last executing test programs: 20.464396268s ago: executing program 4 (id=3077): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r3, 0x4, 0x7, 0x6, 0xff, 0x34, @rand_addr=' \x01\x00', @local, 0x10, 0x20, 0x10000, 0xe60}}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xe0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="410309fc1116480401020200c52cf7c25975e005b02f080606892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="90000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="010102000000000008000500", @ANYRES32=r7, @ANYBLOB="0a000200aaaaaaaaaa4100005c00128009000100766c616e000000004c00028006000100220000000600050088a800000c00020005000000000000000600050088a800001000"], 0x90}, 0x1, 0xba01}, 0x810) 19.806924437s ago: executing program 4 (id=3085): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x1, @local}}, 0x80, 0x0}, 0x4004091) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000040)=0x4, 0x4) sendmmsg$inet(r3, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="27f9de75ae16a4cf8319512231178b1a83a8c8fcf0b1be370180c58e40e4dc6e0f200df180078e8555ed61e962de0ebeaf4841e966f29651e7d6c64e6f0d841a9b05a541c855253e39bb787e5e3300f7c78ee06483b4ee4c32817461e31a19eac4c88841ba5632d9b4269bf23482d70326a381337f48cf24f6180bdfa9e9d10000", 0x81}], 0x1}}], 0x2, 0x20000000) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) sendmsg$tipc(r5, &(0x7f0000000080)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x42, 0x200000}, 0x4}}, 0x10, 0x0}, 0x0) r6 = socket(0x18, 0x1, 0x1) getsockopt$inet_int(r6, 0x111, 0x32, 0x0, &(0x7f0000000380)) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x9, 0x3, 0x368, 0x0, 0xffffffff, 0xffffffff, 0x168, 0xffffffff, 0x298, 0xffffffff, 0xffffffff, 0x298, 0xffffffff, 0x3, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@frag={{0x30}, {[0x8001, 0x200], 0x9, 0x30, 0x3}}, @common=@mh={{0x28}, {"698d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x7, 0x2c, 0x9, 'snmp\x00', 'syz0\x00', {0x1}}}}, {{@ipv6={@empty, @empty, [0xff, 0x0, 0x0, 0xffffff00], [0x0, 0xff000000, 0xffffffff, 0xff000000], 'pim6reg0\x00', 'virt_wifi0\x00', {}, {0xff}, 0x3c, 0x2, 0x4, 0x2}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@srh={{0x30}, {0x87, 0xc, 0x4, 0x0, 0x0, 0x823, 0x40}}, @common=@ah={{0x30}, {[0x4d5, 0x4d5], 0xfff, 0x4}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001500192340834b80040d8c560a067fbc45ff810540010000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x104, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x84}, {@in=@local, 0x4d4, 0x3c}, @in6=@empty, {0x0, 0x192, 0x6, 0xffff, 0x82520, 0x2, 0xffbffffffffffff8, 0xe2e237c}, {0xffffffffffffffff, 0x0, 0x1f, 0xffffffffffffffde}, {0x2, 0xfffffffc, 0x40}, 0x70bd28, 0x3504, 0x2, 0x1}, [@coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x25}}]}, 0x104}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 19.477902368s ago: executing program 4 (id=3090): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0x2b, 0x801, 0x0) listen(r1, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8202, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480), 0x0) socket(0x25, 0x3, 0x5c) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg0\x00'}) sendmsg$nl_route(r0, 0x0, 0x4000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x5eb, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r4) 19.124682331s ago: executing program 2 (id=3094): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="300000000000000084000000", @ANYRESOCT=r0], 0x30}], 0x1, 0x0) 18.897841443s ago: executing program 2 (id=3096): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0x2b, 0x801, 0x0) listen(r1, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8202, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480), 0x0) socket(0x25, 0x3, 0x5c) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg0\x00'}) sendmsg$nl_route(r0, 0x0, 0x4000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x5eb, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r4) 18.768695843s ago: executing program 0 (id=3097): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="e700"}) 18.60230559s ago: executing program 0 (id=3098): r0 = socket(0xf, 0x802, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r3, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="38120000", @ANYRES16=r3, @ANYBLOB="000229bd3db6968045000300000000000000", @ANYRES32=r4, @ANYBLOB="c8002a001001930301ae010481036cc80105bc8301ecc82d1a00031300000000000000010700f900120000000800050000000882414206eb04000000ffffffffffff0d0000000802110000007f00000006000000030508021100000108000000040802110000000100000005ffffffffffff080000008c10be091a2eb22562b0d1e337f2e008673b04060402070002002d1a0100020600000000000000010005000c000000010012000000202d1a00081600000000000001000e0005000a000000080409000000fa0600f900b46000000600fb00ff0100007200fa00a124d8b635942e46386b1b9a8af7ae9d4eb6c86cf7879f655274fcbac702541e6710b0bf1b64e33b249377c42f2cacea636797af87baa281fc5be729c35fddab2a3b9e5bc851dde6290f6f67ba5b605918e2936b2b37d34ec99a6e9fea188bbb70d3f95aeeb8f3505be5ee8b3ebe00000600fb000f0000003300fa007e10cf471875082443becbfb9d3a1a2f7255f33a68c83d54b64e9e26cb5cb7cc14995f9be86b13e706009b50fbe59c000410fa004b37330c9a17589db604b727d5272db8cd11c8efc859f894108286f5678cb405b429e3d44cc050e4e7fd247faab487ba01fbf76aa7fe0ddfdb1db3dba5a53ea13718d10604374295ac2f254feac0917247805acc381696eec9c8b266fb52c1aefe3cf4b3b7ebe17daf6c3951ca18e1b04a9d8d3246fbb40e7f183ea40d4484b95573ccacb82f484744cbe6c404ecabab814ce2ac79faea4b2b2ac196f38518c636a77ed1017de63a9ea7911d30f1e15e8012309f5a503bbf9f86545e8384d1f3868213bdfa823bc1c3c6e573498661a48bcb054a5c866d9e4da3ba8d829c825b6f93ca8fe0d8f9aec39ccae61fb9860b4bff3035beb5d9cd415179bfb35c946f909ce17776ac5a63d9059bae84f83b0336f889d46700243252721e68c7ae46df89316b6e5808d98d4547d1e3321e17d5dbab52b8d0408c7149a79bda26597c11553acfcfaffb237ad65c89ac5b5036a942223acf85a53ff867843422407e00109af40615f377d33330983703d7624b1de409db7038d40c2dbf49beb0ebe457d821a57374392398b055d748aa93de2efcd4817ca3b4f1e4d1f8a38047f6bbfd62eaba56885b85fd56081c0f2f37185ecefccad5c5096c9880c495562f6be6b94e5508b296f2cf4cf686a2da72c59434900fea664ee28dfafff1f073cfd6b11e112b466e8646b86d9661ad8165b7be3add23c071b1b8f04760681ffd24fe024cf23683d27efe582379b75adc352f8655ef5e498f32d35b9be5a297222888332320ceacc809433e44621182f02e380ec7bce7ad75293953a614a875ba26d76d87df122f61a057f60ce92915bb3439c141e7243c40d06a00f60916b2b14612166182e0752fd5e6de43f6fc1eab0a496e37ce2162e4cf6eeb0be4b6b78e9e908b680047c7de273088b9f32be4c96965729e58d319101b72460274cd08b3ed50d1806514a58881daf78690001ef36b07872d44e244868f9ff274c71ebb830b82f8c65c0bf07e8cb0ebea47edfde721474d9704ebe33af892a6ddcc0ec446e7b74a4d8a03db971f7e2bd53fcbd7b478bc825c9f5d0df3e881310498c1234374eacf857084a291722e9f2ae507fa3c2d15df61cd0567222dcf3a18c3000cb85fb9007adc7271068ab50e1d5eac870b6caeead8afecd3f6258fb1dc9106cb0f73caba69364fb23d5601320269b0735bdadf5e78d3df42641f5630c34d3aa2d46e90ce31d18405b4b77cc463d00eb160363e4d19977a6a4a96d60b1095681a8772b98f4dc1008cd03cd74879512b879bc1bca76043ab9980af68bdfa029ac6beefc3e284f493a2e8c01696c0d9d156b50e3d867bc3884f740e261aefee14354033ea0898c839e95a79067225a55f55be5a6dcd16aa66e661b661bd18aa91acaed3059f25b9a95f57731c2b5632a3576fdac6e547220b807e4c1062fccde24c1fab33b9e44759b4964f6e7f880cb5d1537b8c489e813b5a689bdfc620ee7b5d29a814cf2eb7d5b7fd15fc1c309e66da7f7ef4ee9189c6d9c0e918af0d0e4f1f57e11ecdfc04f55b5a3dddfc483e3f8730c63205988df7c163f64648936a88ae975adc2c50ae56b1c163787aaa7ba716d804f5e6bd8f1b1338871318aa066730d9e96a626ee84343738ed51a6d22175948bf81804b346f75b509907d5c21c6e6ae722e438673720c3ad7a575a6231755fbf8b104c9a830d47353c00d9fd78b839cc8259e095b39b8255bec6910ec0dc0408aa121d7b92a1eb9c8651256db5ceef34ee6d6ce5d72450e923e1ab0438e5a161345a3f7f9d2ba7bcaba1f9f243b5744bfac464b5cc79401584497f3fdecd6b7263361fec78ce0433541e347a6c738dcd57453a5a971b9e71886c90e0dec627e71f6abd31a9a10b08fbbdae83f63acc237c9427895645df83e14edefd9e6039714637b6d5912e844dc6fe195096183fc1b96b7761d3089349295712e9a65c5dcad3a3efa551579df919e903daa87607692056fc23001219eed963076568e729d88d443115bbb3a680240b1ac74ed26cd137aebb79be7acccb73b92e70d9422c08dd0a61665b6d72c900869c2e0c6ecc48cc7e3d64daee58cf01824ddad88ecbadb163f3584c6834ffb66fdfe78069433fa1aeee3d746fa5b9111de638263f7afb0f5461979f7f2f4774f381c4b094d4ad9f5ca988b9cbb7b91607bf8707bf16682462709d4ab3ca22772338608332d09a12fcb2938b1e65949a76688a7fc86924aa38afe0b90d37048d69e73a0b99a3584101c647d79f284ccba120d8c96d287891d10648415e3aa09a110bbd22505afcace48c2c70ea837b25bf7ed4bdbb4fe89643438b17798241359b560aaf88f6ef07d68f5cf0c138edcadce2fa38506de6a8096f98909c10ab69da33fc676e554bb56d04706b6157745ff88f0ebfc1eedff191378af5c4aa21300cefd6fbb2c7c9dba20546d17773ba50ab2e56af79ef0b9728472f161e76c9f08c22a45de62d5243d842779c739122415d32016d24f54b47b6523524dfc04ec0f6d002a681169ddf47cba8b8631c999ecf65c34a00445fbdebf73c95f0f0e3b9f005283f418b98b214f83428cd1978f91832093c873b7abc3078554566aafbf5cfe42e595efd5792071e870519f65ae6286e101facfae7b2808153738f5bc3eeb5a3749e3db9133cf686c2c18173beea1950ea7a8dc2ce32ccd0f4ea751dd7895a39eb583b78972dc09deaa6b5fb1abdd67c24d0d7700649c51828fe0bda349b6960d9250483da7acf82b5ee701001fa48c7d25c90dfab836c32a59eefaf1e7279592516ff93a83b68f30a93991dc37842f69633498dab7dbb4756ae6f708d936485d6cca6d31f62935b4741300d402d07f19b8b87bebaa674ee0e2b4303c52d6c1480d3d9f63ce9f33010bfe19b3407ef67a944c299f3a830ae27063b3c1d103afd7222065900cdeb40d21aeebff275f7daddb70aef3cfca57d349c6dbcdfd8d90fc2727fb6ed19aa6dfcc4eb1fbc09dbf80a6dc44a0cac039ebe0634516b4e77fd2eb4e45a8a346c093b1f2b3871dbae3cbb23a4a5ed85ad93c1869bb3fae22279d41d4b17d5cae5605c035019b84df1e4a9a3c16022dfdda156f7ddba7874950077be843fc108001cffc8264895e5cc323a465d8d15ab8117c4141910ba2305f5ea22b79d8c800f98a380125ad4dde15e06d056d829eb8ef41a8425ea435ece5d962f2a289571fd084827e74d3b6a765ece373a9d7b18c22bebe361eb672a60f458f9e0c37417aae5496f82b763bdbc6ad442c2a9e7ce218e25e55a12cb40f7c6536c1c9c6595ad878fae79e58cc84e819cec1111e039151a66e081b8b07ea8ac38c3e45d23054f2d19b83d900e2d1ada6ce767bb0e937bdf82cc8539d0b2e9ee9e9b7462194477ac572112ddf03ab43b373f094418662b989f3c001ef261d0d67bfcaf4d57f28de1cc9e9004bd03142ba66b58b5d416334aa5c2be4c0f7822203df8a118f239ee64b660fe28a0a0e2b52024b96bf2419963807f13ea374b8930c077ff70ba1c3243d95587d7fac373e07067f575c04951048318ade9e42f07cca63258fe05fa79799ac07f309819daf32e6daf20725a9a160643f21be894cb5f83d2bb15184a9b881a5bf363d5bfe24350f9d98c56d04a4074391ea139dd16d171c3e66ae550b12c11cef32d8b1e379df9acf9b80a10dd0435ef1f0778e14e255e43bf207473846c6ba6edd1e5b8603427b0829ef3a7f34d585cbbf2cd6a41abbe46dda4a4f1c39c8f7467c931c01a83235125680a49f2aea2925d3ffe2b28266d4d880a11f3b6fda37debf284fa4cbe8d76dbec4a0d7fb27e3a4b7fed8602e69e262245df7e74200f90d26a55eb703c8df232adc4f5d8ac6afab2597718ae017a148f43905e4ac472aba785c5d5884464751ddcf667a003da751972ca1d3d480dbb8fdb30b5b9bd07d3226637d613a17067a28bcde3abd061787af7b53d2a52b1a2ad6038827789ee2c9c8801a4d70595d15fd0c099526fac236cbd86dba5dc661887561c6668fdd09683e37f1b2b1db1d8ac00466444cbb037a9468c596bcdcd13d58f29f719152c1d2c4a61ff401c5c88d13a3946af704fcd8254fc56bcb93e1883f6b6ae9d3cbcdb141fb079c515fe70e0c572c67ff971e987330a29966dff4ffd8afdb7d1724d2c77e9f84cbcc5027e5f6843371e2dee35369c712d96757271d40ef1892a896aabca599d08607fce05e120d94b5e06ec84cab31d3fca0ed7f2644be23c922fcd8dd8a2942b53d530736897b9cbe6da0082caa9f796abf43103c275df74497c927a79c685ee38e3b3567163e173f05f7fb62f31ee69f6419a117094b5bc5852315fa12b9897f25a876b0e9fa1c1e5f7f8f206c3d39ae5a77d954209ecf2ed3bc5240b67710acc26345b9e57af7d6afc067e80781286e7d1501ac6a20acfddef9c3f784150674c9a3b6c4447e9b41d1f692e3904ef3d4ec3ef17ade974d4dec9dc43216814ee9a0db30794dad700ff1165db7c4dfcc75b46e9d4ebd61633f291b87517125131b7801af8f7f79bdabc07515c23f0cb46620b08b19ed3ebc79379c4dc171c54d161ce25f510d7b6e4d672e626ae87b3eea41eb6abba8612ace7ed8b545dfc8337c2fd6ffd5a7e95d4db44c21abdc6ddcc41b122c88d7a9b60c99a57ec855f943455397b1cf00c735f36b7a6edea674c88c4d709d59c50d265940fe05220751d5ea67443dcbf359a8e58c35cf3b9183436a96c6f06aeaeedfc9658a3a087dca95bdf4a2c8b7248719cf6b7a0dea6c574be52c9d1c426cf1d592a62cf38e4b84e26385848f2969495a6904f6817372d7e8aca0e3cd8dc7cca514dfb3bf5b63ab9c632e4953ee86e82c7447afd38f0b843cabaf0263a5db1314ffecfa7f9cefb5917d50d2f85e5323a6b0fb2d951bba37bbd0f74a3e07821feb4efe8148da695e00b52ce93d9ebc81a9b47e34757311363019aafd6b9ebc7764421935dfa465f018904929fa7612d5c929659c70287681619a5c23d5d8858266747186149f4b6138a81542f7230c0b1b99eb7df8e88f67d2aa9c7ab5f2be195ade8a1636137876fad0892eceb0675ac206c8084ab154da4e76d7e76a81891723cbe164125a64d43981be9dfd7ae587ac4c696eb6e4a7f635550104deef141ccbb0999222a952cb3bd920620532808430db8aa28ee7ac3224477d269c9874c40ee08d19f0932cfc560d541694b788e4ea05936fd42b999c59f6db079e748d551600309aef89071c30fe0ff5bb4920d2eac3c054e2871e17240e92527f627eff2184a9be241a31c0ac8474ae0f82861e60bd449065d8285c33edf31d631c360ace955143678cf45f1fd1f5da77b94c2d87555976eda3833265cdfee777b7d87514f344edeee24d8a9dda9b0bb35552432d26ea874853acffc85958a05be561c8845236393e69aedd7eef8dfcccc26d2c66c20ced811f8eb6613cbbf3e97711912840de7d4e2a7987567d4cd7bd116be665d7170310efc740995493ea25d5239c9345f1e8360bdeea3c89edb2d3deb74a0f372b0770c81e1b57884abebbca40a6dd70d990c59538821c8c8bbaf18ff21caa9b155c5582177066ecd445817ea567ad508fce7751f62e594d99a4bec2fba725827a3d845ce152015c9c2c37283af56590efb4e22e0c017ba992227be8acd968257a2a3197f11a6d4c68423cd74e2c32407104ecc883c5c06136470cea05637e154425d27210310bcfd3598052cd602c7350d913dc5914b0b69ff645cbdb7e250f20da09a819095a9425d91335743d912ca832628e002a0083254006b108021100000039ffffff08021100000084000000fbffffffffffffffffff070000007606050418000200bd06080211000000824602a303ff030000ffffffffffff0e0b000001800000030000000405ffffffffffff09000000010802110000000500000005080211000000086c163a05080211000000380000000301b904060702bb1906000000"], 0x1238}, 0x1, 0x0, 0x0, 0x40050}, 0x40c0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xd, 0x34, @random="90a73abdfef039a804"}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000814}, 0x44000800) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) splice(r2, &(0x7f0000000200)=0x3, r5, &(0x7f0000000280)=0x9c7d, 0x4, 0xe) socket$kcm(0xa, 0x922000000003, 0x11) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 18.11880695s ago: executing program 0 (id=3099): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x1, 0x0, 0x23}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000020000000a01010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e200a01010200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e210a01010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e210a01010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000e22ac14142000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e207f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x8, 0x8, 0x5, 0x1, {{0xc, 0x4, 0x1, 0x9, 0x30, 0x64, 0x0, 0xff, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4}, @generic={0x94, 0x12, "74a36885bb6204ddc356f462fb355e38"}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1e0000000000000018000000020000000082010038788004e3644aa5479c5cc0f807acbb6a9bf99fdeae9ceec8472015578ca93419e4f3d6b5cf2034bc2f3d45ba2a5baf8802c6aa1ee5654c81ae5d8b3a8e26ab4d94cb8dd558a0ad8fbf73665e1d752a6bdbdfb85030c228ec68e1ae4d748b0101860d40ca06ad5286f5c4ab391da62a8ab955d3cb2685f1c1e3e55108e1222cc5a2c0a0c794a66dddf200d8d4e0e99dff71121989e555731939a9e24961d6a68a4348a4ee705466503ec71e6fa28f00786ee16fdcc748e0fca8ad6da3", @ANYRES32=r4, @ANYBLOB="0600"/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0200000001000000010000000800000000000000", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r4, @ANYBLOB], 0x50) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3800004, 0x12, r3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r7) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r8, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r8, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)='E', 0x1}], 0x1}}], 0x1, 0x4000045) splice(r6, 0x0, r7, 0x0, 0xfffd, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r4, r4, 0x0, r3}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000240)={r8, 0x100000001, 0x4, 0xfffffffffffffff5}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050e0000400000000000000600000008000300d0885a615cd5bd178768568a133ebcc87c50d943906e2f967ed7ff81ca8f67b1f6a6ff2d98f9640629a840d746b1add1e5059abc77b1cee6e890a7a4e57dd0b7b635cb1ef36d73ab54e40fc3e1900377d710af73194a652b3f99bc35c011161b3acb8bffa87c9a25fd2e0de9f548a1b29fc168eab704b6512b297187a378418b40d1749f593e5b7d5c441badb05504d6f18cd09349cd635b6013de1c8e772dcba75dbbbe6c6229e285dc6bf7aac4", @ANYRES32=r9, @ANYRESOCT=r3], 0x24}, 0x1, 0x0, 0x0, 0x48044}, 0x0) ioctl(0xffffffffffffffff, 0x280, &(0x7f0000000000)="080000000000000045620300000075e417116602e317c62ef37d840cc31b232941b82da97aa1729097ff047ac17d2a1268dae97f9927c9eaa45bbe7e1f5f5a69e2a1c29ebc36a68260182f19fd1c499519429f8d71bcce5d500bef284588e395ad24eb97a37620ba8b865855479e95537f") 18.024593204s ago: executing program 3 (id=3100): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) 17.811465572s ago: executing program 0 (id=3102): r0 = epoll_create(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000c80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0541000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f81a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4540c0", 0xda}], 0x1}, 0x894) write(r5, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r4, &(0x7f0000001500), 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000004180)={0xb0000004}) 17.810836652s ago: executing program 3 (id=3103): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) unshare(0x22020600) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/64, 0x1128000, 0x1000}, 0x20) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xdc}, 0x2000) pwrite64(r6, 0x0, 0x0, 0x1fb) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x40489, 0x40480}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}]}, 0x34}}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000140)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r9, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x280}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) 17.615408831s ago: executing program 4 (id=3104): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x40000, 0xfffffffd, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x20000014) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x6d, 0x2, 0x80, 0x22, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x7800, 0x80, 0xfffffff9, 0x6}}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@delqdisc={0x248, 0x25, 0x4, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x8}, {0xc, 0xe}, {0xffff, 0xfff1}}, [@TCA_STAB={0xc8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x81, 0x8, 0x1e, 0x1, 0x5, 0x7, 0x2}}, {0x8, 0x2, [0x8da, 0x2000]}}, {{0x1c, 0x1, {0x3, 0x3, 0x3, 0x4, 0x0, 0xe42, 0x1, 0x4}}, {0xc, 0x2, [0x4, 0x6, 0x3ff, 0x1]}}, {{0x1c, 0x1, {0x3, 0x7, 0x4, 0x81, 0x95c86dd8275f0334, 0x1, 0x6c88, 0x2}}, {0x8, 0x2, [0x6, 0x2]}}, {{0x1c, 0x1, {0x0, 0x4, 0x4, 0x699ac9a5, 0x1, 0x8, 0x10000, 0x8}}, {0x14, 0x2, [0xa, 0x1, 0x9, 0x0, 0x9, 0x3, 0x2, 0x200]}}, {{0x1c, 0x1, {0x80, 0x9, 0x1000, 0x5, 0x0, 0x7fffffff, 0x8, 0x2}}, {0x8, 0x2, [0x5, 0x7]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfff}, @TCA_RATE={0x6, 0x5, {0x9, 0xd}}, @TCA_STAB={0x128, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x1, 0x40, 0x0, 0x0, 0x7, 0x10000, 0xa}}, {0x18, 0x2, [0x7, 0x9, 0x9a25, 0x4, 0xcc1e, 0x17, 0x8, 0x3, 0x400, 0x6]}}, {{0x1c, 0x1, {0x7, 0x7, 0x2, 0x3, 0x1, 0x3, 0x10000, 0x1}}, {0x6, 0x2, [0xf]}}, {{0x1c, 0x1, {0x8, 0x89, 0x3, 0x6, 0x1, 0x70, 0x0, 0x1}}, {0x6, 0x2, [0x43]}}, {{0x1c, 0x1, {0x0, 0x7f, 0x400, 0x6, 0x0, 0x0, 0x4, 0x6}}, {0x10, 0x2, [0x5, 0x9d, 0x1, 0x9, 0x6, 0xc]}}, {{0x1c, 0x1, {0x4, 0x7, 0x0, 0x7ff, 0x2, 0x5, 0x5e, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0xbe, 0x5, 0x3, 0xc, 0x2, 0x1, 0x1, 0x1}}, {0x6, 0x2, [0xfff]}}, {{0x1c, 0x1, {0x1, 0x2, 0x4f, 0x6, 0x2, 0x7, 0x7, 0x9}}, {0x16, 0x2, [0xd574, 0x80, 0x7, 0xe2, 0x1, 0xe, 0x1ed, 0x7, 0x800]}}]}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x2}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffff93b6}, @TCA_RATE={0x6, 0x5, {0xc6}}]}, 0x248}}, 0x4000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x1100000000f336, 0x8) r9 = openat$cgroup(r8, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r10 = openat$cgroup(r9, &(0x7f0000000580)='syz1\x00', 0x200002, 0x0) r11 = openat$cgroup_type(r10, &(0x7f0000000280), 0x2, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x600000a, 0x12, r12, 0x0) r13 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r13, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4) ioctl$FS_IOC_GETFSUUID(r11, 0x80111500, &(0x7f0000000140)) 17.514658234s ago: executing program 2 (id=3105): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000040), 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES32=r0, @ANYRESOCT=0x0, @ANYRES32=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1fffffffffffff9d, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) close(r0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='udp_fail_queue_rcv_skb\x00', r5, 0x0, 0x1}, 0x18) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x65, &(0x7f0000000080)=0x6991, 0x4) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611898000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000800c00028008000001000014bb0a0001"], 0x48}}, 0x0) socket$inet(0x2, 0x801, 0x0) unshare(0x6a040000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r2, 0x0, 0x8a2}, 0xffffffffffffff71) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='cq_alloc\x00', r8, 0x0, 0x4000000000}, 0x18) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r11, 0x110, 0x2, &(0x7f00000000c0)='/dev/ppp\x00', 0x9) write(r10, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0e438ffc3e275b03ef0f384a0c1f20143b7b87f2e34729b000000805e0ad338423d4200f349c545516c46bb9f104a3816b12950faa20fab5827bc62a8d4cc12c4c8954308a933d63aa66cdb3646a37626de7361b5338c197dd3e6844dafcb4338dce0b79ee41da150eca12fbd36b4873ce8e4747b63e8830ee6c32f254d37792053e2b77cc86279ea843600"/297, 0x3accf8d5) vmsplice(r10, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000) close(r9) 17.451848899s ago: executing program 3 (id=3106): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="300000000000000084000000", @ANYRESOCT=r0], 0x30}], 0x1, 0x0) 17.412330534s ago: executing program 1 (id=3107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x13}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x40000010) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3, {0x9}}, 