Extracting prog: 1h32m33.906707048s Minimizing prog: 2h57m36.329951738s Simplifying prog options: 0s Extracting C: 3m7.320368773s Simplifying C: 31m10.760242967s 30 programs, timeouts [6m0s] extracting reproducer from 30 programs testing a last program of every proc single: executing 5 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-ioctl$TUNSETIFF-openat$tun-close-socket$nl_generic-syz_genetlink_get_family_id$tipc-sendmsg$TIPC_CMD_ENABLE_BEARER-sendmsg$nl_route_sched-ioctl$SIOCSIFHWADDR-writev detailed listing: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)=@newchain={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff1}}}, 0x24}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0x280}], 0x1) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$IPCTNL_MSG_TIMEOUT_GET-syz_init_net_socket$nl_generic-syz_emit_ethernet-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-sendmsg$ETHTOOL_MSG_CHANNELS_GET-socket-socket$alg-bind$alg-getpid-sendto-socket$xdp-socket$kcm-sendmsg$inet-accept4-sendmmsg$alg detailed listing: executing program 0: sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x4c400) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x700, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="201200200a5500", @ANYRES16=0x0, @ANYBLOB="8f9f0000000000000000040000000c0001800800030003000000"], 0x20}}, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) getpid() sendto(0xffffffffffffffff, &(0x7f00000001c0)="6ef8ec2b5db0b6d39b66b3bf506e5b811f8793", 0x13, 0x4000, &(0x7f0000000300)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x80) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, 0x0, 0x880) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$802154_dgram-setsockopt$WPAN_WANTACK-syz_extract_tcp_res-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-setsockopt$inet6_IPV6_XFRM_POLICY-syz_emit_ethernet-ioctl$PPPIOCGL2TPSTATS-syz_extract_tcp_res$synack-syz_emit_ethernet-syz_extract_tcp_res$synack-syz_emit_ethernet-syz_emit_ethernet-syz_emit_ethernet-syz_emit_ethernet-accept4$inet6-bind$l2tp6-socket$nl_generic-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$tipc2-sendmsg$TIPC_NL_BEARER_ENABLE-sendmsg$TIPC_NL_KEY_SET-sendmsg$TIPC_NL_KEY_SET detailed listing: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000280)={0x41424344}, 0x5, 0x9) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@mcast2}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@local, @remote, @void, {@generic={0x1c, "c0fa8fba344561b40704046a807c23105e5e8d70915a5e74d43c2fe0"}}}, 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, 0x0) syz_extract_tcp_res$synack(&(0x7f00000002c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x7c, &(0x7f00000004c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfe}, @val={@val={0x88a8, 0x6, 0x0, 0x4}, {0x8100, 0x7, 0x1, 0x2}}, {@ipv4={0x800, @tcp={{0x12, 0x4, 0x0, 0x5, 0x66, 0x67, 0x0, 0x1, 0x6, 0x0, @multicast1, @rand_addr=0x64010100, {[@generic={0x7, 0xe, "335917d24133b4f5697f38bf"}, @timestamp_prespec={0x44, 0xc, 0xdf, 0x3, 0x6, [{@private=0xa010101, 0x3ff}]}, @end, @ssrr={0x89, 0x17, 0x3e, [@multicast1, @empty, @multicast1, @multicast2, @private=0xa010100]}, @end]}}, {{0x4e20, 0x4e21, r4, 0x41424344, 0x1, 0x0, 0x6, 0x80, 0x100, 0x0, 0x4ae, {[@fastopen={0x22, 0x2}]}}, {"ad125702c896"}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, r5, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000600)={@local, @link_local, @val={@val={0x88a8, 0x7}, {0x8100, 0x6, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, r5, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000080)={@random="37a454c624f7", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x15, 0x88, 0x65, 0x0, 0x7f, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x82, 0x9, "aae3561a2abe68"}]}}, {{0x4e21, 0x4e21, r5, 0x41424344, 0x0, 0x0, 0x6, 0x1, 0x81, 0x0, 0x5, {[@mss={0x2, 0x4}]}}, {"bb76d8b30a8f4ed5fe48a5f138c2abfcab54c79033c9bf3cc3c18dc186ad089c1ec4a94455a0164ea75b9de64d2d3f07eb83e31eaa6ac4f940dc0ed23e08e4d12ee686a479eba7a755233a26bfaebb40"}}}}}}, 0x0) syz_emit_ethernet(0x3a8, &(0x7f0000000540)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "fccf51", 0x372, 0x6, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0x2c}, {[@srh={0x11, 0x6, 0x4, 0x3, 0x4, 0x40, 0xfff, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @loopback]}, @routing={0x87, 0x4, 0x1, 0x6, 0x0, [@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @dstopts={0x5a, 0xc, '\x00', [@ra={0x5, 0x2, 0x3}, @generic={0x6, 0x5b, "f8f5778ba4b69efda42b05fd18fbf106f0ed61857c0dc53de9fac3d237390e9562d880d4ee5de1bf84a4a9e69bfb2fa20bf3326b5a4e5835688baf7c66617ee628f6ce1fa61257d60a98253a0e19282563c3707b2642ae714a8c81"}]}, @routing={0x88, 0xe, 0x1, 0x5, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @dev={0xfe, 0x80, '\x00', 0xc}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @loopback]}, @hopopts={0x2f, 0x39, '\x00', [@calipso={0x7, 0x40, {0x2, 0xe, 0x29, 0x5, [0x80000001, 0x3, 0x4, 0x1ff, 0x3, 0x60a, 0x7fffffff]}}, @pad1, @generic={0xb3, 0x9e, "c8de057b7e0b30296337040bbd697dcef8c56eeb03a62aee0d9115917747a5321fdd8131a4d075f8a1f23eac1555b1d1b70a576758c9f15d098de2ba60cd2dac8402ce82d77555db94e03c503d757db3353f19f103bc363bb4d223d9a4257b8c69d4be816658fe6d0672c1087dd5a4d1dfcbba6d3617dc4e89f0bd425eb24cd678be80cc3620cefe6c6170f912dc76d23ebc65d6a6f0237d26ea5d909fcc"}, @generic={0x9, 0xce, "cf9b30dbd60add123f61c22dfaf7938f9d5bee079b6f5890eb387b072b164e2a8a554d33407b626627a897d157ae1307a41c69f52f62d22f7632949b8b88e9dbe02ede83be16419a5c45f2fcecdcfeafcbd6e24e05ff23aa7f33bda8f61e4b52777d4c06f8f0ed11997ef5aebdb983687ada81ce8b8d334cf77e9aceab2e5046d456c047e9ce9c8cdef326d287ee42b882421a831066ba79d0d54b7b2bbc91ab180b893e1156fab8c419660d05f20ded2d9af8abc2a87bf11a70992956928af561008ea4899ef2fe006f2863aecf"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @pad1, @ra={0x5, 0x2, 0x957}]}], {{0x4e20, 0x4e20, r1, r5, 0x0, 0x0, 0x14, 0xc2, 0xf, 0x0, 0x7, {[@fastopen={0x22, 0xd, "21c2d6aa73889de15befc2"}, @timestamp={0x8, 0xa, 0x1c8c, 0x1}, @eol, @fastopen={0x22, 0xe, "cfb37a819ed3fd61f5fe2bee"}, @mptcp=@ack={0x1e, 0x13, 0x9, 0x4, "15ac6d0e697c9800820d7420106483"}, @sack_perm={0x4, 0x2}, @nop]}}, {"6918"}}}}}}}, 0x0) r6 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0x80000) bind$l2tp6(r6, &(0x7f0000000240)={0xa, 0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3, 0x1}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)={0x5c, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "e35f41b193ff79bc71ec6a6bc3d57886de3d7b4cd07ec3ee777de774"}}]}]}, 0x5c}, 0x1, 0x0, 0xf5}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r10, 0x814, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4000000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe0f}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x4c}}, 0x2000c011) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hci-ioctl$HCIINQUIRY-syz_init_net_socket$bt_hci-bind$bt_hci-write detailed listing: executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9}) (fail_nth: 2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="05000000010000", 0x7) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$bt_hci-ioctl$HCIINQUIRY-syz_init_net_socket$bt_hci-bind$bt_hci-write detailed listing: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x4, 0x96}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="05000000010000", 0x7) program crashed: lost connection to test machine suppressed program crash: lost connection to test machine single: failed to extract reproducer bisect: bisecting 30 programs with base timeout 6m0s testing program (duration=6m7s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 30, 2, 1, 2, 4, 25, 3, 10, 6, 2, 6, 5, 6, 30, 26, 2, 2, 2, 4, 1, 24, 1, 4, 38, 2, 3, 25, 16, 10] detailed listing: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x2}, [@CTA_FILTER={0x4}]}, 0x18}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r4, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) executing program 2: pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, 0x0, 0x1) vmsplice(r1, &(0x7f0000002480)=[{&(0x7f00000001c0)="9718b7b35f0f5725d440a440e64128467b2edda3", 0x14}], 0x1, 0x2) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r5], 0x4c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={0x0, 0xa}, 0x1, 0x0, 0x0, 0x4004004}, 0x4804) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000008000000ff0f00000600000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0500"/17], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe79, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = epoll_create1(0x0) r9 = socket$packet(0x11, 0x4000000000002, 0x300) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000003424203"], 0x0) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000380)=0x1, 0x4) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000040)={0x2000201e}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x21, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000200000000000000401b83d318110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000018160000", @ANYRES32=r0, @ANYBLOB="0200000000000000182000002347fd7876383cc9e9a9fbf1bb6c3488326242171e3b49fdbb6204a76777c2ac845b620b74de19bb5f7fb29e6c95f4bb11f1c547477fb9e9c76668aeea9c24732006b426c9d8cc2edcf2893235279f95772c137e206bb06b1d3f5e8f113e", @ANYRES32, @ANYBLOB="0000000003080d00185a00000a000000000000000000000018470000fbffffff0000000000000000bf91000000000000b7020000010000008500000085001f00b7000000000000d8f600950000000000"], &(0x7f0000000680)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @xdp, r0, 0x8, &(0x7f0000000780)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000007c0)=[{0x3, 0x1, 0x6, 0xb}, {0x4, 0x3, 0x8}], 0x10, 0x810, @void, @value}, 0x94) r10 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000000c0)={0x77359400}, 0x10) splice(r0, 0x0, r3, 0x0, 0xe8, 0x0) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x121, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xff72, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0}}, 0x3) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x23000000, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001800090300000000000000000a002000000000000000000008000400", @ANYRES32=r1], 0x24}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x28, 0x5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket(0x2a, 0x2, 0x0) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x27, 0x22, 0x0, &(0x7f0000000100)="f80204000000000000007f5b0800c22da2e6d3defa2690e5ce3a4fd7d256ef256140", 0x0, 0x20000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x28, 0x9, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0xf9b7, 0x0, 0xa0, 0x80, 0x1d}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000}, {0x2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@rand_addr=0x64010104}, 0x0, @in=@multicast1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0xe8) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r7, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r10, @ANYBLOB="00000000000000001c002b8008000100", @ANYRES32, @ANYBLOB="08000300190000000800080064"], 0x3c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x44}}, 0x4000040) executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000001900)="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", 0xfa8, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) socket(0x23, 0x80000, 0x2dc) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f40)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004805}, 0x40000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r1, &(0x7f0000004000)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001900)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0x71}]}}}], 0x18}}], 0x1, 0x20040) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@enum={0x6, 0x2, 0x0, 0x6, 0x4, [{0x1}, {0x2}]}]}, {0x0, [0x61, 0x61, 0x5f, 0x0, 0x0, 0x2e, 0x30, 0x61]}}, &(0x7f00000013c0)=""/178, 0x3e, 0xb2, 0x1, 0x0, 0x0, @void, @value}, 0x20) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000220001069552616970fdbf000000000000000014"], 0x24}], 0x1}, 0x0) executing program 1: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x4, 0x96}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="05000000010000", 0x7) executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9}) (fail_nth: 2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="05000000010000", 0x7) executing program 0: socket$kcm(0xa, 0x6, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) socket$can_raw(0x1d, 0x3, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) executing program 