last executing test programs: 4.922124944s ago: executing program 0 (id=1817): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={0x0, @in6={{0xa, 0x8, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0xffff, 0x80}, &(0x7f0000000500)=0x90) 4.672584589s ago: executing program 0 (id=1820): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000340)=@ethtool_gstrings={0x1b, 0x9}}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, 0x0, &(0x7f0000000300)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x118, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@set={{0x40}, {{0x1, [0x8, 0x5, 0x0, 0x0, 0x5, 0x2], 0x4, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, 'bond_slave_0\x00', {0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@multicast2, [0xffffff00, 0xffffff00, 0xffffffff, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xffffff00, 0xff000000, 0xffffff00], @ipv4=@remote, [0xffffff00, 0xffffffff, 0xff, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffffff, 0xff, 0xff000000], 0xfffffffe, 0x8210, 0x4, 0x4e24, 0x4e21, 0x4e20, 0x4e24, 0x0, 0x300}, 0x40, 0x5c}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100050808004149004006040800", 0x58}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, 0x0, 0x90c5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000090000008500000011000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, @void, @value}, 0x94) 4.233733322s ago: executing program 0 (id=1824): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r2, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x52}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff6}]}, &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x3e, &(0x7f0000000200)=""/62, 0x40f00, 0xb, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x1, 0x360f, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000300)=[r1, r0, r1, r2], &(0x7f0000000340)=[{0x3, 0x3, 0x2, 0x9}, {0x4, 0x4, 0x40b, 0x9}], 0x10, 0xfffffff7, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000140), &(0x7f0000000440)=r3}, 0x20) r4 = socket(0x2, 0xa, 0x850) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000640)={&(0x7f0000000500), 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xc0, 0xb, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1ff}}]}, @IPSET_ATTR_ADT={0x4c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x63}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9aa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x47}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000801}, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x20) write$cgroup_int(r2, &(0x7f00000004c0)=0x6, 0x12) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b2a, &(0x7f0000000000)="2411424e0be1155385c1a5163894724153496f1ae43b09e65409000000702f38cf2216f579f0ab0408296b3759329b70a3a68246a918f3d7910500e08345") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000180)) sendmsg$inet(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1}, 0x11) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 3.936562423s ago: executing program 4 (id=1829): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x18, 0x0, 0x301, 0x0, 0x0, {0x1c}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040015}, 0x0) write(r2, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) 3.520940295s ago: executing program 0 (id=1831): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002980)=""/4096, 0x1000}], 0x1}, 0x9}], 0x3, 0x2000, 0x0) recvmmsg(r2, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000000)=""/133, 0x85}, {&(0x7f00000013c0)=""/96, 0x60}], 0x3}, 0x5}], 0x1, 0x100, 0x0) openat$cgroup_int(r1, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) recvmsg$can_j1939(r0, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x40) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @private0, 0xbffffffa}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80000) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newqdisc={0x110, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x401}, @TCA_FQ_FLOW_REFILL_DELAY={0x4}]}}, @TCA_STAB={0xd0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0xffff, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x23, 0x4, 0x69, 0x0, 0x1, 0x80000000, 0x8, 0x3}}, {0xa, 0x2, [0x1, 0xffff, 0x40]}}, {{0x1c, 0x1, {0x7, 0x6, 0x2, 0x6, 0x2, 0x9, 0xfffffff7, 0x9}}, {0x16, 0x2, [0x10, 0x3, 0x4, 0x8001, 0x6, 0x3, 0xe, 0x800, 0x3]}}, {{0x1c, 0x1, {0x9, 0x5, 0x7, 0x1, 0x0, 0x6, 0x9, 0x1}}, {0x6, 0x2, [0x1]}}]}]}, 0x110}}, 0x0) close(0x3) 2.999498782s ago: executing program 3 (id=1832): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x300, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x84, 0x12, 0xa, 0x5, 0x0, 0x0, {0x5}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_DATA={0x70, 0x4, 0x0, 0x1, [@NFTA_CT_TIMEOUT_DATA={0x54, 0x3, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffb34}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3b77}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, @NFTA_CT_TIMEOUT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_TIMEOUT_L4PROTO={0x5, 0x2, 0x1}, @NFTA_CT_TIMEOUT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0xf9}]}}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x26}]}], {0x14}}, 0xf4}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4010) unshare(0x40020000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010004b0400000000fedbdf257a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800800080088a800000b0001"], 0x48}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004000000080000000e"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2, 0x80805, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) pipe(&(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaab1981def7337b0a6aaaa86e96000ed6a000b2c00fe8000020000000000000000000000bbfe800000000000000000000000f3ffa933f951d5000003d926dcad931056c1031af0830700000000000000da759c3961610798a1d59f6640c3eb5175cd3eb7b40f42a6126a19222ef0fcb452358bbc4784b495ec61c7194257a064d2efa1f14ee84710c442dba66b8e40c31aed286ffcfd6b02cb1b6c3d0c72d48ee4a1b3a494f1d2560acae3e515b1a16b44ae81d83272d8c1aab6acb1c882e8da1daee73323ce901bf11a3555cc5dd73b9461d1fdac440e85c6fd3281167cec30ef", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYRES64=r4], 0x10) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x8, 0x1, &(0x7f0000000400)="e6", 0x9, 0x1, 0x7c0, 0x6e6, 0x8b, 0x2, 0x7, 'syz1\x00'}) 2.356585669s ago: executing program 0 (id=1833): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="dc2000003d0007010000000000000000017c0000040000000c00018006000600800a0000b8200280b1201980d8"], 0x20dc}}, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000000002000000400004803c0001800c0001007061796c6f6164002c000280080004400000000008000540000000000180ffff00000000080006400000000208000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) unshare(0x6a040000) unshare(0x20000400) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r4 = socket(0x2000000000000021, 0x2, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r4, @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x4009814}, 0xc040080) sendmsg$kcm(r5, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @loopback, 0x5}, 0x80, 0x0}, 0x24004059) close(r5) socket$phonet_pipe(0x23, 0x5, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xe4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) socket$inet(0x2, 0x3, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) socket$phonet_pipe(0x23, 0x5, 0x2) 1.893227168s ago: executing program 2 (id=1836): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0100001000130700000000fffffffeac1e0001000000000000000000000000e000000100000000000000000000000000000000000000000a0000005e0000ff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d432000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000100000000000000000000000000000000000010000000000000002000400000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001800cd0000000c001c"], 0x14c}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 1.660147196s ago: executing program 2 (id=1837): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000000)=0xd, 0x4) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6002adf700303a00fe880000000000000000000000000001ff02000000000000000000000000000102"], 0x0) getsockopt$inet_int(r1, 0x10d, 0xb9, &(0x7f0000000000), &(0x7f0000000240)=0x4) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x7c, r4, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6df7736af2ca"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6e61}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x1f, 0x2a, [@rann={0x7e, 0xffffffffffffffca, {{0x1, 0x6f}, 0x5, 0x8, @broadcast, 0x0, 0x6, 0x6}}, @supported_rates={0x1, 0x2, [{0x6, 0x1}, {0x1}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000080}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001d0800034000000007540000000c0a01020000000000000000010000020900020073797a32000000002800038024000080040001800800034000000001140005800a000100696e6e6572000000040002800900010073797a30"], 0xe0}}, 0x0) (async) r5 = socket$inet_dccp(0x2, 0x6, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f0000000100)={0x1f, 0x7, @none, 0x73, 0x1}, 0xe) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000006300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) connect$packet(r6, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) 1.486541135s ago: executing program 3 (id=1840): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd6000000000002d9300000c0001800800", @ANYRES8=r0], 0x20}, 0x1, 0x0, 0x0, 0x40801}, 0x20040814) 1.380689963s ago: executing program 2 (id=1841): ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee01) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 32) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x3bc0, 0x4) (async) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendto$packet(r0, &(0x7f00000002c0)="fb57975e267951722b395d37bac8", 0xe, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 32) sendmmsg$sock(r4, &(0x7f000000bb00)=[{{&(0x7f0000009fc0)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x5}}], 0x10}}], 0x1, 0x4840) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r6 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000280)={r7, 0x11, 0x6}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 1.321807565s ago: executing program 1 (id=1842): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801007b696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002075400000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.321238905s ago: executing program 2 (id=1843): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r4, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/61, 0x3d}, 0x2}], 0x1, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x6, 0x0, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000100)=ANY=[@ANYBLOB="fffffff7ffff0180c2000000080045040020000000000728fa4f2f0500119078000000000000000000000005000c909801000005fab65eeaa476d1b80aa3a108a2cb37892e8a9cdee8f360afb9f6666f27dc53d41fd5c394d82929635e37e889a09a0715d2a07cb249ef36a5c2"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x1fd}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 1.296391414s ago: executing program 3 (id=1844): socket$inet(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x6, 0x1, {{0x0, 0x0, 0x0, 0x12000000, 0x6}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="30fd00a1f016f3c649c42fd007981316a013d17eef9096b87dae60229364d6a489f428ef8b1b2e06b8fb45542b2851847cde84eb912162385b76b3cba7d60eec78ab2e896547e07eb054bb02ce206f946f9116f7f61441a902092b26474fc5d7de94", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c00018008000300ac141439060001000200000005000200ff000000"], 0x30}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x404}, 0x1, 0x0, 0x0, 0x84}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) accept$alg(r5, 0x0, 0x0) (async) r6 = accept$alg(r5, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0xffffffffffffffe0}, 0x6}, {{0x0, 0x0, &(0x7f0000000ec0), 0x1}}, {{&(0x7f0000000100)=@pppol2tpin6, 0x3c, &(0x7f0000000380)=[{&(0x7f0000000180)=""/143}, {&(0x7f0000000040)=""/42}, {&(0x7f0000000240)=""/179}, {&(0x7f0000000340)=""/17}], 0x0, &(0x7f0000000640)=""/50}, 0x3}, {{&(0x7f0000000480)=@rc, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)=""/99}], 0x0, &(0x7f0000001fc0)=""/4096}, 0x1}, {{&(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000c00)=""/203}, 0x70}], 0x2, 0x0, 0x0) (async) recvmmsg(r6, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0xffffffffffffffe0}, 0x6}, {{0x0, 0x0, &(0x7f0000000ec0), 0x1}}, {{&(0x7f0000000100)=@pppol2tpin6, 0x3c, &(0x7f0000000380)=[{&(0x7f0000000180)=""/143}, {&(0x7f0000000040)=""/42}, {&(0x7f0000000240)=""/179}, {&(0x7f0000000340)=""/17}], 0x0, &(0x7f0000000640)=""/50}, 0x3}, {{&(0x7f0000000480)=@rc, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)=""/99}], 0x0, &(0x7f0000001fc0)=""/4096}, 0x1}, {{&(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000c00)=""/203}, 0x70}], 0x2, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 1.0937611s ago: executing program 1 (id=1845): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) unshare(0x20040600) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x6000000, 0x48a, &(0x7f0000000600)={0x2, 0x401, 0x5}, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0x9, 0x1d, &(0x7f0000000300)="eefe0f1ab07c28336f", &(0x7f0000000340)=""/29, 0x0, 0x0, 0xb7, 0xc3, &(0x7f00000003c0)="181c6eddbb1330a56f2830fc3ab6c9da8c5aef700f2bd0f96d81e53f855f9a832dc4a4458121539d3f83955a1eb4dbaf5d6decc1e337c67a315484a0e57b7d84f5dbdff9073b46be348e82c9c3d1820c9667ca13d154a6f3559938e575b07fc0087d5d0a58a7644b31b75e578c1d0801aeb191f4bbdff40243850764fce83500439f72b55436fda75140fc73e1dc9722833be43b71f497b5b5f15c7d8537f67861f2f6df1470c0c93b7df882473681f7b69d2d7b83cbc9", &(0x7f0000000480)="245d782d56db1ef34ac7f0d4dbb26a087be8adc8ab5d10a663751b80c02da5312e12bc4deb995ce78fa90b116ff963dd33a88187ece617db46b207cfd1e3f6aaf4a9a912d30472c07d081492931a873caeec8dae82c818aa2759eec6416f446123af15e0459c1f3459f0a28aac0dcce70f2180c4e5bf072c0420c5d366b442df8a5df591265bdf7e33b638e29da6372dee656e8070870283d730b8f49d4eea89c9b66ef0061fbdb408a330a223f7ab6f438d3d5d4a838aa0144bc6c9706d0c0233fd35", 0x5, 0x0, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) shutdown(r5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r8, @ANYBLOB="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"], 0x1c8}}, 0x0) 1.09291037s ago: executing program 4 (id=1846): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000200", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="5c2a99d37a49a8bd95bb17b2f1b7b60e854fc0a03eeb310abde9bac2a55b328e57f42a87b6c7b93b9597fa49512f8e05bccbd143a527aba89580a02626ed2bee02cfda914152b4c8249eb1b2ca76dea47dab09931910a989834bcd6dd4d9c4"], 0x40}}, 0xc8c0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000200", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="5c2a99d37a49a8bd95bb17b2f1b7b60e854fc0a03eeb310abde9bac2a55b328e57f42a87b6c7b93b9597fa49512f8e05bccbd143a527aba89580a02626ed2bee02cfda914152b4c8249eb1b2ca76dea47dab09931910a989834bcd6dd4d9c4"], 0x40}}, 0xc8c0) sendmmsg$inet(r0, 0x0, 0x0, 0x10000) (async) sendmmsg$inet(r0, 0x0, 0x0, 0x10000) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1700000000000000008400000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e7c1ba31376606e40000000000000000"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1700000000000000008400000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e7c1ba31376606e40000000000000000"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r5, 0x0, 0x20000000}, 0x20) socket(0x1e, 0x1506b60b34f2008f, 0x3a) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) r7 = openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="b011d08afc99cf6754d4c259d71c7596afc4a76608a319a454412a02a4c229307c4f54d7eb11ae380c7173dff3f093fc", 0x30) r9 = accept$alg(r8, 0x0, 0x0) recvmmsg(r9, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)=""/49, 0x31}], 0x1}}], 0x1, 0x0, 0x0) write$cgroup_freezer_state(r7, 0x0, 0x0) (async) write$cgroup_freezer_state(r7, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket(0x840000000002, 0x3, 0xff) (async) r11 = socket(0x840000000002, 0x3, 0xff) connect$inet(r11, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg$inet(r11, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) close(r11) socket$alg(0x26, 0x5, 0x0) 840.738557ms ago: executing program 1 (id=1847): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0100001000130700000000fffffffeac1e0001000000000000000000000000e000000100000000000000000000000000000000000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d432000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000100000000000000000000000000000000000010000000000000002000400000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001800cd0000000c001c"], 0x14c}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 819.698437ms ago: executing program 3 (id=1848): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="1000018004000480080001"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) recvfrom$inet(r3, &(0x7f00000001c0)=""/147, 0x93, 0x20, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 754.191229ms ago: executing program 4 (id=1849): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5992a015}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 684.654032ms ago: executing program 1 (id=1850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001006d617371000000000c00028008000140000000250900010073797a30000000000900020073797a32"], 0x74}, 0x1, 0x0, 0x0, 0x24}, 0x0) 654.456582ms ago: executing program 3 (id=1851): r0 = socket$inet6(0xa, 0x3, 0x6) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r4, &(0x7f0000000340)="e0c2803df7b6db6e8b4fb855ea6fa8f9048562a8a6f9591abde0bdad140e661403feba8097c7b94f5c58086d4423b18bd9cfbdd3654661034df2c025d63a4871be392a9b12691b7555e764890f430c3d287a367e859fea0093d882dfadb258e5cf1f4ef5f9d022adab103c1f4c8e4b1189775478ad3064bb1a698c582cc6b00611585ff1a4980a1ab52bbee7f61bbd53f6d14fbe647a5b9584ddd53f8a5e9a7ea5cf401f160bf2fd8f33afb9210ae2fc769b2e99890b07805fdb7f7d63d5e7", &(0x7f0000000240)=@udp6=r0, 0x2}, 0x20) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x78}}, 0x0) (rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) (async, rerun: 32) write$tun(r6, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x3fe, 0x0, 0x1c, {[@window={0xb, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) (rerun: 32) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 64) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e2b, 0x10000000, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) (rerun: 64) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) (async, rerun: 32) r10 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=ANY=[@ANYBLOB="44000000180008000000000000000000020000000000000900080000080010000500000014001680100008800c00038005000400000000000c0009000100080c", @ANYRES32=r11, @ANYBLOB="8ec079b8d0a6a7512ba5ada433ae170a82ada47baf1a41501cdce89d5602dd8a874cab760e91a055ec701f098c74d0f4b97d4810822c41afc4b2dfc460ba56ae394ace2ca4b2727064bdb29f6e8903f9e4c5e4b9e4bd88aabec448c713e0926379e769"], 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 560.694755ms ago: executing program 4 (id=1852): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0xc810) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r0, 0xc, 0x0, 0x80, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7d, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000340), &(0x7f0000000440), 0x8, 0x9f, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback=r0, 0xffffffffffffffff, 0x16, 0x24, 0x0, @void, @void, @void, @value=r5, r4}, 0x20) accept4$llc(r3, &(0x7f0000000600)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000640)=0x10, 0x80000) 428.655137ms ago: executing program 1 (id=1853): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="d3ddd1de00000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\nX', @ANYRES32], 0x44}}, 0x0) 343.715213ms ago: executing program 4 (id=1854): socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040), 0x8) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0xc4e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r3, 0xda90) (async) socket$caif_seqpacket(0x25, 0x5, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) unshare(0x20040400) socket$rxrpc(0x21, 0x2, 0xa) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r1, 0xfffffffffffffe59, 0x0}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400000000000000731132000000000016640000000001009500740000000000ba56e23690a87d00935e6c02bdc1aa666714e5893645da93e92b81970ec7"], &(0x7f00000008c0)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @mcast2, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}}) 313.802139ms ago: executing program 2 (id=1855): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010090696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002075400000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 212.344483ms ago: executing program 1 (id=1856): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_type(r1, &(0x7f0000000000), 0x9) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}]}}, &(0x7f0000000f40)=""/4089, 0x26, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x28) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'nicvf0\x00', 0x0}) (async, rerun: 32) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)=0x3) (rerun: 32) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0782010000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00\x00\x00\n\x00'/17, @ANYRES32=r3, @ANYBLOB], 0x50}}, 0x0) 146.86365ms ago: executing program 2 (id=1857): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) unshare(0x20040600) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x1e010000, 0x48a, &(0x7f0000000600)={0x2, 0x401, 0x5}, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0x9, 0x1d, &(0x7f0000000300)="eefe0f1ab07c28336f", &(0x7f0000000340)=""/29, 0x0, 0x0, 0xb7, 0xc3, &(0x7f00000003c0)="181c6eddbb1330a56f2830fc3ab6c9da8c5aef700f2bd0f96d81e53f855f9a832dc4a4458121539d3f83955a1eb4dbaf5d6decc1e337c67a315484a0e57b7d84f5dbdff9073b46be348e82c9c3d1820c9667ca13d154a6f3559938e575b07fc0087d5d0a58a7644b31b75e578c1d0801aeb191f4bbdff40243850764fce83500439f72b55436fda75140fc73e1dc9722833be43b71f497b5b5f15c7d8537f67861f2f6df1470c0c93b7df882473681f7b69d2d7b83cbc9", &(0x7f0000000480)="245d782d56db1ef34ac7f0d4dbb26a087be8adc8ab5d10a663751b80c02da5312e12bc4deb995ce78fa90b116ff963dd33a88187ece617db46b207cfd1e3f6aaf4a9a912d30472c07d081492931a873caeec8dae82c818aa2759eec6416f446123af15e0459c1f3459f0a28aac0dcce70f2180c4e5bf072c0420c5d366b442df8a5df591265bdf7e33b638e29da6372dee656e8070870283d730b8f49d4eea89c9b66ef0061fbdb408a330a223f7ab6f438d3d5d4a838aa0144bc6c9706d0c0233fd35", 0x5, 0x0, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) shutdown(r5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000"], 0x1c8}}, 0x0) 125.417425ms ago: executing program 3 (id=1858): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r1}, &(0x7f00000003c0), &(0x7f0000000440)='%pS \x00'}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="414caf0523721f13e2299d37d83e18155bf9810cbea597fee0deb082d365336017cf9bbf6f87606b7c09d2ddaae944fe1bae8277d8696bbcbc07ce12033a830166160d17e9cd21af719b34d5710ef5ad107c8d4433c98548c66910e87f6fabbbcc00000000000000000000f981ee788e5e4f1f1b7cb30000e7dc", @ANYRES64=0x0], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x40, r4, 0x1, 0x170bd2c, 0x8004, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000de080000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0xfffffffffffffdcb, 0x2}]}, @IFLA_LINKMODE={0x5}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}]}, 0x44}}, 0x8054) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) close(0x4) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@bridge_delneigh={0x34, 0x1c, 0xc07, 