last executing test programs: 29.249155944s ago: executing program 4 (id=2682): r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\x00\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) r1 = socket(0x18, 0x80000, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x3ff, 0x0, 0xca, 0x0, 0x0, 0x2001, 0xffffffff}}) socket$inet(0x10, 0x3, 0x4) (async) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\x00\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) (async) socket(0x18, 0x80000, 0x1) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x3ff, 0x0, 0xca, 0x0, 0x0, 0x2001, 0xffffffff}}) (async) 29.148834909s ago: executing program 4 (id=2685): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x194, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in6=@mcast1, 0x0, 0xecdf, 0x0, 0x200}, {@in=@broadcast, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x8, 0x4007ff, 0x0, 0x400}, {}, 0x0, 0x3507, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0xc0}}]}, 0x194}}, 0x4050) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r0, r3, 0x25, 0xc, @void}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000400007012dbd7000fedbdf25037c00ff1b00c28018000980120091002f6465762f717274722d74756e000000040001807d14ea210f324722f4887800251cd613e591eb7baf214a617a5098397562b691c124dc8f8a5546baa9babb12f8d5879e22ab0fab7b7da2b8e7497d447ed6e8675a66bc81cf3973b6879bcb245d861ff2d8a5"], 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 28.820276869s ago: executing program 4 (id=2689): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x6, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0xa2, 0x8}, @exit]}, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) 28.779481547s ago: executing program 4 (id=2690): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040)=']:\x00', 0x220140, &(0x7f0000000080)={@align=0x8, {0x95b, 0x2, 0x94f0, 0x9}}, 0x9, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x4}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x800000}, 0x8) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x48, r3, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3d804b412dba"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7ff}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x40080d0}, 0x20000000) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000080)={0xd, 0xfffffffffffffc01, 0x1, 0x8, 0x2, 0xbdda, 0xfffffffffffffffe, 0x2}, &(0x7f0000000140)={0x3, 0x1, 0x9, 0x7fffffff, 0x3, 0x0, 0x892, 0x1}, 0x0, 0x0, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000500)={0x8, 0x4, 0x0, 0x1, @vifc_lcl_ifindex, @broadcast}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$inet(r10, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x48c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x82, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0xfd, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x16, 0x4, 0x0, 0x3, 0x8000, 0x67, 0x1000, 0x4, 0x5e, 0xffff, @broadcast, @rand_addr=0x64010100, {[@noop, @timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x7, [{@multicast1, 0x1}]}, @timestamp={0x44, 0x10, 0x96, 0x0, 0x6, [0x8, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x24, 0xdc, 0x3, 0x3, [{@empty, 0x8}, {@private=0xa010101, 0x82}, {@remote, 0xff}, {@empty, 0x9}]}]}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 28.599554202s ago: executing program 4 (id=2694): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'wg1\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x800000, 0x11, r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) 28.43601771s ago: executing program 4 (id=2698): r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, &(0x7f0000000240)=[0x52, 0xe7]) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfb200000000000007020000f8ffffffb70300000800aeed"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRES16=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x64, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffd, 0x100, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x794, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x20000010) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0xfffffffffffffffd}, 0x20000000, 0x0, 0x2}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x400000}}, 0xe8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) syz_emit_ethernet(0x5e, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="1800000001"], 0x48}}, 0x4008004) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) close(0x3) close(0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@getqdisc={0x28, 0x26, 0x20, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff2}, {0x8, 0x7}, {0xfff3, 0xfff2}}, [{0x4}]}, 0x28}}, 0x24000000) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r8, 0x0, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0x2003208, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010104}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8004002d8030000a"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r9}, 0x4) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r10, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 18.595667124s ago: executing program 0 (id=2774): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x20, 0xfe, 0x4, 0xfffff010}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (fail_nth: 54) 18.03536799s ago: executing program 0 (id=2778): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000480)={0x0, 0x26000, 0x800, 0xfffffffe, 0x1}, 0x20) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x5031, 0xffffffffffffffff, 0xc2dd0000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0), 0x8) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x9, 0x8, 0x61, 0x9}]}}]}}]}, 0x44}}, 0x2004c850) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80000001, 0x21}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008800}, 0x20000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x3ea}, 0x8) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 17.964101412s ago: executing program 1 (id=2780): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b00000000000000000000000000800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000400"], 0x50) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000200)={0x3, 'team_slave_1\x00', {0xef}, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x4c, 0x0, 0x8, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xfffffffb}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0xff}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0xc880) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x3, 0x9, 0x1e0, 0x0, 0x2e, 0x20}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000003c0)={@loopback, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'ip_vti0\x00', r5, 0x8000, 0x40, 0x8, 0xffff, {{0x18, 0x4, 0x3, 0x3, 0x60, 0x64, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @rand_addr=0x64010100, {[@cipso={0x86, 0x4b, 0x0, [{0x5, 0xd, "b1718ee50d02050e9a045d"}, {0x0, 0xc, "5a477c8b02a99936ade8"}, {0x0, 0x9, "feae53cb78c8e6"}, {0x6, 0x11, "d93eac7f89d0031d76c47ad4f0e7da"}, {0x7, 0x12, "6d1482eebb0abc768871ac72381964f5"}]}]}}}}}) syz_emit_ethernet(0x5e, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @remote, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000006000000040000000000000500000000000000000000000b0100000000000000010000050000000000000000020000000000000000000000da"], 0x0, 0x4e, 0x0, 0x1}, 0x28) 17.69389798s ago: executing program 2 (id=2782): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="2800000000ff970029000000040000000001290002000000040106c204000000000000000000000018"], 0x40}, 0x0) 17.491420397s ago: executing program 1 (id=2784): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xd, 0x2, 0x4, 0x1000, 0x30020, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)='{$)\x01-({/.:\x00', 0x400000, &(0x7f0000000180)={@align=0x5, {0x3ca, 0x8000, 0x1000, 0x8a8}}, 0x6, &(0x7f00000001c0), &(0x7f0000000200)}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x6, 0x1ff, 0x32811, r0, 0x9, '\x00', 0x0, r1, 0x2, 0x2, 0x1, 0xf, @void, @value, @value=r2}, 0x50) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x8000000000000001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r2, 0x2e, 0x8459970ccf1bd3a1, 0x90f0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000440)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000480)='GPL\x00', 0x1, 0x6c, &(0x7f00000004c0)=""/108, 0x1f00, 0x28, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0xc, 0x2095b85d, 0x7f}, 0x10, 0x3094c, r2, 0x6, &(0x7f0000000580)=[r2], &(0x7f00000005c0)=[{0x0, 0x3, 0x6}, {0x3, 0x5, 0xa, 0x5}, {0x2, 0x3, 0x10, 0xb}, {0x4, 0x2, 0xc, 0x8}, {0x5, 0x4, 0x3, 0xe}, {0x5, 0x2, 0xe, 0x5}], 0x10, 0x400}, 0x94) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r2, r4, 0x25, 0x1b, @val=@netkit={@void, @value=r7, @void, @void, r6}}, 0x1c) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000700)={0x1f, 0x4, 0x4}, 0x6) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000740)={0x0, 0x4}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000007c0)={r9, @in6={{0xa, 0x4e21, 0x62, @dev={0xfe, 0x80, '\x00', 0x31}, 0x9}}, 0xd, 0x3}, &(0x7f0000000880)=0x90) ioctl$FAT_IOCTL_GET_VOLUME_ID(r5, 0x80047213, &(0x7f00000008c0)) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000900)={0x0, 0x1, 0x2, 0x6}) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x1b, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@generic={0x40, 0xe, 0x8, 0x41ff, 0x7d5e}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x5}, @map_fd={0x18, 0x4, 0x1, 0x0, r3}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2e}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x18c}}}, &(0x7f0000000a80)='GPL\x00', 0x40, 0x0, 0x0, 0x41100, 0x80, '\x00', r4, 0x25, r2, 0x8, &(0x7f0000000ac0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000b00)={0x0, 0x1, 0x4, 0x5}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000b40)=[0x1, r0, r0, r3, r0, r3, r3, r3, r2, r0], &(0x7f0000000b80)=[{0x0, 0x3, 0xf, 0x3}, {0x2, 0xfffffff9, 0x9, 0x5}, {0x0, 0x3, 0x0, 0x4}, {0x2, 0x3, 0xc, 0x7}, {0x4, 0x3, 0xa, 0x1}, {0x4, 0x2, 0x6, 0xc}, {0x2, 0x2, 0x7, 0x3}, {0x0, 0x3}, {0x0, 0x3, 0xc, 0xa}, {0x3, 0x3, 0x5, 0x4}], 0x10, 0x29}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{r0, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000d00)=r10}, 0x20) r12 = accept4(r2, &(0x7f0000000d80)=@nfc, &(0x7f0000000e00)=0x80, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000010c0)={'syztnl1\x00', &(0x7f0000001040)={'syztnl1\x00', r4, 0x29, 0xc0, 0x9d, 0x5, 0x36, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x0, 0x8000, 0x5, 0x6}}) sendmsg$inet(r12, &(0x7f0000001180)={&(0x7f0000000e40)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000e80)="19df2763564202b0d865b94e72ad5de5d122c84ab17b18f9ca96aa8f370ae3660a91c12d3ddff28bac9a42d4a8f4ae2a892709c4113e13adb603810f6f55b923f9d7b114f4515f01a3e434e44f2abc9e991481b0afab96436fcbc8fb9162b965613f4abfc128b2d443838d90cbc929fe97432e0f03449e6189eb9b117597200e7679dbc99c89956f821dc056745659603a", 0x91}, {&(0x7f0000000f40)="99af6ef47f40b0dc8845e8bbea06774f78e1f9a221e8c1eee9031c3680b86fe216b56da36fda1fce5e6f7695bb1859faf50c800610165938f93ed64e1b4f282af2bedc148ab3fa1cf2420f42a90f6fd84722203cf4c7d26bc531ef23608c310bfcea3cd1a4cfe0ab6ab891713aee0f10abd44b942164146661df19f40edf69839d76ade9a2f653e8294e3a8f53cb467dd0d4f807cb7a0845c88a6de6a30fc2d7e22dd7ae76b347d7ab2dc7877d6ab737", 0xb0}], 0x2, &(0x7f0000001100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @dev={0xac, 0x14, 0x14, 0x34}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @dev={0xac, 0x14, 0x14, 0x1c}, @private=0xa010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x3d}, @local}}}], 0x60}, 0x20048800) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f00000011c0), &(0x7f0000001200)=0x4) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001280), r2) sendmsg$TIPC_NL_MEDIA_SET(r12, &(0x7f0000001400)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000013c0)={&(0x7f00000012c0)={0xf4, r14, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "53b29418bb171afef11b06b91a1c758860379283f528a9ecb795ddf3f8b88ac1f66d"}}, @TIPC_NLA_NODE_ID={0x42, 0x3, "73f34cb64d8271253e803dbb1dddd42dea309b432feb8c002cbb98fe006fccfa83bfd5ab1c61f9eab8bfe43713e779769084267d57433bd275fd35de890f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "ddf6f85e73c1bb86a64474f20b581842f87e6f48"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x480d0}, 0x14) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r12, 0x84, 0x71, &(0x7f0000001440)={r9, 0x7b02}, &(0x7f0000001480)=0x8) r15 = openat$nci(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) ioctl$FIDEDUPERANGE(r15, 0xc0189436, &(0x7f0000001500)={0xc22, 0x4, 0x6, 0x0, 0x0, [{{r3}, 0x401}, {{r7}, 0x5}, {{r11}, 0xeb}, {{r5}, 0x1}, {{r8}, 0xe}, {{r11}, 0x3}]}) ioctl$sock_inet6_tcp_SIOCOUTQ(r12, 0x5411, &(0x7f0000001600)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000016c0)={'syztnl0\x00', &(0x7f0000001640)={'erspan0\x00', r4, 0x10, 0x7, 0x2, 0x5f, {{0x18, 0x4, 0x1, 0xb, 0x60, 0x65, 0x0, 0x27, 0x2f, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x4c, 0x30, 0x1, 0x0, [{@local}, {@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x495}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9c8}, {@remote, 0x20da0}, {@multicast2, 0x1}, {@multicast1, 0x400}, {@empty, 0x5}]}]}}}}}) ioctl$XFS_IOC_COMMIT_RANGE(r2, 0x40585883, &(0x7f0000001700)={r10, 0x0, 0xa13, 0xa, 0x2, 0x1, [0x80, 0x6, 0xffff, 0x5, 0xfffffffeffffffff, 0x4]}) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000001780), 0x3) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000017c0)) 17.491090978s ago: executing program 2 (id=2785): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x80) socket(0x8, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000020010", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES32=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="cf3cccaf382f", @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local, {[@end, @end, @timestamp_addr={0x44, 0x4, 0x7d, 0x1, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) r6 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x1, 0x8, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000096000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r10, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xffffff1f, 0x1}}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000a00)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x22}, 0x94) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "000000000002040000000b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 17.488024047s ago: executing program 0 (id=2786): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f132", 0x8}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r4, 0x1, {0x2, 0xff, 0x4}, 0xff}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r4, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 17.181766916s ago: executing program 1 (id=2788): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x20, 0xfe, 0x4, 0xfffff010}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (fail_nth: 55) 17.12414485s ago: executing program 3 (id=2789): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getuid() r2 = socket$inet(0x2, 0x6, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=@ipv6_delrule={0x94, 0x21, 0x20, 0x70bd2d, 0x25dfdbfe, {0xa, 0x80, 0x10, 0x10, 0x4, 0x0, 0x0, 0x2}, [@FRA_DST={0x14, 0x1, @private0}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e24}}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r1, r3}}, @FRA_SRC={0x14, 0x2, @mcast2}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_SRC={0x14, 0x2, @private0}, @FRA_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="200000001300050026bd7000fcdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="f872"], 0x20}, 0x1, 0x0, 0x0, 0x20000095}, 0x20040054) r4 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x6a, 0x2, 0x0, &(0x7f0000000300)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@empty, 0x4e24, 0x5c, 0x4e24, 0xb26e, 0xa, 0x0, 0x80, 0x3a, 0x0, r5}, {0x4, 0x10001, 0x2, 0x8000000000000001, 0x9, 0xb7ef, 0x8, 0x4}, {0x80, 0x0, 0xae000000, 0x7fffffff}, 0x3, 0x6e6bb2, 0x0, 0x1, 0x2}, {{@in6=@private2, 0x4d3, 0x32}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x4, 0x0, 0x7f, 0x1a, 0xffffffff, 0x6}}, 0xe8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0) 17.001367997s ago: executing program 0 (id=2790): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000b0000007ea5b1e76327b32688437504dd3e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1, r0}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x6000}, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @empty, 0x9}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) ioctl$TUNSETLINK(r5, 0x400454cd, 0x10e) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="58000000090603000000000000000000050000000900020073797a3100000000050001000700000030000780062d04404e2100000c00018008000140ac1414aa1800148014000240ff010000000000000000000000000001"], 0x58}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x9, 0x7, 0x1, 0x0, "e343eb23e4"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x84}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) bind$alg(r2, &(0x7f00000007c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r8 = accept4(r2, 0x0, 0x0, 0x800) r9 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000006, 0x2000000000032, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r9, 0x1, 0x21, &(0x7f0000000040)=0x6, 0x4) sendmmsg$unix(r8, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f00000050c0)=[{&(0x7f0000000000)="081fb524c2f10df1be7d1299c1ec8e975947ec170bdcc7ad05041033f4fdcfd445", 0x21}], 0x1, 0x0, 0x0, 0x801}}], 0x1, 0x80) 16.709560291s ago: executing program 1 (id=2791): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x30, 0x3a}, {0x0, 0xc, 0x0, 0x0, 0x1b, 0xffffffffffffffff}, {0x0, 0x800000000000a00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}}, 0xb8}}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100), 0x10) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) 16.547138731s ago: executing program 1 (id=2792): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xfe5, &(0x7f00000003c0)=""/4069}, 0x94) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="3a1900000700100004d471a8c43ba8551b000000", @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f00000013c0)={0x29, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x4, 'sed\x00', 0x28, 0x1, 0x7a}, 0x2c) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r2}, 0x38) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = socket$inet(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r6 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000080), 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x0, 0x40}}, 0x40) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071108e000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet6(r4, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @empty, 0xfffffff7}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000240)=ANY=[], 0x4}, 0x400c010) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB="000000006d6178e3b601841ab5eff27d3609ea2ba6f0072be002e186f3f37fe7e84bbb1d2a406153bdd6b1c7bc74f765bee4f538a42e43a9583ffb16c346990b2904d574a32755f9687b27a59a5da9de"]) 16.429924829s ago: executing program 3 (id=2793): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x6, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0xe300, 0x8}, @exit]}, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) 16.420636725s ago: executing program 0 (id=2794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1820000000000000000000000000008095"], &(0x7f00000008c0)='GPL\x00', 0x9, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xca}, 0x94) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x48, &(0x7f0000000300)=ANY=[@ANYBLOB='0F'], 0x18) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18020}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xa4}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x62}, @NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xa2}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xc}, @NFC_ATTR_IM_PROTOCOLS={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20000002) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000f7ffffffffffffff00"/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x3, &(0x7f00000003c0)={{r8}, 0x0, 0x0}, 0x20) r9 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) write$cgroup_pid(r9, &(0x7f00000000c0), 0x12) pread64(r9, &(0x7f0000001840)=""/4096, 0x1000, 0x1) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x28, 0x15, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x28}}, 0x20004000) 16.291822682s ago: executing program 2 (id=2795): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="280000000097ff0029000000040000000001290002000000040106c204000000000000000000000018"], 0x40}, 0x0) 16.222493314s ago: executing program 3 (id=2796): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f00000050c0)=[{&(0x7f0000000000)="081fb524c2f10df1be7d1299c1ec8e975947ec170bdcc7ad05041033f4fdcfd445", 0x21}], 0x11, 0x0, 0x0, 0x801}}], 0x1, 0x80) 16.203140256s ago: executing program 2 (id=2797): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 16.051486479s ago: executing program 0 (id=2798): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) connect$unix(r2, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) close(r5) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r1, 0x9, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8224}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004420}, 0x24000004) syz_genetlink_get_family_id$nfc(&(0x7f0000000900), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000000)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x3, 0x3, 0x1, 0x0, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 16.048712946s ago: executing program 3 (id=2799): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f132", 0x8}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r4, 0x1, {0x2, 0xff, 0x4}, 0xff}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r4, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 16.019902327s ago: executing program 2 (id=2800): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x20, 0xfe, 0x4, 0xfffff010}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (fail_nth: 56) 15.835638532s ago: executing program 2 (id=2801): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf2502000000080001", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7105020b77020006ff0804a7ff"], 0x19) 15.567770385s ago: executing program 3 (id=2802): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000340)=0x1c, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000380)={r3}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c001680080001"], 0x30}}, 0x8041) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24040040) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0x19, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) sendto$packet(r0, &(0x7f0000000580)="44c394f305916c4516999da20800", 0xe, 0x0, &(0x7f0000000300)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 15.421663439s ago: executing program 1 (id=2803): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xdc, r4, 0xb0479dfb3a013240, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xc8, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8048000}, 0x1) connect$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000e80)={0x0, 0x2710}, 0x10) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 15.184229613s ago: executing program 3 (id=2804): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0xa4, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}]}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 131.980801ms ago: executing program 32 (id=2798): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) connect$unix(r2, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) close(r5) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r1, 0x9, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8224}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004420}, 0x24000004) syz_genetlink_get_family_id$nfc(&(0x7f0000000900), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000000)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x3, 0x3, 0x1, 0x0, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 100.034675ms ago: executing program 33 (id=2803): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xdc, r4, 0xb0479dfb3a013240, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xc8, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8048000}, 0x1) connect$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000e80)={0x0, 0x2710}, 0x10) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 50.833135ms ago: executing program 34 (id=2801): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf2502000000080001", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7105020b77020006ff0804a7ff"], 0x19) 0s ago: executing program 35 (id=2804): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0xa4, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}]}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) kernel console output (not intermixed with test programs): ily 0 port 6081 - 0 [ 263.781531][T13234] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2372'. [ 263.844138][T13241] FAULT_INJECTION: forcing a failure. [ 263.844138][T13241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.923253][T13241] CPU: 1 UID: 0 PID: 13241 Comm: syz.2.2374 Not tainted syzkaller #0 PREEMPT(full) [ 263.923279][T13241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 263.923289][T13241] Call Trace: [ 263.923296][T13241] [ 263.923303][T13241] dump_stack_lvl+0xe8/0x150 [ 263.923330][T13241] should_fail_ex+0x412/0x560 [ 263.923355][T13241] _copy_from_user+0x2d/0xb0 [ 263.923377][T13241] ___sys_sendmsg+0x1c6/0x360 [ 263.923397][T13241] ? __lock_acquire+0x6b5/0x2cf0 [ 263.923420][T13241] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.923438][T13241] ? __lock_acquire+0x6b5/0x2cf0 [ 263.923459][T13241] ? kstrtouint+0x6e/0xe0 [ 263.923526][T13241] __sys_sendmmsg+0x27c/0x4e0 [ 263.923555][T13241] ? __pfx___sys_sendmmsg+0x10/0x10 [ 263.923570][T13241] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 263.923613][T13241] ? ksys_write+0x242/0x270 [ 263.923640][T13241] ? __pfx_ksys_write+0x10/0x10 [ 263.923671][T13241] __x64_sys_sendmmsg+0xa0/0xc0 [ 263.923692][T13241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.923711][T13241] do_syscall_64+0x174/0x580 [ 263.923730][T13241] ? trace_irq_disable+0x3b/0x140 [ 263.923755][T13241] ? clear_bhb_loop+0x40/0x90 [ 263.923777][T13241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.923802][T13241] RIP: 0033:0x7f653c39ce59 [ 263.923819][T13241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.923834][T13241] RSP: 002b:00007f653d228028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 263.923854][T13241] RAX: ffffffffffffffda RBX: 00007f653c615fa0 RCX: 00007f653c39ce59 [ 263.923866][T13241] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 263.923878][T13241] RBP: 00007f653d228090 R08: 0000000000000000 R09: 0000000000000000 [ 263.923888][T13241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 263.923899][T13241] R13: 00007f653c616038 R14: 00007f653c615fa0 R15: 00007ffdc85d4d18 [ 263.923926][T13241] [ 263.945075][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2375'. [ 264.055674][T13249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2376'. [ 264.153223][T13245] netlink: 'syz.0.2375': attribute type 8 has an invalid length. [ 264.199045][T13245] geneve2: entered promiscuous mode [ 264.205993][T13245] geneve2: entered allmulticast mode [ 264.264708][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.324935][T13254] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2378'. [ 264.403398][T13255] netlink: 'syz.3.2379': attribute type 1 has an invalid length. [ 265.023927][T13289] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2389'. [ 265.033952][T13290] FAULT_INJECTION: forcing a failure. [ 265.033952][T13290] name failslab, interval 1, probability 0, space 0, times 0 [ 265.065833][T13290] CPU: 1 UID: 0 PID: 13290 Comm: syz.4.2388 Not tainted syzkaller #0 PREEMPT(full) [ 265.065857][T13290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 265.065868][T13290] Call Trace: [ 265.065875][T13290] [ 265.065883][T13290] dump_stack_lvl+0xe8/0x150 [ 265.065908][T13290] should_fail_ex+0x412/0x560 [ 265.065932][T13290] should_failslab+0xa8/0x100 [ 265.065952][T13290] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 265.065975][T13290] ? __alloc_skb+0x186/0x7d0 [ 265.065991][T13290] ? __alloc_skb+0x1d0/0x7d0 [ 265.066008][T13290] ? __local_bh_enable_ip+0xd0/0x130 [ 265.066030][T13290] __alloc_skb+0x1d0/0x7d0 [ 265.066051][T13290] alloc_skb_with_frags+0xc8/0x760 [ 265.066079][T13290] sock_alloc_send_pskb+0x878/0x990 [ 265.066113][T13290] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 265.066132][T13290] ? kasan_quarantine_put+0xbb/0x1f0 [ 265.066153][T13290] ? lockdep_hardirqs_on+0x7a/0x110 [ 265.066171][T13290] ? unix_dgram_sendmsg+0x57c/0x18d0 [ 265.066186][T13290] ? kmem_cache_free+0x182/0x650 [ 265.066207][T13290] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 265.066230][T13290] unix_dgram_sendmsg+0x460/0x18d0 [ 265.066246][T13290] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 265.066271][T13290] ? trace_hrtimer_start+0x82/0x200 [ 265.066299][T13290] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 265.066317][T13290] ? lockdep_hardirqs_on+0x7a/0x110 [ 265.066331][T13290] ? finish_task_switch+0x41f/0xbe0 [ 265.066342][T13290] ? aa_sock_msg_perm+0xda/0x1b0 [ 265.066363][T13290] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 265.066382][T13290] ____sys_sendmsg+0x972/0x9f0 [ 265.066397][T13290] ? __might_fault+0xaf/0x130 [ 265.066419][T13290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.066441][T13290] ? import_iovec+0x73/0xa0 [ 265.066460][T13290] ___sys_sendmsg+0x2a5/0x360 [ 265.066475][T13290] ? __pfx___schedule+0x10/0x10 [ 265.066491][T13290] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.066504][T13290] ? __lock_acquire+0x6b5/0x2cf0 [ 265.066553][T13290] __sys_sendmmsg+0x27c/0x4e0 [ 265.066572][T13290] ? __pfx___sys_sendmmsg+0x10/0x10 [ 265.066586][T13290] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 265.066619][T13290] ? ksys_write+0x242/0x270 [ 265.066639][T13290] ? __pfx_ksys_write+0x10/0x10 [ 265.066662][T13290] __x64_sys_sendmmsg+0xa0/0xc0 [ 265.066678][T13290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.066692][T13290] do_syscall_64+0x174/0x580 [ 265.066706][T13290] ? trace_irq_disable+0x3b/0x140 [ 265.066733][T13290] ? clear_bhb_loop+0x40/0x90 [ 265.066749][T13290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.066762][T13290] RIP: 0033:0x7f5d98d9ce59 [ 265.066776][T13290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.066788][T13290] RSP: 002b:00007f5d99cd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 265.066803][T13290] RAX: ffffffffffffffda RBX: 00007f5d99015fa0 RCX: 00007f5d98d9ce59 [ 265.066812][T13290] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 265.066822][T13290] RBP: 00007f5d99cd9090 R08: 0000000000000000 R09: 0000000000000000 [ 265.066834][T13290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 265.066843][T13290] R13: 00007f5d99016038 R14: 00007f5d99015fa0 R15: 00007ffed2b54f28 [ 265.066864][T13290] [ 265.089158][T13293] hsr0: entered promiscuous mode [ 265.309135][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.401496][T13306] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2391'. [ 265.854337][T13331] FAULT_INJECTION: forcing a failure. [ 265.854337][T13331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.865170][ T9929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.873520][T13331] CPU: 0 UID: 0 PID: 13331 Comm: syz.2.2400 Not tainted syzkaller #0 PREEMPT(full) [ 265.873545][T13331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 265.873556][T13331] Call Trace: [ 265.873564][T13331] [ 265.873574][T13331] dump_stack_lvl+0xe8/0x150 [ 265.873600][T13331] should_fail_ex+0x412/0x560 [ 265.873624][T13331] _copy_from_iter+0x1d3/0x1670 [ 265.873645][T13331] ? rcu_is_watching+0x15/0xb0 [ 265.873680][T13331] ? __pfx__copy_from_iter+0x10/0x10 [ 265.873706][T13331] ? netlink_sendmsg+0x650/0xb40 [ 265.873725][T13331] ? skb_put+0x11b/0x210 [ 265.873746][T13331] netlink_sendmsg+0x6c0/0xb40 [ 265.873775][T13331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.873798][T13331] ? aa_sock_msg_perm+0xf1/0x1b0 [ 265.873824][T13331] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 265.873850][T13331] ____sys_sendmsg+0x972/0x9f0 [ 265.873870][T13331] ? __might_fault+0xaf/0x130 [ 265.873897][T13331] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.873925][T13331] ? import_iovec+0x73/0xa0 [ 265.873948][T13331] ___sys_sendmsg+0x2a5/0x360 [ 265.873967][T13331] ? __lock_acquire+0x6b5/0x2cf0 [ 265.873989][T13331] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.874040][T13331] ? __fget_files+0x2a/0x420 [ 265.874059][T13331] ? __fget_files+0x3a0/0x420 [ 265.874089][T13331] __x64_sys_sendmsg+0x1bd/0x2a0 [ 265.874111][T13331] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 265.874139][T13331] ? __pfx_ksys_write+0x10/0x10 [ 265.874171][T13331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.874190][T13331] do_syscall_64+0x174/0x580 [ 265.874208][T13331] ? trace_irq_disable+0x3b/0x140 [ 265.874233][T13331] ? clear_bhb_loop+0x40/0x90 [ 265.874254][T13331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.874271][T13331] RIP: 0033:0x7f653c39ce59 [ 265.874288][T13331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.874302][T13331] RSP: 002b:00007f653d228028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.874321][T13331] RAX: ffffffffffffffda RBX: 00007f653c615fa0 RCX: 00007f653c39ce59 [ 265.874334][T13331] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 265.874344][T13331] RBP: 00007f653d228090 R08: 0000000000000000 R09: 0000000000000000 [ 265.874370][T13331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.874380][T13331] R13: 00007f653c616038 R14: 00007f653c615fa0 R15: 00007ffdc85d4d18 [ 265.874408][T13331] [ 266.115849][ T9929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.135283][T13336] FAULT_INJECTION: forcing a failure. [ 266.135283][T13336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.148513][T13336] CPU: 1 UID: 0 PID: 13336 Comm: syz.4.2403 Not tainted syzkaller #0 PREEMPT(full) [ 266.148536][T13336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 266.148546][T13336] Call Trace: [ 266.148552][T13336] [ 266.148559][T13336] dump_stack_lvl+0xe8/0x150 [ 266.148581][T13336] should_fail_ex+0x412/0x560 [ 266.148604][T13336] _copy_from_user+0x2d/0xb0 [ 266.148626][T13336] ___sys_sendmsg+0x1c6/0x360 [ 266.148652][T13336] ? __lock_acquire+0x6b5/0x2cf0 [ 266.148673][T13336] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.148688][T13336] ? __lock_acquire+0x6b5/0x2cf0 [ 266.148706][T13336] ? kstrtouint+0x6e/0xe0 [ 266.148758][T13336] __sys_sendmmsg+0x27c/0x4e0 [ 266.148780][T13336] ? __pfx___sys_sendmmsg+0x10/0x10 [ 266.148796][T13336] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 266.148838][T13336] ? ksys_write+0x242/0x270 [ 266.148865][T13336] ? __pfx_ksys_write+0x10/0x10 [ 266.148893][T13336] __x64_sys_sendmmsg+0xa0/0xc0 [ 266.148906][T13336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.148917][T13336] do_syscall_64+0x174/0x580 [ 266.148928][T13336] ? trace_irq_disable+0x3b/0x140 [ 266.148943][T13336] ? clear_bhb_loop+0x40/0x90 [ 266.148956][T13336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.148965][T13336] RIP: 0033:0x7f5d98d9ce59 [ 266.148976][T13336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.148985][T13336] RSP: 002b:00007f5d99cd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 266.148997][T13336] RAX: ffffffffffffffda RBX: 00007f5d99015fa0 RCX: 00007f5d98d9ce59 [ 266.149004][T13336] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 266.149011][T13336] RBP: 00007f5d99cd9090 R08: 0000000000000000 R09: 0000000000000000 [ 266.149017][T13336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 266.149023][T13336] R13: 00007f5d99016038 R14: 00007f5d99015fa0 R15: 00007ffed2b54f28 [ 266.149038][T13336] [ 266.354612][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.583792][T13354] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2409'. [ 266.765362][T13367] xfrm1: entered allmulticast mode [ 266.926668][T13383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2415'. [ 266.961377][T13381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2414'. [ 266.981066][T13383] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2415'. [ 267.384875][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.593939][T13437] FAULT_INJECTION: forcing a failure. [ 267.593939][T13437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.607439][T13437] CPU: 1 UID: 0 PID: 13437 Comm: syz.4.2432 Not tainted syzkaller #0 PREEMPT(full) [ 267.607464][T13437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 267.607475][T13437] Call Trace: [ 267.607482][T13437] [ 267.607489][T13437] dump_stack_lvl+0xe8/0x150 [ 267.607515][T13437] should_fail_ex+0x412/0x560 [ 267.607540][T13437] _copy_from_user+0x2d/0xb0 [ 267.607562][T13437] ___sys_sendmsg+0x1c6/0x360 [ 267.607582][T13437] ? __lock_acquire+0x6b5/0x2cf0 [ 267.607605][T13437] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.607631][T13437] ? __lock_acquire+0x6b5/0x2cf0 [ 267.607654][T13437] ? kstrtouint+0x6e/0xe0 [ 267.607717][T13437] __sys_sendmmsg+0x27c/0x4e0 [ 267.607743][T13437] ? __pfx___sys_sendmmsg+0x10/0x10 [ 267.607761][T13437] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 267.607806][T13437] ? ksys_write+0x242/0x270 [ 267.607833][T13437] ? __pfx_ksys_write+0x10/0x10 [ 267.607864][T13437] __x64_sys_sendmmsg+0xa0/0xc0 [ 267.607884][T13437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.607902][T13437] do_syscall_64+0x174/0x580 [ 267.607921][T13437] ? trace_irq_disable+0x3b/0x140 [ 267.607945][T13437] ? clear_bhb_loop+0x40/0x90 [ 267.607967][T13437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.607984][T13437] RIP: 0033:0x7f5d98d9ce59 [ 267.608000][T13437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.608015][T13437] RSP: 002b:00007f5d99cd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 267.608034][T13437] RAX: ffffffffffffffda RBX: 00007f5d99015fa0 RCX: 00007f5d98d9ce59 [ 267.608047][T13437] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 267.608059][T13437] RBP: 00007f5d99cd9090 R08: 0000000000000000 R09: 0000000000000000 [ 267.608070][T13437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 267.608080][T13437] R13: 00007f5d99016038 R14: 00007f5d99015fa0 R15: 00007ffed2b54f28 [ 267.608110][T13437] [ 268.335106][T13474] sctp: [Deprecated]: syz.1.2445 (pid 13474) Use of int in max_burst socket option. [ 268.335106][T13474] Use struct sctp_assoc_value instead [ 268.388857][T13474] netlink: 'syz.1.2445': attribute type 1 has an invalid length. [ 268.729676][T13489] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 268.872330][T13499] __nla_validate_parse: 9 callbacks suppressed [ 268.872348][T13499] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2454'. [ 269.008295][T13504] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2456'. [ 269.043874][T13504] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2456'. [ 269.102813][T13512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.170476][T13516] FAULT_INJECTION: forcing a failure. [ 269.170476][T13516] name failslab, interval 1, probability 0, space 0, times 0 [ 269.191488][T13516] CPU: 0 UID: 0 PID: 13516 Comm: syz.4.2461 Not tainted syzkaller #0 PREEMPT(full) [ 269.191513][T13516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 269.191524][T13516] Call Trace: [ 269.191531][T13516] [ 269.191539][T13516] dump_stack_lvl+0xe8/0x150 [ 269.191565][T13516] should_fail_ex+0x412/0x560 [ 269.191590][T13516] should_failslab+0xa8/0x100 [ 269.191611][T13516] __kmalloc_cache_noprof+0x88/0x660 [ 269.191637][T13516] ? flow_init+0x51/0xd0 [ 269.191661][T13516] flow_init+0x51/0xd0 [ 269.191681][T13516] tcf_proto_create+0x248/0x330 [ 269.191709][T13516] tc_new_tfilter+0x12ff/0x1780 [ 269.191757][T13516] ? __pfx_tc_new_tfilter+0x10/0x10 [ 269.191793][T13516] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 269.191826][T13516] ? __pfx_tc_new_tfilter+0x10/0x10 [ 269.191847][T13516] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 269.191864][T13516] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 269.191886][T13516] ? netlink_sendmsg+0x5d4/0xb40 [ 269.191909][T13516] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 269.191926][T13516] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 269.191946][T13516] ? __lock_acquire+0x6b5/0x2cf0 [ 269.191979][T13516] netlink_rcv_skb+0x232/0x4b0 [ 269.192000][T13516] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 269.192020][T13516] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 269.192054][T13516] ? netlink_deliver_tap+0x2e/0x1b0 [ 269.192074][T13516] ? netlink_deliver_tap+0x2e/0x1b0 [ 269.192100][T13516] netlink_unicast+0x75c/0x8e0 [ 269.192130][T13516] netlink_sendmsg+0x813/0xb40 [ 269.192160][T13516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.192184][T13516] ? aa_sock_msg_perm+0xf1/0x1b0 [ 269.192211][T13516] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 269.192238][T13516] ____sys_sendmsg+0x972/0x9f0 [ 269.192259][T13516] ? __might_fault+0xaf/0x130 [ 