3: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x0, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r2, 0xfff) syz_emit_ethernet(0x9a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500640600fe8004008000000000000000000000bbfe800000000000000000000000000696a615d697", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9002000090780000fe06e2d4c3d9080a00000080000000001312d082e275205e556149a021cc13c33d8903030003030004020402220fcf6af75d5cdcf048b19c939556131227406263e43d5959a166a23bd1116edc000000"], 0x0) syz_emit_ethernet(0x56, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60df1d0000200600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8004000090780000080a0000000000000000000002d7843a2ec5bdbf11e87b0d2cd717c8f3b658122d0f3256441f6544539ddd0ce63b23795d2b2d1e377302888b9ba91c1a09d57bed9c53429c36"], 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x124}}, 0x0) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r5, 0x29, 0x77, 0x9, 0x2, 0x42, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x7800, 0x10, 0x68000, 0x620bca37}}) (async, rerun: 64) r6 = accept4(r1, 0x0, 0x0, 0x0) (async, rerun: 64) r7 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r7, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) (async) sendmmsg$inet(r7, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) (async, rerun: 64) bind$vsock_stream(r8, &(0x7f0000000440), 0x10) (async, rerun: 64) listen(r8, 0x0) (async, rerun: 64) r9 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async, rerun: 64) writev(r9, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) (rerun: 64) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r6, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002940)="99d6", 0x7ffff000}, {&(0x7f0000002980)="f555c15b70122cd0c98a5b39d975242bce2ae54f0a7ee6f8291bf1887f6fec817c26b1d863c34b037a56faa6dde89b", 0x2f}], 0x2}}], 0x1, 0x0) executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) r2 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7, 0x0, 0x0, 0x0, 0xe3}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1a) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f0000000000)={0x1d, r4}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r11 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r11, &(0x7f0000000000)={0x1d, r10}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x400, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {0x0, 0xb}}}, 0x24}}, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000f500000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080003400000000214"], 0xc0}}, 0x0) executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000, 0x41}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) executing program 4: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, r1, 0x1, 0xffffffff, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000001020000000073019d000000000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[], 0x138}}, 0x4004014) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x4004009) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0500000000000000000000001d2adee4fa09e1bd8a4fcaf3355b09a69713eb64c0a82e06df6d805a0be1fb9cb54a7a31ef0e21266dcb42b48ee7e5cccfdd8c7649e0c6951053ff", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, 0x0, 0x0}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x3) pipe(&(0x7f0000000100)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = accept4$rose(r0, 0x0, &(0x7f00000005c0), 0x80800) ioctl$SIOCRSACCEPT(r7, 0x89e3) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x9) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) executing program 0: syz_emit_ethernet(0x2e1, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffff000086dd6001000002ab110000000000000000000000ffffac1414aafe80000000000000000000000000ffaa3c000400006dff"], 0x0) executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) executing program 3: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x7, 0x7, 0x3, 0x5, {{0x21, 0x4, 0x3, 0x6, 0x84, 0x66, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010101, @empty, {[@end, @rr={0x7, 0x17, 0xe6, [@dev={0xac, 0x14, 0x14, 0x1e}, @multicast2, @multicast2, @multicast2, @private=0xa010101]}, @cipso={0x86, 0xa, 0x3, [{0x2, 0x4, '\x00F'}]}, @timestamp_addr={0x44, 0x14, 0xff, 0x1, 0x5, [{@remote, 0x6}, {@broadcast, 0x800}]}, @generic={0x82, 0xffffffffffffff80, "c8"}, @cipso={0x86, 0x2a, 0x3, [{0x6, 0x10, "a858c7f852619c3979dc1be1901a"}, {0x7, 0xb, "a87c3263cf32ad87f7"}, {0x2, 0x9, "5f3b3183cd5a9b"}]}, @rr={0x7, 0xb, 0x43, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) socket$unix(0x1, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x3c) (async) socket$inet6(0xa, 0x3, 0x3c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) pipe(&(0x7f0000000300)) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0xb869, 0x8}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x4, 0x4, 0x20001, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r3, 0x0, 0x0}, 0x20) socket$key(0xf, 0x3, 0x2) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000001900)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in=@dev}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x2, 0x0, @mcast2}}]}, 0xa0}}, 0x0) (async) sendmsg$key(r4, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000001900)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in=@dev}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x2, 0x0, @mcast2}}]}, 0xa0}}, 0x0) write$binfmt_script(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000854000001700000085000000d000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000854000001700000085000000d000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x8, 0x0, 0x0, 0x100}, @jmp={0x6, 0x0, 0x7}]}, &(0x7f0000000540)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x8, 0x0, 0x0, 0x100}, @jmp={0x6, 0x0, 0x7}]}, &(0x7f0000000540)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv6_delrule={0x1c, 0x21, 0x1}, 0x1c}}, 0x0) executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000280)={0x41424344}, 0x5, 0x9) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@mcast2}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@local, @remote, @void, {@generic={0x1c, "c0fa8fba344561b40704046a807c23105e5e8d70915a5e74d43c2fe0"}}}, 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, 0x0) syz_extract_tcp_res$synack(&(0x7f00000002c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x7c, &(0x7f00000004c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfe}, @val={@val={0x88a8, 0x6, 0x0, 0x4}, {0x8100, 0x7, 0x1, 0x2}}, {@ipv4={0x800, @tcp={{0x12, 0x4, 0x0, 0x5, 0x66, 0x67, 0x0, 0x1, 0x6, 0x0, @multicast1, @rand_addr=0x64010100, {[@generic={0x7, 0xe, "335917d24133b4f5697f38bf"}, @timestamp_prespec={0x44, 0xc, 0xdf, 0x3, 0x6, [{@private=0xa010101, 0x3ff}]}, @end, @ssrr={0x89, 0x17, 0x3e, [@multicast1, @empty, @multicast1, @multicast2, @private=0xa010100]}, @end]}}, {{0x4e20, 0x4e21, r4, 0x41424344, 0x1, 0x0, 0x6, 0x80, 0x100, 0x0, 0x4ae, {[@fastopen={0x22, 0x2}]}}, {"ad125702c896"}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, r5, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000600)={@local, @link_local, @val={@val={0x88a8, 0x7}, {0x8100, 0x6, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, r5, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000080)={@random="37a454c624f7", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x15, 0x88, 0x65, 0x0, 0x7f, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x82, 0x9, "aae3561a2abe68"}]}}, {{0x4e21, 0x4e21, r5, 0x41424344, 0x0, 0x0, 0x6, 0x1, 0x81, 0x0, 0x5, {[@mss={0x2, 0x4}]}}, {"bb76d8b30a8f4ed5fe48a5f138c2abfcab54c79033c9bf3cc3c18dc186ad089c1ec4a94455a0164ea75b9de64d2d3f07eb83e31eaa6ac4f940dc0ed23e08e4d12ee686a479eba7a755233a26bfaebb40"}}}}}}, 0x0) syz_emit_ethernet(0x3a8, &(0x7f0000000540)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "fccf51", 0x372, 0x6, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0x2c}, {[@srh={0x11, 0x6, 0x4, 0x3, 0x4, 0x40, 0xfff, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @loopback]}, @routing={0x87, 0x4, 0x1, 0x6, 0x0, [@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @dstopts={0x5a, 0xc, '\x00', [@ra={0x5, 0x2, 0x3}, @generic={0x6, 0x5b, "f8f5778ba4b69efda42b05fd18fbf106f0ed61857c0dc53de9fac3d237390e9562d880d4ee5de1bf84a4a9e69bfb2fa20bf3326b5a4e5835688baf7c66617ee628f6ce1fa61257d60a98253a0e19282563c3707b2642ae714a8c81"}]}, @routing={0x88, 0xe, 0x1, 0x5, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @dev={0xfe, 0x80, '\x00', 0xc}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @loopback]}, @hopopts={0x2f, 0x39, '\x00', [@calipso={0x7, 0x40, {0x2, 0xe, 0x29, 0x5, [0x80000001, 0x3, 0x4, 0x1ff, 0x3, 0x60a, 0x7fffffff]}}, @pad1, @generic={0xb3, 0x9e, "c8de057b7e0b30296337040bbd697dcef8c56eeb03a62aee0d9115917747a5321fdd8131a4d075f8a1f23eac1555b1d1b70a576758c9f15d098de2ba60cd2dac8402ce82d77555db94e03c503d757db3353f19f103bc363bb4d223d9a4257b8c69d4be816658fe6d0672c1087dd5a4d1dfcbba6d3617dc4e89f0bd425eb24cd678be80cc3620cefe6c6170f912dc76d23ebc65d6a6f0237d26ea5d909fcc"}, @generic={0x9, 0xce, "cf9b30dbd60add123f61c22dfaf7938f9d5bee079b6f5890eb387b072b164e2a8a554d33407b626627a897d157ae1307a41c69f52f62d22f7632949b8b88e9dbe02ede83be16419a5c45f2fcecdcfeafcbd6e24e05ff23aa7f33bda8f61e4b52777d4c06f8f0ed11997ef5aebdb983687ada81ce8b8d334cf77e9aceab2e5046d456c047e9ce9c8cdef326d287ee42b882421a831066ba79d0d54b7b2bbc91ab180b893e1156fab8c419660d05f20ded2d9af8abc2a87bf11a70992956928af561008ea4899ef2fe006f2863aecf"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @pad1, @ra={0x5, 0x2, 0x957}]}], {{0x4e20, 0x4e20, r1, r5, 0x0, 0x0, 0x14, 0xc2, 0xf, 0x0, 0x7, {[@fastopen={0x22, 0xd, "21c2d6aa73889de15befc2"}, @timestamp={0x8, 0xa, 0x1c8c, 0x1}, @eol, @fastopen={0x22, 0xe, "cfb37a819ed3fd61f5fe2bee"}, @mptcp=@ack={0x1e, 0x13, 0x9, 0x4, "15ac6d0e697c9800820d7420106483"}, @sack_perm={0x4, 0x2}, @nop]}}, {"6918"}}}}}}}, 0x0) r6 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0x80000) bind$l2tp6(r6, &(0x7f0000000240)={0xa, 0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3, 0x1}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)={0x5c, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "e35f41b193ff79bc71ec6a6bc3d57886de3d7b4cd07ec3ee777de774"}}]}]}, 0x5c}, 0x1, 0x0, 0xf5}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r10, 0x814, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4000000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe0f}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x4c}}, 0x2000c011) executing program 3: sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x4c400) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x700, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="201200200a5500", @ANYRES16=0x0, @ANYBLOB="8f9f0000000000000000040000000c0001800800030003000000"], 0x20}}, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) getpid() sendto(0xffffffffffffffff, &(0x7f00000001c0)="6ef8ec2b5db0b6d39b66b3bf506e5b811f8793", 0x13, 0x4000, &(0x7f0000000300)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x80) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, 0x0, 0x880) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)=@newchain={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff1}}}, 0x24}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0x280}], 0x1) program crashed: INFO: task hung in nbd_queue_rq bisect: bisecting 30 programs bisect: split chunks (needed=false): <30> bisect: split chunk #0 of len 30 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=6m5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 6, 5, 6, 30, 26, 2, 2, 2, 4, 1, 24, 1, 4, 38, 2, 3, 25, 16, 10] detailed listing: executing program 1: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x4, 0x96}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="05000000010000", 0x7) executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9}) (fail_nth: 2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="05000000010000", 0x7) executing program 0: socket$kcm(0xa, 0x6, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) socket$can_raw(0x1d, 0x3, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) executing program 3: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x0, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r2, 0xfff) syz_emit_ethernet(0x9a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500640600fe8004008000000000000000000000bbfe800000000000000000000000000696a615d697", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9002000090780000fe06e2d4c3d9080a00000080000000001312d082e275205e556149a021cc13c33d8903030003030004020402220fcf6af75d5cdcf048b19c939556131227406263e43d5959a166a23bd1116edc000000"], 