0x0, 0x0, {0x2, 0x0, 0x0, r11, 0x976e2df3e7542dc7}, [@NDA_DST_MAC={0xa}, @NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x34}}, 0x20024090) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x68, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x1, @link='broadcast-link\x00'}}}, ["", ""]}, 0x68}}, 0x0) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)={0x1048, 0x2e, 0x100, 0x70bd26, 0x0, "", [@nested={0x102f, 0x800, 0x0, 0x1, [@generic="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"]}, @nested={0x8, 0x18, 0x0, 0x1, [@generic="0cac0f00"]}]}, 0x1048}], 0x1}, 0x0) 80.664307ms ago: executing program 4 (id=1859): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async, rerun: 64) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async, rerun: 64) sendto$inet6(r1, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) (async, rerun: 64) syz_emit_ethernet(0x5a, &(0x7f0000000240)=ANY=[], 0x0) (async, rerun: 64) shutdown(r1, 0x0) (async) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x4, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000001280)='mctp_key_acquire\x00', r6, 0x0, 0x8003}, 0x18) (async, rerun: 32) close(r3) (rerun: 32) write$cgroup_int(r4, &(0x7f0000000140), 0xfffffdef) (async, rerun: 32) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x44, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[], 0x18}], 0x1}, 0x80) (rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000300)=0x13, 0x4) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) 0s ago: executing program 0 (id=1860): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x920000000000240d) kernel console output (not intermixed with test programs): syzkaller-01216-gbfc6c67ec2d6 #0 [ 153.710297][ T8462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 153.710310][ T8462] Call Trace: [ 153.710317][ T8462] [ 153.710327][ T8462] dump_stack_lvl+0x241/0x360 [ 153.710362][ T8462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.710388][ T8462] ? __pfx__printk+0x10/0x10 [ 153.710412][ T8462] ? __pfx_lock_release+0x10/0x10 [ 153.710459][ T8462] should_fail_ex+0x40a/0x550 [ 153.710500][ T8462] _copy_from_iter+0x1df/0x1c40 [ 153.710528][ T8462] ? __virt_addr_valid+0x183/0x530 [ 153.710551][ T8462] ? __pfx_lock_release+0x10/0x10 [ 153.710593][ T8462] ? __pfx__copy_from_iter+0x10/0x10 [ 153.710622][ T8462] ? __virt_addr_valid+0x183/0x530 [ 153.710651][ T8462] ? __virt_addr_valid+0x183/0x530 [ 153.710671][ T8462] ? __virt_addr_valid+0x45f/0x530 [ 153.710692][ T8462] ? __phys_addr_symbol+0x2f/0x70 [ 153.710713][ T8462] ? __check_object_size+0x47a/0x730 [ 153.710750][ T8462] tipc_msg_build+0x846/0x1040 [ 153.710794][ T8462] ? __pfx_tipc_msg_build+0x10/0x10 [ 153.710817][ T8462] ? tipc_group_bc_cong+0x1d0/0x290 [ 153.710866][ T8462] tipc_send_group_bcast+0x889/0xbd0 [ 153.710910][ T8462] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 153.710964][ T8462] ? __pfx_woken_wake_function+0x10/0x10 [ 153.711012][ T8462] __tipc_sendmsg+0x363/0x35d0 [ 153.711041][ T8462] ? ima_match_policy+0x114/0x2100 [ 153.711076][ T8462] ? __pfx___tipc_sendmsg+0x10/0x10 [ 153.711100][ T8462] ? ima_get_action+0x75/0xb0 [ 153.711129][ T8462] ? __pfx_validate_chain+0x10/0x10 [ 153.711158][ T8462] ? mark_lock+0x9a/0x360 [ 153.711182][ T8462] ? __lock_acquire+0x1397/0x2100 [ 153.711236][ T8462] ? mark_lock+0x9a/0x360 [ 153.711261][ T8462] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 153.711296][ T8462] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 153.711341][ T8462] ? __local_bh_enable_ip+0x168/0x200 [ 153.711371][ T8462] ? tipc_sendmsg+0x47/0x70 [ 153.711395][ T8462] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 153.711437][ T8462] ? do_raw_spin_unlock+0x13c/0x8b0 [ 153.711479][ T8462] ? __pfx_tipc_sendmsg+0x10/0x10 [ 153.711501][ T8462] tipc_sendmsg+0x55/0x70 [ 153.711526][ T8462] __sock_sendmsg+0x221/0x270 [ 153.711562][ T8462] ____sys_sendmsg+0x53a/0x860 [ 153.711599][ T8462] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.711622][ T8462] ? __fget_files+0x2a/0x410 [ 153.711666][ T8462] ? __fget_files+0x2a/0x410 [ 153.711708][ T8462] __sys_sendmmsg+0x36a/0x720 [ 153.711748][ T8462] ? __pfx___sys_sendmmsg+0x10/0x10 [ 153.711788][ T8462] ? __pfx_lock_release+0x10/0x10 [ 153.711821][ T8462] ? kstrtouint_from_user+0x128/0x190 [ 153.711874][ T8462] ? ksys_write+0x22a/0x2b0 [ 153.711899][ T8462] ? __pfx_lock_release+0x10/0x10 [ 153.711940][ T8462] ? sb_end_write+0xe9/0x1c0 [ 153.711972][ T8462] ? vfs_write+0x7fa/0xd10 [ 153.711999][ T8462] ? __mutex_unlock_slowpath+0x227/0x800 [ 153.712060][ T8462] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 153.712096][ T8462] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 153.712131][ T8462] ? do_syscall_64+0x100/0x230 [ 153.712165][ T8462] __x64_sys_sendmmsg+0xa0/0xb0 [ 153.712194][ T8462] do_syscall_64+0xf3/0x230 [ 153.712222][ T8462] ? clear_bhb_loop+0x35/0x90 [ 153.712257][ T8462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.712286][ T8462] RIP: 0033:0x7f8a6d18d169 [ 153.712305][ T8462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.712323][ T8462] RSP: 002b:00007f8a6df60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 153.712346][ T8462] RAX: ffffffffffffffda RBX: 00007f8a6d3a6080 RCX: 00007f8a6d18d169 [ 153.712362][ T8462] RDX: 0400000000000181 RSI: 00004000000030c0 RDI: 0000000000000003 [ 153.712377][ T8462] RBP: 00007f8a6df60090 R08: 0000000000000000 R09: 0000000000000000 [ 153.712391][ T8462] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.712405][ T8462] R13: 0000000000000000 R14: 00007f8a6d3a6080 R15: 00007ffc9c5693b8 [ 153.712437][ T8462] [ 153.832605][ T8464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.860'. [ 154.164496][ T8467] 8021q: adding VLAN 0 to HW filter on device bond7 [ 154.178289][ T8467] team0: Port device bond7 added [ 154.253523][ T8472] gretap0: entered promiscuous mode [ 154.317467][ T8472] macsec1: entered promiscuous mode [ 154.362967][ T8472] gretap0: left promiscuous mode [ 154.421848][ T8479] netlink: 28 bytes leftover after parsing attributes in process `syz.3.866'. [ 154.519072][ T8480] netlink: 96 bytes leftover after parsing attributes in process `syz.0.865'. [ 154.840731][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.873'. [ 154.961915][ T8498] 8021q: adding VLAN 0 to HW filter on device bond7 [ 154.979609][ T8498] team0: Port device bond7 added [ 155.079211][ T8511] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.088798][ T8511] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.097835][ T8511] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.107508][ T8511] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.158017][ T8516] gretap0: entered promiscuous mode [ 155.165377][ T8516] macsec2: entered promiscuous mode [ 155.184903][ T8516] gretap0: left promiscuous mode [ 155.208020][ T8526] FAULT_INJECTION: forcing a failure. [ 155.208020][ T8526] name failslab, interval 1, probability 0, space 0, times 0 [ 155.222881][ T8526] CPU: 1 UID: 0 PID: 8526 Comm: syz.3.881 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 155.222911][ T8526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.222924][ T8526] Call Trace: [ 155.222931][ T8526] [ 155.222941][ T8526] dump_stack_lvl+0x241/0x360 [ 155.222972][ T8526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.222996][ T8526] ? __pfx__printk+0x10/0x10 [ 155.223020][ T8526] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 155.223053][ T8526] ? __pfx___might_resched+0x10/0x10 [ 155.223087][ T8526] should_fail_ex+0x40a/0x550 [ 155.223125][ T8526] should_failslab+0xac/0x100 [ 155.223155][ T8526] kmem_cache_alloc_node_noprof+0x77/0x380 [ 155.223184][ T8526] ? __alloc_skb+0x1c3/0x440 [ 155.223212][ T8526] __alloc_skb+0x1c3/0x440 [ 155.223240][ T8526] ? __pfx___alloc_skb+0x10/0x10 [ 155.223262][ T8526] ? __virt_addr_valid+0x150/0x530 [ 155.223282][ T8526] ? __virt_addr_valid+0x45f/0x530 [ 155.223302][ T8526] ? __phys_addr_symbol+0x2f/0x70 [ 155.223326][ T8526] tipc_buf_acquire+0x2b/0xe0 [ 155.223352][ T8526] tipc_msg_build+0x8b8/0x1040 [ 155.223392][ T8526] ? __pfx_tipc_msg_build+0x10/0x10 [ 155.223414][ T8526] ? tipc_group_bc_cong+0x1d0/0x290 [ 155.223466][ T8526] tipc_send_group_bcast+0x889/0xbd0 [ 155.223510][ T8526] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 155.223552][ T8526] ? __pfx_woken_wake_function+0x10/0x10 [ 155.223600][ T8526] __tipc_sendmsg+0x363/0x35d0 [ 155.223628][ T8526] ? ima_match_policy+0x114/0x2100 [ 155.223663][ T8526] ? __pfx___tipc_sendmsg+0x10/0x10 [ 155.223687][ T8526] ? ima_get_action+0x75/0xb0 [ 155.223716][ T8526] ? __pfx_validate_chain+0x10/0x10 [ 155.223745][ T8526] ? mark_lock+0x9a/0x360 [ 155.223770][ T8526] ? __lock_acquire+0x1397/0x2100 [ 155.223824][ T8526] ? mark_lock+0x9a/0x360 [ 155.223852][ T8526] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 155.223888][ T8526] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.223932][ T8526] ? __local_bh_enable_ip+0x168/0x200 [ 155.223958][ T8526] ? tipc_sendmsg+0x47/0x70 [ 155.223980][ T8526] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 155.224003][ T8526] ? do_raw_spin_unlock+0x13c/0x8b0 [ 155.224040][ T8526] ? __pfx_tipc_sendmsg+0x10/0x10 [ 155.224061][ T8526] tipc_sendmsg+0x55/0x70 [ 155.224085][ T8526] __sock_sendmsg+0x221/0x270 [ 155.224119][ T8526] ____sys_sendmsg+0x53a/0x860 [ 155.224153][ T8526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.224176][ T8526] ? __fget_files+0x2a/0x410 [ 155.224210][ T8526] ? __fget_files+0x2a/0x410 [ 155.224251][ T8526] __sys_sendmmsg+0x36a/0x720 [ 155.224289][ T8526] ? __pfx___sys_sendmmsg+0x10/0x10 [ 155.224328][ T8526] ? __pfx_lock_release+0x10/0x10 [ 155.224357][ T8526] ? kstrtouint_from_user+0x128/0x190 [ 155.224409][ T8526] ? ksys_write+0x22a/0x2b0 [ 155.224437][ T8526] ? __pfx_lock_release+0x10/0x10 [ 155.224476][ T8526] ? sb_end_write+0xe9/0x1c0 [ 155.224507][ T8526] ? vfs_write+0x7fa/0xd10 [ 155.224532][ T8526] ? __mutex_unlock_slowpath+0x227/0x800 [ 155.224591][ T8526] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 155.224626][ T8526] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.224660][ T8526] ? do_syscall_64+0x100/0x230 [ 155.224693][ T8526] __x64_sys_sendmmsg+0xa0/0xb0 [ 155.224721][ T8526] do_syscall_64+0xf3/0x230 [ 155.224748][ T8526] ? clear_bhb_loop+0x35/0x90 [ 155.224782][ T8526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.224810][ T8526] RIP: 0033:0x7f8052b8d169 [ 155.224828][ T8526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.224846][ T8526] RSP: 002b:00007f80509d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 155.224869][ T8526] RAX: ffffffffffffffda RBX: 00007f8052da6080 RCX: 00007f8052b8d169 [ 155.224884][ T8526] RDX: 0400000000000181 RSI: 00004000000030c0 RDI: 0000000000000003 [ 155.224898][ T8526] RBP: 00007f80509d5090 R08: 0000000000000000 R09: 0000000000000000 [ 155.224910][ T8526] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.224923][ T8526] R13: 0000000000000000 R14: 00007f8052da6080 R15: 00007ffdf589b9b8 [ 155.224955][ T8526] [ 155.516271][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.880'. [ 155.666221][ T8512] bridge: RTM_NEWNEIGH with invalid ether address [ 155.674621][ T8511] bridge: RTM_NEWNEIGH with invalid ether address [ 155.731500][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.880'. [ 156.100838][ T8556] netlink: 'syz.0.890': attribute type 5 has an invalid length. [ 156.274744][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.894'. [ 156.277075][ T8560] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.305287][ T8560] team0: Port device bond2 added [ 156.740948][ T8584] Bluetooth: MGMT ver 1.23 [ 156.847610][ T8589] netlink: 'syz.2.905': attribute type 5 has an invalid length. [ 157.178252][ T8607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.911'. [ 157.253713][ T8613] netlink: 88 bytes leftover after parsing attributes in process `syz.2.914'. [ 157.322107][ T8610] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.344343][ T8620] 8021q: VLANs not supported on ip6_vti0 [ 157.874633][ T5147] block nbd17: Receive control failed (result -107) [ 157.910784][ T8645] nbd17: detected capacity change from 0 to 256 [ 158.121157][ T8662] (unnamed net_device) (uninitialized): (slave team0): Device is not bonding slave [ 158.144137][ T8662] (unnamed net_device) (uninitialized): option active_slave: invalid value (team0) [ 158.166928][ T8667] FAULT_INJECTION: forcing a failure. [ 158.166928][ T8667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.180826][ T8667] CPU: 0 UID: 0 PID: 8667 Comm: syz.2.928 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 158.180852][ T8667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 158.180863][ T8667] Call Trace: [ 158.180870][ T8667] [ 158.180877][ T8667] dump_stack_lvl+0x241/0x360 [ 158.180905][ T8667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.180925][ T8667] ? __pfx__printk+0x10/0x10 [ 158.180944][ T8667] ? __pfx_lock_release+0x10/0x10 [ 158.180979][ T8667] should_fail_ex+0x40a/0x550 [ 158.181013][ T8667] _copy_from_iter+0x1df/0x1c40 [ 158.181037][ T8667] ? __virt_addr_valid+0x183/0x530 [ 158.181056][ T8667] ? __pfx_lock_release+0x10/0x10 [ 158.181094][ T8667] ? __pfx__copy_from_iter+0x10/0x10 [ 158.181120][ T8667] ? __virt_addr_valid+0x183/0x530 [ 158.181138][ T8667] ? __virt_addr_valid+0x183/0x530 [ 158.181156][ T8667] ? __virt_addr_valid+0x45f/0x530 [ 158.181175][ T8667] ? __phys_addr_symbol+0x2f/0x70 [ 158.181204][ T8667] ? __check_object_size+0x47a/0x730 [ 158.181235][ T8667] tipc_msg_build+0x846/0x1040 [ 158.181276][ T8667] ? __pfx_tipc_msg_build+0x10/0x10 [ 158.181297][ T8667] ? tipc_group_bc_cong+0x1d0/0x290 [ 158.181339][ T8667] tipc_send_group_bcast+0x889/0xbd0 [ 158.181384][ T8667] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 158.181441][ T8667] ? __pfx_woken_wake_function+0x10/0x10 [ 158.181496][ T8667] __tipc_sendmsg+0x363/0x35d0 [ 158.181523][ T8667] ? ima_match_policy+0x114/0x2100 [ 158.181558][ T8667] ? __pfx___tipc_sendmsg+0x10/0x10 [ 158.181581][ T8667] ? ima_get_action+0x75/0xb0 [ 158.181610][ T8667] ? __pfx_validate_chain+0x10/0x10 [ 158.181638][ T8667] ? mark_lock+0x9a/0x360 [ 158.181663][ T8667] ? __lock_acquire+0x1397/0x2100 [ 158.181716][ T8667] ? mark_lock+0x9a/0x360 [ 158.181740][ T8667] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 158.181775][ T8667] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 158.181818][ T8667] ? __local_bh_enable_ip+0x168/0x200 [ 158.181843][ T8667] ? tipc_sendmsg+0x47/0x70 [ 158.181866][ T8667] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 158.181889][ T8667] ? do_raw_spin_unlock+0x13c/0x8b0 [ 158.181924][ T8667] ? __pfx_tipc_sendmsg+0x10/0x10 [ 158.181946][ T8667] tipc_sendmsg+0x55/0x70 [ 158.181970][ T8667] __sock_sendmsg+0x221/0x270 [ 158.182004][ T8667] ____sys_sendmsg+0x53a/0x860 [ 158.182038][ T8667] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.182061][ T8667] ? __fget_files+0x2a/0x410 [ 158.182095][ T8667] ? __fget_files+0x2a/0x410 [ 158.182135][ T8667] __sys_sendmmsg+0x36a/0x720 [ 158.182172][ T8667] ? __pfx___sys_sendmmsg+0x10/0x10 [ 158.182218][ T8667] ? __pfx_lock_release+0x10/0x10 [ 158.182247][ T8667] ? kstrtouint_from_user+0x128/0x190 [ 158.182297][ T8667] ? ksys_write+0x22a/0x2b0 [ 158.182319][ T8667] ? __pfx_lock_release+0x10/0x10 [ 158.182358][ T8667] ? sb_end_write+0xe9/0x1c0 [ 158.182389][ T8667] ? vfs_write+0x7fa/0xd10 [ 158.182414][ T8667] ? __mutex_unlock_slowpath+0x227/0x800 [ 158.182471][ T8667] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 158.182507][ T8667] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 158.182539][ T8667] ? do_syscall_64+0x100/0x230 [ 158.182570][ T8667] __x64_sys_sendmmsg+0xa0/0xb0 [ 158.182597][ T8667] do_syscall_64+0xf3/0x230 [ 158.182624][ T8667] ? clear_bhb_loop+0x35/0x90 [ 158.182657][ T8667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.182685][ T8667] RIP: 0033:0x7f97e1d8d169 [ 158.182704][ T8667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.182722][ T8667] RSP: 002b:00007f97e2bb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 158.182745][ T8667] RAX: ffffffffffffffda RBX: 00007f97e1fa6080 RCX: 00007f97e1d8d169 [ 158.182760][ T8667] RDX: 0400000000000181 RSI: 00004000000030c0 RDI: 0000000000000003 [ 158.182773][ T8667] RBP: 00007f97e2bb3090 R08: 0000000000000000 R09: 0000000000000000 [ 158.182786][ T8667] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 158.182798][ T8667] R13: 0000000000000000 R14: 00007f97e1fa6080 R15: 00007ffc563a1458 [ 158.182829][ T8667] [ 158.650321][ C1] net_ratelimit: 16 callbacks suppressed [ 158.650343][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 158.968273][ T8689] __nla_validate_parse: 7 callbacks suppressed [ 158.968294][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.937'. [ 159.049044][ T8689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.104483][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.938'. [ 159.136424][ T8692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.938'. [ 159.145812][ T8692] netlink: 32 bytes leftover after parsing attributes in process `syz.3.938'. [ 159.193915][ T8694] 8021q: adding VLAN 0 to HW filter on device bond8 [ 159.203169][ T5147] block nbd18: Receive control failed (result -107) [ 159.221665][ T8694] team0: Port device bond8 added [ 159.240890][ T8692] nbd18: detected capacity change from 0 to 256 [ 159.298298][ T8698] gretap0: entered promiscuous mode [ 159.344852][ T8700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.941'. [ 159.354241][ T8698] macsec1: entered promiscuous mode [ 159.378250][ T8698] gretap0: left promiscuous mode [ 159.451960][ T8702] veth0_to_bridge: entered promiscuous mode [ 159.548538][ T8701] veth0_to_bridge: left promiscuous mode [ 159.680284][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 159.703588][ T8715] syzkaller0: entered promiscuous mode [ 159.727700][ T8715] syzkaller0: entered allmulticast mode [ 159.843100][ T8724] FAULT_INJECTION: forcing a failure. [ 159.843100][ T8724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.865526][ T8724] CPU: 0 UID: 0 PID: 8724 Comm: syz.3.949 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 159.865557][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 159.865569][ T8724] Call Trace: [ 159.865577][ T8724] [ 159.865586][ T8724] dump_stack_lvl+0x241/0x360 [ 159.865617][ T8724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.865640][ T8724] ? __pfx__printk+0x10/0x10 [ 159.865663][ T8724] ? __pfx_lock_release+0x10/0x10 [ 159.865704][ T8724] should_fail_ex+0x40a/0x550 [ 159.865740][ T8724] _copy_from_iter+0x1df/0x1c40 [ 159.865765][ T8724] ? __virt_addr_valid+0x183/0x530 [ 159.865787][ T8724] ? __pfx_lock_release+0x10/0x10 [ 159.865827][ T8724] ? __pfx__copy_from_iter+0x10/0x10 [ 159.865853][ T8724] ? __virt_addr_valid+0x183/0x530 [ 159.865871][ T8724] ? __virt_addr_valid+0x183/0x530 [ 159.865887][ T8724] ? __virt_addr_valid+0x45f/0x530 [ 159.865905][ T8724] ? __phys_addr_symbol+0x2f/0x70 [ 159.865922][ T8724] ? __check_object_size+0x47a/0x730 [ 159.865954][ T8724] tipc_msg_build+0x846/0x1040 [ 159.865994][ T8724] ? __pfx_tipc_msg_build+0x10/0x10 [ 159.866033][ T8724] ? tipc_group_bc_cong+0x1d0/0x290 [ 159.866095][ T8724] tipc_send_group_bcast+0x889/0xbd0 [ 159.866137][ T8724] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 159.866176][ T8724] ? __pfx_woken_wake_function+0x10/0x10 [ 159.866223][ T8724] __tipc_sendmsg+0x363/0x35d0 [ 159.866251][ T8724] ? ima_match_policy+0x114/0x2100 [ 159.866286][ T8724] ? __pfx___tipc_sendmsg+0x10/0x10 [ 159.866315][ T8724] ? ima_get_action+0x75/0xb0 [ 159.866344][ T8724] ? __pfx_validate_chain+0x10/0x10 [ 159.866373][ T8724] ? mark_lock+0x9a/0x360 [ 159.866398][ T8724] ? __lock_acquire+0x1397/0x2100 [ 159.866451][ T8724] ? mark_lock+0x9a/0x360 [ 159.866475][ T8724] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 159.866515][ T8724] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 159.866559][ T8724] ? __local_bh_enable_ip+0x168/0x200 [ 159.866585][ T8724] ? tipc_sendmsg+0x47/0x70 [ 159.866607][ T8724] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 159.866630][ T8724] ? do_raw_spin_unlock+0x13c/0x8b0 [ 159.866667][ T8724] ? __pfx_tipc_sendmsg+0x10/0x10 [ 159.866688][ T8724] tipc_sendmsg+0x55/0x70 [ 159.866711][ T8724] __sock_sendmsg+0x221/0x270 [ 159.866762][ T8724] ____sys_sendmsg+0x53a/0x860 [ 159.866796][ T8724] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.866819][ T8724] ? __fget_files+0x2a/0x410 [ 159.866854][ T8724] ? __fget_files+0x2a/0x410 [ 159.866895][ T8724] __sys_sendmmsg+0x36a/0x720 [ 159.866934][ T8724] ? __pfx___sys_sendmmsg+0x10/0x10 [ 159.866973][ T8724] ? __pfx_lock_release+0x10/0x10 [ 159.867001][ T8724] ? kstrtouint_from_user+0x128/0x190 [ 159.867053][ T8724] ? ksys_write+0x22a/0x2b0 [ 159.867077][ T8724] ? __pfx_lock_release+0x10/0x10 [ 159.867116][ T8724] ? sb_end_write+0xe9/0x1c0 [ 159.867146][ T8724] ? vfs_write+0x7fa/0xd10 [ 159.867171][ T8724] ? __mutex_unlock_slowpath+0x227/0x800 [ 159.867230][ T8724] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 159.867265][ T8724] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 159.867299][ T8724] ? do_syscall_64+0x100/0x230 [ 159.867337][ T8724] __x64_sys_sendmmsg+0xa0/0xb0 [ 159.867364][ T8724] do_syscall_64+0xf3/0x230 [ 159.867390][ T8724] ? clear_bhb_loop+0x35/0x90 [ 159.867423][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.867452][ T8724] RIP: 0033:0x7f8052b8d169 [ 159.867471][ T8724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.867490][ T8724] RSP: 002b:00007f80509d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 159.867512][ T8724] RAX: ffffffffffffffda RBX: 00007f8052da6080 RCX: 00007f8052b8d169 [ 159.867527][ T8724] RDX: 0400000000000181 RSI: 00004000000030c0 RDI: 0000000000000003 [ 159.867541][ T8724] RBP: 00007f80509d5090 R08: 0000000000000000 R09: 0000000000000000 [ 159.867554][ T8724] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 159.867567][ T8724] R13: 0000000000000000 R14: 00007f8052da6080 R15: 00007ffdf589b9b8 [ 159.867598][ T8724] [ 160.407075][ T8728] netlink: 60 bytes leftover after parsing attributes in process `syz.4.951'. [ 160.458168][ T8728] unsupported nlmsg_type 40 [ 160.484898][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'. [ 160.621610][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.953'. [ 160.656942][ T8734] netlink: 32 bytes leftover after parsing attributes in process `syz.0.953'. [ 160.730418][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 160.744491][ T5147] block nbd19: Receive control failed (result -107) [ 160.770313][ T8734] nbd19: detected capacity change from 0 to 256 [ 160.885378][ T8746] FAULT_INJECTION: forcing a failure. [ 160.885378][ T8746] name failslab, interval 1, probability 0, space 0, times 0 [ 160.898447][ T8746] CPU: 0 UID: 0 PID: 8746 Comm: syz.0.957 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 160.898474][ T8746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 160.898486][ T8746] Call Trace: [ 160.898493][ T8746] [ 160.898501][ T8746] dump_stack_lvl+0x241/0x360 [ 160.898529][ T8746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.898549][ T8746] ? __pfx__printk+0x10/0x10 [ 160.898570][ T8746] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 160.898600][ T8746] ? __pfx___might_resched+0x10/0x10 [ 160.898630][ T8746] should_fail_ex+0x40a/0x550 [ 160.898666][ T8746] should_failslab+0xac/0x100 [ 160.898697][ T8746] kmem_cache_alloc_node_noprof+0x77/0x380 [ 160.898727][ T8746] ? __alloc_skb+0x1c3/0x440 [ 160.898754][ T8746] __alloc_skb+0x1c3/0x440 [ 160.898781][ T8746] ? __pfx___alloc_skb+0x10/0x10 [ 160.898806][ T8746] ? netlink_autobind+0xd6/0x2f0 [ 160.898825][ T8746] ? netlink_autobind+0x2b0/0x2f0 [ 160.898849][ T8746] netlink_sendmsg+0x634/0xcb0 [ 160.898894][ T8746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.898930][ T8746] ? aa_sock_msg_perm+0x91/0x160 [ 160.898970][ T8746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.899000][ T8746] __sock_sendmsg+0x221/0x270 [ 160.899035][ T8746] ____sys_sendmsg+0x53a/0x860 [ 160.899068][ T8746] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.899092][ T8746] ? __fget_files+0x2a/0x410 [ 160.899126][ T8746] ? __fget_files+0x2a/0x410 [ 160.899167][ T8746] __sys_sendmsg+0x269/0x350 [ 160.899197][ T8746] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.899245][ T8746] ? do_sys_openat2+0x17a/0x1d0 [ 160.899301][ T8746] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 160.899330][ T8746] ? do_syscall_64+0x100/0x230 [ 160.899356][ T8746] ? do_syscall_64+0xb6/0x230 [ 160.899380][ T8746] do_syscall_64+0xf3/0x230 [ 160.899403][ T8746] ? clear_bhb_loop+0x35/0x90 [ 160.899430][ T8746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.899454][ T8746] RIP: 0033:0x7f573c58d169 [ 160.899471][ T8746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.899487][ T8746] RSP: 002b:00007f573d326038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.899506][ T8746] RAX: ffffffffffffffda RBX: 00007f573c7a5fa0 RCX: 00007f573c58d169 [ 160.899519][ T8746] RDX: 0000000000004000 RSI: 0000400000000040 RDI: 0000000000000003 [ 160.899530][ T8746] RBP: 00007f573d326090 R08: 0000000000000000 R09: 0000000000000000 [ 160.899541][ T8746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.899551][ T8746] R13: 0000000000000000 R14: 00007f573c7a5fa0 R15: 00007ffe129957a8 [ 160.899576][ T8746] [ 161.770287][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 162.633490][ T8730] 8021q: adding VLAN 0 to HW filter on device bond7 [ 162.641271][ T8730] team0: Port device bond7 added [ 162.646758][ T8743] netlink: 356 bytes leftover after parsing attributes in process `syz.3.955'. [ 162.702391][ T8740] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 162.810360][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 162.878174][ T8759] x_tables: duplicate underflow at hook 1 [ 163.029703][ T8769] x_tables: ip_tables: udp match: only valid for protocol 17 [ 163.301204][ T8776] netlink: 'syz.4.967': attribute type 2 has an invalid length. [ 163.318858][ T8776] : entered promiscuous mode [ 163.392716][ T8787] bridge_slave_1: left allmulticast mode [ 163.398765][ T8787] bridge_slave_1: left promiscuous mode [ 163.404775][ T8787] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.417529][ T8787] bridge_slave_0: left allmulticast mode [ 163.423698][ T8787] bridge_slave_0: left promiscuous mode [ 163.444487][ T8787] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.549708][ T8789] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 163.560839][ T8789] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 163.724345][ T8797] netlink: 'syz.3.975': attribute type 1 has an invalid length. [ 163.820037][ T8797] 8021q: adding VLAN 0 to HW filter on device bond3 [ 163.837706][ T8803] gretap0: entered promiscuous mode [ 163.843524][ T8803] macsec1: entered promiscuous mode [ 163.850341][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 163.874722][ T8803] gretap0: left promiscuous mode [ 163.992264][ T8812] __nla_validate_parse: 6 callbacks suppressed [ 163.992287][ T8812] netlink: 52 bytes leftover after parsing attributes in process `syz.3.980'. [ 164.217171][ T8821] netlink: 60 bytes leftover after parsing attributes in process `syz.3.985'. [ 164.287527][ T8821] netlink: 28 bytes leftover after parsing attributes in process `syz.3.985'. [ 164.426735][ T8833] xt_ipcomp: unknown flags F7 [ 164.566863][ T8841] netlink: 52 bytes leftover after parsing attributes in process `syz.1.991'. [ 164.684458][ T8847] gretap0: entered promiscuous mode [ 164.690523][ T8847] macsec2: entered promiscuous mode [ 164.699032][ T8847] gretap0: left promiscuous mode [ 164.825190][ T8849] xt_CT: No such helper "syz0" [ 164.890362][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 165.104114][ T8865] x_tables: duplicate underflow at hook 2 [ 165.213257][ T8874] netlink: 84 bytes leftover after parsing attributes in process `syz.4.999'. [ 165.450311][ T8884] netlink: 'syz.0.1003': attribute type 4 has an invalid length. [ 165.483161][ T8884] netlink: 'syz.0.1003': attribute type 4 has an invalid length. [ 165.576705][ T8889] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 165.614456][ T8889] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1005'. [ 165.918323][ T8865] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 165.930262][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 166.141333][ T8909] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 166.186978][ T8909] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 166.264945][ T8914] FAULT_INJECTION: forcing a failure. [ 166.264945][ T8914] name failslab, interval 1, probability 0, space 0, times 0 [ 166.300641][ T8914] CPU: 0 UID: 0 PID: 8914 Comm: syz.2.1013 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 166.300672][ T8914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 166.300686][ T8914] Call Trace: [ 166.300693][ T8914] [ 166.300703][ T8914] dump_stack_lvl+0x241/0x360 [ 166.300737][ T8914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.300761][ T8914] ? __pfx__printk+0x10/0x10 [ 166.300785][ T8914] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 166.300818][ T8914] ? __pfx___might_resched+0x10/0x10 [ 166.300852][ T8914] should_fail_ex+0x40a/0x550 [ 166.300890][ T8914] should_failslab+0xac/0x100 [ 166.300920][ T8914] kmem_cache_alloc_node_noprof+0x77/0x380 [ 166.300950][ T8914] ? __alloc_skb+0x1c3/0x440 [ 166.300977][ T8914] __alloc_skb+0x1c3/0x440 [ 166.301006][ T8914] ? __pfx___alloc_skb+0x10/0x10 [ 166.301029][ T8914] ? __virt_addr_valid+0x150/0x530 [ 166.301048][ T8914] ? __virt_addr_valid+0x45f/0x530 [ 166.301069][ T8914] ? __phys_addr_symbol+0x2f/0x70 [ 166.301094][ T8914] tipc_buf_acquire+0x2b/0xe0 [ 166.301119][ T8914] tipc_msg_build+0x8b8/0x1040 [ 166.301160][ T8914] ? __pfx_tipc_msg_build+0x10/0x10 [ 166.301183][ T8914] ? tipc_group_bc_cong+0x1d0/0x290 [ 166.301229][ T8914] tipc_send_group_bcast+0x889/0xbd0 [ 166.301273][ T8914] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 166.301314][ T8914] ? __pfx_woken_wake_function+0x10/0x10 [ 166.301364][ T8914] __tipc_sendmsg+0x363/0x35d0 [ 166.301393][ T8914] ? ima_match_policy+0x114/0x2100 [ 166.301428][ T8914] ? __pfx___tipc_sendmsg+0x10/0x10 [ 166.301452][ T8914] ? ima_get_action+0x75/0xb0 [ 166.301477][ T8914] ? __pfx_validate_chain+0x10/0x10 [ 166.301500][ T8914] ? mark_lock+0x9a/0x360 [ 166.301519][ T8914] ? __lock_acquire+0x1397/0x2100 [ 166.301569][ T8914] ? mark_lock+0x9a/0x360 [ 166.301588][ T8914] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 166.301615][ T8914] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 166.301648][ T8914] ? __local_bh_enable_ip+0x168/0x200 [ 166.301669][ T8914] ? tipc_sendmsg+0x47/0x70 [ 166.301686][ T8914] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 166.301704][ T8914] ? do_raw_spin_unlock+0x13c/0x8b0 [ 166.301733][ T8914] ? __pfx_tipc_sendmsg+0x10/0x10 [ 166.301750][ T8914] tipc_sendmsg+0x55/0x70 [ 166.301768][ T8914] __sock_sendmsg+0x221/0x270 [ 166.301797][ T8914] ____sys_sendmsg+0x53a/0x860 [ 166.301825][ T8914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.301843][ T8914] ? __fget_files+0x2a/0x410 [ 166.301871][ T8914] ? __fget_files+0x2a/0x410 [ 166.301902][ T8914] __sys_sendmmsg+0x36a/0x720 [ 166.301932][ T8914] ? __pfx___sys_sendmmsg+0x10/0x10 [ 166.301962][ T8914] ? __pfx_lock_release+0x10/0x10 [ 166.301985][ T8914] ? kstrtouint_from_user+0x128/0x190 [ 166.302024][ T8914] ? ksys_write+0x22a/0x2b0 [ 166.302044][ T8914] ? __pfx_lock_release+0x10/0x10 [ 166.302076][ T8914] ? sb_end_write+0xe9/0x1c0 [ 166.302103][ T8914] ? vfs_write+0x7fa/0xd10 [ 166.302125][ T8914] ? __mutex_unlock_slowpath+0x227/0x800 [ 166.302175][ T8914] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 166.302204][ T8914] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 166.302231][ T8914] ? do_syscall_64+0x100/0x230 [ 166.302257][ T8914] __x64_sys_sendmmsg+0xa0/0xb0 [ 166.302280][ T8914] do_syscall_64+0xf3/0x230 [ 166.302302][ T8914] ? clear_bhb_loop+0x35/0x90 [ 166.302329][ T8914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.302354][ T8914] RIP: 0033:0x7f97e1d8d169 [ 166.302371][ T8914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.302387][ T8914] RSP: 002b:00007f97e2bb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 166.302406][ T8914] RAX: ffffffffffffffda RBX: 00007f97e1fa6080 RCX: 00007f97e1d8d169 [ 166.302421][ T8914] RDX: 0400000000000181 RSI: 00004000000030c0 RDI: 0000000000000003 [ 166.302432][ T8914] RBP: 00007f97e2bb3090 R08: 0000000000000000 R09: 0000000000000000 [ 166.302442][ T8914] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 166.302453][ T8914] R13: 0000000000000000 R14: 00007f97e1fa6080 R15: 00007ffc563a1458 [ 166.302477][ T8914] [ 166.328415][ T8915] tap0: tun_chr_ioctl cmd 1074025677 [ 166.750741][ T8915] tap0: linktype set to 804 [ 166.867654][ T8924] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1016'. [ 166.960350][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 167.201692][ T5147] Bluetooth: hci4: command 0x0405 tx timeout [ 167.243452][ T8939] netlink: 'syz.3.1021': attribute type 1 has an invalid length. [ 167.701440][ T8930] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.709037][ T8930] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.842295][ T8930] batman_adv: batadv0: Interface deactivated: dummy0 [ 168.010338][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 168.064274][ T8962] netlink: 'syz.4.1024': attribute type 1 has an invalid length. [ 168.302523][ T8930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.341233][ T8930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.837992][ T8930] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.847759][ T8930] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.860214][ T8930] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.868706][ T8930] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.877673][ T8930] geneve2: left promiscuous mode [ 168.882815][ T8930] geneve2: left allmulticast mode [ 168.939194][ T8930] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 168.949644][ T8930] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 168.958697][ T8930] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 168.967764][ T8930] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 169.018314][ T8935] bridge0: port 3(gretap0) entered blocking state [ 169.026381][ T8935] bridge0: port 3(gretap0) entered disabled state [ 169.051595][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 169.059020][ T8935] gretap0: entered allmulticast mode [ 169.075034][ T8935] gretap0: entered promiscuous mode [ 169.093578][ T8937] gretap0: left allmulticast mode [ 169.098842][ T8937] gretap0: left promiscuous mode [ 169.105285][ T8937] bridge0: port 3(gretap0) entered disabled state [ 169.121859][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1022'. [ 169.446649][ T8976] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 169.512652][ T8976] netlink: 'syz.1.1029': attribute type 1 has an invalid length. [ 169.557580][ T8981] ieee802154 phy0 wpan0: encryption failed: -22 [ 170.080290][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 170.552448][ T9023] x_tables: duplicate underflow at hook 3 [ 170.700686][ T9028] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1043'. [ 170.753842][ T9031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1044'. [ 170.799142][ T9031] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.808129][ T9031] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.817185][ T9031] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.826070][ T9031] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.873362][ T9031] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.882910][ T9031] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.892323][ T9031] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.901347][ T9031] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.032694][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'. [ 171.042376][ T9038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1046'. [ 171.078820][ T9038] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1046'. [ 171.088473][ T9033] wireguard0: entered promiscuous mode [ 171.095920][ T9033] wireguard0: entered allmulticast mode [ 171.120374][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 171.150982][ T5147] block nbd20: Receive control failed (result -107) [ 171.180613][ T9038] nbd20: detected capacity change from 0 to 256 [ 171.319296][ T9050] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 171.380339][ T9056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1052'. [ 171.393639][ T9055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1052'. [ 171.413864][ T9055] netlink: 'syz.4.1052': attribute type 2 has an invalid length. [ 171.584817][ T9064] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1055'. [ 172.147530][ T9066] netlink: 'syz.3.1056': attribute type 1 has an invalid length. [ 172.161120][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 172.265377][ T9083] lo: entered promiscuous mode [ 172.791911][ T9096] Illegal XDP return value 4294967274 on prog (id 396) dev N/A, expect packet loss! [ 173.200349][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 173.344934][ T9122] 8021q: adding VLAN 0 to HW filter on device bond8 [ 173.359939][ T9122] team0: Port device bond8 added [ 173.405014][ T9120] veth0_to_bridge: entered promiscuous mode [ 173.419613][ T9119] veth0_to_bridge: left promiscuous mode [ 173.483396][ T9077] netlink: 'syz.0.1060': attribute type 1 has an invalid length. [ 173.863383][ T9141] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1082'. [ 174.240418][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 174.364874][ T9167] 8021q: adding VLAN 0 to HW filter on device bond8 [ 174.373313][ T9167] team0: Port device bond8 added [ 174.539919][ T9177] syzkaller1: entered promiscuous mode [ 174.556461][ T9177] syzkaller1: entered allmulticast mode [ 174.955904][ T9197] ipt_ECN: cannot use operation on non-tcp rule [ 175.115346][ T9203] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 175.221111][ T9197] syzkaller0: entered allmulticast mode [ 175.248320][ T9197] syzkaller0 (unregistering): left allmulticast mode [ 175.280483][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 175.629501][ T9212] 8021q: adding VLAN 0 to HW filter on device bond9 [ 175.631496][ T9210] __nla_validate_parse: 1 callbacks suppressed [ 175.631518][ T9210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1103'. [ 175.642298][ T9212] team0: Port device bond9 added [ 175.907964][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1107'. [ 176.063938][ T9233] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 176.186660][ T9226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.330274][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 176.977466][ T9260] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1116'. [ 177.071037][ T9265] FAULT_INJECTION: forcing a failure. [ 177.071037][ T9265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.103229][ T9265] CPU: 0 UID: 0 PID: 9265 Comm: syz.0.1118 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 177.103262][ T9265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 177.103275][ T9265] Call Trace: [ 177.103283][ T9265] [ 177.103292][ T9265] dump_stack_lvl+0x241/0x360 [ 177.103324][ T9265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.103349][ T9265] ? __pfx__printk+0x10/0x10 [ 177.103373][ T9265] ? __pfx_lock_release+0x10/0x10 [ 177.103415][ T9265] should_fail_ex+0x40a/0x550 [ 177.103453][ T9265] _copy_from_iter+0x1df/0x1c40 [ 177.103479][ T9265] ? __virt_addr_valid+0x183/0x530 [ 177.103500][ T9265] ? __pfx_lock_release+0x10/0x10 [ 177.103542][ T9265] ? __pfx__copy_from_iter+0x10/0x10 [ 177.103579][ T9265] ? __virt_addr_valid+0x183/0x530 [ 177.103598][ T9265] ? __virt_addr_valid+0x183/0x530 [ 177.103615][ T9265] ? __virt_addr_valid+0x45f/0x530 [ 177.103635][ T9265] ? __phys_addr_symbol+0x2f/0x70 [ 177.103655][ T9265] ? __check_object_size+0x47a/0x730 [ 177.103689][ T9265] tipc_msg_build+0x846/0x1040 [ 177.103732][ T9265] ? __pfx_tipc_msg_build+0x10/0x10 [ 177.103754][ T9265] ? tipc_group_bc_cong+0x1d0/0x290 [ 177.103799][ T9265] tipc_send_group_bcast+0x889/0xbd0 [ 177.103842][ T9265] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 177.103881][ T9265] ? __pfx_woken_wake_function+0x10/0x10 [ 177.103930][ T9265] __tipc_sendmsg+0x363/0x35d0 [ 177.103957][ T9265] ? ima_match_policy+0x114/0x2100 [ 177.103991][ T9265] ? __pfx___tipc_sendmsg+0x10/0x10 [ 177.104015][ T9265] ? ima_get_action+0x75/0xb0 [ 177.104042][ T9265] ? __pfx_validate_chain+0x10/0x10 [ 177.104070][ T9265] ? mark_lock+0x9a/0x360 [ 177.104094][ T9265] ? __lock_acquire+0x1397/0x2100 [ 177.104146][ T9265] ? mark_lock+0x9a/0x360 [ 177.104171][ T9265] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 177.104205][ T9265] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 177.104249][ T9265] ? __local_bh_enable_ip+0x168/0x200 [ 177.104274][ T9265] ? tipc_sendmsg+0x47/0x70 [ 177.104295][ T9265] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 177.104318][ T9265] ? do_raw_spin_unlock+0x13c/0x8b0 [ 177.104354][ T9265] ? __pfx_tipc_sendmsg+0x10/0x10 [ 177.104375][ T9265] tipc_sendmsg+0x55/0x70 [ 177.104399][ T9265] __sock_sendmsg+0x221/0x270 [ 177.104433][ T9265] ____sys_sendmsg+0x53a/0x860 [ 177.104465][ T9265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.104487][ T9265] ? __fget_files+0x2a/0x410 [ 177.104541][ T9265] ? __fget_files+0x2a/0x410 [ 177.104588][ T9265] __sys_sendmmsg+0x36a/0x720 [ 177.104625][ T9265] ? __pfx___sys_sendmmsg+0x10/0x10 [ 177.104663][ T9265] ? __pfx_lock_release+0x10/0x10 [ 177.104691][ T9265] ? kstrtouint_from_user+0x128/0x190 [ 177.104738][ T9265] ? ksys_write+0x22a/0x2b0 [ 177.104761][ T9265] ? __pfx_lock_release+0x10/0x10 [ 177.104798][ T9265] ? sb_end_write+0xe9/0x1c0 [ 177.104826][ T9265] ? vfs_write+0x7fa/0xd10 [ 177.104848][ T9265] ? __mutex_unlock_slowpath+0x227/0x800 [ 177.104898][ T9265] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 177.104928][ T9265] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 177.104958][ T9265] ? do_syscall_64+0x100/0x230 [ 177.104985][ T9265] __x64_sys_sendmmsg+0xa0/0xb0 [ 177.105009][ T9265] do_syscall_64+0xf3/0x230 [ 177.105033][ T9265] ? clear_bhb_loop+0x35/0x90 [ 177.105063][ T9265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.105089][ T9265] RIP: 0033:0x7f573c58d169 [ 177.105108][ T9265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.105126][ T9265] RSP: 002b:00007f573d305038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 177.105148][ T9265] RAX: ffffffffffffffda RBX: 00007f573c7a6080 RCX: 00007f573c58d169 [ 177.105162][ T9265] RDX: 0400000000000181 RSI: 00004000000030c0 RDI: 0000000000000003 [ 177.105176][ T9265] RBP: 00007f573d305090 R08: 0000000000000000 R09: 0000000000000000 [ 177.105188][ T9265] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.105201][ T9265] R13: 0000000000000000 R14: 00007f573c7a6080 R15: 00007ffe129957a8 [ 177.105230][ T9265] [ 177.370324][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 177.549928][ T9270] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1120'. [ 177.605310][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1119'. [ 177.644627][ T9267] vlan3: entered allmulticast mode [ 177.719958][ T9277] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20003 [ 177.953403][ T9288] xt_hashlimit: size too large, truncated to 1048576 [ 177.981707][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1126'. [ 178.000366][ T9286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1126'. [ 178.249700][ T9301] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1130'. [ 178.400270][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 178.619521][ T9311] sctp: [Deprecated]: syz.1.1132 (pid 9311) Use of int in max_burst socket option. [ 178.619521][ T9311] Use struct sctp_assoc_value instead [ 178.724378][ T9313] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1133'. [ 178.928283][ T9320] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1136'. [ 179.086247][ T9326] 8021q: adding VLAN 0 to HW filter on device bond10 [ 179.131457][ T9326] team0: Port device bond10 added [ 179.359577][ T9351] batadv_slave_1: entered promiscuous mode [ 179.440217][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 179.913354][ T5147] block nbd21: Receive control failed (result -107) [ 179.961228][ T9379] nbd21: detected capacity change from 0 to 256 [ 180.102439][ T9393] bridge: RTM_NEWNEIGH with invalid ether address [ 180.243556][ T9400] gretap0: entered promiscuous mode [ 180.254414][ T9400] macsec1: entered promiscuous mode [ 180.262417][ T9405] FAULT_INJECTION: forcing a failure. [ 180.262417][ T9405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.263600][ T9400] gretap0: left promiscuous mode [ 180.283038][ T9405] CPU: 0 UID: 0 PID: 9405 Comm: syz.0.1161 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 180.283070][ T9405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 180.283089][ T9405] Call Trace: [ 180.283096][ T9405] [ 180.283105][ T9405] dump_stack_lvl+0x241/0x360 [ 180.283150][ T9405] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.283175][ T9405] ? __pfx__printk+0x10/0x10 [ 180.283198][ T9405] ? __pfx_lock_release+0x10/0x10 [ 180.283241][ T9405] should_fail_ex+0x40a/0x550 [ 180.283287][ T9405] _copy_from_iter+0x1df/0x1c40 [ 180.283314][ T9405] ? __virt_addr_valid+0x183/0x530 [ 180.283336][ T9405] ? __pfx_lock_release+0x10/0x10 [ 180.283379][ T9405] ? __pfx__copy_from_iter+0x10/0x10 [ 180.283407][ T9405] ? __virt_addr_valid+0x183/0x530 [ 180.283426][ T9405] ? __virt_addr_valid+0x183/0x530 [ 180.283444][ T9405] ? __virt_addr_valid+0x45f/0x530 [ 180.283465][ T9405] ? __phys_addr_symbol+0x2f/0x70 [ 180.283485][ T9405] ? __check_object_size+0x47a/0x730 [ 180.283519][ T9405] tipc_msg_build+0x846/0x1040 [ 180.283563][ T9405] ? __pfx_tipc_msg_build+0x10/0x10 [ 180.283585][ T9405] ? tipc_group_bc_cong+0x1d0/0x290 [ 180.283632][ T9405] tipc_send_group_bcast+0x889/0xbd0 [ 180.283676][ T9405] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 180.283719][ T9405] ? __pfx_woken_wake_function+0x10/0x10 [ 180.283768][ T9405] __tipc_sendmsg+0x363/0x35d0 [ 180.283797][ T9405] ? ima_match_policy+0x114/0x2100 [ 180.283833][ T9405] ? __pfx___tipc_sendmsg+0x10/0x10 [ 180.283858][ T9405] ? ima_get_action+0x75/0xb0 [ 180.283886][ T9405] ? __pfx_validate_chain+0x10/0x10 [ 180.283915][ T9405] ? mark_lock+0x9a/0x360 [ 180.283941][ T9405] ? __lock_acquire+0x1397/0x2100 [ 180.283994][ T9405] ? mark_lock+0x9a/0x360 [ 180.284019][ T9405] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 180.284052][ T9405] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 180.284095][ T9405] ? __local_bh_enable_ip+0x168/0x200 [ 180.284120][ T9405] ? tipc_sendmsg+0x47/0x70 [ 180.284141][ T9405] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 180.284164][ T9405] ? do_raw_spin_unlock+0x13c/0x8b0 [ 180.284200][ T9405] ? __pfx_tipc_sendmsg+0x10/0x10 [ 180.284238][ T9405] tipc_sendmsg+0x55/0x70 [ 180.284262][ T9405] __sock_sendmsg+0x221/0x270 [ 180.284302][ T9405] ____sys_sendmsg+0x53a/0x860 [ 180.284335][ T9405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.284358][ T9405] ? __fget_files+0x2a/0x410 [ 180.284392][ T9405] ? __fget_files+0x2a/0x410 [ 180.284433][ T9405] __sys_sendmmsg+0x36a/0x720 [ 180.284470][ T9405] ? __pfx___sys_sendmmsg+0x10/0x10 [ 180.284509][ T9405] ? __pfx_lock_release+0x10/0x10 [ 180.284539][ T9405] ? kstrtouint_from_user+0x128/0x190 [ 180.284590][ T9405] ? ksys_write+0x22a/0x2b0 [ 180.284613][ T9405] ? __pfx_lock_release+0x10/0x10 [ 180.284651][ T9405] ? sb_end_write+0xe9/0x1c0 [ 180.284682][ T9405] ? vfs_write+0x7fa/0xd10 [ 180.284707][ T9405] ? __mutex_unlock_slowpath+0x227/0x800 [ 180.284765][ T9405] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 180.284800][ T9405] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 180.284833][ T9405] ? do_syscall_64+0x100/0x230 [ 180.284864][ T9405] __x64_sys_sendmmsg+0xa0/0xb0 [ 180.284890][ T9405] do_syscall_64+0xf3/0x230 [ 180.284917][ T9405] ? clear_bhb_loop+0x35/0x90 [ 180.284949][ T9405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.284976][ T9405] RIP: 0033:0x7f573c58d169 [ 180.284999][ T9405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.285017][ T9405] RSP: 002b:00007f573d305038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 180.285047][ T9405] RAX: ffffffffffffffda RBX: 00007f573c7a6080 RCX: 00007f573c58d169 [ 180.285063][ T9405] RDX: 0400000000000181 RSI: 00004000000030c0 RDI: 0000000000000003 [ 180.285077][ T9405] RBP: 00007f573d305090 R08: 0000000000000000 R09: 0000000000000000 [ 180.285090][ T9405] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.285104][ T9405] R13: 0000000000000000 R14: 00007f573c7a6080 R15: 00007ffe129957a8 [ 180.285136][ T9405] [ 180.500261][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 180.507403][ T9409] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 180.706561][ T9409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.899423][ T9416] __nla_validate_parse: 9 callbacks suppressed [ 180.899446][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1163'. [ 180.946571][ T9416] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1163'. [ 181.130070][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1167'. [ 181.139136][ T9428] netlink: 'syz.4.1167': attribute type 1 has an invalid length. [ 181.308382][ T9434] netlink: 'syz.2.1169': attribute type 2 has an invalid length. [ 181.331329][ T9436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1170'. [ 181.362730][ T9434] fþ: entered promiscuous mode [ 181.388168][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1170'. [ 181.404895][ T9436] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1170'. [ 181.474444][ T5147] block nbd22: Receive control failed (result -107) [ 181.501584][ T9436] nbd22: detected capacity change from 0 to 256 [ 181.520290][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 181.977149][ T9464] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1176'. [ 182.148750][ T9454] pim6reg: entered allmulticast mode [ 182.570372][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 182.615510][ T9484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1182'. [ 182.724893][ T9488] syz1: rxe_newlink: already configured on bond_slave_0 [ 183.603199][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 184.282971][ T9454] pim6reg: left allmulticast mode [ 184.316066][ T9486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1183'. [ 184.542213][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1186'. [ 184.594714][ T5147] block nbd23: Receive control failed (result -107) [ 184.634924][ T9497] nbd23: detected capacity change from 0 to 256 [ 184.650252][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 184.924143][ T9517] Bluetooth: MGMT ver 1.23 [ 185.072475][ T9512] gretap0: entered promiscuous mode [ 185.078177][ T9512] macsec1: entered promiscuous mode [ 185.091721][ T9512] gretap0: left promiscuous mode [ 185.117106][ T9503] netlink: 'syz.0.1187': attribute type 1 has an invalid length. [ 185.680270][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 185.702861][ T9544] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 185.971974][ T9551] __nla_validate_parse: 3 callbacks suppressed [ 185.971992][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1201'. [ 186.048033][ T9555] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1203'. [ 186.050381][ T9551] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1201'. [ 186.145677][ T5147] block nbd24: Receive control failed (result -107) [ 186.190318][ T9551] nbd24: detected capacity change from 0 to 256 [ 186.420509][ T9566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1208'. [ 186.560819][ T9570] netlink: 'syz.2.1209': attribute type 3 has an invalid length. [ 186.568893][ T9570] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1209'. [ 186.730203][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 186.909330][ T9585] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1215'. [ 187.065177][ T9591] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1216'. [ 187.114632][ T9592] 8021q: adding VLAN 0 to HW filter on device bond11 [ 187.133040][ T9592] team0: Port device bond11 added [ 187.383998][ T9609] gretap0: entered promiscuous mode [ 187.405101][ T9609] macsec1: entered promiscuous mode [ 187.444421][ T9609] gretap0: left promiscuous mode [ 187.514066][ T9618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1227'. [ 187.551670][ T9620] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1228'. [ 187.760216][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 187.868438][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1234'. [ 187.953361][ T5147] block nbd25: Receive control failed (result -107) [ 188.001261][ T9642] nbd25: detected capacity change from 0 to 256 [ 188.328923][ T9654] team0 (unregistering): Port device team_slave_0 removed [ 188.344496][ T9654] team0 (unregistering): Port device team_slave_1 removed [ 188.362250][ T9654] team0 (unregistering): Port device bond1 removed [ 188.373827][ T9654] team0 (unregistering): Port device bond2 removed [ 188.419770][ T9662] macsec2: entered promiscuous mode [ 188.425518][ T9662] gretap0: entered promiscuous mode [ 188.434131][ T9662] gretap0: left promiscuous mode [ 188.800287][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 188.884063][ T9675] 8021q: adding VLAN 0 to HW filter on device bond6 [ 188.902001][ T9675] team0: Port device bond6 added [ 189.320651][ T9701] batman_adv: batadv0: Removing interface: dummy0 [ 189.342215][ T9701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.356442][ T9701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.423814][ T9704] gretap0: entered promiscuous mode [ 189.429293][ T9704] macsec0: entered promiscuous mode [ 189.438860][ T9704] gretap0: left promiscuous mode [ 189.674966][ T9715] 8021q: adding VLAN 0 to HW filter on device bond9 [ 189.683617][ T9715] team0: Port device bond9 added [ 189.724518][ T9718] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 189.840281][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 190.326410][ T9755] gretap0: entered promiscuous mode [ 190.340576][ T9755] macsec0: entered promiscuous mode [ 190.351271][ T9755] gretap0: left promiscuous mode [ 190.436281][ T9757] 8021q: adding VLAN 0 to HW filter on device bond9 [ 190.463912][ T9757] team0: Port device bond9 added [ 190.881476][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 191.037946][ T9777] __nla_validate_parse: 9 callbacks suppressed [ 191.037968][ T9777] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1280'. [ 191.096782][ T9780] sctp: [Deprecated]: syz.0.1279 (pid 9780) Use of int in max_burst socket option. [ 191.096782][ T9780] Use struct sctp_assoc_value instead [ 191.189116][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1278'. [ 191.687355][ T9798] 8021q: adding VLAN 0 to HW filter on device bond10 [ 191.696469][ T9798] team0: Port device bond10 added [ 191.707501][ T9796] macsec2: entered promiscuous mode [ 191.712958][ T9796] gretap0: entered promiscuous mode [ 191.743238][ T9796] gretap0: left promiscuous mode [ 191.913236][ T9801] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1285'. [ 191.930306][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 192.353335][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1291'. [ 192.379221][ T9831] sctp: [Deprecated]: syz.0.1291 (pid 9831) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.379221][ T9831] Use struct sctp_sack_info instead [ 192.446235][ T9833] netlink: 'syz.4.1293': attribute type 1 has an invalid length. [ 192.457757][ T9833] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1293'. [ 192.869083][ T9853] netlink: 'syz.0.1300': attribute type 3 has an invalid length. [ 192.882956][ T9854] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 192.884591][ T9850] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1299'. [ 192.891926][ T9853] netlink: 'syz.0.1300': attribute type 3 has an invalid length. [ 192.907917][ T9850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1299'. [ 192.937228][ T9853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1300'. [ 192.960194][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 193.747247][ T9891] macvlan1: entered promiscuous mode [ 193.776524][ T9891] ipvlan0: entered promiscuous mode [ 193.799986][ T9891] ipvlan0: left promiscuous mode [ 193.820490][ T9891] macvlan1: left promiscuous mode [ 193.936261][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1318'. [ 194.000211][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 194.180986][ T9913] FAULT_INJECTION: forcing a failure. [ 194.180986][ T9913] name failslab, interval 1, probability 0, space 0, times 0 [ 194.240567][ T9913] CPU: 0 UID: 0 PID: 9913 Comm: syz.4.1323 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 194.240601][ T9913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 194.240615][ T9913] Call Trace: [ 194.240622][ T9913] [ 194.240631][ T9913] dump_stack_lvl+0x241/0x360 [ 194.240665][ T9913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.240690][ T9913] ? __pfx__printk+0x10/0x10 [ 194.240714][ T9913] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 194.240747][ T9913] ? __pfx___might_resched+0x10/0x10 [ 194.240782][ T9913] should_fail_ex+0x40a/0x550 [ 194.240820][ T9913] should_failslab+0xac/0x100 [ 194.240852][ T9913] kmem_cache_alloc_node_noprof+0x77/0x380 [ 194.240882][ T9913] ? __alloc_skb+0x1c3/0x440 [ 194.240909][ T9913] __alloc_skb+0x1c3/0x440 [ 194.240937][ T9913] ? __pfx___alloc_skb+0x10/0x10 [ 194.240958][ T9913] ? __virt_addr_valid+0x150/0x530 [ 194.240976][ T9913] ? __virt_addr_valid+0x45f/0x530 [ 194.240996][ T9913] ? __phys_addr_symbol+0x2f/0x70 [ 194.241018][ T9913] tipc_buf_acquire+0x2b/0xe0 [ 194.241041][ T9913] tipc_msg_build+0x8b8/0x1040 [ 194.241082][ T9913] ? __pfx_tipc_msg_build+0x10/0x10 [ 194.241103][ T9913] ? tipc_group_bc_cong+0x1d0/0x290 [ 194.241148][ T9913] tipc_send_group_bcast+0x889/0xbd0 [ 194.241193][ T9913] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 194.241231][ T9913] ? __pfx_woken_wake_function+0x10/0x10 [ 194.241276][ T9913] __tipc_sendmsg+0x363/0x35d0 [ 194.241310][ T9913] ? ima_match_policy+0x114/0x2100 [ 194.241344][ T9913] ? __pfx___tipc_sendmsg+0x10/0x10 [ 194.241366][ T9913] ? ima_get_action+0x75/0xb0 [ 194.241393][ T9913] ? __pfx_validate_chain+0x10/0x10 [ 194.241420][ T9913] ? mark_lock+0x9a/0x360 [ 194.241444][ T9913] ? __lock_acquire+0x1397/0x2100 [ 194.241494][ T9913] ? mark_lock+0x9a/0x360 [ 194.241517][ T9913] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 194.241550][ T9913] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 194.241591][ T9913] ? __local_bh_enable_ip+0x168/0x200 [ 194.241615][ T9913] ? tipc_sendmsg+0x47/0x70 [ 194.241636][ T9913] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 194.241658][ T9913] ? do_raw_spin_unlock+0x13c/0x8b0 [ 194.241692][ T9913] ? __pfx_tipc_sendmsg+0x10/0x10 [ 194.241713][ T9913] tipc_sendmsg+0x55/0x70 [ 194.241736][ T9913] __sock_sendmsg+0x221/0x270 [ 194.241770][ T9913] ____sys_sendmsg+0x53a/0x860 [ 194.241804][ T9913] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.241827][ T9913] ? __fget_files+0x2a/0x410 [ 194.241861][ T9913] ? __fget_files+0x2a/0x410 [ 194.241899][ T9913] __sys_sendmmsg+0x36a/0x720 [ 194.241936][ T9913] ? __pfx___sys_sendmmsg+0x10/0x10 [ 194.241975][ T9913] ? __pfx_lock_release+0x10/0x10 [ 194.242005][ T9913] ? kstrtouint_from_user+0x128/0x190 [ 194.242052][ T9913] ? ksys_write+0x22a/0x2b0 [ 194.242075][ T9913] ? __pfx_lock_release+0x10/0x10 [ 194.242114][ T9913] ? sb_end_write+0xe9/0x1c0 [ 194.242145][ T9913] ? vfs_write+0x7fa/0xd10 [ 194.242170][ T9913] ? __mutex_unlock_slowpath+0x227/0x800 [ 194.242229][ T9913] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 194.242264][ T9913] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 194.242304][ T9913] ? do_syscall_64+0x100/0x230 [ 194.242336][ T9913] __x64_sys_sendmmsg+0xa0/0xb0 [ 194.242364][ T9913] do_syscall_64+0xf3/0x230 [ 194.242390][ T9913] ? clear_bhb_loop+0x35/0x90 [ 194.242423][ T9913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.242452][ T9913] RIP: 0033:0x7f2fe738d169 [ 194.242470][ T9913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.242488][ T9913] RSP: 002b:00007f2fe8188038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 194.242510][ T9913] RAX: ffffffffffffffda RBX: 00007f2fe75a6080 RCX: 00007f2fe738d169 [ 194.242525][ T9913] RDX: 0400000000000181 RSI: 00004000000030c0 RDI: 0000000000000003 [ 194.242539][ T9913] RBP: 00007f2fe8188090 R08: 0000000000000000 R09: 0000000000000000 [ 194.242551][ T9913] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 194.242564][ T9913] R13: 0000000000000000 R14: 00007f2fe75a6080 R15: 00007ffdc30d1718 [ 194.242596][ T9913] [ 194.738976][ T9924] team0: entered promiscuous mode [ 194.746448][ T9924] team_slave_0: entered promiscuous mode [ 194.758988][ T9924] team_slave_1: entered promiscuous mode [ 194.767615][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.782405][ T9924] bond1: entered promiscuous mode [ 194.792972][ T9924] bond2: entered promiscuous mode [ 194.803615][ T9924] bond3: entered promiscuous mode [ 194.809080][ T9924] bond4: entered promiscuous mode [ 194.814683][ T9924] bond5: entered promiscuous mode [ 194.856815][ T9924] bond7: entered promiscuous mode [ 194.882657][ T9924] bond8: entered promiscuous mode [ 194.887821][ T9924] bond9: entered promiscuous mode [ 194.935878][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1325'. [ 195.035619][ T9934] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 195.050317][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 195.167076][ T9923] team0: left promiscuous mode [ 195.180783][ T9923] team_slave_0: left promiscuous mode [ 195.199010][ T9923] team_slave_1: left promiscuous mode [ 195.219144][ T9923] bond1: left promiscuous mode [ 195.227496][ T9923] bond2: left promiscuous mode [ 195.236484][ T9923] bond3: left promiscuous mode [ 195.249199][ T9923] bond4: left promiscuous mode [ 195.258855][ T9923] bond5: left promiscuous mode [ 195.265106][ T9923] bond7: left promiscuous mode [ 195.276221][ T9923] bond8: left promiscuous mode [ 195.302447][ T9923] bond9: left promiscuous mode [ 195.357658][ T9945] xt_NFQUEUE: number of total queues is 0 [ 195.378826][ T9947] x_tables: unsorted entry at hook 3 [ 196.080297][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 196.258862][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880323b4c00: rx timeout, send abort [ 196.270358][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880323b4c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 196.414798][ T9982] __nla_validate_parse: 2 callbacks suppressed [ 196.414828][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1345'. [ 196.485749][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1343'. [ 196.554136][ T9985] team0: Device ipvlan2 failed to register rx_handler [ 196.647481][ T9989] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1346'. [ 196.945357][T10002] tun0: tun_chr_ioctl cmd 1074025677 [ 196.956575][T10002] tun0: linktype set to 270 [ 196.956595][T10003] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1349'. [ 197.003113][T10003] vti0: entered promiscuous mode [ 197.120284][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1351'. [ 197.130185][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 197.137681][T10007] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1351'. [ 197.314152][T10011] netlink: 'syz.1.1354': attribute type 1 has an invalid length. [ 197.326984][T10011] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1354'. [ 197.485561][T10021] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1356'. [ 197.495262][T10022] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1357'. [ 197.564121][T10025] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1358'. [ 197.720531][T10030] netlink: 'syz.4.1359': attribute type 1 has an invalid length. [ 198.160236][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 199.210191][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 200.251622][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 200.922315][T10050] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 201.112222][T10068] bridge0: entered promiscuous mode [ 201.151656][T10068] macvlan2: entered promiscuous mode [ 201.171641][T10068] bridge0: port 3(macvlan2) entered blocking state [ 201.178354][T10068] bridge0: port 3(macvlan2) entered disabled state [ 201.188922][T10068] macvlan2: entered allmulticast mode [ 201.207076][T10068] bridge0: entered allmulticast mode [ 201.214149][T10068] macvlan2: left allmulticast mode [ 201.219475][T10068] bridge0: left allmulticast mode [ 201.231790][T10068] bridge0: left promiscuous mode [ 201.280216][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 201.395428][T10083] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 201.541853][T10093] FAULT_INJECTION: forcing a failure. [ 201.541853][T10093] name failslab, interval 1, probability 0, space 0, times 0 [ 201.594023][T10093] CPU: 1 UID: 0 PID: 10093 Comm: syz.3.1375 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 201.594054][T10093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 201.594068][T10093] Call Trace: [ 201.594075][T10093] [ 201.594083][T10093] dump_stack_lvl+0x241/0x360 [ 201.594114][T10093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.594137][T10093] ? __pfx__printk+0x10/0x10 [ 201.594159][T10093] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 201.594190][T10093] ? __pfx___might_resched+0x10/0x10 [ 201.594214][T10093] ? tc_get_qdisc+0x24d/0x1110 [ 201.594243][T10093] should_fail_ex+0x40a/0x550 [ 201.594278][T10093] should_failslab+0xac/0x100 [ 201.594305][T10093] kmem_cache_alloc_node_noprof+0x77/0x380 [ 201.594334][T10093] ? __alloc_skb+0x1c3/0x440 [ 201.594359][T10093] __alloc_skb+0x1c3/0x440 [ 201.594386][T10093] ? __pfx___alloc_skb+0x10/0x10 [ 201.594414][T10093] ? netlink_ack_tlv_len+0x6e/0x200 [ 201.594447][T10093] netlink_ack+0x145/0xa60 [ 201.594473][T10093] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 201.594509][T10093] ? ref_tracker_free+0x643/0x7e0 [ 201.594536][T10093] netlink_rcv_skb+0x294/0x480 [ 201.594566][T10093] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 201.594598][T10093] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.594657][T10093] ? netlink_deliver_tap+0x2e/0x1b0 [ 201.594692][T10093] netlink_unicast+0x7f6/0x990 [ 201.594727][T10093] ? __pfx_netlink_unicast+0x10/0x10 [ 201.594752][T10093] ? __virt_addr_valid+0x45f/0x530 [ 201.594772][T10093] ? __phys_addr_symbol+0x2f/0x70 [ 201.594790][T10093] ? __check_object_size+0x47a/0x730 [ 201.594822][T10093] netlink_sendmsg+0x8de/0xcb0 [ 201.594864][T10093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.594898][T10093] ? aa_sock_msg_perm+0x91/0x160 [ 201.594933][T10093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.594961][T10093] __sock_sendmsg+0x221/0x270 [ 201.594992][T10093] ____sys_sendmsg+0x53a/0x860 [ 201.595025][T10093] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.595052][T10093] ? __fget_files+0x2a/0x410 [ 201.595085][T10093] ? __fget_files+0x2a/0x410 [ 201.595123][T10093] __sys_sendmsg+0x269/0x350 [ 201.595152][T10093] ? __pfx___sys_sendmsg+0x10/0x10 [ 201.595186][T10093] ? do_sys_openat2+0x17a/0x1d0 [ 201.595236][T10093] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 201.595268][T10093] ? do_syscall_64+0x100/0x230 [ 201.595298][T10093] ? do_syscall_64+0xb6/0x230 [ 201.595326][T10093] do_syscall_64+0xf3/0x230 [ 201.595352][T10093] ? clear_bhb_loop+0x35/0x90 [ 201.595383][T10093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.595411][T10093] RIP: 0033:0x7f8052b8d169 [ 201.595428][T10093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.595445][T10093] RSP: 002b:00007f80509d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.595466][T10093] RAX: ffffffffffffffda RBX: 00007f8052da6080 RCX: 00007f8052b8d169 [ 201.595481][T10093] RDX: 0000000000000000 RSI: 0000400000000380 RDI: 0000000000000003 [ 201.595493][T10093] RBP: 00007f80509d5090 R08: 0000000000000000 R09: 0000000000000000 [ 201.595505][T10093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.595517][T10093] R13: 0000000000000001 R14: 00007f8052da6080 R15: 00007ffdf589b9b8 [ 201.595546][T10093] [ 201.932178][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 201.938283][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 201.940138][T10096] __nla_validate_parse: 2 callbacks suppressed [ 201.940159][T10096] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1377'. [ 201.944431][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 202.187362][T10111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1380'. [ 202.320208][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 202.452433][T10126] netlink: 'syz.1.1388': attribute type 29 has an invalid length. [ 202.487887][T10126] netlink: 'syz.1.1388': attribute type 29 has an invalid length. [ 202.510840][T10126] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1388'. [ 202.559064][T10128] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1389'. [ 202.607807][T10133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1388'. [ 202.634597][T10130] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1390'. [ 202.645609][T10133] bridge_slave_1: left allmulticast mode [ 202.654148][T10133] bridge_slave_1: left promiscuous mode [ 202.661674][T10133] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.679357][T10133] bridge_slave_0: left allmulticast mode [ 202.686972][T10133] bridge_slave_0: left promiscuous mode [ 202.695702][T10133] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.027161][T10152] 8021q: adding VLAN 0 to HW filter on device bond12 [ 203.036173][T10152] team0: Port device bond12 added [ 203.126793][T10158] sctp: [Deprecated]: syz.1.1396 (pid 10158) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.126793][T10158] Use struct sctp_sack_info instead [ 203.360250][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.376314][T10171] (unnamed net_device) (uninitialized): option lacp_active: invalid value (7) [ 203.398788][T10170] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1402'. [ 203.426703][T10176] FAULT_INJECTION: forcing a failure. [ 203.426703][T10176] name failslab, interval 1, probability 0, space 0, times 0 [ 203.447873][T10171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1400'. [ 203.460531][T10176] CPU: 1 UID: 0 PID: 10176 Comm: syz.2.1404 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 203.460566][T10176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 203.460579][T10176] Call Trace: [ 203.460586][T10176] [ 203.460595][T10176] dump_stack_lvl+0x241/0x360 [ 203.460626][T10176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.460650][T10176] ? __pfx__printk+0x10/0x10 [ 203.460677][T10176] ? ref_tracker_alloc+0x332/0x490 [ 203.460702][T10176] should_fail_ex+0x40a/0x550 [ 203.460737][T10176] should_failslab+0xac/0x100 [ 203.460766][T10176] ? skb_clone+0x20c/0x390 [ 203.460790][T10176] kmem_cache_alloc_noprof+0x70/0x380 [ 203.460825][T10176] skb_clone+0x20c/0x390 [ 203.460855][T10176] __netlink_deliver_tap+0x3c4/0x7f0 [ 203.460898][T10176] ? netlink_deliver_tap+0x2e/0x1b0 [ 203.460927][T10176] netlink_deliver_tap+0x19d/0x1b0 [ 203.460958][T10176] netlink_sendskb+0x68/0x140 [ 203.460986][T10176] netlink_unicast+0x39d/0x990 [ 203.461011][T10176] ? __asan_memcpy+0x40/0x70 [ 203.461041][T10176] ? __pfx_netlink_unicast+0x10/0x10 [ 203.461078][T10176] netlink_rcv_skb+0x294/0x480 [ 203.461108][T10176] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 203.461142][T10176] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 203.461195][T10176] ? netlink_deliver_tap+0x2e/0x1b0 [ 203.461229][T10176] netlink_unicast+0x7f6/0x990 [ 203.461265][T10176] ? __pfx_netlink_unicast+0x10/0x10 [ 203.461298][T10176] ? __virt_addr_valid+0x45f/0x530 [ 203.461320][T10176] ? __phys_addr_symbol+0x2f/0x70 [ 203.461339][T10176] ? __check_object_size+0x47a/0x730 [ 203.461372][T10176] netlink_sendmsg+0x8de/0xcb0 [ 203.461415][T10176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.461466][T10176] ? aa_sock_msg_perm+0x91/0x160 [ 203.461500][T10176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.461528][T10176] __sock_sendmsg+0x221/0x270 [ 203.461562][T10176] ____sys_sendmsg+0x53a/0x860 [ 203.461596][T10176] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.461618][T10176] ? __fget_files+0x2a/0x410 [ 203.461652][T10176] ? __fget_files+0x2a/0x410 [ 203.461689][T10176] __sys_sendmsg+0x269/0x350 [ 203.461718][T10176] ? __pfx___sys_sendmsg+0x10/0x10 [ 203.461756][T10176] ? do_sys_openat2+0x17a/0x1d0 [ 203.461812][T10176] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 203.461846][T10176] ? do_syscall_64+0x100/0x230 [ 203.461877][T10176] ? do_syscall_64+0xb6/0x230 [ 203.461905][T10176] do_syscall_64+0xf3/0x230 [ 203.461931][T10176] ? clear_bhb_loop+0x35/0x90 [ 203.461964][T10176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.461993][T10176] RIP: 0033:0x7f97e1d8d169 [ 203.462011][T10176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.462028][T10176] RSP: 002b:00007f97e2bd4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.462051][T10176] RAX: ffffffffffffffda RBX: 00007f97e1fa5fa0 RCX: 00007f97e1d8d169 [ 203.462066][T10176] RDX: 0000000000000000 RSI: 0000400000000380 RDI: 0000000000000003 [ 203.462079][T10176] RBP: 00007f97e2bd4090 R08: 0000000000000000 R09: 0000000000000000 [ 203.462091][T10176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.462103][T10176] R13: 0000000000000000 R14: 00007f97e1fa5fa0 R15: 00007ffc563a1458 [ 203.462135][T10176] [ 203.812197][T10177] syzkaller0: entered promiscuous mode [ 203.817982][T10177] syzkaller0: entered allmulticast mode [ 203.909773][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1406'. [ 203.932997][T10182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1406'. [ 204.410215][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 205.098436][T10210] sctp: [Deprecated]: syz.1.1415 (pid 10210) Use of int in max_burst socket option deprecated. [ 205.098436][T10210] Use struct sctp_assoc_value instead [ 205.442995][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 205.450182][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 206.487587][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 206.497093][T10227] raw_sendmsg: syz.1.1418 forgot to set AF_INET. Fix it! [ 206.812523][T10220] IPVS: Unknown mcast interface: vcan0 [ 206.976149][T10237] macsec1: entered promiscuous mode [ 206.992214][T10242] __nla_validate_parse: 1 callbacks suppressed [ 206.992239][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1420'. [ 207.000326][T10237] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 207.016219][T10237] macsec1: entered allmulticast mode [ 207.025678][T10237] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 207.511980][T10265] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 207.530200][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 208.276357][T10280] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 208.559762][T10292] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1435'. [ 208.569131][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 208.694799][T10294] 8021q: adding VLAN 0 to HW filter on device bond10 [ 208.703414][T10294] team0: Port device bond10 added [ 208.811574][T10303] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1439'. [ 208.823696][T10302] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1439'. [ 208.931074][T10303] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1439'. [ 209.024462][T10317] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1443'. [ 209.162998][T10319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1444'. [ 209.600255][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.885266][T10366] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1457'. [ 209.955285][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1459'. [ 210.640190][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.170858][T10417] IPv6: NLM_F_REPLACE set, but no existing node found! [ 211.287800][T10422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1471'. [ 211.418823][T10422] netlink: 'syz.4.1471': attribute type 12 has an invalid length. [ 211.680236][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.069672][T10446] __nla_validate_parse: 3 callbacks suppressed [ 212.069688][T10446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1479'. [ 212.392419][T10455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.488657][T10463] netlink: 'syz.4.1485': attribute type 10 has an invalid length. [ 212.720279][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.773985][T10463] team0: Port device macvlan0 added [ 212.803453][T10467] netlink: 'syz.1.1484': attribute type 1 has an invalid length. [ 213.016936][T10478] FAULT_INJECTION: forcing a failure. [ 213.016936][T10478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.035067][T10471] batman_adv: batadv0: Interface deactivated: dummy0 [ 213.046396][T10478] CPU: 0 UID: 0 PID: 10478 Comm: syz.0.1488 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 213.046431][T10478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 213.046445][T10478] Call Trace: [ 213.046452][T10478] [ 213.046461][T10478] dump_stack_lvl+0x241/0x360 [ 213.046493][T10478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.046521][T10478] ? __pfx__printk+0x10/0x10 [ 213.046544][T10478] ? __pfx_lock_release+0x10/0x10 [ 213.046585][T10478] should_fail_ex+0x40a/0x550 [ 213.046622][T10478] _copy_from_user+0x2d/0xb0 [ 213.046652][T10478] do_ipt_set_ctl+0x731/0x1250 [ 213.046688][T10478] ? nf_setsockopt+0x240/0x2c0 [ 213.046706][T10478] ? do_ip_setsockopt+0x2824/0x3ae0 [ 213.046733][T10478] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 213.046762][T10478] ? rcu_is_watching+0x15/0xb0 [ 213.046787][T10478] ? trace_contention_end+0x3c/0x120 [ 213.046821][T10478] ? __mutex_unlock_slowpath+0x227/0x800 [ 213.046859][T10478] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 213.046885][T10478] ? aa_sk_perm+0x96d/0xab0 [ 213.046923][T10478] ? __pfx_aa_sk_perm+0x10/0x10 [ 213.046956][T10478] nf_setsockopt+0x295/0x2c0 [ 213.046982][T10478] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 213.047014][T10478] do_sock_setsockopt+0x3af/0x720 [ 213.047045][T10478] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 213.047073][T10478] ? __fget_files+0x395/0x410 [ 213.047103][T10478] ? __fget_files+0x2a/0x410 [ 213.047142][T10478] __x64_sys_setsockopt+0x1ee/0x280 [ 213.047184][T10478] do_syscall_64+0xf3/0x230 [ 213.047211][T10478] ? clear_bhb_loop+0x35/0x90 [ 213.047243][T10478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.047270][T10478] RIP: 0033:0x7f573c58d169 [ 213.047288][T10478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.047305][T10478] RSP: 002b:00007f573d326038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 213.047326][T10478] RAX: ffffffffffffffda RBX: 00007f573c7a5fa0 RCX: 00007f573c58d169 [ 213.047341][T10478] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 213.047355][T10478] RBP: 00007f573d326090 R08: 00000000000003a0 R09: 0000000000000000 [ 213.047373][T10478] R10: 0000400000000140 R11: 0000000000000246 R12: 0000000000000001 [ 213.047386][T10478] R13: 0000000000000000 R14: 00007f573c7a5fa0 R15: 00007ffe129957a8 [ 213.047416][T10478] [ 213.317121][T10471] batadv_slave_1: left promiscuous mode [ 213.368141][T10481] Cannot find add_set index 0 as target [ 213.429275][T10471] vti0: left promiscuous mode [ 213.443697][T10471] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 213.463741][T10471] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 213.473536][T10471] macsec1: left promiscuous mode [ 213.478722][T10471] macsec1: left allmulticast mode [ 213.677021][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1495'. [ 213.689835][T10494] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1495'. [ 213.760177][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 213.818517][T10499] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1496'. [ 213.846843][T10499] block nbd0: NBD_DISCONNECT [ 213.853164][T10499] block nbd0: Send disconnect failed -32 [ 213.861688][T10499] block nbd0: shutting down sockets [ 213.877682][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.892676][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 213.915270][T10504] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1498'. [ 213.940658][T10500] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1496'. [ 213.950605][ T1841] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.961369][ T1841] Buffer I/O error on dev nbd0, logical block 0, async page read [ 213.972444][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.982437][T10507] FAULT_INJECTION: forcing a failure. [ 213.982437][T10507] name failslab, interval 1, probability 0, space 0, times 0 [ 213.997049][T10500] block nbd0: NBD_DISCONNECT [ 214.002006][T10500] block nbd0: Send disconnect failed -32 [ 214.002168][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 214.015630][T10507] CPU: 0 UID: 0 PID: 10507 Comm: syz.3.1499 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 214.015657][T10507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 214.015671][T10507] Call Trace: [ 214.015677][T10507] [ 214.015685][T10507] dump_stack_lvl+0x241/0x360 [ 214.015716][T10507] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.015738][T10507] ? __pfx__printk+0x10/0x10 [ 214.015760][T10507] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 214.015791][T10507] ? __pfx___might_resched+0x10/0x10 [ 214.015822][T10507] should_fail_ex+0x40a/0x550 [ 214.015858][T10507] should_failslab+0xac/0x100 [ 214.015887][T10507] __kmalloc_node_noprof+0xe1/0x4d0 [ 214.015914][T10507] ? apparmor_capable+0x13b/0x1b0 [ 214.015937][T10507] ? __kvmalloc_node_noprof+0x72/0x190 [ 214.015973][T10507] __kvmalloc_node_noprof+0x72/0x190 [ 214.016007][T10507] xt_alloc_table_info+0x3d/0xa0 [ 214.016028][T10507] do_ipt_set_ctl+0xb97/0x1250 [ 214.016062][T10507] ? nf_setsockopt+0x240/0x2c0 [ 214.016079][T10507] ? do_ip_setsockopt+0x2824/0x3ae0 [ 214.016105][T10507] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 214.016132][T10507] ? rcu_is_watching+0x15/0xb0 [ 214.016156][T10507] ? trace_contention_end+0x3c/0x120 [ 214.016187][T10507] ? __mutex_unlock_slowpath+0x227/0x800 [ 214.016222][T10507] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 214.016247][T10507] ? aa_sk_perm+0x96d/0xab0 [ 214.016283][T10507] ? __pfx_aa_sk_perm+0x10/0x10 [ 214.016320][T10507] nf_setsockopt+0x295/0x2c0 [ 214.016345][T10507] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 214.016375][T10507] do_sock_setsockopt+0x3af/0x720 [ 214.016404][T10507] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 214.016432][T10507] ? __fget_files+0x395/0x410 [ 214.016460][T10507] ? __fget_files+0x2a/0x410 [ 214.016498][T10507] __x64_sys_setsockopt+0x1ee/0x280 [ 214.016528][T10507] do_syscall_64+0xf3/0x230 [ 214.016554][T10507] ? clear_bhb_loop+0x35/0x90 [ 214.016587][T10507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.016614][T10507] RIP: 0033:0x7f8052b8d169 [ 214.016632][T10507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.016649][T10507] RSP: 002b:00007f80509f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 214.016670][T10507] RAX: ffffffffffffffda RBX: 00007f8052da5fa0 RCX: 00007f8052b8d169 [ 214.016685][T10507] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 214.016698][T10507] RBP: 00007f80509f6090 R08: 00000000000003a0 R09: 0000000000000000 [ 214.016710][T10507] R10: 0000400000000140 R11: 0000000000000246 R12: 0000000000000001 [ 214.016723][T10507] R13: 0000000000000000 R14: 00007f8052da5fa0 R15: 00007ffdf589b9b8 [ 214.016752][T10507] [ 214.338914][T10511] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1500'. [ 214.354469][T10511] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1500'. [ 214.382336][T10511] gretap1: entered promiscuous mode [ 214.392204][ T1841] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.412747][T10511] gretap1: entered allmulticast mode [ 214.413185][ T1841] Buffer I/O error on dev nbd0, logical block 0, async page read [ 214.436994][T10520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1502'. [ 214.446429][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.455823][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 214.463887][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.473028][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 214.481187][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.490365][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 214.498297][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.507474][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 214.515384][ T5856] ldm_validate_partition_table(): Disk read failed. [ 214.522789][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.531998][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 214.540355][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 214.550256][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 214.561080][ T5856] Dev nbd0: unable to read RDB block 0 [ 214.567203][ T5856] nbd0: unable to read partition table [ 214.584338][ T5856] ldm_validate_partition_table(): Disk read failed. [ 214.592549][ T5856] Dev nbd0: unable to read RDB block 0 [ 214.618564][ T5856] nbd0: unable to read partition table [ 214.683221][ T5856] udevd[5856]: failed to send result of seq 11127 to main daemon: Connection refused [ 214.800217][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 214.842755][T10532] 8021q: adding VLAN 0 to HW filter on device bond13 [ 214.919054][T10532] team0: Port device bond13 added [ 215.183910][T10550] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1513'. [ 215.255679][T10557] xt_hashlimit: max too large, truncated to 1048576 [ 215.483213][T10570] x_tables: duplicate underflow at hook 1 [ 215.645233][T10573] xt_CT: No such helper "pptp" [ 215.804701][T10585] xt_l2tp: unknown flags: 10 [ 215.840208][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 215.955084][T10590] 8021q: adding VLAN 0 to HW filter on device bond11 [ 215.968179][T10590] team0: Port device bond11 added [ 216.837360][T10642] 8021q: adding VLAN 0 to HW filter on device bond14 [ 216.849942][T10642] team0: Port device bond14 added [ 216.890267][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 217.152577][T10654] __nla_validate_parse: 7 callbacks suppressed [ 217.152599][T10654] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1541'. [ 217.231735][T10654] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1541'. [ 217.257093][T10660] gretap0: entered promiscuous mode [ 217.270441][T10660] macsec1: entered promiscuous mode [ 217.477451][T10668] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 217.500434][T10630] netlink: 'syz.1.1534': attribute type 1 has an invalid length. [ 217.543437][T10668] batman_adv: batadv0: Adding interface: ip6gretap1 [ 217.551584][T10668] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.552549][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1547'. [ 217.620980][T10668] batman_adv: batadv0: Interface activated: ip6gretap1 [ 217.813978][T10676] FAULT_INJECTION: forcing a failure. [ 217.813978][T10676] name failslab, interval 1, probability 0, space 0, times 0 [ 217.857999][T10676] CPU: 1 UID: 0 PID: 10676 Comm: syz.3.1550 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 217.858034][T10676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 217.858047][T10676] Call Trace: [ 217.858055][T10676] [ 217.858064][T10676] dump_stack_lvl+0x241/0x360 [ 217.858098][T10676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.858121][T10676] ? __pfx__printk+0x10/0x10 [ 217.858144][T10676] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 217.858175][T10676] ? __pfx___might_resched+0x10/0x10 [ 217.858202][T10676] ? stack_trace_save+0x118/0x1d0 [ 217.858234][T10676] should_fail_ex+0x40a/0x550 [ 217.858280][T10676] should_failslab+0xac/0x100 [ 217.858310][T10676] __kmalloc_node_noprof+0xe1/0x4d0 [ 217.858341][T10676] ? __kvmalloc_node_noprof+0x72/0x190 [ 217.858380][T10676] __kvmalloc_node_noprof+0x72/0x190 [ 217.858416][T10676] translate_table+0x181/0x2370 [ 217.858472][T10676] ? __pfx_translate_table+0x10/0x10 [ 217.858501][T10676] ? __might_fault+0xaa/0x120 [ 217.858522][T10676] ? __pfx_lock_release+0x10/0x10 [ 217.858561][T10676] ? __virt_addr_valid+0x183/0x530 [ 217.858584][T10676] ? __might_fault+0xaa/0x120 [ 217.858604][T10676] ? __might_fault+0xc6/0x120 [ 217.858631][T10676] ? copy_from_sockptr_offset+0x6b/0xb0 [ 217.858663][T10676] do_ipt_set_ctl+0xe3d/0x1250 [ 217.858698][T10676] ? nf_setsockopt+0x240/0x2c0 [ 217.858717][T10676] ? do_ip_setsockopt+0x2824/0x3ae0 [ 217.858743][T10676] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 217.858773][T10676] ? rcu_is_watching+0x15/0xb0 [ 217.858797][T10676] ? trace_contention_end+0x3c/0x120 [ 217.858831][T10676] ? __mutex_unlock_slowpath+0x227/0x800 [ 217.858869][T10676] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 217.858896][T10676] ? aa_sk_perm+0x96d/0xab0 [ 217.858933][T10676] ? __pfx_aa_sk_perm+0x10/0x10 [ 217.858966][T10676] nf_setsockopt+0x295/0x2c0 [ 217.858991][T10676] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 217.859024][T10676] do_sock_setsockopt+0x3af/0x720 [ 217.859055][T10676] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 217.859085][T10676] ? __fget_files+0x395/0x410 [ 217.859115][T10676] ? __fget_files+0x2a/0x410 [ 217.859155][T10676] __x64_sys_setsockopt+0x1ee/0x280 [ 217.859187][T10676] do_syscall_64+0xf3/0x230 [ 217.859215][T10676] ? clear_bhb_loop+0x35/0x90 [ 217.859254][T10676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.859283][T10676] RIP: 0033:0x7f8052b8d169 [ 217.859302][T10676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.859320][T10676] RSP: 002b:00007f80509f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 217.859343][T10676] RAX: ffffffffffffffda RBX: 00007f8052da5fa0 RCX: 00007f8052b8d169 [ 217.859359][T10676] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 217.859373][T10676] RBP: 00007f80509f6090 R08: 00000000000003a0 R09: 0000000000000000 [ 217.859386][T10676] R10: 0000400000000140 R11: 0000000000000246 R12: 0000000000000001 [ 217.859399][T10676] R13: 0000000000000000 R14: 00007f8052da5fa0 R15: 00007ffdf589b9b8 [ 217.859429][T10676] [ 218.160301][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 218.204433][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1551'. [ 218.360792][T10688] netlink: 'syz.0.1553': attribute type 9 has an invalid length. [ 218.368263][T10684] 8021q: adding VLAN 0 to HW filter on device bond12 [ 218.376681][T10684] team0: Port device bond12 added [ 218.415379][T10661] netlink: 'syz.4.1543': attribute type 1 has an invalid length. [ 218.496024][T10694] FAULT_INJECTION: forcing a failure. [ 218.496024][T10694] name failslab, interval 1, probability 0, space 0, times 0 [ 218.513589][T10694] CPU: 1 UID: 0 PID: 10694 Comm: syz.3.1554 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 218.513622][T10694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 218.513635][T10694] Call Trace: [ 218.513643][T10694] [ 218.513651][T10694] dump_stack_lvl+0x241/0x360 [ 218.513683][T10694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.513706][T10694] ? __pfx__printk+0x10/0x10 [ 218.513730][T10694] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 218.513762][T10694] ? __pfx___might_resched+0x10/0x10 [ 218.513796][T10694] should_fail_ex+0x40a/0x550 [ 218.513832][T10694] should_failslab+0xac/0x100 [ 218.513861][T10694] kmem_cache_alloc_node_noprof+0x77/0x380 [ 218.513896][T10694] ? __alloc_skb+0x1c3/0x440 [ 218.513923][T10694] __alloc_skb+0x1c3/0x440 [ 218.513950][T10694] ? __pfx___alloc_skb+0x10/0x10 [ 218.513972][T10694] ? __virt_addr_valid+0x150/0x530 [ 218.513991][T10694] ? __virt_addr_valid+0x45f/0x530 [ 218.514011][T10694] ? __phys_addr_symbol+0x2f/0x70 [ 218.514035][T10694] tipc_buf_acquire+0x2b/0xe0 [ 218.514059][T10694] tipc_msg_build+0x8b8/0x1040 [ 218.514099][T10694] ? __pfx_tipc_msg_build+0x10/0x10 [ 218.514121][T10694] ? tipc_group_bc_cong+0x1d0/0x290 [ 218.514166][T10694] tipc_send_group_bcast+0x889/0xbd0 [ 218.514209][T10694] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 218.514249][T10694] ? __pfx_woken_wake_function+0x10/0x10 [ 218.514295][T10694] __tipc_sendmsg+0x363/0x35d0 [ 218.514323][T10694] ? ima_match_policy+0x114/0x2100 [ 218.514357][T10694] ? __pfx___tipc_sendmsg+0x10/0x10 [ 218.514380][T10694] ? ima_get_action+0x75/0xb0 [ 218.514406][T10694] ? __pfx_validate_chain+0x10/0x10 [ 218.514434][T10694] ? mark_lock+0x9a/0x360 [ 218.514458][T10694] ? __lock_acquire+0x1397/0x2100 [ 218.514509][T10694] ? mark_lock+0x9a/0x360 [ 218.514533][T10694] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 218.514567][T10694] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 218.514610][T10694] ? __local_bh_enable_ip+0x168/0x200 [ 218.514635][T10694] ? tipc_sendmsg+0x47/0x70 [ 218.514657][T10694] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 218.514679][T10694] ? do_raw_spin_unlock+0x13c/0x8b0 [ 218.514714][T10694] ? __pfx_tipc_sendmsg+0x10/0x10 [ 218.514734][T10694] tipc_sendmsg+0x55/0x70 [ 218.514757][T10694] __sock_sendmsg+0x221/0x270 [ 218.514790][T10694] ____sys_sendmsg+0x53a/0x860 [ 218.514823][T10694] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.514845][T10694] ? __fget_files+0x2a/0x410 [ 218.514879][T10694] ? __fget_files+0x2a/0x410 [ 218.514924][T10694] __sys_sendmmsg+0x36a/0x720 [ 218.514960][T10694] ? __pfx___sys_sendmmsg+0x10/0x10 [ 218.514997][T10694] ? __pfx_lock_release+0x10/0x10 [ 218.515025][T10694] ? kstrtouint_from_user+0x128/0x190 [ 218.515074][T10694] ? ksys_write+0x22a/0x2b0 [ 218.515097][T10694] ? __pfx_lock_release+0x10/0x10 [ 218.515134][T10694] ? sb_end_write+0xe9/0x1c0 [ 218.515165][T10694] ? vfs_write+0x7fa/0xd10 [ 218.515190][T10694] ? __mutex_unlock_slowpath+0x227/0x800 [ 218.515247][T10694] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 218.515281][T10694] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 218.515313][T10694] ? do_syscall_64+0x100/0x230 [ 218.515344][T10694] __x64_sys_sendmmsg+0xa0/0xb0 [ 218.515388][T10694] do_syscall_64+0xf3/0x230 [ 218.515414][T10694] ? clear_bhb_loop+0x35/0x90 [ 218.515445][T10694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.515473][T10694] RIP: 0033:0x7f8052b8d169 [ 218.515492][T10694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.515510][T10694] RSP: 002b:00007f80509d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 218.515531][T10694] RAX: ffffffffffffffda RBX: 00007f8052da6080 RCX: 00007f8052b8d169 [ 218.515545][T10694] RDX: 0400000000000181 RSI: 00004000000030c0 RDI: 0000000000000003 [ 218.515559][T10694] RBP: 00007f80509d5090 R08: 0000000000000000 R09: 0000000000000000 [ 218.515572][T10694] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 218.515584][T10694] R13: 0000000000000000 R14: 00007f8052da6080 R15: 00007ffdf589b9b8 [ 218.515615][T10694] [ 218.934914][T10696] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 219.093098][T10703] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1558'. [ 219.103090][T10703] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 