last executing test programs: 4.708086454s ago: executing program 4 (id=1717): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x100) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda9880ffe00002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2], 0x64}}, 0x0) 4.564872398s ago: executing program 1 (id=1720): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0xfff, 0x5}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x4}, 0x38) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'pimreg1\x00', {0x3}, 0x2}) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @random="82341801d5e3", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @remote, @link_local, @remote}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYBLOB='\x00\x00', @ANYBLOB], 0x28}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000380)) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000200)) ioctl$PPPIOCSACTIVE(r4, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000000)="b2ff", 0x2}], 0x1) readv(r4, &(0x7f0000000040), 0x10) writev(r4, &(0x7f0000000500)=[{&(0x7f00000000c0)="1d6b", 0x2}], 0x1) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="05000000000000000000120c0000000000000000000000000000030000000000000000000000a41e3c227a160a62342208f9eeb1dbe9f06fbe5560a8710e6bba09c20691f8766bd23deabf698ee556a920c612a1de64229000a22e779e1fd7b3df31552f65873cc17980ff0d63ccf4411c2b895b1272a5525ca2db1df016e27dec5fb5c1556efe780b2a862d5c6c884ae3"], 0x0, 0x26}, 0x20) 4.431489466s ago: executing program 4 (id=1722): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="01530000000045", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e6576650000200002800605000800010000000400060a05000d0000000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x90) close(r2) socket(0x1d, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000007060102000000000000000007000003050001000700000008000640000000080900020073797a3000000010"], 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x0, "d30f388c52647612d91de4353d68b0fa00"}, 0x3c) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000280)={@multicast2, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500"}, 0x3c) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000200)={@empty, @empty, 0x0, "606b177019716ea6ac3801be6e0610e369c7b35d21ff744d7ed79c31e2b00600", 0x7, 0x0, 0x3}, 0x3c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000180)={@multicast2, @multicast2, 0xffff, "941621a61c5815f4678d8fd4a8e14b0447113c694d1fd55708018620fd419884"}, 0x3c) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f00000006c0)=0x6, 0x4) r6 = socket(0x10, 0x3, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@multicast1, @remote}, 0x8) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="340000001800010000000000000000001d010000150003000000008cdae7a7ff4d7a50020000af"], 0x34}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x304}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x5c9}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x3, 0x193765c1, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1b}, 0x48) 4.127613216s ago: executing program 1 (id=1725): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000a95317ce0923c90000000000950000000000000012ed5459ada369b7add086ac146ae770dff095e024897c527bf794b829e69ffec7e6dd1308ffd322639cb90e7062b166d00d57e65337c4b7ad33"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet(0x2, 0x80001, 0x84) listen(r1, 0x2f) listen(r1, 0x0) listen(r1, 0xaca) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c0044"], 0x154}}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r0, &(0x7f00000033c0)=[{{&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/148, 0x94}, {0x0}, {&(0x7f0000000580)=""/120, 0x78}], 0x3, &(0x7f0000000600)=""/247, 0xf7}, 0x6}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000700)=""/185, 0xb9}, {&(0x7f00000007c0)=""/178, 0xb2}, {&(0x7f0000000880)=""/51, 0x33}, {&(0x7f00000008c0)=""/87, 0x57}], 0x4, &(0x7f0000000d00)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/241, 0xf1}, {&(0x7f0000000a80)=""/61, 0x3d}, {&(0x7f0000000ac0)=""/233, 0xe9}], 0x3}, 0x5}, {{&(0x7f0000000c00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000c80)}, 0x43084002}, {{&(0x7f0000002ec0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002f40)=""/35, 0x23}], 0x1, &(0x7f0000002fc0)=""/129, 0x81}, 0xa}, {{&(0x7f0000003080)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000003200)=[{&(0x7f0000003100)=""/239, 0xef}], 0x1, &(0x7f0000003240)=""/41, 0x29}, 0x12b1}, {{&(0x7f0000003280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000003300), 0x0, &(0x7f0000003340)=""/114, 0x72}}], 0x7, 0x2000, &(0x7f0000003580)={0x0, 0x3938700}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000001c0)=0x1b, 0x4) 4.061088914s ago: executing program 4 (id=1726): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)="6e6c1f0085d0faecd4c760e9f01662ff461a3da580b83378b09c58100d1b1db56b6637ebe0e5f52bfe8737196910a60b4ee9486a05ee523cafe9b81fc98483953e07b9fb5b606398998fb3fe3330f9e8c26039f5c4ba21fcefa4e45cdb1d8b2454f20a9573e3306618b392fb901d03fe6db1a061a3adfcf9053e9a6e6e7670ba35da82673247f0c6768aeb9bd000b3dbee13807447098a31e9381ddfb0625d0fb5690e583aca74fd20dd748f553444d32f48b5eebd4346578269b4f84b1fd0f9d00c0c68d978030015a2320e16458c77d645f8c40525", 0xd6}, {&(0x7f0000000080)="11d78d161eff7461e0f8ef3e94dedea091f8a0dc86161a87a5a13b9e733f2deceacffbd502df0c6b0e6691ae035417dffac7", 0x32}], 0x2}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f00000005c0)={&(0x7f00000000c0)=@can={{}, 0x86, 0x0, 0x4, 0x2, '\x00\x00\x00\x00\a\x00'}, 0x210}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='mm_page_alloc\x00', r6}, 0x10) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) listen(r7, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x43, &(0x7f0000000040), 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b00)={@cgroup=r9, 0xb, 0x1, 0x8000, 0x0, 0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) 3.971355183s ago: executing program 0 (id=1727): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100786672000000"], 0x3c}}, 0x1) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x0, 0x0, 0x0, 0x0, {0x10}}, 0x14}}, 0xb2303188391b57be) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000500", 0x33fe0}], 0x1}, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000640), &(0x7f0000000680)=0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x20000400) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x2}}, 0x10) sendmmsg$inet6(r2, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="20000000000000002900000032000000ff010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="00000000eb74c9c3118ab9d9499d1237d5e7080159a59f24a502ce3c4043"], 0x20}}], 0x1, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000540)=ANY=[@ANYRESOCT=r4, @ANYRESOCT], 0x31) r6 = socket(0x10, 0x803, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r6, 0x0, 0x42, &(0x7f00000003c0)={'IDLETIMER\x00'}, &(0x7f0000000400)=0x1e) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0xfffffffffffffdb3) accept(r7, 0x0, 0x0) ioctl$BTRFS_IOC_SEND(r7, 0x40489426, &(0x7f0000000240)={{r6}, 0x9, &(0x7f0000000080)=[0x1ff, 0x9, 0x7, 0x6, 0x4, 0x2, 0x200, 0x3ff, 0x9], 0x7fffffff, 0x0, 0x1}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x200, {0x2a}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0xf6cf5d432ccf8c52}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8002, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000000340)=""/69}, 0x20) ioctl$SIOCRSSL2CALL(r6, 0x89e2, &(0x7f0000000100)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) epoll_create1(0x0) socket$inet_tcp(0x2, 0x1, 0x0) 3.938632261s ago: executing program 4 (id=1728): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x40000000}, 0x7}, 0x48) 3.782240009s ago: executing program 4 (id=1731): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000007801070000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6b201b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x0) 3.57723612s ago: executing program 4 (id=1732): unshare(0x68040200) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @empty}}]}, 0x20000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) unshare(0x68040200) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$alg(0x26, 0x5, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) (async) socket$inet6(0xa, 0x80001, 0x0) (async) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @empty}}]}, 0x20000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r3, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) (async) 3.249071098s ago: executing program 0 (id=1734): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000d000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.152880363s ago: executing program 1 (id=1735): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) socket$kcm(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @empty}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) socketpair(0x1e, 0x4, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r4, &(0x7f0000009080)=[{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffff039, 0x24}], 0x4924924924925a7, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x58, r5, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x58}}, 0x20088080) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xb2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7ff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x154d2218}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40448c1}, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e000e401"], 0x40}}, 0x0) sendmsg$key(r8, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x9, 0xae, 0x2, 0xc0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000600)={'ah\x00'}, &(0x7f0000000640)=0x1e) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000500)={0x6, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000005c0)={r10}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) 3.001049708s ago: executing program 0 (id=1736): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001301ed1d5d534cadea36a46a5bc1177322f88ebcaff13e74eb8ee870352b73f9925d0def4ed97d3d098b2ff5bf32bda9d33213430e1b9ff448386bb4e2299957c87434de6ec4118ae21a194a04c909b9e2ff2b3cf2f20a8f0be849cefbc957e9676b8c5b4d0fdcece18be8cfc60424af3aaeed08c841bf13bf52b6ef5cab1234ac1b2353ba5df11664fa8e7b4105fd1d247126ef83fb8f4c55ed9f402d6913", @ANYRES16=0x0, @ANYBLOB="04002bbd70000000000012000000"], 0x14}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0xfffffffd) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffd04, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x60}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xfff}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0x4}, @TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0x7}, @TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0x6}]}}]}, 0x70}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000180000020000000000000000020000000000000600000000060015000400000008000600040000007fd990408082565867f911a27b4fbc4e8cbb6af65eae9b1c23b1b042fd36ec6f1bfc9cd4"], 0x2c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000100)='svcrdma_wc_read\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) r6 = socket(0x18, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x2, @local, 'geneve1\x00'}}, 0x1e) sendmmsg$unix(r6, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x4004020}}], 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYRES8=r6, @ANYRESDEC=0x0, @ANYBLOB="010000000000000000000100000014000180060001000200000008000300ffffffff"], 0x28}}, 0x0) socket$igmp(0x2, 0x3, 0x2) 1.411000737s ago: executing program 1 (id=1738): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000180)={@val, @void, @eth={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x32) r4 = socket$kcm(0x2, 0x0, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xd, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r4, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0x4}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ppoll(&(0x7f0000000180)=[{r7}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, &(0x7f0000000180), 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0xb9f, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}]}, &(0x7f00000007c0)=0x10) 1.305318961s ago: executing program 0 (id=1739): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x3}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 1.304290705s ago: executing program 2 (id=1740): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100), 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x3e, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb499419be4f9142da0bc21470e441225642855b5f2b4b67efbff2fdf98328de9434031348589b763d46d14810acc5f7000000e3ffffff00"}, 0xd8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 1.144960079s ago: executing program 2 (id=1742): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000095"], &(0x7f0000000700)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x64) r2 = socket$inet(0x2, 0x3, 0x8) r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x4, 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) sendto$inet6(r5, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r5, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000003c80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000640)={r6, 0x9, 0x0, [0x0, 0x0, 0x0, 0x400], [0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd74e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0xb062, 0x8, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x3, 0x1, 0x1, 0x5]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused, @devid=r6}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000023c0)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r6, @ANYBLOB="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"]) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000200)={r6, 0x9, 0x8, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f00000013c0)={r6, "9125587169283e8e19a9c00264ea2b63"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000240)={r6, 0x5, 0x1, [0x7f, 0x7fffffff, 0x2, 0x4, 0x9], [0x5a0, 0xade, 0x3, 0x4, 0x2, 0x8000000000000001, 0x4, 0xfff, 0x6, 0x7ff, 0x0, 0x3, 0x1, 0x50bb9b80, 0x22a4, 0x7ff, 0x9, 0x203, 0x531, 0x6, 0x4, 0x8001, 0x80000, 0xe, 0x9, 0x8, 0x5, 0x0, 0x8, 0x8, 0x6, 0xdfd6, 0x3, 0x9bb7, 0x7, 0x8, 0x8, 0xfffffffffffffff7, 0x2, 0x8, 0x10000, 0x7f, 0x3c41, 0xf52, 0x10000, 0xffffffffffffeecc, 0xd33, 0xff, 0x2fa2, 0x5, 0x5, 0x1, 0x2, 0x8, 0x2, 0x2000000000008, 0x400, 0x2, 0x1, 0x438e000, 0x321, 0x8b2a, 0x80, 0x3069, 0x9721, 0x4, 0x9, 0x40, 0x100000000, 0x81, 0xf9d, 0x7, 0x100000001, 0x5, 0x4, 0x840c, 0x5, 0x4, 0x4, 0x5, 0x1, 0x202000000000000, 0x1, 0x7, 0xfff, 0xffff, 0x9, 0x9, 0x3, 0x3f, 0x6, 0xafdf, 0x1, 0x3, 0x5, 0x4, 0xffffffff00000000, 0x3, 0x6, 0x6, 0x4, 0x2, 0x2, 0x2, 0x3, 0x6, 0x10001, 0xfffffffffffeffff, 0x1, 0x4, 0x0, 0x80, 0xfffffffffffffffd, 0xc, 0x4, 0xfffffffffffffe01, 0x101, 0x6, 0x6, 0x20, 0x2]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000600)={{}, 0x0, 0x2, @unused=[0x0, 0x1, 0x400, 0x6], @devid=r6}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000980)={{r0}, 0x0, 0xa, @inherit={0x60, &(0x7f0000000080)={0x0, 0x3, 0x3, 0x0, {0x36, 0x2, 0x8000, 0x800, 0x6}, [0x67f, 0x0, 0x6]}}, @devid=r6}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0080ff0000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4}}, 0x26) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x30, r8, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) 1.07327334s ago: executing program 3 (id=1743): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x23}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11f3505dd690c56d}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc8, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfc01}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}]}, 0xc8}, 0x1, 0x0, 0x0, 0x44000}, 0x2877f35415eb5364) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1004}]}, 0x24}}, 0x0) 1.073001228s ago: executing program 0 (id=1744): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001400000000000000000000000800120000000200000000000200000006000000000000000000000000000000e0000002000000000000000000000000ff02000000000000000000000000000105000500000000000a00000000000000fe8000000000000000000000000000aa000000000000000005000600ff4700000a000000000000000000000000000000b1"], 0xa0}}, 0x0) 952.906731ms ago: executing program 0 (id=1745): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000a95317ce0923c90000000000950000000000000012ed5459ada369b7add086ac146ae770dff095e024897c527bf794b829e69ffec7e6dd1308ffd322639cb90e7062b166d00d57e65337c4b7ad33"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet(0x2, 0x80001, 0x84) listen(r1, 0x2f) listen(r1, 0x0) listen(r1, 0xaca) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c0044"], 0x154}}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r0, &(0x7f00000033c0)=[{{&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/148, 0x94}, {0x0}, {&(0x7f0000000580)=""/120, 0x78}], 0x3, &(0x7f0000000600)=""/247, 0xf7}, 0x6}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000700)=""/185, 0xb9}, {&(0x7f00000007c0)=""/178, 0xb2}, {&(0x7f0000000880)=""/51, 0x33}, {&(0x7f00000008c0)=""/87, 0x57}], 0x4, &(0x7f0000000d00)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/241, 0xf1}, {&(0x7f0000000a80)=""/61, 0x3d}, {&(0x7f0000000ac0)=""/233, 0xe9}], 0x3}, 0x5}, {{&(0x7f0000000c00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000c80)}, 0x43084002}, {{&(0x7f0000002ec0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002f40)=""/35, 0x23}], 0x1, &(0x7f0000002fc0)=""/129, 0x81}, 0xa}, {{&(0x7f0000003080)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000003200)=[{&(0x7f0000003100)=""/239, 0xef}], 0x1, &(0x7f0000003240)=""/41, 0x29}, 0x12b1}, {{&(0x7f0000003280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000003300), 0x0, &(0x7f0000003340)=""/114, 0x72}}], 0x7, 0x2000, &(0x7f0000003580)={0x0, 0x3938700}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000001c0)=0x1b, 0x4) 853.25449ms ago: executing program 2 (id=1746): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) 767.915717ms ago: executing program 3 (id=1747): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000004200)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f00800", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000004100)=[{0x0}, {&(0x7f0000001a00)=""/63, 0x3f}], 0x2}, 0x8}], 0x1, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000001a40)=[{{0x0, 0x6, &(0x7f00000004c0)=[{&(0x7f0000000200)='L', 0x1}, {0x0}], 0x2}}], 0xfffffdef, 0x0) 720.105251ms ago: executing program 2 (id=1748): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x100) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda9887fff00002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2], 0x64}}, 0x0) 611.608367ms ago: executing program 3 (id=1749): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002840)={0x14, 0x2e, 0x100, 0x70bd25, 0x25dfdbff, {0x19}}, 0x33fe0}, 0x1, 0x0, 0x0, 0x50}, 0x40) (async) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) (async) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x200000c, 0x80010, r0, 0x0) (async) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$l2tp6(r3, &(0x7f0000000100)="870c", 0x2, 0x4000, 0x0, 0x0) 469.377935ms ago: executing program 3 (id=1750): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000000), &(0x7f0000000280)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000005001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 388.660223ms ago: executing program 2 (id=1751): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000001140)=ANY=[@ANYBLOB="034886dd05000a000000000000006000000001002100fe880001000000000000060000007d01ff0200000000000000000000000000080000eca140", @ANYRES16, @ANYRES8, @ANYRES32=r0], 0xfdef) 349.398591ms ago: executing program 3 (id=1752): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x2b}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x2000041}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1300000056000100000000000000000007"], 