0 [ 1080.704097][ T2137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.704117][ T2137] do_syscall_64+0x15f/0xf80 [ 1080.704144][ T2137] ? trace_irq_disable+0x3b/0x140 [ 1080.704173][ T2137] ? clear_bhb_loop+0x40/0x90 [ 1080.704198][ T2137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.704217][ T2137] RIP: 0033:0x7f1e0299ce59 [ 1080.704238][ T2137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1080.704255][ T2137] RSP: 002b:00007f1e038f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1080.704277][ T2137] RAX: ffffffffffffffda RBX: 00007f1e02c16090 RCX: 00007f1e0299ce59 [ 1080.704292][ T2137] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1080.704304][ T2137] RBP: 00007f1e038f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1080.704316][ T2137] R10: 0000000020008050 R11: 0000000000000246 R12: 0000000000000002 [ 1080.704329][ T2137] R13: 00007f1e02c16128 R14: 00007f1e02c16090 R15: 00007fff843c62c8 [ 1080.704364][ T2137] [ 1081.279186][ T2145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9142'. [ 1081.295875][ T2145] netlink: 'syz.1.9142': attribute type 12 has an invalid length. [ 1081.304442][ T2145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9142'. [ 1081.352951][ T2148] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9141'. [ 1081.427371][ T2146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1081.855322][ T2170] FAULT_INJECTION: forcing a failure. [ 1081.855322][ T2170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1081.903413][ T2170] CPU: 1 UID: 0 PID: 2170 Comm: syz.0.9151 Not tainted syzkaller #0 PREEMPT(full) [ 1081.903445][ T2170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1081.903462][ T2170] Call Trace: [ 1081.903471][ T2170] [ 1081.903480][ T2170] dump_stack_lvl+0xe8/0x150 [ 1081.903511][ T2170] should_fail_ex+0x412/0x560 [ 1081.903544][ T2170] _copy_from_user+0x2d/0xb0 [ 1081.903573][ T2170] kstrtouint_from_user+0xd6/0x180 [ 1081.903600][ T2170] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1081.903638][ T2170] proc_fail_nth_write+0x8e/0x210 [ 1081.903664][ T2170] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1081.903696][ T2170] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1081.903724][ T2170] vfs_write+0x29a/0xb90 [ 1081.903762][ T2170] ? __pfx_vfs_write+0x10/0x10 [ 1081.903800][ T2170] ? __fget_files+0x2a/0x420 [ 1081.903829][ T2170] ? __fget_files+0x3a0/0x420 [ 1081.903851][ T2170] ? __fget_files+0x2a/0x420 [ 1081.903885][ T2170] ksys_write+0x150/0x270 [ 1081.903915][ T2170] ? __pfx_ksys_write+0x10/0x10 [ 1081.903952][ T2170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.903976][ T2170] do_syscall_64+0x15f/0xf80 [ 1081.904004][ T2170] ? trace_irq_disable+0x3b/0x140 [ 1081.904030][ T2170] ? clear_bhb_loop+0x40/0x90 [ 1081.904056][ T2170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.904075][ T2170] RIP: 0033:0x7f5eee75d68e [ 1081.904095][ T2170] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1081.904112][ T2170] RSP: 002b:00007f5eef63bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1081.904134][ T2170] RAX: ffffffffffffffda RBX: 00007f5eef63c6c0 RCX: 00007f5eee75d68e [ 1081.904148][ T2170] RDX: 0000000000000001 RSI: 00007f5eef63c0a0 RDI: 0000000000000004 [ 1081.904160][ T2170] RBP: 00007f5eef63c090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.904172][ T2170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1081.904184][ T2170] R13: 00007f5eeea16038 R14: 00007f5eeea15fa0 R15: 00007ffedbdd12b8 [ 1081.904219][ T2170] [ 1084.353910][ T2215] netlink: 80 bytes leftover after parsing attributes in process `syz.0.9168'. [ 1084.587958][ T2226] FAULT_INJECTION: forcing a failure. [ 1084.587958][ T2226] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.603093][ T2226] CPU: 1 UID: 0 PID: 2226 Comm: syz.3.9172 Not tainted syzkaller #0 PREEMPT(full) [ 1084.603122][ T2226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1084.603134][ T2226] Call Trace: [ 1084.603144][ T2226] [ 1084.603152][ T2226] dump_stack_lvl+0xe8/0x150 [ 1084.603183][ T2226] should_fail_ex+0x412/0x560 [ 1084.603215][ T2226] should_failslab+0xa8/0x100 [ 1084.603244][ T2226] ? skb_clone+0x212/0x3a0 [ 1084.603265][ T2226] kmem_cache_alloc_noprof+0x87/0x650 [ 1084.603290][ T2226] ? __netlink_lookup+0xc6/0x8b0 [ 1084.603318][ T2226] skb_clone+0x212/0x3a0 [ 1084.603342][ T2226] __netlink_deliver_tap+0x404/0x850 [ 1084.603376][ T2226] ? netlink_deliver_tap+0x2e/0x1b0 [ 1084.603399][ T2226] netlink_deliver_tap+0x19c/0x1b0 [ 1084.603421][ T2226] netlink_unicast+0x730/0x8e0 [ 1084.603462][ T2226] netlink_sendmsg+0x813/0xb40 [ 1084.603494][ T2226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1084.603519][ T2226] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1084.603548][ T2226] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1084.603579][ T2226] ____sys_sendmsg+0x972/0x9f0 [ 1084.603599][ T2226] ? __might_fault+0xaf/0x130 [ 1084.603632][ T2226] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1084.603663][ T2226] ? import_iovec+0x73/0xa0 [ 1084.603695][ T2226] ___sys_sendmsg+0x2a5/0x360 [ 1084.603712][ T2226] ? __lock_acquire+0x6b5/0x2cf0 [ 1084.603739][ T2226] ? __pfx____sys_sendmsg+0x10/0x10 [ 1084.603800][ T2226] ? __fget_files+0x2a/0x420 [ 1084.603829][ T2226] ? __fget_files+0x3a0/0x420 [ 1084.603864][ T2226] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1084.603887][ T2226] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1084.603916][ T2226] ? __pfx_ksys_write+0x10/0x10 [ 1084.603963][ T2226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.603985][ T2226] do_syscall_64+0x15f/0xf80 [ 1084.604017][ T2226] ? clear_bhb_loop+0x40/0x90 [ 1084.604042][ T2226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.604062][ T2226] RIP: 0033:0x7fec54b9ce59 [ 1084.604083][ T2226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1084.604099][ T2226] RSP: 002b:00007fec55980028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1084.604121][ T2226] RAX: ffffffffffffffda RBX: 00007fec54e15fa0 RCX: 00007fec54b9ce59 [ 1084.604135][ T2226] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000001a [ 1084.604173][ T2226] RBP: 00007fec55980090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.604186][ T2226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1084.604198][ T2226] R13: 00007fec54e16038 R14: 00007fec54e15fa0 R15: 00007ffd982ebe18 [ 1084.604233][ T2226] [ 1085.261273][ T2237] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9179'. [ 1085.659190][ T2254] netlink: 'syz.3.9184': attribute type 12 has an invalid length. [ 1085.667359][ T2254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9184'. [ 1085.834565][ T2260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1085.841971][ T2260] IPv6: NLM_F_CREATE should be set when creating new route [ 1086.816663][ T2274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9190'. [ 1086.952385][ T2277] netlink: 'syz.0.9189': attribute type 1 has an invalid length. [ 1087.277014][ T2172] Set syz1 is full, maxelem 65536 reached [ 1087.351108][ T2283] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9191'. [ 1087.361267][ T2283] nbd: must specify a size in bytes for the device [ 1090.669542][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1101.253399][T17424] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1101.275136][T29874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1101.290439][T29874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1101.304801][T29874] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1101.307326][T17424] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1101.321007][T29874] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1101.324133][T17424] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1101.330620][T29874] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1101.344479][T29874] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1101.360255][ T5651] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1102.219860][T29953] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1102.235515][T29953] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1102.244988][T29953] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1102.261512][T29953] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1102.270483][T29953] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1102.326905][ T5651] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1102.349677][ T5651] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1102.363492][ T5651] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1102.373764][ T5651] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1102.385705][ T5651] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1102.654405][ T5651] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1102.667019][ T5651] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1102.676894][ T5651] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1102.687531][ T5651] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1102.697355][ T5651] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1103.388359][T29953] Bluetooth: hci2: command tx timeout [ 1103.478608][T29953] Bluetooth: hci6: command tx timeout [ 1104.352281][T29953] Bluetooth: hci7: command tx timeout [ 1104.428533][T29953] Bluetooth: hci8: command tx timeout [ 1104.758768][T29953] Bluetooth: hci9: command tx timeout [ 1105.468401][T29953] Bluetooth: hci2: command tx timeout [ 1105.548380][T29953] Bluetooth: hci6: command tx timeout [ 1106.428551][T29953] Bluetooth: hci7: command tx timeout [ 1106.508744][T29953] Bluetooth: hci8: command tx timeout [ 1106.828280][T29953] Bluetooth: hci9: command tx timeout [ 1107.549862][T29953] Bluetooth: hci2: command tx timeout [ 1107.628385][T29953] Bluetooth: hci6: command tx timeout [ 1108.508454][T29953] Bluetooth: hci7: command tx timeout [ 1108.588597][T29953] Bluetooth: hci8: command tx timeout [ 1108.918686][T29953] Bluetooth: hci9: command tx timeout [ 1109.628419][T29953] Bluetooth: hci2: command tx timeout [ 1109.708354][T29953] Bluetooth: hci6: command tx timeout [ 1110.588494][T29953] Bluetooth: hci7: command tx timeout [ 1110.668332][T29953] Bluetooth: hci8: command tx timeout [ 1110.988392][T29953] Bluetooth: hci9: command tx timeout [ 1116.274782][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1161.286208][ T5651] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1161.296841][ T5651] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1161.307901][ T5651] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1161.323020][ T5651] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1161.334930][ T5651] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1161.425083][ T5651] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1161.445634][ T5651] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1161.455369][ T5651] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1161.469863][ T5651] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1161.481210][ T5651] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1162.258220][ T5651] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1162.277207][ T5651] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1162.287050][ T5651] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1162.298186][ T5651] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1162.309841][ T5651] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1162.358320][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1162.372232][ T5651] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1162.385083][ T5651] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1162.396675][ T5651] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1162.410543][ T5651] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1162.420793][ T5651] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1162.727384][ T5651] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1162.738028][ T5651] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1162.746784][ T5651] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1162.763066][ T5651] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1162.773898][ T5651] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1163.388420][ T5651] Bluetooth: hci10: command tx timeout [ 1163.549801][ T5651] Bluetooth: hci11: command tx timeout [ 1164.348650][ T5651] Bluetooth: hci12: command tx timeout [ 1164.508420][ T5651] Bluetooth: hci13: command tx timeout [ 1164.828856][ T5651] Bluetooth: hci14: command tx timeout [ 1165.468673][ T5651] Bluetooth: hci10: command tx timeout [ 1165.628425][ T5651] Bluetooth: hci11: command tx timeout [ 1166.428520][ T5651] Bluetooth: hci12: command tx timeout [ 1166.588536][ T5651] Bluetooth: hci13: command tx timeout [ 1166.908393][ T5651] Bluetooth: hci14: command tx timeout [ 1167.548374][ T5651] Bluetooth: hci10: command tx timeout [ 1167.708408][ T5651] Bluetooth: hci11: command tx timeout [ 1168.508591][ T5651] Bluetooth: hci12: command tx timeout [ 1168.668302][ T5651] Bluetooth: hci13: command tx timeout [ 1168.988361][ T5651] Bluetooth: hci14: command tx timeout [ 1169.628618][ T5651] Bluetooth: hci10: command tx timeout [ 1169.788554][ T5651] Bluetooth: hci11: command tx timeout [ 1170.588636][ T5651] Bluetooth: hci12: command tx timeout [ 1170.748293][ T5651] Bluetooth: hci13: command tx timeout [ 1171.069911][ T5651] Bluetooth: hci14: command tx timeout [ 1177.710323][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1190.028389][ T5651] Bluetooth: hci1: command 0x0406 tx timeout [ 1221.354911][ T5651] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1221.372538][ T5651] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1221.382708][ T5651] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1221.391426][ T5651] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1221.405763][ T5651] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1221.418724][T29874] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1221.439085][ T5651] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1221.454711][ T5651] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1221.466266][ T5651] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1221.475616][ T5651] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1222.346741][T17424] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1222.361217][T17424] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1222.375332][T17424] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1222.387652][T17424] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1222.398251][T17424] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1222.420253][T17424] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1222.463348][T17424] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1222.477124][T17424] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1222.489271][T17424] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1222.500561][T17424] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1222.810900][T29953] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1222.821981][T29953] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1222.834092][T29953] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1222.845767][T29953] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1222.853686][T29953] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1223.469733][T17424] Bluetooth: hci15: command tx timeout [ 1223.548356][T17424] Bluetooth: hci16: command tx timeout [ 1224.509110][ T2386] Bluetooth: hci17: command tx timeout [ 1224.588464][ T2386] Bluetooth: hci18: command tx timeout [ 1224.908507][ T2386] Bluetooth: hci19: command tx timeout [ 1225.548267][ T2386] Bluetooth: hci15: command tx timeout [ 1225.628344][ T2386] Bluetooth: hci16: command tx timeout [ 1225.868361][ T2386] Bluetooth: hci7: command 0x0406 tx timeout [ 1225.874701][ T2385] Bluetooth: hci2: command 0x0406 tx timeout [ 1225.894941][ T2386] Bluetooth: hci6: command 0x0406 tx timeout [ 1225.900481][ T2385] Bluetooth: hci9: command 0x0406 tx timeout [ 1225.901196][ T2386] Bluetooth: hci8: command 0x0406 tx timeout [ 1226.588400][T29874] Bluetooth: hci17: command tx timeout [ 1226.668407][T29874] Bluetooth: hci18: command tx timeout [ 1226.998458][T29874] Bluetooth: hci19: command tx timeout [ 1227.638271][T29874] Bluetooth: hci15: command tx timeout [ 1227.708317][T29874] Bluetooth: hci16: command tx timeout [ 1228.668728][T29874] Bluetooth: hci17: command tx timeout [ 1228.748249][T29874] Bluetooth: hci18: command tx timeout [ 1229.078293][T29874] Bluetooth: hci19: command tx timeout [ 1229.708349][T29874] Bluetooth: hci15: command tx timeout [ 1229.788296][T29874] Bluetooth: hci16: command tx timeout [ 1230.748304][T29874] Bluetooth: hci17: command tx timeout [ 1230.828551][T29874] Bluetooth: hci18: command tx timeout [ 1231.158400][T29874] Bluetooth: hci19: command tx timeout [ 1239.150848][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1246.188355][ T30] INFO: task kworker/1:2:808 blocked for more than 143 seconds. [ 1246.199107][ T30] Not tainted syzkaller #0 [ 1246.204113][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1246.214943][ T30] task:kworker/1:2 state:D stack:24216 pid:808 tgid:808 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1246.227570][ T30] Workqueue: events smc_ib_port_event_work [ 1246.234267][ T30] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1246.237657][ T30] [ 1246.248160][ T30] __schedule+0x1821/0x5740 [ 1246.258203][ T30] ? __pfx_clockevents_program_event+0x10/0x10 [ 1246.268110][ T30] ? __pfx___schedule+0x10/0x10 [ 1246.278426][ T30] ? __pfx___schedule+0x10/0x10 [ 1246.288108][ T30] ? schedule+0x90/0x360 [ 1246.298494][ T30] schedule+0x164/0x360 [ 1246.308129][ T30] schedule_preempt_disabled+0x13/0x30 [ 1246.318262][ T30] __mutex_lock+0x7f7/0x1550 [ 1246.327744][ T30] ? __mutex_lock+0x608/0x1550 [ 1246.350343][ T30] ? rxe_query_port+0x7e/0x3d0 [ 1246.368140][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1246.390943][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 1246.402131][ T30] rxe_query_port+0x7e/0x3d0 [ 1246.406840][ T30] ib_query_port+0x170/0x830 [ 1246.411741][ T30] smc_ib_port_event_work+0x15a/0x940 [ 1246.417210][ T30] ? process_scheduled_works+0xa70/0x1860 [ 1246.423459][ T30] ? process_scheduled_works+0xa70/0x1860 [ 1246.429429][ T30] process_scheduled_works+0xb5d/0x1860 [ 1246.435116][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1246.441265][ T30] ? assign_work+0x3d5/0x5e0 [ 1246.445918][ T30] worker_thread+0xa53/0xfc0 [ 1246.450852][ T30] kthread+0x389/0x470 [ 1246.455070][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1246.460393][ T30] ? __pfx_kthread+0x10/0x10 [ 1246.465149][ T30] ret_from_fork+0x514/0xb70 [ 1246.470135][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1246.475288][ T30] ? __switch_to+0xc79/0x1410 [ 1246.480264][ T30] ? __pfx_kthread+0x10/0x10 [ 1246.485105][ T30] ret_from_fork_asm+0x1a/0x30 [ 1246.490139][ T30] [ 1246.493237][ T30] INFO: task kworker/1:3:1223 blocked for more than 143 seconds. [ 1246.501228][ T30] Not tainted syzkaller #0 [ 1246.506285][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1246.515176][ T30] task:kworker/1:3 state:D stack:23040 pid:1223 tgid:1223 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1246.527440][ T30] Workqueue: infiniband ib_cache_event_task [ 1246.533651][ T30] Call Trace: [ 1246.536997][ T30] [ 1246.540722][ T30] __schedule+0x1821/0x5740 [ 1246.545326][ T30] ? __pfx_clockevents_program_event+0x10/0x10 [ 1246.551760][ T30] ? __pfx___schedule+0x10/0x10 [ 1246.556953][ T30] ? __pfx___schedule+0x10/0x10 [ 1246.561989][ T30] ? schedule+0x90/0x360 [ 1246.566263][ T30] schedule+0x164/0x360 [ 1246.570568][ T30] schedule_preempt_disabled+0x13/0x30 [ 1246.576100][ T30] __mutex_lock+0x7f7/0x1550 [ 1246.580888][ T30] ? __mutex_lock+0x608/0x1550 [ 1246.586037][ T30] ? ib_get_eth_speed+0x173/0x7f0 [ 1246.591881][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1246.597073][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 1246.602350][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1246.607237][ T30] ? ib_device_get_netdev+0x220/0x2f0 [ 1246.612784][ T30] ib_get_eth_speed+0x173/0x7f0 [ 1246.617782][ T30] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1246.623213][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 1246.628838][ T30] ? rxe_query_port+0x6b/0x3d0 [ 1246.633770][ T30] rxe_query_port+0x93/0x3d0 [ 1246.638538][ T30] ib_query_port+0x170/0x830 [ 1246.643177][ T30] ib_cache_update+0x1ba/0xc70 [ 1246.647983][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1246.653150][ T30] ? __pfx_ib_cache_update+0x10/0x10 [ 1246.658657][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1246.664097][ T30] ? process_scheduled_works+0xa70/0x1860 [ 1246.670097][ T30] ? process_scheduled_works+0xa70/0x1860 [ 1246.675885][ T30] ib_cache_event_task+0xe0/0x1d0 [ 1246.681492][ T30] ? process_scheduled_works+0xa70/0x1860 [ 1246.687442][ T30] process_scheduled_works+0xb5d/0x1860 [ 1246.693178][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1246.699262][ T30] ? assign_work+0x3d5/0x5e0 [ 1246.703906][ T30] worker_thread+0xa53/0xfc0 [ 1246.708833][ T30] kthread+0x389/0x470 [ 1246.713041][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1246.718336][ T30] ? __pfx_kthread+0x10/0x10 [ 1246.723083][ T30] ret_from_fork+0x514/0xb70 [ 1246.727791][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1246.733350][ T30] ? __switch_to+0xc79/0x1410 [ 1246.738448][ T30] ? __pfx_kthread+0x10/0x10 [ 1246.743183][ T30] ret_from_fork_asm+0x1a/0x30 [ 1246.748004][ T30] [ 1246.751280][ T30] INFO: task kworker/0:5:5737 blocked for more than 143 seconds. [ 1246.759097][ T30] Not tainted syzkaller #0 [ 1246.764073][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1246.773087][ T30] task:kworker/0:5 state:D stack:24960 pid:5737 tgid:5737 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1246.785274][ T30] Workqueue: events netdev_rx_mode_work [ 1246.791498][ T30] Call Trace: [ 1246.795008][ T30] [ 1246.797948][ T30] __schedule+0x1821/0x5740 [ 1246.803018][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1246.808098][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1246.813378][ T30] ? wq_worker_sleeping+0x101/0x250 [ 1246.818720][ T30] ? __pfx___schedule+0x10/0x10 [ 1246.823624][ T30] ? schedule+0x90/0x360 [ 1246.827888][ T30] schedule+0x164/0x360 [ 1246.833711][ T30] schedule_preempt_disabled+0x13/0x30 [ 1246.839262][ T30] __mutex_lock+0x7f7/0x1550 [ 1246.843874][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1246.849549][ T30] ? __mutex_lock+0x608/0x1550 [ 1246.854387][ T30] ? netdev_rx_mode_work+0x19/0x3c0 [ 1246.859649][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1246.864801][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1246.870388][ T30] ? process_scheduled_works+0xa70/0x1860 [ 1246.876185][ T30] ? process_scheduled_works+0xa70/0x1860 [ 1246.882109][ T30] ? process_scheduled_works+0xa70/0x1860 [ 1246.887890][ T30] netdev_rx_mode_work+0x19/0x3c0 [ 1246.893135][ T30] ? process_scheduled_works+0xa70/0x1860 [ 1246.899003][ T30] process_scheduled_works+0xb5d/0x1860 [ 1246.904716][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1246.911114][ T30] ? assign_work+0x3d5/0x5e0 [ 1246.915779][ T30] worker_thread+0xa53/0xfc0 [ 1246.920469][ T30] kthread+0x389/0x470 [ 1246.924767][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1246.930016][ T30] ? __pfx_kthread+0x10/0x10 [ 1246.934741][ T30] ret_from_fork+0x514/0xb70 [ 1246.939478][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1246.944815][ T30] ? __switch_to+0xc79/0x1410 [ 1246.950098][ T30] ? __pfx_kthread+0x10/0x10 [ 1246.954748][ T30] ret_from_fork_asm+0x1a/0x30 [ 1246.959763][ T30] [ 1246.962888][ T30] INFO: task kworker/u8:13:29487 blocked for more than 144 seconds. [ 1246.976435][ T30] Not tainted syzkaller #0 [ 1246.981651][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1246.990824][ T30] task:kworker/u8:13 state:D stack:22296 pid:29487 tgid:29487 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1247.003210][ T30] Workqueue: events_unbound linkwatch_event [ 1247.009261][ T30] Call Trace: [ 1247.012601][ T30] [ 1247.015560][ T30] __schedule+0x1821/0x5740 [ 1247.020221][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1247.025207][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1247.031082][ T30] ? stack_depot_save_flags+0x33/0x810 [ 1247.036876][ T30] ? __pfx___schedule+0x10/0x10 [ 1247.041987][ T30] ? schedule+0x90/0x360 [ 1247.046363][ T30] schedule+0x164/0x360 [ 1247.050639][ T30] schedule_preempt_disabled+0x13/0x30 [ 1247.056159][ T30] __mutex_lock+0x7f7/0x1550 [ 1247.061185][ T30] ? __mutex_lock+0x608/0x1550 [ 1247.065981][ T30] ? linkwatch_event+0xe/0x60 [ 1247.071129][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1247.076232][ T30] ? process_scheduled_works+0xa70/0x1860 [ 1247.082376][ T30] ? process_scheduled_works+0xa70/0x1860 [ 1247.088402][ T30] linkwatch_event+0xe/0x60 [ 1247.093128][ T30] process_scheduled_works+0xb5d/0x1860 [ 1247.098791][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1247.104819][ T30] ? assign_work+0x3d5/0x5e0 [ 1247.109609][ T30] worker_thread+0xa53/0xfc0 [ 1247.114278][ T30] kthread+0x389/0x470 [ 1247.118469][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1247.123692][ T30] ? __pfx_kthread+0x10/0x10 [ 1247.128391][ T30] ret_from_fork+0x514/0xb70 [ 1247.133213][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1247.138388][ T30] ? __switch_to+0xc79/0x1410 [ 1247.143318][ T30] ? __pfx_kthread+0x10/0x10 [ 1247.147941][ T30] ret_from_fork_asm+0x1a/0x30 [ 1247.153330][ T30] [ 1247.156459][ T30] INFO: task syz.3.9186:2257 blocked for more than 144 seconds. [ 1247.164180][ T30] Not tainted syzkaller #0 [ 1247.169217][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1247.177921][ T30] task:syz.3.9186 state:D stack:24424 pid:2257 tgid:2257 ppid:26660 task_flags:0x400040 flags:0x00080002 [ 1247.190197][ T30] Call Trace: [ 1247.193529][ T30] [ 1247.196566][ T30] __schedule+0x1821/0x5740 [ 1247.201162][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1247.206155][ T30] ? stack_depot_save_flags+0x33/0x810 [ 1247.211797][ T30] ? __pfx___schedule+0x10/0x10 [ 1247.216889][ T30] ? schedule+0x90/0x360 [ 1247.221218][ T30] schedule+0x164/0x360 [ 1247.225529][ T30] schedule_preempt_disabled+0x13/0x30 [ 1247.231200][ T30] __mutex_lock+0x7f7/0x1550 [ 1247.235873][ T30] ? __mutex_lock+0x608/0x1550 [ 1247.240733][ T30] ? raw_release+0x1bc/0x9f0 [ 1247.245366][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1247.250464][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1247.255540][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 1247.260922][ T30] raw_release+0x1bc/0x9f0 [ 1247.265392][ T30] sock_close+0xc3/0x240 [ 1247.269878][ T30] ? __pfx_sock_close+0x10/0x10 [ 1247.274978][ T30] __fput+0x44f/0xa60 [ 1247.279220][ T30] task_work_run+0x1d9/0x270 [ 1247.283892][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1247.289175][ T30] exit_to_user_mode_loop+0xf3/0x4d0 [ 1247.294606][ T30] ? rcu_is_watching+0x15/0xb0 [ 1247.299620][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.305782][ T30] do_syscall_64+0x33e/0xf80 [ 1247.310778][ T30] ? trace_irq_disable+0x3b/0x140 [ 1247.315883][ T30] ? clear_bhb_loop+0x40/0x90 [ 1247.320688][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.326636][ T30] RIP: 0033:0x7fec54b9ce59 [ 1247.331149][ T30] RSP: 002b:00007ffd982ebf78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1247.339728][ T30] RAX: 0000000000000000 RBX: 00007fec54e17da0 RCX: 00007fec54b9ce59 [ 1247.347790][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1247.355956][ T30] RBP: 00007fec54e17da0 R08: 0000000000000006 R09: 0000000000000000 [ 1247.364001][ T30] R10: 00007fec54e17cb0 R11: 0000000000000246 R12: 0000000000109473 [ 1247.372025][ T30] R13: 00007fec54e1618c R14: 00000000001091f6 R15: 00007ffd982ec080 [ 1247.380085][ T30] [ 1247.383152][ T30] INFO: task syz.3.9186:2258 blocked for more than 144 seconds. [ 1247.391091][ T30] Not tainted syzkaller #0 [ 1247.396083][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1247.407658][ T30] task:syz.3.9186 state:D stack:28088 pid:2258 tgid:2257 ppid:26660 task_flags:0x400140 flags:0x00080002 [ 1247.419990][ T30] Call Trace: [ 1247.423353][ T30] [ 1247.426321][ T30] __schedule+0x1821/0x5740 [ 1247.431134][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1247.436185][ T30] ? __pfx___schedule+0x10/0x10 [ 1247.441179][ T30] ? schedule+0x90/0x360 [ 1247.445482][ T30] schedule+0x164/0x360 [ 1247.449750][ T30] schedule_preempt_disabled+0x13/0x30 [ 1247.455245][ T30] __mutex_lock+0x7f7/0x1550 [ 1247.460136][ T30] ? __mutex_lock+0x608/0x1550 [ 1247.464940][ T30] ? __tun_chr_ioctl+0x3bc/0x1e10 [ 1247.470246][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1247.475443][ T30] __tun_chr_ioctl+0x3bc/0x1e10 [ 1247.480370][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1247.485801][ T30] ? __fget_files+0x2a/0x420 [ 1247.490649][ T30] ? __fget_files+0x3a0/0x420 [ 1247.495424][ T30] ? __fget_files+0x2a/0x420 [ 1247.500065][ T30] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1247.505046][ T30] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1247.510430][ T30] __se_sys_ioctl+0xfc/0x170 [ 1247.515109][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.521305][ T30] do_syscall_64+0x15f/0xf80 [ 1247.525933][ T30] ? trace_irq_disable+0x3b/0x140 [ 1247.531311][ T30] ? clear_bhb_loop+0x40/0x90 [ 1247.536038][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.542203][ T30] RIP: 0033:0x7fec54b9ce59 [ 1247.546762][ T30] RSP: 002b:00007fec55980028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1247.555786][ T30] RAX: ffffffffffffffda RBX: 00007fec54e15fa0 RCX: 00007fec54b9ce59 [ 1247.564026][ T30] RDX: 0000200000000080 RSI: 00000000400454ca RDI: 0000000000000003 [ 1247.572175][ T30] RBP: 00007fec54c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1247.580315][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1247.588512][ T30] R13: 00007fec54e16038 R14: 00007fec54e15fa0 R15: 00007ffd982ebe18 [ 1247.596552][ T30] [ 1247.599719][ T30] INFO: task syz.3.9186:2261 blocked for more than 144 seconds. [ 1247.607382][ T30] Not tainted syzkaller #0 [ 1247.612764][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1247.621508][ T30] task:syz.3.9186 state:D stack:27552 pid:2261 tgid:2257 ppid:26660 task_flags:0x400140 flags:0x00080002 [ 1247.633954][ T30] Call Trace: [ 1247.637352][ T30] [ 1247.640560][ T30] __schedule+0x1821/0x5740 [ 1247.645145][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1247.650179][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1247.655611][ T30] ? __pfx___schedule+0x10/0x10 [ 1247.660628][ T30] ? schedule+0x90/0x360 [ 1247.664981][ T30] schedule+0x164/0x360 [ 1247.669379][ T30] schedule_preempt_disabled+0x13/0x30 [ 1247.674986][ T30] __mutex_lock+0x7f7/0x1550 [ 1247.679682][ T30] ? __mutex_lock+0x608/0x1550 [ 1247.684475][ T30] ? rtnl_dumpit+0x92/0x200 [ 1247.689227][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1247.694479][ T30] ? rcu_is_watching+0x15/0xb0 [ 1247.699282][ T30] ? trace_kmalloc+0x2a/0xf0 [ 1247.703987][ T30] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 1247.710715][ T30] ? __pfx_rtnl_dump_all+0x10/0x10 [ 1247.715986][ T30] rtnl_dumpit+0x92/0x200 [ 1247.720449][ T30] netlink_dump+0x702/0xe10 [ 1247.725015][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 1247.730149][ T30] ? netlink_lookup+0x30/0x200 [ 1247.735224][ T30] ? netlink_lookup+0x30/0x200 [ 1247.740080][ T30] ? netlink_lookup+0x30/0x200 [ 1247.744884][ T30] __netlink_dump_start+0x5cb/0x7e0 [ 1247.750473][ T30] rtnetlink_rcv_msg+0xa3a/0xbe0 [ 1247.755498][ T30] ? __pfx_rtnl_dump_all+0x10/0x10 [ 1247.760677][ T30] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1247.765839][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1247.771383][ T30] ? ref_tracker_free+0x693/0x840 [ 1247.776477][ T30] ? __pfx_rtnl_dumpit+0x10/0x10 [ 1247.781808][ T30] ? __pfx_rtnl_dump_all+0x10/0x10 [ 1247.787126][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1247.792296][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1247.798006][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1247.803364][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 1247.808662][ T30] netlink_unicast+0x75c/0x8e0 [ 1247.813667][ T30] netlink_sendmsg+0x813/0xb40 [ 1247.818508][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1247.823912][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1247.828984][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1247.834414][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1247.839762][ T30] sock_write_iter+0x49b/0x4f0 [ 1247.844583][ T30] ? __pfx_sock_write_iter+0x10/0x10 [ 1247.849962][ T30] ? bpf_lsm_file_permission+0x9/0x20 [ 1247.855535][ T30] ? security_file_permission+0x75/0x260 [ 1247.861382][ T30] vfs_write+0x61d/0xb90 [ 1247.865723][ T30] ? __pfx_vfs_write+0x10/0x10 [ 1247.870693][ T30] ? __fget_files+0x2a/0x420 [ 1247.875366][ T30] ksys_write+0x150/0x270 [ 1247.879906][ T30] ? __pfx_ksys_write+0x10/0x10 [ 1247.884813][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.891118][ T30] do_syscall_64+0x15f/0xf80 [ 1247.895874][ T30] ? trace_irq_disable+0x3b/0x140 [ 1247.901050][ T30] ? clear_bhb_loop+0x40/0x90 [ 1247.905765][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.911973][ T30] RIP: 0033:0x7fec54b9ce59 [ 1247.916443][ T30] RSP: 002b:00007fec52df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1247.924921][ T30] RAX: ffffffffffffffda RBX: 00007fec54e16090 RCX: 00007fec54b9ce59 [ 1247.933047][ T30] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000009 [ 1247.941095][ T30] RBP: 00007fec54c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1247.949876][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1247.957919][ T30] R13: 00007fec54e16128 R14: 00007fec54e16090 R15: 00007ffd982ebe18 [ 1247.966017][ T30] [ 1247.969220][ T30] INFO: task syz.2.9187:2265 blocked for more than 145 seconds. [ 1247.976908][ T30] Not tainted syzkaller #0 [ 1247.981964][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1247.990845][ T30] task:syz.2.9187 state:D stack:27168 pid:2265 tgid:2259 ppid:25183 task_flags:0x400140 flags:0x00080002 [ 1248.002884][ T30] Call Trace: [ 1248.006191][ T30] [ 1248.009196][ T30] __schedule+0x1821/0x5740 [ 1248.013907][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1248.019073][ T30] ? __pfx___schedule+0x10/0x10 [ 1248.023980][ T30] ? schedule+0x90/0x360 [ 1248.028458][ T30] schedule+0x164/0x360 [ 1248.032684][ T30] schedule_preempt_disabled+0x13/0x30 [ 1248.038398][ T30] __mutex_lock+0x7f7/0x1550 [ 1248.043031][ T30] ? __mutex_lock+0x608/0x1550 [ 1248.047821][ T30] ? rtnetlink_rcv_msg+0x722/0xbe0 [ 1248.053116][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1248.058474][ T30] rtnetlink_rcv_msg+0x722/0xbe0 [ 1248.063439][ T30] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1248.068630][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1248.074206][ T30] ? ref_tracker_free+0x693/0x840 [ 1248.079515][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 1248.085151][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1248.090287][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1248.095933][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1248.101502][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1248.106741][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1248.112040][ T30] netlink_unicast+0x75c/0x8e0 [ 1248.116860][ T30] netlink_sendmsg+0x813/0xb40 [ 1248.121830][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1248.127250][ T30] ? __se_sys_ioctl+0x47/0x170 [ 1248.132444][ T30] ? do_syscall_64+0x15f/0xf80 [ 1248.137264][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1248.142474][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1248.147797][ T30] ____sys_sendmsg+0x972/0x9f0 [ 1248.152909][ T30] ? __might_fault+0xaf/0x130 [ 1248.157654][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1248.163193][ T30] ? import_iovec+0x73/0xa0 [ 1248.167859][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1248.172810][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1248.177811][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1248.183067][ T30] ? tomoyo_path_number_perm+0x219/0x630 [ 1248.189534][ T30] ? __fget_files+0x2a/0x420 [ 1248.194284][ T30] ? __fget_files+0x3a0/0x420 [ 1248.199064][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1248.204126][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1248.209749][ T30] ? rcu_is_watching+0x15/0xb0 [ 1248.214585][ T30] ? __pfx_kcov_ioctl+0x10/0x10 [ 1248.219556][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.225831][ T30] do_syscall_64+0x15f/0xf80 [ 1248.230548][ T30] ? trace_irq_disable+0x3b/0x140 [ 1248.235613][ T30] ? clear_bhb_loop+0x40/0x90 [ 1248.240384][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.246555][ T30] RIP: 0033:0x7f1e0299ce59 [ 1248.251134][ T30] RSP: 002b:00007f1e038d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1248.259627][ T30] RAX: ffffffffffffffda RBX: 00007f1e02c16180 RCX: 00007f1e0299ce59 [ 1248.267796][ T30] RDX: 0000000020040084 RSI: 0000200000000740 RDI: 0000000000000008 [ 1248.275995][ T30] RBP: 00007f1e02a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1248.284048][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1248.292452][ T30] R13: 00007f1e02c16218 R14: 00007f1e02c16180 R15: 00007fff843c62c8 [ 1248.300994][ T30] [ 1248.304073][ T30] INFO: task syz.0.9189:2272 blocked for more than 145 seconds. [ 1248.312629][ T30] Not tainted syzkaller #0 [ 1248.317601][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1248.326583][ T30] task:syz.0.9189 state:D stack:26704 pid:2272 tgid:2271 ppid:26133 task_flags:0x400140 flags:0x00080002 [ 1248.338752][ T30] Call Trace: [ 1248.342082][ T30] [ 1248.345111][ T30] __schedule+0x1821/0x5740 [ 1248.349895][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1248.354878][ T30] ? __pfx___schedule+0x10/0x10 [ 1248.359883][ T30] ? schedule+0x90/0x360 [ 1248.364165][ T30] schedule+0x164/0x360 [ 1248.368433][ T30] schedule_preempt_disabled+0x13/0x30 [ 1248.374046][ T30] __mutex_lock+0x7f7/0x1550 [ 1248.378793][ T30] ? __mutex_lock+0x608/0x1550 [ 1248.383750][ T30] ? __tun_chr_ioctl+0x3bc/0x1e10 [ 1248.388951][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1248.394049][ T30] __tun_chr_ioctl+0x3bc/0x1e10 [ 1248.399001][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1248.404425][ T30] ? __fget_files+0x2a/0x420 [ 1248.409409][ T30] ? __fget_files+0x3a0/0x420 [ 1248.414233][ T30] ? __fget_files+0x2a/0x420 [ 1248.418905][ T30] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1248.424001][ T30] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1248.429386][ T30] __se_sys_ioctl+0xfc/0x170 [ 1248.434030][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.440178][ T30] do_syscall_64+0x15f/0xf80 [ 1248.444814][ T30] ? trace_irq_disable+0x3b/0x140 [ 1248.450037][ T30] ? clear_bhb_loop+0x40/0x90 [ 1248.454782][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.460741][ T30] RIP: 0033:0x7f5eee79ce59 [ 1248.465183][ T30] RSP: 002b:00007f5eef63c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1248.473713][ T30] RAX: ffffffffffffffda RBX: 00007f5eeea15fa0 RCX: 00007f5eee79ce59 [ 1248.481919][ T30] RDX: 0000200000000340 RSI: 00000000400454ca RDI: 0000000000000004 [ 1248.490146][ T30] RBP: 00007f5eee832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1248.498191][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1248.506214][ T30] R13: 00007f5eeea16038 R14: 00007f5eeea15fa0 R15: 00007ffedbdd12b8 [ 1248.514330][ T30] [ 1248.517406][ T30] INFO: task syz.0.9189:2275 blocked for more than 145 seconds. [ 1248.525369][ T30] Not tainted syzkaller #0 [ 1248.530487][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1248.539234][ T30] task:syz.0.9189 state:D stack:28760 pid:2275 tgid:2271 ppid:26133 task_flags:0x400040 flags:0x00080002 [ 1248.551261][ T30] Call Trace: [ 1248.554566][ T30] [ 1248.557526][ T30] __schedule+0x1821/0x5740 [ 1248.562468][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1248.567459][ T30] ? tomoyo_path_number_perm+0x501/0x630 [ 1248.573312][ T30] ? security_file_ioctl+0xc3/0x2a0 [ 1248.578715][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.585002][ T30] ? __pfx___schedule+0x10/0x10 [ 1248.590269][ T30] ? schedule+0x90/0x360 [ 1248.594715][ T30] schedule+0x164/0x360 [ 1248.599165][ T30] schedule_preempt_disabled+0x13/0x30 [ 1248.604944][ T30] __mutex_lock+0x7f7/0x1550 [ 1248.609653][ T30] ? __mutex_lock+0x608/0x1550 [ 1248.614473][ T30] ? vlan_ioctl_handler+0xf0/0x630 [ 1248.619773][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1248.624852][ T30] vlan_ioctl_handler+0xf0/0x630 [ 1248.630195][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1248.635362][ T30] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1248.641062][ T30] ? do_futex+0x333/0x420 [ 1248.645517][ T30] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1248.651184][ T30] sock_ioctl+0x668/0x7f0 [ 1248.655568][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 1248.660487][ T30] ? __fget_files+0x2a/0x420 [ 1248.665130][ T30] ? __fget_files+0x3a0/0x420 [ 1248.670299][ T30] ? __fget_files+0x2a/0x420 [ 1248.674969][ T30] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1248.680146][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 1248.685065][ T30] __se_sys_ioctl+0xfc/0x170 [ 1248.690159][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.696387][ T30] do_syscall_64+0x15f/0xf80 [ 1248.701459][ T30] ? trace_irq_disable+0x3b/0x140 [ 1248.706803][ T30] ? clear_bhb_loop+0x40/0x90 [ 1248.711641][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.717731][ T30] RIP: 0033:0x7f5eee79ce59 [ 1248.722253][ T30] RSP: 002b:00007f5eef61b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1248.730780][ T30] RAX: ffffffffffffffda RBX: 00007f5eeea16090 RCX: 00007f5eee79ce59 [ 1248.739244][ T30] RDX: 0000200000000140 RSI: 0000000000008983 RDI: 0000000000000005 [ 1248.747268][ T30] RBP: 00007f5eee832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1248.755806][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1248.763887][ T30] R13: 00007f5eeea16128 R14: 00007f5eeea16090 R15: 00007ffedbdd12b8 [ 1248.771931][ T30] [ 1248.774972][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1248.784082][ T30] INFO: task syz.0.9189:2276 blocked for more than 145 seconds. [ 1248.792022][ T30] Not tainted syzkaller #0 [ 1248.796992][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1248.805745][ T30] task:syz.0.9189 state:D stack:28760 pid:2276 tgid:2271 ppid:26133 task_flags:0x400040 flags:0x00080002 [ 1248.817756][ T30] Call Trace: [ 1248.821355][ T30] [ 1248.824336][ T30] __schedule+0x1821/0x5740 [ 1248.829266][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1248.834266][ T30] ? __pfx___schedule+0x10/0x10 [ 1248.839417][ T30] ? schedule+0x90/0x360 [ 1248.843740][ T30] schedule+0x164/0x360 [ 1248.847924][ T30] schedule_preempt_disabled+0x13/0x30 [ 1248.853803][ T30] __mutex_lock+0x7f7/0x1550 [ 1248.859068][ T30] ? __mutex_lock+0x608/0x1550 [ 1248.864004][ T30] ? __tun_chr_ioctl+0x3bc/0x1e10 [ 1248.869501][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1248.874670][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1248.879844][ T30] __tun_chr_ioctl+0x3bc/0x1e10 [ 1248.884757][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1248.890249][ T30] ? __fget_files+0x2a/0x420 [ 1248.894913][ T30] ? __fget_files+0x3a0/0x420 [ 1248.899680][ T30] ? __fget_files+0x2a/0x420 [ 1248.904294][ T30] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1248.909293][ T30] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1248.914529][ T30] __se_sys_ioctl+0xfc/0x170 [ 1248.919334][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.925447][ T30] do_syscall_64+0x15f/0xf80 [ 1248.930163][ T30] ? trace_irq_disable+0x3b/0x140 [ 1248.935243][ T30] ? clear_bhb_loop+0x40/0x90 [ 1248.940124][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.946060][ T30] RIP: 0033:0x7f5eee79ce59 [ 1248.950754][ T30] RSP: 002b:00007f5eef5fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1248.959353][ T30] RAX: ffffffffffffffda RBX: 00007f5eeea16180 RCX: 00007f5eee79ce59 [ 1248.967384][ T30] RDX: ba98575a95aeb70d RSI: 00000000400454c9 RDI: 0000000000000004 [ 1248.975441][ T30] RBP: 00007f5eee832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1248.983503][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1248.992001][ T30] R13: 00007f5eeea16218 R14: 00007f5eeea16180 R15: 00007ffedbdd12b8 [ 1249.000053][ T30] [ 1249.003082][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1249.012175][ T30] INFO: task syz.0.9189:2277 blocked for more than 146 seconds. [ 1249.019922][ T30] Not tainted syzkaller #0 [ 1249.024873][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1249.033597][ T30] task:syz.0.9189 state:D stack:25480 pid:2277 tgid:2271 ppid:26133 task_flags:0x400140 flags:0x00080002 [ 1249.046037][ T30] Call Trace: [ 1249.049414][ T30] [ 1249.052468][ T30] __schedule+0x1821/0x5740 [ 1249.057016][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1249.062069][ T30] ? __pfx__printk+0x10/0x10 [ 1249.066709][ T30] ? __pfx___schedule+0x10/0x10 [ 1249.072184][ T30] ? schedule+0x90/0x360 [ 1249.076636][ T30] schedule+0x164/0x360 [ 1249.080897][ T30] schedule_preempt_disabled+0x13/0x30 [ 1249.086391][ T30] __mutex_lock+0x7f7/0x1550 [ 1249.091137][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 1249.097012][ T30] ? __mutex_lock+0x608/0x1550 [ 1249.101872][ T30] ? rtnl_newlink+0x883/0x1bb0 [ 1249.106678][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1249.111790][ T30] ? ns_capable+0x89/0xe0 [ 1249.116153][ T30] rtnl_newlink+0x883/0x1bb0 [ 1249.120835][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 1249.125892][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1249.130899][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1249.135902][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1249.140941][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1249.145997][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1249.151134][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1249.156542][ T30] ? rcu_is_watching+0x15/0xb0 [ 1249.161467][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1249.166539][ T30] ? finish_task_switch+0x41f/0xbe0 [ 1249.171809][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 1249.177056][ T30] ? finish_task_switch+0x41f/0xbe0 [ 1249.182510][ T30] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1249.187701][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 1249.192911][ T30] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1249.197908][ T30] ? netlink_sendmsg+0x5d4/0xb40 [ 1249.202928][ T30] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1249.208194][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1249.213777][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1249.218790][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1249.223595][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1249.229637][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1249.235192][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1249.240543][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1249.245785][ T30] netlink_unicast+0x75c/0x8e0 [ 1249.250649][ T30] netlink_sendmsg+0x813/0xb40 [ 1249.255644][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1249.261247][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1249.266427][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1249.271921][ T30] ____sys_sendmsg+0x972/0x9f0 [ 1249.276746][ T30] ? __might_fault+0xaf/0x130 [ 1249.281634][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1249.286973][ T30] ? import_iovec+0x73/0xa0 [ 1249.291820][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1249.296723][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1249.301749][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1249.307086][ T30] ? futex_wait+0x2a2/0x390 [ 1249.312012][ T30] ? __fget_files+0x2a/0x420 [ 1249.316771][ T30] ? __fget_files+0x3a0/0x420 [ 1249.321868][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1249.326867][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1249.332621][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.338857][ T30] do_syscall_64+0x15f/0xf80 [ 1249.343498][ T30] ? trace_irq_disable+0x3b/0x140 [ 1249.348890][ T30] ? clear_bhb_loop+0x40/0x90 [ 1249.353685][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.359706][ T30] RIP: 0033:0x7f5eee79ce59 [ 1249.364176][ T30] RSP: 002b:00007f5eef5d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1249.372751][ T30] RAX: ffffffffffffffda RBX: 00007f5eeea16270 RCX: 00007f5eee79ce59 [ 1249.380985][ T30] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 1249.390667][ T30] RBP: 00007f5eee832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1249.398882][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1249.406989][ T30] R13: 00007f5eeea16308 R14: 00007f5eeea16270 R15: 00007ffedbdd12b8 [ 1249.415397][ T30] [ 1249.418510][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1249.427580][ T30] INFO: task syz.0.9189:2278 blocked for more than 146 seconds. [ 1249.435660][ T30] Not tainted syzkaller #0 [ 1249.441047][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1249.450234][ T30] task:syz.0.9189 state:D stack:26824 pid:2278 tgid:2271 ppid:26133 task_flags:0x400140 flags:0x00080002 [ 1249.462461][ T30] Call Trace: [ 1249.465833][ T30] [ 1249.469170][ T30] __schedule+0x1821/0x5740 [ 1249.473763][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1249.479399][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1249.484871][ T30] ? stack_depot_save_flags+0x33/0x810 [ 1249.490533][ T30] ? __pfx___schedule+0x10/0x10 [ 1249.495740][ T30] ? schedule+0x90/0x360 [ 1249.500298][ T30] schedule+0x164/0x360 [ 1249.504496][ T30] schedule_preempt_disabled+0x13/0x30 [ 1249.510750][ T30] __mutex_lock+0x7f7/0x1550 [ 1249.515485][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 1249.521342][ T30] ? __mutex_lock+0x608/0x1550 [ 1249.526243][ T30] ? rtnl_newlink+0x883/0x1bb0 [ 1249.531181][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1249.536246][ T30] ? ns_capable+0x89/0xe0 [ 1249.540687][ T30] rtnl_newlink+0x883/0x1bb0 [ 1249.545415][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 1249.550613][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1249.555709][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1249.560827][ T30] ? __kernel_text_address+0xd/0x30 [ 1249.566065][ T30] ? unwind_get_return_address+0x4d/0x90 [ 1249.571957][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1249.578309][ T30] ? arch_stack_walk+0xfb/0x150 [ 1249.583299][ T30] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1249.588728][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 1249.594021][ T30] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1249.599077][ T30] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 1249.605199][ T30] ? netlink_sendmsg+0x5d4/0xb40 [ 1249.610319][ T30] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1249.615555][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1249.621344][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1249.626369][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1249.631612][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1249.637116][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1249.642486][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1249.647701][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1249.652978][ T30] netlink_unicast+0x75c/0x8e0 [ 1249.657881][ T30] netlink_sendmsg+0x813/0xb40 [ 1249.662712][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1249.668098][ T30] ? __se_sys_ioctl+0x47/0x170 [ 1249.672986][ T30] ? do_syscall_64+0x15f/0xf80 [ 1249.677768][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1249.682778][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1249.688421][ T30] ____sys_sendmsg+0x972/0x9f0 [ 1249.693259][ T30] ? __might_fault+0xaf/0x130 [ 1249.697982][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1249.703637][ T30] ? import_iovec+0x73/0xa0 [ 1249.708731][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1249.713477][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1249.718475][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1249.723763][ T30] ? ktime_get+0x45/0x220 [ 1249.728529][ T30] ? __fget_files+0x2a/0x420 [ 1249.733165][ T30] ? __fget_files+0x3a0/0x420 [ 1249.737967][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1249.743076][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1249.748776][ T30] ? rcu_is_watching+0x15/0xb0 [ 1249.753767][ T30] ? __pfx_kcov_ioctl+0x10/0x10 [ 1249.758742][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.764932][ T30] do_syscall_64+0x15f/0xf80 [ 1249.769631][ T30] ? trace_irq_disable+0x3b/0x140 [ 1249.774707][ T30] ? clear_bhb_loop+0x40/0x90 [ 1249.779502][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.785454][ T30] RIP: 0033:0x7f5eee79ce59 [ 1249.790132][ T30] RSP: 002b:00007f5eef5b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1249.798816][ T30] RAX: ffffffffffffffda RBX: 00007f5eeea16360 RCX: 00007f5eee79ce59 [ 1249.806900][ T30] RDX: 0000000004000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 1249.815126][ T30] RBP: 00007f5eee832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1249.823441][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1249.831501][ T30] R13: 00007f5eeea163f8 R14: 00007f5eeea16360 R15: 00007ffedbdd12b8 [ 1249.839909][ T30] [ 1249.842990][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1249.852490][ T30] INFO: task syz.0.9189:2279 blocked for more than 147 seconds. [ 1249.860209][ T30] Not tainted syzkaller #0 [ 1249.865197][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1249.874210][ T30] task:syz.0.9189 state:D stack:26360 pid:2279 tgid:2271 ppid:26133 task_flags:0x400140 flags:0x00080002 [ 1249.886350][ T30] Call Trace: [ 1249.889841][ T30] [ 1249.892876][ T30] __schedule+0x1821/0x5740 [ 1249.897510][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1249.902621][ T30] ? __pfx_clockevents_program_event+0x10/0x10 [ 1249.908888][ T30] ? preempt_schedule_notrace+0x57/0x90 [ 1249.914553][ T30] ? __pfx___schedule+0x10/0x10 [ 1249.919577][ T30] ? schedule+0x90/0x360 [ 1249.923949][ T30] schedule+0x164/0x360 [ 1249.928452][ T30] schedule_preempt_disabled+0x13/0x30 [ 1249.934201][ T30] __mutex_lock+0x7f7/0x1550 [ 1249.939052][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 1249.944871][ T30] ? __mutex_lock+0x608/0x1550 [ 1249.950134][ T30] ? rtnl_newlink+0x883/0x1bb0 [ 1249.955012][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1249.960217][ T30] ? ns_capable+0x89/0xe0 [ 1249.964784][ T30] rtnl_newlink+0x883/0x1bb0 [ 1249.969587][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 1249.974769][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1249.980234][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1249.985202][ T30] ? unwind_next_frame+0xa6/0x2550 [ 1249.990542][ T30] ? unwind_next_frame+0xa6/0x2550 [ 1249.995721][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 1250.001058][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 1250.006331][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1250.011428][ T30] ? kernel_text_address+0xa5/0xe0 [ 1250.016709][ T30] ? __kernel_text_address+0xd/0x30 [ 1250.022189][ T30] ? unwind_get_return_address+0x4d/0x90 [ 1250.027853][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1250.034633][ T30] ? arch_stack_walk+0xfb/0x150 [ 1250.039623][ T30] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1250.044813][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 1250.049962][ T30] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1250.055040][ T30] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 1250.061333][ T30] ? netlink_sendmsg+0x5d4/0xb40 [ 1250.066512][ T30] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1250.071762][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1250.077412][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1250.082446][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1250.087265][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1250.093194][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1250.098591][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1250.103817][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1250.109256][ T30] netlink_unicast+0x75c/0x8e0 [ 1250.114200][ T30] netlink_sendmsg+0x813/0xb40 [ 1250.119082][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1250.124405][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1250.129514][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1250.134875][ T30] ____sys_sendmsg+0x972/0x9f0 [ 1250.139819][ T30] ? __might_fault+0xaf/0x130 [ 1250.144639][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1250.150069][ T30] ? import_iovec+0x73/0xa0 [ 1250.154710][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1250.159690][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1250.164887][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1250.170449][ T30] ? futex_wake+0x4ac/0x580 [ 1250.175125][ T30] ? __fget_files+0x2a/0x420 [ 1250.179780][ T30] ? __fget_files+0x3a0/0x420 [ 1250.184523][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1250.189734][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1250.195435][ T30] ? rcu_is_watching+0x15/0xb0 [ 1250.200339][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.206712][ T30] do_syscall_64+0x15f/0xf80 [ 1250.211570][ T30] ? trace_irq_disable+0x3b/0x140 [ 1250.216932][ T30] ? clear_bhb_loop+0x40/0x90 [ 1250.221792][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.227792][ T30] RIP: 0033:0x7f5eee79ce59 [ 1250.232326][ T30] RSP: 002b:00007f5eef597028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1250.241022][ T30] RAX: ffffffffffffffda RBX: 00007f5eeea16450 RCX: 00007f5eee79ce59 [ 1250.249246][ T30] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 000000000000000c [ 1250.257505][ T30] RBP: 00007f5eee832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1250.265754][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1250.274538][ T30] R13: 00007f5eeea164e8 R14: 00007f5eeea16450 R15: 00007ffedbdd12b8 [ 1250.282806][ T30] [ 1250.285873][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1250.295257][ T30] INFO: task syz.1.9190:2274 blocked for more than 147 seconds. [ 1250.303070][ T30] Not tainted syzkaller #0 [ 1250.308235][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1250.317317][ T30] task:syz.1.9190 state:D stack:25480 pid:2274 tgid:2273 ppid:27107 task_flags:0x400140 flags:0x00080002 [ 1250.329554][ T30] Call Trace: [ 1250.332953][ T30] [ 1250.335921][ T30] __schedule+0x1821/0x5740 [ 1250.340511][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1250.345513][ T30] ? __pfx__printk+0x10/0x10 [ 1250.350257][ T30] ? __pfx___schedule+0x10/0x10 [ 1250.355263][ T30] ? schedule+0x90/0x360 [ 1250.359953][ T30] schedule+0x164/0x360 [ 1250.364300][ T30] schedule_preempt_disabled+0x13/0x30 [ 1250.370010][ T30] __mutex_lock+0x7f7/0x1550 [ 1250.375057][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 1250.380897][ T30] ? __mutex_lock+0x608/0x1550 [ 1250.385711][ T30] ? rtnl_newlink+0x883/0x1bb0 [ 1250.390778][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1250.395871][ T30] ? ns_capable+0x89/0xe0 [ 1250.400316][ T30] rtnl_newlink+0x883/0x1bb0 [ 1250.404964][ T30] ? netlink_deliver_tap+0x19c/0x1b0 [ 1250.410336][ T30] ? netlink_unicast+0x730/0x8e0 [ 1250.415667][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 1250.420886][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.427119][ T30] ? kasan_quarantine_put+0xbb/0x1f0 [ 1250.432532][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 1250.437960][ T30] ? nlmon_xmit+0xb0/0x100 [ 1250.442476][ T30] ? kmem_cache_free+0x182/0x650 [ 1250.447721][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1250.452831][ T30] ? __dev_queue_xmit+0x2b6/0x3950 [ 1250.458200][ T30] ? __local_bh_enable_ip+0xd0/0x130 [ 1250.463621][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 1250.469182][ T30] ? __dev_queue_xmit+0x2b6/0x3950 [ 1250.474456][ T30] ? __local_bh_enable_ip+0xd0/0x130 [ 1250.479874][ T30] ? __dev_queue_xmit+0x2b6/0x3950 [ 1250.485051][ T30] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1250.490662][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 1250.495858][ T30] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1250.501110][ T30] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1250.506287][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1250.511852][ T30] ? ref_tracker_free+0x693/0x840 [ 1250.516936][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 1250.522502][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1250.527392][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1250.533018][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1250.538397][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1250.543675][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1250.549010][ T30] netlink_unicast+0x75c/0x8e0 [ 1250.553836][ T30] netlink_sendmsg+0x813/0xb40 [ 1250.559237][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1250.564567][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1250.569682][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1250.575059][ T30] ____sys_sendmsg+0x972/0x9f0 [ 1250.580013][ T30] ? __might_fault+0xaf/0x130 [ 1250.584740][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1250.590284][ T30] ? import_iovec+0x73/0xa0 [ 1250.594889][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1250.599747][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1250.604809][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1250.610253][ T30] ? futex_wait+0x2a2/0x390 [ 1250.614868][ T30] ? __fget_files+0x2a/0x420 [ 1250.619546][ T30] ? __fget_files+0x3a0/0x420 [ 1250.624276][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1250.629365][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1250.634887][ T30] ? rcu_is_watching+0x15/0xb0 [ 1250.639736][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.645852][ T30] do_syscall_64+0x15f/0xf80 [ 1250.650555][ T30] ? trace_irq_disable+0x3b/0x140 [ 1250.655632][ T30] ? clear_bhb_loop+0x40/0x90 [ 1250.660392][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.666319][ T30] RIP: 0033:0x7f97a219ce59 [ 1250.671540][ T30] RSP: 002b:00007f97a2f81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1250.680245][ T30] RAX: ffffffffffffffda RBX: 00007f97a2415fa0 RCX: 00007f97a219ce59 [ 1250.688593][ T30] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1250.696752][ T30] RBP: 00007f97a2232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1250.705037][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1250.713278][ T30] R13: 00007f97a2416038 R14: 00007f97a2415fa0 R15: 00007ffdf783e1f8 [ 1250.721881][ T30] [ 1250.725091][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1250.734291][ T30] INFO: task syz.4.9191:2282 blocked for more than 147 seconds. [ 1250.742180][ T30] Not tainted syzkaller #0 [ 1250.747150][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1250.756416][ T30] task:syz.4.9191 state:D stack:26656 pid:2282 tgid:2281 ppid:1763 task_flags:0x400140 flags:0x00080002 [ 1250.768717][ T30] Call Trace: [ 1250.772027][ T30] [ 1250.775076][ T30] __schedule+0x1821/0x5740 [ 1250.780006][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1250.785044][ T30] ? preempt_schedule_notrace+0x57/0x90 [ 1250.790837][ T30] ? __pfx___schedule+0x10/0x10 [ 1250.795785][ T30] ? schedule+0x90/0x360 [ 1250.800115][ T30] schedule+0x164/0x360 [ 1250.804324][ T30] schedule_preempt_disabled+0x13/0x30 [ 1250.809953][ T30] __mutex_lock+0x7f7/0x1550 [ 1250.814588][ T30] ? __mutex_lock+0x608/0x1550 [ 1250.819445][ T30] ? start_sync_thread+0x1c4/0x2860 [ 1250.824964][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1250.830241][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1250.836305][ T30] ? ip_vs_rht_set_thresholds+0x1cb/0x3c0 [ 1250.842128][ T30] start_sync_thread+0x1c4/0x2860 [ 1250.847196][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1250.852266][ T30] ? futex_unqueue+0x22/0x240 [ 1250.856999][ T30] ? futex_unqueue+0x22/0x240 [ 1250.861837][ T30] ? look_up_lock_class+0x57/0x110 [ 1250.867002][ T30] ? register_lock_class+0x31/0x2e0 [ 1250.873314][ T30] ? __pfx_start_sync_thread+0x10/0x10 [ 1250.879123][ T30] ? __might_fault+0xaf/0x130 [ 1250.883894][ T30] ? __might_fault+0xaf/0x130 [ 1250.889289][ T30] do_ip_vs_set_ctl+0x497/0xb00 [ 1250.894223][ T30] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 1250.899759][ T30] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1250.905562][ T30] ? nf_setsockopt+0x3a/0x290 [ 1250.913602][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1250.919817][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 1250.924829][ T30] nf_setsockopt+0x26f/0x290 [ 1250.929755][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1250.935830][ T30] do_sock_setsockopt+0x17c/0x1b0 [ 1250.941087][ T30] __x64_sys_setsockopt+0x13d/0x1b0 [ 1250.947078][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.954084][ T30] do_syscall_64+0x15f/0xf80 [ 1250.959474][ T30] ? trace_irq_disable+0x3b/0x140 [ 1250.964653][ T30] ? clear_bhb_loop+0x40/0x90 [ 1250.969782][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.975761][ T30] RIP: 0033:0x7f21e779ce59 [ 1250.981662][ T30] RSP: 002b:00007f21e8672028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1250.990779][ T30] RAX: ffffffffffffffda RBX: 00007f21e7a15fa0 RCX: 00007f21e779ce59 [ 1250.999109][ T30] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000008 [ 1251.007121][ T30] RBP: 00007f21e7832d6f R08: 0000000000000018 R09: 0000000000000000 [ 1251.015855][ T30] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 1251.024087][ T30] R13: 00007f21e7a16038 R14: 00007f21e7a15fa0 R15: 00007ffd0d03c578 [ 1251.032697][ T30] [ 1251.035883][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1251.045017][ T30] INFO: task syz-executor:2289 blocked for more than 148 seconds. [ 1251.053220][ T30] Not tainted syzkaller #0 [ 1251.058352][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1251.067051][ T30] task:syz-executor state:D stack:26704 pid:2289 tgid:2289 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1251.079417][ T30] Call Trace: [ 1251.082773][ T30] [ 1251.085740][ T30] __schedule+0x1821/0x5740 [ 1251.090495][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1251.095739][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1251.101570][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1251.106566][ T30] ? __pfx___schedule+0x10/0x10 [ 1251.111519][ T30] ? schedule+0x90/0x360 [ 1251.115812][ T30] schedule+0x164/0x360 [ 1251.120064][ T30] schedule_preempt_disabled+0x13/0x30 [ 1251.125836][ T30] __mutex_lock+0x7f7/0x1550 [ 1251.130511][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 1251.136386][ T30] ? __mutex_lock+0x608/0x1550 [ 1251.141240][ T30] ? inet_rtm_newaddr+0x404/0x1ad0 [ 1251.147018][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1251.152286][ T30] ? __nla_parse+0x40/0x60 [ 1251.156823][ T30] inet_rtm_newaddr+0x404/0x1ad0 [ 1251.162010][ T30] ? unwind_get_return_address+0x4d/0x90 [ 1251.167714][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1251.173996][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1251.179996][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1251.185457][ T30] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1251.190581][ T30] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 1251.196876][ T30] ? netlink_sendmsg+0x5d4/0xb40 [ 1251.201993][ T30] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1251.207148][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1251.212754][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1251.217753][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1251.223220][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1251.228824][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1251.234686][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1251.239982][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1251.245237][ T30] netlink_unicast+0x75c/0x8e0 [ 1251.250117][ T30] netlink_sendmsg+0x813/0xb40 [ 1251.254993][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1251.260383][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1251.265384][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1251.271187][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1251.276545][ T30] __sys_sendto+0x672/0x710 [ 1251.281143][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 1251.286327][ T30] ? exc_page_fault+0x6a/0xc0 [ 1251.291234][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 1251.296600][ T30] __x64_sys_sendto+0xde/0x100 [ 1251.301687][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.307990][ T30] do_syscall_64+0x15f/0xf80 [ 1251.313168][ T30] ? trace_irq_disable+0x3b/0x140 [ 1251.318386][ T30] ? clear_bhb_loop+0x40/0x90 [ 1251.323279][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.329245][ T30] RIP: 0033:0x7f386595d68e [ 1251.333687][ T30] RSP: 002b:00007ffeaf475d88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1251.342177][ T30] RAX: ffffffffffffffda RBX: 0000555556a52500 RCX: 00007f386595d68e [ 1251.350227][ T30] RDX: 0000000000000028 RSI: 00007f3866744670 RDI: 0000000000000003 [ 1251.358394][ T30] RBP: 0000000000000001 R08: 00007ffeaf475e04 R09: 000000000000000c [ 1251.366542][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1251.374583][ T30] R13: 0000000000000000 R14: 00007f3866744670 R15: 0000000000000000 [ 1251.382944][ T30] [ 1251.386046][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1251.395277][ T30] INFO: task syz-executor:2291 blocked for more than 148 seconds. [ 1251.403305][ T30] Not tainted syzkaller #0 [ 1251.408338][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1251.417121][ T30] task:syz-executor state:D stack:26760 pid:2291 tgid:2291 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1251.429281][ T30] Call Trace: [ 1251.432617][ T30] [ 1251.435577][ T30] __schedule+0x1821/0x5740 [ 1251.440233][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1251.445200][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1251.450755][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1251.455854][ T30] ? __pfx___schedule+0x10/0x10 [ 1251.460907][ T30] ? schedule+0x90/0x360 [ 1251.465233][ T30] schedule+0x164/0x360 [ 1251.470114][ T30] schedule_preempt_disabled+0x13/0x30 [ 1251.475901][ T30] __mutex_lock+0x7f7/0x1550 [ 1251.480547][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 1251.486354][ T30] ? __mutex_lock+0x608/0x1550 [ 1251.491534][ T30] ? inet_rtm_newaddr+0x404/0x1ad0 [ 1251.496902][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1251.502380][ T30] ? __nla_parse+0x40/0x60 [ 1251.506878][ T30] inet_rtm_newaddr+0x404/0x1ad0 [ 1251.512124][ T30] ? unwind_get_return_address+0x4d/0x90 [ 1251.517908][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1251.524169][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1251.529798][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1251.535195][ T30] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1251.540207][ T30] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 1251.546321][ T30] ? netlink_sendmsg+0x5d4/0xb40 [ 1251.551445][ T30] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1251.556613][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1251.562155][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1251.567318][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1251.572149][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1251.578926][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1251.584280][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1251.589703][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1251.595087][ T30] netlink_unicast+0x75c/0x8e0 [ 1251.600150][ T30] netlink_sendmsg+0x813/0xb40 [ 1251.605115][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1251.611117][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1251.616141][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1251.621636][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1251.627234][ T30] __sys_sendto+0x672/0x710 [ 1251.631940][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 1251.637065][ T30] ? exc_page_fault+0x6a/0xc0 [ 1251.641967][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 1251.647300][ T30] __x64_sys_sendto+0xde/0x100 [ 1251.652204][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.658702][ T30] do_syscall_64+0x15f/0xf80 [ 1251.663467][ T30] ? trace_irq_disable+0x3b/0x140 [ 1251.668600][ T30] ? clear_bhb_loop+0x40/0x90 [ 1251.673384][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.679487][ T30] RIP: 0033:0x7f6d6ed5d68e [ 1251.683974][ T30] RSP: 002b:00007fffe69a3b78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1251.692605][ T30] RAX: ffffffffffffffda RBX: 00005555738c7500 RCX: 00007f6d6ed5d68e [ 1251.700664][ T30] RDX: 0000000000000028 RSI: 00007f6d6fb44670 RDI: 0000000000000003 [ 1251.709493][ T30] RBP: 0000000000000001 R08: 00007fffe69a3bf4 R09: 000000000000000c [ 1251.717972][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1251.726105][ T30] R13: 0000000000000000 R14: 00007f6d6fb44670 R15: 0000000000000000 [ 1251.734318][ T30] [ 1251.737367][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1251.746586][ T30] INFO: task syz-executor:2303 blocked for more than 148 seconds. [ 1251.754604][ T30] Not tainted syzkaller #0 [ 1251.759690][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1251.768511][ T30] task:syz-executor state:D stack:26760 pid:2303 tgid:2303 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1251.780617][ T30] Call Trace: [ 1251.783955][ T30] [ 1251.787094][ T30] __schedule+0x1821/0x5740 [ 1251.792336][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1251.797351][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1251.803431][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1251.808497][ T30] ? __pfx___schedule+0x10/0x10 [ 1251.813383][ T30] ? schedule+0x90/0x360 [ 1251.817743][ T30] schedule+0x164/0x360 [ 1251.822248][ T30] schedule_preempt_disabled+0x13/0x30 [ 1251.827790][ T30] __mutex_lock+0x7f7/0x1550 [ 1251.832613][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 1251.838447][ T30] ? __mutex_lock+0x608/0x1550 [ 1251.843258][ T30] ? inet_rtm_newaddr+0x404/0x1ad0 [ 1251.848444][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1251.853508][ T30] ? __nla_parse+0x40/0x60 [ 1251.857983][ T30] inet_rtm_newaddr+0x404/0x1ad0 [ 1251.863034][ T30] ? unwind_get_return_address+0x4d/0x90 [ 1251.868837][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1251.875024][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1251.880528][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1251.885955][ T30] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1251.891193][ T30] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 1251.897335][ T30] ? netlink_sendmsg+0x5d4/0xb40 [ 1251.902348][ T30] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1251.907505][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1251.913054][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1251.918117][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1251.922925][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1251.928644][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1251.934111][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1251.939381][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1251.944627][ T30] netlink_unicast+0x75c/0x8e0 [ 1251.949965][ T30] netlink_sendmsg+0x813/0xb40 [ 1251.954794][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1251.960462][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1251.965433][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1251.970811][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1251.976366][ T30] __sys_sendto+0x672/0x710 [ 1251.980993][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 1251.986103][ T30] ? exc_page_fault+0x6a/0xc0 [ 1251.990983][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 1251.996320][ T30] __x64_sys_sendto+0xde/0x100 [ 1252.001459][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.008015][ T30] do_syscall_64+0x15f/0xf80 [ 1252.012719][ T30] ? trace_irq_disable+0x3b/0x140 [ 1252.017787][ T30] ? clear_bhb_loop+0x40/0x90 [ 1252.022551][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.028508][ T30] RIP: 0033:0x7fcb5875d68e [ 1252.033118][ T30] RSP: 002b:00007ffc22d39a68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1252.041842][ T30] RAX: ffffffffffffffda RBX: 000055558cbdd500 RCX: 00007fcb5875d68e [ 1252.049910][ T30] RDX: 0000000000000028 RSI: 00007fcb59544670 RDI: 0000000000000003 [ 1252.057923][ T30] RBP: 0000000000000001 R08: 00007ffc22d39ae4 R09: 000000000000000c [ 1252.065971][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1252.074178][ T30] R13: 0000000000000000 R14: 00007fcb59544670 R15: 0000000000000000 [ 1252.082334][ T30] [ 1252.085382][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1252.094730][ T30] INFO: task syz-executor:2305 blocked for more than 149 seconds. [ 1252.102756][ T30] Not tainted syzkaller #0 [ 1252.107696][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1252.116804][ T30] task:syz-executor state:D stack:26760 pid:2305 tgid:2305 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1252.129003][ T30] Call Trace: [ 1252.132491][ T30] [ 1252.135461][ T30] __schedule+0x1821/0x5740 [ 1252.140239][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1252.145316][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1252.150958][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1252.155961][ T30] ? __pfx___schedule+0x10/0x10 [ 1252.161089][ T30] ? schedule+0x90/0x360 [ 1252.165376][ T30] schedule+0x164/0x360 [ 1252.169632][ T30] schedule_preempt_disabled+0x13/0x30 [ 1252.175226][ T30] __mutex_lock+0x7f7/0x1550 [ 1252.179902][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 1252.185761][ T30] ? __mutex_lock+0x608/0x1550 [ 1252.190791][ T30] ? inet_rtm_newaddr+0x404/0x1ad0 [ 1252.195975][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1252.201245][ T30] ? __nla_parse+0x40/0x60 [ 1252.205692][ T30] inet_rtm_newaddr+0x404/0x1ad0 [ 1252.210796][ T30] ? unwind_get_return_address+0x4d/0x90 [ 1252.216460][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1252.222778][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1252.228260][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1252.233681][ T30] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1252.238711][ T30] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 1252.244934][ T30] ? netlink_sendmsg+0x5d4/0xb40 [ 1252.250069][ T30] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1252.255305][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1252.261436][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1252.266439][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1252.271519][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1252.277236][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1252.282655][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1252.288259][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1252.293622][ T30] netlink_unicast+0x75c/0x8e0 [ 1252.298503][ T30] netlink_sendmsg+0x813/0xb40 [ 1252.303402][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1252.308904][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1252.313903][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1252.319380][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1252.324711][ T30] __sys_sendto+0x672/0x710 [ 1252.329310][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 1252.334403][ T30] ? exc_page_fault+0x6a/0xc0 [ 1252.339178][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 1252.344601][ T30] __x64_sys_sendto+0xde/0x100 [ 1252.350152][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.356286][ T30] do_syscall_64+0x15f/0xf80 [ 1252.361061][ T30] ? trace_irq_disable+0x3b/0x140 [ 1252.366322][ T30] ? clear_bhb_loop+0x40/0x90 [ 1252.371372][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.377412][ T30] RIP: 0033:0x7f6b62d5d68e [ 1252.381917][ T30] RSP: 002b:00007ffe882433b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1252.390675][ T30] RAX: ffffffffffffffda RBX: 000055557c0ac500 RCX: 00007f6b62d5d68e [ 1252.398768][ T30] RDX: 0000000000000028 RSI: 00007f6b63b44670 RDI: 0000000000000003 [ 1252.406918][ T30] RBP: 0000000000000001 R08: 00007ffe88243434 R09: 000000000000000c [ 1252.415720][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1252.424215][ T30] R13: 0000000000000000 R14: 00007f6b63b44670 R15: 0000000000000000 [ 1252.432556][ T30] [ 1252.435888][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1252.445356][ T30] INFO: task syz-executor:2312 blocked for more than 149 seconds. [ 1252.453259][ T30] Not tainted syzkaller #0 [ 1252.458315][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1252.467370][ T30] task:syz-executor state:D stack:26760 pid:2312 tgid:2312 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1252.479620][ T30] Call Trace: [ 1252.482949][ T30] [ 1252.485911][ T30] __schedule+0x1821/0x5740 [ 1252.490623][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1252.495654][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1252.501356][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1252.506459][ T30] ? __pfx___schedule+0x10/0x10 [ 1252.511667][ T30] ? schedule+0x90/0x360 [ 1252.516026][ T30] schedule+0x164/0x360 [ 1252.520797][ T30] schedule_preempt_disabled+0x13/0x30 [ 1252.526335][ T30] __mutex_lock+0x7f7/0x1550 [ 1252.530998][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 1252.536750][ T30] ? __mutex_lock+0x608/0x1550 [ 1252.541738][ T30] ? inet_rtm_newaddr+0x404/0x1ad0 [ 1252.546925][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1252.552138][ T30] ? __nla_parse+0x40/0x60 [ 1252.556624][ T30] inet_rtm_newaddr+0x404/0x1ad0 [ 1252.561960][ T30] ? unwind_get_return_address+0x4d/0x90 [ 1252.567753][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1252.575231][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1252.580789][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1252.586217][ T30] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1252.592690][ T30] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 1252.599993][ T30] ? netlink_sendmsg+0x5d4/0xb40 [ 1252.605069][ T30] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1252.610376][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1252.615881][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1252.621836][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1252.626636][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1252.632418][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1252.637751][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1252.643061][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1252.648338][ T30] netlink_unicast+0x75c/0x8e0 [ 1252.653155][ T30] netlink_sendmsg+0x813/0xb40 [ 1252.658087][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1252.663399][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1252.668745][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1252.674084][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1252.679663][ T30] __sys_sendto+0x672/0x710 [ 1252.684404][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 1252.689628][ T30] ? exc_page_fault+0x6a/0xc0 [ 1252.694384][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 1252.699904][ T30] __x64_sys_sendto+0xde/0x100 [ 1252.704767][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.711160][ T30] do_syscall_64+0x15f/0xf80 [ 1252.716012][ T30] ? trace_irq_disable+0x3b/0x140 [ 1252.721327][ T30] ? clear_bhb_loop+0x40/0x90 [ 1252.726063][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.732218][ T30] RIP: 0033:0x7f04e275d68e [ 1252.736682][ T30] RSP: 002b:00007ffea094b538 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1252.745290][ T30] RAX: ffffffffffffffda RBX: 0000555557071500 RCX: 00007f04e275d68e [ 1252.753451][ T30] RDX: 0000000000000028 RSI: 00007f04e3544670 RDI: 0000000000000003 [ 1252.761554][ T30] RBP: 0000000000000001 R08: 00007ffea094b5b4 R09: 000000000000000c [ 1252.769677][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1252.777695][ T30] R13: 0000000000000000 R14: 00007f04e3544670 R15: 0000000000000000 [ 1252.785849][ T30] [ 1252.789032][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1252.798496][ T30] [ 1252.798496][ T30] Showing all locks held in the system: [ 1252.806432][ T30] 3 locks held by kworker/0:0/9: [ 1252.811671][ T30] #0: ffff88813fe47140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1252.822985][ T30] #1: ffffc900000e7c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1252.834313][ T30] #2: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1252.844866][ T30] 1 lock held by khungtaskd/30: [ 1252.849778][ T30] #0: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1252.859755][ T30] 3 locks held by kworker/1:2/808: [ 1252.864889][ T30] #0: ffff88813fe47140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1252.875899][ T30] #1: ffffc90004a97c40 ((work_completion)(&smcibdev->port_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1252.889117][ T30] #2: ffff8880781692d0 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0x7e/0x3d0 [ 1252.898878][ T30] 4 locks held by kworker/1:3/1223: [ 1252.904090][ T30] #0: ffff88801b3b3940 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1252.915610][ T30] #1: ffffc90005e3fc40 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1252.927817][ T30] #2: ffff8880781692d0 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0x7e/0x3d0 [ 1252.937667][ T30] #3: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x173/0x7f0 [ 1252.947422][ T30] 2 locks held by getty/5386: [ 1252.952190][ T30] #0: ffff88803727f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1252.962039][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1252.972212][ T30] 3 locks held by kworker/0:5/5737: [ 1252.977522][ T30] #0: ffff88813fe47140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1252.988785][ T30] #1: ffffc90005137c40 (rx_mode_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1252.999158][ T30] #2: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: netdev_rx_mode_work+0x19/0x3c0 [ 1253.009147][ T30] 3 locks held by kworker/1:5/5813: [ 1253.014467][ T30] #0: ffff88813fe45d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1253.026909][ T30] #1: ffffc90005387c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1253.038297][ T30] #2: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xab/0x10d0 [ 1253.048204][ T30] 3 locks held by kworker/u8:13/29487: [ 1253.053690][ T30] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1253.065439][ T30] #1: ffffc90005b37c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1253.076635][ T30] #2: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1253.085738][ T30] 6 locks held by kworker/u8:17/29490: [ 1253.091547][ T30] 4 locks held by kworker/u8:45/29520: [ 1253.097145][ T30] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1253.108195][ T30] #1: ffffc900052d7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1253.119050][ T30] #2: ffffffff8fdc2568 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1253.128495][ T30] #3: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x940 [ 1253.137601][ T30] 3 locks held by kworker/u8:46/29521: [ 1253.143191][ T30] #0: ffff88803241d140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1253.155020][ T30] #1: ffffc90005257c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1253.168879][ T30] #2: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1253.178956][ T30] 2 locks held by syz.3.9186/2257: [ 1253.184122][ T30] #0: ffff888077851440 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1253.194479][ T30] #1: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: raw_release+0x1bc/0x9f0 [ 1253.203753][ T30] 1 lock held by syz.3.9186/2258: [ 1253.208855][ T30] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 1253.218248][ T30] 2 locks held by syz.3.9186/2261: [ 1253.223384][ T30] #0: ffff88802ca196e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 1253.233999][ T30] #1: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 1253.242976][ T30] 2 locks held by syz.2.9187/2260: [ 1253.248169][ T30] 1 lock held by syz.2.9187/2265: [ 1253.253219][ T30] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 1253.263055][ T30] 1 lock held by syz.0.9189/2272: [ 1253.268230][ T30] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 1253.277780][ T30] 2 locks held by syz.0.9189/2275: [ 1253.282933][ T30] #0: ffffffff8fdb1fc0 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x641/0x7f0 [ 1253.292483][ T30] #1: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xf0/0x630 [ 1253.302108][ T30] 1 lock held by syz.0.9189/2276: [ 1253.307154][ T30] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 1253.316875][ T30] 2 locks held by syz.0.9189/2277: [ 1253.322242][ T30] #0: ffffffff90315580 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1253.331850][ T30] #1: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1253.340987][ T30] 2 locks held by syz.0.9189/2278: [ 1253.346132][ T30] #0: ffffffff8f54d988 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1253.355875][ T30] #1: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1253.365196][ T30] 2 locks held by syz.0.9189/2279: [ 1253.370622][ T30] #0: ffffffff9032c918 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1253.380396][ T30] #1: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1253.389978][ T30] 1 lock held by syz.1.9190/2274: [ 1253.395055][ T30] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1253.404415][ T30] 1 lock held by syz.4.9191/2282: [ 1253.409741][ T30] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: start_sync_thread+0x1c4/0x2860 [ 1253.419415][ T30] 1 lock held by syz-executor/2289: [ 1253.424705][ T30] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1253.434323][ T30] 1 lock held by syz-executor/2291: [ 1253.439706][ T30] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1253.449313][ T30] 1 lock held by syz-executor/2303: [ 1253.454549][ T30] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1253.464244][ T30] 1 lock held by syz-executor/2305: [ 1253.469513][ T30] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1253.479200][ T30] 1 lock held by syz-executor/2312: [ 1253.484445][ T30] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1253.494020][ T30] 1 lock held by syz-executor/2323: [ 1253.499338][ T30] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1253.509052][ T30] 1 lock held by syz-executor/2328: [ 1253.514286][ T30] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1253.523794][ T30] 1 lock held by syz-executor/2335: [ 1253.529057][ T30] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1253.538531][ T30] 1 lock held by syz-executor/2338: [ 1253.543740][ T30] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1253.553239][ T30] 1 lock held by syz-executor/2344: [ 1253.558507][ T30] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1253.568105][ T30] 1 lock held by syz-executor/2356: [ 1253.573325][ T30] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1253.582801][ T30] 1 lock held by syz-executor/2359: [ 1253.588345][ T30] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1253.597923][ T30] 1 lock held by syz-executor/2371: [ 1253.603190][ T30] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1253.612859][ T30] 1 lock held by syz-executor/2373: [ 1253.618133][ T30] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1253.627599][ T30] 1 lock held by syz-executor/2380: [ 1253.632935][ T30] #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1253.642653][ T30] [ 1253.645053][ T30] ============================================= [ 1253.645053][ T30] [ 1253.653623][ T30] NMI backtrace for cpu 0 [ 1253.653641][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1253.653661][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1253.653672][ T30] Call Trace: [ 1253.653689][ T30] [ 1253.653696][ T30] dump_stack_lvl+0xe8/0x150 [ 1253.653724][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1253.653746][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1253.653769][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1253.653791][ T30] sys_info+0x135/0x170 [ 1253.653810][ T30] watchdog+0xfd3/0x1030 [ 1253.653844][ T30] ? watchdog+0x1c9/0x1030 [ 1253.653876][ T30] kthread+0x389/0x470 [ 1253.653902][ T30] ? __pfx_watchdog+0x10/0x10 [ 1253.653927][ T30] ? __pfx_kthread+0x10/0x10 [ 1253.653950][ T30] ret_from_fork+0x514/0xb70 [ 1253.653974][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1253.653994][ T30] ? __switch_to+0xc79/0x1410 [ 1253.654021][ T30] ? __pfx_kthread+0x10/0x10 [ 1253.654046][ T30] ret_from_fork_asm+0x1a/0x30 [ 1253.654085][ T30] [ 1253.654092][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1253.765251][ C1] NMI backtrace for cpu 1 [ 1253.765271][ C1] CPU: 1 UID: 0 PID: 2260 Comm: syz.2.9187 Not tainted syzkaller #0 PREEMPT(full) [ 1253.765290][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1253.765300][ C1] RIP: 0010:tick_program_event+0x6e/0x120 [ 1253.765329][ C1] Code: 89 e7 48 89 de e8 e2 20 0f 00 4c 39 e3 74 58 49 83 c7 40 4c 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 95 00 00 00 45 8b 3f 04 00 00 00 44 89 fe e8 15 20 0f 00 41 83 ff 04 74 6b e8 ca 1b [ 1253.765343][ C1] RSP: 0018:ffffc90002f56368 EFLAGS: 00000046 [ 1253.765359][ C1] RAX: 0000000000000000 RBX: 00000123e643e050 RCX: ffff888032e5dc40 [ 1253.765371][ C1] RDX: 0000000040000002 RSI: 00000123e643e050 RDI: 7fffffffffffffff [ 1253.765382][ C1] RBP: 0000000000000001 R08: ffffffff90311bf7 R09: 1ffffffff206237e [ 1253.765392][ C1] R10: dffffc0000000000 R11: fffffbfff206237f R12: 7fffffffffffffff [ 1253.765404][ C1] R13: dffffc0000000000 R14: ffff8880b8723e40 R15: 0000000000000003 [ 1253.765415][ C1] FS: 00007f1e039176c0(0000) GS:ffff88812537a000(0000) knlGS:0000000000000000 [ 1253.765428][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1253.765439][ C1] CR2: 00005648a8481168 CR3: 000000004e0ac000 CR4: 00000000003526f0 [ 1253.765455][ C1] Call Trace: [ 1253.765463][ C1] [ 1253.765473][ C1] hrtimer_start_range_ns+0x940/0xed0 [ 1253.765500][ C1] finish_task_switch+0x3cd/0xbe0 [ 1253.765520][ C1] __schedule+0x1829/0x5740 [ 1253.765547][ C1] ? ktime_get+0x1f5/0x220 [ 1253.765568][ C1] ? lapic_next_event+0x11/0x20 [ 1253.765591][ C1] ? __pfx___schedule+0x10/0x10 [ 1253.765615][ C1] ? schedule+0x90/0x360 [ 1253.765635][ C1] schedule+0x164/0x360 [ 1253.765655][ C1] schedule_hrtimeout_range_clock+0x15b/0x330 [ 1253.765674][ C1] ? ktime_get+0x45/0x220 [ 1253.765694][ C1] ? __pfx_schedule_hrtimeout_range_clock+0x10/0x10 [ 1253.765715][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1253.765735][ C1] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1253.765757][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1253.765777][ C1] ? ktime_get+0x45/0x220 [ 1253.765796][ C1] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1253.765818][ C1] ? ktime_get+0x1f5/0x220 [ 1253.765837][ C1] ? usleep_range_state+0x95/0x180 [ 1253.765856][ C1] usleep_range_state+0xf6/0x180 [ 1253.765876][ C1] napi_disable_locked+0x174/0x5e0 [ 1253.765898][ C1] ? __pfx_napi_disable_locked+0x10/0x10 [ 1253.765916][ C1] ? __dev_change_flags+0x3c1/0x7e0 [ 1253.765936][ C1] ? do_setlink+0xfa5/0x45a0 [ 1253.765955][ C1] napi_disable+0x56/0x80 [ 1253.765974][ C1] veth_napi_del_range+0xbd/0x2a0 [ 1253.766011][ C1] veth_close+0x17a/0x1a0 [ 1253.766026][ C1] ? __pfx_veth_close+0x10/0x10 [ 1253.766043][ C1] __dev_close_many+0x36d/0x6e0 [ 1253.766080][ C1] ? __pfx___dev_close_many+0x10/0x10 [ 1253.766103][ C1] ? __dev_change_flags+0x2b0/0x7e0 [ 1253.766125][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 1253.766156][ C1] __dev_change_flags+0x3c1/0x7e0 [ 1253.766188][ C1] ? __pfx___dev_change_flags+0x10/0x10 [ 1253.766214][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1253.766264][ C1] netif_change_flags+0x88/0x1a0 [ 1253.766288][ C1] do_setlink+0xfa5/0x45a0 [ 1253.766304][ C1] ? arch_stack_walk+0xfb/0x150 [ 1253.766326][ C1] ? __pfx_do_setlink+0x10/0x10 [ 1253.766348][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1253.766379][ C1] ? __mutex_trylock_common+0x158/0x260 [ 1253.766400][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1253.766420][ C1] ? rcu_is_watching+0x15/0xb0 [ 1253.766438][ C1] ? trace_contention_end+0x3d/0x140 [ 1253.766458][ C1] ? __mutex_lock+0x319/0x1550 [ 1253.766472][ C1] ? __pfx___nla_validate_parse+0x10/0x10 [ 1253.766499][ C1] ? rtnl_newlink+0x883/0x1bb0 [ 1253.766520][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1253.766539][ C1] ? ns_capable+0x89/0xe0 [ 1253.766557][ C1] rtnl_newlink+0x14ca/0x1bb0 [ 1253.766583][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 1253.766602][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.766641][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 1253.766661][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1253.766682][ C1] ? nlmon_xmit+0xb0/0x100 [ 1253.766701][ C1] ? kmem_cache_free+0x182/0x650 [ 1253.766725][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1253.766743][ C1] ? __dev_queue_xmit+0x2b6/0x3950 [ 1253.766761][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 1253.766777][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1253.766797][ C1] ? __dev_queue_xmit+0x2b6/0x3950 [ 1253.766811][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 1253.766825][ C1] ? __dev_queue_xmit+0x2b6/0x3950 [ 1253.766844][ C1] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1253.766871][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 1253.766891][ C1] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1253.766913][ C1] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1253.766932][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1253.766951][ C1] ? ref_tracker_free+0x693/0x840 [ 1253.766972][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 1253.767004][ C1] netlink_rcv_skb+0x232/0x4b0 [ 1253.767021][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1253.767042][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1253.767062][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1253.767077][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1253.767095][ C1] netlink_unicast+0x75c/0x8e0 [ 1253.767127][ C1] netlink_sendmsg+0x813/0xb40 [ 1253.767153][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1253.767171][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1253.767190][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1253.767218][ C1] ____sys_sendmsg+0x972/0x9f0 [ 1253.767234][ C1] ? __might_fault+0xaf/0x130 [ 1253.767255][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1253.767274][ C1] ? import_iovec+0x73/0xa0 [ 1253.767297][ C1] ___sys_sendmsg+0x2a5/0x360 [ 1253.767311][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1253.767329][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 1253.767347][ C1] ? futex_wake+0x4ac/0x580 [ 1253.767380][ C1] ? __fget_files+0x2a/0x420 [ 1253.767397][ C1] ? __fget_files+0x3a0/0x420 [ 1253.767419][ C1] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1253.767435][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1253.767454][ C1] ? rcu_is_watching+0x15/0xb0 [ 1253.767476][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.767492][ C1] do_syscall_64+0x15f/0xf80 [ 1253.767512][ C1] ? trace_irq_disable+0x3b/0x140 [ 1253.767533][ C1] ? clear_bhb_loop+0x40/0x90 [ 1253.767550][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.767565][ C1] RIP: 0033:0x7f1e0299ce59 [ 1253.767580][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1253.767592][ C1] RSP: 002b:00007f1e03917028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1253.767608][ C1] RAX: ffffffffffffffda RBX: 00007f1e02c15fa0 RCX: 00007f1e0299ce59 [ 1253.767620][ C1] RDX: 0000000004000000 RSI: 0000200000000240 RDI: 0000000000000007 [ 1253.767630][ C1] RBP: 00007f1e02a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1253.767640][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1253.767650][ C1] R13: 00007f1e02c16038 R14: 00007f1e02c15fa0 R15: 00007fff843c62c8 [ 1253.767670][ C1] [ 1253.768364][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1253.768382][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1253.768403][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1253.768414][ T30] Call Trace: [ 1253.768422][ T30] [ 1253.768431][ T30] vpanic+0x56c/0xa60 [ 1253.768454][ T30] ? __pfx___schedule+0x10/0x10 [ 1253.768478][ T30] ? __pfx_vpanic+0x10/0x10 [ 1253.768507][ T30] panic+0xc5/0xd0 [ 1253.768526][ T30] ? __pfx_panic+0x10/0x10 [ 1253.768547][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1253.768577][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1253.768603][ T30] watchdog+0x102c/0x1030 [ 1253.768630][ T30] ? watchdog+0x1c9/0x1030 [ 1253.768659][ T30] kthread+0x389/0x470 [ 1253.768682][ T30] ? __pfx_watchdog+0x10/0x10 [ 1253.768704][ T30] ? __pfx_kthread+0x10/0x10 [ 1253.768735][ T30] ret_from_fork+0x514/0xb70 [ 1253.768758][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1253.768778][ T30] ? __switch_to+0xc79/0x1410 [ 1253.768805][ T30] ? __pfx_kthread+0x10/0x10 [ 1253.768829][ T30] ret_from_fork_asm+0x1a/0x30 [ 1253.768864][ T30] [ 1254.578982][ T30] Kernel Offset: disabled [ 1254.583319][ T30] Rebooting in 86400 seconds..