0x0) syz_emit_ethernet(0x56, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60df1d0000200600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8004000090780000080a0000000000000000000002d7843a2ec5bdbf11e87b0d2cd717c8f3b658122d0f3256441f6544539ddd0ce63b23795d2b2d1e377302888b9ba91c1a09d57bed9c53429c36"], 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x124}}, 0x0) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r5, 0x29, 0x77, 0x9, 0x2, 0x42, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x7800, 0x10, 0x68000, 0x620bca37}}) (async, rerun: 64) r6 = accept4(r1, 0x0, 0x0, 0x0) (async, rerun: 64) r7 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r7, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) (async) sendmmsg$inet(r7, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) (async, rerun: 64) bind$vsock_stream(r8, &(0x7f0000000440), 0x10) (async, rerun: 64) listen(r8, 0x0) (async, rerun: 64) r9 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async, rerun: 64) writev(r9, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) (rerun: 64) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r6, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002940)="99d6", 0x7ffff000}, {&(0x7f0000002980)="f555c15b70122cd0c98a5b39d975242bce2ae54f0a7ee6f8291bf1887f6fec817c26b1d863c34b037a56faa6dde89b", 0x2f}], 0x2}}], 0x1, 0x0) executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) r2 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7, 0x0, 0x0, 0x0, 0xe3}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1a) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f0000000000)={0x1d, r4}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r11 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r11, &(0x7f0000000000)={0x1d, r10}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x400, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {0x0, 0xb}}}, 0x24}}, 0x0) executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000f500000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080003400000000214"], 0xc0}}, 0x0) executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000, 0x41}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) executing program 4: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), 0xe) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, r1, 0x1, 0xffffffff, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000001020000000073019d000000000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[], 0x138}}, 0x4004014) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x4004009) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0500000000000000000000001d2adee4fa09e1bd8a4fcaf3355b09a69713eb64c0a82e06df6d805a0be1fb9cb54a7a31ef0e21266dcb42b48ee7e5cccfdd8c7649e0c6951053ff", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, 0x0, 0x0}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x3) pipe(&(0x7f0000000100)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = accept4$rose(r0, 0x0, &(0x7f00000005c0), 0x80800) ioctl$SIOCRSACCEPT(r7, 0x89e3) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x9) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) executing program 0: syz_emit_ethernet(0x2e1, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffff000086dd6001000002ab110000000000000000000000ffffac1414aafe80000000000000000000000000ffaa3c000400006dff"], 0x0) executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) executing program 3: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x7, 0x7, 0x3, 0x5, {{0x21, 0x4, 0x3, 0x6, 0x84, 0x66, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010101, @empty, {[@end, @rr={0x7, 0x17, 0xe6, [@dev={0xac, 0x14, 0x14, 0x1e}, @multicast2, @multicast2, @multicast2, @private=0xa010101]}, @cipso={0x86, 0xa, 0x3, [{0x2, 0x4, '\x00F'}]}, @timestamp_addr={0x44, 0x14, 0xff, 0x1, 0x5, [{@remote, 0x6}, {@broadcast, 0x800}]}, @generic={0x82, 0xffffffffffffff80, "c8"}, @cipso={0x86, 0x2a, 0x3, [{0x6, 0x10, "a858c7f852619c3979dc1be1901a"}, {0x7, 0xb, "a87c3263cf32ad87f7"}, {0x2, 0x9, "5f3b3183cd5a9b"}]}, @rr={0x7, 0xb, 0x43, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) socket$unix(0x1, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x3c) (async) socket$inet6(0xa, 0x3, 0x3c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) pipe(&(0x7f0000000300)) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0xb869, 0x8}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x4, 0x4, 0x20001, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r3, 0x0, 0x0}, 0x20) socket$key(0xf, 0x3, 0x2) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000001900)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in=@dev}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x2, 0x0, @mcast2}}]}, 0xa0}}, 0x0) (async) sendmsg$key(r4, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000001900)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in=@dev}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x2, 0x0, @mcast2}}]}, 0xa0}}, 0x0) write$binfmt_script(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000854000001700000085000000d000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000854000001700000085000000d000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x8, 0x0, 0x0, 0x100}, @jmp={0x6, 0x0, 0x7}]}, &(0x7f0000000540)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x8, 0x0, 0x0, 0x100}, @jmp={0x6, 0x0, 0x7}]}, &(0x7f0000000540)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv6_delrule={0x1c, 0x21, 0x1}, 0x1c}}, 0x0) executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000280)={0x41424344}, 0x5, 0x9) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@mcast2}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@local, @remote, @void, {@generic={0x1c, "c0fa8fba344561b40704046a807c23105e5e8d70915a5e74d43c2fe0"}}}, 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, 0x0) syz_extract_tcp_res$synack(&(0x7f00000002c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x7c, &(0x7f00000004c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfe}, @val={@val={0x88a8, 0x6, 0x0, 0x4}, {0x8100, 0x7, 0x1, 0x2}}, {@ipv4={0x800, @tcp={{0x12, 0x4, 0x0, 0x5, 0x66, 0x67, 0x0, 0x1, 0x6, 0x0, @multicast1, @rand_addr=0x64010100, {[@generic={0x7, 0xe, "335917d24133b4f5697f38bf"}, @timestamp_prespec={0x44, 0xc, 0xdf, 0x3, 0x6, [{@private=0xa010101, 0x3ff}]}, @end, @ssrr={0x89, 0x17, 0x3e, [@multicast1, @empty, @multicast1, @multicast2, @private=0xa010100]}, @end]}}, {{0x4e20, 0x4e21, r4, 0x41424344, 0x1, 0x0, 0x6, 0x80, 0x100, 0x0, 0x4ae, {[@fastopen={0x22, 0x2}]}}, {"ad125702c896"}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, r5, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000600)={@local, @link_local, @val={@val={0x88a8, 0x7}, {0x8100, 0x6, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, r5, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000080)={@random="37a454c624f7", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x15, 0x88, 0x65, 0x0, 0x7f, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x82, 0x9, "aae3561a2abe68"}]}}, {{0x4e21, 0x4e21, r5, 0x41424344, 0x0, 0x0, 0x6, 0x1, 0x81, 0x0, 0x5, {[@mss={0x2, 0x4}]}}, {"bb76d8b30a8f4ed5fe48a5f138c2abfcab54c79033c9bf3cc3c18dc186ad089c1ec4a94455a0164ea75b9de64d2d3f07eb83e31eaa6ac4f940dc0ed23e08e4d12ee686a479eba7a755233a26bfaebb40"}}}}}}, 0x0) syz_emit_ethernet(0x3a8, &(0x7f0000000540)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "fccf51", 0x372, 0x6, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0x2c}, {[@srh={0x11, 0x6, 0x4, 0x3, 0x4, 0x40, 0xfff, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @loopback]}, @routing={0x87, 0x4, 0x1, 0x6, 0x0, [@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @dstopts={0x5a, 0xc, '\x00', [@ra={0x5, 0x2, 0x3}, @generic={0x6, 0x5b, "f8f5778ba4b69efda42b05fd18fbf106f0ed61857c0dc53de9fac3d237390e9562d880d4ee5de1bf84a4a9e69bfb2fa20bf3326b5a4e5835688baf7c66617ee628f6ce1fa61257d60a98253a0e19282563c3707b2642ae714a8c81"}]}, @routing={0x88, 0xe, 0x1, 0x5, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @dev={0xfe, 0x80, '\x00', 0xc}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @loopback]}, @hopopts={0x2f, 0x39, '\x00', [@calipso={0x7, 0x40, {0x2, 0xe, 0x29, 0x5, [0x80000001, 0x3, 0x4, 0x1ff, 0x3, 0x60a, 0x7fffffff]}}, @pad1, @generic={0xb3, 0x9e, "c8de057b7e0b30296337040bbd697dcef8c56eeb03a62aee0d9115917747a5321fdd8131a4d075f8a1f23eac1555b1d1b70a576758c9f15d098de2ba60cd2dac8402ce82d77555db94e03c503d757db3353f19f103bc363bb4d223d9a4257b8c69d4be816658fe6d0672c1087dd5a4d1dfcbba6d3617dc4e89f0bd425eb24cd678be80cc3620cefe6c6170f912dc76d23ebc65d6a6f0237d26ea5d909fcc"}, @generic={0x9, 0xce, "cf9b30dbd60add123f61c22dfaf7938f9d5bee079b6f5890eb387b072b164e2a8a554d33407b626627a897d157ae1307a41c69f52f62d22f7632949b8b88e9dbe02ede83be16419a5c45f2fcecdcfeafcbd6e24e05ff23aa7f33bda8f61e4b52777d4c06f8f0ed11997ef5aebdb983687ada81ce8b8d334cf77e9aceab2e5046d456c047e9ce9c8cdef326d287ee42b882421a831066ba79d0d54b7b2bbc91ab180b893e1156fab8c419660d05f20ded2d9af8abc2a87bf11a70992956928af561008ea4899ef2fe006f2863aecf"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @pad1, @ra={0x5, 0x2, 0x957}]}], {{0x4e20, 0x4e20, r1, r5, 0x0, 0x0, 0x14, 0xc2, 0xf, 0x0, 0x7, {[@fastopen={0x22, 0xd, "21c2d6aa73889de15befc2"}, @timestamp={0x8, 0xa, 0x1c8c, 0x1}, @eol, @fastopen={0x22, 0xe, "cfb37a819ed3fd61f5fe2bee"}, @mptcp=@ack={0x1e, 0x13, 0x9, 0x4, "15ac6d0e697c9800820d7420106483"}, @sack_perm={0x4, 0x2}, @nop]}}, {"6918"}}}}}}}, 0x0) r6 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0x80000) bind$l2tp6(r6, &(0x7f0000000240)={0xa, 0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3, 0x1}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)={0x5c, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "e35f41b193ff79bc71ec6a6bc3d57886de3d7b4cd07ec3ee777de774"}}]}]}, 0x5c}, 0x1, 0x0, 0xf5}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r10, 0x814, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4000000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe0f}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x4c}}, 0x2000c011) executing program 3: sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x4c400) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x700, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="201200200a5500", @ANYRES16=0x0, @ANYBLOB="8f9f0000000000000000040000000c0001800800030003000000"], 0x20}}, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) getpid() sendto(0xffffffffffffffff, &(0x7f00000001c0)="6ef8ec2b5db0b6d39b66b3bf506e5b811f8793", 0x13, 0x4000, &(0x7f0000000300)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x80) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, 0x0, 0x880) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)=@newchain={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff1}}}, 0x24}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0x280}], 0x1) program did not crash bisect: testing without sub-chunk 2/3 testing program (duration=6m5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 30, 2, 1, 2, 4, 25, 3, 10, 6, 1, 24, 1, 4, 38, 2, 3, 25, 16, 10] detailed listing: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x2}, [@CTA_FILTER={0x4}]}, 0x18}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r4, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) executing program 2: pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, 0x0, 0x1) vmsplice(r1, &(0x7f0000002480)=[{&(0x7f00000001c0)="9718b7b35f0f5725d440a440e64128467b2edda3", 0x14}], 0x1, 0x2) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r5], 0x4c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={0x0, 0xa}, 0x1, 0x0, 0x0, 0x4004004}, 0x4804) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000008000000ff0f00000600000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0500"/17], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe79, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = epoll_create1(0x0) r9 = socket$packet(0x11, 0x4000000000002, 0x300) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000003424203"], 0x0) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000380)=0x1, 0x4) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000040)={0x2000201e}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x21, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000200000000000000401b83d318110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000018160000", @ANYRES32=r0, @ANYBLOB="0200000000000000182000002347fd7876383cc9e9a9fbf1bb6c3488326242171e3b49fdbb6204a76777c2ac845b620b74de19bb5f7fb29e6c95f4bb11f1c547477fb9e9c76668aeea9c24732006b426c9d8cc2edcf2893235279f95772c137e206bb06b1d3f5e8f113e", @ANYRES32, @ANYBLOB="0000000003080d00185a00000a000000000000000000000018470000fbffffff0000000000000000bf91000000000000b7020000010000008500000085001f00b7000000000000d8f600950000000000"], &(0x7f0000000680)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @xdp, r0, 