0x18}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000fc0), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x12, r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000340)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000181f00002b66f0380e24f2630a0000000002fffffe000000140001"], 0x30}}, 0x20004004) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00010000400000000000000a008000", @ANYRES32=0x0], 0x30}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x24, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GROUP_FWD_MASK={0x6}, @IFLA_BRPORT_PROXYARP_WIFI={0x5}, @IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_VLAN_TUNNEL={0x5}]}}}]}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000001600000000000000008500000017000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socket(0x2, 0x80802, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet(0x10, 0x3, 0x0) 213.662751ms ago: executing program 1 (id=1753): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="040100001a0001000002000000000000e000000200000a00000000000000000020012658157cbc00000000000000000000000000010000000000000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000000003c000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e00"/188], 0x104}}, 0x0) 149.306997ms ago: executing program 3 (id=1754): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000767, &(0x7f0000008400)={0x2, 0x4e25, @broadcast}, 0xe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0xc010800) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, 0x0, 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r4, &(0x7f0000000940), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) setsockopt$sock_int(r5, 0x28, 0x2c, 0x0, 0x0) write$cgroup_freezer_state(r3, 0x0, 0x0) read(r3, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r6, 0x0, 0x0) r7 = openat$cgroup_procs(r2, 0x0, 0x2, 0x0) close(r2) write$cgroup_pid(r7, 0x0, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) 58.822444ms ago: executing program 1 (id=1755): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYBLOB="080003000800000008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=r1], 0x60}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000001080)=0x4, 0x4) 0s ago: executing program 2 (id=1756): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x210, 0x2b0, 0x2b0, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00'}, 0xa00, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) kernel console output (not intermixed with test programs): AD) flags 0x0 phys_seg 1 prio class 0 [ 122.053516][ T6502] Buffer I/O error on dev nbd6, logical block 0, async page read [ 122.091159][ T6502] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.109586][ T6660] netlink: 'syz.4.442': attribute type 11 has an invalid length. [ 122.117366][ T6660] netlink: 211132 bytes leftover after parsing attributes in process `syz.4.442'. [ 122.161705][ T6502] Buffer I/O error on dev nbd6, logical block 0, async page read [ 122.170018][ T6664] xt_TPROXY: Can be used only with -p tcp or -p udp [ 122.189334][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.440'. [ 122.207836][ T6502] Dev nbd6: unable to read RDB block 0 [ 122.213767][ T6502] nbd6: unable to read partition table [ 122.261656][ T6502] ldm_validate_partition_table(): Disk read failed. [ 122.287885][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.440'. [ 122.312493][ T6502] Dev nbd6: unable to read RDB block 0 [ 122.339840][ T6671] netlink: 36 bytes leftover after parsing attributes in process `syz.4.442'. [ 122.351192][ T6502] nbd6: unable to read partition table [ 122.361447][ T6673] netlink: 60 bytes leftover after parsing attributes in process `syz.0.446'. [ 122.400107][ T5240] block nbd7: Receive control failed (result -107) [ 122.489360][ T6673] sit0: entered promiscuous mode [ 122.499062][ T6658] nbd7: detected capacity change from 0 to 256 [ 122.525482][ T6673] netlink: 'syz.0.446': attribute type 1 has an invalid length. [ 122.551616][ T6502] block nbd7: Dead connection, failed to find a fallback [ 123.700611][ T5240] block nbd8: Receive control failed (result -107) [ 123.739656][ T6720] nbd8: detected capacity change from 0 to 256 [ 123.806228][ T5252] block nbd8: Dead connection, failed to find a fallback [ 123.833351][ T6729] netlink: 'syz.1.465': attribute type 4 has an invalid length. [ 124.126242][ T6739] syzkaller1: entered promiscuous mode [ 124.158781][ T6739] syzkaller1: entered allmulticast mode [ 124.529218][ T6758] syzkaller1: entered promiscuous mode [ 124.542171][ T6758] syzkaller1: entered allmulticast mode [ 124.934236][ T6770] bond_slave_0: entered promiscuous mode [ 124.940369][ T6770] bond_slave_1: entered promiscuous mode [ 124.952651][ T6770] macvtap2: entered promiscuous mode [ 124.977988][ T6770] bond0: entered promiscuous mode [ 124.998161][ T6770] macvtap2: entered allmulticast mode [ 125.007629][ T6770] bond0: entered allmulticast mode [ 125.019374][ T6770] bond_slave_0: entered allmulticast mode [ 125.025274][ T6770] bond_slave_1: entered allmulticast mode [ 125.060763][ T6770] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 125.092197][ T6777] netlink: 'syz.0.481': attribute type 21 has an invalid length. [ 125.102834][ T6777] netlink: 'syz.0.481': attribute type 5 has an invalid length. [ 125.141363][ T6780] ip6t_srh: unknown srh match flags 4001 [ 125.167000][ T6780] netlink: 'syz.4.486': attribute type 33 has an invalid length. [ 125.471204][ T6796] netlink: zone id is out of range [ 125.482924][ T6796] delete_channel: no stack [ 125.488414][ T6796] netlink: 'syz.4.490': attribute type 4 has an invalid length. [ 125.923351][ T6818] __nla_validate_parse: 18 callbacks suppressed [ 125.923491][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.497'. [ 126.022248][ T6821] pimreg: entered allmulticast mode [ 126.336657][ T6831] netlink: 'syz.2.500': attribute type 4 has an invalid length. [ 126.359639][ T6831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.480107][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.503'. [ 126.642123][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'. [ 127.237208][ T6867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.509'. [ 127.595038][ T6881] netlink: 'syz.3.515': attribute type 10 has an invalid length. [ 127.632708][ T6884] dccp_v4_rcv: dropped packet with invalid checksum [ 127.633765][ T6881] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.515'. [ 127.678622][ T6881] openvswitch: netlink: Flow key attr not present in new flow. [ 127.695057][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.516'. [ 127.761052][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.517'. [ 127.825262][ T6889] bond_slave_0: entered promiscuous mode [ 127.831495][ T6889] bond_slave_1: entered promiscuous mode [ 127.837365][ T6889] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 127.845354][ T6889] batadv0: entered promiscuous mode [ 127.893673][ T6889] macvtap1: entered promiscuous mode [ 127.900487][ T6889] bond0: entered promiscuous mode [ 127.906466][ T6889] macvtap1: entered allmulticast mode [ 127.921044][ T6889] bond0: entered allmulticast mode [ 127.926336][ T6889] bond_slave_0: entered allmulticast mode [ 127.941564][ T6889] bond_slave_1: entered allmulticast mode [ 127.950896][ T6889] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 127.964487][ T6889] batadv0: entered allmulticast mode [ 127.982863][ T6889] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 127.990027][ T6897] netlink: 36 bytes leftover after parsing attributes in process `syz.1.519'. [ 128.011104][ T6893] netlink: 'syz.2.517': attribute type 21 has an invalid length. [ 128.039050][ T6893] netlink: 128 bytes leftover after parsing attributes in process `syz.2.517'. [ 128.091033][ T6893] netlink: 'syz.2.517': attribute type 5 has an invalid length. [ 128.114349][ T6893] netlink: 3 bytes leftover after parsing attributes in process `syz.2.517'. [ 128.145660][ T6895] vlan2: entered promiscuous mode [ 129.387786][ T6952] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 129.453056][ T6952] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 129.896457][ T6963] syzkaller1: entered promiscuous mode [ 129.908163][ T6963] syzkaller1: entered allmulticast mode [ 130.339882][ T6991] netlink: 'syz.4.543': attribute type 4 has an invalid length. [ 130.378777][ T6991] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.830093][ T7018] netlink: 'syz.0.547': attribute type 11 has an invalid length. [ 131.016301][ T7023] Cannot find set identified by id 0 to match [ 131.196613][ T7028] xt_TPROXY: Can be used only with -p tcp or -p udp [ 131.536169][ T7047] __nla_validate_parse: 9 callbacks suppressed [ 131.536191][ T7047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.560'. [ 131.682695][ T7050] netlink: 20 bytes leftover after parsing attributes in process `syz.1.562'. [ 131.780112][ T7053] netlink: 24 bytes leftover after parsing attributes in process `syz.0.563'. [ 131.891912][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.564'. [ 131.911698][ T7056] netlink: 44 bytes leftover after parsing attributes in process `syz.4.564'. [ 132.155568][ T7066] netlink: 36 bytes leftover after parsing attributes in process `syz.0.567'. [ 132.308682][ T7069] netlink: 20 bytes leftover after parsing attributes in process `syz.2.569'. [ 132.380120][ T7069] vlan2: entered promiscuous mode [ 133.050876][ T7091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.577'. [ 133.137077][ T7094] tipc: Started in network mode [ 133.154124][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.163741][ T7094] tipc: Node identity ac1414, cluster identity 4711 [ 133.166723][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.194750][ T7094] tipc: New replicast peer: 0.0.0.0 [ 133.219257][ T7094] tipc: Enabled bearer , priority 10 [ 133.450133][ T7105] netlink: 'syz.4.583': attribute type 11 has an invalid length. [ 133.628761][ T7112] netlink: 20 bytes leftover after parsing attributes in process `syz.3.585'. [ 133.660914][ T7112] vlan2: entered promiscuous mode [ 133.922664][ T7122] can: request_module (can-proto-0) failed. [ 134.038758][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.592'. [ 134.340798][ T8] tipc: Node number set to 2886996992 [ 134.371869][ T7140] Cannot find set identified by id 0 to match [ 135.541581][ T5240] block nbd9: Receive control failed (result -107) [ 135.577761][ T7188] nbd9: detected capacity change from 0 to 256 [ 135.596916][ T5242] block nbd9: Dead connection, failed to find a fallback [ 135.649101][ T5242] block nbd9: shutting down sockets [ 135.654674][ T5242] blk_print_req_error: 27 callbacks suppressed [ 135.654691][ T5242] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.703761][ T5242] buffer_io_error: 27 callbacks suppressed [ 135.703782][ T5242] Buffer I/O error on dev nbd9, logical block 0, async page read [ 135.767714][ T5242] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.812223][ T5242] Buffer I/O error on dev nbd9, logical block 0, async page read [ 135.856368][ T5242] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.898851][ T5242] Buffer I/O error on dev nbd9, logical block 0, async page read [ 135.933332][ T5242] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.956443][ T5242] Buffer I/O error on dev nbd9, logical block 0, async page read [ 135.970863][ T5242] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.005565][ T5242] Buffer I/O error on dev nbd9, logical block 0, async page read [ 136.055843][ T5242] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.065424][ T5242] Buffer I/O error on dev nbd9, logical block 0, async page read [ 136.087735][ T5242] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.107596][ T5242] Buffer I/O error on dev nbd9, logical block 0, async page read [ 136.132706][ T5242] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.156866][ T5242] Buffer I/O error on dev nbd9, logical block 0, async page read [ 136.165304][ T5242] ldm_validate_partition_table(): Disk read failed. [ 136.172668][ T5242] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.203554][ T5242] Buffer I/O error on dev nbd9, logical block 0, async page read [ 136.251246][ T5242] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.284566][ T5242] Buffer I/O error on dev nbd9, logical block 0, async page read [ 136.293269][ T5242] Dev nbd9: unable to read RDB block 0 [ 136.308345][ T5242] nbd9: unable to read partition table [ 136.319402][ T5242] ldm_validate_partition_table(): Disk read failed. [ 136.326399][ T5242] Dev nbd9: unable to read RDB block 0 [ 136.360542][ T5242] nbd9: unable to read partition table [ 136.669087][ T7226] __nla_validate_parse: 36 callbacks suppressed [ 136.669108][ T7226] netlink: 48 bytes leftover after parsing attributes in process `syz.2.627'. [ 136.848207][ T7235] netlink: 20 bytes leftover after parsing attributes in process `syz.1.630'. [ 136.880861][ T7235] vlan2: entered promiscuous mode [ 136.974953][ T7239] netlink: 'syz.4.631': attribute type 4 has an invalid length. [ 137.023360][ T7239] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.631'. [ 137.032967][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.629'. [ 137.138013][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.629'. [ 137.212825][ T5240] block nbd10: Receive control failed (result -107) [ 137.257722][ T7240] nbd10: detected capacity change from 0 to 256 [ 137.299906][ T7197] block nbd10: Dead connection, failed to find a fallback [ 137.418401][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.637'. [ 137.685667][ T7260] netlink: 'syz.0.635': attribute type 10 has an invalid length. [ 137.828054][ T7260] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.862864][ T7260] team0: entered promiscuous mode [ 137.880011][ T7260] team_slave_0: entered promiscuous mode [ 137.910236][ T7260] team_slave_1: entered promiscuous mode [ 137.938746][ T7260] team0: entered allmulticast mode [ 137.944561][ T7260] team_slave_0: entered allmulticast mode [ 137.959705][ T7260] team_slave_1: entered allmulticast mode [ 137.980909][ T7260] bond0: (slave team0): Enslaving as an active interface with an up link [ 138.262424][ T7285] netlink: 40 bytes leftover after parsing attributes in process `syz.0.648'. [ 138.567841][ T7300] netlink: 36 bytes leftover after parsing attributes in process `syz.0.653'. [ 138.702734][ T7307] tipc: Started in network mode [ 138.732094][ T7307] tipc: Node identity f6bc7f1d2a6, cluster identity 4711 [ 138.784231][ T7307] tipc: Enabled bearer , priority 0 [ 138.909691][ T7319] netlink: 'syz.0.655': attribute type 1 has an invalid length. [ 138.939943][ T7319] netlink: 9352 bytes leftover after parsing attributes in process `syz.0.655'. [ 138.977230][ T7319] netlink: 'syz.0.655': attribute type 1 has an invalid length. [ 139.006700][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.655'. [ 139.191568][ T7325] Driver unsupported XDP return value 0 on prog (id 269) dev N/A, expect packet loss! [ 139.257078][ T7314] tipc: Resetting bearer [ 139.296942][ T7319] netlink: 'syz.0.655': attribute type 1 has an invalid length. [ 139.304884][ T7322] vlan2: entered promiscuous mode [ 139.326155][ T7319] netlink: 'syz.0.655': attribute type 1 has an invalid length. [ 139.337111][ T7319] netlink: 'syz.0.655': attribute type 1 has an invalid length. [ 139.361147][ T7319] netlink: 'syz.0.655': attribute type 1 has an invalid length. [ 139.369943][ T7307] tipc: Resetting bearer [ 139.610892][ T7326] xt_TCPMSS: Only works on TCP SYN packets [ 139.787814][ T5336] tipc: Node number set to 3705437981 [ 140.963715][ T7307] tipc: Disabling bearer [ 141.057573][ T7332] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 141.100048][ T7332] gretap1: entered promiscuous mode [ 141.116060][ T7332] gretap1: entered allmulticast mode [ 141.715141][ T7365] xt_TPROXY: Can be used only with -p tcp or -p udp [ 141.765703][ T7368] FAULT_INJECTION: forcing a failure. [ 141.765703][ T7368] name failslab, interval 1, probability 0, space 0, times 0 [ 141.815892][ T7368] CPU: 1 UID: 0 PID: 7368 Comm: syz.3.672 Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 141.826564][ T7368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 141.836675][ T7368] Call Trace: [ 141.839996][ T7368] [ 141.842970][ T7368] dump_stack_lvl+0x241/0x360 [ 141.847738][ T7368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.853000][ T7368] ? __pfx__printk+0x10/0x10 [ 141.857996][ T7368] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 141.863504][ T7368] ? __pfx___might_resched+0x10/0x10 [ 141.868850][ T7368] should_fail_ex+0x3b0/0x4e0 [ 141.873691][ T7368] should_failslab+0xac/0x100 [ 141.878455][ T7368] ? sctp_datamsg_from_user+0x88/0xf20 [ 141.883962][ T7368] __kmalloc_cache_noprof+0x6c/0x2c0 [ 141.889332][ T7368] sctp_datamsg_from_user+0x88/0xf20 [ 141.894682][ T7368] ? __sk_mem_raise_allocated+0xa5f/0x1140 [ 141.900663][ T7368] sctp_sendmsg_to_asoc+0xf7e/0x1800 [ 141.906010][ T7368] ? sctp_v6_to_sk_saddr+0x101/0x1c0 [ 141.911533][ T7368] ? __asan_memcpy+0x40/0x70 [ 141.916185][ T7368] ? sctp_assoc_add_peer+0xe3c/0x15c0 [ 141.921638][ T7368] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 141.927402][ T7368] ? sctp_connect_new_asoc+0x3fe/0x6c0 [ 141.932999][ T7368] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 141.938826][ T7368] ? sctp_sendmsg+0xbb9/0x3520 [ 141.943613][ T7368] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 141.949178][ T7368] ? security_sctp_bind_connect+0x90/0xb0 [ 141.954913][ T7368] sctp_sendmsg+0x1bc3/0x3520 [ 141.959624][ T7368] ? __pfx_sctp_sendmsg+0x10/0x10 [ 141.964675][ T7368] ? __pfx_aa_sk_perm+0x10/0x10 [ 141.969557][ T7368] ? inet_sendmsg+0x330/0x390 [ 141.974338][ T7368] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 141.979641][ T7368] ? security_socket_sendmsg+0x87/0xb0 [ 141.985128][ T7368] __sock_sendmsg+0x1a6/0x270 [ 141.989921][ T7368] ____sys_sendmsg+0x525/0x7d0 [ 141.994795][ T7368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.000220][ T7368] __sys_sendmmsg+0x3b2/0x740 [ 142.004959][ T7368] ? __pfx___sys_sendmmsg+0x10/0x10 [ 142.010224][ T7368] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 142.016153][ T7368] ? ksys_write+0x23e/0x2c0 [ 142.020677][ T7368] ? __pfx_lock_release+0x10/0x10 [ 142.025727][ T7368] ? vfs_write+0x7c4/0xc90 [ 142.030251][ T7368] ? __mutex_unlock_slowpath+0x21d/0x750 [ 142.035899][ T7368] ? __pfx_vfs_write+0x10/0x10 [ 142.040700][ T7368] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 142.046700][ T7368] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 142.053050][ T7368] ? do_syscall_64+0x100/0x230 [ 142.057828][ T7368] __x64_sys_sendmmsg+0xa0/0xb0 [ 142.062709][ T7368] do_syscall_64+0xf3/0x230 [ 142.067361][ T7368] ? clear_bhb_loop+0x35/0x90 [ 142.072514][ T7368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.078431][ T7368] RIP: 0033:0x7f4b67579e79 [ 142.082857][ T7368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.102577][ T7368] RSP: 002b:00007f4b68407038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 142.111014][ T7368] RAX: ffffffffffffffda RBX: 00007f4b67715f80 RCX: 00007f4b67579e79 [ 142.119010][ T7368] RDX: 0000000000000001 RSI: 0000000020001380 RDI: 0000000000000005 [ 142.127121][ T7368] RBP: 00007f4b68407090 R08: 0000000000000000 R09: 0000000000000000 [ 142.135145][ T7368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.143135][ T7368] R13: 0000000000000000 R14: 00007f4b67715f80 R15: 00007ffc1324dbe8 [ 142.151144][ T7368] [ 142.572868][ T7387] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 142.833671][ T7406] __nla_validate_parse: 5 callbacks suppressed [ 142.833694][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.684'. [ 142.920619][ T7406] bond1: entered promiscuous mode [ 142.934610][ T7408] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 142.974486][ T7408] bridge1: entered promiscuous mode [ 142.994598][ T7408] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 143.036495][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.684'. [ 143.045397][ T7415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.687'. [ 143.102861][ T7406] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 143.134575][ T7406] bridge1: left promiscuous mode [ 