269.192287][T13516] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.192318][T13516] ? import_iovec+0x73/0xa0 [ 269.192343][T13516] ___sys_sendmsg+0x2a5/0x360 [ 269.192362][T13516] ? __lock_acquire+0x6b5/0x2cf0 [ 269.192391][T13516] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.192447][T13516] ? __fget_files+0x2a/0x420 [ 269.192467][T13516] ? __fget_files+0x3a0/0x420 [ 269.192499][T13516] __x64_sys_sendmsg+0x1bd/0x2a0 [ 269.192522][T13516] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 269.192553][T13516] ? __pfx_ksys_write+0x10/0x10 [ 269.192587][T13516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.192607][T13516] do_syscall_64+0x174/0x580 [ 269.192626][T13516] ? trace_irq_disable+0x3b/0x140 [ 269.192651][T13516] ? clear_bhb_loop+0x40/0x90 [ 269.192672][T13516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.192690][T13516] RIP: 0033:0x7f5d98d9ce59 [ 269.192707][T13516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.192723][T13516] RSP: 002b:00007f5d99cd9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.192742][T13516] RAX: ffffffffffffffda RBX: 00007f5d99015fa0 RCX: 00007f5d98d9ce59 [ 269.192755][T13516] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 269.192767][T13516] RBP: 00007f5d99cd9090 R08: 0000000000000000 R09: 0000000000000000 [ 269.192778][T13516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.192789][T13516] R13: 00007f5d99016038 R14: 00007f5d99015fa0 R15: 00007ffed2b54f28 [ 269.192818][T13516] [ 269.521041][ T5653] Bluetooth: hci3: command 0x0406 tx timeout [ 269.546869][T13520] netlink: 'syz.1.2463': attribute type 1 has an invalid length. [ 270.516694][T13552] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2471'. [ 270.596872][T13555] netlink: 'syz.1.2474': attribute type 1 has an invalid length. [ 270.770572][T13566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.800784][T13570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.888939][T13567] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2472'. [ 270.899448][T13579] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2478'. [ 270.940898][T13583] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2480'. [ 271.018169][T13591] FAULT_INJECTION: forcing a failure. [ 271.018169][T13591] name failslab, interval 1, probability 0, space 0, times 0 [ 271.064668][T13591] CPU: 1 UID: 0 PID: 13591 Comm: syz.4.2481 Not tainted syzkaller #0 PREEMPT(full) [ 271.064694][T13591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 271.064704][T13591] Call Trace: [ 271.064712][T13591] [ 271.064720][T13591] dump_stack_lvl+0xe8/0x150 [ 271.064747][T13591] should_fail_ex+0x412/0x560 [ 271.064781][T13591] should_failslab+0xa8/0x100 [ 271.064803][T13591] __kmalloc_noprof+0xe8/0x760 [ 271.064827][T13591] ? sock_kmalloc+0xd6/0x160 [ 271.064847][T13591] ? hash_sendmsg+0xd3/0x1110 [ 271.064871][T13591] sock_kmalloc+0xd6/0x160 [ 271.064894][T13591] hash_sendmsg+0x71e/0x1110 [ 271.064941][T13591] ____sys_sendmsg+0x972/0x9f0 [ 271.064961][T13591] ? __might_fault+0xaf/0x130 [ 271.064990][T13591] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.065020][T13591] ? import_iovec+0x73/0xa0 [ 271.065045][T13591] ___sys_sendmsg+0x2a5/0x360 [ 271.065064][T13591] ? __lock_acquire+0x6b5/0x2cf0 [ 271.065089][T13591] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.065114][T13591] ? kstrtouint+0x6e/0xe0 [ 271.065166][T13591] ? __fget_files+0x2a/0x420 [ 271.065187][T13591] ? __fget_files+0x3a0/0x420 [ 271.065219][T13591] __sys_sendmmsg+0x27c/0x4e0 [ 271.065245][T13591] ? __pfx___sys_sendmmsg+0x10/0x10 [ 271.065264][T13591] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 271.065310][T13591] ? ksys_write+0x242/0x270 [ 271.065337][T13591] ? __pfx_ksys_write+0x10/0x10 [ 271.065368][T13591] __x64_sys_sendmmsg+0xa0/0xc0 [ 271.065389][T13591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.065408][T13591] do_syscall_64+0x174/0x580 [ 271.065426][T13591] ? trace_irq_disable+0x3b/0x140 [ 271.065452][T13591] ? clear_bhb_loop+0x40/0x90 [ 271.065474][T13591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.065491][T13591] RIP: 0033:0x7f5d98d9ce59 [ 271.065509][T13591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.065524][T13591] RSP: 002b:00007f5d99cd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 271.065546][T13591] RAX: ffffffffffffffda RBX: 00007f5d99015fa0 RCX: 00007f5d98d9ce59 [ 271.065559][T13591] RDX: 0000000000000001 RSI: 0000200000005140 RDI: 0000000000000004 [ 271.065570][T13591] RBP: 00007f5d99cd9090 R08: 0000000000000000 R09: 0000000000000000 [ 271.065581][T13591] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 271.065592][T13591] R13: 00007f5d99016038 R14: 00007f5d99015fa0 R15: 00007ffed2b54f28 [ 271.065623][T13591] [ 271.499182][T13598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2484'. [ 271.630268][T13600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2485'. [ 271.706498][T13579] ip6gre1: left promiscuous mode [ 271.711561][T13579] ip6gre1: left allmulticast mode [ 271.722585][T13579] vlan2: left allmulticast mode [ 271.735255][T13579] bond6: left allmulticast mode [ 271.742448][T13579] geneve2: left allmulticast mode [ 271.748049][T13579] xfrm1: left allmulticast mode [ 271.826669][T13607] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2487'. [ 271.852308][T13600] bond4: entered promiscuous mode [ 271.872132][T13600] 8021q: adding VLAN 0 to HW filter on device bond4 [ 271.947529][T13607] nbd1: detected capacity change from 0 to 3 [ 271.976179][ T5653] block nbd1: Receive control failed (result -104) [ 271.984044][ T5636] buffer_io_error: 138 callbacks suppressed [ 271.984058][ T5636] Buffer I/O error on dev nbd1, logical block 1, async page read [ 272.111082][T13625] FAULT_INJECTION: forcing a failure. [ 272.111082][T13625] name failslab, interval 1, probability 0, space 0, times 0 [ 272.123911][T13625] CPU: 0 UID: 0 PID: 13625 Comm: syz.2.2494 Not tainted syzkaller #0 PREEMPT(full) [ 272.123935][T13625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 272.123946][T13625] Call Trace: [ 272.123961][T13625] [ 272.123968][T13625] dump_stack_lvl+0xe8/0x150 [ 272.123989][T13625] should_fail_ex+0x412/0x560 [ 272.124008][T13625] should_failslab+0xa8/0x100 [ 272.124024][T13625] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 272.124043][T13625] ? __alloc_skb+0x186/0x7d0 [ 272.124057][T13625] ? __alloc_skb+0x1d0/0x7d0 [ 272.124068][T13625] ? __local_bh_enable_ip+0xd0/0x130 [ 272.124086][T13625] __alloc_skb+0x1d0/0x7d0 [ 272.124104][T13625] alloc_skb_with_frags+0xc8/0x760 [ 272.124127][T13625] sock_alloc_send_pskb+0x878/0x990 [ 272.124157][T13625] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 272.124173][T13625] ? kasan_quarantine_put+0xbb/0x1f0 [ 272.124192][T13625] ? lockdep_hardirqs_on+0x7a/0x110 [ 272.124217][T13625] ? unix_dgram_sendmsg+0x57c/0x18d0 [ 272.124232][T13625] ? kmem_cache_free+0x182/0x650 [ 272.124252][T13625] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 272.124275][T13625] unix_dgram_sendmsg+0x460/0x18d0 [ 272.124309][T13625] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 272.124330][T13625] ? aa_sock_msg_perm+0xda/0x1b0 [ 272.124350][T13625] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 272.124369][T13625] ____sys_sendmsg+0x972/0x9f0 [ 272.124385][T13625] ? __might_fault+0xaf/0x130 [ 272.124407][T13625] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.124429][T13625] ? import_iovec+0x73/0xa0 [ 272.124448][T13625] ___sys_sendmsg+0x2a5/0x360 [ 272.124463][T13625] ? __lock_acquire+0x6b5/0x2cf0 [ 272.124485][T13625] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.124502][T13625] ? __lock_acquire+0x6b5/0x2cf0 [ 272.124523][T13625] ? kstrtouint+0x6e/0xe0 [ 272.124573][T13625] __sys_sendmmsg+0x27c/0x4e0 [ 272.124593][T13625] ? __pfx___sys_sendmmsg+0x10/0x10 [ 272.124607][T13625] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 272.124641][T13625] ? ksys_write+0x242/0x270 [ 272.124661][T13625] ? __pfx_ksys_write+0x10/0x10 [ 272.124685][T13625] __x64_sys_sendmmsg+0xa0/0xc0 [ 272.124702][T13625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.124716][T13625] do_syscall_64+0x174/0x580 [ 272.124730][T13625] ? trace_irq_disable+0x3b/0x140 [ 272.124750][T13625] ? clear_bhb_loop+0x40/0x90 [ 272.124767][T13625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.124780][T13625] RIP: 0033:0x7f653c39ce59 [ 272.124796][T13625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.124810][T13625] RSP: 002b:00007f653d228028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 272.124826][T13625] RAX: ffffffffffffffda RBX: 00007f653c615fa0 RCX: 00007f653c39ce59 [ 272.124835][T13625] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 272.124845][T13625] RBP: 00007f653d228090 R08: 0000000000000000 R09: 0000000000000000 [ 272.124853][T13625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 272.124861][T13625] R13: 00007f653c616038 R14: 00007f653c615fa0 R15: 00007ffdc85d4d18 [ 272.124883][T13625] [ 272.735187][T13645] syzkaller0: entered promiscuous mode [ 272.761803][T13645] syzkaller0: entered allmulticast mode [ 272.832236][T13658] tipc: Enabled bearer , priority 0 [ 272.853277][T13658] syzkaller0: entered promiscuous mode [ 272.872698][T13658] syzkaller0: entered allmulticast mode [ 272.970161][T13658] syzkaller0: mtu less than device minimum [ 272.980324][T13657] tipc: Resetting bearer [ 272.981152][T13674] FAULT_INJECTION: forcing a failure. [ 272.981152][T13674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.002923][T13674] CPU: 1 UID: 0 PID: 13674 Comm: syz.4.2507 Not tainted syzkaller #0 PREEMPT(full) [ 273.002946][T13674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 273.002956][T13674] Call Trace: [ 273.002962][T13674] [ 273.002968][T13674] dump_stack_lvl+0xe8/0x150 [ 273.002993][T13674] should_fail_ex+0x412/0x560 [ 273.003016][T13674] _copy_from_user+0x2d/0xb0 [ 273.003037][T13674] ___sys_sendmsg+0x1c6/0x360 [ 273.003056][T13674] ? __lock_acquire+0x6b5/0x2cf0 [ 273.003078][T13674] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.003096][T13674] ? __lock_acquire+0x6b5/0x2cf0 [ 273.003128][T13674] ? kstrtouint+0x6e/0xe0 [ 273.003188][T13674] __sys_sendmmsg+0x27c/0x4e0 [ 273.003213][T13674] ? __pfx___sys_sendmmsg+0x10/0x10 [ 273.003229][T13674] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 273.003271][T13674] ? ksys_write+0x242/0x270 [ 273.003298][T13674] ? __pfx_ksys_write+0x10/0x10 [ 273.003326][T13674] __x64_sys_sendmmsg+0xa0/0xc0 [ 273.003343][T13674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.003361][T13674] do_syscall_64+0x174/0x580 [ 273.003378][T13674] ? trace_irq_disable+0x3b/0x140 [ 273.003401][T13674] ? clear_bhb_loop+0x40/0x90 [ 273.003422][T13674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.003439][T13674] RIP: 0033:0x7f5d98d9ce59 [ 273.003456][T13674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.003470][T13674] RSP: 002b:00007f5d99cd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 273.003489][T13674] RAX: ffffffffffffffda RBX: 00007f5d99015fa0 RCX: 00007f5d98d9ce59 [ 273.003501][T13674] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 273.003513][T13674] RBP: 00007f5d99cd9090 R08: 0000000000000000 R09: 0000000000000000 [ 273.003524][T13674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 273.003534][T13674] R13: 00007f5d99016038 R14: 00007f5d99015fa0 R15: 00007ffed2b54f28 [ 273.003562][T13674] [ 273.218639][T13657] tipc: Disabling bearer [ 273.505351][T13697] FAULT_INJECTION: forcing a failure. [ 273.505351][T13697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.537875][T13697] CPU: 0 UID: 0 PID: 13697 Comm: syz.0.2514 Not tainted syzkaller #0 PREEMPT(full) [ 273.537901][T13697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 273.537912][T13697] Call Trace: [ 273.537919][T13697] [ 273.537927][T13697] dump_stack_lvl+0xe8/0x150 [ 273.537951][T13697] should_fail_ex+0x412/0x560 [ 273.537965][T13697] _copy_from_iter+0x1d3/0x1670 [ 273.537978][T13697] ? rcu_is_watching+0x15/0xb0 [ 273.537994][T13697] ? __pfx__copy_from_iter+0x10/0x10 [ 273.538008][T13697] ? netlink_sendmsg+0x650/0xb40 [ 273.538020][T13697] ? skb_put+0x11b/0x210 [ 273.538032][T13697] netlink_sendmsg+0x6c0/0xb40 [ 273.538049][T13697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.538062][T13697] ? aa_sock_msg_perm+0xf1/0x1b0 [ 273.538079][T13697] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 273.538102][T13697] ____sys_sendmsg+0x972/0x9f0 [ 273.538114][T13697] ? __might_fault+0xaf/0x130 [ 273.538131][T13697] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.538147][T13697] ? import_iovec+0x73/0xa0 [ 273.538161][T13697] ___sys_sendmsg+0x2a5/0x360 [ 273.538172][T13697] ? __lock_acquire+0x6b5/0x2cf0 [ 273.538185][T13697] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.538213][T13697] ? __fget_files+0x2a/0x420 [ 273.538225][T13697] ? __fget_files+0x3a0/0x420 [ 273.538242][T13697] __x64_sys_sendmsg+0x1bd/0x2a0 [ 273.538255][T13697] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 273.538271][T13697] ? __pfx_ksys_write+0x10/0x10 [ 273.538290][T13697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.538301][T13697] do_syscall_64+0x174/0x580 [ 273.538312][T13697] ? trace_irq_disable+0x3b/0x140 [ 273.538327][T13697] ? clear_bhb_loop+0x40/0x90 [ 273.538340][T13697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.538350][T13697] RIP: 0033:0x7f6fd339ce59 [ 273.538361][T13697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.538369][T13697] RSP: 002b:00007f6fd430a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.538381][T13697] RAX: ffffffffffffffda RBX: 00007f6fd3615fa0 RCX: 00007f6fd339ce59 [ 273.538388][T13697] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000004 [ 273.538394][T13697] RBP: 00007f6fd430a090 R08: 0000000000000000 R09: 0000000000000000 [ 273.538400][T13697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.538406][T13697] R13: 00007f6fd3616038 R14: 00007f6fd3615fa0 R15: 00007ffc2a3a99e8 [ 273.538421][T13697] [ 273.862868][T13701] netlink: 'syz.4.2516': attribute type 10 has an invalid length. [ 273.892978][T13701] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 273.903542][T13701] team0: Port device netdevsim1 added [ 273.916248][T13703] netlink: 'syz.4.2516': attribute type 10 has an invalid length. [ 273.934687][T13703] team0: Port device netdevsim1 removed [ 273.943774][T13703] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 273.958030][T13703] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 274.353826][T13729] FAULT_INJECTION: forcing a failure. [ 274.353826][T13729] name failslab, interval 1, probability 0, space 0, times 0 [ 274.368637][T13729] CPU: 0 UID: 0 PID: 13729 Comm: syz.4.2525 Not tainted syzkaller #0 PREEMPT(full) [ 274.368663][T13729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 274.368673][T13729] Call Trace: [ 274.368680][T13729] [ 274.368687][T13729] dump_stack_lvl+0xe8/0x150 [ 274.368713][T13729] should_fail_ex+0x412/0x560 [ 274.368735][T13729] should_failslab+0xa8/0x100 [ 274.368752][T13729] __kmalloc_cache_noprof+0x88/0x660 [ 274.368777][T13729] ? tcf_action_init_1+0x1c2/0x740 [ 274.368807][T13729] tcf_action_init_1+0x1c2/0x740 [ 274.368836][T13729] ? __pfx_tcf_action_init_1+0x10/0x10 [ 274.368860][T13729] ? _raw_read_unlock+0x28/0x50 [ 274.368877][T13729] ? tc_action_load_ops+0x247/0x540 [ 274.368919][T13729] ? __nla_parse+0x40/0x60 [ 274.368935][T13729] tcf_action_init+0x31e/0xb40 [ 274.368955][T13729] ? __pfx_tcf_action_init+0x10/0x10 [ 274.368982][T13729] ? stack_depot_save_flags+0x33/0x810 [ 274.369012][T13729] tcf_exts_validate_ex+0x246/0x540 [ 274.369028][T13729] ? __pfx_tcf_exts_validate_ex+0x10/0x10 [ 274.369045][T13729] ? __kmalloc_cache_noprof+0x31c/0x660 [ 274.369060][T13729] ? tcf_exts_init_ex+0x10e/0x7c0 [ 274.369069][T13729] ? __kmalloc_cache_noprof+0x15b/0x660 [ 274.369087][T13729] tcf_exts_validate+0x42/0x60 [ 274.369100][T13729] flow_change+0x51e/0x1b50 [ 274.369117][T13729] ? __pfx_flow_change+0x10/0x10 [ 274.369139][T13729] tc_new_tfilter+0xff8/0x1780 [ 274.369165][T13729] ? __pfx_tc_new_tfilter+0x10/0x10 [ 274.369185][T13729] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 274.369211][T13729] ? __pfx_tc_new_tfilter+0x10/0x10 [ 274.369222][T13729] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 274.369232][T13729] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 274.369245][T13729] ? netlink_sendmsg+0x5d4/0xb40 [ 274.369258][T13729] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 274.369267][T13729] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 274.369278][T13729] ? __lock_acquire+0x6b5/0x2cf0 [ 274.369296][T13729] netlink_rcv_skb+0x232/0x4b0 [ 274.369307][T13729] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 274.369318][T13729] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 274.369336][T13729] ? netlink_deliver_tap+0x2e/0x1b0 [ 274.369348][T13729] ? netlink_deliver_tap+0x2e/0x1b0 [ 274.369361][T13729] netlink_unicast+0x75c/0x8e0 [ 274.369378][T13729] netlink_sendmsg+0x813/0xb40 [ 274.369397][T13729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.369410][T13729] ? aa_sock_msg_perm+0xf1/0x1b0 [ 274.369427][T13729] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 274.369443][T13729] ____sys_sendmsg+0x972/0x9f0 [ 274.369455][T13729] ? __might_fault+0xaf/0x130 [ 274.369472][T13729] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.369488][T13729] ? import_iovec+0x73/0xa0 [ 274.369502][T13729] ___sys_sendmsg+0x2a5/0x360 [ 274.369513][T13729] ? __lock_acquire+0x6b5/0x2cf0 [ 274.369526][T13729] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.369556][T13729] ? __fget_files+0x2a/0x420 [ 274.369568][T13729] ? __fget_files+0x3a0/0x420 [ 274.369584][T13729] __x64_sys_sendmsg+0x1bd/0x2a0 [ 274.369598][T13729] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 274.369614][T13729] ? __pfx_ksys_write+0x10/0x10 [ 274.369634][T13729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.369645][T13729] do_syscall_64+0x174/0x580 [ 274.369656][T13729] ? trace_irq_disable+0x3b/0x140 [ 274.369671][T13729] ? clear_bhb_loop+0x40/0x90 [ 274.369683][T13729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.369696][T13729] RIP: 0033:0x7f5d98d9ce59 [ 274.369707][T13729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.369715][T13729] RSP: 002b:00007f5d99cd9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.369727][T13729] RAX: ffffffffffffffda RBX: 00007f5d99015fa0 RCX: 00007f5d98d9ce59 [ 274.369734][T13729] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 274.369740][T13729] RBP: 00007f5d99cd9090 R08: 0000000000000000 R09: 0000000000000000 [ 274.369746][T13729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.369752][T13729] R13: 00007f5d99016038 R14: 00007f5d99015fa0 R15: 00007ffed2b54f28 [ 274.369768][T13729] [ 274.840375][T13735] FAULT_INJECTION: forcing a failure. [ 274.840375][T13735] name failslab, interval 1, probability 0, space 0, times 0 [ 274.853983][T13735] CPU: 1 UID: 0 PID: 13735 Comm: syz.0.2526 Not tainted syzkaller #0 PREEMPT(full) [ 274.854007][T13735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 274.854017][T13735] Call Trace: [ 274.854025][T13735] [ 274.854031][T13735] dump_stack_lvl+0xe8/0x150 [ 274.854056][T13735] should_fail_ex+0x412/0x560 [ 274.854078][T13735] should_failslab+0xa8/0x100 [ 274.854095][T13735] ? skb_clone+0x212/0x3a0 [ 274.854114][T13735] kmem_cache_alloc_noprof+0x87/0x650 [ 274.854137][T13735] ? __netlink_lookup+0xc6/0x8b0 [ 274.854163][T13735] skb_clone+0x212/0x3a0 [ 274.854184][T13735] __netlink_deliver_tap+0x404/0x850 [ 274.854213][T13735] ? netlink_deliver_tap+0x2e/0x1b0 [ 274.854235][T13735] netlink_deliver_tap+0x19c/0x1b0 [ 274.854256][T13735] netlink_unicast+0x730/0x8e0 [ 274.854287][T13735] netlink_sendmsg+0x813/0xb40 [ 274.854316][T13735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.854340][T13735] ? aa_sock_msg_perm+0xf1/0x1b0 [ 274.854366][T13735] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 274.854391][T13735] ____sys_sendmsg+0x972/0x9f0 [ 274.854409][T13735] ? __might_fault+0xaf/0x130 [ 274.854437][T13735] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.854472][T13735] ? import_iovec+0x73/0xa0 [ 274.854498][T13735] ___sys_sendmsg+0x2a5/0x360 [ 274.854516][T13735] ? __lock_acquire+0x6b5/0x2cf0 [ 274.854538][T13735] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.854561][T13735] ? ktime_get+0x1f5/0x220 [ 274.854610][T13735] ? __fget_files+0x2a/0x420 [ 274.854630][T13735] ? __fget_files+0x3a0/0x420 [ 274.854659][T13735] __x64_sys_sendmsg+0x1bd/0x2a0 [ 274.854682][T13735] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 274.854709][T13735] ? __pfx_ksys_write+0x10/0x10 [ 274.854740][T13735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.854758][T13735] do_syscall_64+0x174/0x580 [ 274.854775][T13735] ? trace_irq_disable+0x3b/0x140 [ 274.854797][T13735] ? clear_bhb_loop+0x40/0x90 [ 