0x8, &(0x7f0000000780)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000007c0)=[{0x3, 0x1, 0x6, 0xb}, {0x4, 0x3, 0x8}], 0x10, 0x810, @void, @value}, 0x94) r10 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000000c0)={0x77359400}, 0x10) splice(r0, 0x0, r3, 0x0, 0xe8, 0x0) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x121, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xff72, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0}}, 0x3) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x23000000, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001800090300000000000000000a002000000000000000000008000400", @ANYRES32=r1], 0x24}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x28, 0x5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket(0x2a, 0x2, 0x0) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x27, 0x22, 0x0, &(0x7f0000000100)="f80204000000000000007f5b0800c22da2e6d3defa2690e5ce3a4fd7d256ef256140", 0x0, 0x20000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x28, 0x9, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0xf9b7, 0x0, 0xa0, 0x80, 0x1d}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000}, {0x2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@rand_addr=0x64010104}, 0x0, @in=@multicast1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0xe8) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r7, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r10, @ANYBLOB="00000000000000001c002b8008000100", @ANYRES32, @ANYBLOB="08000300190000000800080064"], 0x3c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x44}}, 0x4000040) executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000001900)="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", 0xfa8, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) socket(0x23, 0x80000, 0x2dc) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f40)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004805}, 0x40000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r1, &(0x7f0000004000)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001900)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0x71}]}}}], 0x18}}], 0x1, 0x20040) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@enum={0x6, 0x2, 0x0, 0x6, 0x4, [{0x1}, {0x2}]}]}, {0x0, [0x61, 0x61, 0x5f, 0x0, 0x0, 0x2e, 0x30, 0x61]}}, &(0x7f00000013c0)=""/178, 0x3e, 0xb2, 0x1, 0x0, 0x0, @void, @value}, 0x20) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000220001069552616970fdbf000000000000000014"], 0x24}], 0x1}, 0x0) executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000001020000000073019d000000000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[], 0x138}}, 0x4004014) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x4004009) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0500000000000000000000001d2adee4fa09e1bd8a4fcaf3355b09a69713eb64c0a82e06df6d805a0be1fb9cb54a7a31ef0e21266dcb42b48ee7e5cccfdd8c7649e0c6951053ff", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, 0x0, 0x0}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x3) pipe(&(0x7f0000000100)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = accept4$rose(r0, 0x0, &(0x7f00000005c0), 0x80800) ioctl$SIOCRSACCEPT(r7, 0x89e3) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x9) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) executing program 0: syz_emit_ethernet(0x2e1, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffff000086dd6001000002ab110000000000000000000000ffffac1414aafe80000000000000000000000000ffaa3c000400006dff"], 0x0) executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) executing program 3: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x7, 0x7, 0x3, 0x5, {{0x21, 0x4, 0x3, 0x6, 0x84, 0x66, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010101, @empty, {[@end, @rr={0x7, 0x17, 0xe6, [@dev={0xac, 0x14, 0x14, 0x1e}, @multicast2, @multicast2, @multicast2, @private=0xa010101]}, @cipso={0x86, 0xa, 0x3, [{0x2, 0x4, '\x00F'}]}, @timestamp_addr={0x44, 0x14, 0xff, 0x1, 0x5, [{@remote, 0x6}, {@broadcast, 0x800}]}, @generic={0x82, 0xffffffffffffff80, "c8"}, @cipso={0x86, 0x2a, 0x3, [{0x6, 0x10, "a858c7f852619c3979dc1be1901a"}, {0x7, 0xb, "a87c3263cf32ad87f7"}, {0x2, 0x9, "5f3b3183cd5a9b"}]}, @rr={0x7, 0xb, 0x43, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) socket$unix(0x1, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x3c) (async) socket$inet6(0xa, 0x3, 0x3c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) pipe(&(0x7f0000000300)) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0xb869, 0x8}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x4, 0x4, 0x20001, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r3, 0x0, 0x0}, 0x20) socket$key(0xf, 0x3, 0x2) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000001900)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in=@dev}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x2, 0x0, @mcast2}}]}, 0xa0}}, 0x0) (async) sendmsg$key(r4, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000001900)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in=@dev}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x2, 0x0, @mcast2}}]}, 0xa0}}, 0x0) write$binfmt_script(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000854000001700000085000000d000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000854000001700000085000000d000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x8, 0x0, 0x0, 0x100}, @jmp={0x6, 0x0, 0x7}]}, &(0x7f0000000540)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xd, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x8, 0x0, 0x0, 0x100}, @jmp={0x6, 0x0, 0x7}]}, &(0x7f0000000540)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv6_delrule={0x1c, 0x21, 0x1}, 0x1c}}, 0x0) executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000280)={0x41424344}, 0x5, 0x9) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@mcast2}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@local, @remote, @void, {@generic={0x1c, "c0fa8fba344561b40704046a807c23105e5e8d70915a5e74d43c2fe0"}}}, 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, 0x0) syz_extract_tcp_res$synack(&(0x7f00000002c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x7c, &(0x7f00000004c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfe}, @val={@val={0x88a8, 0x6, 0x0, 0x4}, {0x8100, 0x7, 0x1, 0x2}}, {@ipv4={0x800, @tcp={{0x12, 0x4, 0x0, 0x5, 0x66, 0x67, 0x0, 0x1, 0x6, 0x0, @multicast1, @rand_addr=0x64010100, {[@generic={0x7, 0xe, "335917d24133b4f5697f38bf"}, @timestamp_prespec={0x44, 0xc, 0xdf, 0x3, 0x6, [{@private=0xa010101, 0x3ff}]}, @end, @ssrr={0x89, 0x17, 0x3e, [@multicast1, @empty, @multicast1, @multicast2, @private=0xa010100]}, @end]}}, {{0x4e20, 0x4e21, r4, 0x41424344, 0x1, 0x0, 0x6, 0x80, 0x100, 0x0, 0x4ae, {[@fastopen={0x22, 0x2}]}}, {"ad125702c896"}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, r5, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000600)={@local, @link_local, @val={@val={0x88a8, 0x7}, {0x8100, 0x6, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, r5, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000080)={@random="37a454c624f7", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x15, 0x88, 0x65, 0x0, 0x7f, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x82, 0x9, "aae3561a2abe68"}]}}, {{0x4e21, 0x4e21, r5, 0x41424344, 0x0, 0x0, 0x6, 0x1, 0x81, 0x0, 0x5, {[@mss={0x2, 0x4}]}}, {"bb76d8b30a8f4ed5fe48a5f138c2abfcab54c79033c9bf3cc3c18dc186ad089c1ec4a94455a0164ea75b9de64d2d3f07eb83e31eaa6ac4f940dc0ed23e08e4d12ee686a479eba7a755233a26bfaebb40"}}}}}}, 0x0) syz_emit_ethernet(0x3a8, &(0x7f0000000540)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "fccf51", 0x372, 0x6, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0x2c}, {[@srh={0x11, 0x6, 0x4, 0x3, 0x4, 0x40, 0xfff, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @loopback]}, @routing={0x87, 0x4, 0x1, 0x6, 0x0, [@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @dstopts={0x5a, 0xc, '\x00', [@ra={0x5, 0x2, 0x3}, @generic={0x6, 0x5b, "f8f5778ba4b69efda42b05fd18fbf106f0ed61857c0dc53de9fac3d237390e9562d880d4ee5de1bf84a4a9e69bfb2fa20bf3326b5a4e5835688baf7c66617ee628f6ce1fa61257d60a98253a0e19282563c3707b2642ae714a8c81"}]}, @routing={0x88, 0xe, 0x1, 0x5, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @dev={0xfe, 0x80, '\x00', 0xc}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @loopback]}, @hopopts={0x2f, 0x39, '\x00', [@calipso={0x7, 0x40, {0x2, 0xe, 0x29, 0x5, [0x80000001, 0x3, 0x4, 0x1ff, 0x3, 0x60a, 0x7fffffff]}}, @pad1, @generic={0xb3, 0x9e, "c8de057b7e0b30296337040bbd697dcef8c56eeb03a62aee0d9115917747a5321fdd8131a4d075f8a1f23eac1555b1d1b70a576758c9f15d098de2ba60cd2dac8402ce82d77555db94e03c503d757db3353f19f103bc363bb4d223d9a4257b8c69d4be816658fe6d0672c1087dd5a4d1dfcbba6d3617dc4e89f0bd425eb24cd678be80cc3620cefe6c6170f912dc76d23ebc65d6a6f0237d26ea5d909fcc"}, @generic={0x9, 0xce, "cf9b30dbd60add123f61c22dfaf7938f9d5bee079b6f5890eb387b072b164e2a8a554d33407b626627a897d157ae1307a41c69f52f62d22f7632949b8b88e9dbe02ede83be16419a5c45f2fcecdcfeafcbd6e24e05ff23aa7f33bda8f61e4b52777d4c06f8f0ed11997ef5aebdb983687ada81ce8b8d334cf77e9aceab2e5046d456c047e9ce9c8cdef326d287ee42b882421a831066ba79d0d54b7b2bbc91ab180b893e1156fab8c419660d05f20ded2d9af8abc2a87bf11a70992956928af561008ea4899ef2fe006f2863aecf"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @pad1, @ra={0x5, 0x2, 0x957}]}], {{0x4e20, 0x4e20, r1, r5, 0x0, 0x0, 0x14, 0xc2, 0xf, 0x0, 0x7, {[@fastopen={0x22, 0xd, "21c2d6aa73889de15befc2"}, @timestamp={0x8, 0xa, 0x1c8c, 0x1}, @eol, @fastopen={0x22, 0xe, "cfb37a819ed3fd61f5fe2bee"}, @mptcp=@ack={0x1e, 0x13, 0x9, 0x4, "15ac6d0e697c9800820d7420106483"}, @sack_perm={0x4, 0x2}, @nop]}}, {"6918"}}}}}}}, 0x0) r6 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0x80000) bind$l2tp6(r6, &(0x7f0000000240)={0xa, 0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3, 0x1}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)={0x5c, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "e35f41b193ff79bc71ec6a6bc3d57886de3d7b4cd07ec3ee777de774"}}]}]}, 0x5c}, 0x1, 0x0, 0xf5}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r10, 0x814, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4000000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe0f}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x4c}}, 0x2000c011) executing program 3: sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x4c400) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399eb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x700, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="201200200a5500", @ANYRES16=0x0, @ANYBLOB="8f9f0000000000000000040000000c0001800800030003000000"], 0x20}}, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) getpid() sendto(0xffffffffffffffff, &(0x7f00000001c0)="6ef8ec2b5db0b6d39b66b3bf506e5b811f8793", 0x13, 0x4000, &(0x7f0000000300)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x80) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, 0x0, 0x880) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)=@newchain={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff1}}}, 0x24}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0x280}], 0x1) program crashed: INFO: task hung in nbd_queue_rq bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 30, 2, 1, 2, 4, 25, 3, 10, 6] detailed listing: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x2}, [@CTA_FILTER={0x4}]}, 0x18}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r4, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) executing program 2: pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, 0x0, 0x1) vmsplice(r1, &(0x7f0000002480)=[{&(0x7f00000001c0)="9718b7b35f0f5725d440a440e64128467b2edda3", 0x14}], 0x1, 0x2) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r5], 0x4c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={0x0, 0xa}, 0x1, 0x0, 0x0, 0x4004004}, 0x4804) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000008000000ff0f00000600000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0500"/17], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe79, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = epoll_create1(0x0) r9 = socket$packet(0x11, 0x4000000000002, 0x300) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000003424203"], 0x0) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000380)=0x1, 