143.170356][ T7406] bond1 (unregistering): Released all slaves [ 143.240021][ T7418] netlink: 'syz.4.689': attribute type 10 has an invalid length. [ 143.287700][ T7418] netlink: 55 bytes leftover after parsing attributes in process `syz.4.689'. [ 143.352318][ T7418] team0: Port device virt_wifi0 added [ 143.407191][ T7422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.690'. [ 143.488915][ T7422] vlan2: entered promiscuous mode [ 143.657774][ T7433] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.708458][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.711'. [ 144.859299][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.711'. [ 144.988267][ T5240] block nbd11: Receive control failed (result -107) [ 145.097677][ T7470] nbd11: detected capacity change from 0 to 256 [ 145.184031][ T5242] block nbd11: Dead connection, failed to find a fallback [ 145.233869][ T5242] block nbd11: shutting down sockets [ 145.258617][ T5242] blk_print_req_error: 27 callbacks suppressed [ 145.258641][ T5242] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.322233][ T5242] buffer_io_error: 27 callbacks suppressed [ 145.322252][ T5242] Buffer I/O error on dev nbd11, logical block 0, async page read [ 145.357754][ T5242] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.390191][ T5242] Buffer I/O error on dev nbd11, logical block 0, async page read [ 145.427644][ T5242] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.436843][ T5242] Buffer I/O error on dev nbd11, logical block 0, async page read [ 145.517612][ T5242] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.527162][ T5242] Buffer I/O error on dev nbd11, logical block 0, async page read [ 145.585765][ T5242] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.609482][ T5242] Buffer I/O error on dev nbd11, logical block 0, async page read [ 145.654562][ T5242] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.692709][ T5242] Buffer I/O error on dev nbd11, logical block 0, async page read [ 145.712779][ T7510] xt_TCPMSS: Only works on TCP SYN packets [ 145.727977][ T5242] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.747735][ T5242] Buffer I/O error on dev nbd11, logical block 0, async page read [ 145.777092][ T5242] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.810423][ T5242] Buffer I/O error on dev nbd11, logical block 0, async page read [ 145.851713][ T5242] ldm_validate_partition_table(): Disk read failed. [ 145.889690][ T5242] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.926538][ T5242] Buffer I/O error on dev nbd11, logical block 0, async page read [ 145.955221][ T5242] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.972523][ T5242] Buffer I/O error on dev nbd11, logical block 0, async page read [ 146.007829][ T5242] Dev nbd11: unable to read RDB block 0 [ 146.052386][ T5242] nbd11: unable to read partition table [ 146.100006][ T5242] ldm_validate_partition_table(): Disk read failed. [ 146.106984][ T5242] Dev nbd11: unable to read RDB block 0 [ 146.145807][ T5242] nbd11: unable to read partition table [ 146.619079][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.735'. [ 146.653560][ T7538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.735'. [ 146.704896][ T7540] ieee802154 phy0 wpan0: encryption failed: -90 [ 146.763573][ T7540] netlink: 892 bytes leftover after parsing attributes in process `syz.1.735'. [ 146.845515][ T7546] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 147.040235][ T7554] netlink: 'syz.0.738': attribute type 3 has an invalid length. [ 147.209631][ T7559] netlink: 'syz.4.743': attribute type 21 has an invalid length. [ 147.254031][ T7559] IPv6: NLM_F_CREATE should be specified when creating new route [ 147.276297][ T7559] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 147.284432][ T7559] IPv6: NLM_F_CREATE should be set when creating new route [ 147.292155][ T7559] IPv6: NLM_F_CREATE should be set when creating new route [ 147.299592][ T7559] IPv6: NLM_F_CREATE should be set when creating new route [ 147.807790][ T7585] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.895882][ T7587] __nla_validate_parse: 6 callbacks suppressed [ 147.895904][ T7587] netlink: 228 bytes leftover after parsing attributes in process `syz.1.753'. [ 147.920019][ T7588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.750'. [ 147.945935][ T7587] netlink: 'syz.1.753': attribute type 2 has an invalid length. [ 148.044786][ T7587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.753'. [ 148.096952][ T7593] netlink: 20 bytes leftover after parsing attributes in process `syz.0.755'. [ 148.147880][ T7593] vlan2: entered promiscuous mode [ 148.463038][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.760'. [ 148.531105][ T7608] Cannot find set identified by id 0 to match [ 149.231375][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 149.308277][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.772'. [ 149.440858][ T5240] block nbd12: Receive control failed (result -107) [ 149.464616][ T7643] xt_TPROXY: Can be used only with -p tcp or -p udp [ 149.499440][ T7636] nbd12: detected capacity change from 0 to 256 [ 149.510985][ T5242] block nbd12: Dead connection, failed to find a fallback [ 149.519644][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'. [ 149.539534][ T5242] block nbd12: shutting down sockets [ 149.546258][ T5242] ldm_validate_partition_table(): Disk read failed. [ 149.580845][ T5242] Dev nbd12: unable to read RDB block 0 [ 149.603819][ T5242] nbd12: unable to read partition table [ 149.638605][ T5242] ldm_validate_partition_table(): Disk read failed. [ 149.676107][ T5242] Dev nbd12: unable to read RDB block 0 [ 149.705809][ T5242] nbd12: unable to read partition table [ 149.931190][ T7652] netlink: 16 bytes leftover after parsing attributes in process `syz.2.780'. [ 150.001887][ T7652] netlink: 92 bytes leftover after parsing attributes in process `syz.2.780'. [ 150.373628][ T7673] Bluetooth: MGMT ver 1.23 [ 151.678848][ T7716] vlan2: entered promiscuous mode [ 152.325329][ T7740] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.781293][ T7744] ipvlan1: entered allmulticast mode [ 152.807209][ T7744] veth0_vlan: entered allmulticast mode [ 153.493500][ T7763] __nla_validate_parse: 3 callbacks suppressed [ 153.493524][ T7763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.817'. [ 153.866456][ T7771] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.819'. [ 153.902191][ T7772] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 153.919950][ T7777] netlink: 76 bytes leftover after parsing attributes in process `syz.3.823'. [ 153.959161][ T7772] batman_adv: batadv0: Adding interface: ip6gretap1 [ 153.973526][ T7772] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.017395][ T7772] batman_adv: batadv0: Interface activated: ip6gretap1 [ 154.059663][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.821'. [ 154.126451][ T7778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.148324][ T7778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.167992][ T7785] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 154.198947][ T7778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.212608][ T7778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.258987][ T7778] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 154.270784][ T7778] batman_adv: batadv0: Removing interface: ip6gretap1 [ 154.377772][ T7778] bond0: (slave batadv0): Releasing backup interface [ 154.408472][ T7778] batadv0 (unregistering): left allmulticast mode [ 154.938145][ T7814] FAULT_INJECTION: forcing a failure. [ 154.938145][ T7814] name failslab, interval 1, probability 0, space 0, times 0 [ 154.962073][ T7812] netlink: 20 bytes leftover after parsing attributes in process `syz.4.837'. [ 155.015331][ T7812] vlan3: entered promiscuous mode [ 155.023280][ T7814] CPU: 1 UID: 0 PID: 7814 Comm: syz.1.835 Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 155.035252][ T7814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 155.048680][ T7814] Call Trace: [ 155.052888][ T7814] [ 155.056395][ T7814] dump_stack_lvl+0x241/0x360 [ 155.061534][ T7814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.070450][ T7814] ? __pfx__printk+0x10/0x10 [ 155.075764][ T7814] ? __nla_validate_parse+0x26ce/0x3090 [ 155.081727][ T7814] should_fail_ex+0x3b0/0x4e0 [ 155.086505][ T7814] ? xfrm_state_alloc+0x22/0x2a0 [ 155.094721][ T7814] should_failslab+0xac/0x100 [ 155.100366][ T7814] ? xfrm_state_alloc+0x22/0x2a0 [ 155.106146][ T7814] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 155.113062][ T7814] ? aa_get_newest_label+0xff/0x6f0 [ 155.119765][ T7814] xfrm_state_alloc+0x22/0x2a0 [ 155.124612][ T7814] xfrm_add_sa+0x134a/0x3b60 [ 155.130029][ T7814] ? __pfx_xfrm_add_sa+0x10/0x10 [ 155.135651][ T7814] ? __nla_parse+0x40/0x60 [ 155.140445][ T7814] xfrm_user_rcv_msg+0x75b/0xa80 [ 155.145717][ T7814] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 155.151455][ T7814] ? __mutex_trylock_common+0x183/0x2e0 [ 155.157499][ T7814] ? __pfx___might_resched+0x10/0x10 [ 155.163298][ T7814] netlink_rcv_skb+0x1e3/0x430 [ 155.169163][ T7814] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 155.176534][ T7814] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 155.183575][ T7814] xfrm_netlink_rcv+0x79/0x90 [ 155.189027][ T7814] netlink_unicast+0x7f6/0x990 [ 155.194137][ T7814] ? __pfx_netlink_unicast+0x10/0x10 [ 155.200802][ T7814] ? __virt_addr_valid+0x183/0x530 [ 155.207118][ T7814] ? __check_object_size+0x49c/0x900 [ 155.214550][ T7814] ? bpf_lsm_netlink_send+0x9/0x10 [ 155.219767][ T7814] netlink_sendmsg+0x8e4/0xcb0 [ 155.226719][ T7814] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.233697][ T7814] ? __import_iovec+0x536/0x820 [ 155.239302][ T7814] ? aa_sock_msg_perm+0x91/0x160 [ 155.244699][ T7814] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 155.250774][ T7814] ? security_socket_sendmsg+0x87/0xb0 [ 155.258665][ T7814] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.264012][ T7814] __sock_sendmsg+0x221/0x270 [ 155.268770][ T7814] ____sys_sendmsg+0x525/0x7d0 [ 155.273709][ T7814] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.279400][ T7814] __sys_sendmsg+0x2b0/0x3a0 [ 155.284567][ T7814] ? __pfx___sys_sendmsg+0x10/0x10 [ 155.290326][ T7814] ? vfs_write+0x7c4/0xc90 [ 155.295422][ T7814] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.302181][ T7814] ? do_syscall_64+0x100/0x230 [ 155.307174][ T7814] ? do_syscall_64+0xb6/0x230 [ 155.311874][ T7814] do_syscall_64+0xf3/0x230 [ 155.316569][ T7814] ? clear_bhb_loop+0x35/0x90 [ 155.321877][ T7814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.327792][ T7814] RIP: 0033:0x7fe0f3d79e79 [ 155.333845][ T7814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.355676][ T7814] RSP: 002b:00007fe0f4bca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.366973][ T7814] RAX: ffffffffffffffda RBX: 00007fe0f3f15f80 RCX: 00007fe0f3d79e79 [ 155.377112][ T7814] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 155.386281][ T7814] RBP: 00007fe0f4bca090 R08: 0000000000000000 R09: 0000000000000000 [ 155.396290][ T7814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.405978][ T7814] R13: 0000000000000000 R14: 00007fe0f3f15f80 R15: 00007ffc206f3ff8 [ 155.414192][ T7814] [ 155.506347][ T7821] bridge0: port 3(macvlan2) entered blocking state [ 155.527028][ T7821] bridge0: port 3(macvlan2) entered disabled state [ 155.597954][ T7821] macvlan2: entered allmulticast mode [ 155.636549][ T7821] macvlan2: entered promiscuous mode [ 155.704609][ T7831] netlink: 'syz.1.843': attribute type 4 has an invalid length. [ 155.739058][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.842'. [ 155.778751][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.842'. [ 155.879608][ T5240] block nbd13: Receive control failed (result -107) [ 155.901130][ T7835] ipvlan1: entered allmulticast mode [ 155.907970][ T7835] veth0_vlan: entered allmulticast mode [ 155.940363][ T7827] nbd13: detected capacity change from 0 to 256 [ 155.959033][ T5242] block nbd13: Dead connection, failed to find a fallback [ 156.013729][ T5242] block nbd13: shutting down sockets [ 156.029777][ T5242] blk_print_req_error: 64 callbacks suppressed [ 156.029799][ T5242] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.095313][ T5242] buffer_io_error: 64 callbacks suppressed [ 156.095334][ T5242] Buffer I/O error on dev nbd13, logical block 0, async page read [ 156.158905][ T5242] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.205418][ T5242] Buffer I/O error on dev nbd13, logical block 0, async page read [ 156.232546][ T5242] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.250821][ T5242] Buffer I/O error on dev nbd13, logical block 0, async page read [ 156.263981][ T7849] netlink: 92 bytes leftover after parsing attributes in process `syz.4.849'. [ 156.281844][ T5242] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.297785][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.849'. [ 156.316511][ T5242] Buffer I/O error on dev nbd13, logical block 0, async page read [ 156.351549][ T7849] netlink: 20 bytes leftover after parsing attributes in process `syz.4.849'. [ 156.364417][ T5242] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.375325][ T5242] Buffer I/O error on dev nbd13, logical block 0, async page read [ 156.405477][ T5242] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.424858][ T5242] Buffer I/O error on dev nbd13, logical block 0, async page read [ 156.439835][ T5242] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.507195][ T5242] Buffer I/O error on dev nbd13, logical block 0, async page read [ 156.522609][ T5242] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.567515][ T5242] Buffer I/O error on dev nbd13, logical block 0, async page read [ 156.591509][ T5242] ldm_validate_partition_table(): Disk read failed. [ 156.616673][ T5242] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.633779][ T5242] Buffer I/O error on dev nbd13, logical block 0, async page read [ 156.651399][ T5242] I/O error, dev nbd13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.684858][ T7860] syzkaller1: entered promiscuous mode [ 156.699800][ T7860] syzkaller1: entered allmulticast mode [ 156.709093][ T5242] Buffer I/O error on dev nbd13, logical block 0, async page read [ 156.747762][ T5242] Dev nbd13: unable to read RDB block 0 [ 156.767924][ T5242] nbd13: unable to read partition table [ 156.822860][ T5242] ldm_validate_partition_table(): Disk read failed. [ 156.851847][ T5242] Dev nbd13: unable to read RDB block 0 [ 156.872607][ T5242] nbd13: unable to read partition table [ 157.363480][ T5240] block nbd14: Receive control failed (result -107) [ 157.415099][ T7887] dccp_invalid_packet: P.Data Offset(4) too small [ 157.448041][ T7881] nbd14: detected capacity change from 0 to 256 [ 157.540756][ T5242] block nbd14: Dead connection, failed to find a fallback [ 158.193819][ T7912] macvlan2: left allmulticast mode [ 158.209340][ T7912] macvlan2: left promiscuous mode [ 158.215857][ T7912] bridge0: port 3(macvlan2) entered disabled state [ 158.235376][ T7912] bridge_slave_1: left allmulticast mode [ 158.243444][ T7912] bridge_slave_1: left promiscuous mode [ 158.259451][ T7915] netlink: 'syz.3.874': attribute type 3 has an invalid length. [ 158.268426][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.297940][ T7912] €Β: left allmulticast mode [ 158.303075][ T7912] €Β: left promiscuous mode [ 158.325642][ T7912] bridge0: port 1(€Β) entered disabled state [ 158.466970][ T7924] netlink: 'syz.2.876': attribute type 21 has an invalid length. [ 158.487765][ T7925] netlink: 'syz.3.874': attribute type 13 has an invalid length. [ 158.794971][ T7939] x_tables: unsorted underflow at hook 2 [ 159.360894][ T7959] __nla_validate_parse: 8 callbacks suppressed [ 159.360919][ T7959] netlink: 16 bytes leftover after parsing attributes in process `syz.3.888'. [ 159.613543][ T7964] netlink: 'syz.2.890': attribute type 3 has an invalid length. [ 159.651962][ T7964] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.890'. [ 159.805060][ T7977] netlink: 'syz.2.890': attribute type 13 has an invalid length. [ 159.842338][ T7976] ip6tnl1: entered promiscuous mode [ 159.861534][ T7976] ip6tnl1: entered allmulticast mode [ 160.123370][ T7992] xt_hashlimit: invalid rate [ 160.130515][ T7988] syzkaller1: entered promiscuous mode [ 160.136668][ T7988] syzkaller1: entered allmulticast mode [ 160.137906][ T7993] syz.2.899 uses old SIOCAX25GETINFO [ 160.378626][ T8006] netlink: 28 bytes leftover after parsing attributes in process `syz.4.900'. [ 160.864170][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.904'. [ 160.988098][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'. [ 161.099712][ T5240] block nbd15: Receive control failed (result -107) [ 161.208569][ T8022] nbd15: detected capacity change from 0 to 256 [ 161.234597][ T8035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.910'. [ 161.254542][ T7965] block nbd15: Dead connection, failed to find a fallback [ 161.334737][ T8034] xt_ipcomp: unknown flags 12 [ 161.542134][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'. [ 161.834002][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.911'. [ 161.929846][ T5240] block nbd16: Receive control failed (result -107) [ 161.998130][ T8037] nbd16: detected capacity change from 0 to 256 [ 162.057975][ T8055] netlink: 24 bytes leftover after parsing attributes in process `syz.4.919'. [ 162.082851][ T5253] block nbd16: Dead connection, failed to find a fallback [ 162.117734][ T5253] block nbd16: shutting down sockets [ 162.126195][ T8058] FAULT_INJECTION: forcing a failure. [ 162.126195][ T8058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.129785][ T5253] blk_print_req_error: 27 callbacks suppressed [ 162.129804][ T5253] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 162.175708][ T8058] CPU: 1 UID: 0 PID: 8058 Comm: syz.2.920 Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 162.187451][ T8058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 162.197528][ T5253] buffer_io_error: 27 callbacks suppressed [ 162.197556][ T5253] Buffer I/O error on dev nbd16, logical block 0, async page read [ 162.198218][ T8058] Call Trace: [ 162.198232][ T8058] [ 162.204458][ T5253] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 162.212185][ T8058] dump_stack_lvl+0x241/0x360 [ 162.212222][ T8058] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.212244][ T8058] ? __pfx__printk+0x10/0x10 [ 162.212281][ T8058] ? __pfx_lock_release+0x10/0x10 [ 162.249098][ T8058] should_fail_ex+0x3b0/0x4e0 [ 162.255561][ T8058] _copy_from_iter+0x1f6/0x1960 [ 162.260909][ T8058] ? __virt_addr_valid+0x183/0x530 [ 162.269046][ T8058] ? __pfx_lock_release+0x10/0x10 [ 162.274243][ T5253] Buffer I/O error on dev nbd16, logical block 0, async page read [ 162.275050][ T8058] ? __alloc_skb+0x28f/0x440 [ 162.289811][ T8058] ? __pfx__copy_from_iter+0x10/0x10 [ 162.295337][ T8058] ? __virt_addr_valid+0x183/0x530 [ 162.301315][ T8058] ? __virt_addr_valid+0x183/0x530 [ 162.306827][ T8058] ? __virt_addr_valid+0x45f/0x530 [ 162.307860][ T5253] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 162.313173][ T8058] ? __check_object_size+0x49c/0x900 [ 162.329399][ T8058] netlink_sendmsg+0x73d/0xcb0 [ 162.338058][ T8058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.344459][ T8058] ? __import_iovec+0x536/0x820 [ 162.347538][ T5253] Buffer I/O error on dev nbd16, logical block 0, async page read [ 162.349542][ T8058] ? aa_sock_msg_perm+0x91/0x160 [ 162.362899][ T8058] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 162.369382][ T8058] ? security_socket_sendmsg+0x87/0xb0 [ 162.371171][ T5253] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 162.375244][ T8058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.390176][ T8058] __sock_sendmsg+0x221/0x270 [ 162.394925][ T8058] ____sys_sendmsg+0x525/0x7d0 [ 162.399956][ T8058] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.405501][ T8058] __sys_sendmsg+0x2b0/0x3a0 [ 162.411375][ T8058] ? __pfx___sys_sendmsg+0x10/0x10 [ 162.418170][ T8058] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 162.424748][ T8058] ? rcu_is_watching+0x15/0xb0 [ 162.429753][ T8058] ? trace_sys_enter+0x1f/0xd0 [ 162.434684][ T8058] do_syscall_64+0xf3/0x230 [ 162.439246][ T8058] ? clear_bhb_loop+0x35/0x90 [ 162.444167][ T8058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.450650][ T8058] RIP: 0033:0x7fc3cd379e79 [ 162.452098][ T5253] Buffer I/O error on dev nbd16, logical block 0, async page read [ 162.456382][ T8058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.485503][ T8058] RSP: 002b:00007fc3ce119038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.494470][ T8058] RAX: ffffffffffffffda RBX: 00007fc3cd515f80 RCX: 00007fc3cd379e79 [ 162.502581][ T8058] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 162.510775][ T8058] RBP: 00007fc3ce119090 R08: 0000000000000000 R09: 0000000000000000 [ 162.512498][ T5253] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 162.518853][ T8058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.518874][ T8058] R13: 0000000000000000 R14: 00007fc3cd515f80 R15: 00007ffc6148ea08 [ 162.518907][ T8058] [ 162.653363][ T5253] Buffer I/O error on dev nbd16, logical block 0, async page read [ 162.709369][ T8066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.924'. [ 162.720753][ T5253] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 162.742908][ T5253] Buffer I/O error on dev nbd16, logical block 0, async page read [ 162.783108][ T5253] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 162.844493][ T5253] Buffer I/O error on dev nbd16, logical block 0, async page read [ 162.870713][ T5253] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 162.918191][ T5253] Buffer I/O error on dev nbd16, logical block 0, async page read [ 162.936891][ T5253] ldm_validate_partition_table(): Disk read failed. [ 162.964849][ T5253] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 162.981309][ T5253] Buffer I/O error on dev nbd16, logical block 0, async page read [ 162.991053][ T5253] I/O error, dev nbd16, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 163.010802][ T5253] Buffer I/O error on dev nbd16, logical block 0, async page read [ 163.058415][ T5253] Dev nbd16: unable to read RDB block 0 [ 163.065730][ T5253] nbd16: unable to read partition table [ 163.067787][ T8086] netdevsim netdevsim3 netdevsim1: Unsupported IPsec algorithm [ 163.112680][ T5253] ldm_validate_partition_table(): Disk read failed. [ 163.155433][ T5253] Dev nbd16: unable to read RDB block 0 [ 163.188123][ T5253] nbd16: unable to read partition table [ 163.323136][ T8095] vlan3: entered promiscuous mode [ 163.482535][ T8098] netlink: 'syz.2.935': attribute type 16 has an invalid length. [ 163.510794][ T8098] netlink: 'syz.2.935': attribute type 3 has an invalid length. [ 164.375803][ T8138] __nla_validate_parse: 5 callbacks suppressed [ 164.375827][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.947'. [ 164.682256][ T8150] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 164.864677][ T8159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.955'. [ 165.035012][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.957'. [ 165.178480][ T8163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.957'. [ 165.248629][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.958'. [ 165.283119][ T8166] bridge_slave_1: left allmulticast mode [ 165.298057][ T8166] bridge_slave_1: left promiscuous mode [ 165.321213][ T5240] block nbd17: Receive control failed (result -107) [ 165.328021][ T8166] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.378892][ T8163] nbd17: detected capacity change from 0 to 256 [ 165.397349][ T5253] block nbd17: Dead connection, failed to find a fallback [ 165.421313][ T5253] block nbd17: shutting down sockets [ 165.428661][ T5253] ldm_validate_partition_table(): Disk read failed. [ 165.435964][ T5253] Dev nbd17: unable to read RDB block 0 [ 165.448156][ T5253] nbd17: unable to read partition table [ 165.449444][ T8166] bridge_slave_0: left allmulticast mode [ 165.482005][ T5253] ldm_validate_partition_table(): Disk read failed. [ 165.486342][ T8166] bridge_slave_0: left promiscuous mode [ 165.501769][ T5253] Dev nbd17: unable to read RDB block 0 [ 165.514550][ T5253] nbd17: unable to read partition table [ 165.564267][ T8166] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.786977][ T8181] Cannot find set identified by id 0 to match [ 166.118377][ T8198] syzkaller1: entered promiscuous mode [ 166.137653][ T8198] syzkaller1: entered allmulticast mode [ 166.287991][ T8203] FAULT_INJECTION: forcing a failure. [ 166.287991][ T8203] name failslab, interval 1, probability 0, space 0, times 0 [ 166.330826][ T8203] CPU: 1 UID: 0 PID: 8203 Comm: syz.3.971 Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 166.332025][ T8206] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 166.342612][ T8203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 166.342652][ T8203] Call Trace: [ 166.342666][ T8203] [ 166.342678][ T8203] dump_stack_lvl+0x241/0x360 [ 166.342713][ T8203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.342737][ T8203] ? __pfx__printk+0x10/0x10 [ 166.342777][ T8203] ? ref_tracker_alloc+0x332/0x490 [ 166.342807][ T8203] should_fail_ex+0x3b0/0x4e0 [ 166.342837][ T8203] ? skb_clone+0x20c/0x390 [ 166.342865][ T8203] should_failslab+0xac/0x100 [ 166.342902][ T8203] ? skb_clone+0x20c/0x390 [ 166.342930][ T8203] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 166.342962][ T8203] skb_clone+0x20c/0x390 [ 166.342997][ T8203] __netlink_deliver_tap+0x3cc/0x7c0 [ 166.343035][ T8203] ? netlink_deliver_tap+0x2e/0x1b0 [ 166.343057][ T8203] netlink_deliver_tap+0x19d/0x1b0 [ 166.343083][ T8203] netlink_unicast+0x7c4/0x990 [ 166.343127][ T8203] ? __pfx_netlink_unicast+0x10/0x10 [ 166.343159][ T8203] ? __virt_addr_valid+0x183/0x530 [ 166.343186][ T8203] ? __check_object_size+0x49c/0x900 [ 166.343209][ T8203] ? bpf_lsm_netlink_send+0x9/0x10 [ 166.343242][ T8203] netlink_sendmsg+0x8e4/0xcb0 [ 166.343278][ T8203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.471704][ T8203] ? __import_iovec+0x536/0x820 [ 166.477218][ T8203] ? aa_sock_msg_perm+0x91/0x160 [ 166.482198][ T8203] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 166.487606][ T8203] ? security_socket_sendmsg+0x87/0xb0 [ 166.493100][ T8203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.498659][ T8203] __sock_sendmsg+0x221/0x270 [ 166.503390][ T8203] ____sys_sendmsg+0x525/0x7d0 [ 166.508185][ T8203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.513544][ T8203] __sys_sendmsg+0x2b0/0x3a0 [ 166.518447][ T8203] ? __pfx___sys_sendmsg+0x10/0x10 [ 166.524384][ T8203] ? vfs_write+0x7c4/0xc90 [ 166.529420][ T8203] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 166.537800][ T8203] ? do_syscall_64+0x100/0x230 [ 166.543963][ T8203] ? do_syscall_64+0xb6/0x230 [ 166.551484][ T8203] do_syscall_64+0xf3/0x230 [ 166.557421][ T8203] ? clear_bhb_loop+0x35/0x90 [ 166.563738][ T8203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.571782][ T8203] RIP: 0033:0x7f4b67579e79 [ 166.578332][ T8203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.599937][ T8203] RSP: 002b:00007f4b68407038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.609633][ T8203] RAX: ffffffffffffffda RBX: 00007f4b67715f80 RCX: 00007f4b67579e79 [ 166.618162][ T8203] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 166.626151][ T8203] RBP: 00007f4b68407090 R08: 0000000000000000 R09: 0000000000000000 [ 166.636919][ T8203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.647726][ T8203] R13: 0000000000000000 R14: 00007f4b67715f80 R15: 00007ffc1324dbe8 [ 166.656592][ T8203] [ 166.898204][ T8216] netlink: 36 bytes leftover after parsing attributes in process `syz.0.976'. [ 167.104712][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.975'. [ 167.329450][ T8231] wg0: entered allmulticast mode [ 167.417614][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.975'. [ 167.440245][ T8231] xt_SECMARK: invalid mode: 0 [ 167.551083][ T5240] block nbd18: Receive control failed (result -107) [ 167.577723][ T8223] nbd18: detected capacity change from 0 to 256 [ 167.684634][ T5253] block nbd18: Dead connection, failed to find a fallback [ 167.719079][ T8237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.982'. [ 167.927714][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.982'. [ 168.014829][ T5240] block nbd19: Receive control failed (result -107) [ 168.058112][ T8237] nbd19: detected capacity change from 0 to 256 [ 168.090991][ T7196] block nbd19: Dead connection, failed to find a fallback [ 168.099750][ T7196] block nbd19: shutting down sockets [ 168.106666][ T7196] blk_print_req_error: 64 callbacks suppressed [ 168.106683][ T7196] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.141799][ T7196] buffer_io_error: 64 callbacks suppressed [ 168.141817][ T7196] Buffer I/O error on dev nbd19, logical block 0, async page read [ 168.157088][ T7196] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.202428][ T7196] Buffer I/O error on dev nbd19, logical block 0, async page read [ 168.237794][ T7196] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.252001][ T7196] Buffer I/O error on dev nbd19, logical block 0, async page read [ 168.279050][ T7196] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.323384][ T7196] Buffer I/O error on dev nbd19, logical block 0, async page read [ 168.342812][ T7196] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.364381][ T7196] Buffer I/O error on dev nbd19, logical block 0, async page read [ 168.380251][ T8260] netlink: 'syz.2.991': attribute type 11 has an invalid length. [ 168.390424][ T7196] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.405144][ T7196] Buffer I/O error on dev nbd19, logical block 0, async page read [ 168.425309][ T8262] netdevsim netdevsim4 netdevsim1: Unsupported IPsec algorithm [ 168.449299][ T7196] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.478845][ T7196] Buffer I/O error on dev nbd19, logical block 0, async page read [ 168.507570][ T7196] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.520792][ T7196] Buffer I/O error on dev nbd19, logical block 0, async page read [ 168.529698][ T7196] ldm_validate_partition_table(): Disk read failed. [ 168.538288][ T7196] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.544560][ T8265] netlink: 'syz.0.993': attribute type 13 has an invalid length. [ 168.548656][ T7196] Buffer I/O error on dev nbd19, logical block 0, async page read [ 168.574083][ T7196] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.586394][ T7196] Buffer I/O error on dev nbd19, logical block 0, async page read [ 168.605262][ T7196] Dev nbd19: unable to read RDB block 0 [ 168.612219][ T7196] nbd19: unable to read partition table [ 168.629530][ T7196] ldm_validate_partition_table(): Disk read failed. [ 168.642732][ T7196] Dev nbd19: unable to read RDB block 0 [ 168.650546][ T7196] nbd19: unable to read partition table [ 169.235355][ T8284] FAULT_INJECTION: forcing a failure. [ 169.235355][ T8284] name failslab, interval 1, probability 0, space 0, times 0 [ 169.250928][ T8284] CPU: 1 UID: 0 PID: 8284 Comm: syz.1.1000 Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 169.264475][ T8284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 169.277682][ T8284] Call Trace: [ 169.281157][ T8284] [ 169.284119][ T8284] dump_stack_lvl+0x241/0x360 [ 169.289140][ T8284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.294552][ T8284] ? __pfx__printk+0x10/0x10 [ 169.301900][ T8284] ? ref_tracker_alloc+0x332/0x490 [ 169.307493][ T8284] should_fail_ex+0x3b0/0x4e0 [ 169.313377][ T8284] ? skb_clone+0x20c/0x390 [ 169.319896][ T8284] should_failslab+0xac/0x100 [ 169.326329][ T8284] ? skb_clone+0x20c/0x390 [ 169.333013][ T8284] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 169.342443][ T8284] skb_clone+0x20c/0x390 [ 169.349618][ T8284] __netlink_deliver_tap+0x3cc/0x7c0 [ 169.356545][ T8284] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.362505][ T8284] netlink_deliver_tap+0x19d/0x1b0 [ 169.368607][ T8284] netlink_sendskb+0x68/0x140 [ 169.373544][ T8284] netlink_unicast+0x39d/0x990 [ 169.380112][ T8284] ? __asan_memcpy+0x40/0x70 [ 169.386676][ T8284] ? __pfx_netlink_unicast+0x10/0x10 [ 169.393688][ T8284] netlink_rcv_skb+0x262/0x430 [ 169.398855][ T8284] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 169.405407][ T8284] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 169.410868][ T8284] xfrm_netlink_rcv+0x79/0x90 [ 169.415890][ T8284] netlink_unicast+0x7f6/0x990 [ 169.421376][ T8284] ? __pfx_netlink_unicast+0x10/0x10 [ 169.426875][ T8284] ? __virt_addr_valid+0x183/0x530 [ 169.433801][ T8284] ? __check_object_size+0x49c/0x900 [ 169.441141][ T8284] ? bpf_lsm_netlink_send+0x9/0x10 [ 169.448823][ T8284] netlink_sendmsg+0x8e4/0xcb0 [ 169.454720][ T8284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.462331][ T8284] ? __import_iovec+0x536/0x820 [ 169.467671][ T8284] ? aa_sock_msg_perm+0x91/0x160 [ 169.472953][ T8284] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 169.478813][ T8284] ? security_socket_sendmsg+0x87/0xb0 [ 169.484577][ T8284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.489881][ T8284] __sock_sendmsg+0x221/0x270 [ 169.494701][ T8284] ____sys_sendmsg+0x525/0x7d0 [ 169.499610][ T8284] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.505835][ T8284] __sys_sendmsg+0x2b0/0x3a0 [ 169.510575][ T8284] ? __pfx___sys_sendmsg+0x10/0x10 [ 169.515912][ T8284] ? vfs_write+0x7c4/0xc90 [ 169.520647][ T8284] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 169.527297][ T8284] ? do_syscall_64+0x100/0x230 [ 169.532320][ T8284] ? do_syscall_64+0xb6/0x230 [ 169.537382][ T8284] do_syscall_64+0xf3/0x230 [ 169.541920][ T8284] ? clear_bhb_loop+0x35/0x90 [ 169.546637][ T8284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.553545][ T8284] RIP: 0033:0x7fe0f3d79e79 [ 169.558900][ T8284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.579672][ T8284] RSP: 002b:00007fe0f4bca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.589363][ T8284] RAX: ffffffffffffffda RBX: 00007fe0f3f15f80 RCX: 00007fe0f3d79e79 [ 169.598341][ T8284] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 169.607156][ T8284] RBP: 00007fe0f4bca090 R08: 0000000000000000 R09: 0000000000000000 [ 169.616783][ T8284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 169.625246][ T8284] R13: 0000000000000000 R14: 00007fe0f3f15f80 R15: 00007ffc206f3ff8 [ 169.633892][ T8284] [ 169.670701][ T8281] xt_CT: You must specify a L4 protocol and not use inversions on it [ 169.904669][ T8295] __nla_validate_parse: 1 callbacks suppressed [ 169.904695][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'. [ 170.497701][ T8319] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1012'. [ 170.538266][ T8319] netlink: 21 bytes leftover after parsing attributes in process `syz.0.1012'. [ 170.560242][ T8319] netlink: 21 bytes leftover after parsing attributes in process `syz.0.1012'. [ 170.579733][ T8321] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 170.616296][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1014'. [ 170.644910][ T8319] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1012'. [ 171.056753][ T8342] netlink: 'syz.0.1019': attribute type 11 has an invalid length. [ 171.395922][ T8353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1024'. [ 171.527764][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1024'. [ 171.600316][ T5240] block nbd20: Receive control failed (result -107) [ 171.669266][ T8353] nbd20: detected capacity change from 0 to 256 [ 171.724722][ T7196] block nbd20: Dead connection, failed to find a fallback [ 171.745481][ T7196] block nbd20: shutting down sockets [ 171.746867][ T8365] netlink: 'syz.1.1026': attribute type 4 has an invalid length. [ 171.760960][ T7196] ldm_validate_partition_table(): Disk read failed. [ 171.800963][ T7196] Dev nbd20: unable to read RDB block 0 [ 171.818794][ T7196] nbd20: unable to read partition table [ 171.835726][ T7196] ldm_validate_partition_table(): Disk read failed. [ 171.852902][ T7196] Dev nbd20: unable to read RDB block 0 [ 171.867255][ T7196] nbd20: unable to read partition table [ 172.168755][ T8380] xt_hashlimit: invalid rate [ 172.505381][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1031'. [ 172.708026][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1031'. [ 172.793753][ T5240] block nbd21: Receive control failed (result -107) [ 172.829424][ T8387] nbd21: detected capacity change from 0 to 256 [ 172.855911][ T7196] block nbd21: Dead connection, failed to find a fallback [ 173.066929][ T8414] netdevsim netdevsim1 netdevsim1: Unsupported IPsec algorithm [ 173.176877][ T8416] vlan2: entered promiscuous mode [ 173.364814][ T8428] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0 [ 173.373810][ T8427] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 174.099571][ T8458] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.668368][ T8481] netdevsim netdevsim0 netdevsim1: Unsupported IPsec algorithm [ 174.918248][ T8498] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.137244][ T8506] __nla_validate_parse: 14 callbacks suppressed [ 175.137262][ T8506] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1073'. [ 175.203974][ T8466] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 175.266372][ T8509] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1074'. [ 175.408399][ T8] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 175.491226][ T8] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 175.499988][ T8516] bridge0: port 3(gretap0) entered blocking state [ 175.509939][ T8516] bridge0: port 3(gretap0) entered disabled state [ 175.550751][ T8516] gretap0: entered allmulticast mode [ 175.570007][ T8518] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1079'. [ 175.628407][ T8516] gretap0: entered promiscuous mode [ 175.629027][ T8] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 175.649991][ T8516] bridge0: port 3(gretap0) entered blocking state [ 175.657894][ T8516] bridge0: port 3(gretap0) entered forwarding state [ 175.727804][ T8520] gretap0: left allmulticast mode [ 175.736810][ T8520] gretap0: left promiscuous mode [ 175.748472][ T8520] bridge0: port 3(gretap0) entered disabled state [ 175.759552][ T8] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 175.811893][ T8] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 175.820940][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1083'. [ 175.847822][ T5336] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 175.947913][ T5244] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 176.018366][ T5336] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 176.053397][ T8540] ip6_vti0: Master is either lo or non-ether device [ 176.087885][ T5336] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 176.179170][ T5244] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 176.222246][ T8546] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 176.257177][ T8547] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1091'. [ 176.417909][ T5240] Bluetooth: hci0: command 0x080f tx timeout [ 176.551349][ T8552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1089'. [ 177.001127][ T8581] vcan0 speed is unknown, defaulting to 1000 [ 177.250509][ T8584] syzkaller1: entered promiscuous mode [ 177.267162][ T8584] syzkaller1: entered allmulticast mode [ 178.143354][ T8616] netdevsim netdevsim0 netdevsim1: Unsupported IPsec algorithm [ 178.723158][ T8636] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1117'. [ 178.752199][ T8636] nbd: must specify at least one socket [ 179.510355][ T8655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1127'. [ 179.575770][ T8671] netdevsim netdevsim0 netdevsim1: Unsupported IPsec algorithm [ 179.742375][ T8655] bond1: entered promiscuous mode [ 179.770746][ T8683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1134'. [ 179.852124][ T8670] veth3: entered promiscuous mode [ 179.877294][ T8670] bond1: (slave veth3): Enslaving as an active interface with an up link [ 179.896833][ T8676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1127'. [ 179.927230][ T8676] bond1 (unregistering): (slave veth3): Releasing backup interface [ 179.961588][ T8676] veth3: left promiscuous mode [ 180.004101][ T8676] bond1 (unregistering): Released all slaves [ 180.426320][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1143'. [ 180.810706][ T8716] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1148'. [ 181.149020][ T8730] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.1153'. [ 181.178116][ T8732] netdevsim netdevsim0 netdevsim1: Unsupported IPsec algorithm [ 181.695050][ T8748] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1162'. [ 181.767622][ T8756] xt_CT: You must specify a L4 protocol and not use inversions on it [ 182.145195][ T8770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1171'. [ 182.325404][ T8775] xt_TPROXY: Can be used only with -p tcp or -p udp [ 182.346254][ T8772] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1173'. [ 182.379167][ T8772] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 182.405866][ T8772] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 182.704898][ T8789] vcan0 speed is unknown, defaulting to 1000 [ 182.908344][ T8797] Cannot find set identified by id 0 to match [ 183.237904][ T8805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.266183][ T8805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.524145][ T8807] vcan0 speed is unknown, defaulting to 1000 [ 184.181830][ T8830] xt_CT: No such helper "pptp" [ 184.208445][ T8832] batman_adv: batadv0: Adding interface: wlan1 [ 184.227690][ T8832] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.285002][ T8832] batman_adv: batadv0: Interface activated: wlan1 [ 184.356910][ T8830] batman_adv: batadv0: Interface deactivated: wlan1 [ 184.441130][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1194'. [ 184.599263][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1194'. [ 184.672970][ T5240] block nbd22: Receive control failed (result -107) [ 184.685553][ T8833] batman_adv: batadv0: Removing interface: wlan1 [ 184.718787][ T8837] nbd22: detected capacity change from 0 to 256 [ 184.763049][ T8067] block nbd22: Dead connection, failed to find a fallback [ 184.788160][ T8067] block nbd22: shutting down sockets [ 184.803868][ T8067] blk_print_req_error: 64 callbacks suppressed [ 184.803889][ T8067] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 184.845856][ T8067] buffer_io_error: 64 callbacks suppressed [ 184.845879][ T8067] Buffer I/O error on dev nbd22, logical block 0, async page read [ 184.881056][ T8067] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 184.913282][ T8067] Buffer I/O error on dev nbd22, logical block 0, async page read [ 184.968911][ T8067] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.016731][ T8067] Buffer I/O error on dev nbd22, logical block 0, async page read [ 185.062662][ T8067] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.084604][ T8067] Buffer I/O error on dev nbd22, logical block 0, async page read [ 185.117379][ T8067] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.118541][ T8853] netdevsim netdevsim1 netdevsim1: Unsupported IPsec algorithm [ 185.153788][ T8067] Buffer I/O error on dev nbd22, logical block 0, async page read [ 185.180517][ T8067] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.224693][ T8858] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.228019][ T8067] Buffer I/O error on dev nbd22, logical block 0, async page read [ 185.291045][ T8067] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.318628][ T8067] Buffer I/O error on dev nbd22, logical block 0, async page read [ 185.327065][ T8067] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.347646][ T8067] Buffer I/O error on dev nbd22, logical block 0, async page read [ 185.372819][ T8067] ldm_validate_partition_table(): Disk read failed. [ 185.380255][ T8854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1198'. [ 185.397027][ T8067] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.430397][ T8067] Buffer I/O error on dev nbd22, logical block 0, async page read [ 185.443040][ T8067] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 185.456901][ T8067] Buffer I/O error on dev nbd22, logical block 0, async page read [ 185.473824][ T8854] bond2: entered promiscuous mode [ 185.502004][ T8067] Dev nbd22: unable to read RDB block 0 [ 185.535726][ T8067] nbd22: unable to read partition table [ 185.551797][ T8067] ldm_validate_partition_table(): Disk read failed. [ 185.560100][ T8067] Dev nbd22: unable to read RDB block 0 [ 185.564431][ T8862] veth7: entered promiscuous mode [ 185.566291][ T8067] nbd22: unable to read partition table [ 185.583876][ T8862] bond2: (slave veth7): Enslaving as an active interface with an up link [ 185.606624][ T8864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1198'. [ 185.637893][ T8864] bond2 (unregistering): (slave veth7): Releasing backup interface [ 185.648092][ T8864] veth7: left promiscuous mode [ 185.668932][ T8864] bond2 (unregistering): Released all slaves [ 185.696554][ T8861] netlink: 1044 bytes leftover after parsing attributes in process `syz.3.1201'. [ 185.985821][ T8878] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.1205'. [ 186.332074][ T8896] netlink: 'syz.4.1210': attribute type 3 has an invalid length. [ 186.553075][ T8902] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1213'. [ 186.647265][ T8906] netlink: 'syz.0.1214': attribute type 23 has an invalid length. [ 186.675092][ T8907] netlink: 'syz.4.1212': attribute type 11 has an invalid length. [ 186.823504][ T8912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1214'. [ 186.946461][ T8915] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 187.244698][ T8935] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1222'. [ 187.520913][ T8947] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1225'. [ 187.721731][ T8960] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.916038][ T8972] sctp: [Deprecated]: syz.2.1235 (pid 8972) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.916038][ T8972] Use struct sctp_sack_info instead [ 188.078037][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1237'. [ 188.332940][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1237'. [ 188.431025][ T5240] block nbd23: Receive control failed (result -107) [ 188.508712][ T8977] nbd23: detected capacity change from 0 to 256 [ 188.537046][ T8067] block nbd23: Dead connection, failed to find a fallback [ 188.583017][ T8067] schedule_timeout: wrong timeout value c800000000000000 [ 188.617529][ T8067] CPU: 0 UID: 0 PID: 8067 Comm: udevd Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 188.631673][ T8067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 188.643237][ T8067] Call Trace: [ 188.649236][ T8067] [ 188.652843][ T8067] dump_stack_lvl+0x241/0x360 [ 188.659217][ T8067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.665227][ T8067] ? __pfx__printk+0x10/0x10 [ 188.670253][ T8067] schedule_timeout+0x281/0x310 [ 188.676144][ T8067] ? __pfx_schedule_timeout+0x10/0x10 [ 188.681596][ T8067] ? prepare_to_wait_event+0x3ba/0x400 [ 188.687594][ T8067] nbd_queue_rq+0x7cd/0x2f70 [ 188.693520][ T8067] ? __pfx_validate_chain+0x10/0x10 [ 188.699321][ T8067] ? validate_chain+0x11e/0x5900 [ 188.705579][ T8067] ? __pfx_nbd_queue_rq+0x10/0x10 [ 188.713127][ T8067] ? __lock_acquire+0x137a/0x2040 [ 188.718777][ T8067] ? __pfx_autoremove_wake_function+0x10/0x10 [ 188.725334][ T8067] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 188.734085][ T8067] ? sbitmap_find_bit+0x435/0x4c0 [ 188.740783][ T8067] ? sbitmap_get+0x289/0x3f0 [ 188.745507][ T8067] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 188.751991][ T8067] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 188.758217][ T8067] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 188.766484][ T8067] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 188.774692][ T8067] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 188.781378][ T8067] ? __pfx___might_resched+0x10/0x10 [ 188.787380][ T8067] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 188.794003][ T8067] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 188.799782][ T8067] blk_mq_run_hw_queue+0x576/0xae0 [ 188.804946][ T8067] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 188.810404][ T8067] blk_mq_flush_plug_list+0x1115/0x1880 [ 188.816270][ T8067] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 188.822543][ T8067] ? blk_mq_submit_bio+0x1288/0x22d0 [ 188.827963][ T8067] __blk_flush_plug+0x420/0x500 [ 188.832932][ T8067] ? __pfx___blk_flush_plug+0x10/0x10 [ 188.838788][ T8067] ? timekeeping_get_ns+0x5c/0x420 [ 188.843979][ T8067] ? lockdep_hardirqs_on+0x99/0x150 [ 188.849617][ T8067] __submit_bio+0x422/0x560 [ 188.854161][ T8067] ? __pfx___submit_bio+0x10/0x10 [ 188.859752][ T8067] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 188.866570][ T8067] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 188.873398][ T8067] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 188.879911][ T8067] ? bio_associate_blkg_from_css+0x182/0xc70 [ 188.886558][ T8067] ? __pfx___might_resched+0x10/0x10 [ 188.892093][ T8067] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 188.898571][ T8067] block_read_full_folio+0x93b/0xcd0 [ 188.903934][ T8067] ? __pfx_blkdev_get_block+0x10/0x10 [ 188.909383][ T8067] ? __pfx_block_read_full_folio+0x10/0x10 [ 188.916928][ T8067] ? __pfx_lru_add_fn+0x10/0x10 [ 188.923449][ T8067] ? folio_add_lru+0x357/0xd70 [ 188.928369][ T8067] ? folio_add_lru+0x58f/0xd70 [ 188.933531][ T8067] filemap_read_folio+0x1a0/0x790 [ 188.939444][ T8067] ? __pfx_blkdev_read_folio+0x10/0x10 [ 188.944973][ T8067] ? __pfx_filemap_read_folio+0x10/0x10 [ 188.950564][ T8067] ? __filemap_get_folio+0x984/0xc10 [ 188.955882][ T8067] do_read_cache_folio+0x134/0x820 [ 188.961110][ T8067] ? __pfx_blkdev_read_folio+0x10/0x10 [ 188.966729][ T8067] read_part_sector+0xb3/0x330 [ 188.971819][ T8067] adfspart_check_ICS+0xd9/0x9a0 [ 188.977162][ T8067] ? __pfx_vsnprintf+0x10/0x10 [ 188.982158][ T8067] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 188.987737][ T8067] ? snprintf+0xda/0x120 [ 188.991999][ T8067] ? alloc_pages_mpol_noprof+0x417/0x680 [ 188.998009][ T8067] ? vsnprintf+0x1cc3/0x1da0 [ 189.002635][ T8067] ? vsnprintf+0x184/0x1da0 [ 189.007381][ T8067] ? __pfx_snprintf+0x10/0x10 [ 189.013681][ T8067] ? __kasan_kmalloc+0x98/0xb0 [ 189.019248][ T8067] bdev_disk_changed+0x72c/0x13d0 [ 189.024643][ T8067] ? __pfx_bdev_disk_changed+0x10/0x10 [ 189.031408][ T8067] blkdev_get_whole+0x2d2/0x450 [ 189.036689][ T8067] bdev_open+0x2d4/0xc60 [ 189.041228][ T8067] blkdev_open+0x3e8/0x570 [ 189.047345][ T8067] ? __pfx_blkdev_open+0x10/0x10 [ 189.056520][ T8067] do_dentry_open+0x970/0x1440 [ 189.062790][ T8067] vfs_open+0x3e/0x330 [ 189.067063][ T8067] path_openat+0x2b3e/0x3470 [ 189.072765][ T8067] ? __pfx_stack_trace_save+0x10/0x10 [ 189.079424][ T8067] ? __lock_acquire+0x137a/0x2040 [ 189.085766][ T8067] ? __pfx_path_openat+0x10/0x10 [ 189.091241][ T8067] do_filp_open+0x235/0x490 [ 189.096703][ T8067] ? __pfx_do_filp_open+0x10/0x10 [ 189.102290][ T8067] ? _raw_spin_unlock+0x28/0x50 [ 189.107384][ T8067] ? alloc_fd+0x5a1/0x640 [ 189.112974][ T8067] do_sys_openat2+0x13e/0x1d0 [ 189.119036][ T8067] ? __pfx_do_sys_openat2+0x10/0x10 [ 189.125353][ T8067] ? bpf_trace_run2+0x1fc/0x540 [ 189.132108][ T8067] ? bpf_trace_run2+0x36e/0x540 [ 189.138276][ T8067] __x64_sys_openat+0x247/0x2a0 [ 189.143689][ T8067] ? __pfx___x64_sys_openat+0x10/0x10 [ 189.150249][ T8067] ? rcu_is_watching+0x15/0xb0 [ 189.156782][ T8067] ? trace_sys_enter+0x1f/0xd0 [ 189.161945][ T8067] do_syscall_64+0xf3/0x230 [ 189.167729][ T8067] ? clear_bhb_loop+0x35/0x90 [ 189.174757][ T8067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.180885][ T8067] RIP: 0033:0x7fc09ef169a4 [ 189.185551][ T8067] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 189.205622][ T8067] RSP: 002b:00007ffdd923c580 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 189.214186][ T8067] RAX: ffffffffffffffda RBX: 0000557af7ac0e10 RCX: 00007fc09ef169a4 [ 189.222987][ T8067] RDX: 00000000000a0800 RSI: 0000557af7aa0750 RDI: 00000000ffffff9c [ 189.231589][ T8067] RBP: 0000557af7aa0750 R08: 0000000000000001 R09: 7fffffffffffffff [ 189.240770][ T8067] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 189.249212][ T8067] R13: 0000557af7ab16f0 R14: 0000000000000002 R15: 0000557af7a9f910 [ 189.257348][ T8067] [ 189.362328][ T9002] netdevsim netdevsim3 netdevsim1: Unsupported IPsec algorithm [ 189.403405][ T8067] block nbd23: shutting down sockets [ 189.436008][ T8067] ldm_validate_partition_table(): Disk read failed. [ 189.469102][ T8067] Dev nbd23: unable to read RDB block 0 [ 189.475503][ T8067] nbd23: unable to read partition table [ 189.517656][ T8067] ldm_validate_partition_table(): Disk read failed. [ 189.528025][ T8067] Dev nbd23: unable to read RDB block 0 [ 189.534768][ T8067] nbd23: unable to read partition table [ 189.644725][ T9013] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1248'. [ 189.833317][ T9020] FAULT_INJECTION: forcing a failure. [ 189.833317][ T9020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.878884][ T9020] CPU: 0 UID: 0 PID: 9020 Comm: syz.1.1252 Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 189.891522][ T9020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 189.904448][ T9020] Call Trace: [ 189.908746][ T9020] [ 189.912275][ T9020] dump_stack_lvl+0x241/0x360 [ 189.917294][ T9020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.925108][ T9020] ? __pfx__printk+0x10/0x10 [ 189.931144][ T9020] ? snprintf+0xda/0x120 [ 189.936436][ T9020] should_fail_ex+0x3b0/0x4e0 [ 189.943298][ T9020] _copy_to_user+0x2f/0xb0 [ 189.949361][ T9020] simple_read_from_buffer+0xca/0x150 [ 189.956275][ T9020] proc_fail_nth_read+0x1ec/0x260 [ 189.961807][ T9020] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.968522][ T9020] ? rw_verify_area+0x520/0x6b0 [ 189.973616][ T9020] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.979520][ T9020] vfs_read+0x204/0xbc0 [ 189.985677][ T9020] ? __pfx_lock_release+0x10/0x10 [ 189.991521][ T9020] ? __pfx_vfs_read+0x10/0x10 [ 189.996845][ T9020] ? __fget_files+0x29/0x470 [ 190.001853][ T9020] ? __fget_files+0x3f6/0x470 [ 190.006963][ T9020] ksys_read+0x1a0/0x2c0 [ 190.011428][ T9020] ? __pfx_ksys_read+0x10/0x10 [ 190.016476][ T9020] ? do_syscall_64+0x100/0x230 [ 190.021625][ T9020] ? do_syscall_64+0xb6/0x230 [ 190.027769][ T9020] do_syscall_64+0xf3/0x230 [ 190.033137][ T9020] ? clear_bhb_loop+0x35/0x90 [ 190.039133][ T9020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.045573][ T9020] RIP: 0033:0x7fe0f3d788bc [ 190.050744][ T9020] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 190.074180][ T9020] RSP: 002b:00007fe0f4bca030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 190.083374][ T9020] RAX: ffffffffffffffda RBX: 00007fe0f3f15f80 RCX: 00007fe0f3d788bc [ 190.093139][ T9020] RDX: 000000000000000f RSI: 00007fe0f4bca0a0 RDI: 0000000000000004 [ 190.102543][ T9020] RBP: 00007fe0f4bca090 R08: 0000000000000000 R09: 0000000000000000 [ 190.111018][ T9020] R10: 000000000002c091 R11: 0000000000000246 R12: 0000000000000001 [ 190.119122][ T9020] R13: 0000000000000000 R14: 00007fe0f3f15f80 R15: 00007ffc206f3ff8 [ 190.127853][ T9020] [ 190.317323][ T9022] geneve2: entered promiscuous mode [ 190.326212][ T9022] geneve2: entered allmulticast mode [ 190.490009][ T9025] vcan0 speed is unknown, defaulting to 1000 [ 190.909545][ T9050] __nla_validate_parse: 3 callbacks suppressed [ 190.909568][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1262'. [ 190.993596][ T9054] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1264'. [ 191.066606][ T9053] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1263'. [ 191.093590][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1262'. [ 191.201600][ T5240] block nbd24: Receive control failed (result -107) [ 191.252309][ T9063] syzkaller1: entered promiscuous mode [ 191.258815][ T9063] syzkaller1: entered allmulticast mode [ 191.280015][ T9050] nbd24: detected capacity change from 0 to 256 [ 191.340257][ T8067] block nbd24: Dead connection, failed to find a fallback [ 191.385214][ T8067] schedule_timeout: wrong timeout value 9000000000000000 [ 191.405070][ T8067] CPU: 1 UID: 0 PID: 8067 Comm: udevd Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 191.416615][ T8067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 191.427449][ T8067] Call Trace: [ 191.431489][ T8067] [ 191.434935][ T8067] dump_stack_lvl+0x241/0x360 [ 191.440473][ T8067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.446131][ T8067] ? __pfx__printk+0x10/0x10 [ 191.451346][ T8067] schedule_timeout+0x281/0x310 [ 191.456263][ T8067] ? __pfx_schedule_timeout+0x10/0x10 [ 191.463362][ T8067] ? prepare_to_wait_event+0x3ba/0x400 [ 191.468998][ T8067] nbd_queue_rq+0x7cd/0x2f70 [ 191.473752][ T8067] ? __pfx_validate_chain+0x10/0x10 [ 191.479184][ T8067] ? validate_chain+0x11e/0x5900 [ 191.484181][ T8067] ? __pfx_nbd_queue_rq+0x10/0x10 [ 191.489496][ T8067] ? __lock_acquire+0x137a/0x2040 [ 191.494615][ T8067] ? __pfx_autoremove_wake_function+0x10/0x10 [ 191.500787][ T8067] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 191.506426][ T8067] ? sbitmap_find_bit+0x435/0x4c0 [ 191.511622][ T8067] ? sbitmap_get+0x289/0x3f0 [ 191.516371][ T8067] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 191.523835][ T8067] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 191.530235][ T8067] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 191.537574][ T8067] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 191.545614][ T8067] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 191.552289][ T8067] ? __pfx___might_resched+0x10/0x10 [ 191.560106][ T8067] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 191.568111][ T8067] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 191.575482][ T8067] blk_mq_run_hw_queue+0x576/0xae0 [ 191.584438][ T8067] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 191.591474][ T8067] blk_mq_flush_plug_list+0x1115/0x1880 [ 191.597357][ T8067] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 191.604560][ T8067] ? blk_mq_submit_bio+0x1288/0x22d0 [ 191.610467][ T8067] __blk_flush_plug+0x420/0x500 [ 191.616355][ T8067] ? __pfx___blk_flush_plug+0x10/0x10 [ 191.622054][ T8067] ? timekeeping_get_ns+0x5c/0x420 [ 191.627688][ T8067] ? lockdep_hardirqs_on+0x99/0x150 [ 191.633841][ T8067] __submit_bio+0x422/0x560 [ 191.638710][ T8067] ? __pfx___submit_bio+0x10/0x10 [ 191.643795][ T8067] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 191.650195][ T8067] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 191.656962][ T8067] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 191.662652][ T8067] ? bio_associate_blkg_from_css+0x182/0xc70 [ 191.669674][ T8067] ? __pfx___might_resched+0x10/0x10 [ 191.675986][ T8067] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 191.682322][ T8067] block_read_full_folio+0x93b/0xcd0 [ 191.687867][ T8067] ? __pfx_blkdev_get_block+0x10/0x10 [ 191.693998][ T8067] ? __pfx_block_read_full_folio+0x10/0x10 [ 191.699937][ T8067] ? __pfx_lru_add_fn+0x10/0x10 [ 191.704942][ T8067] ? folio_add_lru+0x357/0xd70 [ 191.709778][ T8067] ? folio_add_lru+0x58f/0xd70 [ 191.714894][ T8067] filemap_read_folio+0x1a0/0x790 [ 191.720339][ T8067] ? __pfx_blkdev_read_folio+0x10/0x10 [ 191.726402][ T8067] ? __pfx_filemap_read_folio+0x10/0x10 [ 191.732020][ T8067] ? __filemap_get_folio+0x984/0xc10 [ 191.737387][ T8067] do_read_cache_folio+0x134/0x820 [ 191.742568][ T8067] ? __pfx_blkdev_read_folio+0x10/0x10 [ 191.749338][ T8067] read_part_sector+0xb3/0x330 [ 191.754871][ T8067] adfspart_check_ICS+0xd9/0x9a0 [ 191.759895][ T8067] ? __pfx_vsnprintf+0x10/0x10 [ 191.764814][ T8067] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 191.771213][ T8067] ? snprintf+0xda/0x120 [ 191.775523][ T8067] ? alloc_pages_mpol_noprof+0x417/0x680 [ 191.781249][ T8067] ? vsnprintf+0x1cc3/0x1da0 [ 191.785892][ T8067] ? vsnprintf+0x184/0x1da0 [ 191.790719][ T8067] ? __pfx_snprintf+0x10/0x10 [ 191.796255][ T8067] ? __kasan_kmalloc+0x98/0xb0 [ 191.802069][ T8067] bdev_disk_changed+0x72c/0x13d0 [ 191.807650][ T8067] ? __pfx_bdev_disk_changed+0x10/0x10 [ 191.813988][ T8067] blkdev_get_whole+0x2d2/0x450 [ 191.819594][ T8067] bdev_open+0x2d4/0xc60 [ 191.824383][ T8067] blkdev_open+0x3e8/0x570 [ 191.829835][ T8067] ? __pfx_blkdev_open+0x10/0x10 [ 191.835014][ T8067] do_dentry_open+0x970/0x1440 [ 191.840311][ T8067] vfs_open+0x3e/0x330 [ 191.844532][ T8067] path_openat+0x2b3e/0x3470 [ 191.849383][ T8067] ? __pfx_stack_trace_save+0x10/0x10 [ 191.855183][ T8067] ? __lock_acquire+0x137a/0x2040 [ 191.860286][ T8067] ? __pfx_path_openat+0x10/0x10 [ 191.865398][ T8067] do_filp_open+0x235/0x490 [ 191.870071][ T8067] ? __pfx_do_filp_open+0x10/0x10 [ 191.875182][ T8067] ? _raw_spin_unlock+0x28/0x50 [ 191.880209][ T8067] ? alloc_fd+0x5a1/0x640 [ 191.884955][ T8067] do_sys_openat2+0x13e/0x1d0 [ 191.889683][ T8067] ? __pfx_do_sys_openat2+0x10/0x10 [ 191.895371][ T8067] ? bpf_trace_run2+0x1fc/0x540 [ 191.900392][ T8067] ? bpf_trace_run2+0x36e/0x540 [ 191.905571][ T8067] __x64_sys_openat+0x247/0x2a0 [ 191.910477][ T8067] ? __pfx___x64_sys_openat+0x10/0x10 [ 191.915903][ T8067] ? rcu_is_watching+0x15/0xb0 [ 191.920716][ T8067] ? trace_sys_enter+0x1f/0xd0 [ 191.925615][ T8067] do_syscall_64+0xf3/0x230 [ 191.930170][ T8067] ? clear_bhb_loop+0x35/0x90 [ 191.934897][ T8067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.941467][ T8067] RIP: 0033:0x7fc09ef169a4 [ 191.946576][ T8067] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 191.967050][ T8067] RSP: 002b:00007ffdd923c580 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 191.975791][ T8067] RAX: ffffffffffffffda RBX: 0000557af7ac0e10 RCX: 00007fc09ef169a4 [ 191.984188][ T8067] RDX: 00000000000a0800 RSI: 0000557af7aa0750 RDI: 00000000ffffff9c [ 191.992408][ T8067] RBP: 0000557af7aa0750 R08: 0000000000000001 R09: 7fffffffffffffff [ 192.002171][ T8067] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 192.011592][ T8067] R13: 0000557af7aa8a90 R14: 0000000000000002 R15: 0000557af7a9f910 [ 192.019737][ T8067] [ 192.087612][ T8067] block nbd24: shutting down sockets [ 192.104235][ T8067] blk_print_req_error: 64 callbacks suppressed [ 192.104260][ T8067] I/O error, dev nbd24, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.161063][ T9068] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1267'. [ 192.200903][ T8067] buffer_io_error: 64 callbacks suppressed [ 192.200925][ T8067] Buffer I/O error on dev nbd24, logical block 0, async page read [ 192.215925][ T9068] vlan3: entered promiscuous mode [ 192.262578][ T8067] I/O error, dev nbd24, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.293172][ T8067] Buffer I/O error on dev nbd24, logical block 0, async page read [ 192.336502][ T8067] I/O error, dev nbd24, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.378740][ T8067] Buffer I/O error on dev nbd24, logical block 0, async page read [ 192.386781][ T8067] I/O error, dev nbd24, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.429317][ T8067] Buffer I/O error on dev nbd24, logical block 0, async page read [ 192.460775][ T8067] I/O error, dev nbd24, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.488766][ T8067] Buffer I/O error on dev nbd24, logical block 0, async page read [ 192.517809][ T8067] I/O error, dev nbd24, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.563731][ T8067] Buffer I/O error on dev nbd24, logical block 0, async page read [ 192.579472][ T8067] I/O error, dev nbd24, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.589258][ T8067] Buffer I/O error on dev nbd24, logical block 0, async page read [ 192.599930][ T8067] I/O error, dev nbd24, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.611242][ T8067] Buffer I/O error on dev nbd24, logical block 0, async page read [ 192.620443][ T8067] ldm_validate_partition_table(): Disk read failed. [ 192.627291][ T8067] I/O error, dev nbd24, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.637373][ T8067] Buffer I/O error on dev nbd24, logical block 0, async page read [ 192.645785][ T8067] I/O error, dev nbd24, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.658025][ T8067] Buffer I/O error on dev nbd24, logical block 0, async page read [ 192.662162][ T9086] IPVS: stopping master sync thread 8428 ... [ 192.666225][ T8067] Dev nbd24: unable to read RDB block 0 [ 192.688270][ T8067] nbd24: unable to read partition table [ 192.699071][ T8067] ldm_validate_partition_table(): Disk read failed. [ 192.706643][ T8067] Dev nbd24: unable to read RDB block 0 [ 192.714283][ T8067] nbd24: unable to read partition table [ 193.169796][ T9099] vcan0 speed is unknown, defaulting to 1000 [ 193.426237][ T9113] netlink: 'syz.0.1279': attribute type 1 has an invalid length. [ 193.455821][ T9113] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1279'. [ 193.583996][ T9117] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1281'. [ 193.605177][ T9119] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1282'. [ 193.645311][ T9117] nbd: must specify at least one socket [ 193.658272][ T9119] netlink: 37 bytes leftover after parsing attributes in process `syz.4.1282'. [ 193.660545][ T9105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.975431][ T9128] netlink: 'syz.3.1285': attribute type 2 has an invalid length. [ 194.007581][ T9128] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1285'. [ 194.102570][ T9132] vlan3: entered promiscuous mode [ 194.388096][ T9134] vcan0 speed is unknown, defaulting to 1000 [ 194.410493][ T9140] vlan2: entered promiscuous mode [ 194.587012][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.602921][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.737360][ T9146] bridge1: entered promiscuous mode [ 194.765908][ T9146] bridge1: entered allmulticast mode [ 195.654724][ T9169] xt_TPROXY: Can be used only with -p tcp or -p udp [ 196.313605][ T9187] netlink: 'syz.0.1301': attribute type 1 has an invalid length. [ 196.368441][ T9187] netlink: 'syz.0.1301': attribute type 1 has an invalid length. [ 196.397830][ T9187] __nla_validate_parse: 4 callbacks suppressed [ 196.397852][ T9187] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1301'. [ 196.460911][ T9191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1304'. [ 196.657927][ T5246] Bluetooth: hci0: command 0x080f tx timeout [ 196.657947][ T5233] Bluetooth: hci3: command 0x0406 tx timeout [ 196.675402][ T5233] Bluetooth: hci2: command 0x0406 tx timeout [ 196.682117][ T5237] Bluetooth: hci1: command 0x0406 tx timeout [ 197.472619][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1318'. [ 197.553511][ T9240] syzkaller1: entered promiscuous mode [ 197.597971][ T9240] syzkaller1: entered allmulticast mode [ 197.740982][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1318'. [ 197.820104][ T55] block nbd25: Receive control failed (result -107) [ 197.847741][ T9234] nbd25: detected capacity change from 0 to 256 [ 197.930286][ T8067] block nbd25: Dead connection, failed to find a fallback [ 197.957718][ T8067] schedule_timeout: wrong timeout value 8000000000000000 [ 197.967198][ T8067] CPU: 1 UID: 0 PID: 8067 Comm: udevd Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 197.979816][ T8067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 197.991598][ T8067] Call Trace: [ 197.995125][ T8067] [ 197.999031][ T8067] dump_stack_lvl+0x241/0x360 [ 198.004845][ T8067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.010485][ T8067] ? __pfx__printk+0x10/0x10 [ 198.015506][ T8067] schedule_timeout+0x281/0x310 [ 198.021411][ T8067] ? __pfx_schedule_timeout+0x10/0x10 [ 198.027472][ T8067] ? prepare_to_wait_event+0x3ba/0x400 [ 198.034118][ T8067] nbd_queue_rq+0x7cd/0x2f70 [ 198.039208][ T8067] ? __pfx_validate_chain+0x10/0x10 [ 198.044737][ T8067] ? validate_chain+0x11e/0x5900 [ 198.051219][ T8067] ? __pfx_nbd_queue_rq+0x10/0x10 [ 198.057412][ T8067] ? __lock_acquire+0x137a/0x2040 [ 198.064037][ T8067] ? __pfx_autoremove_wake_function+0x10/0x10 [ 198.071113][ T8067] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 198.078796][ T8067] ? sbitmap_find_bit+0x435/0x4c0 [ 198.085522][ T8067] ? sbitmap_get+0x289/0x3f0 [ 198.091590][ T8067] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 198.098852][ T8067] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 198.105156][ T8067] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 198.114014][ T8067] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 198.121178][ T8067] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 198.126881][ T8067] ? __pfx___might_resched+0x10/0x10 [ 198.132241][ T8067] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 198.138421][ T8067] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 198.144110][ T8067] blk_mq_run_hw_queue+0x576/0xae0 [ 198.150415][ T8067] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 198.156124][ T8067] blk_mq_flush_plug_list+0x1115/0x1880 [ 198.162006][ T8067] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 198.168837][ T8067] ? blk_mq_submit_bio+0x1288/0x22d0 [ 198.174553][ T8067] __blk_flush_plug+0x420/0x500 [ 198.179818][ T8067] ? __pfx___blk_flush_plug+0x10/0x10 [ 198.186679][ T8067] ? timekeeping_get_ns+0x5c/0x420 [ 198.192135][ T8067] ? lockdep_hardirqs_on+0x99/0x150 [ 198.202306][ T8067] __submit_bio+0x422/0x560 [ 198.208534][ T8067] ? __pfx___submit_bio+0x10/0x10 [ 198.214936][ T8067] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 198.222794][ T8067] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 198.230896][ T8067] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 198.238681][ T8067] ? bio_associate_blkg_from_css+0x182/0xc70 [ 198.245558][ T8067] ? __pfx___might_resched+0x10/0x10 [ 198.251015][ T8067] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 198.258640][ T8067] block_read_full_folio+0x93b/0xcd0 [ 198.266285][ T8067] ? __pfx_blkdev_get_block+0x10/0x10 [ 198.273760][ T8067] ? __pfx_block_read_full_folio+0x10/0x10 [ 198.280625][ T8067] ? __pfx_lru_add_fn+0x10/0x10 [ 198.287001][ T8067] ? folio_add_lru+0x357/0xd70 [ 198.292779][ T8067] ? folio_add_lru+0x58f/0xd70 [ 198.299318][ T8067] filemap_read_folio+0x1a0/0x790 [ 198.305335][ T8067] ? __pfx_blkdev_read_folio+0x10/0x10 [ 198.312318][ T8067] ? __pfx_filemap_read_folio+0x10/0x10 [ 198.320893][ T8067] ? __filemap_get_folio+0x984/0xc10 [ 198.326871][ T8067] do_read_cache_folio+0x134/0x820 [ 198.333428][ T8067] ? __pfx_blkdev_read_folio+0x10/0x10 [ 198.339476][ T8067] read_part_sector+0xb3/0x330 [ 198.345312][ T8067] adfspart_check_ICS+0xd9/0x9a0 [ 198.351664][ T8067] ? __pfx_vsnprintf+0x10/0x10 [ 198.357747][ T8067] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 198.364809][ T8067] ? snprintf+0xda/0x120 [ 198.369729][ T8067] ? alloc_pages_mpol_noprof+0x417/0x680 [ 198.376824][ T8067] ? vsnprintf+0x1cc3/0x1da0 [ 198.382949][ T8067] ? vsnprintf+0x184/0x1da0 [ 198.389342][ T8067] ? __pfx_snprintf+0x10/0x10 [ 198.396632][ T8067] ? __kasan_kmalloc+0x98/0xb0 [ 198.402927][ T8067] bdev_disk_changed+0x72c/0x13d0 [ 198.408746][ T8067] ? __pfx_bdev_disk_changed+0x10/0x10 [ 198.416796][ T8067] blkdev_get_whole+0x2d2/0x450 [ 198.422041][ T8067] bdev_open+0x2d4/0xc60 [ 198.426324][ T8067] blkdev_open+0x3e8/0x570 [ 198.430956][ T8067] ? __pfx_blkdev_open+0x10/0x10 [ 198.437704][ T8067] do_dentry_open+0x970/0x1440 [ 198.444583][ T8067] vfs_open+0x3e/0x330 [ 198.451062][ T8067] path_openat+0x2b3e/0x3470 [ 198.456204][ T8067] ? __pfx_stack_trace_save+0x10/0x10 [ 198.462675][ T8067] ? __lock_acquire+0x137a/0x2040 [ 198.468497][ T8067] ? __pfx_path_openat+0x10/0x10 [ 198.475826][ T8067] do_filp_open+0x235/0x490 [ 198.481180][ T8067] ? __pfx_do_filp_open+0x10/0x10 [ 198.487804][ T8067] ? _raw_spin_unlock+0x28/0x50 [ 198.494816][ T8067] ? alloc_fd+0x5a1/0x640 [ 198.499769][ T8067] do_sys_openat2+0x13e/0x1d0 [ 198.505984][ T8067] ? __pfx_do_sys_openat2+0x10/0x10 [ 198.514144][ T8067] ? bpf_trace_run2+0x1fc/0x540 [ 198.519639][ T8067] __x64_sys_openat+0x247/0x2a0 [ 198.524706][ T8067] ? __pfx___x64_sys_openat+0x10/0x10 [ 198.530478][ T8067] ? do_syscall_64+0x100/0x230 [ 198.535295][ T8067] ? do_syscall_64+0xb6/0x230 [ 198.541538][ T8067] do_syscall_64+0xf3/0x230 [ 198.547235][ T8067] ? clear_bhb_loop+0x35/0x90 [ 198.554288][ T8067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.560581][ T8067] RIP: 0033:0x7fc09ef169a4 [ 198.566610][ T8067] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 198.592684][ T8067] RSP: 002b:00007ffdd923c580 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 198.601993][ T8067] RAX: ffffffffffffffda RBX: 0000557af7ac0e10 RCX: 00007fc09ef169a4 [ 198.613736][ T8067] RDX: 00000000000a0800 RSI: 0000557af7ac3c90 RDI: 00000000ffffff9c [ 198.624577][ T8067] RBP: 0000557af7ac3c90 R08: 0000000000000001 R09: 0000000000000000 [ 198.635236][ T8067] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 198.644847][ T8067] R13: 0000557af7ab16f0 R14: 0000000000000001 R15: 0000557af7a9f910 [ 198.657699][ T8067] [ 198.728736][ T8067] block nbd25: shutting down sockets [ 198.734902][ T8067] blk_print_req_error: 27 callbacks suppressed [ 198.734922][ T8067] I/O error, dev nbd25, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 198.782198][ T8067] buffer_io_error: 27 callbacks suppressed [ 198.782220][ T8067] Buffer I/O error on dev nbd25, logical block 0, async page read [ 198.847714][ T8067] I/O error, dev nbd25, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 198.891200][ T8067] Buffer I/O error on dev nbd25, logical block 0, async page read [ 198.916968][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1326'. [ 198.936225][ T8067] I/O error, dev nbd25, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 198.995552][ T8067] Buffer I/O error on dev nbd25, logical block 0, async page read [ 199.034689][ T8067] I/O error, dev nbd25, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.107545][ T8067] Buffer I/O error on dev nbd25, logical block 0, async page read [ 199.133585][ T9273] netlink: 'syz.2.1329': attribute type 15 has an invalid length. [ 199.141791][ T8067] I/O error, dev nbd25, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.173727][ T8067] Buffer I/O error on dev nbd25, logical block 0, async page read [ 199.183986][ T8067] I/O error, dev nbd25, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.210535][ T8067] Buffer I/O error on dev nbd25, logical block 0, async page read [ 199.252498][ T8067] I/O error, dev nbd25, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.263568][ T8067] Buffer I/O error on dev nbd25, logical block 0, async page read [ 199.285257][ T8067] I/O error, dev nbd25, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.327822][ T8067] Buffer I/O error on dev nbd25, logical block 0, async page read [ 199.343998][ T9281] netlink: 'syz.2.1329': attribute type 49 has an invalid length. [ 199.345947][ T8067] ldm_validate_partition_table(): Disk read failed. [ 199.363073][ T8067] I/O error, dev nbd25, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.364371][ T9284] xt_TCPMSS: Only works on TCP SYN packets [ 199.376058][ T9283] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.394248][ T8067] Buffer I/O error on dev nbd25, logical block 0, async page read [ 199.395175][ T9284] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1333'. [ 199.410491][ T8067] I/O error, dev nbd25, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 199.434553][ T8067] Buffer I/O error on dev nbd25, logical block 0, async page read [ 199.453767][ T8067] Dev nbd25: unable to read RDB block 0 [ 199.474532][ T8067] nbd25: unable to read partition table [ 199.491595][ T9286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1335'. [ 199.515882][ T8067] ldm_validate_partition_table(): Disk read failed. [ 199.524637][ T8067] Dev nbd25: unable to read RDB block 0 [ 199.538763][ T8067] nbd25: unable to read partition table [ 199.735274][ T9294] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1339'. [ 199.868928][ T9298] tipc: Started in network mode [ 199.874958][ T9298] tipc: Node identity , cluster identity 4711 [ 200.006263][ T9304] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1344'. [ 200.409953][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1351'. [ 200.548184][ T9326] batadv_slave_1: entered promiscuous mode [ 200.707254][ T9323] batadv_slave_1: left promiscuous mode [ 200.860498][ T9339] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 200.955959][ T9341] vcan0 speed is unknown, defaulting to 1000 [ 201.073770][ T9350] bridge0: entered promiscuous mode [ 201.100276][ T9350] bridge0: entered allmulticast mode [ 201.453670][ T9362] tipc: Started in network mode [ 201.470393][ T9362] tipc: Node identity ac1414aa, cluster identity 4711 [ 201.502938][ T9362] tipc: Enabled bearer , priority 10 [ 201.563198][ T9368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1366'. [ 201.596297][ T9370] netlink: 'syz.4.1367': attribute type 9 has an invalid length. [ 201.618952][ T9370] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1367'. [ 202.016762][ T9377] vcan0 speed is unknown, defaulting to 1000 [ 202.417251][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1374'. [ 202.541445][ T943] tipc: Node number set to 2886997162 [ 202.604040][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1374'. [ 202.698492][ T55] block nbd26: Receive control failed (result -107) [ 202.758550][ T9392] nbd26: detected capacity change from 0 to 256 [ 202.810706][ T8247] block nbd26: Dead connection, failed to find a fallback [ 202.862154][ T8247] block nbd26: shutting down sockets [ 202.872825][ T8247] ldm_validate_partition_table(): Disk read failed. [ 202.924846][ T8247] Dev nbd26: unable to read RDB block 0 [ 202.977225][ T8247] nbd26: unable to read partition table [ 203.037762][ T9403] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1378'. [ 203.054672][ T8247] ldm_validate_partition_table(): Disk read failed. [ 203.063457][ T8247] Dev nbd26: unable to read RDB block 0 [ 203.069108][ T9411] netdevsim netdevsim4 netdevsim1: Unsupported IPsec algorithm [ 203.072718][ T8247] nbd26: unable to read partition table [ 203.394483][ T9422] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1382'. [ 203.939726][ T9442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1392'. [ 204.134343][ T9448] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 204.159509][ T9448] netlink: 'syz.4.1393': attribute type 10 has an invalid length. [ 204.174406][ T9448] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1393'. [ 204.347129][ T9448] team0: Port device virt_wifi0 removed [ 204.906173][ T9483] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1406'. [ 204.924986][ T9484] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1406'. [ 207.039321][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1429'. [ 207.398246][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1429'. [ 207.500064][ T55] block nbd27: Receive control failed (result -107) [ 207.542482][ T9581] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1436'. [ 207.577886][ T9562] nbd27: detected capacity change from 0 to 256 [ 207.620001][ T8067] block nbd27: Dead connection, failed to find a fallback [ 207.636625][ T9581] vlan3: entered promiscuous mode [ 207.681031][ T9587] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 207.713959][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1439'. [ 208.500264][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1451'. [ 208.600971][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1451'. [ 208.670365][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1454'. [ 208.703095][ T55] block nbd28: Receive control failed (result -107) [ 208.737939][ T9615] nbd28: detected capacity change from 0 to 256 [ 208.804375][ T8247] block nbd28: Dead connection, failed to find a fallback [ 208.850244][ T8247] block nbd28: shutting down sockets [ 208.869563][ T8247] blk_print_req_error: 64 callbacks suppressed [ 208.869586][ T8247] I/O error, dev nbd28, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.934432][ T8247] buffer_io_error: 64 callbacks suppressed [ 208.934512][ T8247] Buffer I/O error on dev nbd28, logical block 0, async page read [ 208.995066][ T8247] I/O error, dev nbd28, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.036067][ T8247] Buffer I/O error on dev nbd28, logical block 0, async page read [ 209.079102][ T8247] I/O error, dev nbd28, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.110866][ T9638] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1457'. [ 209.120866][ T8247] Buffer I/O error on dev nbd28, logical block 0, async page read [ 209.150305][ T8247] I/O error, dev nbd28, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.177503][ T8247] Buffer I/O error on dev nbd28, logical block 0, async page read [ 209.216787][ T8247] I/O error, dev nbd28, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.255719][ T8247] Buffer I/O error on dev nbd28, logical block 0, async page read [ 209.279496][ T8247] I/O error, dev nbd28, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.317292][ T8247] Buffer I/O error on dev nbd28, logical block 0, async page read [ 209.357090][ T8247] I/O error, dev nbd28, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.391235][ T8247] Buffer I/O error on dev nbd28, logical block 0, async page read [ 209.415989][ T8247] I/O error, dev nbd28, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.438561][ T8247] Buffer I/O error on dev nbd28, logical block 0, async page read [ 209.456510][ T8247] ldm_validate_partition_table(): Disk read failed. [ 209.466015][ T9654] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 209.485304][ T8247] I/O error, dev nbd28, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.496770][ T8247] Buffer I/O error on dev nbd28, logical block 0, async page read [ 209.540051][ T8247] I/O error, dev nbd28, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.564308][ T8247] Buffer I/O error on dev nbd28, logical block 0, async page read [ 209.583965][ T8247] Dev nbd28: unable to read RDB block 0 [ 209.602492][ T8247] nbd28: unable to read partition table [ 209.615425][ T9658] netlink: 'syz.1.1465': attribute type 1 has an invalid length. [ 209.631614][ T9661] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.1467'. [ 209.641662][ T9658] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1465'. [ 209.655352][ T8247] ldm_validate_partition_table(): Disk read failed. [ 209.665680][ T8247] Dev nbd28: unable to read RDB block 0 [ 209.681380][ T8247] nbd28: unable to read partition table [ 209.700595][ T9658] netlink: 'syz.1.1465': attribute type 1 has an invalid length. [ 209.924503][ T9670] vlan3: entered promiscuous mode [ 210.661087][ T9712] syzkaller1: entered promiscuous mode [ 210.675305][ T9712] syzkaller1: entered allmulticast mode [ 210.831156][ T55] block nbd29: Receive control failed (result -107) [ 210.857852][ T9708] nbd29: detected capacity change from 0 to 256 [ 210.928299][ T8247] block nbd29: Dead connection, failed to find a fallback [ 210.947353][ T9715] IPv6: addrconf: prefix option has invalid lifetime [ 210.984460][ T8247] schedule_timeout: wrong timeout value ffffcd9c00000000 [ 211.034092][ T8247] CPU: 0 UID: 0 PID: 8247 Comm: udevd Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 211.046590][ T8247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 211.057143][ T8247] Call Trace: [ 211.060497][ T8247] [ 211.063720][ T8247] dump_stack_lvl+0x241/0x360 [ 211.068697][ T8247] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.074371][ T8247] ? __pfx__printk+0x10/0x10 [ 211.079044][ T8247] schedule_timeout+0x281/0x310 [ 211.084304][ T8247] ? __pfx_schedule_timeout+0x10/0x10 [ 211.090772][ T8247] ? prepare_to_wait_event+0x3ba/0x400 [ 211.096276][ T8247] nbd_queue_rq+0x7cd/0x2f70 [ 211.100906][ T8247] ? __pfx_validate_chain+0x10/0x10 [ 211.106656][ T8247] ? validate_chain+0x11e/0x5900 [ 211.112448][ T8247] ? __pfx_nbd_queue_rq+0x10/0x10 [ 211.118121][ T8247] ? __lock_acquire+0x137a/0x2040 [ 211.123185][ T8247] ? __pfx_autoremove_wake_function+0x10/0x10 [ 211.129287][ T8247] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 211.135453][ T8247] ? sbitmap_find_bit+0x435/0x4c0 [ 211.140593][ T8247] ? sbitmap_get+0x289/0x3f0 [ 211.145481][ T8247] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 211.152391][ T8247] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 211.159163][ T8247] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 211.166965][ T8247] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 211.174229][ T8247] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 211.182167][ T8247] ? __pfx___might_resched+0x10/0x10 [ 211.187935][ T8247] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 211.194410][ T8247] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 211.199897][ T8247] blk_mq_run_hw_queue+0x576/0xae0 [ 211.205130][ T8247] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 211.210531][ T8247] blk_mq_flush_plug_list+0x1115/0x1880 [ 211.216144][ T8247] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 211.222801][ T8247] ? blk_mq_submit_bio+0x1288/0x22d0 [ 211.228739][ T8247] __blk_flush_plug+0x420/0x500 [ 211.233754][ T8247] ? __pfx___blk_flush_plug+0x10/0x10 [ 211.239508][ T8247] ? timekeeping_get_ns+0x5c/0x420 [ 211.244996][ T8247] ? lockdep_hardirqs_on+0x99/0x150 [ 211.250572][ T8247] __submit_bio+0x422/0x560 [ 211.255136][ T8247] ? __pfx___submit_bio+0x10/0x10 [ 211.262129][ T8247] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 211.268843][ T8247] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 211.275823][ T8247] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 211.281748][ T8247] ? bio_associate_blkg_from_css+0x182/0xc70 [ 211.288820][ T8247] ? __pfx___might_resched+0x10/0x10 [ 211.295245][ T8247] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 211.301565][ T8247] block_read_full_folio+0x93b/0xcd0 [ 211.306932][ T8247] ? __pfx_blkdev_get_block+0x10/0x10 [ 211.313799][ T8247] ? __pfx_block_read_full_folio+0x10/0x10 [ 211.320107][ T8247] ? __pfx_lru_add_fn+0x10/0x10 [ 211.325191][ T8247] ? folio_add_lru+0x357/0xd70 [ 211.331842][ T8247] ? folio_add_lru+0x58f/0xd70 [ 211.337247][ T8247] filemap_read_folio+0x1a0/0x790 [ 211.342679][ T8247] ? __pfx_blkdev_read_folio+0x10/0x10 [ 211.349025][ T8247] ? __pfx_filemap_read_folio+0x10/0x10 [ 211.354995][ T8247] ? __filemap_get_folio+0x984/0xc10 [ 211.361824][ T8247] do_read_cache_folio+0x134/0x820 [ 211.367006][ T8247] ? __pfx_blkdev_read_folio+0x10/0x10 [ 211.374021][ T8247] read_part_sector+0xb3/0x330 [ 211.379350][ T8247] adfspart_check_ICS+0xd9/0x9a0 [ 211.385399][ T8247] ? __pfx_vsnprintf+0x10/0x10 [ 211.390299][ T8247] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 211.396011][ T8247] ? snprintf+0xda/0x120 [ 211.400490][ T8247] ? alloc_pages_mpol_noprof+0x417/0x680 [ 211.406430][ T8247] ? vsnprintf+0x1cc3/0x1da0 [ 211.412256][ T8247] ? vsnprintf+0x184/0x1da0 [ 211.416790][ T8247] ? __pfx_snprintf+0x10/0x10 [ 211.421846][ T8247] ? __kasan_kmalloc+0x98/0xb0 [ 211.426897][ T8247] bdev_disk_changed+0x72c/0x13d0 [ 211.432251][ T8247] ? __pfx_bdev_disk_changed+0x10/0x10 [ 211.437950][ T8247] blkdev_get_whole+0x2d2/0x450 [ 211.443417][ T8247] bdev_open+0x2d4/0xc60 [ 211.447852][ T8247] blkdev_open+0x3e8/0x570 [ 211.452737][ T8247] ? __pfx_blkdev_open+0x10/0x10 [ 211.458859][ T8247] do_dentry_open+0x970/0x1440 [ 211.464367][ T8247] vfs_open+0x3e/0x330 [ 211.470839][ T8247] path_openat+0x2b3e/0x3470 [ 211.475772][ T8247] ? __pfx_stack_trace_save+0x10/0x10 [ 211.481902][ T8247] ? __lock_acquire+0x137a/0x2040 [ 211.487016][ T8247] ? __pfx_path_openat+0x10/0x10 [ 211.492628][ T8247] do_filp_open+0x235/0x490 [ 211.497261][ T8247] ? __pfx_do_filp_open+0x10/0x10 [ 211.503346][ T8247] ? _raw_spin_unlock+0x28/0x50 [ 211.508785][ T8247] ? alloc_fd+0x5a1/0x640 [ 211.513480][ T8247] do_sys_openat2+0x13e/0x1d0 [ 211.518658][ T8247] ? __pfx_do_sys_openat2+0x10/0x10 [ 211.525680][ T8247] ? bpf_trace_run2+0x1fc/0x540 [ 211.531293][ T8247] ? bpf_trace_run2+0x36e/0x540 [ 211.536562][ T8247] __x64_sys_openat+0x247/0x2a0 [ 211.541660][ T8247] ? __pfx___x64_sys_openat+0x10/0x10 [ 211.549765][ T8247] ? rcu_is_watching+0x15/0xb0 [ 211.554961][ T8247] ? trace_sys_enter+0x1f/0xd0 [ 211.559999][ T8247] do_syscall_64+0xf3/0x230 [ 211.565069][ T8247] ? clear_bhb_loop+0x35/0x90 [ 211.570271][ T8247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.577267][ T8247] RIP: 0033:0x7fc09ef169a4 [ 211.581931][ T8247] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 211.603951][ T8247] RSP: 002b:00007ffdd923c580 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 211.614769][ T8247] RAX: ffffffffffffffda RBX: 0000557af7ac0e10 RCX: 00007fc09ef169a4 [ 211.624226][ T8247] RDX: 00000000000a0800 RSI: 0000557af7ac4a60 RDI: 00000000ffffff9c [ 211.633613][ T8247] RBP: 0000557af7ac4a60 R08: 0000000000000001 R09: 7fffffffffffffff [ 211.643118][ T8247] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 211.653316][ T8247] R13: 0000557af7ac0570 R14: 0000000000000002 R15: 0000557af7a9f910 [ 211.663042][ T8247] [ 211.861047][ T8247] block nbd29: shutting down sockets [ 211.867843][ T8247] ldm_validate_partition_table(): Disk read failed. [ 211.875995][ T8247] Dev nbd29: unable to read RDB block 0 [ 211.884678][ T8247] nbd29: unable to read partition table [ 211.897573][ T8247] ldm_validate_partition_table(): Disk read failed. [ 211.989522][ T8247] Dev nbd29: unable to read RDB block 0 [ 211.995667][ T8247] nbd29: unable to read partition table [ 212.065682][ T9733] netdevsim netdevsim4 netdevsim1: Unsupported IPsec algorithm [ 212.314135][ T9743] xt_TPROXY: Can be used only with -p tcp or -p udp [ 213.039713][ T9768] syzkaller1: entered promiscuous mode [ 213.049493][ T9768] syzkaller1: entered allmulticast mode [ 213.785775][ T9793] gtp0: entered promiscuous mode [ 214.480575][ T9827] xt_TPROXY: Can be used only with -p tcp or -p udp [ 215.891767][ T9874] __nla_validate_parse: 6 callbacks suppressed [ 215.891792][ T9874] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1539'. [ 215.901614][ T9876] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1540'. [ 216.419605][ T9899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.444872][ T9899] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1545'. [ 217.201191][ T9928] syz.1.1556[9928] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.201482][ T9928] syz.1.1556[9928] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.243172][ T9930] xt_nat: multiple ranges no longer supported [ 217.590770][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1563'. [ 217.687879][ T9944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1563'. [ 217.748670][ T55] block nbd30: Receive control failed (result -107) [ 217.807864][ T9944] nbd30: detected capacity change from 0 to 272 [ 217.885664][ T8247] block nbd30: Dead connection, failed to find a fallback [ 217.917838][ T8247] block nbd30: shutting down sockets [ 217.923997][ T8247] blk_print_req_error: 64 callbacks suppressed [ 217.924016][ T8247] I/O error, dev nbd30, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.027573][ T8247] buffer_io_error: 64 callbacks suppressed [ 218.027609][ T8247] Buffer I/O error on dev nbd30, logical block 0, async page read [ 218.053661][ T8247] I/O error, dev nbd30, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.083754][ T8247] Buffer I/O error on dev nbd30, logical block 0, async page read [ 218.103166][ T8247] I/O error, dev nbd30, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.120333][ T8247] Buffer I/O error on dev nbd30, logical block 0, async page read [ 218.136062][ T8247] I/O error, dev nbd30, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.141908][ T9966] syzkaller1: entered promiscuous mode [ 218.154112][ T8247] Buffer I/O error on dev nbd30, logical block 0, async page read [ 218.163731][ T8247] I/O error, dev nbd30, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.178665][ T8247] Buffer I/O error on dev nbd30, logical block 0, async page read [ 218.181045][ T9966] syzkaller1: entered allmulticast mode [ 218.187089][ T8247] I/O error, dev nbd30, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.221921][ T8247] Buffer I/O error on dev nbd30, logical block 0, async page read [ 218.231807][ T8247] I/O error, dev nbd30, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.241720][ T9967] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1571'. [ 218.253465][ T8247] Buffer I/O error on dev nbd30, logical block 0, async page read [ 218.281640][ T8247] I/O error, dev nbd30, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.306431][ T8247] Buffer I/O error on dev nbd30, logical block 0, async page read [ 218.332151][ T8247] ldm_validate_partition_table(): Disk read failed. [ 218.352597][ T8247] I/O error, dev nbd30, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.386719][ T8247] Buffer I/O error on dev nbd30, logical block 0, async page read [ 218.411097][ T8247] I/O error, dev nbd30, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.487725][ T8247] Buffer I/O error on dev nbd30, logical block 0, async page read [ 218.512438][ T8247] Dev nbd30: unable to read RDB block 0 [ 218.541141][ T8247] nbd30: unable to read partition table [ 218.599949][ T8247] ldm_validate_partition_table(): Disk read failed. [ 218.629830][ T8247] Dev nbd30: unable to read RDB block 0 [ 218.667854][ T8247] nbd30: unable to read partition table [ 218.852709][ T9996] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1578'. [ 219.088470][ T9996] Κό: entered promiscuous mode [ 219.805612][T10033] xt_TPROXY: Can be used only with -p tcp or -p udp [ 219.861069][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1592'. [ 219.883157][T10037] netlink: 'syz.2.1592': attribute type 11 has an invalid length. [ 219.907084][T10037] netlink: 'syz.2.1592': attribute type 2 has an invalid length. [ 219.924865][T10040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.354015][T10059] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1596'. [ 220.792606][T10079] vlan2: entered allmulticast mode [ 220.800927][T10079] macvtap0: entered allmulticast mode [ 220.806643][T10079] veth0_macvtap: entered allmulticast mode [ 220.842483][T10079] macvtap0: left allmulticast mode [ 220.857646][T10079] veth0_macvtap: left allmulticast mode [ 221.114794][T10097] syzkaller1: entered promiscuous mode [ 221.117628][T10099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1608'. [ 221.121347][T10097] syzkaller1: entered allmulticast mode [ 221.165208][T10099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1608'. [ 221.246764][T10099] netlink: 'syz.1.1608': attribute type 2 has an invalid length. [ 222.064955][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1627'. [ 222.341935][T10139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1627'. [ 222.511241][ T55] block nbd31: Receive control failed (result -107) [ 222.546911][T10158] xt_TPROXY: Can be used only with -p tcp or -p udp [ 222.567984][T10139] nbd31: detected capacity change from 0 to 1048832 [ 222.648571][ T8247] block nbd31: Dead connection, failed to find a fallback [ 222.656242][ T8247] block nbd31: shutting down sockets [ 222.708462][ T8247] ldm_validate_partition_table(): Disk read failed. [ 222.715554][ T8247] Dev nbd31: unable to read RDB block 0 [ 222.775274][ T8247] nbd31: unable to read partition table [ 222.787804][T10166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1633'. [ 222.812711][ T8247] ldm_validate_partition_table(): Disk read failed. [ 222.847136][ T8247] Dev nbd31: unable to read RDB block 0 [ 222.876878][ T8247] nbd31: unable to read partition table [ 222.943824][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1633'. [ 223.080412][ T55] block nbd32: Receive control failed (result -107) [ 223.128481][T10177] openvswitch: netlink: Missing key (keys=40, expected=80) [ 223.138371][T10166] nbd32: detected capacity change from 0 to 256 [ 223.180038][ T8247] block nbd32: Dead connection, failed to find a fallback [ 223.520660][T10193] raw_sendmsg: syz.2.1644 forgot to set AF_INET. Fix it! [ 223.995077][T10217] FAULT_INJECTION: forcing a failure. [ 223.995077][T10217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.009467][T10217] CPU: 1 UID: 0 PID: 10217 Comm: syz.3.1654 Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 224.021595][T10217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 224.031891][T10217] Call Trace: [ 224.035724][T10217] [ 224.039021][T10217] dump_stack_lvl+0x241/0x360 [ 224.044120][T10217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.049729][T10217] ? __pfx__printk+0x10/0x10 [ 224.054396][T10217] ? __pfx_lock_release+0x10/0x10 [ 224.060104][T10217] should_fail_ex+0x3b0/0x4e0 [ 224.064836][T10217] _copy_from_user+0x2f/0xe0 [ 224.069481][T10217] copy_msghdr_from_user+0xae/0x680 [ 224.074757][T10217] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 224.080935][T10217] __sys_sendmsg+0x23d/0x3a0 [ 224.085609][T10217] ? __pfx___sys_sendmsg+0x10/0x10 [ 224.091336][T10217] ? vfs_write+0x7c4/0xc90 [ 224.096024][T10217] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 224.102408][T10217] ? do_syscall_64+0x100/0x230 [ 224.107307][T10217] ? do_syscall_64+0xb6/0x230 [ 224.112373][T10217] do_syscall_64+0xf3/0x230 [ 224.116910][T10217] ? clear_bhb_loop+0x35/0x90 [ 224.121631][T10217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.127562][T10217] RIP: 0033:0x7f4b67579e79 [ 224.132037][T10217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.156358][T10217] RSP: 002b:00007f4b68407038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.165173][T10217] RAX: ffffffffffffffda RBX: 00007f4b67715f80 RCX: 00007f4b67579e79 [ 224.174142][T10217] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 224.182698][T10217] RBP: 00007f4b68407090 R08: 0000000000000000 R09: 0000000000000000 [ 224.190719][T10217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.198739][T10217] R13: 0000000000000000 R14: 00007f4b67715f80 R15: 00007ffc1324dbe8 [ 224.206779][T10217] [ 224.486800][T10233] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.524657][T10236] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1662'. [ 224.689021][T10246] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1665'. [ 224.724877][T10242] netlink: 'syz.0.1664': attribute type 1 has an invalid length. [ 224.737186][T10242] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1664'. [ 224.827968][T10251] netlink: 'syz.1.1668': attribute type 11 has an invalid length. [ 224.847757][T10251] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1668'. [ 224.898192][T10253] netdevsim netdevsim0 netdevsim1: Unsupported IPsec algorithm [ 225.161433][T10272] xt_TPROXY: Can be used only with -p tcp or -p udp [ 225.351778][T10278] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 225.939863][ T55] block nbd33: Receive control failed (result -107) [ 225.989070][T10298] nbd33: detected capacity change from 0 to 256 [ 226.215984][T10325] __nla_validate_parse: 2 callbacks suppressed [ 226.216007][T10325] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1697'. [ 226.405754][T10332] IPv6: sit1: Disabled Multicast RS [ 226.422264][T10336] netdevsim netdevsim4 netdevsim1: Unsupported IPsec algorithm [ 226.451702][T10332] team0: Device sit1 is of different type [ 226.472558][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1700'. [ 226.529345][T10339] No such timeout policy "syz0" [ 226.546046][T10339] netlink: 'syz.0.1702': attribute type 10 has an invalid length. [ 226.567461][T10339] veth1_macvtap: left promiscuous mode [ 226.724455][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1704'. [ 226.825160][T10356] netlink: 'syz.2.1707': attribute type 10 has an invalid length. [ 226.888151][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1704'. [ 226.931736][T10356] bond0: (slave netdevsim0): Releasing backup interface [ 226.947282][ T55] block nbd34: Receive control failed (result -107) [ 226.972704][T10356] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 226.993330][T10348] nbd34: detected capacity change from 0 to 268435712 [ 227.009880][T10356] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 227.019372][T10356] team0: Port device netdevsim0 added [ 227.062171][T10362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1710'. [ 227.082181][T10355] vcan0 speed is unknown, defaulting to 1000 [ 227.098445][T10364] xt_CT: You must specify a L4 protocol and not use inversions on it [ 227.799512][T10396] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1717'. [ 228.001633][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1722'. [ 228.116427][T10410] xt_TPROXY: Can be used only with -p tcp or -p udp [ 228.313580][T10412] netdevsim netdevsim1 