219.176790][T10707] netlink: 'syz.0.1560': attribute type 27 has an invalid length. [ 219.210272][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 219.346224][T10713] netlink: 'syz.3.1561': attribute type 32 has an invalid length. [ 219.470479][T10707] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.497679][T10707] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.552919][T10707] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.630306][T10707] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.643948][T10725] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1561'. [ 219.699587][T10707] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.709181][T10707] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.718367][T10707] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.727346][T10707] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.794529][T10707] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 219.842596][T10708] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1555'. [ 219.911585][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1563'. [ 220.127284][T10721] syzkaller0: entered promiscuous mode [ 220.133502][T10721] syzkaller0: entered allmulticast mode [ 220.250254][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.292999][T10720] netlink: 'syz.1.1562': attribute type 1 has an invalid length. [ 220.303564][T10733] netlink: 'syz.4.1565': attribute type 11 has an invalid length. [ 221.281651][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 222.304410][T10708] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 222.320186][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 222.528591][T10748] syz.4.1569 uses old SIOCAX25GETINFO [ 222.564459][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1567'. [ 222.623216][T10750] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1567'. [ 222.870928][T10763] FAULT_INJECTION: forcing a failure. [ 222.870928][T10763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.905402][T10766] netlink: 'syz.1.1573': attribute type 32 has an invalid length. [ 222.916156][T10766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1573'. [ 222.927456][T10766] (unnamed net_device) (uninitialized): option coupled_control: invalid value (220) [ 222.969053][T10763] CPU: 1 UID: 0 PID: 10763 Comm: syz.4.1571 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 222.969084][T10763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 222.969096][T10763] Call Trace: [ 222.969103][T10763] [ 222.969111][T10763] dump_stack_lvl+0x241/0x360 [ 222.969142][T10763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.969164][T10763] ? __pfx__printk+0x10/0x10 [ 222.969186][T10763] ? __pfx_lock_release+0x10/0x10 [ 222.969226][T10763] should_fail_ex+0x40a/0x550 [ 222.969261][T10763] _copy_from_iter+0x1df/0x1c40 [ 222.969287][T10763] ? __virt_addr_valid+0x183/0x530 [ 222.969308][T10763] ? __pfx_lock_release+0x10/0x10 [ 222.969349][T10763] ? __pfx__copy_from_iter+0x10/0x10 [ 222.969374][T10763] ? __virt_addr_valid+0x183/0x530 [ 222.969392][T10763] ? __virt_addr_valid+0x183/0x530 [ 222.969410][T10763] ? __virt_addr_valid+0x45f/0x530 [ 222.969430][T10763] ? __phys_addr_symbol+0x2f/0x70 [ 222.969448][T10763] ? __check_object_size+0x47a/0x730 [ 222.969481][T10763] tipc_msg_build+0x846/0x1040 [ 222.969522][T10763] ? __pfx_tipc_msg_build+0x10/0x10 [ 222.969544][T10763] ? tipc_group_bc_cong+0x1d0/0x290 [ 222.969588][T10763] tipc_send_group_bcast+0x889/0xbd0 [ 222.969630][T10763] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 222.969669][T10763] ? __pfx_woken_wake_function+0x10/0x10 [ 222.969717][T10763] __tipc_sendmsg+0x363/0x35d0 [ 222.969744][T10763] ? ima_match_policy+0x114/0x2100 [ 222.969787][T10763] ? __pfx___tipc_sendmsg+0x10/0x10 [ 222.969809][T10763] ? ima_get_action+0x75/0xb0 [ 222.969836][T10763] ? __pfx_validate_chain+0x10/0x10 [ 222.969863][T10763] ? mark_lock+0x9a/0x360 [ 222.969886][T10763] ? __lock_acquire+0x1397/0x2100 [ 222.969937][T10763] ? mark_lock+0x9a/0x360 [ 222.969961][T10763] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 222.969994][T10763] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 222.970037][T10763] ? __local_bh_enable_ip+0x168/0x200 [ 222.970063][T10763] ? tipc_sendmsg+0x47/0x70 [ 222.970088][T10763] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 222.970109][T10763] ? do_raw_spin_unlock+0x13c/0x8b0 [ 222.970142][T10763] ? __pfx_tipc_sendmsg+0x10/0x10 [ 222.970163][T10763] tipc_sendmsg+0x55/0x70 [ 222.970187][T10763] __sock_sendmsg+0x221/0x270 [ 222.970220][T10763] ____sys_sendmsg+0x53a/0x860 [ 222.970254][T10763] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.970276][T10763] ? __fget_files+0x2a/0x410 [ 222.970310][T10763] ? __fget_files+0x2a/0x410 [ 222.970348][T10763] __sys_sendmmsg+0x36a/0x720 [ 222.970386][T10763] ? __pfx___sys_sendmmsg+0x10/0x10 [ 222.970423][T10763] ? __pfx_lock_release+0x10/0x10 [ 222.970451][T10763] ? kstrtouint_from_user+0x128/0x190 [ 222.970500][T10763] ? ksys_write+0x22a/0x2b0 [ 222.970522][T10763] ? __pfx_lock_release+0x10/0x10 [ 222.970560][T10763] ? sb_end_write+0xe9/0x1c0 [ 222.970590][T10763] ? vfs_write+0x7fa/0xd10 [ 222.970615][T10763] ? __mutex_unlock_slowpath+0x227/0x800 [ 222.970686][T10763] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 222.970722][T10763] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 222.970754][T10763] ? do_syscall_64+0x100/0x230 [ 222.970791][T10763] __x64_sys_sendmmsg+0xa0/0xb0 [ 222.970818][T10763] do_syscall_64+0xf3/0x230 [ 222.970845][T10763] ? clear_bhb_loop+0x35/0x90 [ 222.970876][T10763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.970903][T10763] RIP: 0033:0x7f2fe738d169 [ 222.970921][T10763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.970938][T10763] RSP: 002b:00007f2fe8188038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 222.970961][T10763] RAX: ffffffffffffffda RBX: 00007f2fe75a6080 RCX: 00007f2fe738d169 [ 222.970976][T10763] RDX: 0400000000000181 RSI: 00004000000030c0 RDI: 0000000000000003 [ 222.970991][T10763] RBP: 00007f2fe8188090 R08: 0000000000000000 R09: 0000000000000000 [ 222.971003][T10763] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 222.971016][T10763] R13: 0000000000000000 R14: 00007f2fe75a6080 R15: 00007ffdc30d1718 [ 222.971047][T10763] [ 223.016860][T10769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1575'. [ 223.370227][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 223.526001][T10778] netlink: 'syz.0.1577': attribute type 2 has an invalid length. [ 223.672136][T10786] netlink: 'syz.0.1581': attribute type 18 has an invalid length. [ 223.690723][T10787] netlink: 'syz.0.1581': attribute type 18 has an invalid length. [ 224.400258][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 225.087401][T10843] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 225.224792][T10810] netlink: 'syz.1.1583': attribute type 1 has an invalid length. [ 225.450496][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 225.636261][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1599'. [ 225.651788][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1599'. [ 226.442059][T10879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1606'. [ 226.480220][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 226.494536][T10879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1606'. [ 226.757309][T10887] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 226.908958][T10898] Cannot find del_set index 0 as target [ 226.921192][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1609'. [ 227.506976][T10910] gretap0: entered promiscuous mode [ 227.530209][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 227.542658][T10894] netlink: 'syz.2.1610': attribute type 1 has an invalid length. [ 227.560433][T10910] macsec0: entered promiscuous mode [ 227.642941][T10916] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1616'. [ 227.684064][T10916] netlink: 'syz.4.1616': attribute type 4 has an invalid length. [ 227.733251][T10919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1617'. [ 228.097381][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1621'. [ 228.437833][T10938] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1619'. [ 228.560249][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 229.442078][T10973] syzkaller0: entered promiscuous mode [ 229.447787][T10973] syzkaller0: entered allmulticast mode [ 229.498328][T10981] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1634'. [ 229.600219][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.650211][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.684254][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 232.274298][T11021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1644'. [ 232.303879][T11021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1644'. [ 232.356808][T11021] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1644'. [ 232.411815][ T5843] block nbd0: Receive control failed (result -107) [ 232.452344][T11026] openvswitch: netlink: nsh attr 259 is out of range max 3 [ 232.459867][T11026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.460363][T11021] nbd0: detected capacity change from 0 to 256 [ 232.618825][T11028] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1647'. [ 232.714805][T11013] netlink: 'syz.3.1641': attribute type 1 has an invalid length. [ 232.730276][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 232.842598][T11038] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1650'. [ 232.852060][T11038] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1650'. [ 232.930847][T11041] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1651'. [ 233.097373][T11046] IPVS: Unknown mcast interface: vcan0 [ 233.280680][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1657'. [ 233.342690][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1656'. [ 233.359717][T11058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1656'. [ 233.417909][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1657'. [ 233.433860][T11064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1656'. [ 233.453506][T11055] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1657'. [ 233.513787][ T5843] block nbd26: Receive control failed (result -107) [ 233.551093][T11055] nbd26: detected capacity change from 0 to 256 [ 233.674223][T11072] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1662'. [ 233.761935][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 234.467669][T11108] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 234.778329][ T30] audit: type=1800 audit(1742213989.935:4): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1673" name="memory.events" dev="tmpfs" ino=1693 res=0 errno=0 [ 234.810303][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 234.887000][T11108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.046739][T11095] netlink: 'syz.2.1668': attribute type 1 has an invalid length. [ 235.608560][T11135] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 235.754156][T11144] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 235.840193][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 236.778242][T11192] batadv0: entered promiscuous mode [ 236.783991][T11192] batadv0: entered allmulticast mode [ 236.880199][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 237.026222][T11195] xt_CT: No such helper "snmp" [ 237.133336][T11180] netlink: 'syz.3.1688': attribute type 1 has an invalid length. [ 237.920197][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 238.250963][T11226] syzkaller1: entered promiscuous mode [ 238.265464][T11226] syzkaller1: entered allmulticast mode [ 238.611249][T11229] gretap1: left promiscuous mode [ 238.616364][T11229] gretap1: left allmulticast mode [ 238.960255][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 239.252269][T11256] __nla_validate_parse: 8 callbacks suppressed [ 239.252292][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1712'. [ 239.313051][T11256] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1712'. [ 239.332521][T11256] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1712'. [ 239.373827][T11256] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1712'. [ 239.490351][T11256] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1712'. [ 239.587003][T11275] 8021q: adding VLAN 0 to HW filter on device bond13 [ 239.602880][T11275] team0: Port device bond13 added [ 239.997828][T11292] netlink: 'syz.1.1723': attribute type 58 has an invalid length. [ 240.005927][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 240.046079][T11292] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1723'. [ 240.339414][T11277] netlink: 'syz.0.1718': attribute type 1 has an invalid length. [ 240.352538][T11282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.383847][T11282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.398737][T11282] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 240.424937][T11282] bond0 (unregistering): Released all slaves [ 240.654737][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1729'. [ 240.726999][T11308] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1729'. [ 240.750267][T11308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1729'. [ 240.808428][T11311] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 240.975177][T11315] netlink: 'syz.3.1732': attribute type 21 has an invalid length. [ 241.010557][T11315] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1732'. [ 241.040303][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 241.413337][T11339] openvswitch: netlink: Actions may not be safe on all matching packets [ 242.084111][T11371] netlink: 'syz.2.1751': attribute type 1 has an invalid length. [ 242.092044][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 242.493673][T11393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.696959][T11401] netlink: 'syz.4.1761': attribute type 13 has an invalid length. [ 242.735859][T11401] macvtap0: entered promiscuous mode [ 242.753676][T11401] macvtap0: refused to change device tx_queue_len [ 243.063472][ T5843] block nbd27: Receive control failed (result -107) [ 243.085649][T11376] netlink: 'syz.0.1752': attribute type 1 has an invalid length. [ 243.100490][T11419] nbd27: detected capacity change from 0 to 256 [ 243.120226][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 244.160267][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 245.200227][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 245.868905][T11478] __nla_validate_parse: 5 callbacks suppressed [ 245.868929][T11478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1778'. [ 246.136662][T11478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1778'. [ 246.194558][T11478] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1778'. [ 246.240204][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 246.282037][ T5843] block nbd28: Receive control failed (result -107) [ 246.302940][T11478] nbd28: detected capacity change from 0 to 256 [ 246.446916][T11492] IPVS: ip_vs_add_dest(): server weight less than zero [ 246.707159][T11496] 8021q: adding VLAN 0 to HW filter on device bond11 [ 246.718901][T11496] team0: Port device bond11 added [ 247.125052][T11490] netlink: 'syz.3.1781': attribute type 1 has an invalid length. [ 247.176662][T11508] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1787'. [ 247.224052][T11498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.235201][T11498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.244898][T11498] bond0 (unregistering): Released all slaves [ 247.280321][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.287914][T11508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1787'. [ 247.320554][T11508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1787'. [ 247.397923][T11508] macsec0: entered allmulticast mode [ 248.203007][T11536] netlink: 'syz.0.1795': attribute type 3 has an invalid length. [ 248.320197][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 248.499970][T11548] netlink: 'syz.3.1798': attribute type 10 has an invalid length. [ 248.532342][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1798'. [ 248.689633][T11561] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1803'. [ 249.045942][T11588] netlink: 'syz.3.1809': attribute type 10 has an invalid length. [ 249.089385][T11589] FAULT_INJECTION: forcing a failure. [ 249.089385][T11589] name failslab, interval 1, probability 0, space 0, times 0 [ 249.130207][T11589] CPU: 0 UID: 0 PID: 11589 Comm: syz.1.1810 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 249.130241][T11589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 249.130255][T11589] Call Trace: [ 249.130263][T11589] [ 249.130272][T11589] dump_stack_lvl+0x241/0x360 [ 249.130306][T11589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.130330][T11589] ? __pfx__printk+0x10/0x10 [ 249.130354][T11589] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 249.130387][T11589] ? __pfx___might_resched+0x10/0x10 [ 249.130421][T11589] should_fail_ex+0x40a/0x550 [ 249.130459][T11589] should_failslab+0xac/0x100 [ 249.130499][T11589] kmem_cache_alloc_node_noprof+0x77/0x380 [ 249.130527][T11589] ? __alloc_skb+0x1c3/0x440 [ 249.130553][T11589] __alloc_skb+0x1c3/0x440 [ 249.130580][T11589] ? __pfx___alloc_skb+0x10/0x10 [ 249.130602][T11589] ? __virt_addr_valid+0x150/0x530 [ 249.130620][T11589] ? __virt_addr_valid+0x45f/0x530 [ 249.130641][T11589] ? __phys_addr_symbol+0x2f/0x70 [ 249.130664][T11589] tipc_buf_acquire+0x2b/0xe0 [ 249.130689][T11589] tipc_msg_build+0x8b8/0x1040 [ 249.130728][T11589] ? __pfx_tipc_msg_build+0x10/0x10 [ 249.130750][T11589] ? tipc_group_bc_cong+0x1d0/0x290 [ 249.130795][T11589] tipc_send_group_bcast+0x889/0xbd0 [ 249.130839][T11589] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 249.130880][T11589] ? __pfx_woken_wake_function+0x10/0x10 [ 249.130929][T11589] __tipc_sendmsg+0x363/0x35d0 [ 249.130957][T11589] ? ima_match_policy+0x114/0x2100 [ 249.130993][T11589] ? __pfx___tipc_sendmsg+0x10/0x10 [ 249.131017][T11589] ? ima_get_action+0x75/0xb0 [ 249.131046][T11589] ? __pfx_validate_chain+0x10/0x10 [ 249.131074][T11589] ? mark_lock+0x9a/0x360 [ 249.131100][T11589] ? __lock_acquire+0x1397/0x2100 [ 249.131153][T11589] ? mark_lock+0x9a/0x360 [ 249.131178][T11589] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 249.131213][T11589] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 249.131257][T11589] ? __local_bh_enable_ip+0x168/0x200 [ 249.131284][T11589] ? tipc_sendmsg+0x47/0x70 [ 249.131306][T11589] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 249.131330][T11589] ? do_raw_spin_unlock+0x13c/0x8b0 [ 249.131366][T11589] ? __pfx_tipc_sendmsg+0x10/0x10 [ 249.131388][T11589] tipc_sendmsg+0x55/0x70 [ 249.131414][T11589] __sock_sendmsg+0x221/0x270 [ 249.131447][T11589] ____sys_sendmsg+0x53a/0x860 [ 249.131489][T11589] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.131513][T11589] ? __fget_files+0x2a/0x410 [ 249.131548][T11589] ? __fget_files+0x2a/0x410 [ 249.131589][T11589] __sys_sendmmsg+0x36a/0x720 [ 249.131626][T11589] ? __pfx___sys_sendmmsg+0x10/0x10 [ 249.131661][T11589] ? __pfx_lock_release+0x10/0x10 [ 249.131687][T11589] ? kstrtouint_from_user+0x128/0x190 [ 249.131735][T11589] ? ksys_write+0x22a/0x2b0 [ 249.131758][T11589] ? __pfx_lock_release+0x10/0x10 [ 249.131797][T11589] ? sb_end_write+0xe9/0x1c0 [ 249.131828][T11589] ? vfs_write+0x7fa/0xd10 [ 249.131852][T11589] ? __mutex_unlock_slowpath+0x227/0x800 [ 249.131909][T11589] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 249.131945][T11589] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 249.131976][T11589] ? do_syscall_64+0x100/0x230 [ 249.132006][T11589] __x64_sys_sendmmsg+0xa0/0xb0 [ 249.132034][T11589] do_syscall_64+0xf3/0x230 [ 249.132062][T11589] ? clear_bhb_loop+0x35/0x90 [ 249.132094][T11589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.132122][T11589] RIP: 0033:0x7f8a6d18d169 [ 249.132141][T11589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.132158][T11589] RSP: 002b:00007f8a6df60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 249.132180][T11589] RAX: ffffffffffffffda RBX: 00007f8a6d3a6080 RCX: 00007f8a6d18d169 [ 249.132197][T11589] RDX: 0400000000000181 RSI: 00004000000030c0 RDI: 0000000000000003 [ 249.132211][T11589] RBP: 00007f8a6df60090 R08: 0000000000000000 R09: 0000000000000000 [ 249.132224][T11589] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 249.132237][T11589] R13: 0000000000000000 R14: 00007f8a6d3a6080 R15: 00007ffc9c5693b8 [ 249.132267][T11589] [ 249.133135][T11588] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1809'. [ 249.360339][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 249.808255][T11584] netlink: 'syz.2.1808': attribute type 1 has an invalid length. [ 250.009425][T11604] x_tables: duplicate underflow at hook 1 [ 250.213948][T11613] openvswitch: netlink: Message has 8 unknown bytes. [ 250.294206][T11613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1818'. [ 250.400360][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 250.819264][T11637] 8021q: adding VLAN 0 to HW filter on device bond15 [ 250.842762][T11637] team0: Port device bond15 added [ 251.440245][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 252.019025][T11666] netlink: 'syz.3.1832': attribute type 8 has an invalid length. [ 252.042751][T11639] team0 (unregistering): Port device team_slave_0 removed [ 252.064341][T11639] team0 (unregistering): Port device team_slave_1 removed [ 252.089415][T11653] netlink: 'syz.4.1829': attribute type 1 has an invalid length. [ 252.094168][T11639] team0 (unregistering): Port device bond1 removed [ 252.114093][T11639] team0 (unregistering): Port device bond2 removed [ 252.125213][T11639] team0 (unregistering): Port device bond3 removed [ 252.129646][ T26] hid-generic 0005:07C0:06E6.0001: item fetching failed at offset 0/1 [ 252.141824][ T26] hid-generic 0005:07C0:06E6.0001: probe with driver hid-generic failed with error -22 [ 252.142397][T11658] __nla_validate_parse: 2 callbacks suppressed [ 252.142416][T11658] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1830'. [ 252.169238][T11639] team0 (unregistering): Port device bond4 removed [ 252.177647][T11639] team0 (unregistering): Port device bond5 removed [ 252.187718][T11639] team0 (unregistering): Port device bond7 removed [ 252.213222][T11639] team0 (unregistering): Port device bond8 removed [ 252.360343][T11639] team0 (unregistering): Port device bond9 removed [ 252.381578][T11639] team0 (unregistering): Port device bond10 removed [ 252.408416][T11639] team0 (unregistering): Port device bond11 removed [ 252.423203][T11639] team0 (unregistering): Port device bond12 removed [ 252.439705][T11639] team0 (unregistering): Port device bond13 removed [ 252.463258][T11662] netlink: 'syz.0.1831': attribute type 9 has an invalid length. [ 252.480305][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 252.579422][T11671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.610055][T11671] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1833'. [ 252.928482][T11675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1834'. [ 253.378531][T11690] netlink: 'syz.2.1837': attribute type 5 has an invalid length. [ 253.530180][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 253.748373][T11707] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1844'. [ 253.779170][T11707] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1844'. [ 253.838859][T11710] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1844'. [ 253.871202][T11710] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1844'. [ 253.928283][T11710] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1844'. [ 253.964828][T11710] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1844'. [ 253.989390][T11711] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1844'. [ 254.000812][T11717] team0: Device gtp0 is of different type [ 254.039151][T11716] team0: Device gtp0 is of different type [ 254.467640][T11734] syzkaller1: entered promiscuous mode [ 254.491372][T11734] syzkaller1: entered allmulticast mode [ 254.546754][T11737] macsec2: entered promiscuous mode [ 254.560212][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 254.590187][T11737] gretap0: entered promiscuous mode [ 254.885357][ T31] INFO: task udevd:5836 blocked for more than 143 seconds. [ 254.915129][ T31] Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 254.942634][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 254.967831][ T31] task:udevd state:D stack:21856 pid:5836 tgid:5836 ppid:1 task_flags:0x400140 flags:0x00004002 [ 255.004202][ T31] Call Trace: [ 255.013170][ T31] [ 255.019711][ T31] __schedule+0x190e/0x4c90 [ 255.038147][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 255.054552][ T31] ? __pfx___schedule+0x10/0x10 [ 255.059704][ T31] ? __blk_flush_plug+0x449/0x500 [ 255.066182][ T31] ? __pfx_lock_release+0x10/0x10 [ 255.078336][ T31] ? __pfx___mod_timer+0x10/0x10 [ 255.088789][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 255.113639][ T31] ? schedule+0x90/0x320 [ 255.123811][ T31] schedule+0x14b/0x320 [ 255.132577][ T31] schedule_timeout+0x15a/0x290 [ 255.138471][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 255.146741][ T31] ? __pfx_process_timeout+0x10/0x10 [ 255.159053][ T31] ? prepare_to_wait_event+0x3bd/0x400 [ 255.170294][ T31] nbd_queue_rq+0x6dd/0xef0 [ 255.180215][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 255.191143][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 255.202652][ T31] blk_mq_dispatch_rq_list+0xad3/0x19d0 [ 255.214061][ T31] ? sbitmap_get+0x289/0x3f0 [ 255.224520][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 255.242483][ T31] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 255.256286][ T31] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 255.271641][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 255.278606][ T31] ? __pfx_lock_acquire+0x10/0x10 [ 255.287416][ T31] ? __pfx___might_resched+0x10/0x10 [ 255.293144][ T31] ? sbitmap_any_bit_set+0x155/0x190 [ 255.298573][ T31] ? blk_mq_hw_queue_need_run+0x14d/0x6d0 [ 255.307964][ T31] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 255.314323][ T31] ? blk_mq_run_hw_queue+0x32b/0x500 [ 255.319760][ T31] blk_mq_run_hw_queue+0x354/0x500 [ 255.325344][ T31] blk_mq_flush_plug_list+0x118e/0x1870 [ 255.331270][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 255.337316][ T31] ? blk_mq_submit_bio+0xfb9/0x25d0 [ 255.342825][ T31] ? blk_mq_submit_bio+0x494/0x25d0 [ 255.348220][ T31] __blk_flush_plug+0x420/0x500 [ 255.353239][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 255.359356][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 255.365035][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 255.380134][ T31] __submit_bio+0x54a/0x6a0 [ 255.384751][ T31] ? __pfx___submit_bio+0x10/0x10 [ 255.389822][ T31] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 255.409087][ T31] ? bio_associate_blkg_from_css+0x182/0xc70 [ 255.415607][ T31] ? __pfx___might_resched+0x10/0x10 [ 255.421092][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 255.427343][ T31] block_read_full_folio+0x9b3/0xae0 [ 255.432790][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 255.438224][ T31] ? __pfx_block_read_full_folio+0x10/0x10 [ 255.444236][ T31] filemap_read_folio+0x148/0x3b0 [ 255.449322][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 255.455120][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 255.470129][ T31] ? __filemap_get_folio+0x9a8/0xae0 [ 255.475533][ T31] ? __asan_memcpy+0x40/0x70 [ 255.490120][ T31] do_read_cache_folio+0x373/0x5b0 [ 255.495309][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 255.503218][ T31] read_part_sector+0xb3/0x260 [ 255.508063][ T31] adfspart_check_ICS+0xcb/0xa20 [ 255.513171][ T31] ? snprintf+0xda/0x120 [ 255.517473][ T31] ? vsnprintf+0x1148/0x1220 [ 255.522263][ T31] ? vsnprintf+0x18e/0x1220 [ 255.526833][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 255.532627][ T31] ? set_page_refcounted+0xa1/0x1e0 [ 255.537911][ T31] bdev_disk_changed+0x77f/0x14d0 [ 255.543063][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 255.548579][ T31] ? wait_on_inode+0xc1/0x230 [ 255.553352][ T31] ? __pfx_wait_on_inode+0x10/0x10 [ 255.558555][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 255.563983][ T31] blkdev_get_whole+0x2d2/0x450 [ 255.568898][ T31] bdev_open+0x2d4/0xc50 [ 255.573441][ T31] blkdev_open+0x38e/0x4e0 [ 255.577931][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 255.583122][ T31] do_dentry_open+0xdec/0x1960 [ 255.587959][ T31] ? vfs_open+0x31/0x370 [ 255.592454][ T31] vfs_open+0x3b/0x370 [ 255.596588][ T31] path_openat+0x2c81/0x3590 [ 255.601356][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 255.609168][ T31] ? __pfx_path_openat+0x10/0x10 [ 255.614437][ T31] do_filp_open+0x27f/0x4e0 [ 255.619003][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 255.624141][ T31] ? do_raw_spin_lock+0x14f/0x370 [ 255.629263][ T31] do_sys_openat2+0x13e/0x1d0 [ 255.634127][ T31] ? __might_fault+0xaa/0x120 [ 255.638857][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 255.644220][ T31] ? rcu_is_watching+0x15/0xb0 [ 255.649045][ T31] ? __rseq_handle_notify_resume+0x34d/0x14e0 [ 255.655330][ T31] __x64_sys_openat+0x247/0x2a0 [ 255.662671][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 255.668138][ T31] ? do_syscall_64+0x100/0x230 [ 255.673033][ T31] ? do_syscall_64+0xb6/0x230 [ 255.677773][ T31] do_syscall_64+0xf3/0x230 [ 255.682597][ T31] ? clear_bhb_loop+0x35/0x90 [ 255.687356][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.693466][ T31] RIP: 0033:0x7f38243169a4 [ 255.697898][ T31] RSP: 002b:00007fffc3c85af0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 255.706385][ T31] RAX: ffffffffffffffda RBX: 000055c9cd5d04b0 RCX: 00007f38243169a4 [ 255.714425][ T31] RDX: 00000000000a0800 RSI: 000055c9cd5b2a10 RDI: 00000000ffffff9c [ 255.722574][ T31] RBP: 000055c9cd5b2a10 R08: 0000000000000001 R09: 7fffffffffffffff [ 255.730760][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 255.738773][ T31] R13: 000055c9cd5b4ce0 R14: 0000000000000001 R15: 000055c9cd5a9910 [ 255.746892][ T31] [ 255.750032][ T31] INFO: task udevd:5841 blocked for more than 144 seconds. [ 255.758337][ T31] Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 255.772593][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 255.781479][ T31] task:udevd state:D stack:21592 pid:5841 tgid:5841 ppid:1 task_flags:0x400140 flags:0x00004002 [ 255.793494][ T31] Call Trace: [ 255.796805][ T31] [ 255.799746][ T31] __schedule+0x190e/0x4c90 [ 255.804354][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 255.810491][ T31] ? __pfx___schedule+0x10/0x10 [ 255.815381][ T31] ? __blk_flush_plug+0x449/0x500 [ 255.820466][ T31] ? __pfx_lock_release+0x10/0x10 [ 255.825534][ T31] ? __pfx___mod_timer+0x10/0x10 [ 255.830546][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 255.836919][ T31] ? schedule+0x90/0x320 [ 255.841316][ T31] schedule+0x14b/0x320 [ 255.845507][ T31] schedule_timeout+0x15a/0x290 [ 255.850621][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 255.856037][ T31] ? __pfx_process_timeout+0x10/0x10 [ 255.861446][ T31] ? prepare_to_wait_event+0x3bd/0x400 [ 255.866959][ T31] nbd_queue_rq+0x6dd/0xef0 [ 255.871590][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 255.876640][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 255.882791][ T31] blk_mq_dispatch_rq_list+0xad3/0x19d0 [ 255.888385][ T31] ? sbitmap_get+0x289/0x3f0 [ 255.893169][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 255.899179][ T31] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 255.905074][ T31] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 255.911568][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 255.918377][ T31] ? __pfx_lock_acquire+0x10/0x10 [ 255.923691][ T31] ? __pfx___might_resched+0x10/0x10 [ 255.929053][ T31] ? sbitmap_any_bit_set+0x155/0x190 [ 255.934478][ T31] ? blk_mq_hw_queue_need_run+0x14d/0x6d0 [ 255.940287][ T31] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 255.946314][ T31] ? blk_mq_run_hw_queue+0x32b/0x500 [ 255.951644][ T31] blk_mq_run_hw_queue+0x354/0x500 [ 255.956779][ T31] blk_mq_flush_plug_list+0x118e/0x1870 [ 255.962510][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 255.968461][ T31] ? blk_mq_submit_bio+0xfb9/0x25d0 [ 255.973839][ T31] ? blk_mq_submit_bio+0x494/0x25d0 [ 255.979109][ T31] __blk_flush_plug+0x420/0x500 [ 255.984056][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 255.990136][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 255.995572][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 256.001994][ T31] __submit_bio+0x54a/0x6a0 [ 256.006531][ T31] ? __pfx___submit_bio+0x10/0x10 [ 256.011679][ T31] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 256.017343][ T31] ? bio_associate_blkg_from_css+0x182/0xc70 [ 256.023404][ T31] ? __pfx___might_resched+0x10/0x10 [ 256.028731][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 256.034978][ T31] block_read_full_folio+0x9b3/0xae0 [ 256.040353][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 256.045761][ T31] ? __pfx_block_read_full_folio+0x10/0x10 [ 256.051716][ T31] filemap_read_folio+0x148/0x3b0 [ 256.056758][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 256.062306][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 256.067916][ T31] ? __filemap_get_folio+0x9a8/0xae0 [ 256.073340][ T31] ? __asan_memcpy+0x40/0x70 [ 256.077955][ T31] do_read_cache_folio+0x373/0x5b0 [ 256.083149][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 256.088677][ T31] read_part_sector+0xb3/0x260 [ 256.093525][ T31] adfspart_check_ICS+0xcb/0xa20 [ 256.098506][ T31] ? snprintf+0xda/0x120 [ 256.102897][ T31] ? vsnprintf+0x1148/0x1220 [ 256.107525][ T31] ? vsnprintf+0x18e/0x1220 [ 256.112089][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 256.117657][ T31] ? set_page_refcounted+0xa1/0x1e0 [ 256.122938][ T31] bdev_disk_changed+0x77f/0x14d0 [ 256.128023][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 256.133539][ T31] ? wait_on_inode+0xc1/0x230 [ 256.138241][ T31] ? __pfx_wait_on_inode+0x10/0x10 [ 256.143431][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 256.148688][ T31] blkdev_get_whole+0x2d2/0x450 [ 256.153596][ T31] bdev_open+0x2d4/0xc50 [ 256.157864][ T31] blkdev_open+0x38e/0x4e0 [ 256.165861][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.173871][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 256.178853][ T31] do_dentry_open+0xdec/0x1960 [ 256.183775][ T31] ? vfs_open+0x31/0x370 [ 256.188078][ T31] vfs_open+0x3b/0x370 [ 256.192336][ T31] path_openat+0x2c81/0x3590 [ 256.196985][ T31] ? __pfx_path_openat+0x10/0x10 [ 256.202048][ T31] do_filp_open+0x27f/0x4e0 [ 256.206586][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 256.211680][ T31] ? do_raw_spin_lock+0x14f/0x370 [ 256.216764][ T31] do_sys_openat2+0x13e/0x1d0 [ 256.221510][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 256.226770][ T31] __x64_sys_openat+0x247/0x2a0 [ 256.231688][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 256.237091][ T31] ? do_syscall_64+0x100/0x230 [ 256.241950][ T31] ? do_syscall_64+0xb6/0x230 [ 256.246667][ T31] do_syscall_64+0xf3/0x230 [ 256.251246][ T31] ? clear_bhb_loop+0x35/0x90 [ 256.255993][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.261962][ T31] RIP: 0033:0x7f38243169a4 [ 256.266489][ T31] RSP: 002b:00007fffc3c85af0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 256.275024][ T31] RAX: ffffffffffffffda RBX: 000055c9cd5c9e80 RCX: 00007f38243169a4 [ 256.283075][ T31] RDX: 00000000000a0800 RSI: 000055c9cd5c5a60 RDI: 00000000ffffff9c [ 256.291208][ T31] RBP: 000055c9cd5c5a60 R08: 0000000000000001 R09: 7fffffffffffffff [ 256.299213][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 256.307261][ T31] R13: 000055c9cd5ca320 R14: 0000000000000001 R15: 000055c9cd5a9910 [ 256.315356][ T31] [ 256.318404][ T31] INFO: task udevd:5844 blocked for more than 144 seconds. [ 256.325850][ T31] Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 256.333578][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 256.342348][ T31] task:udevd state:D stack:22544 pid:5844 tgid:5844 ppid:1 task_flags:0x400140 flags:0x00004002 [ 256.354389][ T31] Call Trace: [ 256.357681][ T31] [ 256.360684][ T31] __schedule+0x190e/0x4c90 [ 256.365277][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 256.371287][ T31] ? __pfx___schedule+0x10/0x10 [ 256.376175][ T31] ? __blk_flush_plug+0x449/0x500 [ 256.381270][ T31] ? __pfx_lock_release+0x10/0x10 [ 256.386333][ T31] ? __pfx___mod_timer+0x10/0x10 [ 256.391344][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 256.397716][ T31] ? schedule+0x90/0x320 [ 256.402132][ T31] schedule+0x14b/0x320 [ 256.406357][ T31] schedule_timeout+0x15a/0x290 [ 256.411302][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 256.416714][ T31] ? __pfx_process_timeout+0x10/0x10 [ 256.422091][ T31] ? prepare_to_wait_event+0x3bd/0x400 [ 256.427608][ T31] nbd_queue_rq+0x6dd/0xef0 [ 256.432229][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 256.437298][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 256.443461][ T31] blk_mq_dispatch_rq_list+0xad3/0x19d0 [ 256.449059][ T31] ? sbitmap_get+0x289/0x3f0 [ 256.453723][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 256.459758][ T31] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 256.465620][ T31] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 256.472063][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 256.478890][ T31] ? __pfx_lock_acquire+0x10/0x10 [ 256.484160][ T31] ? __pfx___might_resched+0x10/0x10 [ 256.489480][ T31] ? sbitmap_any_bit_set+0x155/0x190 [ 256.494842][ T31] ? blk_mq_hw_queue_need_run+0x14d/0x6d0 [ 256.500670][ T31] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 256.506704][ T31] ? blk_mq_run_hw_queue+0x32b/0x500 [ 256.512104][ T31] blk_mq_run_hw_queue+0x354/0x500 [ 256.517253][ T31] blk_mq_flush_plug_list+0x118e/0x1870 [ 256.522894][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 256.528818][ T31] ? blk_mq_submit_bio+0xfb9/0x25d0 [ 256.534129][ T31] ? blk_mq_submit_bio+0x494/0x25d0 [ 256.539356][ T31] __blk_flush_plug+0x420/0x500 [ 256.544339][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 256.550406][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 256.555830][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 256.562336][ T31] __submit_bio+0x54a/0x6a0 [ 256.566888][ T31] ? __pfx___submit_bio+0x10/0x10 [ 256.572013][ T31] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 256.577706][ T31] ? bio_associate_blkg_from_css+0x182/0xc70 [ 256.583749][ T31] ? __pfx___might_resched+0x10/0x10 [ 256.589061][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 256.595287][ T31] block_read_full_folio+0x9b3/0xae0 [ 256.600673][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 256.606115][ T31] ? __pfx_block_read_full_folio+0x10/0x10 [ 256.612019][ T31] filemap_read_folio+0x148/0x3b0 [ 256.617058][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 256.622713][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 256.628288][ T31] ? __filemap_get_folio+0x9a8/0xae0 [ 256.633668][ T31] ? __asan_memcpy+0x40/0x70 [ 256.638288][ T31] do_read_cache_folio+0x373/0x5b0 [ 256.643538][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 256.650755][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 256.656257][ T31] read_part_sector+0xb3/0x260 [ 256.661117][ T31] adfspart_check_ICS+0xcb/0xa20 [ 256.666111][ T31] ? snprintf+0xda/0x120 [ 256.670409][ T31] ? vsnprintf+0x1148/0x1220 [ 256.675024][ T31] ? vsnprintf+0x18e/0x1220 [ 256.679562][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 256.685203][ T31] ? set_page_refcounted+0xa1/0x1e0 [ 256.690509][ T31] bdev_disk_changed+0x77f/0x14d0 [ 256.695615][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 256.701159][ T31] ? wait_on_inode+0xc1/0x230 [ 256.705876][ T31] ? __pfx_wait_on_inode+0x10/0x10 [ 256.711043][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 256.716279][ T31] blkdev_get_whole+0x2d2/0x450 [ 256.721346][ T31] bdev_open+0x2d4/0xc50 [ 256.724167][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 256.725624][ T31] blkdev_open+0x38e/0x4e0 [ 256.736213][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 256.741313][ T31] do_dentry_open+0xdec/0x1960 [ 256.746129][ T31] ? vfs_open+0x31/0x370 [ 256.750491][ T31] vfs_open+0x3b/0x370 [ 256.754620][ T31] path_openat+0x2c81/0x3590 [ 256.759261][ T31] ? __pfx_path_openat+0x10/0x10 [ 256.764271][ T31] do_filp_open+0x27f/0x4e0 [ 256.768832][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 256.773933][ T31] ? do_raw_spin_lock+0x14f/0x370 [ 256.779026][ T31] do_sys_openat2+0x13e/0x1d0 [ 256.783775][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 256.789007][ T31] __x64_sys_openat+0x247/0x2a0 [ 256.793931][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 256.799329][ T31] ? do_syscall_64+0x100/0x230 [ 256.809279][ T31] ? do_syscall_64+0xb6/0x230 [ 256.814081][ T31] do_syscall_64+0xf3/0x230 [ 256.818722][ T31] ? clear_bhb_loop+0x35/0x90 [ 256.823492][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.829425][ T31] RIP: 0033:0x7f38243169a4 [ 256.833892][ T31] RSP: 002b:00007fffc3c85af0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 256.842489][ T31] RAX: ffffffffffffffda RBX: 000055c9cd5d04b0 RCX: 00007f38243169a4 [ 256.850562][ T31] RDX: 00000000000a0800 RSI: 000055c9cd5ba0a0 RDI: 00000000ffffff9c [ 256.858563][ T31] RBP: 000055c9cd5ba0a0 R08: 0000000000000001 R09: 7fffffffffffffff [ 256.866706][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 256.874766][ T31] R13: 000055c9cd5ba9e0 R14: 0000000000000001 R15: 000055c9cd5a9910 [ 256.882832][ T31] [ 256.885950][ T31] INFO: task udevd:5857 blocked for more than 145 seconds. [ 256.904945][ T31] Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 256.912715][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 256.921468][ T31] task:udevd state:D stack:22544 pid:5857 tgid:5857 ppid:1 task_flags:0x400140 flags:0x00004002 [ 256.933477][ T31] Call Trace: [ 256.936804][ T31] [ 256.939758][ T31] __schedule+0x190e/0x4c90 [ 256.944382][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 256.950431][ T31] ? __pfx___schedule+0x10/0x10 [ 256.955318][ T31] ? __blk_flush_plug+0x449/0x500 [ 256.960566][ T31] ? __pfx_lock_release+0x10/0x10 [ 256.965673][ T31] ? __pfx___mod_timer+0x10/0x10 [ 256.970703][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 256.977085][ T31] ? schedule+0x90/0x320 [ 256.983388][ T31] schedule+0x14b/0x320 [ 256.987583][ T31] schedule_timeout+0x15a/0x290 [ 256.992478][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 256.997882][ T31] ? __pfx_process_timeout+0x10/0x10 [ 257.005196][ T31] ? prepare_to_wait_event+0x3bd/0x400 [ 257.011464][ T31] nbd_queue_rq+0x6dd/0xef0 [ 257.016053][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 257.021284][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 257.027421][ T31] blk_mq_dispatch_rq_list+0xad3/0x19d0 [ 257.033093][ T31] ? sbitmap_get+0x289/0x3f0 [ 257.037734][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 257.043809][ T31] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 257.049657][ T31] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 257.056127][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 257.063030][ T31] ? __pfx_lock_acquire+0x10/0x10 [ 257.068085][ T31] ? __pfx___might_resched+0x10/0x10 [ 257.073473][ T31] ? sbitmap_any_bit_set+0x155/0x190 [ 257.078805][ T31] ? blk_mq_hw_queue_need_run+0x14d/0x6d0 [ 257.084615][ T31] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 257.090769][ T31] ? blk_mq_run_hw_queue+0x32b/0x500 [ 257.096097][ T31] blk_mq_run_hw_queue+0x354/0x500 [ 257.101308][ T31] blk_mq_flush_plug_list+0x118e/0x1870 [ 257.106920][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 257.112962][ T31] ? blk_mq_submit_bio+0xfb9/0x25d0 [ 257.118217][ T31] ? blk_mq_submit_bio+0x494/0x25d0 [ 257.123496][ T31] __blk_flush_plug+0x420/0x500 [ 257.128392][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 257.134440][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 257.139843][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 257.146300][ T31] __submit_bio+0x54a/0x6a0 [ 257.150895][ T31] ? __pfx___submit_bio+0x10/0x10 [ 257.155981][ T31] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 257.161708][ T31] ? bio_associate_blkg_from_css+0x182/0xc70 [ 257.167736][ T31] ? __pfx___might_resched+0x10/0x10 [ 257.173422][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 257.179651][ T31] block_read_full_folio+0x9b3/0xae0 [ 257.185046][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 257.190552][ T31] ? __pfx_block_read_full_folio+0x10/0x10 [ 257.196413][ T31] filemap_read_folio+0x148/0x3b0 [ 257.201507][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 257.207004][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 257.212621][ T31] ? __filemap_get_folio+0x9a8/0xae0 [ 257.217981][ T31] ? __asan_memcpy+0x40/0x70 [ 257.222666][ T31] do_read_cache_folio+0x373/0x5b0 [ 257.227831][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 257.233346][ T31] read_part_sector+0xb3/0x260 [ 257.238133][ T31] adfspart_check_ICS+0xcb/0xa20 [ 257.243170][ T31] ? snprintf+0xda/0x120 [ 257.247540][ T31] ? vsnprintf+0x1148/0x1220 [ 257.252189][ T31] ? vsnprintf+0x18e/0x1220 [ 257.256729][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 257.262379][ T31] ? set_page_refcounted+0xa1/0x1e0 [ 257.267645][ T31] bdev_disk_changed+0x77f/0x14d0 [ 257.272803][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 257.278289][ T31] ? wait_on_inode+0xc1/0x230 [ 257.283215][ T31] ? __pfx_wait_on_inode+0x10/0x10 [ 257.288383][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 257.293680][ T31] blkdev_get_whole+0x2d2/0x450 [ 257.298558][ T31] bdev_open+0x2d4/0xc50 [ 257.302921][ T31] blkdev_open+0x38e/0x4e0 [ 257.307396][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 257.312411][ T31] do_dentry_open+0xdec/0x1960 [ 257.317221][ T31] ? vfs_open+0x31/0x370 [ 257.321567][ T31] vfs_open+0x3b/0x370 [ 257.325690][ T31] path_openat+0x2c81/0x3590 [ 257.330415][ T31] ? __pfx_path_openat+0x10/0x10 [ 257.335417][ T31] do_filp_open+0x27f/0x4e0 [ 257.339971][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 257.345070][ T31] ? do_raw_spin_lock+0x14f/0x370 [ 257.350220][ T31] do_sys_openat2+0x13e/0x1d0 [ 257.354943][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 257.360321][ T31] __x64_sys_openat+0x247/0x2a0 [ 257.365304][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 257.370876][ T31] ? do_syscall_64+0x100/0x230 [ 257.375726][ T31] ? do_syscall_64+0xb6/0x230 [ 257.380492][ T31] do_syscall_64+0xf3/0x230 [ 257.385013][ T31] ? clear_bhb_loop+0x35/0x90 [ 257.389707][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.395777][ T31] RIP: 0033:0x7f38243169a4 [ 257.400289][ T31] RSP: 002b:00007fffc3c85af0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 257.408754][ T31] RAX: ffffffffffffffda RBX: 000055c9cd5d04b0 RCX: 00007f38243169a4 [ 257.416783][ T31] RDX: 00000000000a0800 RSI: 000055c9cd5aa2b0 RDI: 00000000ffffff9c [ 257.424821][ T31] RBP: 000055c9cd5aa2b0 R08: 0000000000000001 R09: 7fffffffffffffff [ 257.432969][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 257.441078][ T31] R13: 000055c9cd5b4ce0 R14: 0000000000000001 R15: 000055c9cd5a9910 [ 257.449123][ T31] [ 257.452320][ T31] INFO: task udevd:6700 blocked for more than 145 seconds. [ 257.459567][ T31] Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 257.467350][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 257.476114][ T31] task:udevd state:D stack:22464 pid:6700 tgid:6700 ppid:1 task_flags:0x400140 flags:0x00004002 [ 257.488216][ T31] Call