0x4) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000040)={0x2000201e}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x21, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000200000000000000401b83d318110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000018160000", @ANYRES32=r0, @ANYBLOB="0200000000000000182000002347fd7876383cc9e9a9fbf1bb6c3488326242171e3b49fdbb6204a76777c2ac845b620b74de19bb5f7fb29e6c95f4bb11f1c547477fb9e9c76668aeea9c24732006b426c9d8cc2edcf2893235279f95772c137e206bb06b1d3f5e8f113e", @ANYRES32, @ANYBLOB="0000000003080d00185a00000a000000000000000000000018470000fbffffff0000000000000000bf91000000000000b7020000010000008500000085001f00b7000000000000d8f600950000000000"], &(0x7f0000000680)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @xdp, r0, 0x8, &(0x7f0000000780)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000007c0)=[{0x3, 0x1, 0x6, 0xb}, {0x4, 0x3, 0x8}], 0x10, 0x810, @void, @value}, 0x94) r10 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000000c0)={0x77359400}, 0x10) splice(r0, 0x0, r3, 0x0, 0xe8, 0x0) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x121, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xff72, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0}}, 0x3) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x23000000, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001800090300000000000000000a002000000000000000000008000400", @ANYRES32=r1], 0x24}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x28, 0x5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket(0x2a, 0x2, 0x0) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x27, 0x22, 0x0, &(0x7f0000000100)="f80204000000000000007f5b0800c22da2e6d3defa2690e5ce3a4fd7d256ef256140", 0x0, 0x20000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x28, 0x9, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0xf9b7, 0x0, 0xa0, 0x80, 0x1d}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000}, {0x2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@rand_addr=0x64010104}, 0x0, @in=@multicast1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0xe8) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r7, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r10, @ANYBLOB="00000000000000001c002b8008000100", @ANYRES32, @ANYBLOB="08000300190000000800080064"], 0x3c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x44}}, 0x4000040) executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000001900)="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", 0xfa8, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) socket(0x23, 0x80000, 0x2dc) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f40)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004805}, 0x40000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r1, &(0x7f0000004000)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001900)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0x71}]}}}], 0x18}}], 0x1, 0x20040) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@enum={0x6, 0x2, 0x0, 0x6, 0x4, [{0x1}, {0x2}]}]}, {0x0, [0x61, 0x61, 0x5f, 0x0, 0x0, 0x2e, 0x30, 0x61]}}, &(0x7f00000013c0)=""/178, 0x3e, 0xb2, 0x1, 0x0, 0x0, @void, @value}, 0x20) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000220001069552616970fdbf000000000000000014"], 0x24}], 0x1}, 0x0) program crashed: INFO: task hung in nbd_queue_rq bisect: the chunk can be dropped bisect: split chunks (needed=true): <10> bisect: split chunk #0 of len 10 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 25, 3, 10, 6] detailed listing: executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001800090300000000000000000a002000000000000000000008000400", @ANYRES32=r1], 0x24}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x28, 0x5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket(0x2a, 0x2, 0x0) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x27, 0x22, 0x0, &(0x7f0000000100)="f80204000000000000007f5b0800c22da2e6d3defa2690e5ce3a4fd7d256ef256140", 0x0, 0x20000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x28, 0x9, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0xf9b7, 0x0, 0xa0, 0x80, 0x1d}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000}, {0x2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@rand_addr=0x64010104}, 0x0, @in=@multicast1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0xe8) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r7, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r10, @ANYBLOB="00000000000000001c002b8008000100", @ANYRES32, @ANYBLOB="08000300190000000800080064"], 0x3c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x44}}, 0x4000040) executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000001900)="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", 0xfa8, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) socket(0x23, 0x80000, 0x2dc) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f40)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004805}, 0x40000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r1, &(0x7f0000004000)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001900)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0x71}]}}}], 0x18}}], 0x1, 0x20040) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@enum={0x6, 0x2, 0x0, 0x6, 0x4, [{0x1}, {0x2}]}]}, {0x0, [0x61, 0x61, 0x5f, 0x0, 0x0, 0x2e, 0x30, 0x61]}}, &(0x7f00000013c0)=""/178, 0x3e, 0xb2, 0x1, 0x0, 0x0, @void, @value}, 0x20) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000220001069552616970fdbf000000000000000014"], 0x24}], 0x1}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 30, 2, 1, 2] detailed listing: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x2}, [@CTA_FILTER={0x4}]}, 0x18}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r4, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) executing program 2: pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, 0x0, 0x1) vmsplice(r1, &(0x7f0000002480)=[{&(0x7f00000001c0)="9718b7b35f0f5725d440a440e64128467b2edda3", 0x14}], 0x1, 0x2) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r5], 0x4c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={0x0, 0xa}, 0x1, 0x0, 0x0, 0x4004004}, 0x4804) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000008000000ff0f00000600000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0500"/17], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe79, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = epoll_create1(0x0) r9 = socket$packet(0x11, 0x4000000000002, 0x300) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000003424203"], 0x0) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000380)=0x1, 0x4) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000040)={0x2000201e}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x21, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000200000000000000401b83d318110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000018160000", @ANYRES32=r0, @ANYBLOB="0200000000000000182000002347fd7876383cc9e9a9fbf1bb6c3488326242171e3b49fdbb6204a76777c2ac845b620b74de19bb5f7fb29e6c95f4bb11f1c547477fb9e9c76668aeea9c24732006b426c9d8cc2edcf2893235279f95772c137e206bb06b1d3f5e8f113e", @ANYRES32, @ANYBLOB="0000000003080d00185a00000a000000000000000000000018470000fbffffff0000000000000000bf91000000000000b7020000010000008500000085001f00b7000000000000d8f600950000000000"], &(0x7f0000000680)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @xdp, r0, 0x8, &(0x7f0000000780)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000007c0)=[{0x3, 0x1, 0x6, 0xb}, {0x4, 0x3, 0x8}], 0x10, 0x810, @void, @value}, 0x94) r10 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000000c0)={0x77359400}, 0x10) splice(r0, 0x0, r3, 0x0, 0xe8, 0x0) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55a8a89b60317cd78ea1dc8e0f77f2c1e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3f8f26283bcd93e80cacc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac6ed77718098b2f722bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d47685404cc540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1522ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7b544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff310601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7affffffff7177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f0a00000000000000159596ac570c4b889106f937d56b2346c818917b727bf5e2741068ec000000000000000000ec84"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x121, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xff72, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0}}, 0x3) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x23000000, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) program crashed: INFO: task hung in nbd_queue_rq bisect: the chunk can be dropped bisect: split chunks (needed=true): <5> bisect: split chunk #0 of len 5 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 2] detailed listing: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x23000000, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 30, 2] detailed listing: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x2}, [@CTA_FILTER={0x4}]}, 0x18}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r4, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) executing program 2: pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, 0x0, 0x1) vmsplice(r1, &(0x7f0000002480)=[{&(0x7f00000001c0)="9718b7b35f0f5725d440a440e64128467b2edda3", 0x14}], 0x1, 0x2) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r5], 0x4c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={0x0, 0xa}, 0x1, 0x0, 0x0, 0x4004004}, 0x4804) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000008000000ff0f00000600000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0500"/17], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe79, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = epoll_create1(0x0) r9 = socket$packet(0x11, 0x4000000000002, 0x300) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000003424203"], 0x0) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000380)=0x1, 0x4) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000040)={0x2000201e}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x21, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000200000000000000401b83d318110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000018160000", @ANYRES32=r0, @ANYBLOB="0200000000000000182000002347fd7876383cc9e9a9fbf1bb6c3488326242171e3b49fdbb6204a76777c2ac845b620b74de19bb5f7fb29e6c95f4bb11f1c547477fb9e9c76668aeea9c24732006b426c9d8cc2edcf2893235279f95772c137e206bb06b1d3f5e8f113e", @ANYRES32, @ANYBLOB="0000000003080d00185a00000a000000000000000000000018470000fbffffff0000000000000000bf91000000000000b7020000010000008500000085001f00b7000000000000d8f600950000000000"], &(0x7f0000000680)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @xdp, r0, 0x8, &(0x7f0000000780)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000007c0)=[{0x3, 0x1, 0x6, 0xb}, {0x4, 0x3, 0x8}], 0x10, 0x810, @void, @value}, 0x94) r10 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000000c0)={0x77359400}, 0x10) splice(r0, 0x0, r3, 0x0, 0xe8, 0x0) executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55a8a89b60317cd78ea1dc8e0f77f2c1e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3f8f26283bcd93e80cacc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac6ed77718098b2f722bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d47685404cc540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1522ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7b544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff310601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7affffffff7177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f0a00000000000000159596ac570c4b889106f937d56b2346c818917b727bf5e2741068ec000000000000000000ec84"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x121, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xff72, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0}}, 0x3) program crashed: INFO: task hung in nbd_queue_rq bisect: the chunk can be dropped bisect: split chunks (needed=true): <3> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-bpf$BPF_GET_PROG_INFO detailed listing: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x121, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xff72, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0}}, 0x3) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 30] detailed listing: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x2}, [@CTA_FILTER={0x4}]}, 0x18}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r4, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) executing