netdevsim1: Unsupported IPsec algorithm [ 228.469911][T10419] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1727'. [ 228.484884][T10419] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 228.929883][T10427] syzkaller0: entered promiscuous mode [ 228.940775][T10427] syzkaller0: entered allmulticast mode [ 229.000578][T10442] vcan0 speed is unknown, defaulting to 1000 [ 230.986368][T10445] vcan0 speed is unknown, defaulting to 1000 [ 231.526343][T10489] netdevsim netdevsim0 netdevsim1: Unsupported IPsec algorithm [ 231.689535][T10494] ieee802154 phy0 wpan0: encryption failed: -22 [ 231.736082][T10496] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1748'. [ 231.796122][T10496] vlan2: entered promiscuous mode [ 231.830469][T10498] ieee802154 phy0 wpan0: encryption failed: -22 [ 232.113011][T10506] syzkaller1: entered promiscuous mode [ 232.128044][T10506] syzkaller1: entered allmulticast mode [ 232.338418][ T30] INFO: task udevd:5251 blocked for more than 143 seconds. [ 232.347103][ T30] Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 232.398490][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 232.409579][ T30] task:udevd state:D stack:21400 pid:5251 tgid:5251 ppid:4679 flags:0x00004002 [ 232.422841][ T30] Call Trace: [ 232.426473][ T30] [ 232.430130][ T30] __schedule+0x1800/0x4a60 [ 232.435626][ T30] ? __pfx___schedule+0x10/0x10 [ 232.443137][ T30] ? __blk_flush_plug+0x449/0x500 [ 232.449434][ T30] ? __pfx_lock_release+0x10/0x10 [ 232.455596][ T30] ? __asan_memset+0x23/0x50 [ 232.461552][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 232.464097][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1755'. [ 232.468106][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 232.485990][ T30] ? schedule+0x90/0x320 [ 232.490624][ T30] schedule+0x14b/0x320 [ 232.495111][ T30] schedule_timeout+0x1be/0x310 [ 232.505066][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 232.516604][ T30] ? __pfx_process_timeout+0x10/0x10 [ 232.524464][ T30] ? prepare_to_wait_event+0x3ba/0x400 [ 232.532596][ T30] nbd_queue_rq+0x7cd/0x2f70 [ 232.543826][ T30] ? validate_chain+0x11e/0x5900 [ 232.553946][T10516] xt_TPROXY: Can be used only with -p tcp or -p udp [ 232.563439][T10513] netlink: 'syz.1.1755': attribute type 11 has an invalid length. [ 232.568806][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 232.582948][ T30] ? __lock_acquire+0x137a/0x2040 [ 232.603961][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 232.624512][ T30] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 232.642992][ T30] ? sbitmap_find_bit+0x435/0x4c0 [ 232.656611][ T30] ? sbitmap_get+0x289/0x3f0 [ 232.671137][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 232.681620][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 232.697568][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 232.720592][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 232.729647][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 232.735186][ T30] ? __pfx___might_resched+0x10/0x10 [ 232.742038][ T30] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 232.748971][ T30] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 232.754335][ T30] blk_mq_run_hw_queue+0x576/0xae0 [ 232.759978][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 232.765361][ T30] blk_mq_flush_plug_list+0x1115/0x1880 [ 232.771085][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 232.777058][ T30] ? blk_mq_submit_bio+0x1288/0x22d0 [ 232.782900][ T30] __blk_flush_plug+0x420/0x500 [ 232.788178][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 232.794052][ T30] ? timekeeping_get_ns+0x5c/0x420 [ 232.800032][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 232.807090][ T30] __submit_bio+0x422/0x560 [ 232.812034][ T30] ? __pfx___submit_bio+0x10/0x10 [ 232.817685][ T30] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 232.825072][ T30] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 232.834968][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 232.840987][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 232.849755][ T30] ? __pfx___might_resched+0x10/0x10 [ 232.855391][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 232.861924][ T30] block_read_full_folio+0x93b/0xcd0 [ 232.867968][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 232.873865][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 232.879988][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 232.884920][ T30] ? folio_add_lru+0x357/0xd70 [ 232.889826][ T30] ? folio_add_lru+0x58f/0xd70 [ 232.895155][ T30] filemap_read_folio+0x1a0/0x790 [ 232.900626][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 232.906140][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 232.912077][ T30] ? __filemap_get_folio+0x984/0xc10 [ 232.917476][ T30] do_read_cache_folio+0x134/0x820 [ 232.922849][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 232.928502][ T30] read_part_sector+0xb3/0x330 [ 232.934129][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 232.942266][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 232.947127][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 232.952778][ T30] ? snprintf+0xda/0x120 [ 232.957285][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 232.963999][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 232.968978][ T30] ? vsnprintf+0x184/0x1da0 [ 232.973549][ T30] ? __pfx_snprintf+0x10/0x10 [ 232.980920][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 232.986562][ T30] bdev_disk_changed+0x72c/0x13d0 [ 232.991780][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 232.998290][ T30] blkdev_get_whole+0x2d2/0x450 [ 233.003412][ T30] bdev_open+0x2d4/0xc60 [ 233.008181][ T30] blkdev_open+0x3e8/0x570 [ 233.012745][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 233.018024][ T30] do_dentry_open+0x970/0x1440 [ 233.022887][ T30] vfs_open+0x3e/0x330 [ 233.027113][ T30] path_openat+0x2b3e/0x3470 [ 233.032121][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 233.038126][ T30] ? __lock_acquire+0x137a/0x2040 [ 233.043641][ T30] ? __pfx_path_openat+0x10/0x10 [ 233.052055][ T30] do_filp_open+0x235/0x490 [ 233.056701][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 233.061852][ T30] ? _raw_spin_unlock+0x28/0x50 [ 233.066990][ T30] ? alloc_fd+0x5a1/0x640 [ 233.072853][ T30] do_sys_openat2+0x13e/0x1d0 [ 233.078159][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 233.083606][ T30] ? bpf_trace_run2+0x1fc/0x540 [ 233.088784][ T30] ? bpf_trace_run2+0x36e/0x540 [ 233.093694][ T30] __x64_sys_openat+0x247/0x2a0 [ 233.098648][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 233.104774][ T30] ? rcu_is_watching+0x15/0xb0 [ 233.110440][ T30] ? trace_sys_enter+0x1f/0xd0 [ 233.115271][ T30] do_syscall_64+0xf3/0x230 [ 233.120298][ T30] ? clear_bhb_loop+0x35/0x90 [ 233.125278][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.131392][ T30] RIP: 0033:0x7fc09ef169a4 [ 233.135860][ T30] RSP: 002b:00007ffdd923c580 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 233.144515][ T30] RAX: ffffffffffffffda RBX: 0000557af7ac0e10 RCX: 00007fc09ef169a4 [ 233.152855][ T30] RDX: 00000000000a0800 RSI: 0000557af7ab1d90 RDI: 00000000ffffff9c [ 233.164150][ T30] RBP: 0000557af7ab1d90 R08: 0000000000000001 R09: 7fffffffffffffff [ 233.172401][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 233.181499][ T30] R13: 0000557af7ab2250 R14: 0000000000000002 R15: 0000557af7a9f910 [ 233.189821][ T30] [ 233.192932][ T30] [ 233.192932][ T30] Showing all locks held in the system: [ 233.201882][ T30] 1 lock held by khungtaskd/30: [ 233.206976][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 233.217107][ T30] 3 locks held by kworker/u8:8/2572: [ 233.222668][ T30] #0: ffff888015889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 233.236121][ T30] #1: ffffc90009427d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 233.248506][ T30] #2: ffffffff8fc845c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 233.259543][ T30] 2 locks held by getty/4988: [ 233.264541][ T30] #0: ffff88802f67a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 233.284556][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 233.297493][ T30] 3 locks held by udevd/5242: [ 233.302405][ T30] #0: ffff88802136e4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 233.315639][ T30] #1: ffff88801fd8ec90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 233.325325][ T30] #2: ffff888021560180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 233.336044][ T30] 3 locks held by udevd/5251: [ 233.341877][ T30] #0: ffff888020ac54c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 233.352609][ T30] #1: ffff888020a5b190 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 233.364924][ T30] #2: ffff888020bf8180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 233.375258][ T30] 3 locks held by udevd/5252: [ 233.383497][ T30] #0: ffff8880211d14c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 233.395449][ T30] #1: ffff88802121e110 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 233.409775][ T30] #2: ffff888021308180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 233.419715][ T30] 3 locks held by udevd/5253: [ 233.424809][ T30] #0: ffff888060f674c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 233.435438][ T30] #1: ffff888024790590 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 233.447236][ T30] #2: ffff888012358180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 233.457715][ T30] 3 locks held by udevd/5254: [ 233.464778][ T30] #0: ffff8880210c24c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 233.474883][ T30] #1: ffff88801fe82390 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 233.487172][ T30] #2: ffff888021130180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 233.499435][ T30] 3 locks held by kworker/1:4/5285: [ 233.504706][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 233.519618][ T30] #1: ffffc90003f47d00 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 233.533510][ T30] #2: ffffffff8e93d5c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 233.544197][ T30] 3 locks held by kworker/1:7/5336: [ 233.549774][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 233.564647][ T30] #1: ffffc900040f7d00 ((work_completion)(&rdev->destroy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 233.577741][ T30] #2: ffffffff8fc845c8 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_destroy_iface_wk+0x19/0x30 [ 233.588352][ T30] 3 locks held by udevd/6318: [ 233.593219][ T30] #0: ffff8880210794c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 233.602994][ T30] #1: ffff888020bb4490 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 233.619495][ T30] #2: ffff8880211a0180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 233.629584][ T30] 3 locks held by udevd/6502: [ 233.635117][ T30] #0: ffff88802107d4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 233.648507][ T30] #1: ffff888020bb4b10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 233.658853][ T30] #2: ffff8880212a8180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 233.668289][ T30] 3 locks held by udevd/7196: [ 233.672995][ T30] #0: ffff8880236734c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 233.684247][ T30] #1: ffff88802ee0e290 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 233.695520][ T30] #2: ffff88805aa80180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 233.704726][ T30] 3 locks held by udevd/7197: [ 233.710228][ T30] #0: ffff8880211fe4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 233.720379][ T30] #1: ffff88801fe5fc90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 233.732601][ T30] #2: ffff8880213e8180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 233.742495][ T30] 3 locks held by udevd/7965: [ 233.749508][ T30] #0: ffff8880212fd4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 233.762117][ T30] #1: ffff888021286910 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 233.772232][ T30] #2: ffff8880215d0180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 233.784226][ T30] 3 locks held by udevd/8067: [ 233.791980][ T30] #0: ffff88805fe014c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 233.804177][ T30] #1: ffff88802e0e4c10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 233.814020][ T30] #2: ffff88807f7e0180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 233.824613][ T30] 3 locks held by udevd/8247: [ 233.829423][ T30] #0: ffff88805f1af4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 233.841149][ T30] #1: ffff888029370e10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 233.852541][ T30] #2: ffff88805f208180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 233.863407][ T30] 3 locks held by syz.4.1732/10445: [ 233.870657][ T30] #0: ffffffff8fc77a10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 233.880431][ T30] #1: ffffffff8fc845c8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 233.891881][ T30] #2: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 233.903353][ T30] [ 233.905717][ T30] ============================================= [ 233.905717][ T30] [ 233.922688][ T30] NMI backtrace for cpu 0 [ 233.927100][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 233.937627][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 233.948254][ T30] Call Trace: [ 233.951561][ T30] [ 233.954511][ T30] dump_stack_lvl+0x241/0x360 [ 233.959352][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.964599][ T30] ? __pfx__printk+0x10/0x10 [ 233.969208][ T30] ? vprintk_emit+0x667/0x7c0 [ 233.973900][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 233.978969][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 233.983954][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 233.989460][ T30] ? _printk+0xd5/0x120 [ 233.993637][ T30] ? __pfx__printk+0x10/0x10 [ 233.998438][ T30] ? __wake_up_klogd+0xcc/0x110 [ 234.003354][ T30] ? __pfx__printk+0x10/0x10 [ 234.008005][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 234.013250][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 234.019354][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 234.025740][ T30] watchdog+0xff4/0x1040 [ 234.030099][ T30] ? watchdog+0x1ea/0x1040 [ 234.034546][ T30] ? __pfx_watchdog+0x10/0x10 [ 234.039335][ T30] kthread+0x2f0/0x390 [ 234.043585][ T30] ? __pfx_watchdog+0x10/0x10 [ 234.048739][ T30] ? __pfx_kthread+0x10/0x10 [ 234.053728][ T30] ret_from_fork+0x4b/0x80 [ 234.058506][ T30] ? __pfx_kthread+0x10/0x10 [ 234.063752][ T30] ret_from_fork_asm+0x1a/0x30 [ 234.068737][ T30] [ 234.072912][ T30] Sending NMI from CPU 0 to CPUs 1: [ 234.078415][ C1] NMI backtrace for cpu 1 [ 234.078430][ C1] CPU: 1 UID: 0 PID: 17 Comm: rcu_preempt Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 234.078451][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 234.078461][ C1] RIP: 0010:kasan_check_range+0x79/0x290 [ 234.078496][ C1] Code: 4d 89 c1 49 c1 e9 03 49 be 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 <4c> 89 cd 48 f7 d5 48 01 dd 41 80 3b 00 0f 85 c9 01 00 00 49 ff c3 [ 234.078512][ C1] RSP: 0018:ffffc90000167760 EFLAGS: 00000002 [ 234.078528][ C1] RAX: 0000000000000001 RBX: 1ffffffff26e6908 RCX: ffffffff816fd944 [ 234.078541][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff93734840 [ 234.078553][ C1] RBP: 0000000000000001 R08: ffffffff93734847 R09: 1ffffffff26e6908 [ 234.078565][ C1] R10: dffffc0000000000 R11: fffffbfff26e6908 R12: ffff888017ee8000 [ 234.078579][ C1] R13: 0000000000000001 R14: dffffc0000000001 R15: fffffbfff26e6909 [ 234.078591][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 234.078606][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 234.078618][ C1] CR2: 00007ffc1324e010 CR3: 000000000e734000 CR4: 00000000003506f0 [ 234.078633][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 234.078644][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 234.078655][ C1] Call Trace: [ 234.078662][ C1] [ 234.078670][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 234.078693][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 234.078719][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 234.078750][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 234.078772][ C1] ? nmi_handle+0x14f/0x5a0 [ 234.078788][ C1] ? nmi_handle+0x2a/0x5a0 [ 234.078813][ C1] ? kasan_check_range+0x79/0x290 [ 234.078839][ C1] ? default_do_nmi+0x63/0x160 [ 234.078860][ C1] ? exc_nmi+0x123/0x1f0 [ 234.078880][ C1] ? end_repeat_nmi+0xf/0x53 [ 234.078906][ C1] ? __lock_acquire+0x4d4/0x2040 [ 234.078929][ C1] ? kasan_check_range+0x79/0x290 [ 234.078955][ C1] ? kasan_check_range+0x79/0x290 [ 234.078982][ C1] ? kasan_check_range+0x79/0x290 [ 234.079008][ C1] [ 234.079013][ C1] [ 234.079021][ C1] __lock_acquire+0x4d4/0x2040 [ 234.079053][ C1] lock_acquire+0x1ed/0x550 [ 234.079077][ C1] ? __debug_object_init+0xdc/0x400 [ 234.079097][ C1] ? debug_objects_fill_pool+0x80/0x9b0 [ 234.079115][ C1] ? debug_objects_fill_pool+0x80/0x9b0 [ 234.079136][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 234.079164][ C1] ? __lock_acquire+0x137a/0x2040 [ 234.079193][ C1] _raw_spin_lock_irqsave+0xd5/0x120 [ 234.079218][ C1] ? __debug_object_init+0xdc/0x400 [ 234.079236][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 234.079266][ C1] __debug_object_init+0xdc/0x400 [ 234.079288][ C1] ? __pfx___debug_object_init+0x10/0x10 [ 234.079305][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 234.079330][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 234.079360][ C1] schedule_timeout+0x121/0x310 [ 234.079382][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 234.079410][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 234.079436][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 234.079458][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 234.079490][ C1] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 234.079513][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 234.079535][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 234.079563][ C1] ? finish_swait+0xd4/0x1e0 [ 234.079585][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 234.079609][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 234.079630][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 234.079657][ C1] ? __kthread_parkme+0x169/0x1d0 [ 234.079682][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 234.079703][ C1] kthread+0x2f0/0x390 [ 234.079729][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 234.079751][ C1] ? __pfx_kthread+0x10/0x10 [ 234.079777][ C1] ret_from_fork+0x4b/0x80 [ 234.079801][ C1] ? __pfx_kthread+0x10/0x10 [ 234.079833][ C1] ret_from_fork_asm+0x1a/0x30 [ 234.079867][ C1] [ 234.520124][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 234.528918][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 234.543385][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 234.555480][ T30] Call Trace: [ 234.560879][ T30] [ 234.564483][ T30] dump_stack_lvl+0x241/0x360 [ 234.569821][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.575692][ T30] ? __pfx__printk+0x10/0x10 [ 234.580790][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 234.588609][ T30] ? vscnprintf+0x5d/0x90 [ 234.593588][ T30] panic+0x349/0x860 [ 234.599068][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 234.607189][ T30] ? __pfx_panic+0x10/0x10 [ 234.612887][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 234.619778][ T30] ? __irq_work_queue_local+0x137/0x410 [ 234.626602][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 234.632302][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 234.639464][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 234.645680][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 234.652893][ T30] watchdog+0x1033/0x1040 [ 234.657961][ T30] ? watchdog+0x1ea/0x1040 [ 234.662536][ T30] ? __pfx_watchdog+0x10/0x10 [ 234.667913][ T30] kthread+0x2f0/0x390 [ 234.672821][ T30] ? __pfx_watchdog+0x10/0x10 [ 234.677899][ T30] ? __pfx_kthread+0x10/0x10 [ 234.683465][ T30] ret_from_fork+0x4b/0x80 [ 234.689509][ T30] ? __pfx_kthread+0x10/0x10 [ 234.695121][ T30] ret_from_fork_asm+0x1a/0x30 [ 234.702119][ T30] [ 234.705976][ T30] Kernel Offset: disabled [ 234.710547][ T30] Rebooting in 86400 seconds..