274.854816][T13735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.854834][T13735] RIP: 0033:0x7f6fd339ce59 [ 274.854850][T13735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.854864][T13735] RSP: 002b:00007f6fd430a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.854882][T13735] RAX: ffffffffffffffda RBX: 00007f6fd3615fa0 RCX: 00007f6fd339ce59 [ 274.854894][T13735] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000004 [ 274.854904][T13735] RBP: 00007f6fd430a090 R08: 0000000000000000 R09: 0000000000000000 [ 274.854914][T13735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.854924][T13735] R13: 00007f6fd3616038 R14: 00007f6fd3615fa0 R15: 00007ffc2a3a99e8 [ 274.854951][T13735] [ 275.139254][T13737] __nla_validate_parse: 2 callbacks suppressed [ 275.139273][T13737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2527'. [ 275.217796][T13732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2523'. [ 275.410840][T13748] veth1_to_bridge: entered promiscuous mode [ 275.433034][T13754] FAULT_INJECTION: forcing a failure. [ 275.433034][T13754] name failslab, interval 1, probability 0, space 0, times 0 [ 275.445953][T13754] CPU: 1 UID: 0 PID: 13754 Comm: syz.3.2533 Not tainted syzkaller #0 PREEMPT(full) [ 275.445978][T13754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 275.445989][T13754] Call Trace: [ 275.445997][T13754] [ 275.446004][T13754] dump_stack_lvl+0xe8/0x150 [ 275.446030][T13754] should_fail_ex+0x412/0x560 [ 275.446055][T13754] should_failslab+0xa8/0x100 [ 275.446076][T13754] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 275.446100][T13754] ? __alloc_skb+0x186/0x7d0 [ 275.446118][T13754] ? __alloc_skb+0x1d0/0x7d0 [ 275.446134][T13754] ? __local_bh_enable_ip+0xd0/0x130 [ 275.446157][T13754] __alloc_skb+0x1d0/0x7d0 [ 275.446181][T13754] alloc_skb_with_frags+0xc8/0x760 [ 275.446212][T13754] sock_alloc_send_pskb+0x878/0x990 [ 275.446251][T13754] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 275.446272][T13754] ? kasan_quarantine_put+0xbb/0x1f0 [ 275.446295][T13754] ? lockdep_hardirqs_on+0x7a/0x110 [ 275.446319][T13754] ? unix_dgram_sendmsg+0x57c/0x18d0 [ 275.446339][T13754] ? kmem_cache_free+0x182/0x650 [ 275.446364][T13754] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 275.446392][T13754] unix_dgram_sendmsg+0x460/0x18d0 [ 275.446444][T13754] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 275.446471][T13754] ? aa_sock_msg_perm+0xda/0x1b0 [ 275.446497][T13754] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 275.446522][T13754] ____sys_sendmsg+0x972/0x9f0 [ 275.446542][T13754] ? __might_fault+0xaf/0x130 [ 275.446571][T13754] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.446600][T13754] ? import_iovec+0x73/0xa0 [ 275.446625][T13754] ___sys_sendmsg+0x2a5/0x360 [ 275.446644][T13754] ? __lock_acquire+0x6b5/0x2cf0 [ 275.446668][T13754] ? __pfx____sys_sendmsg+0x10/0x10 [ 275.446686][T13754] ? __lock_acquire+0x6b5/0x2cf0 [ 275.446710][T13754] ? kstrtouint+0x6e/0xe0 [ 275.446774][T13754] __sys_sendmmsg+0x27c/0x4e0 [ 275.446800][T13754] ? __pfx___sys_sendmmsg+0x10/0x10 [ 275.446818][T13754] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 275.446864][T13754] ? ksys_write+0x242/0x270 [ 275.446890][T13754] ? __pfx_ksys_write+0x10/0x10 [ 275.446919][T13754] __x64_sys_sendmmsg+0xa0/0xc0 [ 275.446939][T13754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.446956][T13754] do_syscall_64+0x174/0x580 [ 275.446974][T13754] ? trace_irq_disable+0x3b/0x140 [ 275.446999][T13754] ? clear_bhb_loop+0x40/0x90 [ 275.447022][T13754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.447038][T13754] RIP: 0033:0x7f6512b9ce59 [ 275.447055][T13754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.447070][T13754] RSP: 002b:00007f65139a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 275.447089][T13754] RAX: ffffffffffffffda RBX: 00007f6512e15fa0 RCX: 00007f6512b9ce59 [ 275.447101][T13754] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 275.447113][T13754] RBP: 00007f65139a8090 R08: 0000000000000000 R09: 0000000000000000 [ 275.447124][T13754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 275.447134][T13754] R13: 00007f6512e16038 R14: 00007f6512e15fa0 R15: 00007fff42fade78 [ 275.447162][T13754] [ 275.762141][T13748] veth1_to_bridge: left promiscuous mode [ 275.768134][T13647] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 275.992180][T13767] xt_hl: Unknown TTL match mode: 237 [ 276.004641][T13770] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2537'. [ 276.125511][T13773] FAULT_INJECTION: forcing a failure. [ 276.125511][T13773] name failslab, interval 1, probability 0, space 0, times 0 [ 276.138607][T13773] CPU: 1 UID: 0 PID: 13773 Comm: syz.0.2540 Not tainted syzkaller #0 PREEMPT(full) [ 276.138631][T13773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 276.138642][T13773] Call Trace: [ 276.138649][T13773] [ 276.138657][T13773] dump_stack_lvl+0xe8/0x150 [ 276.138681][T13773] should_fail_ex+0x412/0x560 [ 276.138706][T13773] should_failslab+0xa8/0x100 [ 276.138725][T13773] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 276.138749][T13773] ? __alloc_skb+0x186/0x7d0 [ 276.138766][T13773] ? __alloc_skb+0x1d0/0x7d0 [ 276.138781][T13773] ? __local_bh_enable_ip+0xd0/0x130 [ 276.138804][T13773] __alloc_skb+0x1d0/0x7d0 [ 276.138821][T13773] ? netlink_ack_tlv_len+0x6c/0x210 [ 276.138844][T13773] netlink_ack+0x146/0xa50 [ 276.138861][T13773] ? trace_sched_exit_tp+0x3a/0x130 [ 276.138893][T13773] netlink_rcv_skb+0x2b6/0x4b0 [ 276.138913][T13773] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 276.138934][T13773] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 276.138965][T13773] ? bpf_lsm_capable+0x9/0x20 [ 276.138981][T13773] ? security_capable+0x7e/0x2c0 [ 276.139011][T13773] nfnetlink_rcv+0x2c0/0x27b0 [ 276.139030][T13773] ? preempt_schedule_common+0x82/0xd0 [ 276.139050][T13773] ? preempt_schedule_thunk+0x16/0x30 [ 276.139079][T13773] ? __local_bh_enable_ip+0xe1/0x130 [ 276.139095][T13773] ? __dev_queue_xmit+0x2b6/0x3950 [ 276.139116][T13773] ? __dev_queue_xmit+0x1fe5/0x3950 [ 276.139135][T13773] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 276.139161][T13773] ? __dev_queue_xmit+0x2b6/0x3950 [ 276.139187][T13773] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 276.139206][T13773] ? __lock_acquire+0x6b5/0x2cf0 [ 276.139228][T13773] ? __pfx___dev_queue_xmit+0x10/0x10 [ 276.139256][T13773] ? ref_tracker_free+0x693/0x840 [ 276.139278][T13773] ? __pfx_ref_tracker_free+0x10/0x10 [ 276.139301][T13773] ? do_raw_spin_lock+0x12b/0x2f0 [ 276.139334][T13773] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 276.139352][T13773] ? lockdep_hardirqs_on+0x7a/0x110 [ 276.139377][T13773] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 276.139394][T13773] ? rcu_preempt_deferred_qs_irqrestore+0x7b9/0xbc0 [ 276.139439][T13773] netlink_unicast+0x75c/0x8e0 [ 276.139467][T13773] netlink_sendmsg+0x813/0xb40 [ 276.139495][T13773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.139518][T13773] ? aa_sock_msg_perm+0xf1/0x1b0 [ 276.139542][T13773] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 276.139569][T13773] ____sys_sendmsg+0x972/0x9f0 [ 276.139589][T13773] ? __might_fault+0xaf/0x130 [ 276.139617][T13773] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.139646][T13773] ? import_iovec+0x73/0xa0 [ 276.139670][T13773] ___sys_sendmsg+0x2a5/0x360 [ 276.139690][T13773] ? __lock_acquire+0x6b5/0x2cf0 [ 276.139712][T13773] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.139766][T13773] ? __fget_files+0x2a/0x420 [ 276.139786][T13773] ? __fget_files+0x3a0/0x420 [ 276.139817][T13773] __x64_sys_sendmsg+0x1bd/0x2a0 [ 276.139840][T13773] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 276.139869][T13773] ? __pfx_ksys_write+0x10/0x10 [ 276.139903][T13773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.139922][T13773] do_syscall_64+0x174/0x580 [ 276.139940][T13773] ? trace_irq_disable+0x3b/0x140 [ 276.139965][T13773] ? clear_bhb_loop+0x40/0x90 [ 276.139987][T13773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.140005][T13773] RIP: 0033:0x7f6fd339ce59 [ 276.140020][T13773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.140034][T13773] RSP: 002b:00007f6fd430a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.140052][T13773] RAX: ffffffffffffffda RBX: 00007f6fd3615fa0 RCX: 00007f6fd339ce59 [ 276.140065][T13773] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000004 [ 276.140077][T13773] RBP: 00007f6fd430a090 R08: 0000000000000000 R09: 0000000000000000 [ 276.140088][T13773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.140099][T13773] R13: 00007f6fd3616038 R14: 00007f6fd3615fa0 R15: 00007ffc2a3a99e8 [ 276.140129][T13773] [ 276.663622][T13783] netlink: 'syz.3.2543': attribute type 1 has an invalid length. [ 276.705470][T13789] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2544'. [ 276.737302][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2545'. [ 276.751679][ T9929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.822860][T13783] 8021q: adding VLAN 0 to HW filter on device bond7 [ 276.832671][T13789] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2544'. [ 276.854946][T13789] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2544'. [ 277.117260][T13811] IPv6: sit1: Disabled Multicast RS [ 277.157500][T13825] openvswitch: netlink: IPv4 tun info is not correct [ 277.164826][T13826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2552'. [ 277.167933][T13811] ip6tnl2: entered promiscuous mode [ 277.364979][T13839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2556'. [ 277.495551][T13849] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2559'. [ 278.448740][T13902] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.456016][T13902] bridge0: port 2(bridge_slave_1) entered listening state [ 278.463444][T13902] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.470648][T13902] bridge0: port 1(bridge_slave_0) entered listening state [ 278.591089][T13902] hsr0: left promiscuous mode [ 278.608054][T13902] veth1_macvtap: left promiscuous mode [ 278.628387][T13902] veth0_macvtap: left promiscuous mode [ 278.647240][T13902] veth0_macvtap: entered promiscuous mode [ 278.668042][T13902] veth1_macvtap: entered promiscuous mode [ 278.711961][T13902] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 278.736742][T13902] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 278.782192][T13902] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 278.843905][T13902] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 278.881971][T13902] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 278.980992][T13921] bridge0: entered allmulticast mode [ 279.964631][T13993] syzkaller0: entered promiscuous mode [ 279.977805][T13993] syzkaller0: entered allmulticast mode [ 280.390388][T14018] openvswitch: netlink: IP tunnel dst address not specified [ 280.687463][T14035] __nla_validate_parse: 13 callbacks suppressed [ 280.687482][T14035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2604'. [ 280.995912][T14049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2608'. [ 281.204363][T14065] netlink: 'syz.2.2614': attribute type 1 has an invalid length. [ 281.240600][T14065] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2614'. [ 281.452291][T14076] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2616'. [ 281.457682][T14082] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 281.818925][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2621'. [ 281.867886][ T1061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.054108][T14104] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 282.075620][T14104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2621'. [ 282.505683][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.593439][T14142] pim6reg: entered allmulticast mode [ 282.669781][T14142] TCP: TCP_TX_DELAY enabled [ 282.834847][T14161] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2634'. [ 282.869390][T14161] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2634'. [ 282.921321][T14161] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2634'. [ 282.978173][T14161] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2634'. [ 283.880534][T14215] syzkaller0: entered promiscuous mode [ 283.896346][T14215] syzkaller0: entered allmulticast mode [ 284.369177][T14224] vlan5: entered promiscuous mode [ 284.403168][T14224] veth0_to_hsr: entered promiscuous mode [ 284.523421][T14230] syz.3.2649: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 284.541953][T14234] IPVS: set_ctl: invalid protocol: 109 224.0.0.1:20000 [ 284.574799][T14230] CPU: 0 UID: 0 PID: 14230 Comm: syz.3.2649 Not tainted syzkaller #0 PREEMPT(full) [ 284.574829][T14230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 284.574842][T14230] Call Trace: [ 284.574851][T14230] [ 284.574860][T14230] dump_stack_lvl+0xe8/0x150 [ 284.574889][T14230] warn_alloc+0x249/0x340 [ 284.574921][T14230] ? stack_trace_save+0xa9/0x100 [ 284.574955][T14230] ? __pfx_warn_alloc+0x10/0x10 [ 284.574992][T14230] ? kasan_save_track+0x4f/0x80 [ 284.575018][T14230] ? kasan_save_track+0x3e/0x80 [ 284.575044][T14230] ? __kasan_kmalloc+0x93/0xb0 [ 284.575071][T14230] ? __kmalloc_cache_noprof+0x31c/0x660 [ 284.575099][T14230] ? xskq_create+0x56/0x170 [ 284.575128][T14230] ? xsk_setsockopt+0x54c/0x990 [ 284.575154][T14230] ? do_sock_setsockopt+0x17c/0x1b0 [ 284.575175][T14230] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 284.575196][T14230] ? do_syscall_64+0x174/0x580 [ 284.575221][T14230] __vmalloc_node_range_noprof+0x132/0x1750 [ 284.575291][T14230] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 284.575328][T14230] ? __kasan_kmalloc+0x93/0xb0 [ 284.575362][T14230] vmalloc_user_noprof+0xad/0xe0 [ 284.575391][T14230] ? xskq_create+0xbf/0x170 [ 284.575422][T14230] xskq_create+0xbf/0x170 [ 284.575455][T14230] xsk_init_queue+0x8a/0xe0 [ 284.575487][T14230] xsk_setsockopt+0x54c/0x990 [ 284.575519][T14230] ? __pfx_xsk_setsockopt+0x10/0x10 [ 284.575547][T14230] ? __pfx_aa_sk_perm+0x10/0x10 [ 284.575580][T14230] ? aa_sock_opt_perm+0xff/0x1a0 [ 284.575612][T14230] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 284.575640][T14230] ? __pfx_xsk_setsockopt+0x10/0x10 [ 284.575676][T14230] do_sock_setsockopt+0x17c/0x1b0 [ 284.575703][T14230] __x64_sys_setsockopt+0x13d/0x1b0 [ 284.575728][T14230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.575751][T14230] do_syscall_64+0x174/0x580 [ 284.575772][T14230] ? trace_irq_disable+0x3b/0x140 [ 284.575803][T14230] ? clear_bhb_loop+0x40/0x90 [ 284.575828][T14230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.575847][T14230] RIP: 0033:0x7f6512b9ce59 [ 284.575864][T14230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.575880][T14230] RSP: 002b:00007f65139a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 284.575900][T14230] RAX: ffffffffffffffda RBX: 00007f6512e15fa0 RCX: 00007f6512b9ce59 [ 284.575915][T14230] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 284.575925][T14230] RBP: 00007f6512c32d6f R08: 0000000000000004 R09: 0000000000000000 [ 284.575937][T14230] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.575947][T14230] R13: 00007f6512e16038 R14: 00007f6512e15fa0 R15: 00007fff42fade78 [ 284.575978][T14230] [ 284.575996][T14230] Mem-Info: [ 284.860893][T14230] active_anon:5976 inactive_anon:0 isolated_anon:0 [ 284.860893][T14230] active_file:3411 inactive_file:40037 isolated_file:0 [ 284.860893][T14230] unevictable:768 dirty:137 writeback:0 [ 284.860893][T14230] slab_reclaimable:11147 slab_unreclaimable:144889 [ 284.860893][T14230] mapped:29733 shmem:1295 pagetables:1473 [ 284.860893][T14230] sec_pagetables:0 bounce:0 [ 284.860893][T14230] kernel_misc_reclaimable:0 [ 284.860893][T14230] free:1269150 free_pcp:12987 free_cma:0 [ 284.909397][T14230] Node 0 active_anon:23892kB inactive_anon:0kB active_file:13644kB inactive_file:159940kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118932kB dirty:560kB writeback:0kB shmem:3644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14120kB pagetables:5752kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 284.950177][T14230] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 284.983928][T14230] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 285.017886][T14230] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 285.023733][T14230] Node 0 DMA32 free:1118524kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23892kB inactive_anon:0kB active_file:13644kB inactive_file:159940kB unevictable:1536kB writepending:560kB zspages:0kB present:3129332kB managed:2552556kB mlocked:0kB bounce:0kB free_pcp:52888kB local_pcp:31140kB free_cma:0kB [ 285.058722][T14230] lowmem_reserve[]: 0 0 0 0 0 [ 285.063564][T14230] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 285.093831][T14230] lowmem_reserve[]: 0 0 0 0 0 [ 285.104068][T14230] Node 1 Normal free:3943160kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 285.178377][T14230] lowmem_reserve[]: 0 0 0 0 0 [ 285.193456][T14230] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 285.252199][T14230] Node 0 DMA32: 4982*4kB (UME) 2927*8kB (UME) 509*16kB (UME) 305*32kB (UME) 166*64kB (UME) 251*128kB (UM) 177*256kB (UME) 119*512kB (UM) 80*1024kB (UME) 44*2048kB (UME) 180*4096kB (M) = 1119552kB [ 285.280338][T14253] netlink: 'syz.0.2656': attribute type 1 has an invalid length. [ 285.301819][T14230] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 285.306154][T14254] erspan1: entered allmulticast mode [ 285.316692][T14230] Node 1 Normal: 0*4kB 9*8kB (UM) 22*16kB (UM) 4*32kB (UM) 8*64kB (UM) 6*128kB (UM) 4*256kB (UM) 2*512kB (M) 1*1024kB (M) 3*2048kB (U) 960*4096kB (M) = 3943208kB [ 285.336744][T14230] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 285.369913][T14230] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 285.402809][T14230] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 285.412649][T14230] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 285.422258][T14230] 44739 total pagecache pages [ 285.432817][T14230] 0 pages in swap cache [ 285.439544][T14230] Free swap = 124996kB [ 285.443745][T14230] Total swap = 124996kB [ 285.447985][T14230] 2097051 pages RAM [ 285.451908][T14230] 0 pages HighMem/MovableOnly [ 285.457485][T14230] 427129 pages reserved [ 285.461669][T14230] 0 pages cma reserved [ 285.471391][T14253] bond6: entered promiscuous mode [ 285.477337][T14253] bond6: entered allmulticast mode [ 285.482911][T14253] 8021q: adding VLAN 0 to HW filter on device bond6 [ 285.576670][T14263] netlink: 'syz.4.2658': attribute type 1 has an invalid length. [ 285.640267][T14263] 8021q: adding VLAN 0 to HW filter on device bond5 [ 285.707042][ T25] block nbd0: Possible stuck request ffff888027aa71c0: control (read@0,1024B). Runtime 90 seconds [ 285.712204][T14274] __nla_validate_parse: 66 callbacks suppressed [ 285.712223][T14274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2659'. [ 285.951748][T14288] netlink: 'syz.2.2663': attribute type 32 has an invalid length. [ 285.975312][T14288] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2663'. [ 286.000013][T14281] xfrm1: entered allmulticast mode [ 286.748296][T14344] netlink: 424 bytes leftover after parsing attributes in process `syz.3.2678'. [ 286.758362][T14344] netlink: 'syz.3.2678': attribute type 1 has an invalid length. [ 287.039203][T14362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2683'. [ 287.150669][T14367] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 287.161628][T14367] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 287.211359][T14373] xt_hashlimit: overflow, try lower: 9/9223372036854775808 [ 287.226211][T14373] netlink: 'syz.3.2687': attribute type 1 has an invalid length. [ 287.435603][T14385] syz_tun: entered allmulticast mode [ 287.451804][T14385] pimreg: entered allmulticast mode [ 287.486755][T14384] syz_tun: left allmulticast mode [ 287.635335][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.828585][T14412] pimreg9: entered allmulticast mode [ 287.864383][T14412] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2698'. [ 288.275851][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.506918][ T5638] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 288.520134][ T5638] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 288.528399][ T5638] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 288.535612][T14441] vlan4: entered promiscuous mode [ 288.535633][T14441] bridge0: entered promiscuous mode [ 288.558221][ T5638] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 288.568857][ T5638] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 289.221494][T14470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2708'. [ 289.287576][T14477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2711'. [ 289.464434][ T9924] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.483494][ T9924] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.494790][ T9924] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 289.530911][T14477] ip6tnl3: entered allmulticast mode [ 289.777720][ T9924] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.795248][ T9924] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.829742][ T9924] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 289.971812][ T9924] bond0: (slave netdevsim1): Releasing backup interface [ 290.018773][ T9924] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.030746][ T9924] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.047780][ T9924] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 290.364212][ T9924] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.377044][ T9924] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.388381][ T9924] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 290.431960][T14542] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2729'. [ 290.584854][ T5653] Bluetooth: hci5: command tx timeout [ 290.753977][T14556] erspan0: entered promiscuous mode [ 291.107573][ T9924] pimreg: left allmulticast mode [ 291.116070][ T9924] pimreg9: left allmulticast mode [ 291.529717][T14589] netlink: 'syz.2.2739': attribute type 1 has an invalid length. [ 291.583662][T14592] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2739'. [ 291.680182][ T9924] bond0 (unregistering): Released all slaves [ 291.690543][ T9924] bond1 (unregistering): Released all slaves [ 291.704176][ T9924] bond2 (unregistering): Released all slaves [ 291.719595][ T9924] bond3 (unregistering): (slave veth7): Releasing backup interface [ 291.735984][ T9924] bond3 (unregistering): Released all slaves [ 291.750149][ T9924] bond4 (unregistering): Released all slaves [ 291.764961][ T9924] bond5 (unregistering): Released all slaves [ 291.793784][T14576] syzkaller1: entered promiscuous mode [ 291.800486][T14576] syzkaller1: entered allmulticast mode [ 291.871848][T14589] 8021q: adding VLAN 0 to HW filter on device bond7 [ 291.898622][T14594] macvlan2: entered promiscuous mode [ 291.904130][T14594] macvlan2: entered allmulticast mode [ 291.911379][T14594] bond7: entered promiscuous mode [ 291.917398][T14594] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 291.952512][T14594] bond7: left promiscuous mode [ 292.300243][T14602] netlink: 'syz.2.2740': attribute type 12 has an invalid length. [ 292.437069][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2740'. [ 292.647220][T14615] bond8 (unregistering): Released all slaves [ 292.664884][ T5653] Bluetooth: hci5: command tx timeout [ 292.710507][T14629] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2744'. [ 292.735252][T14636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2746'. [ 292.879659][T14617] syzkaller0: entered promiscuous mode [ 292.885838][T14617] syzkaller0: entered allmulticast mode [ 292.918743][T14629] bridge6: entered promiscuous mode [ 292.924227][T14629] bridge6: entered allmulticast mode [ 292.935041][T14629] team0: Port device bridge6 added [ 292.971257][T14442] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.981432][T14442] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.997853][T14442] bridge_slave_0: entered allmulticast mode [ 293.017646][T14442] bridge_slave_0: entered promiscuous mode [ 293.021316][T14643] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.2747'. [ 293.391791][ T3355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.040258][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.747201][ T5653] Bluetooth: hci5: command tx timeout [ 294.893434][T14442] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.900653][T14442] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.908340][T14442] bridge_slave_1: entered allmulticast mode [ 294.915947][T14442] bridge_slave_1: entered promiscuous mode [ 294.929764][ T5297] 8021q: adding VLAN 0 to HW filter on device eth1 [ 294.962717][ T9924] hsr_slave_0: left promiscuous mode [ 295.001592][T14663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2751'. [ 295.024112][ T9924] hsr_slave_1: left promiscuous mode [ 295.057230][ T9924] veth1_macvtap: left promiscuous mode [ 295.075235][ T9924] veth1_vlan: left promiscuous mode [ 295.082186][ T9924] veth0_vlan: left promiscuous mode [ 295.142638][T14672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2752'. [ 295.179137][T14672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2752'. [ 295.709329][T14667] tipc: Enabling of bearer rejected, failed to enable media [ 295.728777][T14680] syzkaller0: entered promiscuous mode [ 295.734424][T14680] syzkaller0: entered allmulticast mode [ 295.840116][T14442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.868699][T14442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.961882][T14700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2757'. [ 296.053419][T14442] team0: Port device team_slave_0 added [ 296.087147][T14442] team0: Port device team_slave_1 added [ 296.184904][T14442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.191922][T14442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.219858][T14442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.235121][T14442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.242107][T14442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.271379][T14442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.362207][T14442] hsr_slave_0: entered promiscuous mode [ 296.378849][T14718] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2760'. [ 296.387186][T14442] hsr_slave_1: entered promiscuous mode [ 296.401730][T14442] debugfs: 'hsr0' already exists in 'hsr' [ 296.414686][T14442] Cannot create hsr debugfs directory [ 296.662872][T14729] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2763'. [ 296.791353][T14732] FAULT_INJECTION: forcing a failure. [ 296.791353][T14732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.813370][T14732] CPU: 1 UID: 0 PID: 14732 Comm: syz.2.2764 Not tainted syzkaller #0 PREEMPT(full) [ 296.813398][T14732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 296.813408][T14732] Call Trace: [ 296.813415][T14732] [ 296.813423][T14732] dump_stack_lvl+0xe8/0x150 [ 296.813451][T14732] should_fail_ex+0x412/0x560 [ 296.813474][T14732] _copy_from_user+0x2d/0xb0 [ 296.813497][T14732] ___sys_sendmsg+0x1c6/0x360 [ 296.813521][T14732] ? __pfx____sys_sendmsg+0x10/0x10 [ 296.813539][T14732] ? __lock_acquire+0x6b5/0x2cf0 [ 296.813603][T14732] __sys_sendmmsg+0x27c/0x4e0 [ 296.813627][T14732] ? __pfx___sys_sendmmsg+0x10/0x10 [ 296.813645][T14732] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 296.813689][T14732] ? ksys_write+0x242/0x270 [ 296.813715][T14732] ? __pfx_ksys_write+0x10/0x10 [ 296.813745][T14732] __x64_sys_sendmmsg+0xa0/0xc0 [ 296.813766][T14732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.813783][T14732] do_syscall_64+0x174/0x580 [ 296.813802][T14732] ? trace_irq_disable+0x3b/0x140 [ 296.813827][T14732] ? clear_bhb_loop+0x40/0x90 [ 296.813849][T14732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.813866][T14732] RIP: 0033:0x7f653c39ce59 [ 296.813884][T14732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.813899][T14732] RSP: 002b:00007f653d228028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 296.813919][T14732] RAX: ffffffffffffffda RBX: 00007f653c615fa0 RCX: 00007f653c39ce59 [ 296.813933][T14732] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 296.813945][T14732] RBP: 00007f653d228090 R08: 0000000000000000 R09: 0000000000000000 [ 296.813956][T14732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 296.813966][T14732] R13: 00007f653c616038 R14: 00007f653c615fa0 R15: 00007ffdc85d4d18 [ 296.813996][T14732] [ 297.001399][ T5638] Bluetooth: hci5: command tx timeout [ 297.228555][ T5297] 8021q: adding VLAN 0 to HW filter on device eth2 [ 297.538702][T14764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2769'. [ 297.674341][T14771] FAULT_INJECTION: forcing a failure. [ 297.674341][T14771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.719117][T14771] CPU: 1 UID: 0 PID: 14771 Comm: syz.0.2774 Not tainted syzkaller #0 PREEMPT(full) [ 297.719140][T14771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 297.719151][T14771] Call Trace: [ 297.719158][T14771] [ 297.719165][T14771] dump_stack_lvl+0xe8/0x150 [ 297.719190][T14771] should_fail_ex+0x412/0x560 [ 297.719212][T14771] _copy_from_user+0x2d/0xb0 [ 297.719233][T14771] ___sys_sendmsg+0x1c6/0x360 [ 297.719258][T14771] ? __pfx____sys_sendmsg+0x10/0x10 [ 297.719274][T14771] ? __lock_acquire+0x6b5/0x2cf0 [ 297.719342][T14771] __sys_sendmmsg+0x27c/0x4e0 [ 297.719366][T14771] ? __pfx___sys_sendmmsg+0x10/0x10 [ 297.719384][T14771] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 297.719425][T14771] ? ksys_write+0x242/0x270 [ 297.719451][T14771] ? __pfx_ksys_write+0x10/0x10 [ 297.719480][T14771] __x64_sys_sendmmsg+0xa0/0xc0 [ 297.719499][T14771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.719516][T14771] do_syscall_64+0x174/0x580 [ 297.719537][T14771] ? trace_irq_disable+0x3b/0x140 [ 297.719560][T14771] ? clear_bhb_loop+0x40/0x90 [ 297.719580][T14771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.719598][T14771] RIP: 0033:0x7f6fd339ce59 [ 297.719613][T14771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.719627][T14771] RSP: 002b:00007f6fd430a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 297.719644][T14771] RAX: ffffffffffffffda RBX: 00007f6fd3615fa0 RCX: 00007f6fd339ce59 [ 297.719656][T14771] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 297.719667][T14771] RBP: 00007f6fd430a090 R08: 0000000000000000 R09: 0000000000000000 [ 297.719678][T14771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 297.719689][T14771] R13: 00007f6fd3616038 R14: 00007f6fd3615fa0 R15: 00007ffc2a3a99e8 [ 297.719717][T14771] [ 298.085012][T14442] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 298.101961][T14442] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 298.110315][T14442] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 298.122113][T14442] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 298.132434][T14442] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 298.153889][T14442] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 298.157469][T14783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2777'. [ 298.177409][T14442] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 298.209500][T14442] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 298.253647][T14783] ip6tnl2: entered allmulticast mode [ 298.291824][T14792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2779'. [ 298.311155][T14786] sctp: [Deprecated]: syz.0.2778 (pid 14786) Use of int in maxseg socket option. [ 298.311155][T14786] Use struct sctp_assoc_value instead [ 298.312821][ T9929] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 298.507563][ T9924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.626581][T14442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.708965][T14442] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.760265][ T9929] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.767468][ T9929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.843934][ T9929] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.845939][T14831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2786'. [ 298.851145][ T9929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.890188][T14824] netlink: 'syz.2.2785': attribute type 10 has an invalid length. [ 298.929731][T14824] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2785'. [ 299.076563][ T5638] Bluetooth: hci5: command 0x0411 tx timeout [ 299.105111][T14842] FAULT_INJECTION: forcing a failure. [ 299.105111][T14842] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 299.122317][T14842] CPU: 1 UID: 0 PID: 14842 Comm: syz.1.2788 Not tainted syzkaller #0 PREEMPT(full) [ 299.122363][T14842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 299.122398][T14842] Call Trace: [ 299.122406][T14842] [ 299.122414][T14842] dump_stack_lvl+0xe8/0x150 [ 299.122440][T14842] should_fail_ex+0x412/0x560 [ 299.122464][T14842] prepare_alloc_pages+0x22a/0x650 [ 299.122499][T14842] __alloc_frozen_pages_noprof+0x12f/0x380 [ 299.122522][T14842] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 299.122553][T14842] ? __pfx_policy_nodemask+0x10/0x10 [ 299.122582][T14842] alloc_pages_mpol+0x235/0x490 [ 299.122605][T14842] folio_alloc_mpol_noprof+0x39/0x160 [ 299.122627][T14842] vma_alloc_folio_noprof+0xe1/0x1e0 [ 299.122657][T14842] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 299.122690][T14842] do_wp_page+0x118a/0x4cc0 [ 299.122718][T14842] ? __pte_offset_map+0x29/0x240 [ 299.122750][T14842] ? __pfx_do_wp_page+0x10/0x10 [ 299.122769][T14842] ? do_raw_spin_lock+0x12b/0x2f0 [ 299.122796][T14842] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 299.122830][T14842] handle_mm_fault+0x1698/0x3170 [ 299.122867][T14842] ? handle_mm_fault+0xf1/0x3170 [ 299.122896][T14842] ? __pfx_handle_mm_fault+0x10/0x10 [ 299.122931][T14842] ? __lock_acquire+0x6b5/0x2cf0 [ 299.122954][T14842] ? lock_mm_and_find_vma+0xa7/0x340 [ 299.122982][T14842] do_user_addr_fault+0x75b/0x1340 [ 299.123017][T14842] exc_page_fault+0x6a/0xc0 [ 299.123038][T14842] asm_exc_page_fault+0x26/0x30 [ 299.123054][T14842] RIP: 0010:__put_user_4+0xd/0x20 [ 299.123073][T14842] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 299.123086][T14842] RSP: 0018:ffffc900039f7c98 EFLAGS: 00050202 [ 299.123102][T14842] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000003038 [ 299.123113][T14842] RDX: 0000000000000000 RSI: ffffffff8e2239f3 RDI: ffffffff8c28b9e0 [ 299.123124][T14842] RBP: ffffc900039f7eb0 R08: ffffffff8218909f R09: ffff88802c044078 [ 299.123136][T14842] R10: dffffc0000000000 R11: fffffbfff20613bf R12: 1ffff9200073ef9c [ 299.123148][T14842] R13: 0000000000040000 R14: 0000200000003000 R15: 0000000000000291 [ 299.123167][T14842] ? __might_fault+0xaf/0x130 [ 299.123196][T14842] __sys_sendmmsg+0x2b0/0x4e0 [ 299.123224][T14842] ? __pfx___sys_sendmmsg+0x10/0x10 [ 299.123242][T14842] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 299.123289][T14842] ? ksys_write+0x242/0x270 [ 299.123316][T14842] ? __pfx_ksys_write+0x10/0x10 [ 299.123345][T14842] __x64_sys_sendmmsg+0xa0/0xc0 [ 299.123364][T14842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.123381][T14842] do_syscall_64+0x174/0x580 [ 299.123401][T14842] ? clear_bhb_loop+0x40/0x90 [ 299.123421][T14842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.123438][T14842] RIP: 0033:0x7f0ec2f9ce59 [ 299.123454][T14842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.123470][T14842] RSP: 002b:00007f0ec3e81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 299.123487][T14842] RAX: ffffffffffffffda RBX: 00007f0ec3215fa0 RCX: 00007f0ec2f9ce59 [ 299.123499][T14842] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 299.123511][T14842] RBP: 00007f0ec3e81090 R08: 0000000000000000 R09: 0000000000000000 [ 299.123522][T14842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 299.123532][T14842] R13: 00007f0ec3216038 R14: 00007f0ec3215fa0 R15: 00007fff795c50b8 [ 299.123562][T14842] [ 299.257701][T14851] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2790'. [ 299.614292][T14846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2789'. [ 299.785921][ T9924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.322296][T14895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2799'. [ 300.371056][T14860] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 300.709475][T14442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.766973][T14918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2802'. [ 301.144657][ T5653] Bluetooth: hci5: command 0x0411 tx timeout [ 301.154293][T14442] veth0_vlan: entered promiscuous mode [ 301.168086][T14442] veth1_vlan: entered promiscuous mode [ 301.203213][T14442] veth0_macvtap: entered promiscuous mode [ 301.223457][T14442] veth1_macvtap: entered promiscuous mode [ 301.251379][T14442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.275552][T14442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.291915][ T9931] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.322052][ T9931] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.343262][ T9931] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.375513][ T9931] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.344947][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 302.353234][ T25] block nbd1: Possible stuck request ffff888027b40000: control (read@0,1024B). Runtime 30 seconds [ 304.265417][ T9929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.435282][ T5001] udevd[5001]: worker [5647] /devices/virtual/block/nbd0 is taking a long time [ 305.555089][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.746997][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 308.755306][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 310.025953][ T9931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.585284][ T9931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.664774][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 315.785959][ T9924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.794181][ T25] block nbd0: Possible stuck request ffff888027aa71c0: control (read@0,1024B). Runtime 120 seconds [ 316.203423][ T5638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 316.221261][ T5638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 316.230520][ T5638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 316.240117][ T5638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 316.249444][ T5638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.366847][ T5638] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 316.384132][ T5638] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 316.391962][ T5650] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 316.404452][ T5650] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 316.412810][ T5650] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 316.420854][ T5650] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 316.428823][ T9931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.455011][ T5653] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 316.465453][ T5653] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 316.473447][ T5653] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 316.481998][ T5653] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 316.517489][ T5638] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 316.536203][ T5638] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 316.545359][ T5638] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 316.557816][ T5638] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 316.565757][ T5638] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 317.675236][T15081] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.684790][T15081] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.692023][T15081] bridge_slave_0: entered allmulticast mode [ 317.699578][T15081] bridge_slave_0: entered promiscuous mode [ 317.736700][T15081] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.743791][T15081] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.751206][T15081] bridge_slave_1: entered allmulticast mode [ 317.758173][T15081] bridge_slave_1: entered promiscuous mode [ 317.824294][T15081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.852202][T15081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.908800][T15091] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.916038][T15091] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.923189][T15091] bridge_slave_0: entered allmulticast mode [ 317.930494][T15091] bridge_slave_0: entered promiscuous mode [ 317.976924][T15091] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.984112][T15091] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.991793][T15091] bridge_slave_1: entered allmulticast mode [ 317.999047][T15091] bridge_slave_1: entered promiscuous mode [ 318.008093][T15081] team0: Port device team_slave_0 added [ 318.013806][T15084] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.021663][T15084] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.029158][T15084] bridge_slave_0: entered allmulticast mode [ 318.036482][T15084] bridge_slave_0: entered promiscuous mode [ 318.058278][T15081] team0: Port device team_slave_1 added [ 318.064014][T15084] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.071345][T15084] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.079500][T15084] bridge_slave_1: entered allmulticast mode [ 318.086615][T15084] bridge_slave_1: entered promiscuous mode [ 