0x10) connect$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x2, 0x2}, 0x3}}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000002010101000000000000000000000008"], 0x1c}, 0x1, 0x0, 0x0, 0x4c881}, 0x12) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0x314, r2, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x45}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb}, @NL80211_ATTR_FRAME_MATCH={0xff, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x373}, @NL80211_ATTR_FRAME_MATCH={0xbe, 0x5b, "7eb5c57b6a598da2ba6256349ce9d9b8d0d5ec1c4f79f791742b409dbd07b34a11b8a3c9e4d017ee7c71b5bae2e398fe6f8b9b4635252a37346896786ebddd06b085d02ce0c3ac4389bc210ddf3794859d4c8510e716f4c41176193f2ba8cdeb50d1cce4d36c7a4060fbd83d2e16e07ff74ff3de803ac492244a03ee1c8ba4259720e530c50470b39dbc9715ec33bea2c25c7cc74e718290301c8c4482c3e920fef1c3af0db7d6590c8e7b067d31ca8a5412b30406766aef784f"}, @NL80211_ATTR_FRAME_MATCH={0x11, 0x5b, "9bf2df65e4a0af8399511a3e8b"}, @NL80211_ATTR_FRAME_MATCH={0x96, 0x5b, "35c56ef586744bbb8ed35d6cf90b49ac91072e906048df8c4b9a6e234eaf68acc37dcd781d17a791e6a4567725338db980ecbeaac05e16767de576e0b4f6eb42f957499af7066e9f8efecb1fea64b171cc3b85d51f276230e4a33387e4ef8a58be8ce505cf3b2c2cb79994cc92ceecb64e7b34ca50db46bd5b409002325e6d81c17626982cab039057e7e093b96511a79026"}, @NL80211_ATTR_FRAME_MATCH={0x5e, 0x5b, "a517ed639bd3b7b8e5035a9ba5793e9bf972f13b7fbd43d17a5e45df183188f3c1f7c6d2962cfd13df9e96a9722a0d6ff585f71dc00c65f67eecc0a69c4d2e254b131e259abaf274b87668e9d42d37e5856a3176ca5e9d0676a4"}]}, 0x314}, 0x1, 0x0, 0x0, 0x4040}, 0x400c041) r4 = socket(0x840000000002, 0x3, 0x105) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a000000080000ee0c00000068360000100000000900000008000000690d000002000040000000000d00000000000007"], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000}, 0x28) r5 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x60}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) setsockopt$sock_attach_bpf(r5, 0x84, 0x9, &(0x7f0000000380), 0x9c) connect$inet(r4, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 17.356536027s ago: executing program 3 (id=3108): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018180000", @ANYRES32, @ANYBLOB="00000000000000000000000010ffffff00b15b84000000000000001812f70df20f84a8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x2e, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x9f) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0x10}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000240)="63eced000000000a9f33c9f7b9e5", 0x0, 0xc698, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000002e00090027bd7000001000000400000004001d00070011"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = getpid() sendmmsg$unix(r3, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x4000044}}], 0x2, 0x2400c000) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, 0x0, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(r7, &(0x7f0000000780)={0x40000000, 0x0, 0x0}, 0x0) socket(0x21, 0x3, 0x300) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x480c0}, 0x8004) r10 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9e}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r10, 0x0, 0x4000080) 17.228803804s ago: executing program 1 (id=3109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xfff2, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x400, 0x101, 0x1, 0x9, 0x6, 0x5, 0x8f2, {r5, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}, 0xffff, 0x11a, 0x0, 0x874, 0x80000000}}, &(0x7f0000000140)=0xb0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d40)=@newqdisc={0x148, 0x24, 0xd0f, 0xffffffff, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "0e8d1ba030f44657e9ec8f97f13823cfcbb22d4349b23731e0abf16a72261ad13302b28f90c0c212ab1b31fcff68fb9e51c2c094fa90eaf6cee81af55967cc64623107ff171861a39d290f29ac6fb69f61125a8177d87d9409650e5bd6400b28f04cbf81cc5c445b6abd2bd7ca26bc89a23c02f2a29b3b01e1faf4713b416cced4d2fb4ccfd7a85cdb9930d8c36cd3f008c1f26e26e0f2b797957a4d039ba73f77fa55615802d1cbd1e122d9f2b12289215d7179084bf11cefd2ac8d34a971d0db980e5cf685e3a5b25c7a01fe60e9840cdb8600a2ff738705871d8ca0a44fc3a81606ef9d673dd65a26d8519a3d5515d2d56899c6f7e2d82126a479468cce22"}, @TCA_RED_PARMS={0x14, 0x1, {0x6, 0x8, 0x8, 0x2, 0x15, 0xe, 0x1}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4940}, 0x24008890) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x1000004, 0x0, {0x80}}, 0x14}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000680)={0x0, 0x6, [0xacb, 0x5, 0x5, 0x1, 0x9, 0x2]}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x3c, r11, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback={0x30000}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x3c}}, 0x0) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), 0xffffffffffffffff) r13 = socket$key(0xf, 0x3, 0x2) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="02010000080000000000000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x40}}, 0x0) sendmsg$key(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x48c0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r10, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x17c, r12, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x64, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32de911}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x637b4f31}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f7872bf}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc91b88a}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xcc, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x652c45e9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6869dc47}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd4e2f67}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fb0c6a2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bfe5f52}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x360f3887}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e2eee37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c7ede33}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 17.085890946s ago: executing program 3 (id=3110): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000040), 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES32=r0, @ANYRESOCT=0x0, @ANYRES32=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1fffffffffffff9d, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) close(r0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='udp_fail_queue_rcv_skb\x00', r5, 0x0, 0x1}, 0x18) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x65, &(0x7f0000000080)=0x6991, 0x4) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611898000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000800c00028008000001000014bb0a0001"], 0x48}}, 0x0) socket$inet(0x2, 0x801, 0x0) unshare(0x6a040000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r2, 0x0, 0x8a2}, 0xffffffffffffff71) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='cq_alloc\x00', r8, 0x0, 0x4000000000}, 0x18) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r11, 0x110, 0x2, &(0x7f00000000c0)='/dev/ppp\x00', 0x9) write(r10, &(0x7f0000000140)="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"/297, 0x3accf8d5) vmsplice(r10, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000) close(r9) 17.046565815s ago: executing program 1 (id=3111): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x5, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) 16.967325703s ago: executing program 1 (id=3112): r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0x4d61}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff00}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x1, 0x3f00}, @ldst={0x2, 0x3, 0x2, 0x5, 0x2, 0x20, 0x1}, @jmp, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r3, &(0x7f0000000540)=[{&(0x7f00000003c0)="00214717a70700000000030600710a06069d856829c2f5d7a3c3b954c224baf5a405000000143d6ab27e0b6d80aa934dc082", 0x32}], 0x1, 0x0, 0x0) r4 = socket(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000140)={r2}) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20020040}, 0x20040815) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa}, {0x0, 0xe}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x79}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xd, 0x8}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xb, 0xfff2}}]}}]}, 0x4c}}, 0x0) sendto$packet(r2, &(0x7f0000000040)="90c7a4cbce204ceaedc4918321781534f78efff833a953f6091a70", 0x1b, 0x0, &(0x7f0000000080)={0x11, 0xd}, 0x14) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a000907000000000000000000000005001a"], 0x38}, 0x1, 0x7}, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) 16.908045352s ago: executing program 2 (id=3113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0xf5, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b00000008000240000000040800044000000004090001007379"], 0x80}}, 0x0) 16.787478797s ago: executing program 2 (id=3114): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0x2b, 0x801, 0x0) listen(r1, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8202, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480), 0x0) socket(0x25, 0x3, 0x5c) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg0\x00'}) sendmsg$nl_route(r0, 0x0, 0x4000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x5eb, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r4) 16.786851952s ago: executing program 0 (id=3115): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0x2b, 0x801, 0x0) listen(r1, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8202, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480), 0x0) socket(0x25, 0x3, 0x5c) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg0\x00'}) sendmsg$nl_route(r0, 0x0, 0x4000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x5eb, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r4) 16.701894986s ago: executing program 4 (id=3116): socket(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0xa215}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48010}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) unshare(0x62040200) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, 0x0, 0x1c) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000180)={r7, r7, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 16.673274957s ago: executing program 1 (id=3117): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r3, 0x4, 0x7, 0x6, 0xff, 0x34, @rand_addr=' \x01\x00', @local, 0x10, 0x20, 0x10000, 0xe60}}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xe0b, 0x70bd2b, 0x1000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="90000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="010102000000000008000500", @ANYRES32=r7, @ANYBLOB="0a000200aaaaaaaaaa4100005c00128009000100766c616e000000004c00028006000100220000000600050088a800000c00020005000000000000000600050088a800001000"], 0x90}, 0x1, 0xba01}, 0x810) 16.621337418s ago: executing program 3 (id=3118): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 15.878179527s ago: executing program 4 (id=3119): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x2}]}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='fsi_master_acf_copro_command\x00', r2, 0x0, 0x6}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 15.8716752s ago: executing program 1 (id=3120): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='mm_page_free_batched\x00', r3}, 0x18) r4 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r4, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="04002bbd7000ffdbdf2511000000100004800900010073797a31000000004c0004800c00078008000300080000003c00078008000300010000000800010000000000080003000010000008000300020000000800010003002000080004000900000008000200000000000c0005800800010065746800"], 0x7c}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000001) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r6, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$alg(0x26, 0x5, 0x0) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000600), r6) sendmsg$FOU_CMD_DEL(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r9, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x80) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000140)=0x4) bind$alg(r8, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) accept4(r8, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) 15.446095742s ago: executing program 2 (id=3121): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='mm_page_free_batched\x00', r3}, 0x18) r4 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r4, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="04002bbd7000ffdbdf2511000000100004800900010073797a31000000004c0004800c00078008000300080000003c00078008000300010000000800010000000000080003000010000008000300020000000800010003002000080004000900000008000200000000000c0005800800010065746800"], 0x7c}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000001) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r6, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$alg(0x26, 0x5, 0x0) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000600), r6) sendmsg$FOU_CMD_DEL(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r9, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x80) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000140)=0x4) bind$alg(r8, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) accept4(r8, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) 15.426546151s ago: executing program 0 (id=3122): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x28, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000540), r4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="68010000", @ANYRES16=r5, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040c00100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="0001028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x168}, 0x1, 0x1000000, 0x0, 0x24044000}, 0x24040840) 1.572828312s ago: executing program 32 (id=3118): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 544.767185ms ago: executing program 33 (id=3120): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='mm_page_free_batched\x00', r3}, 0x18) r4 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r4, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="04002bbd7000ffdbdf2511000000100004800900010073797a31000000004c0004800c00078008000300080000003c00078008000300010000000800010000000000080003000010000008000300020000000800010003002000080004000900000008000200000000000c0005800800010065746800"], 0x7c}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000001) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r6, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$alg(0x26, 0x5, 0x0) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000600), r6) sendmsg$FOU_CMD_DEL(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r9, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x80) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000140)=0x4) bind$alg(r8, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) accept4(r8, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) 520.568352ms ago: executing program 34 (id=3119): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x2}]}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='fsi_master_acf_copro_command\x00', r2, 0x0, 0x6}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 53.402167ms ago: executing program 35 (id=3122): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x28, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000540), r4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="68010000", @ANYRES16=r5, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040c00100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="0001028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x168}, 0x1, 0x1000000, 0x0, 0x24044000}, 0x24040840) 0s ago: executing program 36 (id=3121): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='mm_page_free_batched\x00', r3}, 0x18) r4 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r4, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="04002bbd7000ffdbdf2511000000100004800900010073797a31000000004c0004800c00078008000300080000003c00078008000300010000000800010000000000080003000010000008000300020000000800010003002000080004000900000008000200000000000c0005800800010065746800"], 0x7c}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000001) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r6, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$alg(0x26, 0x5, 0x0) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000600), r6) sendmsg$FOU_CMD_DEL(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r9, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x80) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000140)=0x4) bind$alg(r8, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) accept4(r8, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) kernel console output (not intermixed with test programs): ] Use struct sctp_sack_info instead [ 550.885595][T18382] lo speed is unknown, defaulting to 1000 [ 550.894228][T18397] netlink: 'syz.4.2762': attribute type 11 has an invalid length. [ 550.932420][T18398] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input58 [ 551.180291][T18403] FAULT_INJECTION: forcing a failure. [ 551.180291][T18403] name failslab, interval 1, probability 0, space 0, times 0 [ 551.209969][T18403] CPU: 1 UID: 0 PID: 18403 Comm: syz.1.2765 Not tainted syzkaller #0 PREEMPT(full) [ 551.210000][T18403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 551.210014][T18403] Call Trace: [ 551.210023][T18403] [ 551.210032][T18403] dump_stack_lvl+0xe8/0x150 [ 551.210066][T18403] should_fail_ex+0x412/0x560 [ 551.210101][T18403] should_failslab+0xa8/0x100 [ 551.210130][T18403] __kmalloc_noprof+0xde/0x7e0 [ 551.210151][T18403] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 551.210185][T18403] ? rcu_is_watching+0x15/0xb0 [ 551.210218][T18403] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 551.210261][T18403] genl_family_rcv_msg_doit+0xd9/0x330 [ 551.210302][T18403] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 551.210340][T18403] ? __pfx_genl_get_cmd+0x10/0x10 [ 551.210369][T18403] ? __pfx_nbd_genl_connect+0x10/0x10 [ 551.210401][T18403] ? __lock_acquire+0x6b5/0x2cf0 [ 551.210435][T18403] genl_rcv_msg+0x61c/0x7a0 [ 551.210475][T18403] ? __pfx_genl_rcv_msg+0x10/0x10 [ 551.210507][T18403] ? __pfx_nbd_genl_connect+0x10/0x10 [ 551.210552][T18403] netlink_rcv_skb+0x232/0x4b0 [ 551.210579][T18403] ? __pfx_genl_rcv_msg+0x10/0x10 [ 551.210614][T18403] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 551.210636][T18403] ? genl_rcv+0x19/0x40 [ 551.210687][T18403] ? down_read+0x272/0x2e0 [ 551.210709][T18403] ? genl_rcv+0xd/0x40 [ 551.210741][T18403] genl_rcv+0x28/0x40 [ 551.210771][T18403] netlink_unicast+0x80f/0x9b0 [ 551.210818][T18403] ? __pfx_netlink_unicast+0x10/0x10 [ 551.210844][T18403] ? netlink_sendmsg+0x650/0xb40 [ 551.210868][T18403] ? skb_put+0x11b/0x210 [ 551.210911][T18403] netlink_sendmsg+0x813/0xb40 [ 551.210949][T18403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.210979][T18403] ? aa_file_perm+0x12d/0x1630 [ 551.211008][T18403] ? aa_sock_msg_perm+0xf1/0x1b0 [ 551.211040][T18403] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 551.211060][T18403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.211088][T18403] __sock_sendmsg+0x21c/0x270 [ 551.211118][T18403] ____sys_sendmsg+0x4d7/0x810 [ 551.211140][T18403] ? __might_fault+0xaf/0x130 [ 551.211181][T18403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 551.211213][T18403] ? import_iovec+0x73/0xa0 [ 551.211240][T18403] ___sys_sendmsg+0x2a5/0x360 [ 551.211261][T18403] ? __lock_acquire+0x6b5/0x2cf0 [ 551.211288][T18403] ? __pfx____sys_sendmsg+0x10/0x10 [ 551.211350][T18403] ? __fget_files+0x2a/0x420 [ 551.211376][T18403] ? __fget_files+0x3a0/0x420 [ 551.211415][T18403] __x64_sys_sendmsg+0x1bd/0x2a0 [ 551.211440][T18403] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 551.211473][T18403] ? __pfx_ksys_write+0x10/0x10 [ 551.211508][T18403] do_syscall_64+0xe2/0xf80 [ 551.211528][T18403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.211549][T18403] ? trace_irq_disable+0x37/0x100 [ 551.211578][T18403] ? clear_bhb_loop+0x60/0xb0 [ 551.211605][T18403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.211626][T18403] RIP: 0033:0x7f2e0c99acb9 [ 551.211646][T18403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.211664][T18403] RSP: 002b:00007f2e0d79f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.211688][T18403] RAX: ffffffffffffffda RBX: 00007f2e0cc15fa0 RCX: 00007f2e0c99acb9 [ 551.211705][T18403] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 551.211720][T18403] RBP: 00007f2e0d79f090 R08: 0000000000000000 R09: 0000000000000000 [ 551.211734][T18403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.211747][T18403] R13: 00007f2e0cc16038 R14: 00007f2e0cc15fa0 R15: 00007fffebe4f818 [ 551.211791][T18403] [ 551.616926][T18409] netlink: 'syz.4.2764': attribute type 10 has an invalid length. [ 551.655588][T18406] siw: device registration error -23 [ 551.690061][T18407] nbd153: detected capacity change from 0 to 127 [ 551.707668][T18401] block nbd0: reconnected socket [ 551.779229][T18401] nbd: socks must be embedded in a SOCK_ITEM attr [ 551.805559][ T5840] block nbd0: Receive control failed (result -32) [ 551.822235][ T5850] block nbd153: Receive control failed (result -104) [ 552.336834][T18436] netlink: 'syz.1.2774': attribute type 11 has an invalid length. [ 552.607129][T18438] netlink: 'syz.4.2775': attribute type 10 has an invalid length. [ 552.669460][T18445] nbd154: detected capacity change from 0 to 127 [ 552.702992][T18449] __nla_validate_parse: 3 callbacks suppressed [ 552.703016][T18449] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2775'. [ 552.722001][T18449] block nbd0: reconnected socket [ 552.727077][T18449] nbd: socks must be embedded in a SOCK_ITEM attr [ 552.738365][ T5850] block nbd154: Receive control failed (result -104) [ 552.742624][T18457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2780'. [ 552.763938][ T5840] block nbd0: Receive control failed (result -32) [ 552.777968][T18454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2780'. [ 552.793529][T18454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2780'. [ 