Trace: [ 257.491663][ T31] [ 257.494647][ T31] __schedule+0x190e/0x4c90 [ 257.499195][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 257.505320][ T31] ? __pfx___schedule+0x10/0x10 [ 257.510245][ T31] ? __blk_flush_plug+0x449/0x500 [ 257.515309][ T31] ? __pfx_lock_release+0x10/0x10 [ 257.520473][ T31] ? __pfx___mod_timer+0x10/0x10 [ 257.525451][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 257.531855][ T31] ? schedule+0x90/0x320 [ 257.536115][ T31] schedule+0x14b/0x320 [ 257.540348][ T31] schedule_timeout+0x15a/0x290 [ 257.545228][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 257.550766][ T31] ? __pfx_process_timeout+0x10/0x10 [ 257.556119][ T31] ? prepare_to_wait_event+0x3bd/0x400 [ 257.561749][ T31] nbd_queue_rq+0x6dd/0xef0 [ 257.566317][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 257.571433][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 257.577568][ T31] blk_mq_dispatch_rq_list+0xad3/0x19d0 [ 257.583258][ T31] ? sbitmap_get+0x289/0x3f0 [ 257.587901][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 257.594010][ T31] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 257.599840][ T31] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 257.606347][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 257.613251][ T31] ? __pfx_lock_acquire+0x10/0x10 [ 257.618308][ T31] ? __pfx___might_resched+0x10/0x10 [ 257.623654][ T31] ? sbitmap_any_bit_set+0x155/0x190 [ 257.628962][ T31] ? blk_mq_hw_queue_need_run+0x14d/0x6d0 [ 257.634753][ T31] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 257.640882][ T31] ? blk_mq_run_hw_queue+0x32b/0x500 [ 257.646211][ T31] blk_mq_run_hw_queue+0x354/0x500 [ 257.651422][ T31] blk_mq_flush_plug_list+0x118e/0x1870 [ 257.657027][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 257.662987][ T31] ? blk_mq_submit_bio+0xfb9/0x25d0 [ 257.668214][ T31] ? blk_mq_submit_bio+0x494/0x25d0 [ 257.673501][ T31] __blk_flush_plug+0x420/0x500 [ 257.678384][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 257.684481][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 257.691639][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 257.697061][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 257.703480][ T31] __submit_bio+0x54a/0x6a0 [ 257.708002][ T31] ? __pfx___submit_bio+0x10/0x10 [ 257.713126][ T31] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 257.718812][ T31] ? bio_associate_blkg_from_css+0x182/0xc70 [ 257.724936][ T31] ? __pfx___might_resched+0x10/0x10 [ 257.730324][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 257.736537][ T31] block_read_full_folio+0x9b3/0xae0 [ 257.741942][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 257.747355][ T31] ? __pfx_block_read_full_folio+0x10/0x10 [ 257.753240][ T31] filemap_read_folio+0x148/0x3b0 [ 257.758291][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 257.763989][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 257.769585][ T31] ? __filemap_get_folio+0x9a8/0xae0 [ 257.774968][ T31] ? __asan_memcpy+0x40/0x70 [ 257.779579][ T31] do_read_cache_folio+0x373/0x5b0 [ 257.784745][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 257.790287][ T31] read_part_sector+0xb3/0x260 [ 257.795093][ T31] adfspart_check_ICS+0xcb/0xa20 [ 257.800097][ T31] ? snprintf+0xda/0x120 [ 257.804371][ T31] ? vsnprintf+0x1148/0x1220 [ 257.808978][ T31] ? vsnprintf+0x18e/0x1220 [ 257.813539][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 257.819130][ T31] ? set_page_refcounted+0xa1/0x1e0 [ 257.824427][ T31] bdev_disk_changed+0x77f/0x14d0 [ 257.829525][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 257.835156][ T31] ? wait_on_inode+0xc1/0x230 [ 257.839884][ T31] ? __pfx_wait_on_inode+0x10/0x10 [ 257.850107][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 257.855363][ T31] blkdev_get_whole+0x2d2/0x450 [ 257.860757][ T31] bdev_open+0x2d4/0xc50 [ 257.865060][ T31] blkdev_open+0x38e/0x4e0 [ 257.869672][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 257.874714][ T31] do_dentry_open+0xdec/0x1960 [ 257.879538][ T31] ? vfs_open+0x31/0x370 [ 257.883866][ T31] vfs_open+0x3b/0x370 [ 257.887960][ T31] path_openat+0x2c81/0x3590 [ 257.892614][ T31] ? __pfx_path_openat+0x10/0x10 [ 257.897580][ T31] do_filp_open+0x27f/0x4e0 [ 257.902161][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 257.907215][ T31] ? do_raw_spin_lock+0x14f/0x370 [ 257.912322][ T31] do_sys_openat2+0x13e/0x1d0 [ 257.917038][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 257.922431][ T31] __x64_sys_openat+0x247/0x2a0 [ 257.927336][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 257.932848][ T31] ? do_syscall_64+0x100/0x230 [ 257.937686][ T31] ? do_syscall_64+0xb6/0x230 [ 257.942538][ T31] do_syscall_64+0xf3/0x230 [ 257.947083][ T31] ? clear_bhb_loop+0x35/0x90 [ 257.951831][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.957757][ T31] RIP: 0033:0x7f38243169a4 [ 257.962256][ T31] RSP: 002b:00007fffc3c85af0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 257.970728][ T31] RAX: ffffffffffffffda RBX: 000055c9cd656fa0 RCX: 00007f38243169a4 [ 257.978739][ T31] RDX: 00000000000a0800 RSI: 000055c9cd5b6e00 RDI: 00000000ffffff9c [ 257.986789][ T31] RBP: 000055c9cd5b6e00 R08: 0000000000000001 R09: 7fffffffffffffff [ 257.994822][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 258.003031][ T31] R13: 000055c9cd5ca320 R14: 0000000000000001 R15: 000055c9cd5a9910 [ 258.011121][ T31] [ 258.014261][ T31] INFO: task udevd:6743 blocked for more than 146 seconds. [ 258.021584][ T31] Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 258.029237][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 258.037950][ T31] task:udevd state:D stack:22544 pid:6743 tgid:6743 ppid:1 task_flags:0x400040 flags:0x00004002 [ 258.049972][ T31] Call Trace: [ 258.053430][ T31] [ 258.056394][ T31] __schedule+0x190e/0x4c90 [ 258.060971][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 258.066984][ T31] ? __pfx___schedule+0x10/0x10 [ 258.071918][ T31] ? __blk_flush_plug+0x449/0x500 [ 258.076985][ T31] ? __pfx_lock_release+0x10/0x10 [ 258.082112][ T31] ? __pfx___mod_timer+0x10/0x10 [ 258.087089][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 258.093547][ T31] ? schedule+0x90/0x320 [ 258.097826][ T31] schedule+0x14b/0x320 [ 258.102043][ T31] schedule_timeout+0x15a/0x290 [ 258.106908][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 258.112463][ T31] ? __pfx_process_timeout+0x10/0x10 [ 258.117790][ T31] ? prepare_to_wait_event+0x3bd/0x400 [ 258.123314][ T31] nbd_queue_rq+0x6dd/0xef0 [ 258.127861][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 258.132978][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 258.139092][ T31] blk_mq_dispatch_rq_list+0xad3/0x19d0 [ 258.144725][ T31] ? sbitmap_get+0x289/0x3f0 [ 258.149362][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 258.155418][ T31] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 258.161343][ T31] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 258.167740][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 258.174594][ T31] ? __pfx_lock_acquire+0x10/0x10 [ 258.179829][ T31] ? __pfx___might_resched+0x10/0x10 [ 258.185232][ T31] ? sbitmap_any_bit_set+0x155/0x190 [ 258.190611][ T31] ? blk_mq_hw_queue_need_run+0x14d/0x6d0 [ 258.196401][ T31] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 258.202512][ T31] ? blk_mq_run_hw_queue+0x32b/0x500 [ 258.207842][ T31] blk_mq_run_hw_queue+0x354/0x500 [ 258.213044][ T31] blk_mq_flush_plug_list+0x118e/0x1870 [ 258.218690][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 258.224643][ T31] ? blk_mq_submit_bio+0xfb9/0x25d0 [ 258.229879][ T31] ? blk_mq_submit_bio+0x494/0x25d0 [ 258.235145][ T31] __blk_flush_plug+0x420/0x500 [ 258.240023][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 258.246092][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 258.251591][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 258.257973][ T31] __submit_bio+0x54a/0x6a0 [ 258.262538][ T31] ? __pfx___submit_bio+0x10/0x10 [ 258.267589][ T31] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 258.273404][ T31] ? bio_associate_blkg_from_css+0x182/0xc70 [ 258.279479][ T31] ? __pfx___might_resched+0x10/0x10 [ 258.284820][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 258.291113][ T31] block_read_full_folio+0x9b3/0xae0 [ 258.296474][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 258.301891][ T31] ? __pfx_block_read_full_folio+0x10/0x10 [ 258.307768][ T31] filemap_read_folio+0x148/0x3b0 [ 258.312902][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 258.318436][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 258.324112][ T31] ? __filemap_get_folio+0x9a8/0xae0 [ 258.329432][ T31] ? __asan_memcpy+0x40/0x70 [ 258.334105][ T31] do_read_cache_folio+0x373/0x5b0 [ 258.339239][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 258.344760][ T31] read_part_sector+0xb3/0x260 [ 258.349557][ T31] adfspart_check_ICS+0xcb/0xa20 [ 258.354558][ T31] ? snprintf+0xda/0x120 [ 258.358814][ T31] ? vsnprintf+0x1148/0x1220 [ 258.363471][ T31] ? vsnprintf+0x18e/0x1220 [ 258.367985][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 258.373648][ T31] ? set_page_refcounted+0xa1/0x1e0 [ 258.378896][ T31] bdev_disk_changed+0x77f/0x14d0 [ 258.384066][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 258.389543][ T31] ? wait_on_inode+0xc1/0x230 [ 258.394266][ T31] ? __pfx_wait_on_inode+0x10/0x10 [ 258.399395][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 258.406697][ T31] blkdev_get_whole+0x2d2/0x450 [ 258.411671][ T31] bdev_open+0x2d4/0xc50 [ 258.415956][ T31] blkdev_open+0x38e/0x4e0 [ 258.420447][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 258.425430][ T31] do_dentry_open+0xdec/0x1960 [ 258.430299][ T31] ? vfs_open+0x31/0x370 [ 258.434584][ T31] vfs_open+0x3b/0x370 [ 258.438806][ T31] path_openat+0x2c81/0x3590 [ 258.443545][ T31] ? __pfx_path_openat+0x10/0x10 [ 258.448545][ T31] do_filp_open+0x27f/0x4e0 [ 258.453171][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 258.458232][ T31] ? do_raw_spin_lock+0x14f/0x370 [ 258.463372][ T31] do_sys_openat2+0x13e/0x1d0 [ 258.468080][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 258.473389][ T31] __x64_sys_openat+0x247/0x2a0 [ 258.478290][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 258.483762][ T31] ? exc_page_fault+0x590/0x8b0 [ 258.488654][ T31] ? do_syscall_64+0xb6/0x230 [ 258.493551][ T31] do_syscall_64+0xf3/0x230 [ 258.498107][ T31] ? clear_bhb_loop+0x35/0x90 [ 258.502841][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.508787][ T31] RIP: 0033:0x7f38243169a4 [ 258.513352][ T31] RSP: 002b:00007fffc3c85af0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 258.521836][ T31] RAX: ffffffffffffffda RBX: 000055c9cd5b0e30 RCX: 00007f38243169a4 [ 258.529857][ T31] RDX: 00000000000a0800 RSI: 000055c9cd5e8f00 RDI: 00000000ffffff9c [ 258.537922][ T31] RBP: 000055c9cd5e8f00 R08: 00000000ffffffff R09: 7fffffffffffffff [ 258.545960][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 258.554033][ T31] R13: 000055c9cd5b0a00 R14: 00007fffc3c85b9c R15: 000055c9cd5a9910 [ 258.562126][ T31] [ 258.565234][ T31] [ 258.565234][ T31] Showing all locks held in the system: [ 258.583190][ T31] 4 locks held by kworker/1:0/26: [ 258.588494][ T31] #0: ffff8880b873e998 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 258.598675][ T31] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 258.610331][ T31] #2: ffff8880b872a398 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x24a/0x10e0 [ 258.619478][ T31] #3: ffffffff9a874ec0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x17f/0x580 [ 258.629909][ T31] 1 lock held by khungtaskd/31: [ 258.634807][ T31] #0: ffffffff8eb393e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 258.644781][ T31] 2 locks held by getty/5592: [ 258.649557][ T31] #0: ffff8880355da0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 258.659425][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 [ 258.669606][ T31] 3 locks held by udevd/5836: [ 258.674329][ T31] #0: ffff888025acb4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 258.683639][ T31] #1: ffff888141f6dd90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 258.693255][ T31] #2: ffff888025bde178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 258.702252][ T31] 3 locks held by udevd/5841: [ 258.706935][ T31] #0: ffff888025b224c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 258.716233][ T31] #1: ffff888025319610 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 258.725905][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 258.733410][ T31] #2: ffff888025c37178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 258.742634][ T31] 3 locks held by udevd/5844: [ 258.747502][ T31] #0: ffff888025acf4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 258.756919][ T31] #1: ffff888141f89290 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 258.766759][ T31] #2: ffff888025c151f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 258.775881][ T31] 3 locks held by udevd/5857: [ 258.780642][ T31] #0: ffff8880255464c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 258.790491][ T31] #1: ffff888020b45c90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 258.800475][ T31] #2: ffff888025b7e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 258.809492][ T31] 3 locks held by udevd/6398: [ 258.814414][ T31] #0: ffff888025ba74c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 258.823757][ T31] #1: ffff888025cc1490 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 258.833340][ T31] #2: ffff888025da0178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 258.842407][ T31] 3 locks held by udevd/6700: [ 258.847091][ T31] #0: ffff888025b264c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 258.856421][ T31] #1: ffff888025319d10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 258.865989][ T31] #2: ffff888025d17178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 258.874987][ T31] 3 locks held by udevd/6743: [ 258.879689][ T31] #0: ffff888025ba34c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 258.895804][ T31] #1: ffff888141f89a10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 258.905424][ T31] #2: ffff888025cae178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 258.914387][ T31] 3 locks held by udevd/6747: [ 258.919072][ T31] #0: ffff888025c724c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 258.928415][ T31] #1: ffff888143326210 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 258.938011][ T31] #2: ffff888025d47178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 258.946966][ T31] 3 locks held by udevd/6946: [ 258.951796][ T31] #0: ffff888025d834c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 258.961167][ T31] #1: ffff888025cc1b90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 258.970824][ T31] #2: ffff888025e70178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 258.979789][ T31] 3 locks held by udevd/7080: [ 258.984554][ T31] #0: ffff888025c764c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 258.993889][ T31] #1: ffff888143326990 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 259.003565][ T31] #2: ffff888025e17178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 259.012580][ T31] 3 locks held by udevd/7464: [ 259.017281][ T31] #0: ffff888025d874c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 259.026662][ T31] #1: ffff888025ce4090 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 259.036255][ T31] #2: ffff888025ea0178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xcf/0xef0 [ 259.045386][ T31] 4 locks held by kworker/u8:12/7652: [ 259.050832][ T31] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 259.061894][ T31] #1: ffffc9000b4dfc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 259.072565][ T31] #2: ffffffff8feca250 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60 [ 259.082145][ T31] #3: ffffffff8eb3e8b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x820 [ 259.093217][ T31] [ 259.095622][ T31] ============================================= [ 259.095622][ T31] [ 259.104135][ T31] NMI backtrace for cpu 1 [ 259.104150][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 259.104172][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 259.104183][ T31] Call Trace: [ 259.104191][ T31] [ 259.104200][ T31] dump_stack_lvl+0x241/0x360 [ 259.104227][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.104248][ T31] ? __pfx__printk+0x10/0x10 [ 259.104276][ T31] nmi_cpu_backtrace+0x49c/0x4d0 [ 259.104301][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 259.104319][ T31] ? _printk+0xd5/0x120 [ 259.104335][ T31] ? __pfx__printk+0x10/0x10 [ 259.104363][ T31] ? __wake_up_klogd+0xcc/0x110 [ 259.104391][ T31] ? __pfx__printk+0x10/0x10 [ 259.104411][ T31] ? __rcu_read_unlock+0xa1/0x110 [ 259.104440][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 259.104467][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 259.104491][ T31] watchdog+0x1058/0x10a0 [ 259.104523][ T31] ? watchdog+0x1ea/0x10a0 [ 259.104556][ T31] ? __pfx_watchdog+0x10/0x10 [ 259.104584][ T31] kthread+0x7a9/0x920 [ 259.104599][ T31] ? __pfx_kthread+0x10/0x10 [ 259.104626][ T31] ? __pfx_watchdog+0x10/0x10 [ 259.104655][ T31] ? __pfx_kthread+0x10/0x10 [ 259.104670][ T31] ? __pfx_kthread+0x10/0x10 [ 259.104691][ T31] ? __pfx_kthread+0x10/0x10 [ 259.104708][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 259.104728][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 259.104752][ T31] ? __pfx_kthread+0x10/0x10 [ 259.104772][ T31] ret_from_fork+0x4b/0x80 [ 259.104798][ T31] ? __pfx_kthread+0x10/0x10 [ 259.104817][ T31] ret_from_fork_asm+0x1a/0x30 [ 259.104855][ T31] [ 259.104865][ T31] Sending NMI from CPU 1 to CPUs 0: [ 259.274958][ C0] NMI backtrace for cpu 0 [ 259.274975][ C0] CPU: 0 UID: 0 PID: 5825 Comm: syz-executor Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 259.274994][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 259.275005][ C0] RIP: 0010:__lock_acquire+0x6e/0x2100 [ 259.275036][ C0] Code: c0 0f 85 f8 16 00 00 45 31 f6 83 3d 0b 5c a0 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 80 3c 30 00 <74> 12 4c 89 ff e8 48 55 8c 00 48 be 00 00 00 00 00 fc ff df 49 8b [ 259.275051][ C0] RSP: 0018:ffffc90003db7930 EFLAGS: 00000046 [ 259.275066][ C0] RAX: 1ffffffff3519259 RBX: 0000000000000000 RCX: 0000000000000000 [ 259.275077][ C0] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: ffffffff9a8c92c8 [ 259.275088][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001 [ 259.275098][ C0] R10: dffffc0000000000 R11: fffffbfff207a24f R12: ffff888032263c00 [ 259.275110][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff9a8c92c8 [ 259.275121][ C0] FS: 000055558db99500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 259.275135][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.275146][ C0] CR2: 00007f8a6d379178 CR3: 0000000072c0c000 CR4: 00000000003526f0 [ 259.275161][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 259.275171][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 259.275181][ C0] Call Trace: [ 259.275187][ C0] [ 259.275194][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 259.275211][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 259.275236][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 259.275259][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 259.275280][ C0] ? nmi_handle+0x14f/0x5a0 [ 259.275304][ C0] ? nmi_handle+0x2a/0x5a0 [ 259.275329][ C0] ? __lock_acquire+0x6e/0x2100 [ 259.275353][ C0] ? default_do_nmi+0x63/0x160 [ 259.275380][ C0] ? exc_nmi+0x123/0x1f0 [ 259.275404][ C0] ? end_repeat_nmi+0xf/0x53 [ 259.275432][ C0] ? __lock_acquire+0x6e/0x2100 [ 259.275457][ C0] ? __lock_acquire+0x6e/0x2100 [ 259.275482][ C0] ? __lock_acquire+0x6e/0x2100 [ 259.275506][ C0] [ 259.275511][ C0] [ 259.275517][ C0] ? finish_task_switch+0x1e5/0x870 [ 259.275536][ C0] ? finish_task_switch+0x2cf/0x870 [ 259.275555][ C0] lock_acquire+0x1ed/0x550 [ 259.275578][ C0] ? debug_object_free+0xc3/0x460 [ 259.275611][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 259.275637][ C0] ? __pfx___schedule+0x10/0x10 [ 259.275660][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 259.275677][ C0] ? debug_object_free+0xc3/0x460 [ 259.275700][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 259.275721][ C0] debug_object_free+0xc3/0x460 [ 259.275745][ C0] ? __pfx_debug_object_free+0x10/0x10 [ 259.275769][ C0] ? do_nanosleep+0x80/0x600 [ 259.275793][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 259.275818][ C0] ? __asan_memset+0x23/0x50 [ 259.275835][ C0] ? __hrtimer_init+0x170/0x250 [ 259.275853][ C0] hrtimer_nanosleep+0x350/0x410 [ 259.275870][ C0] ? __might_fault+0xc6/0x120 [ 259.275886][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 259.275903][ C0] ? _copy_from_user+0x95/0xb0 [ 259.275926][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 259.275945][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 259.275973][ C0] __se_sys_clock_nanosleep+0x32b/0x3c0 [ 259.276000][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 259.276027][ C0] ? do_syscall_64+0x100/0x230 [ 259.276049][ C0] ? do_syscall_64+0xb6/0x230 [ 259.276088][ C0] do_syscall_64+0xf3/0x230 [ 259.276109][ C0] ? clear_bhb_loop+0x35/0x90 [ 259.276134][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.276157][ C0] RIP: 0033:0x7fd0a89bf9e3 [ 259.276171][ C0] Code: 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 5e db 1b 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 259.276185][ C0] RSP: 002b:00007ffdeed08e68 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 259.276202][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd0a89bf9e3 [ 259.276213][ C0] RDX: 00007ffdeed08e80 RSI: 0000000000000000 RDI: 0000000000000000 [ 259.276223][ C0] RBP: 0000000000000000 R08: 00000000366bf7ee R09: 7fffffffffffffff [ 259.276234][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffdeed092d0 [ 259.276245][ C0] R13: 0000000000000004 R14: 00007ffdeed08ebc R15: 00007ffdeed08f50 [ 259.276262][ C0] [ 259.277093][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 259.711143][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 259.721650][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 259.731713][ T31] Call Trace: [ 259.735007][ T31] [ 259.737943][ T31] dump_stack_lvl+0x241/0x360 [ 259.742679][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.747916][ T31] ? __pfx__printk+0x10/0x10 [ 259.752529][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 259.758552][ T31] ? vscnprintf+0x5d/0x90 [ 259.762896][ T31] panic+0x349/0x880 [ 259.766800][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 259.772963][ T31] ? __pfx_panic+0x10/0x10 [ 259.777382][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 259.782768][ T31] ? __irq_work_queue_local+0x137/0x410 [ 259.788333][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 259.793724][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 259.799884][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 259.806043][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 259.812205][ T31] watchdog+0x1097/0x10a0 [ 259.816553][ T31] ? watchdog+0x1ea/0x10a0 [ 259.820998][ T31] ? __pfx_watchdog+0x10/0x10 [ 259.825688][ T31] kthread+0x7a9/0x920 [ 259.829760][ T31] ? __pfx_kthread+0x10/0x10 [ 259.834361][ T31] ? __pfx_watchdog+0x10/0x10 [ 259.839049][ T31] ? __pfx_kthread+0x10/0x10 [ 259.843644][ T31] ? __pfx_kthread+0x10/0x10 [ 259.848256][ T31] ? __pfx_kthread+0x10/0x10 [ 259.852851][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 259.858056][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 259.863264][ T31] ? __pfx_kthread+0x10/0x10 [ 259.867863][ T31] ret_from_fork+0x4b/0x80 [ 259.872298][ T31] ? __pfx_kthread+0x10/0x10 [ 259.876894][ T31] ret_from_fork_asm+0x1a/0x30 [ 259.881695][ T31] [ 259.885065][ T31] Kernel Offset: disabled [ 259.889397][ T31] Rebooting in 86400 seconds..