318.152688][T15091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.162661][T15081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.169898][T15081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.196801][T15081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.209456][T15081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.217554][T15081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.243921][T15081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.263194][T15087] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.270623][T15087] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.277927][T15087] bridge_slave_0: entered allmulticast mode [ 318.284962][T15087] bridge_slave_0: entered promiscuous mode [ 318.293763][T15091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.311924][T15084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.321464][T15087] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.329583][T15087] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.337047][T15087] bridge_slave_1: entered allmulticast mode [ 318.343997][T15087] bridge_slave_1: entered promiscuous mode [ 318.350117][ T5645] Bluetooth: hci1: command tx timeout [ 318.383430][T15084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.407042][T15087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.418701][T15091] team0: Port device team_slave_0 added [ 318.445564][T15087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.464176][T15091] team0: Port device team_slave_1 added [ 318.504712][ T5645] Bluetooth: hci7: command tx timeout [ 318.504725][ T5638] Bluetooth: hci6: command tx timeout [ 318.516773][T15084] team0: Port device team_slave_0 added [ 318.523950][T15081] hsr_slave_0: entered promiscuous mode [ 318.532901][T15081] hsr_slave_1: entered promiscuous mode [ 318.539338][T15081] debugfs: 'hsr0' already exists in 'hsr' [ 318.545396][T15081] Cannot create hsr debugfs directory [ 318.554844][T15087] team0: Port device team_slave_0 added [ 318.571815][T15084] team0: Port device team_slave_1 added [ 318.579909][T15087] team0: Port device team_slave_1 added [ 318.586605][T15091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.593557][T15091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.620096][T15091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.664682][ T5645] Bluetooth: hci8: command tx timeout [ 318.664930][T15091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.677511][T15091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.703763][T15091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.725453][T15084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.732408][T15084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.759350][T15084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.794103][T15084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.801128][T15084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.827740][T15084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.839406][T15087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.846614][T15087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.872844][T15087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.885668][T15087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.892613][T15087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.918939][T15087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.979019][T15091] hsr_slave_0: entered promiscuous mode [ 318.985836][T15091] hsr_slave_1: entered promiscuous mode [ 318.992197][T15091] debugfs: 'hsr0' already exists in 'hsr' [ 318.998068][T15091] Cannot create hsr debugfs directory [ 319.094352][T15087] hsr_slave_0: entered promiscuous mode [ 319.102159][T15087] hsr_slave_1: entered promiscuous mode [ 319.108673][T15087] debugfs: 'hsr0' already exists in 'hsr' [ 319.114406][T15087] Cannot create hsr debugfs directory [ 319.146958][T15084] hsr_slave_0: entered promiscuous mode [ 319.153170][T15084] hsr_slave_1: entered promiscuous mode [ 319.159640][T15084] debugfs: 'hsr0' already exists in 'hsr' [ 319.165529][T15084] Cannot create hsr debugfs directory [ 320.424704][ T5645] Bluetooth: hci1: command tx timeout [ 320.584783][ T5645] Bluetooth: hci7: command tx timeout [ 320.585130][ T5638] Bluetooth: hci6: command tx timeout [ 320.744823][ T5638] Bluetooth: hci8: command tx timeout [ 321.545144][ T9929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.504668][ T5638] Bluetooth: hci1: command tx timeout [ 322.664750][ T5638] Bluetooth: hci7: command tx timeout [ 322.665362][ T5645] Bluetooth: hci6: command tx timeout [ 322.825320][ T5645] Bluetooth: hci8: command tx timeout [ 324.584731][ T5645] Bluetooth: hci1: command tx timeout [ 324.745099][ T5645] Bluetooth: hci7: command tx timeout [ 324.750557][ T5638] Bluetooth: hci6: command tx timeout [ 324.904748][ T5638] Bluetooth: hci8: command tx timeout [ 326.026249][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.307070][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 327.314920][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.146240][ T1061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.444977][ T25] block nbd1: Possible stuck request ffff888027b40000: control (read@0,1024B). Runtime 60 seconds [ 334.671265][ T5001] udevd[5001]: worker [5636] /devices/virtual/block/nbd1 is taking a long time [ 336.905402][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.824645][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.831893][ C0] bridge0: topology change detected, propagating [ 338.838629][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.845868][ C0] bridge0: topology change detected, propagating [ 342.670581][ T9931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.866390][ T25] block nbd0: Possible stuck request ffff888027aa71c0: control (read@0,1024B). Runtime 150 seconds [ 346.505478][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.425362][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.131682][ T5645] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 349.140193][ T5645] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 349.150911][ T5645] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 349.159073][ T5645] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 349.169506][ T5645] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 349.541132][T15150] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.548412][T15150] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.555966][T15150] bridge_slave_0: entered allmulticast mode [ 349.562967][T15150] bridge_slave_0: entered promiscuous mode [ 349.570894][T15150] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.578423][T15150] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.585899][T15150] bridge_slave_1: entered allmulticast mode [ 349.592907][T15150] bridge_slave_1: entered promiscuous mode [ 349.619634][T15150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.631630][T15150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.659103][T15150] team0: Port device team_slave_0 added [ 349.666777][T15150] team0: Port device team_slave_1 added [ 349.689211][T15150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.696452][T15150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.724443][T15150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.737604][T15150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.745472][T15150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.771503][T15150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.809424][T15150] hsr_slave_0: entered promiscuous mode [ 349.815971][T15150] hsr_slave_1: entered promiscuous mode [ 349.821973][T15150] debugfs: 'hsr0' already exists in 'hsr' [ 349.827953][T15150] Cannot create hsr debugfs directory [ 349.940941][T15150] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.018727][T15150] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.060538][T15150] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.130819][T15150] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.224700][ T5638] Bluetooth: hci9: command tx timeout [ 351.625117][ T9931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.304633][ T5638] Bluetooth: hci9: command tx timeout [ 353.465295][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.384607][ T5638] Bluetooth: hci9: command tx timeout [ 357.385541][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.464660][ T5638] Bluetooth: hci9: command tx timeout [ 359.306111][ T3355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.865208][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 362.505704][ T25] block nbd1: Possible stuck request ffff888027b40000: control (read@0,1024B). Runtime 90 seconds [ 363.146411][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.065396][ T3355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.905304][ T1061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.185735][ T1061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.665475][ T1061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.945293][ T9931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.953640][ T25] block nbd0: Possible stuck request ffff888027aa71c0: control (read@0,1024B). Runtime 180 seconds [ 376.210027][ T5645] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 376.221849][ T5645] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 376.230390][ T5645] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 376.239671][ T5645] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 376.252252][ T5650] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 376.252915][ T5645] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 376.278342][ T5638] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 376.288377][ T5650] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 376.301862][ T5650] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 376.312366][ T5650] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 376.976047][T15169] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.983236][T15169] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.990960][T15169] bridge_slave_0: entered allmulticast mode [ 376.998279][T15169] bridge_slave_0: entered promiscuous mode [ 377.012198][T15169] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.019642][T15169] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.026967][T15169] bridge_slave_1: entered allmulticast mode [ 377.033977][T15169] bridge_slave_1: entered promiscuous mode [ 377.082901][T15169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.102835][T15169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.112247][T15171] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.119866][T15171] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.127260][T15171] bridge_slave_0: entered allmulticast mode [ 377.135501][T15171] bridge_slave_0: entered promiscuous mode [ 377.173550][T15171] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.181520][T15171] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.189411][T15171] bridge_slave_1: entered allmulticast mode [ 377.197787][T15171] bridge_slave_1: entered promiscuous mode [ 377.251430][T15169] team0: Port device team_slave_0 added [ 377.291222][ T5653] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 377.309118][ T5653] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 377.317899][ T5653] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 377.326630][ T5653] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 377.336949][ T5653] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 377.346373][T15171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.369704][T15169] team0: Port device team_slave_1 added [ 377.395517][ T5650] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 377.404240][T15171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.426922][ T5650] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 377.435510][ T5650] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 377.447214][ T5650] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 377.455991][ T5650] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 377.506822][T15169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.513828][T15169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.540249][T15169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.568924][T15169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.577072][T15169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.603857][T15169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.629737][T15171] team0: Port device team_slave_0 added [ 377.647940][T15171] team0: Port device team_slave_1 added [ 377.757232][T15169] hsr_slave_0: entered promiscuous mode [ 377.763883][T15169] hsr_slave_1: entered promiscuous mode [ 377.771153][T15169] debugfs: 'hsr0' already exists in 'hsr' [ 377.778516][T15169] Cannot create hsr debugfs directory [ 377.786120][T15171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.793088][T15171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.819409][T15171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.854741][T15171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.861726][T15171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.900787][T15171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.070897][T15171] hsr_slave_0: entered promiscuous mode [ 378.077199][T15171] hsr_slave_1: entered promiscuous mode [ 378.083201][T15171] debugfs: 'hsr0' already exists in 'hsr' [ 378.089197][T15171] Cannot create hsr debugfs directory [ 378.345350][ T5653] Bluetooth: hci11: command tx timeout [ 378.352446][ T5650] Bluetooth: hci10: command tx timeout [ 378.682224][T15205] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.689543][T15205] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.697445][T15205] bridge_slave_0: entered allmulticast mode [ 378.704666][T15205] bridge_slave_0: entered promiscuous mode [ 378.726606][T15205] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.733824][T15205] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.742443][T15205] bridge_slave_1: entered allmulticast mode [ 378.749730][T15205] bridge_slave_1: entered promiscuous mode [ 378.817295][T15205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.828302][T15207] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.837385][T15207] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.844916][T15207] bridge_slave_0: entered allmulticast mode [ 378.852015][T15207] bridge_slave_0: entered promiscuous mode [ 378.861478][T15205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.884217][T15207] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.891523][T15207] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.899131][T15207] bridge_slave_1: entered allmulticast mode [ 378.907685][T15207] bridge_slave_1: entered promiscuous mode [ 378.944014][T15205] team0: Port device team_slave_0 added [ 378.952625][T15205] team0: Port device team_slave_1 added [ 378.991101][T15207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.004100][T15207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.044727][T15205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.051706][T15205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.078739][T15205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.091336][T15205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.098562][T15205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.125049][T15205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.160755][T15207] team0: Port device team_slave_0 added [ 379.169523][T15207] team0: Port device team_slave_1 added [ 379.208195][T15207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.215634][T15207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.242593][T15207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.277555][T15207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.284662][T15207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.310815][T15207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.344609][T15205] hsr_slave_0: entered promiscuous mode [ 379.350957][T15205] hsr_slave_1: entered promiscuous mode [ 379.357876][T15205] debugfs: 'hsr0' already exists in 'hsr' [ 379.363612][T15205] Cannot create hsr debugfs directory [ 379.384659][ T5650] Bluetooth: hci12: command tx timeout [ 379.449647][T15207] hsr_slave_0: entered promiscuous mode [ 379.456537][T15207] hsr_slave_1: entered promiscuous mode [ 379.462652][T15207] debugfs: 'hsr0' already exists in 'hsr' [ 379.469451][T15207] Cannot create hsr debugfs directory [ 379.555767][ T5650] Bluetooth: hci13: command tx timeout [ 380.424799][ T5650] Bluetooth: hci10: command tx timeout [ 380.424990][ T5653] Bluetooth: hci11: command tx timeout [ 380.433315][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.464744][ T5653] Bluetooth: hci12: command tx timeout [ 381.625022][ T5653] Bluetooth: hci13: command tx timeout [ 381.705202][ T1061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.504738][ T5653] Bluetooth: hci10: command tx timeout [ 382.504752][ T5650] Bluetooth: hci11: command tx timeout [ 383.249441][ T5001] udevd[5001]: worker [5647] /devices/virtual/block/nbd0 timeout; kill it [ 383.258254][ T5001] udevd[5001]: seq 14202 '/devices/virtual/block/nbd0' killed [ 383.544767][ T5653] Bluetooth: hci12: command tx timeout [ 383.705022][ T5653] Bluetooth: hci13: command tx timeout [ 384.584779][ T5653] Bluetooth: hci11: command tx timeout [ 384.584831][ T5650] Bluetooth: hci10: command tx timeout [ 385.545367][ T9924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.624909][ T5653] Bluetooth: hci12: command tx timeout [ 385.784894][ T5653] Bluetooth: hci13: command tx timeout [ 387.465142][ T9924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.305690][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.586944][ T25] block nbd1: Possible stuck request ffff888027b40000: control (read@0,1024B). Runtime 120 seconds [ 393.225458][ T1061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.425065][ T9924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.985804][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.465804][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.745274][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.024867][ T25] block nbd0: Possible stuck request ffff888027aa71c0: control (read@0,1024B). Runtime 210 seconds [ 406.665815][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.732969][ T5650] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 409.740968][ T5650] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 409.749985][ T5650] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 409.758300][ T5650] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 409.767546][ T5650] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 410.142754][T15240] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.150061][T15240] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.157722][T15240] bridge_slave_0: entered allmulticast mode [ 410.164895][T15240] bridge_slave_0: entered promiscuous mode [ 410.172561][T15240] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.179881][T15240] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.187546][T15240] bridge_slave_1: entered allmulticast mode [ 410.194643][T15240] bridge_slave_1: entered promiscuous mode [ 410.219421][T15240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.230965][T15240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.258336][T15240] team0: Port device team_slave_0 added [ 410.267473][T15240] team0: Port device team_slave_1 added [ 410.289893][T15240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.297469][T15240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.323531][T15240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.335859][T15240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.342789][T15240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.369499][T15240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.407184][T15240] hsr_slave_0: entered promiscuous mode [ 410.413656][T15240] hsr_slave_1: entered promiscuous mode [ 410.419892][T15240] debugfs: 'hsr0' already exists in 'hsr' [ 410.426075][T15240] Cannot create hsr debugfs directory [ 410.506613][ T9931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.864926][ T5653] Bluetooth: hci14: command tx timeout [ 412.425164][ T9931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.944784][ T5653] Bluetooth: hci14: command tx timeout [ 416.024853][ T5653] Bluetooth: hci14: command tx timeout [ 416.266002][ T9931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.425695][ T5653] Bluetooth: hci5: command 0x0411 tx timeout [ 418.104728][ T5650] Bluetooth: hci14: command tx timeout [ 418.185179][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.386139][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.666107][ T25] block nbd1: Possible