552.808377][T18454] syzkaller0: entered promiscuous mode [ 552.815019][T18454] syzkaller0: entered allmulticast mode [ 553.206884][T18478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2787'. [ 553.503085][T18495] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2787'. [ 553.570452][T18495] vlan3: entered promiscuous mode [ 553.635661][T18493] netlink: 'syz.4.2790': attribute type 1 has an invalid length. [ 554.233545][T18525] netlink: 'syz.3.2797': attribute type 10 has an invalid length. [ 554.265802][T18528] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2800'. [ 554.272605][T18520] nbd155: detected capacity change from 0 to 127 [ 554.302574][T18514] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2797'. [ 554.318155][T18514] block nbd0: reconnected socket [ 554.323871][T18514] nbd: socks must be embedded in a SOCK_ITEM attr [ 554.344718][T18520] siw: device registration error -23 [ 554.355267][ T5840] block nbd155: Receive control failed (result -104) [ 554.368063][ T5850] block nbd0: Receive control failed (result -32) [ 554.383348][T18530] syzkaller0: entered promiscuous mode [ 554.390467][T18530] syzkaller0: entered allmulticast mode [ 554.462608][T18524] FAULT_INJECTION: forcing a failure. [ 554.462608][T18524] name failslab, interval 1, probability 0, space 0, times 0 [ 554.487236][T18524] CPU: 1 UID: 0 PID: 18524 Comm: syz.0.2801 Not tainted syzkaller #0 PREEMPT(full) [ 554.487266][T18524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 554.487280][T18524] Call Trace: [ 554.487288][T18524] [ 554.487298][T18524] dump_stack_lvl+0xe8/0x150 [ 554.487331][T18524] should_fail_ex+0x412/0x560 [ 554.487367][T18524] should_failslab+0xa8/0x100 [ 554.487395][T18524] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 554.487430][T18524] ? __alloc_skb+0x1d0/0x710 [ 554.487459][T18524] ? __local_bh_enable_ip+0xd0/0x130 [ 554.487485][T18524] ? __alloc_skb+0x18b/0x710 [ 554.487516][T18524] __alloc_skb+0x1d0/0x710 [ 554.487551][T18524] rtmsg_ifinfo_build_skb+0x84/0x260 [ 554.487588][T18524] rtnetlink_event+0x1b7/0x270 [ 554.487624][T18524] notifier_call_chain+0x19d/0x3a0 [ 554.487670][T18524] netif_set_mtu_ext+0x5aa/0x800 [ 554.487689][T18524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.487718][T18524] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 554.487740][T18524] ? __mutex_trylock_common+0x158/0x260 [ 554.487779][T18524] ? rcu_is_watching+0x15/0xb0 [ 554.487812][T18524] netif_set_mtu+0xd7/0x1b0 [ 554.487834][T18524] ? __pfx_netif_set_mtu+0x10/0x10 [ 554.487863][T18524] ? netdev_name_node_lookup+0xdf/0x120 [ 554.487893][T18524] dev_set_mtu+0x126/0x260 [ 554.487916][T18524] dev_ioctl+0x7b4/0x1150 [ 554.487952][T18524] sock_do_ioctl+0x23e/0x320 [ 554.487981][T18524] ? __pfx_sock_do_ioctl+0x10/0x10 [ 554.488003][T18524] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 554.488041][T18524] sock_ioctl+0x5c6/0x7f0 [ 554.488071][T18524] ? __pfx_sock_ioctl+0x10/0x10 [ 554.488095][T18524] ? __fget_files+0x2a/0x420 [ 554.488120][T18524] ? __fget_files+0x3a0/0x420 [ 554.488145][T18524] ? __fget_files+0x2a/0x420 [ 554.488173][T18524] ? bpf_lsm_file_ioctl+0x9/0x20 [ 554.488196][T18524] ? __pfx_sock_ioctl+0x10/0x10 [ 554.488220][T18524] __se_sys_ioctl+0xfc/0x170 [ 554.488255][T18524] do_syscall_64+0xe2/0xf80 [ 554.488274][T18524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.488294][T18524] ? trace_irq_disable+0x37/0x100 [ 554.488322][T18524] ? clear_bhb_loop+0x60/0xb0 [ 554.488347][T18524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.488368][T18524] RIP: 0033:0x7efeadd9acb9 [ 554.488387][T18524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.488406][T18524] RSP: 002b:00007efeaec9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 554.488428][T18524] RAX: ffffffffffffffda RBX: 00007efeae015fa0 RCX: 00007efeadd9acb9 [ 554.488444][T18524] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 554.488458][T18524] RBP: 00007efeaec9d090 R08: 0000000000000000 R09: 0000000000000000 [ 554.488472][T18524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.488485][T18524] R13: 00007efeae016038 R14: 00007efeae015fa0 R15: 00007ffe9212a068 [ 554.488517][T18524] [ 554.954585][T18548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2805'. [ 554.969201][ T30] audit: type=1800 audit(1768949525.794:2): pid=18536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2803" name="memory.events" dev="tmpfs" ino=2929 res=0 errno=0 [ 555.058243][T18556] FAULT_INJECTION: forcing a failure. [ 555.058243][T18556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.085173][T16705] block nbd153: Connection timed out, retrying (0/1 alive) [ 555.092983][T16705] block nbd153: Connection timed out, retrying (0/1 alive) [ 555.101165][ T56] block nbd153: Dead connection, failed to find a fallback [ 555.109530][T16705] block nbd153: Connection timed out, retrying (0/1 alive) [ 555.116854][T16705] block nbd153: Connection timed out, retrying (0/1 alive) [ 555.124364][ T56] block nbd153: shutting down sockets [ 555.130341][ T56] blk_print_req_error: 138 callbacks suppressed [ 555.130359][ T56] I/O error, dev nbd153, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 555.141679][T18556] CPU: 1 UID: 0 PID: 18556 Comm: syz.2.2807 Not tainted syzkaller #0 PREEMPT(full) [ 555.141753][T18556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 555.141785][T18556] Call Trace: [ 555.141807][T18556] [ 555.141837][T18556] dump_stack_lvl+0xe8/0x150 [ 555.141923][T18556] should_fail_ex+0x412/0x560 [ 555.142018][T18556] _copy_from_user+0x2d/0xb0 [ 555.142089][T18556] btf_new_fd+0x360/0xd00 [ 555.142142][T18556] ? apparmor_capable+0x137/0x1a0 [ 555.142219][T18556] ? __pfx_btf_new_fd+0x10/0x10 [ 555.142289][T18556] ? bpf_token_put+0x143/0x160 [ 555.142363][T18556] ? bpf_btf_load+0x126/0x190 [ 555.142469][T18556] __sys_bpf+0x45a/0x920 [ 555.142562][T18556] ? __pfx___sys_bpf+0x10/0x10 [ 555.142688][T18556] ? ksys_write+0x242/0x270 [ 555.142751][T18556] ? __pfx_ksys_write+0x10/0x10 [ 555.142847][T18556] __x64_sys_bpf+0x7c/0x90 [ 555.142924][T18556] do_syscall_64+0xe2/0xf80 [ 555.142989][T18556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.143044][T18556] ? trace_irq_disable+0x37/0x100 [ 555.143119][T18556] ? clear_bhb_loop+0x60/0xb0 [ 555.143190][T18556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.143243][T18556] RIP: 0033:0x7fc4c499acb9 [ 555.143297][T18556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.143335][T18556] RSP: 002b:00007fc4c57a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 555.143398][T18556] RAX: ffffffffffffffda RBX: 00007fc4c4c15fa0 RCX: 00007fc4c499acb9 [ 555.143440][T18556] RDX: 0000000000000028 RSI: 00002000000001c0 RDI: 0000000000000012 [ 555.143476][T18556] RBP: 00007fc4c57a0090 R08: 0000000000000000 R09: 0000000000000000 [ 555.143516][T18556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.143560][T18556] R13: 00007fc4c4c16038 R14: 00007fc4c4c15fa0 R15: 00007ffece6eaa88 [ 555.143648][T18556] [ 555.341504][ T56] buffer_io_error: 138 callbacks suppressed [ 555.341531][ T56] Buffer I/O error on dev nbd153, logical block 0, async page read [ 555.356113][ T56] I/O error, dev nbd153, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 555.366365][ T56] Buffer I/O error on dev nbd153, logical block 3, async page read [ 555.374490][ T56] I/O error, dev nbd153, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 555.384477][ T56] Buffer I/O error on dev nbd153, logical block 2, async page read [ 555.392579][ T56] I/O error, dev nbd153, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 555.402587][ T56] Buffer I/O error on dev nbd153, logical block 1, async page read [ 555.410871][ T7973] I/O error, dev nbd153, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 555.420906][ T7973] Buffer I/O error on dev nbd153, logical block 0, async page read [ 555.429132][ T7973] I/O error, dev nbd153, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 555.439085][ T7973] Buffer I/O error on dev nbd153, logical block 1, async page read [ 555.447233][ T7973] I/O error, dev nbd153, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 555.457453][ T7973] Buffer I/O error on dev nbd153, logical block 2, async page read [ 555.465767][ T7973] I/O error, dev nbd153, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 555.475733][ T7973] Buffer I/O error on dev nbd153, logical block 3, async page read [ 555.483936][ T7973] I/O error, dev nbd153, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 555.493752][ T7973] Buffer I/O error on dev nbd153, logical block 0, async page read [ 555.501938][ T7973] I/O error, dev nbd153, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 555.511753][ T7973] Buffer I/O error on dev nbd153, logical block 1, async page read [ 555.520735][ T7973] ldm_validate_partition_table(): Disk read failed. [ 555.527915][ T7973] Dev nbd153: unable to read RDB block 0 [ 555.534849][ T7973] nbd153: unable to read partition table [ 555.576406][ T7973] ldm_validate_partition_table(): Disk read failed. [ 555.592469][ T7973] Dev nbd153: unable to read RDB block 0 [ 555.609409][ T7973] nbd153: unable to read partition table [ 555.661269][T18548] lo speed is unknown, defaulting to 1000 [ 555.875785][T18569] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2812'. [ 556.049325][ T7184] block nbd154: Connection timed out, retrying (0/1 alive) [ 556.059545][ T7184] block nbd154: Connection timed out, retrying (0/1 alive) [ 556.066843][ T7184] block nbd154: Connection timed out, retrying (0/1 alive) [ 556.074243][ T7184] block nbd154: Connection timed out, retrying (0/1 alive) [ 556.081685][ T95] block nbd154: Dead connection, failed to find a fallback [ 556.089243][ T95] block nbd154: shutting down sockets [ 556.095654][T14815] ldm_validate_partition_table(): Disk read failed. [ 556.107334][T14815] Dev nbd154: unable to read RDB block 0 [ 556.114001][T14815] nbd154: unable to read partition table [ 556.142046][T14815] ldm_validate_partition_table(): Disk read failed. [ 556.149505][T14815] Dev nbd154: unable to read RDB block 0 [ 556.156107][T14815] nbd154: unable to read partition table [ 556.217643][T18576] lo speed is unknown, defaulting to 1000 [ 556.595575][T18599] FAULT_INJECTION: forcing a failure. [ 556.595575][T18599] name failslab, interval 1, probability 0, space 0, times 0 [ 556.615211][T18599] CPU: 0 UID: 0 PID: 18599 Comm: syz.1.2820 Not tainted syzkaller #0 PREEMPT(full) [ 556.615240][T18599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 556.615252][T18599] Call Trace: [ 556.615261][T18599] [ 556.615270][T18599] dump_stack_lvl+0xe8/0x150 [ 556.615301][T18599] should_fail_ex+0x412/0x560 [ 556.615334][T18599] should_failslab+0xa8/0x100 [ 556.615361][T18599] __kmalloc_cache_noprof+0x83/0x6e0 [ 556.615382][T18599] ? proc_self_get_link+0xe5/0x180 [ 556.615410][T18599] ? __task_pid_nr_ns+0x3ab/0x490 [ 556.615441][T18599] proc_self_get_link+0xe5/0x180 [ 556.615463][T18599] ? __pfx_proc_self_get_link+0x10/0x10 [ 556.615485][T18599] pick_link+0x784/0xfa0 [ 556.615522][T18599] step_into_slowpath+0x547/0x7e0 [ 556.615555][T18599] ? __pfx_step_into_slowpath+0x10/0x10 [ 556.615583][T18599] ? inode_permission+0x2fd/0x5f0 [ 556.615613][T18599] link_path_walk+0xd50/0x18d0 [ 556.615658][T18599] path_openat+0x2bf/0x3e20 [ 556.615704][T18599] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 556.615733][T18599] ? getname_flags+0xb7/0x540 [ 556.615757][T18599] ? __pfx_path_openat+0x10/0x10 [ 556.615778][T18599] ? __lock_acquire+0x6b5/0x2cf0 [ 556.615813][T18599] do_filp_open+0x22d/0x490 [ 556.615835][T18599] ? __pfx_do_filp_open+0x10/0x10 [ 556.615875][T18599] ? _raw_spin_unlock+0x28/0x50 [ 556.615903][T18599] ? alloc_fd+0x64b/0x6c0 [ 556.615937][T18599] do_sys_openat2+0x12f/0x220 [ 556.615968][T18599] ? __pfx_do_sys_openat2+0x10/0x10 [ 556.615996][T18599] ? exc_page_fault+0x6a/0xc0 [ 556.616049][T18599] ? do_user_addr_fault+0xc7c/0x1360 [ 556.616075][T18599] __x64_sys_openat+0x138/0x170 [ 556.616109][T18599] do_syscall_64+0xe2/0xf80 [ 556.616129][T18599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.616149][T18599] ? trace_irq_disable+0x37/0x100 [ 556.616176][T18599] ? clear_bhb_loop+0x60/0xb0 [ 556.616202][T18599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.616222][T18599] RIP: 0033:0x7f2e0c95b58e [ 556.616242][T18599] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 556.616260][T18599] RSP: 002b:00007f2e0d79eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 556.616284][T18599] RAX: ffffffffffffffda RBX: 00007f2e0d79f6c0 RCX: 00007f2e0c95b58e [ 556.616299][T18599] RDX: 0000000000000002 RSI: 00007f2e0d79ef90 RDI: ffffffffffffff9c [ 556.616315][T18599] RBP: 00007f2e0d79f090 R08: 0000000000000000 R09: 0000000000000000 [ 556.616328][T18599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.616341][T18599] R13: 00007f2e0cc16038 R14: 00007f2e0cc15fa0 R15: 00007fffebe4f818 [ 556.616376][T18599] [ 557.138882][T18601] lo speed is unknown, defaulting to 1000 [ 557.669777][ T95] block nbd155: Connection timed out, retrying (0/1 alive) [ 557.677230][ T95] block nbd155: Connection timed out, retrying (0/1 alive) [ 557.686337][ T7184] block nbd155: Dead connection, failed to find a fallback [ 557.693983][ T7184] block nbd155: shutting down sockets [ 557.703307][T14204] ldm_validate_partition_table(): Disk read failed. [ 557.736725][T14204] Dev nbd155: unable to read RDB block 0 [ 557.753693][T14204] nbd155: unable to read partition table [ 557.775461][T14204] ldm_validate_partition_table(): Disk read failed. [ 557.785694][T18633] __nla_validate_parse: 2 callbacks suppressed [ 557.785712][T18633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2827'. [ 557.821970][T14204] Dev nbd155: unable to read RDB block 0 [ 557.862686][T14204] nbd155: unable to read partition table [ 557.968237][T18639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2829'. [ 558.122407][T18642] syzkaller0: entered promiscuous mode [ 558.131066][T18642] syzkaller0: entered allmulticast mode [ 558.187933][T18652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2833'. [ 558.334360][T18654] lo speed is unknown, defaulting to 1000 [ 558.428182][T18662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2837'. [ 558.459091][T18662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2837'. [ 558.469871][T18664] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2838'. [ 558.524714][T18669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2839'. [ 558.647087][T18674] syzkaller0: entered promiscuous mode [ 558.668938][T18674] syzkaller0: entered allmulticast mode [ 558.682557][T18674] FAULT_INJECTION: forcing a failure. [ 558.682557][T18674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.728935][T18674] CPU: 1 UID: 0 PID: 18674 Comm: syz.1.2841 Not tainted syzkaller #0 PREEMPT(full) [ 558.728964][T18674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 558.728978][T18674] Call Trace: [ 558.728988][T18674] [ 558.728997][T18674] dump_stack_lvl+0xe8/0x150 [ 558.729029][T18674] should_fail_ex+0x412/0x560 [ 558.729063][T18674] _copy_from_iter+0x1d3/0x1670 [ 558.729119][T18674] ? sock_alloc_send_pskb+0x896/0x990 [ 558.729160][T18674] ? __pfx__copy_from_iter+0x10/0x10 [ 558.729203][T18674] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 558.729231][T18674] skb_copy_datagram_from_iter+0xf5/0x710 [ 558.729260][T18674] ? dev_get_by_index+0x22/0x2e0 [ 558.729285][T18674] ? skb_put+0x11b/0x210 [ 558.729321][T18674] packet_sendmsg+0x37e4/0x50f0 [ 558.729392][T18674] ? aa_sk_perm+0x15a/0x960 [ 558.729423][T18674] ? aa_sk_perm+0x82d/0x960 [ 558.729449][T18674] ? __pfx_packet_sendmsg+0x10/0x10 [ 558.729486][T18674] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 558.729524][T18674] ? aa_file_perm+0x12d/0x1630 [ 558.729553][T18674] ? aa_sock_msg_perm+0xf1/0x1b0 [ 558.729584][T18674] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 558.729605][T18674] ? __pfx_packet_sendmsg+0x10/0x10 [ 558.729635][T18674] __sock_sendmsg+0x21c/0x270 [ 558.729665][T18674] ____sys_sendmsg+0x4d7/0x810 [ 558.729696][T18674] ? __pfx_____sys_sendmsg+0x10/0x10 [ 558.729728][T18674] ? import_iovec+0x73/0xa0 [ 558.729755][T18674] ___sys_sendmsg+0x2a5/0x360 [ 558.729775][T18674] ? __lock_acquire+0x6b5/0x2cf0 [ 558.729803][T18674] ? __pfx____sys_sendmsg+0x10/0x10 [ 558.729864][T18674] ? __fget_files+0x2a/0x420 [ 558.729890][T18674] ? __fget_files+0x3a0/0x420 [ 558.729929][T18674] __x64_sys_sendmsg+0x1bd/0x2a0 [ 558.729954][T18674] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 558.729987][T18674] ? __pfx_ksys_write+0x10/0x10 [ 558.730021][T18674] do_syscall_64+0xe2/0xf80 [ 558.730042][T18674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.730063][T18674] ? trace_irq_disable+0x37/0x100 [ 558.730092][T18674] ? clear_bhb_loop+0x60/0xb0 [ 558.730119][T18674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.730141][T18674] RIP: 0033:0x7f2e0c99acb9 [ 558.730178][T18674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.730198][T18674] RSP: 002b:00007f2e0d79f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 558.730221][T18674] RAX: ffffffffffffffda RBX: 00007f2e0cc15fa0 RCX: 00007f2e0c99acb9 [ 558.730238][T18674] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007 [ 558.730253][T18674] RBP: 00007f2e0d79f090 R08: 0000000000000000 R09: 0000000000000000 [ 558.730267][T18674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.730281][T18674] R13: 00007f2e0cc16038 R14: 00007f2e0cc15fa0 R15: 00007fffebe4f818 [ 558.730317][T18674] [ 559.402215][T18700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2847'. [ 559.650173][T18713] netlink: 'syz.1.2851': attribute type 5 has an invalid length. [ 559.657982][T18713] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2851'. [ 559.716719][T18716] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2850'. [ 559.744477][T18716] block nbd0: reconnected socket [ 559.767333][T18710] netlink: 'syz.0.2850': attribute type 10 has an invalid length. [ 559.785277][T18716] nbd: socks must be embedded in a SOCK_ITEM attr [ 559.800820][ T5850] block nbd0: Receive control failed (result -32) [ 560.322504][T18752] 0ªî{X¹¦: renamed from gretap0 [ 560.330928][T18752] 0ªî{X¹¦: entered allmulticast mode [ 560.338527][T18752] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 560.452204][T18761] FAULT_INJECTION: forcing a failure. [ 560.452204][T18761] name failslab, interval 1, probability 0, space 0, times 0 [ 560.485317][T18761] CPU: 0 UID: 0 PID: 18761 Comm: syz.3.2858 Not tainted syzkaller #0 PREEMPT(full) [ 560.485348][T18761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 560.485362][T18761] Call Trace: [ 560.485372][T18761] [ 560.485381][T18761] dump_stack_lvl+0xe8/0x150 [ 560.485416][T18761] should_fail_ex+0x412/0x560 [ 560.485453][T18761] should_failslab+0xa8/0x100 [ 560.485483][T18761] __kmalloc_noprof+0xde/0x7e0 [ 560.485504][T18761] ? rcu_is_watching+0x15/0xb0 [ 560.485531][T18761] ? security_sk_alloc+0x52/0x360 [ 560.485557][T18761] security_sk_alloc+0x52/0x360 [ 560.485581][T18761] sk_prot_alloc+0x101/0x210 [ 560.485619][T18761] sk_alloc+0x3a/0x390 [ 560.485656][T18761] inet_create+0x7a0/0x1000 [ 560.485688][T18761] ? inet_create+0x9c/0x1000 [ 560.485730][T18761] __sock_create+0x4b2/0x9d0 [ 560.485771][T18761] mptcp_subflow_create_socket+0xfb/0x800 [ 560.485803][T18761] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 560.485834][T18761] ? do_raw_spin_lock+0x12b/0x2f0 [ 560.485862][T18761] ? lock_sock_nested+0x6a/0x100 [ 560.485892][T18761] __mptcp_nmpc_sk+0x155/0x790 [ 560.485920][T18761] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 560.485949][T18761] ? __local_bh_enable_ip+0xd0/0x130 [ 560.485979][T18761] mptcp_getsockopt+0x12fa/0x1ed0 [ 560.486009][T18761] ? 0xffffffff81000000 [ 560.486031][T18761] ? __pfx_process_measurement+0x10/0x10 [ 560.486055][T18761] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 560.486084][T18761] ? __lock_acquire+0x6b5/0x2cf0 [ 560.486115][T18761] ? __lock_acquire+0x6b5/0x2cf0 [ 560.486142][T18761] ? __lock_acquire+0x6b5/0x2cf0 [ 560.486176][T18761] ? unwind_next_frame+0xa5/0x23c0 [ 560.486219][T18761] ? __lock_acquire+0x6b5/0x2cf0 [ 560.486263][T18761] ? __lock_acquire+0x6b5/0x2cf0 [ 560.486295][T18761] ? aa_file_perm+0x12d/0x1630 [ 560.486349][T18761] ? __lock_acquire+0x6b5/0x2cf0 [ 560.486376][T18761] ? _parse_integer_limit+0x1ae/0x1f0 [ 560.486405][T18761] ? aa_label_sk_perm+0x529/0x6d0 [ 560.486436][T18761] ? kstrtoull+0x12f/0x1d0 [ 560.486466][T18761] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 560.486494][T18761] ? kstrtouint+0x6e/0xe0 [ 560.486524][T18761] ? get_pid_task+0x20/0x1f0 [ 560.486560][T18761] ? __lock_acquire+0x6b5/0x2cf0 [ 560.486603][T18761] ? aa_sk_perm+0x15a/0x960 [ 560.486636][T18761] ? __might_fault+0xaf/0x130 [ 560.486670][T18761] ? __might_fault+0xaf/0x130 [ 560.486727][T18761] ? sock_common_getsockopt+0x2d/0xb0 [ 560.486755][T18761] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 560.486785][T18761] do_sock_getsockopt+0x2d3/0x3f0 [ 560.486821][T18761] ? 0xffffffff81000000 [ 560.486840][T18761] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 560.486875][T18761] ? __fget_files+0x3a0/0x420 [ 560.486903][T18761] ? __fget_files+0x2a/0x420 [ 560.486937][T18761] __x64_sys_getsockopt+0x1a4/0x240 [ 560.486972][T18761] ? 0xffffffff81000000 [ 560.486997][T18761] do_syscall_64+0xe2/0xf80 [ 560.487018][T18761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.487039][T18761] ? trace_irq_disable+0x37/0x100 [ 560.487069][T18761] ? clear_bhb_loop+0x60/0xb0 [ 560.487096][T18761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.487117][T18761] RIP: 0033:0x7fbd8299acb9 [ 560.487136][T18761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.487156][T18761] RSP: 002b:00007fbd838db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 560.487178][T18761] RAX: ffffffffffffffda RBX: 00007fbd82c15fa0 RCX: 00007fbd8299acb9 [ 560.487195][T18761] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000003 [ 560.487207][T18761] RBP: 00007fbd838db090 R08: 0000200000000000 R09: 0000000000000000 [ 560.487234][T18761] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.487248][T18761] R13: 00007fbd82c16038 R14: 00007fbd82c15fa0 R15: 00007ffc69ad55d8 [ 560.487269][T18761] ? 0xffffffff81000000 [ 560.487297][T18761] [ 561.130456][T18773] FAULT_INJECTION: forcing a failure. [ 561.130456][T18773] name failslab, interval 1, probability 0, space 0, times 0 [ 561.164247][T18773] CPU: 0 UID: 0 PID: 18773 Comm: syz.0.2861 Not tainted syzkaller #0 PREEMPT(full) [ 561.164277][T18773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 561.164291][T18773] Call Trace: [ 561.164300][T18773] [ 561.164310][T18773] dump_stack_lvl+0xe8/0x150 [ 561.164345][T18773] should_fail_ex+0x412/0x560 [ 561.164381][T18773] should_failslab+0xa8/0x100 [ 561.164416][T18773] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 561.164451][T18773] ? __alloc_skb+0x18b/0x710 [ 561.164482][T18773] ? __alloc_skb+0x1d0/0x710 [ 561.164510][T18773] ? __local_bh_enable_ip+0xd0/0x130 [ 561.164536][T18773] ? __alloc_skb+0x18b/0x710 [ 561.164568][T18773] __alloc_skb+0x1d0/0x710 [ 561.164613][T18773] netlink_ack+0x146/0xa50 [ 561.164637][T18773] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 561.164687][T18773] netlink_rcv_skb+0x2b6/0x4b0 [ 561.164714][T18773] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 561.164748][T18773] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 561.164786][T18773] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.164821][T18773] netlink_unicast+0x80f/0x9b0 [ 561.164853][T18773] ? __pfx_netlink_unicast+0x10/0x10 [ 561.164879][T18773] ? netlink_sendmsg+0x650/0xb40 [ 561.164903][T18773] ? skb_put+0x11b/0x210 [ 561.164938][T18773] netlink_sendmsg+0x813/0xb40 [ 561.164983][T18773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.165012][T18773] ? aa_file_perm+0x12d/0x1630 [ 561.165048][T18773] ? aa_sock_msg_perm+0xf1/0x1b0 [ 561.165079][T18773] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 561.165100][T18773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.165129][T18773] __sock_sendmsg+0x21c/0x270 [ 561.165159][T18773] ____sys_sendmsg+0x4d7/0x810 [ 561.165181][T18773] ? __might_fault+0xaf/0x130 [ 561.165220][T18773] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.165251][T18773] ? import_iovec+0x73/0xa0 [ 561.165279][T18773] ___sys_sendmsg+0x2a5/0x360 [ 561.165298][T18773] ? __lock_acquire+0x6b5/0x2cf0 [ 561.165328][T18773] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.165388][T18773] ? __fget_files+0x2a/0x420 [ 561.165415][T18773] ? __fget_files+0x3a0/0x420 [ 561.165454][T18773] __x64_sys_sendmsg+0x1bd/0x2a0 [ 561.165480][T18773] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 561.165513][T18773] ? __pfx_ksys_write+0x10/0x10 [ 561.165548][T18773] do_syscall_64+0xe2/0xf80 [ 561.165570][T18773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.165592][T18773] ? trace_irq_disable+0x37/0x100 [ 561.165622][T18773] ? clear_bhb_loop+0x60/0xb0 [ 561.165650][T18773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.165672][T18773] RIP: 0033:0x7efeadd9acb9 [ 561.165693][T18773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.165714][T18773] RSP: 002b:00007efeaec9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.165737][T18773] RAX: ffffffffffffffda RBX: 00007efeae015fa0 RCX: 00007efeadd9acb9 [ 561.165754][T18773] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 561.165769][T18773] RBP: 00007efeaec9d090 R08: 0000000000000000 R09: 0000000000000000 [ 561.165783][T18773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.165796][T18773] R13: 00007efeae016038 R14: 00007efeae015fa0 R15: 00007ffe9212a068 [ 561.165831][T18773] [ 561.559283][T18777] netlink: 'syz.3.2863': attribute type 5 has an invalid length. [ 561.601616][T18781] lo speed is unknown, defaulting to 1000 [ 562.565592][T18811] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input59 [ 562.621977][T18820] lo speed is unknown, defaulting to 1000 [ 563.010688][T18831] syzkaller0: entered promiscuous mode [ 563.052359][T18831] syzkaller0: entered allmulticast mode [ 563.061677][T18845] syzkaller1: entered promiscuous mode [ 563.067643][T18845] syzkaller1: entered allmulticast mode [ 563.090265][T18850] __nla_validate_parse: 5 callbacks suppressed [ 563.090504][T18850] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2879'. [ 563.362039][T18849] lo speed is unknown, defaulting to 1000 [ 563.422678][T18866] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2882'. [ 563.563606][T18870] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2884'. [ 563.923371][T18882] syzkaller0: entered promiscuous mode [ 563.947643][T18886] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2889'. [ 563.979747][T18882] syzkaller0: entered allmulticast mode [ 563.985992][T18888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2888'. [ 564.101600][T18896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2891'. [ 564.593173][T18915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2896'. [ 564.715628][T18921] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2897'. [ 564.734998][T18921] block nbd0: reconnected socket [ 564.756146][T18921] nbd: socks must be embedded in a SOCK_ITEM attr [ 564.765805][T18921] netlink: 'syz.4.2897': attribute type 10 has an invalid length. [ 564.813552][T18917] siw: device registration error -23 [ 564.828761][ T5850] block nbd0: Receive control failed (result -32) [ 564.961903][T18929] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2900'. [ 565.178976][T18937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2902'. [ 565.417171][T18939] syzkaller0: entered promiscuous mode [ 565.428997][T18939] syzkaller0: entered allmulticast mode [ 565.851661][T18946] lo speed is unknown, defaulting to 1000 [ 567.934774][T18970] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 567.944422][T18970] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 567.954617][T18970] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 567.966461][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.972925][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.140563][T18988] __nla_validate_parse: 4 callbacks suppressed [ 568.140585][T18988] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2913'. [ 568.276921][T18991] Illegal XDP return value 4294967274 on prog (id 1301) dev N/A, expect packet loss! [ 568.333588][T18994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2915'. [ 568.509838][T18994] hsr_slave_1 (unregistering): left promiscuous mode [ 568.614332][T19014] netlink: 'syz.3.2918': attribute type 13 has an invalid length. [ 568.638894][T19014] netlink: 'syz.3.2918': attribute type 17 has an invalid length. [ 569.277125][T19014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.307491][T19014] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.365542][T19014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 569.407626][ T5986] lo speed is unknown, defaulting to 1000 [ 569.459142][ T5986] syz2: Port: 1 Link ACTIVE [ 569.569896][T19040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2922'. [ 569.607251][T19042] netlink: 'syz.2.2924': attribute type 5 has an invalid length. [ 569.617419][T19042] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2924'. [ 569.873635][T19058] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2926'. [ 570.016126][T19044] syzkaller0: entered promiscuous mode [ 570.039758][T19044] syzkaller0: entered allmulticast mode [ 570.092624][T19071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2928'. [ 570.180131][T19076] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2930'. [ 570.465132][T19089] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2933'. [ 571.582448][T19103] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2934'. [ 571.672621][T19106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2936'. [ 571.892576][T19112] lo speed is unknown, defaulting to 1000 [ 571.962372][T19121] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 571.977036][T19123] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 572.305175][T19145] Unsupported ieee802154 address type: 0 [ 572.977037][T19167] bond1: option tlb_dynamic_lb: invalid value (64) [ 572.986392][T19167] bond1 (unregistering): Released all slaves [ 573.042880][T19172] geneve2: entered promiscuous mode [ 573.048352][T19172] geneve2: entered allmulticast mode [ 573.263543][T19179] netlink: 'syz.3.2954': attribute type 11 has an invalid length. [ 573.300223][T19179] netlink: 'syz.3.2954': attribute type 21 has an invalid length. [ 573.396266][T19183] syzkaller0: entered promiscuous mode [ 573.419009][T19183] syzkaller0: entered allmulticast mode [ 573.615365][T19196] __nla_validate_parse: 5 callbacks suppressed [ 573.615401][T19196] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2959'. [ 573.875518][T19203] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input60 [ 573.919081][T19196] lo speed is unknown, defaulting to 1000 [ 574.065533][T19219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2965'. [ 574.237567][T19226] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2966'. [ 574.287002][T19226] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2966'. [ 574.473026][T19235] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2968'. [ 574.682289][T19246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2972'. [ 574.829815][T19244] netlink: 'syz.1.2972': attribute type 13 has an invalid length. [ 574.980617][T19256] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2973'. [ 575.011409][T19256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2973'. [ 575.040130][T19256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2973'. [ 575.205011][T19265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2976'. [ 575.580819][T19273] nbd156: detected capacity change from 0 to 127 [ 575.590698][ T5850] block nbd156: Receive control failed (result -104) [ 575.604528][T19277] can: request_module (can-proto-0) failed. [ 576.012637][T19293] vlan2: entered promiscuous mode [ 576.062550][T19300] nbd: must specify at least one socket [ 576.207659][T19306] vlan3: entered promiscuous mode [ 576.474702][T19321] lo speed is unknown, defaulting to 1000 [ 576.625255][T19329] xt_CT: No such helper "netbios-ns" [ 576.943623][T19352] netlink: 'syz.2.2995': attribute type 11 has an invalid length. [ 577.852029][T19398] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input61 [ 577.940292][T19389] lo speed is unknown, defaulting to 1000 [ 578.095886][T19401] veth37: entered allmulticast mode [ 578.194297][T19405] vlan2: entered promiscuous mode [ 578.257539][T19395] lo speed is unknown, defaulting to 1000 [ 578.304009][T19410] netlink: 'syz.1.3005': attribute type 11 has an invalid length. [ 578.902178][T19424] x_tables: unsorted underflow at hook 1 [ 578.912711][ T7184] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 2 seconds [ 578.926918][ T7184] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 2 seconds [ 578.938266][ T7184] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 2 seconds [ 578.950368][ T7184] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 2 seconds [ 579.063774][T19429] tipc: Enabled bearer , priority 0 [ 579.075093][T19429] syzkaller0: entered promiscuous mode [ 579.081034][T19429] syzkaller0: entered allmulticast mode [ 579.096162][T19432] __nla_validate_parse: 25 callbacks suppressed [ 579.096181][T19432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3012'. [ 579.115166][T19427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3011'. [ 579.149244][T19428] tipc: Resetting bearer [ 579.181278][T19428] tipc: Disabling bearer [ 579.189169][T19437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3012'. [ 579.393448][T19447] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3017'. [ 579.541469][T19457] netlink: zone id is out of range [ 579.566729][T19457] netlink: zone id is out of range [ 579.604605][T19447] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input62 [ 579.746677][T19453] lo speed is unknown, defaulting to 1000 [ 580.103209][ T7184] block nbd85: Possible stuck request ffff88804da58000: control (read@0,1024B). Runtime 150 seconds [ 580.115838][ T7184] block nbd85: Possible stuck request ffff88804da58200: control (read@1024,1024B). Runtime 150 seconds [ 580.127412][ T7184] block nbd85: Possible stuck request ffff88804da58400: control (read@2048,1024B). Runtime 150 seconds [ 580.139274][ T7184] block nbd85: Possible stuck request ffff88804da58600: control (read@3072,1024B). Runtime 150 seconds [ 580.527251][T19493] lo speed is unknown, defaulting to 1000 [ 580.609932][T19507] FAULT_INJECTION: forcing a failure. [ 580.609932][T19507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.631417][T19507] CPU: 1 UID: 0 PID: 19507 Comm: syz.0.3032 Not tainted syzkaller #0 PREEMPT(full) [ 580.631447][T19507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 580.631461][T19507] Call Trace: [ 580.631471][T19507] [ 580.631480][T19507] dump_stack_lvl+0xe8/0x150 [ 580.631516][T19507] should_fail_ex+0x412/0x560 [ 580.631561][T19507] _copy_to_user+0x31/0xb0 [ 580.631587][T19507] bpf_test_finish+0x22c/0x6b0 [ 580.631624][T19507] ? __pfx_bpf_test_finish+0x10/0x10 [ 580.631650][T19507] ? eth_type_trans+0x35e/0x6d0 [ 580.631688][T19507] bpf_prog_test_run_skb+0x114f/0x1d50 [ 580.631730][T19507] ? __fget_files+0x2a/0x420 [ 580.631757][T19507] ? __fget_files+0x3a0/0x420 [ 580.631783][T19507] ? __fget_files+0x2a/0x420 [ 580.631816][T19507] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 580.631842][T19507] bpf_prog_test_run+0x2c7/0x340 [ 580.631880][T19507] __sys_bpf+0x5cb/0x920 [ 580.631913][T19507] ? __pfx___sys_bpf+0x10/0x10 [ 580.631960][T19507] ? ksys_write+0x242/0x270 [ 580.631984][T19507] ? __pfx_ksys_write+0x10/0x10 [ 580.632014][T19507] __x64_sys_bpf+0x7c/0x90 [ 580.632042][T19507] do_syscall_64+0xe2/0xf80 [ 580.632063][T19507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.632084][T19507] ? trace_irq_disable+0x37/0x100 [ 580.632114][T19507] ? clear_bhb_loop+0x60/0xb0 [ 580.632140][T19507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.632161][T19507] RIP: 0033:0x7efeadd9acb9 [ 580.632180][T19507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.632199][T19507] RSP: 002b:00007efeaec9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 580.632223][T19507] RAX: ffffffffffffffda RBX: 00007efeae015fa0 RCX: 00007efeadd9acb9 [ 580.632240][T19507] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 580.632254][T19507] RBP: 00007efeaec9d090 R08: 0000000000000000 R09: 0000000000000000 [ 580.632269][T19507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.632282][T19507] R13: 00007efeae016038 R14: 00007efeae015fa0 R15: 00007ffe9212a068 [ 580.632317][T19507] [ 580.905656][T19515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3033'. [ 581.007622][T19514] syzkaller0: entered promiscuous mode [ 581.014103][T19504] nbd157: detected capacity change from 0 to 127 [ 581.022918][T19509] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3031'. [ 581.043885][T19514] syzkaller0: entered allmulticast mode [ 581.060142][T19504] netlink: 'syz.1.3031': attribute type 10 has an invalid length. [ 581.070729][T19509] block nbd0: reconnected socket [ 581.075734][T19509] nbd: socks must be embedded in a SOCK_ITEM attr [ 581.100701][T19521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3035'. [ 581.129352][ T5850] block nbd157: Receive control failed (result -104) [ 581.136551][ T5840] block nbd0: Receive control failed (result -32) [ 581.503669][T19540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3038'. [ 581.514509][T19537] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3037'. [ 581.515610][T19543] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3039'. [ 581.535470][T19544] netlink: 'syz.1.3037': attribute type 10 has an invalid length. [ 581.570452][T19537] block nbd0: reconnected socket [ 581.600323][T19537] nbd: socks must be embedded in a SOCK_ITEM attr [ 581.699438][T19528] siw: device registration error -23 [ 581.718395][ T5850] block nbd0: Receive control failed (result -32) [ 581.996163][T19564] netlink: zone id is out of range [ 582.006268][T19564] netlink: zone id is out of range [ 582.273231][ T7184] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 4 seconds [ 582.285644][ T7184] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 4 seconds [ 582.297366][ T7184] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 4 seconds [ 582.309495][ T7184] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 4 seconds [ 582.338217][T19569] block nbd0: reconnected socket [ 582.356366][T19569] nbd: socks must be embedded in a SOCK_ITEM attr [ 582.382856][T19569] netlink: 'syz.2.3044': attribute type 10 has an invalid length. [ 582.394713][T19569] siw: device registration error -23 [ 582.407213][ T5850] block nbd0: Receive control failed (result -32) [ 582.437863][T19573] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input63 [ 582.623474][T19571] lo speed is unknown, defaulting to 1000 [ 582.823604][T19584] nbd158: detected capacity change from 0 to 127 [ 582.850837][T19593] netlink: 'syz.2.3047': attribute type 10 has an invalid length. [ 582.886248][T19588] block nbd0: reconnected socket [ 582.893097][T19588] nbd: socks must be embedded in a SOCK_ITEM attr [ 582.910836][ T5850] block nbd158: Receive control failed (result -104) [ 582.932269][ T5840] block nbd0: Receive control failed (result -32) [ 583.587696][T19621] nbd: must specify at least one socket [ 583.950020][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 584.090379][T19647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.134269][T19647] __nla_validate_parse: 6 callbacks suppressed [ 584.134288][T19647] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3064'. [ 584.227175][T19656] netlink: 'syz.0.3062': attribute type 10 has an invalid length. [ 584.287127][T19657] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input64 [ 584.299330][T19649] nbd159: detected capacity change from 0 to 127 [ 584.330054][T19652] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3062'. [ 584.341367][ T56] nbd_xmit_timeout: 2 callbacks suppressed [ 584.341390][ T56] block nbd157: Connection timed out, retrying (0/1 alive) [ 584.356991][T16705] block nbd157: Dead connection, failed to find a fallback [ 584.364776][T16705] block nbd157: shutting down sockets [ 584.370685][ T56] block nbd157: Connection timed out, retrying (0/1 alive) [ 584.378232][T16705] blk_print_req_error: 434 callbacks suppressed [ 584.378251][T16705] I/O error, dev nbd157, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 584.389426][T19652] block nbd0: reconnected socket [ 584.394502][ T56] block nbd157: Connection timed out, retrying (0/1 alive) [ 584.406592][ T56] block nbd157: Connection timed out, retrying (0/1 alive) [ 584.414014][T16705] buffer_io_error: 434 callbacks suppressed [ 584.414033][T16705] Buffer I/O error on dev nbd157, logical block 0, async page read [ 584.428008][T16705] I/O error, dev nbd157, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 584.439630][T16705] Buffer I/O error on dev nbd157, logical block 3, async page read [ 584.447614][T16705] I/O error, dev nbd157, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 584.457540][T16705] Buffer I/O error on dev nbd157, logical block 2, async page read [ 584.465572][T16705] I/O error, dev nbd157, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 584.466721][T19652] nbd: socks must be embedded in a SOCK_ITEM attr [ 584.475864][T16705] Buffer I/O error on dev nbd157, logical block 1, async page read [ 584.490163][T14815] I/O error, dev nbd157, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 584.500581][T14815] Buffer I/O error on dev nbd157, logical block 0, async page read [ 584.508602][T14815] I/O error, dev nbd157, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 584.518409][T14815] Buffer I/O error on dev nbd157, logical block 1, async page read [ 584.534063][T14815] I/O error, dev nbd157, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 584.562420][T14815] Buffer I/O error on dev nbd157, logical block 2, async page read [ 584.571704][T14815] I/O error, dev nbd157, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 584.581533][T14815] Buffer I/O error on dev nbd157, logical block 3, async page read [ 584.590023][T14815] I/O error, dev nbd157, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 584.600237][T14815] Buffer I/O error on dev nbd157, logical block 0, async page read [ 584.601343][ T5850] block nbd0: Receive control failed (result -32) [ 584.608583][T14815] I/O error, dev nbd157, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 584.615040][ T5840] block nbd159: Receive control failed (result -104) [ 584.638974][T14815] Buffer I/O error on dev nbd157, logical block 1, async page read [ 584.647705][T14815] ldm_validate_partition_table(): Disk read failed. [ 584.661171][T14815] Dev nbd157: unable to read RDB block 0 [ 584.667481][T14815] nbd157: unable to read partition table [ 584.685815][T14815] ldm_validate_partition_table(): Disk read failed. [ 584.719360][T14815] Dev nbd157: unable to read RDB block 0 [ 584.725735][T14815] nbd157: unable to read partition table [ 584.820797][T19668] syz_tun: entered promiscuous mode [ 584.836141][T19668] syz_tun: refused to change device tx_queue_len [ 584.858228][T19668] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 584.930365][T19673] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3069'. [ 584.982922][T19674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3069'. [ 585.283337][T19686] FAULT_INJECTION: forcing a failure. [ 585.283337][T19686] name failslab, interval 1, probability 0, space 0, times 0 [ 585.298351][T19686] CPU: 1 UID: 0 PID: 19686 Comm: syz.3.3072 Not tainted syzkaller #0 PREEMPT(full) [ 585.298382][T19686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 585.298396][T19686] Call Trace: [ 585.298406][T19686] [ 585.298415][T19686] dump_stack_lvl+0xe8/0x150 [ 585.298450][T19686] should_fail_ex+0x412/0x560 [ 585.298487][T19686] should_failslab+0xa8/0x100 [ 585.298517][T19686] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 585.298554][T19686] ? __alloc_skb+0x1d0/0x710 [ 585.298583][T19686] ? __local_bh_enable_ip+0xd0/0x130 [ 585.298614][T19686] ? __alloc_skb+0x18b/0x710 [ 585.298645][T19686] __alloc_skb+0x1d0/0x710 [ 585.298683][T19686] netlink_ack+0x146/0xa50 [ 585.298705][T19686] ? __pfx_genl_rcv_msg+0x10/0x10 [ 585.298749][T19686] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 585.298772][T19686] ? __pfx_nl80211_post_doit+0x10/0x10 [ 585.298800][T19686] ? __pfx_ref_tracker_free+0x10/0x10 [ 585.298839][T19686] netlink_rcv_skb+0x2b6/0x4b0 [ 585.298866][T19686] ? __pfx_genl_rcv_msg+0x10/0x10 [ 585.298898][T19686] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 585.298920][T19686] ? genl_rcv+0x19/0x40 [ 585.298968][T19686] ? down_read+0x272/0x2e0 [ 585.298997][T19686] ? genl_rcv+0xd/0x40 [ 585.299029][T19686] genl_rcv+0x28/0x40 [ 585.299058][T19686] netlink_unicast+0x80f/0x9b0 [ 585.299088][T19686] ? __pfx_netlink_unicast+0x10/0x10 [ 585.299112][T19686] ? netlink_sendmsg+0x650/0xb40 [ 585.299134][T19686] ? skb_put+0x11b/0x210 [ 585.299168][T19686] netlink_sendmsg+0x813/0xb40 [ 585.299204][T19686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.299231][T19686] ? aa_file_perm+0x12d/0x1630 [ 585.299260][T19686] ? aa_sock_msg_perm+0xf1/0x1b0 [ 585.299290][T19686] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 585.299310][T19686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 585.299336][T19686] __sock_sendmsg+0x21c/0x270 [ 585.299365][T19686] ____sys_sendmsg+0x4d7/0x810 [ 585.299384][T19686] ? __might_fault+0xaf/0x130 [ 585.299421][T19686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 585.299451][T19686] ? import_iovec+0x73/0xa0 [ 585.299483][T19686] ___sys_sendmsg+0x2a5/0x360 [ 585.299503][T19686] ? __lock_acquire+0x6b5/0x2cf0 [ 585.299548][T19686] ? __pfx____sys_sendmsg+0x10/0x10 [ 585.299610][T19686] ? __fget_files+0x2a/0x420 [ 585.299636][T19686] ? __fget_files+0x3a0/0x420 [ 585.299674][T19686] __x64_sys_sendmsg+0x1bd/0x2a0 [ 585.299699][T19686] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 585.299732][T19686] ? __pfx_ksys_write+0x10/0x10 [ 585.299767][T19686] do_syscall_64+0xe2/0xf80 [ 585.299787][T19686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.299807][T19686] ? trace_irq_disable+0x37/0x100 [ 585.299835][T19686] ? clear_bhb_loop+0x60/0xb0 [ 585.299862][T19686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.299883][T19686] RIP: 0033:0x7fbd8299acb9 [ 585.299903][T19686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.299922][T19686] RSP: 002b:00007fbd838db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 585.299945][T19686] RAX: ffffffffffffffda RBX: 00007fbd82c15fa0 RCX: 00007fbd8299acb9 [ 585.299961][T19686] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 585.299983][T19686] RBP: 00007fbd838db090 R08: 0000000000000000 R09: 0000000000000000 [ 585.299997][T19686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.300009][T19686] R13: 00007fbd82c16038 R14: 00007fbd82c15fa0 R15: 00007ffc69ad55d8 [ 585.300043][T19686] [ 585.660666][T19692] syzkaller0: entered promiscuous mode [ 585.666238][T19692] syzkaller0: entered allmulticast mode [ 585.801528][ T7184] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 6 seconds [ 585.812642][ T7184] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 6 seconds [ 585.824090][ T7184] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 6 seconds [ 585.835615][ T7184] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 6 seconds [ 586.027755][T19705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3077'. [ 586.188237][T16705] block nbd158: Connection timed out, retrying (0/1 alive) [ 586.196174][T16705] block nbd158: Connection timed out, retrying (0/1 alive) [ 586.204114][ T56] block nbd158: Dead connection, failed to find a fallback [ 586.213664][ T56] block nbd158: shutting down sockets [ 586.222229][T16705] block nbd158: Connection timed out, retrying (0/1 alive) [ 586.230091][T16705] block nbd158: Connection timed out, retrying (0/1 alive) [ 586.238403][T14204] ldm_validate_partition_table(): Disk read failed. [ 586.246622][T14204] Dev nbd158: unable to read RDB block 0 [ 586.253148][T14204] nbd158: unable to read partition table [ 586.262958][T19717] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3077'. [ 586.312319][T14204] ldm_validate_partition_table(): Disk read failed. [ 586.329618][T19708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3078'. [ 586.351898][T14204] Dev nbd158: unable to read RDB block 0 [ 586.373084][T14204] nbd158: unable to read partition table [ 586.405313][T19717] vlan2: entered promiscuous mode [ 586.441572][T19723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3081'. [ 586.711046][T19733] netlink: 'syz.2.3084': attribute type 3 has an invalid length. [ 586.732291][T19733] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3084'. [ 586.839311][T14815] block nbd0: Dead connection, failed to find a fallback [ 587.047469][T19744] nbd: socks must be embedded in a SOCK_ITEM attr [ 587.123993][T19756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 587.638908][ T7184] block nbd159: Connection timed out, retrying (0/1 alive) [ 587.646426][ T7184] block nbd159: Connection timed out, retrying (0/1 alive) [ 587.654151][ T95] block nbd159: Dead connection, failed to find a fallback [ 587.661535][ T95] block nbd159: shutting down sockets [ 587.668238][ T5851] ldm_validate_partition_table(): Disk read failed. [ 587.703296][ T5851] Dev nbd159: unable to read RDB block 0 [ 587.732180][ T5851] nbd159: unable to read partition table [ 587.862943][ T5851] ldm_validate_partition_table(): Disk read failed. [ 587.872215][ T5851] Dev nbd159: unable to read RDB block 0 [ 587.878606][ T5851] nbd159: unable to read partition table [ 588.802324][T19797] lo speed is unknown, defaulting to 1000 [ 588.883450][T19808] netlink: 'syz.0.3102': attribute type 6 has an invalid length. [ 589.100008][T19819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3107'. [ 589.148982][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 8 seconds [ 589.159901][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 8 seconds [ 589.171161][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 8 seconds [ 589.182349][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 8 seconds [ 589.255912][T19817] lo speed is unknown, defaulting to 1000 [ 589.265756][T19824] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3109'. [ 589.454778][T19830] lo speed is unknown, defaulting to 1000 [ 589.564347][T19836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3113'. [ 589.648712][T19833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3112'. [ 589.658195][T19833] nbd: nbd64 already in use [ 589.806298][T19845] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3116'. [ 589.855153][T19849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3117'. [ 589.874934][T19851] netlink: 'syz.3.3118': attribute type 3 has an invalid length. [ 589.906193][T19851] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3118'. [ 590.093410][T19856] lo speed is unknown, defaulting to 1000 [ 590.143255][T19849] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3117'. [ 590.288336][T19849] vlan3: entered promiscuous mode [ 590.297612][T19849] bond0: entered promiscuous mode [ 591.515617][T19867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3120'. [ 591.544949][T19875] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3121'. [ 592.499127][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 10 seconds [ 592.510282][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 10 seconds [ 592.521529][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 10 seconds [ 592.532753][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 10 seconds [ 594.319022][ T5203] udevd[5203]: worker [5852] /devices/virtual/block/nbd85 is taking a long time [ 595.868885][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 12 seconds [ 595.879770][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 12 seconds [ 595.890951][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 12 seconds [ 595.902171][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 12 seconds [ 599.228937][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 14 seconds [ 599.239882][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 14 seconds [ 599.251039][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 14 seconds [ 599.262147][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 14 seconds [ 602.579028][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 16 seconds [ 602.590016][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 16 seconds [ 602.601174][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 16 seconds [ 602.612529][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 16 seconds [ 604.965834][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 604.974501][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 604.982700][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 604.990843][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 604.998505][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 605.039647][T19884] lo speed is unknown, defaulting to 1000 [ 605.160461][T19884] chnl_net:caif_netlink_parms(): no params data found [ 605.238414][T19884] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.245801][T19884] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.253406][T19884] bridge_slave_0: entered allmulticast mode [ 605.261165][T19884] bridge_slave_0: entered promiscuous mode [ 605.269909][T19884] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.277078][T19884] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.284521][T19884] bridge_slave_1: entered allmulticast mode [ 605.293820][T19884] bridge_slave_1: entered promiscuous mode [ 605.323480][T19884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.336180][T19884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.367416][T19884] team0: Port device team_slave_0 added [ 605.375723][T19884] team0: Port device team_slave_1 added [ 605.402678][T19884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.410040][T19884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.436026][T19884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.448262][T19884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.455326][T19884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.481414][T19884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.527534][T19884] hsr_slave_0: entered promiscuous mode [ 605.534107][T19884] hsr_slave_1: entered promiscuous mode [ 605.544133][T19884] debugfs: 'hsr0' already exists in 'hsr' [ 605.549977][T19884] Cannot create hsr debugfs directory [ 605.948845][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 18 seconds [ 605.959932][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 18 seconds [ 605.971162][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 18 seconds [ 605.982822][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 18 seconds [ 606.107526][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 606.119499][ T5840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 606.126781][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 606.135847][T19897] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 606.136396][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 606.154253][T19897] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 606.161580][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 606.172305][T19897] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 606.172463][ T5840] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 606.189360][T19897] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 606.260628][T19895] lo speed is unknown, defaulting to 1000 [ 606.268103][T19894] lo speed is unknown, defaulting to 1000 [ 606.588579][ T52] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 606.599673][ T52] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 606.609142][ T52] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 606.617207][ T52] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 606.625964][ T52] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 606.705832][T19894] chnl_net:caif_netlink_parms(): no params data found [ 606.769445][ T5840] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 606.779900][ T5840] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 606.788238][ T5840] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 606.796825][ T5840] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 606.804981][ T5840] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 606.808862][T19905] lo speed is unknown, defaulting to 1000 [ 606.821778][T19895] chnl_net:caif_netlink_parms(): no params data found [ 607.011354][T19894] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.018611][T19894] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.026312][T19894] bridge_slave_0: entered allmulticast mode [ 607.033807][T19894] bridge_slave_0: entered promiscuous mode [ 607.057921][T19909] lo speed is unknown, defaulting to 1000 [ 607.069204][ T5840] Bluetooth: hci5: command tx timeout [ 607.078060][T19894] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.085536][T19894] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.093050][T19894] bridge_slave_1: entered allmulticast mode [ 607.100807][T19894] bridge_slave_1: entered promiscuous mode [ 607.134778][T19895] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.142115][T19895] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.149795][T19895] bridge_slave_0: entered allmulticast mode [ 607.157090][T19895] bridge_slave_0: entered promiscuous mode [ 607.192201][T19895] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.199643][T19895] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.206872][T19895] bridge_slave_1: entered allmulticast mode [ 607.214634][T19895] bridge_slave_1: entered promiscuous mode [ 607.254974][T19894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.283165][T19894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.323915][T19895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.345024][T19894] team0: Port device team_slave_0 added [ 607.353962][T19895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.378488][T19894] team0: Port device team_slave_1 added [ 607.439389][T19895] team0: Port device team_slave_0 added [ 607.466331][T19895] team0: Port device team_slave_1 added [ 607.473888][T19894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.481019][T19894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.507303][T19894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.537371][T19894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.544491][T19894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.571013][T19894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.624694][T19895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.631822][T19895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.658580][T19895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.688431][T19895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.697301][T19895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.723756][T19895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.744120][T19905] chnl_net:caif_netlink_parms(): no params data found [ 607.840502][T19894] hsr_slave_0: entered promiscuous mode [ 607.847080][T19894] hsr_slave_1: entered promiscuous mode [ 607.853801][T19894] debugfs: 'hsr0' already exists in 'hsr' [ 607.860594][T19894] Cannot create hsr debugfs directory [ 607.944291][T19895] hsr_slave_0: entered promiscuous mode [ 607.952376][T19895] hsr_slave_1: entered promiscuous mode [ 607.958783][T19895] debugfs: 'hsr0' already exists in 'hsr' [ 607.964624][T19895] Cannot create hsr debugfs directory [ 608.026849][T19909] chnl_net:caif_netlink_parms(): no params data found [ 608.093930][T19905] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.101164][T19905] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.108424][T19905] bridge_slave_0: entered allmulticast mode [ 608.116210][T19905] bridge_slave_0: entered promiscuous mode [ 608.152390][T19905] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.159911][T19905] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.167268][T19905] bridge_slave_1: entered allmulticast mode [ 608.174897][T19905] bridge_slave_1: entered promiscuous mode [ 608.260518][ T52] Bluetooth: hci7: command tx timeout [ 608.260535][T19897] Bluetooth: hci6: command tx timeout [ 608.285475][T19905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.334467][T19905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.424958][T19909] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.432771][T19909] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.440282][T19909] bridge_slave_0: entered allmulticast mode [ 608.447907][T19909] bridge_slave_0: entered promiscuous mode [ 608.472495][T19905] team0: Port device team_slave_0 added [ 608.478412][T19909] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.485758][T19909] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.493299][T19909] bridge_slave_1: entered allmulticast mode [ 608.500906][T19909] bridge_slave_1: entered promiscuous mode [ 608.525362][T19905] team0: Port device team_slave_1 added [ 608.598233][T19905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.605432][T19905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.631697][T19905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.646149][T19909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.671089][T19905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.678062][T19905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.704582][T19905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.718964][T19909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.739842][ T52] Bluetooth: hci8: command tx timeout [ 608.780657][T19909] team0: Port device team_slave_0 added [ 608.807023][T19909] team0: Port device team_slave_1 added [ 608.843423][T19905] hsr_slave_0: entered promiscuous mode [ 608.850392][T19905] hsr_slave_1: entered promiscuous mode [ 608.856834][T19905] debugfs: 'hsr0' already exists in 'hsr' [ 608.863199][T19905] Cannot create hsr debugfs directory [ 608.892595][T19909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.900116][ T5840] Bluetooth: hci9: command tx timeout [ 608.907354][T19909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.934778][T19909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.949085][T19909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.956158][T19909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.982657][T19909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.119615][T19909] hsr_slave_0: entered promiscuous mode [ 609.126707][T19909] hsr_slave_1: entered promiscuous mode [ 609.133533][T19909] debugfs: 'hsr0' already exists in 'hsr' [ 609.139582][T19909] Cannot create hsr debugfs directory [ 609.148859][ T52] Bluetooth: hci5: command tx timeout [ 609.309560][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 20 seconds [ 609.320919][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 20 seconds [ 609.332099][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 20 seconds [ 609.343256][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 20 seconds [ 610.179336][ T95] block nbd85: Possible stuck request ffff88804da58000: control (read@0,1024B). Runtime 180 seconds [ 610.190536][ T95] block nbd85: Possible stuck request ffff88804da58200: control (read@1024,1024B). Runtime 180 seconds [ 610.201758][ T95] block nbd85: Possible stuck request ffff88804da58400: control (read@2048,1024B). Runtime 180 seconds [ 610.213086][ T95] block nbd85: Possible stuck request ffff88804da58600: control (read@3072,1024B). Runtime 180 seconds [ 610.338854][ T5840] Bluetooth: hci6: command tx timeout [ 610.344602][ T52] Bluetooth: hci7: command tx timeout [ 610.818880][ T52] Bluetooth: hci8: command tx timeout [ 610.978853][ T52] Bluetooth: hci9: command tx timeout [ 611.218875][ T52] Bluetooth: hci5: command tx timeout [ 612.420016][ T52] Bluetooth: hci7: command tx timeout [ 612.425617][ T5840] Bluetooth: hci6: command tx timeout [ 612.478971][ T5203] udevd[5203]: worker [5852] /devices/virtual/block/nbd85 timeout; kill it [ 612.487726][ T5203] udevd[5203]: seq 20637 '/devices/virtual/block/nbd85' killed [ 612.668922][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 22 seconds [ 612.679800][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 22 seconds [ 612.691028][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 22 seconds [ 612.702141][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 22 seconds [ 612.899352][ T5840] Bluetooth: hci8: command tx timeout [ 613.059080][ T5840] Bluetooth: hci9: command tx timeout [ 613.298845][ T5840] Bluetooth: hci5: command tx timeout [ 614.498918][ T5840] Bluetooth: hci6: command tx timeout [ 614.499115][ T52] Bluetooth: hci7: command tx timeout [ 614.978884][ T52] Bluetooth: hci8: command tx timeout [ 615.138950][ T52] Bluetooth: hci9: command tx timeout [ 616.019163][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 24 seconds [ 616.030080][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 24 seconds [ 616.041740][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 24 seconds [ 616.053125][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 24 seconds [ 619.388870][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 26 seconds [ 619.399822][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 26 seconds [ 619.411122][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 26 seconds [ 619.422533][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 26 seconds [ 622.739264][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 28 seconds [ 622.750802][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 28 seconds [ 622.762218][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 28 seconds [ 622.774495][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 28 seconds [ 626.108910][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 30 seconds [ 626.119925][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 30 seconds [ 626.131173][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 30 seconds [ 626.142312][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 30 seconds [ 629.387691][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.394229][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.462899][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 32 seconds [ 629.473965][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 32 seconds [ 629.485165][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 32 seconds [ 629.496404][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 32 seconds [ 632.828879][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 34 seconds [ 632.839767][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 34 seconds [ 632.850999][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 34 seconds [ 632.862169][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 34 seconds [ 