stuck request ffff888027b40000: control (read@0,1024B). Runtime 150 seconds [ 423.945465][ T9931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.505217][ T9924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.985597][ T1061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.625217][ T1061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.186026][ T1061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.825480][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 436.105277][ T25] block nbd0: Possible stuck request ffff888027aa71c0: control (read@0,1024B). Runtime 240 seconds [ 436.784793][ T5653] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 436.800069][ T5653] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 436.811893][ T5653] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 436.812797][ T5645] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 436.828818][ T5653] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 436.840151][ T5645] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 436.840523][ T5653] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 436.852987][ T5645] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 436.867121][ T5645] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 436.877316][ T5645] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 437.541650][T15259] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.549202][T15259] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.556647][T15259] bridge_slave_0: entered allmulticast mode [ 437.563755][T15259] bridge_slave_0: entered promiscuous mode [ 437.579781][T15259] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.587139][T15259] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.594605][T15259] bridge_slave_1: entered allmulticast mode [ 437.601794][T15259] bridge_slave_1: entered promiscuous mode [ 437.645186][T15259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.665991][T15259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.699456][T15261] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.707293][T15261] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.724980][T15261] bridge_slave_0: entered allmulticast mode [ 437.732865][T15261] bridge_slave_0: entered promiscuous mode [ 437.761174][T15261] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.769330][T15261] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.776879][T15261] bridge_slave_1: entered allmulticast mode [ 437.787241][T15261] bridge_slave_1: entered promiscuous mode [ 437.797416][T15259] team0: Port device team_slave_0 added [ 437.806524][T15259] team0: Port device team_slave_1 added [ 437.887890][T15259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.899840][T15259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.906800][ T5645] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 437.927521][T15259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.946680][ T5645] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 437.958725][ T5645] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 437.963110][T15261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.977726][T15259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.985706][T15259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.985870][ T5645] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 438.014454][T15259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.034090][ T5645] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 438.036613][T15261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.063639][ T5650] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 438.082298][ T5638] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 438.097147][ T5650] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 438.125370][ T5653] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 438.141840][ T5653] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 438.181940][T15261] team0: Port device team_slave_0 added [ 438.198415][T15261] team0: Port device team_slave_1 added [ 438.300109][T15261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.308184][T15261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.335904][T15261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.357310][T15259] hsr_slave_0: entered promiscuous mode [ 438.364205][T15259] hsr_slave_1: entered promiscuous mode [ 438.371534][T15259] debugfs: 'hsr0' already exists in 'hsr' [ 438.378898][T15259] Cannot create hsr debugfs directory [ 438.430625][T15261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.439471][T15261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.466715][T15261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.556408][T15261] hsr_slave_0: entered promiscuous mode [ 438.563458][T15261] hsr_slave_1: entered promiscuous mode [ 438.571382][T15261] debugfs: 'hsr0' already exists in 'hsr' [ 438.589122][T15261] Cannot create hsr debugfs directory [ 438.905747][ T5653] Bluetooth: hci15: command tx timeout [ 438.905760][ T5645] Bluetooth: hci16: command tx timeout [ 439.314736][T15297] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.321902][T15297] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.329539][T15297] bridge_slave_0: entered allmulticast mode [ 439.337653][T15297] bridge_slave_0: entered promiscuous mode [ 439.366314][T15295] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.373549][T15295] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.381586][T15295] bridge_slave_0: entered allmulticast mode [ 439.389938][T15295] bridge_slave_0: entered promiscuous mode [ 439.397910][T15297] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.405456][T15297] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.412691][T15297] bridge_slave_1: entered allmulticast mode [ 439.419980][T15297] bridge_slave_1: entered promiscuous mode [ 439.433177][T15295] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.440375][T15295] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.447921][T15295] bridge_slave_1: entered allmulticast mode [ 439.455248][T15295] bridge_slave_1: entered promiscuous mode [ 439.522241][T15297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.535200][T15295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.548255][T15297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.560343][T15295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.618361][T15295] team0: Port device team_slave_0 added [ 439.626485][T15297] team0: Port device team_slave_0 added [ 439.634157][T15295] team0: Port device team_slave_1 added [ 439.655315][T15297] team0: Port device team_slave_1 added [ 439.683007][T15295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.690386][T15295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.717194][T15295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.750038][T15297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.757171][T15297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.783391][T15297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.796073][T15295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.803005][T15295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.829504][T15295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.849784][T15297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.856909][T15297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.883071][T15297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.959745][ T1061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.989340][T15295] hsr_slave_0: entered promiscuous mode [ 439.996218][T15295] hsr_slave_1: entered promiscuous mode [ 440.002337][T15295] debugfs: 'hsr0' already exists in 'hsr' [ 440.008678][T15295] Cannot create hsr debugfs directory [ 440.020916][T15297] hsr_slave_0: entered promiscuous mode [ 440.027897][T15297] hsr_slave_1: entered promiscuous mode [ 440.034071][T15297] debugfs: 'hsr0' already exists in 'hsr' [ 440.040071][T15297] Cannot create hsr debugfs directory [ 440.104992][ T5654] Bluetooth: hci17: command tx timeout [ 440.185733][ T5654] Bluetooth: hci18: command tx timeout [ 440.984761][ T5654] Bluetooth: hci16: command tx timeout [ 440.994994][ T5654] Bluetooth: hci15: command tx timeout [ 441.225550][ T9929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.026616][ T5654] Bluetooth: hci6: command 0x0406 tx timeout [ 442.037230][ T5654] Bluetooth: hci8: command 0x0406 tx timeout [ 442.043295][ T5654] Bluetooth: hci1: command 0x0406 tx timeout [ 442.048294][ T50] Bluetooth: hci7: command 0x0406 tx timeout [ 442.184804][ T5645] Bluetooth: hci17: command tx timeout [ 442.266765][ T5645] Bluetooth: hci18: command tx timeout [ 443.064918][ T5645] Bluetooth: hci15: command tx timeout [ 443.066654][ T5650] Bluetooth: hci16: command tx timeout [ 444.265414][ T5650] Bluetooth: hci17: command tx timeout [ 444.355209][ T5650] Bluetooth: hci18: command tx timeout [ 445.067055][ T1061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.145255][ T5650] Bluetooth: hci15: command tx timeout [ 445.145269][ T5645] Bluetooth: hci16: command tx timeout [ 446.344919][ T5650] Bluetooth: hci17: command tx timeout [ 446.345128][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.424848][ T5650] Bluetooth: hci18: command tx timeout [ 450.825808][ T1061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.385212][ T1061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.745792][ T25] block nbd1: Possible stuck request ffff888027b40000: control (read@0,1024B). Runtime 180 seconds [ 454.120685][ T5001] udevd[5001]: worker [5636] /devices/virtual/block/nbd1 timeout; kill it [ 454.129345][ T5001] udevd[5001]: seq 16342 '/devices/virtual/block/nbd1' killed [ 457.225260][ T9929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.345227][ T30] INFO: task dhcpcd:5296 blocked for more than 143 seconds. [ 462.352649][ T30] Not tainted syzkaller #0 [ 462.357867][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 462.366773][ T30] task:dhcpcd state:D stack:25368 pid:5296 tgid:5296 ppid:1 task_flags:0x400140 flags:0x00080000 [ 462.378904][ T30] Call Trace: [ 462.382236][ T30] [ 462.385528][ T30] __schedule+0x1821/0x5740 [ 462.390049][ T30] ? __lock_acquire+0x6b5/0x2cf0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 462.395152][ T30] ? __pfx___schedule+0x10/0x10 [ 462.400467][ T30] ? schedule+0x90/0x360 [ 462.405133][ T30] schedule+0x164/0x360 [ 462.409318][ T30] schedule_preempt_disabled+0x13/0x30 [ 462.415231][ T30] __mutex_lock+0x7f7/0x1550 [ 462.420439][ T30] ? kernel_text_address+0xa5/0xe0 [ 462.434714][ T30] ? __mutex_lock+0x608/0x1550 [ 462.444836][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 462.451894][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 462.457313][ T30] ? stack_trace_save+0xa9/0x100 [ 462.462308][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 462.471118][ T30] ? radix_tree_lookup+0x240/0x290 [ 462.480402][ T30] genl_rcv_msg+0x10b/0x7a0 [ 462.486449][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 462.491553][ T30] netlink_rcv_skb+0x232/0x4b0 [ 462.496835][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 462.501906][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 462.507999][ T30] ? down_read+0x270/0x2e0 [ 462.512459][ T30] ? genl_rcv+0xd/0x40 [ 462.517193][ T30] genl_rcv+0x28/0x40 [ 462.521178][ T30] netlink_unicast+0x75c/0x8e0 [ 462.526076][ T30] netlink_sendmsg+0x813/0xb40 [ 462.530866][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.536465][ T30] ? __se_sys_ioctl+0x47/0x170 [ 462.541258][ T30] ? do_syscall_64+0x174/0x580 [ 462.546052][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 462.551005][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 462.556645][ T30] ____sys_sendmsg+0x972/0x9f0 [ 462.561452][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 462.567118][ T30] ? import_iovec+0x73/0xa0 [ 462.571635][ T30] ___sys_sendmsg+0x2a5/0x360 [ 462.576551][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.581760][ T30] ? __rtnl_unlock+0xc8/0xf0 [ 462.586735][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 462.591803][ T30] ? __seccomp_filter+0x3e9/0x1ef0 [ 462.597102][ T30] ? __pfx___seccomp_filter+0x10/0x10 [ 462.602505][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 462.607599][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 462.613091][ T30] ? __secure_computing+0xe1/0x2a0 [ 462.618504][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.624738][ T30] do_syscall_64+0x174/0x580 [ 462.629339][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.635565][ T30] ? clear_bhb_loop+0x40/0x90 [ 462.640268][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.646397][ T30] RIP: 0033:0x7f7707caf407 [ 462.650834][ T30] RSP: 002b:00007ffe75823970 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 462.659668][ T30] RAX: ffffffffffffffda RBX: 00007f7707c25780 RCX: 00007f7707caf407 [ 462.667931][ T30] RDX: 0000000000000000 RSI: 00007ffe758239f0 RDI: 000000000000000e [ 462.676120][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 462.684117][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000055680c3dbe10 [ 462.692183][ T30] R13: 000000000000000e R14: 00007ffe75837eb0 R15: 000055680dbb4740 [ 462.700422][ T30] [ 462.703531][ T30] INFO: task syz-executor:14442 blocked for more than 143 seconds. [ 462.711850][ T30] Not tainted syzkaller #0 [ 462.717015][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 462.725789][ T30] task:syz-executor state:D stack:21640 pid:14442 tgid:14442 ppid:1 task_flags:0x400140 flags:0x00080002 [ 462.737906][ T30] Call Trace: [ 462.741219][ T30] [ 462.744159][ T30] __schedule+0x1821/0x5740 [ 462.749171][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 462.754155][ T30] ? __pfx___schedule+0x10/0x10 [ 462.759315][ T30] ? schedule+0x90/0x360 [ 462.763592][ T30] schedule+0x164/0x360 [ 462.767804][ T30] schedule_preempt_disabled+0x13/0x30 [ 462.773265][ T30] __mutex_lock+0x7f7/0x1550 [ 462.778052][ T30] ? __mutex_lock+0x608/0x1550 [ 462.782846][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 462.787584][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 462.792623][ T30] ? radix_tree_lookup+0x240/0x290 [ 462.797935][ T30] genl_rcv_msg+0x10b/0x7a0 [ 462.802479][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 462.807697][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 462.813102][ T30] netlink_rcv_skb+0x232/0x4b0 [ 462.818116][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 462.823173][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 462.828713][ T30] ? down_read+0x270/0x2e0 [ 462.833159][ T30] ? genl_rcv+0xd/0x40 [ 462.837467][ T30] genl_rcv+0x28/0x40 [ 462.841466][ T30] netlink_unicast+0x75c/0x8e0 [ 462.846300][ T30] netlink_sendmsg+0x813/0xb40 [ 462.851078][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.856618][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 462.861602][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 462.867127][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.872451][ T30] __sys_sendto+0x672/0x710 [ 462.877167][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 462.882247][ T30] ? fd_install+0x94/0x3d0 [ 462.886755][ T30] ? fd_install+0x306/0x3d0 [ 462.891286][ T30] __x64_sys_sendto+0xde/0x100 [ 462.896219][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.902319][ T30] do_syscall_64+0x174/0x580 [ 462.907282][ T30] ? clear_bhb_loop+0x40/0x90 [ 462.911995][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.918154][ T30] RIP: 0033:0x7f2f3395d68e [ 462.922589][ T30] RSP: 002b:00007ffef3d05058 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 462.931530][ T30] RAX: ffffffffffffffda RBX: 0000555582820500 RCX: 00007f2f3395d68e [ 462.939781][ T30] RDX: 0000000000000028 RSI: 00007f2f34744670 RDI: 0000000000000003 [ 462.947827][ T30] RBP: 0000000000000001 R08: 00007ffef3d050d4 R09: 000000000000000c [ 462.956095][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 462.964061][ T30] R13: 00007ffef3d05128 R14: 00007f2f34744670 R15: 0000000000000000 [ 462.972119][ T30] [ 462.975472][ T30] INFO: task syz.0.2798:14882 blocked for more than 143 seconds. [ 462.983302][ T30] Not tainted syzkaller #0 [ 462.988698][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 462.997482][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.005956][ T30] task:syz.0.2798 state:D stack:25464 pid:14882 tgid:14881 ppid:5634 task_flags:0x400140 flags:0x00080002 [ 463.018207][ T30] Call Trace: [ 463.021487][ T30] [ 463.024411][ T30] __schedule+0x1821/0x5740 [ 463.028971][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 463.033936][ T30] ? __pfx___schedule+0x10/0x10 [ 463.038843][ T30] ? schedule+0x90/0x360 [ 463.043094][ T30] schedule+0x164/0x360 [ 463.047528][ T30] schedule_preempt_disabled+0x13/0x30 [ 463.052982][ T30] __mutex_lock+0x7f7/0x1550 [ 463.057666][ T30] ? kernel_text_address+0xa5/0xe0 [ 463.062801][ T30] ? __mutex_lock+0x608/0x1550 [ 463.068649][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 463.073375][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 463.078671][ T30] ? stack_trace_save+0xa9/0x100 [ 463.083630][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 463.088719][ T30] ? radix_tree_lookup+0x240/0x290 [ 463.093874][ T30] genl_rcv_msg+0x10b/0x7a0 [ 463.098463][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.103506][ T30] netlink_rcv_skb+0x232/0x4b0 [ 463.108545][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.113571][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 463.118949][ T30] ? down_read+0x270/0x2e0 [ 463.123375][ T30] ? genl_rcv+0xd/0x40 [ 463.127565][ T30] genl_rcv+0x28/0x40 [ 463.131582][ T30] netlink_unicast+0x75c/0x8e0 [ 463.136745][ T30] netlink_sendmsg+0x813/0xb40 [ 463.141533][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.146990][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 463.151965][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 463.157291][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.162582][ T30] __sys_sendto+0x672/0x710 [ 463.167400][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 463.172436][ T30] ? do_futex+0x333/0x420 [ 463.176845][ T30] ? rcu_is_watching+0x15/0xb0 [ 463.181624][ T30] __x64_sys_sendto+0xde/0x100 [ 463.186507][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.192581][ T30] do_syscall_64+0x174/0x580 [ 463.197504][ T30] ? trace_irq_disable+0x3b/0x140 [ 463.202552][ T30] ? clear_bhb_loop+0x40/0x90 [ 463.207260][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.213184][ T30] RIP: 0033:0x7f6fd335d68e [ 463.217646][ T30] RSP: 002b:00007f6fd4308e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 463.226489][ T30] RAX: ffffffffffffffda RBX: 00007f6fd430a6c0 RCX: 00007f6fd335d68e [ 463.234525][ T30] RDX: 000000000000001c RSI: 00007f6fd4309000 RDI: 0000000000000004 [ 463.242500][ T30] RBP: 0000000000000000 R08: 00007f6fd4308f04 R09: 000000000000000c [ 463.250692][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 463.258954][ T30] R13: 00007f6fd4308f58 R14: 00007f6fd4309000 R15: 0000000000000000 [ 463.267013][ T30] [ 463.270059][ T30] INFO: task syz.0.2798:14891 blocked for more than 144 seconds. [ 463.279583][ T30] Not tainted syzkaller #0 [ 463.284804][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 463.293469][ T30] task:syz.0.2798 state:D stack:26328 pid:14891 tgid:14881 ppid:5634 task_flags:0x480140 flags:0x00080002 [ 463.306012][ T30] Call Trace: [ 463.309317][ T30] [ 463.312239][ T30] __schedule+0x1821/0x5740 [ 463.317069][ T30] ? __pfx___schedule+0x10/0x10 [ 463.321933][ T30] ? schedule+0x90/0x360 [ 463.326266][ T30] schedule+0x164/0x360 [ 463.330430][ T30] blk_mq_freeze_queue_wait+0x101/0x180 [ 463.336053][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 463.342138][ T30] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 463.348760][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 463.354893][ T30] queue_limits_commit_update_frozen+0x55/0xd0 [ 463.361058][ T30] nbd_set_size+0x454/0x680 [ 463.365663][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 463.370703][ T30] ? nla_memcpy+0x5b/0xc0 [ 463.375335][ T30] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 463.380655][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 463.386627][ T30] ? rcu_is_watching+0x15/0xb0 [ 463.391424][ T30] ? trace_kmalloc+0x2a/0xf0 [ 463.396080][ T30] ? __nla_parse+0x40/0x60 [ 463.400505][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 463.407127][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 463.413458][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 463.419238][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 463.425379][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 463.430310][ T30] genl_rcv_msg+0x61c/0x7a0 [ 463.435244][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.440293][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 463.446072][ T30] netlink_rcv_skb+0x232/0x4b0 [ 463.450846][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.455935][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 463.461233][ T30] ? down_read+0x270/0x2e0 [ 463.466047][ T30] ? genl_rcv+0xd/0x40 [ 463.470148][ T30] genl_rcv+0x28/0x40 [ 463.474119][ T30] netlink_unicast+0x75c/0x8e0 [ 463.478937][ T30] netlink_sendmsg+0x813/0xb40 [ 463.483714][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.489127][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 463.494095][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 463.499687][ T30] ____sys_sendmsg+0x972/0x9f0 [ 463.504465][ T30] ? __might_fault+0xaf/0x130 [ 463.509216][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.514612][ T30] ? import_iovec+0x73/0xa0 [ 463.519129][ T30] ___sys_sendmsg+0x2a5/0x360 [ 463.523808][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 463.529128][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.534342][ T30] ? futex_wait+0x2a2/0x390 [ 463.538934][ T30] ? __fget_files+0x2a/0x420 [ 463.543534][ T30] ? __fget_files+0x3a0/0x420 [ 463.548307][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 463.553265][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 463.559067][ T30] ? rcu_is_watching+0x15/0xb0 [ 463.563837][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.569987][ T30] do_syscall_64+0x174/0x580 [ 463.574669][ T30] ? trace_irq_disable+0x3b/0x140 [ 463.579709][ T30] ? clear_bhb_loop+0x40/0x90 [ 463.584377][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.590555][ T30] RIP: 0033:0x7f6fd339ce59 [ 463.595015][ T30] RSP: 002b:00007f6fd42e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.603419][ T30] RAX: ffffffffffffffda RBX: 00007f6fd3616090 RCX: 00007f6fd339ce59 [ 463.611453][ T30] RDX: 0000000024000004 RSI: 00002000000007c0 RDI: 0000000000000004 [ 463.619615][ T30] RBP: 00007f6fd3432d6f R08: 0000000000000000 R09: 0000000000000000 [ 463.627805][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.636068][ T30] R13: 00007f6fd3616128 R14: 00007f6fd3616090 R15: 00007ffc2a3a99e8 [ 463.644191][ T30] [ 463.647501][ T30] INFO: task syz.2.2801:14900 blocked for more than 144 seconds. [ 463.655365][ T30] Not tainted syzkaller #0 [ 463.660297][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 463.669454][ T30] task:syz.2.2801 state:D stack:26520 pid:14900 tgid:14899 ppid:5635 task_flags:0x400140 flags:0x00080002 [ 463.681577][ T30] Call Trace: [ 463.684903][ T30] [ 463.687842][ T30] __schedule+0x1821/0x5740 [ 463.692337][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 463.697334][ T30] ? __pfx___schedule+0x10/0x10 [ 463.702195][ T30] ? schedule+0x90/0x360 [ 463.706921][ T30] schedule+0x164/0x360 [ 463.711094][ T30] schedule_preempt_disabled+0x13/0x30 [ 463.716601][ T30] __mutex_lock+0x7f7/0x1550 [ 463.721200][ T30] ? kernel_text_address+0xa5/0xe0 [ 463.726382][ T30] ? __mutex_lock+0x608/0x1550 [ 463.731154][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 463.736201][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 463.741248][ T30] ? stack_trace_save+0xa9/0x100 [ 463.746334][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 463.751306][ T30] ? radix_tree_lookup+0x240/0x290 [ 463.756502][ T30] genl_rcv_msg+0x10b/0x7a0 [ 463.761027][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.766399][ T30] netlink_rcv_skb+0x232/0x4b0 [ 463.771206][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.776293][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 463.781597][ T30] ? down_read+0x270/0x2e0 [ 463.786601][ T30] ? genl_rcv+0xd/0x40 [ 463.790722][ T30] genl_rcv+0x28/0x40 [ 463.794883][ T30] netlink_unicast+0x75c/0x8e0 [ 463.799655][ T30] netlink_sendmsg+0x813/0xb40 [ 463.804422][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.809804][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 463.814812][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 463.820094][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.825664][ T30] __sys_sendto+0x672/0x710 [ 463.830184][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 463.835330][ T30] ? exc_page_fault+0x6a/0xc0 [ 463.840034][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 463.845403][ T30] __x64_sys_sendto+0xde/0x100 [ 463.850174][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.856593][ T30] do_syscall_64+0x174/0x580 [ 463.861207][ T30] ? trace_irq_disable+0x3b/0x140 [ 463.866480][ T30] ? clear_bhb_loop+0x40/0x90 [ 463.871201][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.877143][ T30] RIP: 0033:0x7f653c35d68e [ 463.881567][ T30] RSP: 002b:00007f653d226e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 463.890326][ T30] RAX: ffffffffffffffda RBX: 00007f653d2286c0 RCX: 00007f653c35d68e [ 463.898389][ T30] RDX: 000000000000001c RSI: 00007f653d227000 RDI: 0000000000000005 [ 463.906397][ T30] RBP: 0000000000000000 R08: 00007f653d226f04 R09: 000000000000000c [ 463.914356][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 463.922579][ T30] R13: 00007f653d226f58 R14: 00007f653d227000 R15: 0000000000000000 [ 463.930615][ T30] [ 463.933641][ T30] INFO: task syz.1.2803:14920 blocked for more than 144 seconds. [ 463.941447][ T30] Not tainted syzkaller #0 [ 463.946836][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 463.955584][ T30] task:syz.1.2803 state:D stack:27904 pid:14920 tgid:14919 ppid:5632 task_flags:0x400040 flags:0x00080002 [ 463.967605][ T30] Call Trace: [ 463.970884][ T30] [ 463.973798][ T30] __schedule+0x1821/0x5740 [ 463.978590][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 463.983555][ T30] ? __pfx___schedule+0x10/0x10 [ 463.988449][ T30] ? schedule+0x90/0x360 [ 463.992869][ T30] schedule+0x164/0x360 [ 463.997157][ T30] schedule_preempt_disabled+0x13/0x30 [ 464.002670][ T30] __mutex_lock+0x7f7/0x1550 [ 464.007608][ T30] ? __mutex_lock+0x608/0x1550 [ 464.012396][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 464.017136][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 464.022176][ T30] ? radix_tree_lookup+0x240/0x290 [ 464.027358][ T30] genl_rcv_msg+0x10b/0x7a0 [ 464.031877][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 464.037172][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 464.042545][ T30] netlink_rcv_skb+0x232/0x4b0 [ 464.047395][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 464.052427][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 464.057777][ T30] ? down_read+0x270/0x2e0 [ 464.062219][ T30] ? genl_rcv+0xd/0x40 [ 464.066555][ T30] genl_rcv+0x28/0x40 [ 464.070624][ T30] netlink_unicast+0x75c/0x8e0 [ 464.075542][ T30] netlink_sendmsg+0x813/0xb40 [ 464.080334][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.085682][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 464.090655][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 464.096207][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.101487][ T30] __sys_sendto+0x672/0x710 [ 464.106587][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 464.111675][ T30] ? exc_page_fault+0x6a/0xc0 [ 464.116402][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 464.121695][ T30] __x64_sys_sendto+0xde/0x100 [ 464.126794][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.132868][ T30] do_syscall_64+0x174/0x580 [ 464.137525][ T30] ? trace_irq_disable+0x3b/0x140 [ 464.142566][ T30] ? clear_bhb_loop+0x40/0x90 [ 464.147304][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.153200][ T30] RIP: 0033:0x7f0ec2f5d68e [ 464.157895][ T30] RSP: 002b:00007f0ec3e7fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 464.166369][ T30] RAX: ffffffffffffffda RBX: 00007f0ec3e816c0 RCX: 00007f0ec2f5d68e [ 464.174356][ T30] RDX: 0000000000000020 RSI: 00007f0ec3e80000 RDI: 0000000000000007 [ 464.182374][ T30] RBP: 0000000000000000 R08: 00007f0ec3e7ff04 R09: 000000000000000c [ 464.190786][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 464.198836][ T30] R13: 00007f0ec3e7ff58 R14: 00007f0ec3e80000 R15: 0000000000000000 [ 464.206896][ T30] [ 464.209918][ T30] INFO: task syz.3.2804:14930 blocked for more than 145 seconds. [ 464.217963][ T30] Not tainted syzkaller #0 [ 464.222896][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 464.231601][ T30] task:syz.3.2804 state:D stack:27336 pid:14930 tgid:14928 ppid:5639 task_flags:0x400040 flags:0x00080002 [ 464.243581][ T30] Call Trace: [ 464.247159][ T30] [ 464.250106][ T30] __schedule+0x1821/0x5740 [ 464.254662][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 464.259637][ T30] ? __pfx___schedule+0x10/0x10 [ 464.264802][ T30] ? schedule+0x90/0x360 [ 464.269278][ T30] schedule+0x164/0x360 [ 464.273449][ T30] schedule_preempt_disabled+0x13/0x30 [ 464.278967][ T30] __mutex_lock+0x7f7/0x1550 [ 464.283564][ T30] ? __mutex_lock+0x608/0x1550 [ 464.288534][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 464.293236][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 464.298597][ T30] ? radix_tree_lookup+0x240/0x290 [ 464.303739][ T30] genl_rcv_msg+0x10b/0x7a0 [ 464.308424][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 464.313480][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 464.318912][ T30] netlink_rcv_skb+0x232/0x4b0 [ 464.323680][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 464.329286][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 464.334779][ T30] ? down_read+0x270/0x2e0 [ 464.339228][ T30] ? genl_rcv+0xd/0x40 [ 464.343284][ T30] genl_rcv+0x28/0x40 [ 464.348018][ T30] netlink_unicast+0x75c/0x8e0 [ 464.352825][ T30] netlink_sendmsg+0x813/0xb40 [ 464.357871][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.363170][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 464.368342][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 464.373661][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.379193][ T30] __sys_sendto+0x672/0x710 [ 464.383724][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 464.389000][ T30] ? exc_page_fault+0x6a/0xc0 [ 464.393704][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 464.399048][ T30] __x64_sys_sendto+0xde/0x100 [ 464.403815][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.410153][ T30] do_syscall_64+0x174/0x580 [ 464.414948][ T30] ? trace_irq_disable+0x3b/0x140 [ 464.420026][ T30] ? clear_bhb_loop+0x40/0x90 [ 464.425057][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.431087][ T30] RIP: 0033:0x7f6512b5d68e [ 464.436564][ T30] RSP: 002b:00007f65139a6e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 464.445168][ T30] RAX: ffffffffffffffda RBX: 00007f65139a86c0 RCX: 00007f6512b5d68e [ 464.453163][ T30] RDX: 0000000000000024 RSI: 00007f65139a7000 RDI: 0000000000000004 [ 464.461382][ T30] RBP: 0000000000000000 R08: 00007f65139a6f04 R09: 000000000000000c [ 464.469900][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 464.477986][ T30] R13: 00007f65139a6f58 R14: 00007f65139a7000 R15: 0000000000000000 [ 464.486026][ T30] [ 464.489126][ T30] [ 464.489126][ T30] Showing all locks held in the system: [ 464.497154][ T30] 1 lock held by khungtaskd/30: [ 464.502007][ T30] #0: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 464.512122][ T30] 1 lock held by klogd/4990: [ 464.516761][ T30] #0: ffff8880b873b0e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 464.527013][ T30] 2 locks held by dhcpcd/5296: [ 464.531780][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 464.540008][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 464.549094][ T30] 2 locks held by getty/5388: [ 464.553808][ T30] #0: ffff888036da60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 464.563829][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 464.574014][ T30] 1 lock held by udevd/5636: [ 464.578658][ T30] #0: ffff888027a62350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 464.588086][ T30] 1 lock held by udevd/5647: [ 464.592690][ T30] #0: ffff888027a06350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 464.601989][ T30] 2 locks held by syz-executor/14442: [ 464.607413][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 464.615875][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 464.624931][ T30] 2 locks held by syz.0.2798/14882: [ 464.630124][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 464.638453][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 464.647605][ T30] 6 locks held by syz.0.2798/14891: [ 464.652874][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 464.661122][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 464.670400][ T30] #2: ffff8880279e8a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 464.681123][ T30] #3: ffff888027a5c7c8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 464.690589][ T30] #4: ffff888027a5c190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 464.702673][ T30] #5: ffff888027a5c1c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 464.715225][ T30] 2 locks held by syz.2.2801/14900: [ 464.720432][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 464.728653][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 464.737698][ T30] 2 locks held by syz.1.2803/14920: [ 464.742896][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 464.751516][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 464.760606][ T30] 2 locks held by syz.3.2804/14930: [ 464.765893][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 464.774114][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 464.783365][ T30] 2 locks held by syz-executor/15081: [ 464.788785][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 464.797013][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 464.806177][ T30] 2 locks held by syz-executor/15084: [ 464.811532][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 464.819853][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 464.829259][ T30] 2 locks held by syz-executor/15087: [ 464.834929][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 464.843161][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 464.852177][ T30] 2 locks held by syz-executor/15091: [ 464.857683][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 464.866228][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 464.875256][ T30] 2 locks held by syz-executor/15150: [ 464.880628][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 464.888856][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 464.898065][ T30] 2 locks held by syz-executor/15169: [ 464.903433][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 464.911770][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 464.920800][ T30] 2 locks held by syz-executor/15171: [ 464.926445][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 464.934682][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 464.943672][ T30] 2 locks held by syz-executor/15205: [ 464.949113][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 464.957501][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 464.966602][ T30] 2 locks held by syz-executor/15207: [ 464.971993][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 464.980237][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 464.989551][ T30] 2 locks held by syz-executor/15240: [ 464.995000][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 465.003217][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 465.012287][ T30] 2 locks held by syz-executor/15259: [ 465.017850][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 465.026097][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 465.035109][ T30] 2 locks held by syz-executor/15261: [ 465.040464][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 465.048924][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 465.057972][ T30] 2 locks held by syz-executor/15295: [ 465.063322][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 465.071571][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 465.080796][ T30] 2 locks held by syz-executor/15297: [ 465.086189][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 465.094389][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 465.103410][ T30] [ 465.105991][ T30] ============================================= [ 465.105991][ T30] [ 465.114400][ T30] NMI backtrace for cpu 0 [ 465.114416][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 465.114428][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 465.114435][ T30] Call Trace: [ 465.114442][ T30] [ 465.114448][ T30] dump_stack_lvl+0xe8/0x150 [ 465.114465][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 465.114491][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 465.114510][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 465.114534][ T30] sys_info+0x135/0x170 [ 465.114552][ T30] watchdog+0xfd3/0x1030 [ 465.114580][ T30] ? watchdog+0x1c9/0x1030 [ 465.114609][ T30] kthread+0x389/0x470 [ 465.114635][ T30] ? __pfx_watchdog+0x10/0x10 [ 465.114661][ T30] ? __pfx_kthread+0x10/0x10 [ 465.114682][ T30] ret_from_fork+0x514/0xb70 [ 465.114702][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 465.114731][ T30] ? __switch_to+0xc79/0x1410 [ 465.114756][ T30] ? __pfx_kthread+0x10/0x10 [ 465.114778][ T30] ret_from_fork_asm+0x1a/0x30 [ 465.114805][ T30] [ 465.219536][ T30] Sending NMI from CPU 0 to CPUs 1: [ 465.224920][ C1] NMI backtrace for cpu 1 [ 465.224937][ C1] CPU: 1 UID: 0 PID: 8832 Comm: kworker/1:12 Not tainted syzkaller #0 PREEMPT(full) [ 465.224955][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 465.224965][ C1] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 465.224994][ C1] RIP: 0010:mark_lock+0x3c/0x190 [ 465.225014][ C1] Code: 00 03 00 83 f9 01 bb 09 00 00 00 83 db 00 83 fa 08 0f 45 da bd 01 00 00 00 89 d9 d3 e5 25 ff 1f 00 00 48 0f a3 05 d4 30 9f 12 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 70 23 e2 93 eb 42 83 3d 9b c0 [ 465.225027][ C1] RSP: 0018:ffffc9000205f858 EFLAGS: 00000003 [ 465.225040][ C1] RAX: 00000000000007a8 RBX: 0000000000000002 RCX: 0000000000000002 [ 465.225050][ C1] RDX: 0000000000000002 RSI: ffff88801af20be0 RDI: ffff88801af20000 [ 465.225060][ C1] RBP: 0000000000000004 R08: ffffffff8679e93d R09: ffffffff8f520db8 [ 465.225071][ C1] R10: dffffc0000000000 R11: fffffbfff1ea41b5 R12: 00000000ffffff05 [ 465.225081][ C1] R13: ffff88801af20be0 R14: ffff88801af20000 R15: 0000000000000002 [ 465.225092][ C1] FS: 0000000000000000(0000) GS:ffff88812538b000(0000) knlGS:0000000000000000 [ 465.225104][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 465.225115][ C1] CR2: 000055685ac09ee8 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 465.225129][ C1] Call Trace: [ 465.225135][ C1] [ 465.225144][ C1] __lock_acquire+0x9d0/0x2cf0 [ 465.225166][ C1] ? __pfx___schedule+0x10/0x10 [ 465.225185][ C1] ? wg_ratelimiter_gc_entries+0x5d/0x450 [ 465.225211][ C1] lock_acquire+0x106/0x350 [ 465.225226][ C1] ? wg_ratelimiter_gc_entries+0x5d/0x450 [ 465.225251][ C1] _raw_spin_lock+0x2e/0x40 [ 465.225271][ C1] ? wg_ratelimiter_gc_entries+0x5d/0x450 [ 465.225291][ C1] wg_ratelimiter_gc_entries+0x5d/0x450 [ 465.225311][ C1] ? process_scheduled_works+0xa70/0x1860 [ 465.225327][ C1] process_scheduled_works+0xb5d/0x1860 [ 465.225355][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 465.225373][ C1] ? assign_work+0x3d5/0x5e0 [ 465.225389][ C1] worker_thread+0xa53/0xfc0 [ 465.225416][ C1] kthread+0x389/0x470 [ 465.225433][ C1] ? __pfx_worker_thread+0x10/0x10 [ 465.225447][ C1] ? __pfx_kthread+0x10/0x10 [ 465.225466][ C1] ret_from_fork+0x514/0xb70 [ 465.225483][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 465.225498][ C1] ? __switch_to+0xc79/0x1410 [ 465.225519][ C1] ? __pfx_kthread+0x10/0x10 [ 465.225537][ C1] ret_from_fork_asm+0x1a/0x30 [ 465.225561][ C1] [ 465.467508][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 465.474347][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 465.483435][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 465.493480][ T30] Call Trace: [ 465.496750][ T30] [ 465.499670][ T30] vpanic+0x56c/0xa60 [ 465.503650][ T30] ? __pfx___schedule+0x10/0x10 [ 465.508505][ T30] ? __pfx_vpanic+0x10/0x10 [ 465.513021][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 465.519183][ T30] panic+0xc5/0xd0 [ 465.522918][ T30] ? __pfx_panic+0x10/0x10 [ 465.527341][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 465.532715][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 465.538876][ T30] watchdog+0x102c/0x1030 [ 465.543209][ T30] ? watchdog+0x1c9/0x1030 [ 465.547645][ T30] kthread+0x389/0x470 [ 465.551730][ T30] ? __pfx_watchdog+0x10/0x10 [ 465.556400][ T30] ? __pfx_kthread+0x10/0x10 [ 465.560982][ T30] ret_from_fork+0x514/0xb70 [ 465.565561][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 465.570661][ T30] ? __switch_to+0xc79/0x1410 [ 465.575331][ T30] ? __pfx_kthread+0x10/0x10 [ 465.579915][ T30] ret_from_fork_asm+0x1a/0x30 [ 465.584682][ T30] [ 465.587953][ T30] Kernel Offset: disabled [ 465.592265][ T30] Rebooting in 86400 seconds..