636.189210][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 36 seconds [ 636.200130][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 36 seconds [ 636.211357][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 36 seconds [ 636.222636][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 36 seconds [ 636.522809][ T5203] udevd[5203]: worker [7973] /devices/virtual/block/nbd156 is taking a long time [ 639.539124][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 38 seconds [ 639.550254][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 38 seconds [ 639.561424][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 38 seconds [ 639.572631][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 38 seconds [ 640.259370][ T95] block nbd85: Possible stuck request ffff88804da58000: control (read@0,1024B). Runtime 210 seconds [ 640.271820][ T95] block nbd85: Possible stuck request ffff88804da58200: control (read@1024,1024B). Runtime 210 seconds [ 640.284901][ T95] block nbd85: Possible stuck request ffff88804da58400: control (read@2048,1024B). Runtime 210 seconds [ 640.297272][ T95] block nbd85: Possible stuck request ffff88804da58600: control (read@3072,1024B). Runtime 210 seconds [ 642.900126][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 40 seconds [ 642.911154][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 40 seconds [ 642.922369][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 40 seconds [ 642.933616][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 40 seconds [ 646.268821][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 42 seconds [ 646.279711][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 42 seconds [ 646.290908][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 42 seconds [ 646.302148][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 42 seconds [ 648.546605][ T5203] udevd[5203]: worker [14815] /devices/virtual/block/nbd0 is taking a long time [ 649.619522][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 44 seconds [ 649.630645][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 44 seconds [ 649.641933][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 44 seconds [ 649.653365][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 44 seconds [ 652.988918][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 46 seconds [ 653.001034][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 46 seconds [ 653.012494][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 46 seconds [ 653.024662][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 46 seconds [ 656.348938][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 48 seconds [ 656.359970][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 48 seconds [ 656.371295][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 48 seconds [ 656.382459][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 48 seconds [ 659.699304][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 50 seconds [ 659.710544][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 50 seconds [ 659.721911][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 50 seconds [ 659.733304][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 50 seconds [ 663.069802][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 52 seconds [ 663.080758][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 52 seconds [ 663.092184][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 52 seconds [ 663.103427][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 52 seconds [ 665.049496][ T5840] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 665.060002][ T5840] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 665.068979][ T5840] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 665.079816][ T5840] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 665.087851][ T5840] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 665.128395][T19930] lo speed is unknown, defaulting to 1000 [ 665.261172][T19930] chnl_net:caif_netlink_parms(): no params data found [ 665.344356][T19930] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.351658][T19930] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.359078][T19930] bridge_slave_0: entered allmulticast mode [ 665.366627][T19930] bridge_slave_0: entered promiscuous mode [ 665.375616][T19930] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.383059][T19930] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.390665][T19930] bridge_slave_1: entered allmulticast mode [ 665.398387][T19930] bridge_slave_1: entered promiscuous mode [ 665.432222][T19930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.444816][T19930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.477771][T19930] team0: Port device team_slave_0 added [ 665.486164][T19930] team0: Port device team_slave_1 added [ 665.514413][T19930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.521544][T19930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.547875][T19930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.562339][T19930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.570012][T19930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.596794][T19930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.644487][T19930] hsr_slave_0: entered promiscuous mode [ 665.651138][T19930] hsr_slave_1: entered promiscuous mode [ 665.657610][T19930] debugfs: 'hsr0' already exists in 'hsr' [ 665.663475][T19930] Cannot create hsr debugfs directory [ 666.083934][ T5840] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 666.093007][ T5840] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 666.102667][ T5840] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 666.112235][ T5840] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 666.120372][ T5840] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 666.163114][T19939] lo speed is unknown, defaulting to 1000 [ 666.297552][T19939] chnl_net:caif_netlink_parms(): no params data found [ 666.378814][T19939] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.386004][T19939] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.393818][T19939] bridge_slave_0: entered allmulticast mode [ 666.401539][T19939] bridge_slave_0: entered promiscuous mode [ 666.410798][T19939] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.419946][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 54 seconds [ 666.420255][T19939] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.432306][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 54 seconds [ 666.449698][T19939] bridge_slave_1: entered allmulticast mode [ 666.454912][T19939] bridge_slave_1: entered promiscuous mode [ 666.456541][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 54 seconds [ 666.472836][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 54 seconds [ 666.547047][T19939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.572110][T19939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.669233][T19939] team0: Port device team_slave_0 added [ 666.690114][T19939] team0: Port device team_slave_1 added [ 666.710938][ T5840] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 666.729470][ T5840] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 666.738112][ T5840] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 666.747912][ T5840] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 666.755852][ T5840] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 666.756407][T19939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.790245][ T52] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 666.792797][T19939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.823962][T19939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.836129][ T52] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 666.845439][T19939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.853954][T19939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.880358][ T52] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 666.880366][T19939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.901780][ T52] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 666.910174][ T52] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 667.023087][T19949] lo speed is unknown, defaulting to 1000 [ 667.038293][T19939] hsr_slave_0: entered promiscuous mode [ 667.050328][T19939] hsr_slave_1: entered promiscuous mode [ 667.057294][T19939] debugfs: 'hsr0' already exists in 'hsr' [ 667.063450][T19939] Cannot create hsr debugfs directory [ 667.078712][T19951] lo speed is unknown, defaulting to 1000 [ 667.131998][ T52] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 667.140412][T19897] Bluetooth: hci10: command tx timeout [ 667.148832][ T52] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 667.157912][ T52] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 667.166362][ T52] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 667.174968][ T52] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 667.374995][T19954] lo speed is unknown, defaulting to 1000 [ 667.573857][T19951] chnl_net:caif_netlink_parms(): no params data found [ 667.630104][T19949] chnl_net:caif_netlink_parms(): no params data found [ 667.785347][T19951] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.793309][T19951] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.801542][T19951] bridge_slave_0: entered allmulticast mode [ 667.809481][T19951] bridge_slave_0: entered promiscuous mode [ 667.844355][T19951] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.851744][T19951] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.862735][T19951] bridge_slave_1: entered allmulticast mode [ 667.870425][T19951] bridge_slave_1: entered promiscuous mode [ 667.941584][T19949] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.949166][T19949] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.956509][T19949] bridge_slave_0: entered allmulticast mode [ 667.970483][T19949] bridge_slave_0: entered promiscuous mode [ 667.996146][T19949] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.003544][T19949] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.011826][T19949] bridge_slave_1: entered allmulticast mode [ 668.021506][T19949] bridge_slave_1: entered promiscuous mode [ 668.057509][T19951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.087017][T19949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.099943][T19951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.117383][T19954] chnl_net:caif_netlink_parms(): no params data found [ 668.133124][T19949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.179302][ T52] Bluetooth: hci11: command tx timeout [ 668.226172][T19951] team0: Port device team_slave_0 added [ 668.248098][T19949] team0: Port device team_slave_0 added [ 668.256491][T19951] team0: Port device team_slave_1 added [ 668.290404][T19949] team0: Port device team_slave_1 added [ 668.328389][T19951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.335605][T19951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.362184][T19951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.399643][T19951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.406617][T19951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.433410][T19951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.456645][T19949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.463695][T19949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.490161][T19949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.523476][T19949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.530871][T19949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.558050][T19949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.570620][T19954] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.578036][T19954] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.585556][T19954] bridge_slave_0: entered allmulticast mode [ 668.593679][T19954] bridge_slave_0: entered promiscuous mode [ 668.615049][T19954] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.622438][T19954] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.629916][T19954] bridge_slave_1: entered allmulticast mode [ 668.638052][T19954] bridge_slave_1: entered promiscuous mode [ 668.711047][T19951] hsr_slave_0: entered promiscuous mode [ 668.718384][T19951] hsr_slave_1: entered promiscuous mode [ 668.725116][T19951] debugfs: 'hsr0' already exists in 'hsr' [ 668.731163][T19951] Cannot create hsr debugfs directory [ 668.743086][T19954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.767496][T19954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.782972][T19949] hsr_slave_0: entered promiscuous mode [ 668.789982][T19949] hsr_slave_1: entered promiscuous mode [ 668.796375][T19949] debugfs: 'hsr0' already exists in 'hsr' [ 668.802397][T19949] Cannot create hsr debugfs directory [ 668.819257][ T52] Bluetooth: hci12: command tx timeout [ 668.871283][T19954] team0: Port device team_slave_0 added [ 668.897747][T19954] team0: Port device team_slave_1 added [ 668.972769][T19954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.982202][ T52] Bluetooth: hci13: command tx timeout [ 668.988583][T19954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.015901][T19954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.043019][T19954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.050151][T19954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.076779][T19954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.219656][ T52] Bluetooth: hci14: command tx timeout [ 669.219654][ T5840] Bluetooth: hci10: command tx timeout [ 669.237748][T19954] hsr_slave_0: entered promiscuous mode [ 669.244607][T19954] hsr_slave_1: entered promiscuous mode [ 669.251373][T19954] debugfs: 'hsr0' already exists in 'hsr' [ 669.257114][T19954] Cannot create hsr debugfs directory [ 669.779420][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 56 seconds [ 669.790444][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 56 seconds [ 669.801623][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 56 seconds [ 669.812995][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 56 seconds [ 670.258985][ T52] Bluetooth: hci11: command tx timeout [ 670.343343][ T95] block nbd85: Possible stuck request ffff88804da58000: control (read@0,1024B). Runtime 240 seconds [ 670.354300][ T95] block nbd85: Possible stuck request ffff88804da58200: control (read@1024,1024B). Runtime 240 seconds [ 670.365447][ T95] block nbd85: Possible stuck request ffff88804da58400: control (read@2048,1024B). Runtime 240 seconds [ 670.376855][ T95] block nbd85: Possible stuck request ffff88804da58600: control (read@3072,1024B). Runtime 240 seconds [ 670.898918][ T52] Bluetooth: hci12: command tx timeout [ 671.058978][ T52] Bluetooth: hci13: command tx timeout [ 671.298980][ T52] Bluetooth: hci14: command tx timeout [ 671.299003][ T5840] Bluetooth: hci10: command tx timeout [ 672.338977][ T5840] Bluetooth: hci11: command tx timeout [ 672.978980][ T5840] Bluetooth: hci12: command tx timeout [ 673.138933][ T5840] Bluetooth: hci13: command tx timeout [ 673.148114][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 58 seconds [ 673.159193][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 58 seconds [ 673.170458][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 58 seconds [ 673.181673][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 58 seconds [ 673.378815][ T5840] Bluetooth: hci14: command tx timeout [ 673.389022][ T5840] Bluetooth: hci10: command tx timeout [ 674.418951][ T5840] Bluetooth: hci11: command tx timeout [ 675.058894][ T5840] Bluetooth: hci12: command tx timeout [ 675.218922][ T5840] Bluetooth: hci13: command tx timeout [ 675.459190][ T5840] Bluetooth: hci14: command tx timeout [ 676.499947][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 60 seconds [ 676.510892][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 60 seconds [ 676.522050][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 60 seconds [ 676.533484][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 60 seconds [ 679.868918][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 62 seconds [ 679.879808][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 62 seconds [ 679.891073][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 62 seconds [ 679.902259][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 62 seconds [ 683.219482][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 64 seconds [ 683.230722][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 64 seconds [ 683.241986][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 64 seconds [ 683.253174][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 64 seconds [ 686.579230][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 66 seconds [ 686.590132][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 66 seconds [ 686.601304][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 66 seconds [ 686.612540][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 66 seconds [ 689.939255][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 68 seconds [ 689.951320][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 68 seconds [ 689.963117][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 68 seconds [ 689.974922][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 68 seconds [ 690.825017][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.831476][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.299459][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 70 seconds [ 693.310821][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 70 seconds [ 693.322004][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 70 seconds [ 693.333260][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 70 seconds [ 696.668975][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 72 seconds [ 696.680052][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 72 seconds [ 696.691530][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 72 seconds [ 696.702819][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 72 seconds [ 700.028848][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 74 seconds [ 700.039812][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 74 seconds [ 700.051053][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 74 seconds [ 700.062261][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 74 seconds [ 700.420906][ T95] block nbd85: Possible stuck request ffff88804da58000: control (read@0,1024B). Runtime 270 seconds [ 700.431904][ T95] block nbd85: Possible stuck request ffff88804da58200: control (read@1024,1024B). Runtime 270 seconds [ 700.443217][ T95] block nbd85: Possible stuck request ffff88804da58400: control (read@2048,1024B). Runtime 270 seconds [ 700.454587][ T95] block nbd85: Possible stuck request ffff88804da58600: control (read@3072,1024B). Runtime 270 seconds [ 703.380016][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 76 seconds [ 703.390975][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 76 seconds [ 703.402135][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 76 seconds [ 703.413396][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 76 seconds [ 706.740058][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 78 seconds [ 706.751064][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 78 seconds [ 706.762252][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 78 seconds [ 706.773489][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 78 seconds [ 710.099045][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 80 seconds [ 710.110039][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 80 seconds [ 710.121199][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 80 seconds [ 710.132560][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 80 seconds [ 713.468820][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 82 seconds [ 713.479838][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 82 seconds [ 713.491448][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 82 seconds [ 713.502595][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 82 seconds [ 716.824525][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 84 seconds [ 716.836117][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 84 seconds [ 716.847637][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 84 seconds [ 716.859241][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 84 seconds [ 718.498850][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 720.188811][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 86 seconds [ 720.200081][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 86 seconds [ 720.211313][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 86 seconds [ 720.222504][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 86 seconds [ 723.548963][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 88 seconds [ 723.560175][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 88 seconds [ 723.571439][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 88 seconds [ 723.582682][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 88 seconds [ 725.131719][ T52] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 725.142045][ T52] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 725.150324][ T52] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 725.159517][ T52] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 725.167633][ T52] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 725.206985][T19975] lo speed is unknown, defaulting to 1000 [ 725.332276][T19975] chnl_net:caif_netlink_parms(): no params data found [ 725.413945][T19975] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.421345][T19975] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.428955][T19975] bridge_slave_0: entered allmulticast mode [ 725.437429][T19975] bridge_slave_0: entered promiscuous mode [ 725.445974][T19975] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.453476][T19975] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.461549][T19975] bridge_slave_1: entered allmulticast mode [ 725.469952][T19975] bridge_slave_1: entered promiscuous mode [ 725.501956][T19975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.514799][T19975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.549244][T19975] team0: Port device team_slave_0 added [ 725.557953][T19975] team0: Port device team_slave_1 added [ 725.585581][T19975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.592668][T19975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.618948][T19975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.631572][T19975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.638525][T19975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.665137][T19975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.712180][T19975] hsr_slave_0: entered promiscuous mode [ 725.719156][T19975] hsr_slave_1: entered promiscuous mode [ 725.725508][T19975] debugfs: 'hsr0' already exists in 'hsr' [ 725.731363][T19975] Cannot create hsr debugfs directory [ 726.167839][ T5840] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 726.182986][ T5840] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 726.192534][ T5840] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 726.203205][ T5840] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 726.212689][ T5840] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 726.254361][T19984] lo speed is unknown, defaulting to 1000 [ 726.394561][T19984] chnl_net:caif_netlink_parms(): no params data found [ 726.476472][T19984] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.483857][T19984] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.491750][T19984] bridge_slave_0: entered allmulticast mode [ 726.499809][T19984] bridge_slave_0: entered promiscuous mode [ 726.509450][T19984] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.518269][T19984] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.526126][T19984] bridge_slave_1: entered allmulticast mode [ 726.534762][T19984] bridge_slave_1: entered promiscuous mode [ 726.585267][T19984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 726.600982][T19984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.653080][T19984] team0: Port device team_slave_0 added [ 726.667083][T19984] team0: Port device team_slave_1 added [ 726.714495][T19984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.721702][T19984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.751042][T19993] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 726.758935][T19984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.771922][T19993] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 726.774791][T19984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.786921][T19984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.813218][T19993] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 726.813716][T19984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.832572][T19993] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 726.840785][T19993] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 726.899874][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 90 seconds [ 726.901354][T19984] hsr_slave_0: entered promiscuous mode [ 726.911810][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 90 seconds [ 726.921662][T19984] hsr_slave_1: entered promiscuous mode [ 726.928353][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 90 seconds [ 726.936834][T19984] debugfs: 'hsr0' already exists in 'hsr' [ 726.944325][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 90 seconds [ 726.961982][T19984] Cannot create hsr debugfs directory [ 726.988342][T19994] lo speed is unknown, defaulting to 1000 [ 727.218975][T19993] Bluetooth: hci15: command tx timeout [ 727.252793][T19994] chnl_net:caif_netlink_parms(): no params data found [ 727.367386][T19994] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.376348][T19994] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.384535][T19994] bridge_slave_0: entered allmulticast mode [ 727.392826][T19994] bridge_slave_0: entered promiscuous mode [ 727.415952][T19994] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.425453][T19994] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.433253][T19994] bridge_slave_1: entered allmulticast mode [ 727.440831][T19994] bridge_slave_1: entered promiscuous mode [ 727.499924][T19994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.529697][T19994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.627479][T19994] team0: Port device team_slave_0 added [ 727.653960][T19994] team0: Port device team_slave_1 added [ 727.749896][ T5842] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 727.762375][ T5842] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 727.771406][ T5842] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 727.782439][ T5842] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 727.794185][ T5842] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 727.805035][T19994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.831732][T19994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.858512][T19994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.875213][ T5842] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 727.885932][ T5842] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 727.894312][ T5842] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 727.902435][ T5842] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 727.908012][T19994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.917689][ T5842] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 727.917917][T19994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.952797][T19994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.029412][T19994] hsr_slave_0: entered promiscuous mode [ 728.036065][T19994] hsr_slave_1: entered promiscuous mode [ 728.042780][T19994] debugfs: 'hsr0' already exists in 'hsr' [ 728.048533][T19994] Cannot create hsr debugfs directory [ 728.054510][T20004] lo speed is unknown, defaulting to 1000 [ 728.138667][T20006] lo speed is unknown, defaulting to 1000 [ 728.264260][ T5842] Bluetooth: hci16: command tx timeout [ 728.460524][T20004] chnl_net:caif_netlink_parms(): no params data found [ 728.555142][T20006] chnl_net:caif_netlink_parms(): no params data found [ 728.654510][T20004] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.662069][T20004] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.669790][T20004] bridge_slave_0: entered allmulticast mode [ 728.677509][T20004] bridge_slave_0: entered promiscuous mode [ 728.704174][T20004] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.711589][T20004] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.719274][T20004] bridge_slave_1: entered allmulticast mode [ 728.726777][T20004] bridge_slave_1: entered promiscuous mode [ 728.742166][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 728.743837][T19993] Bluetooth: hci6: command 0x0406 tx timeout [ 728.748284][ T5842] Bluetooth: hci7: command 0x0406 tx timeout [ 728.819883][T20004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.854068][T20004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.863546][T20006] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.871291][T20006] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.878806][T20006] bridge_slave_0: entered allmulticast mode [ 728.886320][T20006] bridge_slave_0: entered promiscuous mode [ 728.898852][ T5840] Bluetooth: hci17: command tx timeout [ 728.921657][T20006] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.929237][T20006] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.936710][T20006] bridge_slave_1: entered allmulticast mode [ 728.944607][T20006] bridge_slave_1: entered promiscuous mode [ 728.979472][T20004] team0: Port device team_slave_0 added [ 728.999904][T20004] team0: Port device team_slave_1 added [ 729.010021][T20006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.033893][T20006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.067843][T20004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.075047][T20004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.101341][T20004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.124808][T20004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.132281][T20004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.159028][T20004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.172552][T20006] team0: Port device team_slave_0 added [ 729.190282][T20006] team0: Port device team_slave_1 added [ 729.232892][T20006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.240002][T20006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.266744][T20006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.290482][T20006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.297732][T20006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.324732][T20006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.335704][ T5840] Bluetooth: hci15: command tx timeout [ 729.353095][T20004] hsr_slave_0: entered promiscuous mode [ 729.360319][T20004] hsr_slave_1: entered promiscuous mode [ 729.367011][T20004] debugfs: 'hsr0' already exists in 'hsr' [ 729.373326][T20004] Cannot create hsr debugfs directory [ 729.441534][T20006] hsr_slave_0: entered promiscuous mode [ 729.449009][T20006] hsr_slave_1: entered promiscuous mode [ 729.455758][T20006] debugfs: 'hsr0' already exists in 'hsr' [ 729.461732][T20006] Cannot create hsr debugfs directory [ 729.859087][ T5840] Bluetooth: hci18: command tx timeout [ 730.018921][ T5840] Bluetooth: hci19: command tx timeout [ 730.259226][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 92 seconds [ 730.270254][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 92 seconds [ 730.281449][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 92 seconds [ 730.293017][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 92 seconds [ 730.338915][ T5840] Bluetooth: hci16: command tx timeout [ 730.508904][ T95] block nbd85: Possible stuck request ffff88804da58000: control (read@0,1024B). Runtime 300 seconds [ 730.519942][ T95] block nbd85: Possible stuck request ffff88804da58200: control (read@1024,1024B). Runtime 300 seconds [ 730.531335][ T95] block nbd85: Possible stuck request ffff88804da58400: control (read@2048,1024B). Runtime 300 seconds [ 730.542628][ T95] block nbd85: Possible stuck request ffff88804da58600: control (read@3072,1024B). Runtime 300 seconds [ 730.979018][ T5840] Bluetooth: hci17: command tx timeout [ 731.378836][ T5840] Bluetooth: hci15: command tx timeout [ 731.938912][ T5840] Bluetooth: hci18: command tx timeout [ 732.098953][ T5840] Bluetooth: hci19: command tx timeout [ 732.418903][ T5840] Bluetooth: hci16: command tx timeout [ 733.059268][ T5840] Bluetooth: hci17: command tx timeout [ 733.458870][ T5840] Bluetooth: hci15: command tx timeout [ 733.620719][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 94 seconds [ 733.631706][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 94 seconds [ 733.642916][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 94 seconds [ 733.654130][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 94 seconds [ 733.859484][T20019] Bluetooth: hci8: command 0x0406 tx timeout [ 733.865564][ T5840] Bluetooth: hci9: command 0x0406 tx timeout [ 734.018893][T19897] Bluetooth: hci18: command tx timeout [ 734.179039][T19897] Bluetooth: hci19: command tx timeout [ 734.498815][T19897] Bluetooth: hci16: command tx timeout [ 735.138804][T19897] Bluetooth: hci17: command tx timeout [ 736.098834][T19897] Bluetooth: hci18: command tx timeout [ 736.258960][T19897] Bluetooth: hci19: command tx timeout [ 736.899550][ T31] INFO: task udevd:14815 blocked for more than 143 seconds. [ 736.906890][ T31] Not tainted syzkaller #0 [ 736.912381][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 736.921925][ T31] task:udevd state:D stack:20992 pid:14815 tgid:14815 ppid:5203 task_flags:0x400140 flags:0x00080000 [ 736.934467][ T31] Call Trace: [ 736.937772][ T31] [ 736.940997][ T31] __schedule+0x14ef/0x4fb0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 736.945575][ T31] ? blk_mq_flush_plug_list+0x443/0x570 [ 736.951373][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 736.956469][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 736.963124][ T31] ? __blk_flush_plug+0x416/0x4d0 [ 736.968218][ T31] ? __pfx___schedule+0x10/0x10 [ 736.973600][ T31] ? schedule+0x90/0x360 [ 736.977904][ T31] schedule+0x164/0x360 [ 736.983016][ T31] schedule_timeout+0x158/0x2c0 [ 736.983072][ T95] block nbd156: Possible stuck request ffff88804c4e0000: control (read@0,1024B). Runtime 96 seconds [ 736.999082][ T95] block nbd156: Possible stuck request ffff88804c4e0200: control (read@1024,1024B). Runtime 96 seconds [ 737.010600][ T95] block nbd156: Possible stuck request ffff88804c4e0400: control (read@2048,1024B). Runtime 96 seconds [ 737.022963][ T95] block nbd156: Possible stuck request ffff88804c4e0600: control (read@3072,1024B). Runtime 96 seconds [ 737.034310][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 737.039833][ T31] ? __pfx_process_timeout+0x10/0x10 [ 737.045181][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 737.051186][ T31] ? prepare_to_wait_event+0x436/0x480 [ 737.056734][ T31] nbd_queue_rq+0x674/0xf40 [ 737.061375][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 737.066452][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 737.072694][ T31] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 737.078572][ T31] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 737.084474][ T31] ? sbitmap_get+0x229/0x390 [ 737.089265][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 737.095298][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 737.101237][ T31] __blk_mq_sched_dispatch_requests+0xdce/0x15d0 [ 737.107634][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 737.114553][ T31] ? blk_mq_hw_queue_need_run+0x13c/0x680 [ 737.120479][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 737.125823][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 737.132034][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 737.137375][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 737.142844][ T31] blk_mq_dispatch_list+0xd16/0xe10 [ 737.148101][ T31] ? bdev_count_inflight+0x1cf/0x210 [ 737.153488][ T31] ? blk_mq_dispatch_list+0x1b0/0xe10 [ 737.159228][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 737.165002][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 737.170802][ T31] ? rcu_is_watching+0x15/0xb0 [ 737.175621][ T31] blk_mq_flush_plug_list+0x48d/0x570 [ 737.181502][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 737.186753][ T31] ? blk_mq_submit_bio+0xeea/0x2770 [ 737.192659][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 737.209040][ T31] __blk_flush_plug+0x3ed/0x4d0 [ 737.213997][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 737.223172][ T31] __submit_bio+0x4c6/0x5d0 [ 737.227753][ T31] ? __pfx___submit_bio+0x10/0x10 [ 737.249088][ T31] ? blk_cgroup_bio_start+0x5b0/0x650 [ 737.254662][ T31] ? bio_associate_blkg+0x6d/0x230 [ 737.260395][ T31] submit_bio_noacct_nocheck+0x2f4/0xa20 [ 737.266094][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 737.272722][ T31] ? bio_alloc_bioset+0xab1/0x14e0 [ 737.277894][ T31] ? submit_bio_noacct+0xdfc/0x1b50 [ 737.283594][ T31] block_read_full_folio+0x599/0x830 [ 737.289285][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 737.294707][ T31] filemap_read_folio+0x137/0x3b0 [ 737.300608][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 737.306121][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 737.311804][ T31] ? filemap_add_folio+0x356/0x530 [ 737.316961][ T31] do_read_cache_folio+0x358/0x590 [ 737.322373][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 737.327890][ T31] read_part_sector+0xb6/0x2b0 [ 737.332830][ T31] adfspart_check_ICS+0xa5/0xa40 [ 737.337823][ T31] ? snprintf+0xe8/0x140 [ 737.342225][ T31] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 737.348806][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 737.354378][ T31] bdev_disk_changed+0x765/0x14c0 [ 737.359605][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 737.365118][ T31] blkdev_get_whole+0x380/0x510 [ 737.370192][ T31] bdev_open+0x31e/0xd30 [ 737.374498][ T31] blkdev_open+0x470/0x610 [ 737.379152][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 737.384137][ T31] do_dentry_open+0x7ce/0x1420 [ 737.389029][ T31] vfs_open+0x3b/0x340 [ 737.393152][ T31] ? path_openat+0x346e/0x3e20 [ 737.397938][ T31] path_openat+0x3486/0x3e20 [ 737.402708][ T31] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 737.409412][ T31] ? getname_flags+0xb7/0x540 [ 737.414208][ T31] ? __pfx_path_openat+0x10/0x10 [ 737.419292][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 737.424278][ T31] do_filp_open+0x22d/0x490 [ 737.428898][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 737.434068][ T31] ? _raw_spin_unlock+0x28/0x50 [ 737.439106][ T31] ? alloc_fd+0x64b/0x6c0 [ 737.443491][ T31] do_sys_openat2+0x12f/0x220 [ 737.448203][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 737.453942][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 737.459673][ T31] ? rcu_is_watching+0x15/0xb0 [ 737.464614][ T31] __x64_sys_openat+0x138/0x170 [ 737.469686][ T31] do_syscall_64+0xe2/0xf80 [ 737.474236][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.480523][ T31] ? clear_bhb_loop+0x60/0xb0 [ 737.485244][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.491417][ T31] RIP: 0033:0x7fc5894a7407 [ 737.495871][ T31] RSP: 002b:00007ffca369e910 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 737.504469][ T31] RAX: ffffffffffffffda RBX: 00007fc5893bb880 RCX: 00007fc5894a7407 [ 737.512593][ T31] RDX: 00000000000a0800 RSI: 0000561e86e9b0f0 RDI: ffffffffffffff9c [ 737.521037][ T31] RBP: 0000561e86e83910 R08: 0000000000000000 R09: 0000000000000000 [ 737.529361][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000561e86fd7610 [ 737.537776][ T31] R13: 0000561e86e91190 R14: 0000000000000000 R15: 0000561e86fd7610 [ 737.546454][ T31] [ 737.549715][ T31] INFO: task syz.3.3118:19851 blocked for more than 144 seconds. [ 737.557769][ T31] Not tainted syzkaller #0 [ 737.563144][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 737.572317][ T31] task:syz.3.3118 state:D stack:25976 pid:19851 tgid:19850 ppid:5833 task_flags:0x480140 flags:0x00080002 [ 737.588103][ T31] Call Trace: [ 737.591737][ T31] [ 737.594741][ T31] __schedule+0x14ef/0x4fb0 [ 737.599362][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 737.604367][ T31] ? __pfx___schedule+0x10/0x10 [ 737.609439][ T31] ? schedule+0x90/0x360 [ 737.613736][ T31] schedule+0x164/0x360 [ 737.618196][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 737.624128][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 737.630797][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 737.637262][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 737.643666][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 737.649995][ T31] nbd_set_size+0x516/0x6d0 [ 737.654624][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 737.659808][ T31] ? nla_memcpy+0x5b/0xc0 [ 737.664204][ T31] nbd_genl_size_set+0x32c/0x400 [ 737.669361][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 737.675148][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 737.681358][ T31] ? bpf_lsm_capable+0x9/0x20 [ 737.686176][ T31] ? security_capable+0x7e/0x2c0 [ 737.691705][ T31] ? radix_tree_lookup+0x240/0x290 [ 737.697084][ T31] nbd_genl_reconfigure+0x428/0x1a70 [ 737.706984][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 737.713375][ T31] ? rcu_is_watching+0x15/0xb0 [ 737.718338][ T31] ? __nla_parse+0x40/0x60 [ 737.723175][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 737.730518][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 737.736402][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 737.742836][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 737.747856][ T31] genl_rcv_msg+0x61c/0x7a0 [ 737.753320][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 737.760027][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 737.765932][ T31] netlink_rcv_skb+0x232/0x4b0 [ 737.771273][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 737.776500][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 737.782338][ T31] ? genl_rcv+0x19/0x40 [ 737.786588][ T31] ? down_read+0x272/0x2e0 [ 737.791360][ T31] ? genl_rcv+0xd/0x40 [ 737.795575][ T31] genl_rcv+0x28/0x40 [ 737.799931][ T31] netlink_unicast+0x80f/0x9b0 [ 737.804752][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 737.810267][ T31] ? netlink_sendmsg+0x650/0xb40 [ 737.815451][ T31] ? skb_put+0x11b/0x210 [ 737.820113][ T31] netlink_sendmsg+0x813/0xb40 [ 737.825132][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 737.830790][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 737.835794][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 737.841226][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 737.846566][ T31] __sock_sendmsg+0x21c/0x270 [ 737.851474][ T31] ____sys_sendmsg+0x4d7/0x810 [ 737.856287][ T31] ? __might_fault+0xaf/0x130 [ 737.861666][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 737.867724][ T31] ? import_iovec+0x73/0xa0 [ 737.872601][ T31] ___sys_sendmsg+0x2a5/0x360 [ 737.877863][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 737.883395][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 737.889145][ T31] ? futex_wait+0x29a/0x380 [ 737.894156][ T31] ? __fget_files+0x2a/0x420 [ 737.899041][ T31] ? __fget_files+0x3a0/0x420 [ 737.903978][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 737.909583][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 737.915473][ T31] ? rcu_is_watching+0x15/0xb0 [ 737.920462][ T31] do_syscall_64+0xe2/0xf80 [ 737.925193][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.931562][ T31] ? trace_irq_disable+0x37/0x100 [ 737.936937][ T31] ? clear_bhb_loop+0x60/0xb0 [ 737.942076][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.948124][ T31] RIP: 0033:0x7fbd8299acb9 [ 737.952828][ T31] RSP: 002b:00007fbd838db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 737.961551][ T31] RAX: ffffffffffffffda RBX: 00007fbd82c15fa0 RCX: 00007fbd8299acb9 [ 737.969789][ T31] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000004 [ 737.977802][ T31] RBP: 00007fbd82a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 737.985974][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 737.994079][ T31] R13: 00007fbd82c16038 R14: 00007fbd82c15fa0 R15: 00007ffc69ad55d8 [ 738.002429][ T31] [ 738.005518][ T31] INFO: task syz.4.3119:19868 blocked for more than 144 seconds. [ 738.019808][ T31] Not tainted syzkaller #0 [ 738.024801][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 738.034311][ T31] task:syz.4.3119 state:D stack:28656 pid:19868 tgid:19864 ppid:5846 task_flags:0x400040 flags:0x00080002 [ 738.046699][ T31] Call Trace: [ 738.050212][ T31] [ 738.053183][ T31] __schedule+0x14ef/0x4fb0 [ 738.057904][ T31] ? __pfx___schedule+0x10/0x10 [ 738.063137][ T31] ? schedule+0x90/0x360 [ 738.067663][ T31] schedule+0x164/0x360 [ 738.072348][ T31] schedule_preempt_disabled+0x13/0x30 [ 738.077940][ T31] __mutex_lock+0x7fe/0x1300 [ 738.082872][ T31] ? __mutex_lock+0x5ac/0x1300 [ 738.087948][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 738.093113][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 738.098293][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 738.103468][ T31] ? radix_tree_lookup+0x240/0x290 [ 738.108757][ T31] genl_rcv_msg+0x10b/0x7a0 [ 738.113328][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 738.118803][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 738.123969][ T31] ? netlink_rcv_skb+0x20a/0x4b0 [ 738.129535][ T31] netlink_rcv_skb+0x232/0x4b0 [ 738.134482][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 738.139951][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 738.145368][ T31] ? genl_rcv+0x19/0x40 [ 738.149749][ T31] ? down_read+0x272/0x2e0 [ 738.154345][ T31] ? genl_rcv+0xd/0x40 [ 738.158476][ T31] genl_rcv+0x28/0x40 [ 738.162658][ T31] netlink_unicast+0x80f/0x9b0 [ 738.167500][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 738.173141][ T31] ? netlink_sendmsg+0x650/0xb40 [ 738.178241][ T31] ? skb_put+0x11b/0x210 [ 738.183512][ T31] netlink_sendmsg+0x813/0xb40 [ 738.188483][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 738.193943][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 738.199065][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 738.204387][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 738.209916][ T31] __sock_sendmsg+0x21c/0x270 [ 738.214639][ T31] __sys_sendto+0x3c0/0x550 [ 738.219309][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 738.224462][ T31] ? rcu_is_watching+0x15/0xb0 [ 738.229455][ T31] __x64_sys_sendto+0xde/0x100 [ 738.234377][ T31] do_syscall_64+0xe2/0xf80 [ 738.239828][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.247059][ T31] ? trace_irq_disable+0x37/0x100 [ 738.252475][ T31] ? clear_bhb_loop+0x60/0xb0 [ 738.257293][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.263419][ T31] RIP: 0033:0x7f9ce735b58e [ 738.268008][ T31] RSP: 002b:00007f9ce8303e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 738.276600][ T31] RAX: ffffffffffffffda RBX: 00007f9ce83056c0 RCX: 00007f9ce735b58e [ 738.285010][ T31] RDX: 0000000000000020 RSI: 00007f9ce8304000 RDI: 0000000000000007 [ 738.293592][ T31] RBP: 0000000000000000 R08: 00007f9ce8303f04 R09: 000000000000000c [ 738.301723][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 738.309870][ T31] R13: 00007f9ce8303f58 R14: 00007f9ce8304000 R15: 0000000000000000 [ 738.317867][ T31] [ 738.321129][ T31] INFO: task syz.1.3120:19873 blocked for more than 144 seconds. [ 738.329197][ T31] Not tainted syzkaller #0 [ 738.334160][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 738.343362][ T31] task:syz.1.3120 state:D stack:27256 pid:19873 tgid:19866 ppid:5836 task_flags:0x400140 flags:0x00080002 [ 738.355482][ T31] Call Trace: [ 738.358914][ T31] [ 738.361967][ T31] __schedule+0x14ef/0x4fb0 [ 738.366565][ T31] ? __pfx___schedule+0x10/0x10 [ 738.371640][ T31] ? schedule+0x90/0x360 [ 738.376396][ T31] schedule+0x164/0x360 [ 738.380700][ T31] schedule_preempt_disabled+0x13/0x30 [ 738.386740][ T31] __mutex_lock+0x7fe/0x1300 [ 738.391467][ T31] ? __mutex_lock+0x5ac/0x1300 [ 738.396292][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 738.401342][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 738.406442][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 738.411586][ T31] ? radix_tree_lookup+0x240/0x290 [ 738.416754][ T31] genl_rcv_msg+0x10b/0x7a0 [ 738.421404][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 738.426481][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 738.431611][ T31] netlink_rcv_skb+0x232/0x4b0 [ 738.436482][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 738.441632][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 738.446966][ T31] ? genl_rcv+0x19/0x40 [ 738.451311][ T31] ? down_read+0x272/0x2e0 [ 738.455768][ T31] ? genl_rcv+0xd/0x40 [ 738.460016][ T31] genl_rcv+0x28/0x40 [ 738.464057][ T31] netlink_unicast+0x80f/0x9b0 [ 738.469019][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 738.474437][ T31] ? netlink_sendmsg+0x650/0xb40 [ 738.479515][ T31] ? skb_put+0x11b/0x210 [ 738.483808][ T31] netlink_sendmsg+0x813/0xb40 [ 738.489013][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 738.494384][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 738.499596][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 738.504927][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 738.510533][ T31] __sock_sendmsg+0x21c/0x270 [ 738.515306][ T31] __sys_sendto+0x3c0/0x550 [ 738.519995][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 738.525132][ T31] ? exc_page_fault+0x6a/0xc0 [ 738.530178][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 738.535715][ T31] __x64_sys_sendto+0xde/0x100 [ 738.540627][ T31] do_syscall_64+0xe2/0xf80 [ 738.545373][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.552746][ T31] ? trace_irq_disable+0x37/0x100 [ 738.557816][ T31] ? clear_bhb_loop+0x60/0xb0 [ 738.562629][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.568874][ T31] RIP: 0033:0x7f2e0c95b58e [ 738.573613][ T31] RSP: 002b:00007f2e0d77ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 738.582265][ T31] RAX: ffffffffffffffda RBX: 00007f2e0d77e6c0 RCX: 00007f2e0c95b58e [ 738.590327][ T31] RDX: 0000000000000020 RSI: 00007f2e0d77d000 RDI: 0000000000000008 [ 738.598348][ T31] RBP: 0000000000000000 R08: 00007f2e0d77cf04 R09: 000000000000000c [ 738.606546][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 738.614680][ T31] R13: 00007f2e0d77cf58 R14: 00007f2e0d77d000 R15: 0000000000000000 [ 738.623029][ T31] [ 738.626116][ T31] INFO: task syz.2.3121:19879 blocked for more than 145 seconds. [ 738.634983][ T31] Not tainted syzkaller #0 [ 738.640762][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 738.649827][ T31] task:syz.2.3121 state:D stack:27584 pid:19879 tgid:19874 ppid:5841 task_flags:0x400140 flags:0x00080002 [ 738.662183][ T31] Call Trace: [ 738.665516][ T31] [ 738.668505][ T31] __schedule+0x14ef/0x4fb0 [ 738.673573][ T31] ? __pfx___schedule+0x10/0x10 [ 738.678773][ T31] ? schedule+0x90/0x360 [ 738.683190][ T31] schedule+0x164/0x360 [ 738.687494][ T31] schedule_preempt_disabled+0x13/0x30 [ 738.693531][ T31] __mutex_lock+0x7fe/0x1300 [ 738.698287][ T31] ? __mutex_lock+0x5ac/0x1300 [ 738.703218][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 738.708040][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 738.713466][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 738.718498][ T31] ? radix_tree_lookup+0x240/0x290 [ 738.723728][ T31] genl_rcv_msg+0x10b/0x7a0 [ 738.728372][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 738.733835][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 738.744568][ T31] netlink_rcv_skb+0x232/0x4b0 [ 738.749588][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 738.754679][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 738.760090][ T31] ? genl_rcv+0x19/0x40 [ 738.764322][ T31] ? down_read+0x272/0x2e0 [ 738.768932][ T31] ? genl_rcv+0xd/0x40 [ 738.773047][ T31] genl_rcv+0x28/0x40 [ 738.777249][ T31] netlink_unicast+0x80f/0x9b0 [ 738.782152][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 738.787568][ T31] ? netlink_sendmsg+0x650/0xb40 [ 738.792747][ T31] ? skb_put+0x11b/0x210 [ 738.797071][ T31] netlink_sendmsg+0x813/0xb40 [ 738.802063][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 738.807496][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 738.812724][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 738.818138][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 738.823688][ T31] __sock_sendmsg+0x21c/0x270 [ 738.828417][ T31] __sys_sendto+0x3c0/0x550 [ 738.833141][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 738.838233][ T31] ? exc_page_fault+0x6a/0xc0 [ 738.843612][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 738.849100][ T31] __x64_sys_sendto+0xde/0x100 [ 738.853921][ T31] do_syscall_64+0xe2/0xf80 [ 738.858433][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.864698][ T31] ? trace_irq_disable+0x37/0x100 [ 738.869890][ T31] ? clear_bhb_loop+0x60/0xb0 [ 738.874598][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.880593][ T31] RIP: 0033:0x7fc4c495b58e [ 738.885049][ T31] RSP: 002b:00007fc4c577de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 738.893643][ T31] RAX: ffffffffffffffda RBX: 00007fc4c577f6c0 RCX: 00007fc4c495b58e [ 738.902044][ T31] RDX: 0000000000000020 RSI: 00007fc4c577e000 RDI: 0000000000000008 [ 738.910285][ T31] RBP: 0000000000000000 R08: 00007fc4c577df04 R09: 000000000000000c [ 738.918400][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 738.926508][ T31] R13: 00007fc4c577df58 R14: 00007fc4c577e000 R15: 0000000000000000 [ 738.934694][ T31] [ 738.937982][ T31] INFO: task syz.0.3122:19877 blocked for more than 145 seconds. [ 738.946199][ T31] Not tainted syzkaller #0 [ 738.951328][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 738.960165][ T31] task:syz.0.3122 state:D stack:26048 pid:19877 tgid:19876 ppid:5843 task_flags:0x400140 flags:0x00080002 [ 738.972642][ T31] Call Trace: [ 738.976157][ T31] [ 738.979356][ T31] __schedule+0x14ef/0x4fb0 [ 738.983943][ T31] ? __pfx___schedule+0x10/0x10 [ 738.989183][ T31] ? schedule+0x90/0x360 [ 738.993539][ T31] schedule+0x164/0x360 [ 738.997719][ T31] schedule_preempt_disabled+0x13/0x30 [ 739.003330][ T31] __mutex_lock+0x7fe/0x1300 [ 739.007955][ T31] ? __mutex_lock+0x5ac/0x1300 [ 739.013069][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 739.017843][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 739.023064][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 739.028068][ T31] ? radix_tree_lookup+0x240/0x290 [ 739.033601][ T31] genl_rcv_msg+0x10b/0x7a0 [ 739.038167][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 739.043496][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 739.048501][ T31] netlink_rcv_skb+0x232/0x4b0 [ 739.053715][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 739.060578][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 739.065893][ T31] ? genl_rcv+0x19/0x40 [ 739.070205][ T31] ? down_read+0x272/0x2e0 [ 739.074714][ T31] ? genl_rcv+0xd/0x40 [ 739.079141][ T31] genl_rcv+0x28/0x40 [ 739.083177][ T31] netlink_unicast+0x80f/0x9b0 [ 739.088306][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 739.093894][ T31] ? netlink_sendmsg+0x650/0xb40 [ 739.098966][ T31] ? skb_put+0x11b/0x210 [ 739.103252][ T31] netlink_sendmsg+0x813/0xb40 [ 739.108074][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.113589][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 739.118826][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 739.124165][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.129774][ T31] __sock_sendmsg+0x21c/0x270 [ 739.134582][ T31] __sys_sendto+0x3c0/0x550 [ 739.140333][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 739.145447][ T31] ? exc_page_fault+0x6a/0xc0 [ 739.150355][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 739.155700][ T31] __x64_sys_sendto+0xde/0x100 [ 739.160641][ T31] do_syscall_64+0xe2/0xf80 [ 739.165182][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.171625][ T31] ? trace_irq_disable+0x37/0x100 [ 739.176816][ T31] ? clear_bhb_loop+0x60/0xb0 [ 739.182191][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.188939][ T31] RIP: 0033:0x7efeadd5b58e [ 739.193385][ T31] RSP: 002b:00007efeaec9be88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 739.202486][ T31] RAX: ffffffffffffffda RBX: 00007efeaec9d6c0 RCX: 00007efeadd5b58e [ 739.211021][ T31] RDX: 0000000000000020 RSI: 00007efeaec9c000 RDI: 0000000000000005 [ 739.219434][ T31] RBP: 0000000000000000 R08: 00007efeaec9bf04 R09: 000000000000000c [ 739.227877][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 739.236042][ T31] R13: 00007efeaec9bf58 R14: 00007efeaec9c000 R15: 0000000000000000 [ 739.244320][ T31] [ 739.247916][ T31] [ 739.247916][ T31] Showing all locks held in the system: [ 739.256046][ T31] 1 lock held by khungtaskd/31: [ 739.261130][ T31] #0: ffffffff8e35a320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 739.271471][ T31] 2 locks held by getty/5589: [ 739.276254][ T31] #0: ffff88814da8e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 739.286341][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 739.296915][ T31] 1 lock held by udevd/5852: [ 739.301922][ T31] #0: ffff88806a6fe358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 739.311362][ T31] 1 lock held by udevd/7973: [ 739.315994][ T31] #0: ffff8880206c0358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 739.325414][ T31] 3 locks held by udevd/14815: [ 739.330380][ T31] #0: ffff888141bd4358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 739.339719][ T31] #1: ffff888148289118 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 739.349571][ T31] #2: ffff888025102980 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0xf40 [ 739.358845][ T31] 6 locks held by syz.3.3118/19851: [ 739.364348][ T31] #0: ffffffff8f816eb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.373536][ T31] #1: ffffffff8f816cc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 739.383536][ T31] #2: ffff888025073a78 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x38e/0x1a70 [ 739.394070][ T31] #3: ffff888141be1048 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2ba/0x6d0 [ 739.403918][ T31] #4: ffff888141be09e8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 739.416829][ T31] #5: ffff888141be0a20 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 739.429454][ T31] 2 locks held by syz.4.3119/19868: [ 739.434667][ T31] #0: ffffffff8f816eb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.443027][ T31] #1: ffffffff8f816cc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 739.452211][ T31] 2 locks held by syz.1.3120/19873: [ 739.457456][ T31] #0: ffffffff8f816eb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.466168][ T31] #1: ffffffff8f816cc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 739.475295][ T31] 2 locks held by syz.2.3121/19879: [ 739.480598][ T31] #0: ffffffff8f816eb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.489021][ T31] #1: ffffffff8f816cc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 739.498130][ T31] 2 locks held by syz.0.3122/19877: [ 739.503502][ T31] #0: ffffffff8f816eb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.511829][ T31] #1: ffffffff8f816cc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 739.521021][ T31] 2 locks held by syz-executor/19884: [ 739.526431][ T31] #0: ffffffff8f816eb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.534939][ T31] #1: ffffffff8f816cc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 739.544296][ T31] 2 locks held by syz-executor/19894: [ 739.549814][ T31] #0: ffffffff8f816eb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.558075][ T31] #1: ffffffff8f816cc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 739.567263][ T31] 2 locks held by syz-executor/19895: [ 739.573023][ T31] #0: ffffffff8f816eb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.581417][ T31] #1: ffffffff8f816cc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 739.590932][ T31] 2 locks held by syz-executor/19905: [ 739.596523][ T31] #0: ffffffff8f816eb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.605167][ T31] #1: ffffffff8f816cc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 739.614754][ T31] 2 locks held by syz-executor/19909: [ 739.620569][ T31] #0: ffffffff8f816eb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.629434][ T31] #1: ffffffff8f816cc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 739.638547][ T31] 2 locks held by syz-executor/19930: [ 739.644631][ T31] #0: ffffffff8f816eb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.653325][ T31] #1: ffffffff8f816cc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 739.663389][ T31] 2 locks held by syz-executor/19939: [ 739.668935][ T31] #0: ffffffff8f816eb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.677601][ T31] #1: ffffffff8f816cc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 739.687109][ T31] 2 locks held by syz-executor/19949: [ 739.692815][ T31] #0: ffffffff8f816eb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.701500][ T31] #1: ffffffff8f816cc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 739.710992][ T31] 2 locks held by syz-executor/19951: [ 739.716572][ T31] #0: ffffffff8f816eb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.725475][ T31] #1: ffffffff8f816cc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 739.734812][ T31] 2 locks held by syz-executor/19954: [ 739.741032][ T31] #0: ffffffff8f816eb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.749575][ T31] #1: ffffffff8f816cc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 739.759002][ T31] 2 locks held by syz-executor/19975: [ 739.764406][ T31] #0: ffffffff8f816eb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.772755][ T31] #1: ffffffff8f816cc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 739.782355][ T31] 2 locks held by syz-executor/19984: [ 739.787796][ T31] #0: ffffffff8f816eb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.796559][ T31] #1: ffffffff8f816cc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 739.805746][ T31] 2 locks held by syz-executor/19994: [ 739.811272][ T31] #0: ffffffff8f816eb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.819741][ T31] #1: ffffffff8f816cc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 739.828908][ T31] 2 locks held by syz-executor/20004: [ 739.834353][ T31] #0: ffffffff8f816eb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.842794][ T31] #1: ffffffff8f816cc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 739.852099][ T31] 2 locks held by syz-executor/20006: [ 739.857755][ T31] #0: ffffffff8f816eb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.866441][ T31] #1: ffffffff8f816cc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 739.876072][ T31] [ 739.878746][ T31] ============================================= [ 739.878746][ T31] [ 739.887683][ T31] NMI backtrace for cpu 0 [ 739.887706][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 739.887726][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 739.887737][ T31] Call Trace: [ 739.887747][ T31] [ 739.887756][ T31] dump_stack_lvl+0xe8/0x150 [ 739.887785][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 739.887808][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 739.887829][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 739.887855][ T31] sys_info+0x135/0x170 [ 739.887875][ T31] watchdog+0xf90/0xfe0 [ 739.887905][ T31] ? watchdog+0x209/0xfe0 [ 739.887935][ T31] kthread+0x726/0x8b0 [ 739.887962][ T31] ? __pfx_watchdog+0x10/0x10 [ 739.887986][ T31] ? __pfx_kthread+0x10/0x10 [ 739.888013][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 739.888038][ T31] ? __pfx_kthread+0x10/0x10 [ 739.888062][ T31] ret_from_fork+0x51b/0xa40 [ 739.888083][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 739.888100][ T31] ? __switch_to+0xc82/0x1410 [ 739.888131][ T31] ? __pfx_kthread+0x10/0x10 [ 739.888164][ T31] ret_from_fork_asm+0x1a/0x30 [ 739.888201][ T31] [ 739.888212][ T31] Sending NMI from CPU 0 to CPUs 1: [ 740.017954][ C1] NMI backtrace for cpu 1 [ 740.017975][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 740.017997][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 740.018009][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 740.018045][ C1] Code: 78 5f 02 e9 d3 e5 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 b7 10 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 740.018063][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 740.018081][ C1] RAX: 000000000018dc35 RBX: ffffffff8198335d RCX: 0000000080000001 [ 740.018095][ C1] RDX: 0000000000000001 RSI: ffffffff8dad4cbb RDI: ffffffff8be73880 [ 740.018109][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 740.018124][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8fcedc70 [ 740.018139][ C1] R13: 1ffff110039d4b70 R14: 0000000000000001 R15: 0000000000000001 [ 740.018152][ C1] FS: 0000000000000000(0000) GS:ffff888125a28000(0000) knlGS:0000000000000000 [ 740.018168][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 740.018181][ C1] CR2: 000055a0d896cee8 CR3: 000000000e146000 CR4: 00000000003526f0 [ 740.018199][ C1] Call Trace: [ 740.018209][ C1] [ 740.018216][ C1] default_idle+0x9/0x20 [ 740.018237][ C1] default_idle_call+0x72/0xb0 [ 740.018259][ C1] do_idle+0x1bd/0x500 [ 740.018281][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 740.018305][ C1] ? __pfx_do_idle+0x10/0x10 [ 740.018351][ C1] cpu_startup_entry+0x43/0x60 [ 740.018373][ C1] start_secondary+0x101/0x110 [ 740.018392][ C1] common_startup_64+0x13e/0x147 [ 740.018427][ C1] [ 740.019419][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 740.019470][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 740.019551][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 740.019603][ T31] Call Trace: [ 740.019626][ T31] [ 740.019656][ T31] vpanic+0x1e0/0x670 [ 740.019750][ T31] panic+0xc5/0xd0 [ 740.019825][ T31] ? __pfx_panic+0x10/0x10 [ 740.019901][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 740.019974][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 740.020048][ T31] watchdog+0xfda/0xfe0 [ 740.020180][ T31] ? watchdog+0x209/0xfe0 [ 740.020342][ T31] kthread+0x726/0x8b0 [ 740.020428][ T31] ? __pfx_watchdog+0x10/0x10 [ 740.020513][ T31] ? __pfx_kthread+0x10/0x10 [ 740.020598][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 740.020681][ T31] ? __pfx_kthread+0x10/0x10 [ 740.020766][ T31] ret_from_fork+0x51b/0xa40 [ 740.020838][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 740.020892][ T31] ? __switch_to+0xc82/0x1410 [ 740.020988][ T31] ? __pfx_kthread+0x10/0x10 [ 740.021082][ T31] ret_from_fork_asm+0x1a/0x30 [ 740.021209][ T31] [ 740.305057][ T31] Kernel Offset: disabled [ 740.309438][ T31] Rebooting in 86400 seconds..