program 2: pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, 0x0, 0x1) vmsplice(r1, &(0x7f0000002480)=[{&(0x7f00000001c0)="9718b7b35f0f5725d440a440e64128467b2edda3", 0x14}], 0x1, 0x2) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r5], 0x4c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={0x0, 0xa}, 0x1, 0x0, 0x0, 0x4004004}, 0x4804) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000008000000ff0f00000600000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0500"/17], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe79, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = epoll_create1(0x0) r9 = socket$packet(0x11, 0x4000000000002, 0x300) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000003424203"], 0x0) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000380)=0x1, 0x4) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000040)={0x2000201e}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x21, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000200000000000000401b83d318110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000018160000", @ANYRES32=r0, @ANYBLOB="0200000000000000182000002347fd7876383cc9e9a9fbf1bb6c3488326242171e3b49fdbb6204a76777c2ac845b620b74de19bb5f7fb29e6c95f4bb11f1c547477fb9e9c76668aeea9c24732006b426c9d8cc2edcf2893235279f95772c137e206bb06b1d3f5e8f113e", @ANYRES32, @ANYBLOB="0000000003080d00185a00000a000000000000000000000018470000fbffffff0000000000000000bf91000000000000b7020000010000008500000085001f00b7000000000000d8f600950000000000"], &(0x7f0000000680)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @xdp, r0, 0x8, &(0x7f0000000780)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000007c0)=[{0x3, 0x1, 0x6, 0xb}, {0x4, 0x3, 0x8}], 0x10, 0x810, @void, @value}, 0x94) r10 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000000c0)={0x77359400}, 0x10) splice(r0, 0x0, r3, 0x0, 0xe8, 0x0) program crashed: INFO: task hung in nbd_queue_rq bisect: the chunk can be dropped bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pipe-socket$nl_generic-syz_genetlink_get_family_id$nl80211-sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL-vmsplice-socket$inet-bind$inet-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-sendmsg$nl_route-sendmsg$NFT_MSG_GETTABLE-setsockopt$inet_int-connect$inet-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$PROG_LOAD-epoll_create1-socket$packet-syz_emit_ethernet-setsockopt$packet_int-setsockopt$packet_tx_ring-epoll_ctl$EPOLL_CTL_ADD-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-socket$kcm-sendmsg$kcm-setsockopt$sock_timeval-splice detailed listing: executing program 2: pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, 0x0, 0x1) vmsplice(r1, &(0x7f0000002480)=[{&(0x7f00000001c0)="9718b7b35f0f5725d440a440e64128467b2edda3", 0x14}], 0x1, 0x2) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r5], 0x4c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={0x0, 0xa}, 0x1, 0x0, 0x0, 0x4004004}, 0x4804) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000008000000ff0f00000600000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0500"/17], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe79, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = epoll_create1(0x0) r9 = socket$packet(0x11, 0x4000000000002, 0x300) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000003424203"], 0x0) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000380)=0x1, 0x4) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000040)={0x2000201e}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x21, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000200000000000000401b83d318110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000018160000", @ANYRES32=r0, @ANYBLOB="0200000000000000182000002347fd7876383cc9e9a9fbf1bb6c3488326242171e3b49fdbb6204a76777c2ac845b620b74de19bb5f7fb29e6c95f4bb11f1c547477fb9e9c76668aeea9c24732006b426c9d8cc2edcf2893235279f95772c137e206bb06b1d3f5e8f113e", @ANYRES32, @ANYBLOB="0000000003080d00185a00000a000000000000000000000018470000fbffffff0000000000000000bf91000000000000b7020000010000008500000085001f00b7000000000000d8f600950000000000"], &(0x7f0000000680)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @xdp, r0, 0x8, &(0x7f0000000780)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000007c0)=[{0x3, 0x1, 0x6, 0xb}, {0x4, 0x3, 0x8}], 0x10, 0x810, @void, @value}, 0x94) r10 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000000c0)={0x77359400}, 0x10) splice(r0, 0x0, r3, 0x0, 0xe8, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-socket$nl_netfilter-sendmsg$IPCTNL_MSG_CT_GET-socket$inet6_sctp-socket$nl_route-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-getsockopt$inet6_tcp_TCP_REPAIR_WINDOW-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x2}, [@CTA_FILTER={0x4}]}, 0x18}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r4, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) program crashed: INFO: task hung in nbd_queue_rq bisect: the chunk can be dropped bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 1 programs left: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x2}, [@CTA_FILTER={0x4}]}, 0x18}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r4, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) bisect: trying to concatenate bisect: concatenate 1 entries testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-socket$nl_netfilter-sendmsg$IPCTNL_MSG_CT_GET-socket$inet6_sctp-socket$nl_route-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-getsockopt$inet6_tcp_TCP_REPAIR_WINDOW-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x2}, [@CTA_FILTER={0x4}]}, 0x18}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r4, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) program crashed: INFO: task hung in nbd_queue_rq bisect: concatenation succeeded found reproducer with 14 syscalls minimizing guilty program testing program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-socket$nl_netfilter-sendmsg$IPCTNL_MSG_CT_GET-socket$inet6_sctp-socket$nl_route-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-getsockopt$inet6_tcp_TCP_REPAIR_WINDOW-syz_genetlink_get_family_id$nbd-socketpair$nbd detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x2}, [@CTA_FILTER={0x4}]}, 0x18}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) program did not crash testing program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-socket$nl_netfilter-sendmsg$IPCTNL_MSG_CT_GET-socket$inet6_sctp-socket$nl_route-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-getsockopt$inet6_tcp_TCP_REPAIR_WINDOW-syz_genetlink_get_family_id$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x2}, [@CTA_FILTER={0x4}]}, 0x18}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) program did not crash testing program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-socket$nl_netfilter-sendmsg$IPCTNL_MSG_CT_GET-socket$inet6_sctp-socket$nl_route-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-getsockopt$inet6_tcp_TCP_REPAIR_WINDOW-socketpair$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x2}, [@CTA_FILTER={0x4}]}, 0x18}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r3, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) program did not crash testing program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-socket$nl_netfilter-sendmsg$IPCTNL_MSG_CT_GET-socket$inet6_sctp-socket$nl_route-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x2}, [@CTA_FILTER={0x4}]}, 0x18}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r3, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) program crashed: INFO: task hung in nbd_queue_rq testing program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-socket$nl_netfilter-sendmsg$IPCTNL_MSG_CT_GET-socket$inet6_sctp-socket$nl_route-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x2}, [@CTA_FILTER={0x4}]}, 0x18}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) program did not crash testing program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-socket$nl_netfilter-sendmsg$IPCTNL_MSG_CT_GET-socket$inet6_sctp-socket$nl_route-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x2}, [@CTA_FILTER={0x4}]}, 0x18}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r3, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) program did not crash testing program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-socket$nl_netfilter-sendmsg$IPCTNL_MSG_CT_GET-socket$inet6_sctp-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x2}, [@CTA_FILTER={0x4}]}, 0x18}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r3, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) program crashed: INFO: task hung in nbd_queue_rq testing program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-socket$nl_netfilter-sendmsg$IPCTNL_MSG_CT_GET-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x2}, [@CTA_FILTER={0x4}]}, 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r3, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) program crashed: INFO: task hung in nbd_queue_rq testing program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-socket$nl_netfilter-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) program crashed: INFO: task hung in nbd_queue_rq testing program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) program crashed: INFO: task hung in nbd_queue_rq testing program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) program did not crash testing program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-socket$inet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0xa, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) program did not crash testing program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) program did not crash testing program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) program did not crash testing program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) program did not crash testing program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) program did not crash testing program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmsg$NBD_CMD_CONNECT(r0, 0x0, 0x0) program did not crash testing program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) program did not crash testing program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x90}}, 0x0) program did not crash testing program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x90}}, 0x0) program did not crash testing program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB], 0x90}}, 0x0) program did not crash testing program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) program did not crash testing program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) program did not crash testing program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) program did not crash testing program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) program did not crash testing program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) program did not crash testing program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) program did not crash testing program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB, @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) program did not crash testing program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT detailed listing: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet(0xa, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000700000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT program crashed: INFO: task hung in nbd_queue_rq simplifying C reproducer testing compiled C program (duration=6m25.117141896s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing compiled C program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT program crashed: INFO: task hung in nbd_queue_rq testing compiled C program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT program crashed: INFO: task hung in nbd_queue_rq testing compiled C program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT program crashed: INFO: task hung in nbd_queue_rq testing compiled C program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT program crashed: INFO: task hung in nbd_queue_rq testing compiled C program (duration=6m25.117141896s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_tcp-socket$inet6_tcp-syz_init_net_socket$netrom-socket$inet-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-syz_init_net_socket$nl_generic-syz_genetlink_get_family_id$nbd-socketpair$nbd-sendmsg$NBD_CMD_CONNECT program crashed: INFO: task hung in nbd_queue_rq reproducing took 5h4m28.317292599s repro crashed as (corrupted=false): INFO: task udevd:5258 blocked for more than 143 seconds. Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:20536 pid:5258 tgid:5258 ppid:4684 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 wait_for_reconnect drivers/block/nbd.c:1023 [inline] nbd_handle_cmd drivers/block/nbd.c:1065 [inline] nbd_queue_rq+0x7cd/0x2f70 drivers/block/nbd.c:1123 blk_mq_dispatch_rq_list+0xb89/0x1b30 block/blk-mq.c:2032 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:170 [inline] blk_mq_do_dispatch_sched block/blk-mq-sched.c:184 [inline] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 block/blk-mq-sched.c:309 blk_mq_sched_dispatch_requests+0xcb/0x140 block/blk-mq-sched.c:331 blk_mq_run_hw_queue+0x576/0xae0 block/blk-mq.c:2245 blk_mq_flush_plug_list+0x1115/0x1880 block/blk-mq.c:2794 __blk_flush_plug+0x420/0x500 block/blk-core.c:1198 blk_finish_plug block/blk-core.c:1225 [inline] __submit_bio+0x422/0x560 block/blk-core.c:623 __submit_bio_noacct_mq block/blk-core.c:696 [inline] submit_bio_noacct_nocheck+0x4d3/0xe30 block/blk-core.c:725 submit_bh fs/buffer.c:2829 [inline] block_read_full_folio+0x93b/0xcd0 fs/buffer.c:2456 filemap_read_folio+0x1a0/0x790 mm/filemap.c:2355 do_read_cache_folio+0x134/0x820 mm/filemap.c:3789 read_mapping_folio include/linux/pagemap.h:913 [inline] read_part_sector+0xb3/0x330 block/partitions/core.c:712 adfspart_check_ICS+0xd9/0x9a0 block/partitions/acorn.c:360 check_partition block/partitions/core.c:138 [inline] blk_add_partitions block/partitions/core.c:579 [inline] bdev_disk_changed+0x72c/0x13d0 block/partitions/core.c:683 blkdev_get_whole+0x2d2/0x450 block/bdev.c:700 bdev_open+0x2d4/0xc60 block/bdev.c:909 blkdev_open+0x3e8/0x570 block/fops.c:630 do_dentry_open+0x970/0x1440 fs/open.c:959 vfs_open+0x3e/0x330 fs/open.c:1089 do_open fs/namei.c:3727 [inline] path_openat+0x2b3e/0x3470 fs/namei.c:3886 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2c213169a4 RSP: 002b:00007ffe36d17840 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000055b38f0b2230 RCX: 00007f2c213169a4 RDX: 00000000000a0800 RSI: 000055b38f0c3940 RDI: 00000000ffffff9c RBP: 000055b38f0c3940 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 R13: 000055b38f0b3540 R14: 0000000000000001 R15: 000055b38f09e910 INFO: task udevd:5821 blocked for more than 143 seconds. Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:20856 pid:5821 tgid:5821 ppid:4684 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 wait_for_reconnect drivers/block/nbd.c:1023 [inline] nbd_handle_cmd drivers/block/nbd.c:1065 [inline] nbd_queue_rq+0x7cd/0x2f70 drivers/block/nbd.c:1123 blk_mq_dispatch_rq_list+0xb89/0x1b30 block/blk-mq.c:2032 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:170 [inline] blk_mq_do_dispatch_sched block/blk-mq-sched.c:184 [inline] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 block/blk-mq-sched.c:309 blk_mq_sched_dispatch_requests+0xcb/0x140 block/blk-mq-sched.c:331 blk_mq_run_hw_queue+0x576/0xae0 block/blk-mq.c:2245 blk_mq_flush_plug_list+0x1115/0x1880 block/blk-mq.c:2794 __blk_flush_plug+0x420/0x500 block/blk-core.c:1198 blk_finish_plug block/blk-core.c:1225 [inline] __submit_bio+0x422/0x560 block/blk-core.c:623 __submit_bio_noacct_mq block/blk-core.c:696 [inline] submit_bio_noacct_nocheck+0x4d3/0xe30 block/blk-core.c:725 submit_bh fs/buffer.c:2829 [inline] block_read_full_folio+0x93b/0xcd0 fs/buffer.c:2456 filemap_read_folio+0x1a0/0x790 mm/filemap.c:2355 do_read_cache_folio+0x134/0x820 mm/filemap.c:3789 read_mapping_folio include/linux/pagemap.h:913 [inline] read_part_sector+0xb3/0x330 block/partitions/core.c:712 adfspart_check_ICS+0xd9/0x9a0 block/partitions/acorn.c:360 check_partition block/partitions/core.c:138 [inline] blk_add_partitions block/partitions/core.c:579 [inline] bdev_disk_changed+0x72c/0x13d0 block/partitions/core.c:683 blkdev_get_whole+0x2d2/0x450 block/bdev.c:700 bdev_open+0x2d4/0xc60 block/bdev.c:909 blkdev_open+0x3e8/0x570 block/fops.c:630 do_dentry_open+0x970/0x1440 fs/open.c:959 vfs_open+0x3e/0x330 fs/open.c:1089 do_open fs/namei.c:3727 [inline] path_openat+0x2b3e/0x3470 fs/namei.c:3886 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2c213169a4 RSP: 002b:00007ffe36d17840 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000055b38f0b2230 RCX: 00007f2c213169a4 RDX: 00000000000a0800 RSI: 000055b38f0afa70 RDI: 00000000ffffff9c RBP: 000055b38f0afa70 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 R13: 000055b38f0b1250 R14: 0000000000000001 R15: 000055b38f09e910 INFO: task udevd:6313 blocked for more than 144 seconds. Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:21072 pid:6313 tgid:6313 ppid:4684 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 wait_for_reconnect drivers/block/nbd.c:1023 [inline] nbd_handle_cmd drivers/block/nbd.c:1065 [inline] nbd_queue_rq+0x7cd/0x2f70 drivers/block/nbd.c:1123 blk_mq_dispatch_rq_list+0xb89/0x1b30 block/blk-mq.c:2032 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:170 [inline] blk_mq_do_dispatch_sched block/blk-mq-sched.c:184 [inline] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 block/blk-mq-sched.c:309 blk_mq_sched_dispatch_requests+0xcb/0x140 block/blk-mq-sched.c:331 blk_mq_run_hw_queue+0x576/0xae0 block/blk-mq.c:2245 blk_mq_flush_plug_list+0x1115/0x1880 block/blk-mq.c:2794 __blk_flush_plug+0x420/0x500 block/blk-core.c:1198 blk_finish_plug block/blk-core.c:1225 [inline] __submit_bio+0x422/0x560 block/blk-core.c:623 __submit_bio_noacct_mq block/blk-core.c:696 [inline] submit_bio_noacct_nocheck+0x4d3/0xe30 block/blk-core.c:725 submit_bh fs/buffer.c:2829 [inline] block_read_full_folio+0x93b/0xcd0 fs/buffer.c:2456 filemap_read_folio+0x1a0/0x790 mm/filemap.c:2355 do_read_cache_folio+0x134/0x820 mm/filemap.c:3789 read_mapping_folio include/linux/pagemap.h:913 [inline] read_part_sector+0xb3/0x330 block/partitions/core.c:712 adfspart_check_ICS+0xd9/0x9a0 block/partitions/acorn.c:360 check_partition block/partitions/core.c:138 [inline] blk_add_partitions block/partitions/core.c:579 [inline] bdev_disk_changed+0x72c/0x13d0 block/partitions/core.c:683 blkdev_get_whole+0x2d2/0x450 block/bdev.c:700 bdev_open+0x2d4/0xc60 block/bdev.c:909 blkdev_open+0x3e8/0x570 block/fops.c:630 do_dentry_open+0x970/0x1440 fs/open.c:959 vfs_open+0x3e/0x330 fs/open.c:1089 do_open fs/namei.c:3727 [inline] path_openat+0x2b3e/0x3470 fs/namei.c:3886 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2c213169a4 RSP: 002b:00007ffe36d17840 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000055b38f1c80c0 RCX: 00007f2c213169a4 RDX: 00000000000a0800 RSI: 000055b38f0a8230 RDI: 00000000ffffff9c RBP: 000055b38f0a8230 R08: 0000000000000001 R09: 7fffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 R13: 000055b38f0c1a60 R14: 00007ffe36d178ec R15: 000055b38f09e910 INFO: task udevd:6324 blocked for more than 145 seconds. Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:21072 pid:6324 tgid:6324 ppid:4684 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 wait_for_reconnect drivers/block/nbd.c:1023 [inline] nbd_handle_cmd drivers/block/nbd.c:1065 [inline] nbd_queue_rq+0x7cd/0x2f70 drivers/block/nbd.c:1123 blk_mq_dispatch_rq_list+0xb89/0x1b30 block/blk-mq.c:2032 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:170 [inline] blk_mq_do_dispatch_sched block/blk-mq-sched.c:184 [inline] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 block/blk-mq-sched.c:309 blk_mq_sched_dispatch_requests+0xcb/0x140 block/blk-mq-sched.c:331 blk_mq_run_hw_queue+0x576/0xae0 block/blk-mq.c:2245 blk_mq_flush_plug_list+0x1115/0x1880 block/blk-mq.c:2794 __blk_flush_plug+0x420/0x500 block/blk-core.c:1198 blk_finish_plug block/blk-core.c:1225 [inline] __submit_bio+0x422/0x560 block/blk-core.c:623 __submit_bio_noacct_mq block/blk-core.c:696 [inline] submit_bio_noacct_nocheck+0x4d3/0xe30 block/blk-core.c:725 submit_bh fs/buffer.c:2829 [inline] block_read_full_folio+0x93b/0xcd0 fs/buffer.c:2456 filemap_read_folio+0x1a0/0x790 mm/filemap.c:2355 do_read_cache_folio+0x134/0x820 mm/filemap.c:3789 read_mapping_folio include/linux/pagemap.h:913 [inline] read_part_sector+0xb3/0x330 block/partitions/core.c:712 adfspart_check_ICS+0xd9/0x9a0 block/partitions/acorn.c:360 check_partition block/partitions/core.c:138 [inline] blk_add_partitions block/partitions/core.c:579 [inline] bdev_disk_changed+0x72c/0x13d0 block/partitions/core.c:683 blkdev_get_whole+0x2d2/0x450 block/bdev.c:700 bdev_open+0x2d4/0xc60 block/bdev.c:909 blkdev_open+0x3e8/0x570 block/fops.c:630 do_dentry_open+0x970/0x1440 fs/open.c:959 vfs_open+0x3e/0x330 fs/open.c:1089 do_open fs/namei.c:3727 [inline] path_openat+0x2b3e/0x3470 fs/namei.c:3886 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2c213169a4 RSP: 002b:00007ffe36d17840 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000055b38f0b2230 RCX: 00007f2c213169a4 RDX: 00000000000a0800 RSI: 000055b38f0b84a0 RDI: 00000000ffffff9c RBP: 000055b38f0b84a0 R08: 0000000000000001 R09: 7fffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 R13: 000055b38f0a7a90 R14: 0000000000000001 R15: 000055b38f09e910 INFO: task udevd:7372 blocked for more than 145 seconds. Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:21072 pid:7372 tgid:7372 ppid:4684 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 wait_for_reconnect drivers/block/nbd.c:1023 [inline] nbd_handle_cmd drivers/block/nbd.c:1065 [inline] nbd_queue_rq+0x7cd/0x2f70 drivers/block/nbd.c:1123 blk_mq_dispatch_rq_list+0xb89/0x1b30 block/blk-mq.c:2032 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:170 [inline] blk_mq_do_dispatch_sched block/blk-mq-sched.c:184 [inline] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 block/blk-mq-sched.c:309 blk_mq_sched_dispatch_requests+0xcb/0x140 block/blk-mq-sched.c:331 blk_mq_run_hw_queue+0x576/0xae0 block/blk-mq.c:2245 blk_mq_flush_plug_list+0x1115/0x1880 block/blk-mq.c:2794 __blk_flush_plug+0x420/0x500 block/blk-core.c:1198 blk_finish_plug block/blk-core.c:1225 [inline] __submit_bio+0x422/0x560 block/blk-core.c:623 __submit_bio_noacct_mq block/blk-core.c:696 [inline] submit_bio_noacct_nocheck+0x4d3/0xe30 block/blk-core.c:725 submit_bh fs/buffer.c:2829 [inline] block_read_full_folio+0x93b/0xcd0 fs/buffer.c:2456 filemap_read_folio+0x1a0/0x790 mm/filemap.c:2355 do_read_cache_folio+0x134/0x820 mm/filemap.c:3789 read_mapping_folio include/linux/pagemap.h:913 [inline] read_part_sector+0xb3/0x330 block/partitions/core.c:712 adfspart_check_ICS+0xd9/0x9a0 block/partitions/acorn.c:360 check_partition block/partitions/core.c:138 [inline] blk_add_partitions block/partitions/core.c:579 [inline] bdev_disk_changed+0x72c/0x13d0 block/partitions/core.c:683 blkdev_get_whole+0x2d2/0x450 block/bdev.c:700 bdev_open+0x2d4/0xc60 block/bdev.c:909 blkdev_open+0x3e8/0x570 block/fops.c:630 do_dentry_open+0x970/0x1440 fs/open.c:959 vfs_open+0x3e/0x330 fs/open.c:1089 do_open fs/namei.c:3727 [inline] path_openat+0x2b3e/0x3470 fs/namei.c:3886 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2c213169a4 RSP: 002b:00007ffe36d17840 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000055b38f0bfe10 RCX: 00007f2c213169a4 RDX: 00000000000a0800 RSI: 000055b38f09f470 RDI: 00000000ffffff9c RBP: 000055b38f09f470 R08: 00000000ffffffff R09: 7fffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 R13: 000055b38f0b1250 R14: 0000000000000001 R15: 000055b38f09e910 INFO: task udevd:9085 blocked for more than 146 seconds. Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:22032 pid:9085 tgid:9085 ppid:4684 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 wait_for_reconnect drivers/block/nbd.c:1023 [inline] nbd_handle_cmd drivers/block/nbd.c:1065 [inline] nbd_queue_rq+0x7cd/0x2f70 drivers/block/nbd.c:1123 blk_mq_dispatch_rq_list+0xb89/0x1b30 block/blk-mq.c:2032 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:170 [inline] blk_mq_do_dispatch_sched block/blk-mq-sched.c:184 [inline] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 block/blk-mq-sched.c:309 blk_mq_sched_dispatch_requests+0xcb/0x140 block/blk-mq-sched.c:331 blk_mq_run_hw_queue+0x576/0xae0 block/blk-mq.c:2245 blk_mq_flush_plug_list+0x1115/0x1880 block/blk-mq.c:2794 __blk_flush_plug+0x420/0x500 block/blk-core.c:1198 blk_finish_plug block/blk-core.c:1225 [inline] __submit_bio+0x422/0x560 block/blk-core.c:623 __submit_bio_noacct_mq block/blk-core.c:696 [inline] submit_bio_noacct_nocheck+0x4d3/0xe30 block/blk-core.c:725 submit_bh fs/buffer.c:2829 [inline] block_read_full_folio+0x93b/0xcd0 fs/buffer.c:2456 filemap_read_folio+0x1a0/0x790 mm/filemap.c:2355 do_read_cache_folio+0x134/0x820 mm/filemap.c:3789 read_mapping_folio include/linux/pagemap.h:913 [inline] read_part_sector+0xb3/0x330 block/partitions/core.c:712 adfspart_check_ICS+0xd9/0x9a0 block/partitions/acorn.c:360 check_partition block/partitions/core.c:138 [inline] blk_add_partitions block/partitions/core.c:579 [inline] bdev_disk_changed+0x72c/0x13d0 block/partitions/core.c:683 blkdev_get_whole+0x2d2/0x450 block/bdev.c:700 bdev_open+0x2d4/0xc60 block/bdev.c:909 blkdev_open+0x3e8/0x570 block/fops.c:630 do_dentry_open+0x970/0x1440 fs/open.c:959 vfs_open+0x3e/0x330 fs/open.c:1089 do_open fs/namei.c:3727 [inline] path_openat+0x2b3e/0x3470 fs/namei.c:3886 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2c213169a4 RSP: 002b:00007ffe36d17840 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000055b38f0bda90 RCX: 00007f2c213169a4 RDX: 00000000000a0800 RSI: 000055b38f09f560 RDI: 00000000ffffff9c RBP: 000055b38f09f560 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 R13: 000055b38f0b3540 R14: 0000000000000001 R15: 000055b38f09e910 INFO: task udevd:9480 blocked for more than 147 seconds. Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:21072 pid:9480 tgid:9480 ppid:4684 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 wait_for_reconnect drivers/block/nbd.c:1023 [inline] nbd_handle_cmd drivers/block/nbd.c:1065 [inline] nbd_queue_rq+0x7cd/0x2f70 drivers/block/nbd.c:1123 blk_mq_dispatch_rq_list+0xb89/0x1b30 block/blk-mq.c:2032 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:170 [inline] blk_mq_do_dispatch_sched block/blk-mq-sched.c:184 [inline] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 block/blk-mq-sched.c:309 blk_mq_sched_dispatch_requests+0xcb/0x140 block/blk-mq-sched.c:331 blk_mq_run_hw_queue+0x576/0xae0 block/blk-mq.c:2245 blk_mq_flush_plug_list+0x1115/0x1880 block/blk-mq.c:2794 __blk_flush_plug+0x420/0x500 block/blk-core.c:1198 blk_finish_plug block/blk-core.c:1225 [inline] __submit_bio+0x422/0x560 block/blk-core.c:623 __submit_bio_noacct_mq block/blk-core.c:696 [inline] submit_bio_noacct_nocheck+0x4d3/0xe30 block/blk-core.c:725 submit_bh fs/buffer.c:2829 [inline] block_read_full_folio+0x93b/0xcd0 fs/buffer.c:2456 filemap_read_folio+0x1a0/0x790 mm/filemap.c:2355 do_read_cache_folio+0x134/0x820 mm/filemap.c:3789 read_mapping_folio include/linux/pagemap.h:913 [inline] read_part_sector+0xb3/0x330 block/partitions/core.c:712 adfspart_check_ICS+0xd9/0x9a0 block/partitions/acorn.c:360 check_partition block/partitions/core.c:138 [inline] blk_add_partitions block/partitions/core.c:579 [inline] bdev_disk_changed+0x72c/0x13d0 block/partitions/core.c:683 blkdev_get_whole+0x2d2/0x450 block/bdev.c:700 bdev_open+0x2d4/0xc60 block/bdev.c:909 blkdev_open+0x3e8/0x570 block/fops.c:630 do_dentry_open+0x970/0x1440 fs/open.c:959 vfs_open+0x3e/0x330 fs/open.c:1089 do_open fs/namei.c:3727 [inline] path_openat+0x2b3e/0x3470 fs/namei.c:3886 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2c213169a4 RSP: 002b:00007ffe36d17840 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000055b38f0b2230 RCX: 00007f2c213169a4 RDX: 00000000000a0800 RSI: 000055b38f0c0830 RDI: 00000000ffffff9c RBP: 000055b38f0c0830 R08: 0000000000000001 R09: 7fffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 R13: 000055b38f0b3540 R14: 0000000000000001 R15: 000055b38f09e910 INFO: task udevd:10013 blocked for more than 147 seconds. Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:21072 pid:10013 tgid:10013 ppid:4684 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 wait_for_reconnect drivers/block/nbd.c:1023 [inline] nbd_handle_cmd drivers/block/nbd.c:1065 [inline] nbd_queue_rq+0x7cd/0x2f70 drivers/block/nbd.c:1123 blk_mq_dispatch_rq_list+0xb89/0x1b30 block/blk-mq.c:2032 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:170 [inline] blk_mq_do_dispatch_sched block/blk-mq-sched.c:184 [inline] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 block/blk-mq-sched.c:309 blk_mq_sched_dispatch_requests+0xcb/0x140 block/blk-mq-sched.c:331 blk_mq_run_hw_queue+0x576/0xae0 block/blk-mq.c:2245 blk_mq_flush_plug_list+0x1115/0x1880 block/blk-mq.c:2794 __blk_flush_plug+0x420/0x500 block/blk-core.c:1198 blk_finish_plug block/blk-core.c:1225 [inline] __submit_bio+0x422/0x560 block/blk-core.c:623 __submit_bio_noacct_mq block/blk-core.c:696 [inline] submit_bio_noacct_nocheck+0x4d3/0xe30 block/blk-core.c:725 submit_bh fs/buffer.c:2829 [inline] block_read_full_folio+0x93b/0xcd0 fs/buffer.c:2456 filemap_read_folio+0x1a0/0x790 mm/filemap.c:2355 do_read_cache_folio+0x134/0x820 mm/filemap.c:3789 read_mapping_folio include/linux/pagemap.h:913 [inline] read_part_sector+0xb3/0x330 block/partitions/core.c:712 adfspart_check_ICS+0xd9/0x9a0 block/partitions/acorn.c:360 check_partition block/partitions/core.c:138 [inline] blk_add_partitions block/partitions/core.c:579 [inline] bdev_disk_changed+0x72c/0x13d0 block/partitions/core.c:683 blkdev_get_whole+0x2d2/0x450 block/bdev.c:700 bdev_open+0x2d4/0xc60 block/bdev.c:909 blkdev_open+0x3e8/0x570 block/fops.c:630 do_dentry_open+0x970/0x1440 fs/open.c:959 vfs_open+0x3e/0x330 fs/open.c:1089 do_open fs/namei.c:3727 [inline] path_openat+0x2b3e/0x3470 fs/namei.c:3886 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2c213169a4 RSP: 002b:00007ffe36d17840 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000055b38f0b2230 RCX: 00007f2c213169a4 RDX: 00000000000a0800 RSI: 000055b38f0b84a0 RDI: 00000000ffffff9c RBP: 000055b38f0b84a0 R08: 0000000000000001 R09: 7fffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 R13: 000055b38f0b1250 R14: 0000000000000001 R15: 000055b38f09e910 INFO: task udevd:10613 blocked for more than 148 seconds. Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:20344 pid:10613 tgid:10613 ppid:4684 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 wait_for_reconnect drivers/block/nbd.c:1023 [inline] nbd_handle_cmd drivers/block/nbd.c:1065 [inline] nbd_queue_rq+0x7cd/0x2f70 drivers/block/nbd.c:1123 blk_mq_dispatch_rq_list+0xb89/0x1b30 block/blk-mq.c:2032 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:170 [inline] blk_mq_do_dispatch_sched block/blk-mq-sched.c:184 [inline] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 block/blk-mq-sched.c:309 blk_mq_sched_dispatch_requests+0xcb/0x140 block/blk-mq-sched.c:331 blk_mq_run_hw_queue+0x576/0xae0 block/blk-mq.c:2245 blk_mq_flush_plug_list+0x1115/0x1880 block/blk-mq.c:2794 __blk_flush_plug+0x420/0x500 block/blk-core.c:1198 blk_finish_plug block/blk-core.c:1225 [inline] __submit_bio+0x422/0x560 block/blk-core.c:623 __submit_bio_noacct_mq block/blk-core.c:696 [inline] submit_bio_noacct_nocheck+0x4d3/0xe30 block/blk-core.c:725 submit_bh fs/buffer.c:2829 [inline] block_read_full_folio+0x93b/0xcd0 fs/buffer.c:2456 filemap_read_folio+0x1a0/0x790 mm/filemap.c:2355 do_read_cache_folio+0x134/0x820 mm/filemap.c:3789 read_mapping_folio include/linux/pagemap.h:913 [inline] read_part_sector+0xb3/0x330 block/partitions/core.c:712 adfspart_check_ICS+0xd9/0x9a0 block/partitions/acorn.c:360 check_partition block/partitions/core.c:138 [inline] blk_add_partitions block/partitions/core.c:579 [inline] bdev_disk_changed+0x72c/0x13d0 block/partitions/core.c:683 blkdev_get_whole+0x2d2/0x450 block/bdev.c:700 bdev_open+0x2d4/0xc60 block/bdev.c:909 blkdev_open+0x3e8/0x570 block/fops.c:630 do_dentry_open+0x970/0x1440 fs/open.c:959 vfs_open+0x3e/0x330 fs/open.c:1089 do_open fs/namei.c:3727 [inline] path_openat+0x2b3e/0x3470 fs/namei.c:3886 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2c213169a4 RSP: 002b:00007ffe36d17840 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000055b38f0bfe10 RCX: 00007f2c213169a4 RDX: 00000000000a0800 RSI: 000055b38f09f700 RDI: 00000000ffffff9c RBP: 000055b38f09f700 R08: 0000000000000001 R09: 7fffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 R13: 000055b38f0b1250 R14: 0000000000000001 R15: 000055b38f09e910 INFO: task udevd:10833 blocked for more than 149 seconds. Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:20944 pid:10833 tgid:10833 ppid:4684 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 wait_for_reconnect drivers/block/nbd.c:1023 [inline] nbd_handle_cmd drivers/block/nbd.c:1065 [inline] nbd_queue_rq+0x7cd/0x2f70 drivers/block/nbd.c:1123 blk_mq_dispatch_rq_list+0xb89/0x1b30 block/blk-mq.c:2032 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:170 [inline] blk_mq_do_dispatch_sched block/blk-mq-sched.c:184 [inline] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 block/blk-mq-sched.c:309 blk_mq_sched_dispatch_requests+0xcb/0x140 block/blk-mq-sched.c:331 blk_mq_run_hw_queue+0x576/0xae0 block/blk-mq.c:2245 blk_mq_flush_plug_list+0x1115/0x1880 block/blk-mq.c:2794 __blk_flush_plug+0x420/0x500 block/blk-core.c:1198 blk_finish_plug block/blk-core.c:1225 [inline] __submit_bio+0x422/0x560 block/blk-core.c:623 __submit_bio_noacct_mq block/blk-core.c:696 [inline] submit_bio_noacct_nocheck+0x4d3/0xe30 block/blk-core.c:725 submit_bh fs/buffer.c:2829 [inline] block_read_full_folio+0x93b/0xcd0 fs/buffer.c:2456 filemap_read_folio+0x1a0/0x790 mm/filemap.c:2355 do_read_cache_folio+0x134/0x820 mm/filemap.c:3789 read_mapping_folio include/linux/pagemap.h:913 [inline] read_part_sector+0xb3/0x330 block/partitions/core.c:712 adfspart_check_ICS+0xd9/0x9a0 block/partitions/acorn.c:360 check_partition block/partitions/core.c:138 [inline] blk_add_partitions block/partitions/core.c:579 [inline] bdev_disk_changed+0x72c/0x13d0 block/partitions/core.c:683 blkdev_get_whole+0x2d2/0x450 block/bdev.c:700 bdev_open+0x2d4/0xc60 block/bdev.c:909 blkdev_open+0x3e8/0x570 block/fops.c:630 do_dentry_open+0x970/0x1440 fs/open.c:959 vfs_open+0x3e/0x330 fs/open.c:1089 do_open fs/namei.c:3727 [inline] path_openat+0x2b3e/0x3470 fs/namei.c:3886 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2c213169a4 RSP: 002b:00007ffe36d17840 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000055b38f0bfe10 RCX: 00007f2c213169a4 RDX: 00000000000a0800 RSI: 000055b38f0f9d40 RDI: 00000000ffffff9c RBP: 000055b38f0f9d40 R08: 0000000000000001 R09: 7fffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 R13: 000055b38f0b3540 R14: 0000000000000001 R15: 000055b38f09e910 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task udevd:11510 blocked for more than 149 seconds. Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:21072 pid:11510 tgid:11510 ppid:4684 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 wait_for_reconnect drivers/block/nbd.c:1023 [inline] nbd_handle_cmd drivers/block/nbd.c:1065 [inline] nbd_queue_rq+0x7cd/0x2f70 drivers/block/nbd.c:1123 blk_mq_dispatch_rq_list+0xb89/0x1b30 block/blk-mq.c:2032 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:170 [inline] blk_mq_do_dispatch_sched block/blk-mq-sched.c:184 [inline] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 block/blk-mq-sched.c:309 blk_mq_sched_dispatch_requests+0xcb/0x140 block/blk-mq-sched.c:331 blk_mq_run_hw_queue+0x576/0xae0 block/blk-mq.c:2245 blk_mq_flush_plug_list+0x1115/0x1880 block/blk-mq.c:2794 __blk_flush_plug+0x420/0x500 block/blk-core.c:1198 blk_finish_plug block/blk-core.c:1225 [inline] __submit_bio+0x422/0x560 block/blk-core.c:623 __submit_bio_noacct_mq block/blk-core.c:696 [inline] submit_bio_noacct_nocheck+0x4d3/0xe30 block/blk-core.c:725 submit_bh fs/buffer.c:2829 [inline] block_read_full_folio+0x93b/0xcd0 fs/buffer.c:2456 filemap_read_folio+0x1a0/0x790 mm/filemap.c:2355 do_read_cache_folio+0x134/0x820 mm/filemap.c:3789 read_mapping_folio include/linux/pagemap.h:913 [inline] read_part_sector+0xb3/0x330 block/partitions/core.c:712 adfspart_check_ICS+0xd9/0x9a0 block/partitions/acorn.c:360 check_partition block/partitions/core.c:138 [inline] blk_add_partitions block/partitions/core.c:579 [inline] bdev_disk_changed+0x72c/0x13d0 block/partitions/core.c:683 blkdev_get_whole+0x2d2/0x450 block/bdev.c:700 bdev_open+0x2d4/0xc60 block/bdev.c:909 blkdev_open+0x3e8/0x570 block/fops.c:630 do_dentry_open+0x970/0x1440 fs/open.c:959 vfs_open+0x3e/0x330 fs/open.c:1089 do_open fs/namei.c:3727 [inline] path_openat+0x2b3e/0x3470 fs/namei.c:3886 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2c213169a4 RSP: 002b:00007ffe36d17840 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000055b38f0b2230 RCX: 00007f2c213169a4 RDX: 00000000000a0800 RSI: 000055b38f110320 RDI: 00000000ffffff9c RBP: 000055b38f110320 R08: 0000000000000001 R09: 7fffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 R13: 000055b38f0b3540 R14: 0000000000000001 R15: 000055b38f09e910 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task udevd:11605 blocked for more than 150 seconds. Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:22032 pid:11605 tgid:11605 ppid:4684 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 wait_for_reconnect drivers/block/nbd.c:1023 [inline] nbd_handle_cmd drivers/block/nbd.c:1065 [inline] nbd_queue_rq+0x7cd/0x2f70 drivers/block/nbd.c:1123 blk_mq_dispatch_rq_list+0xb89/0x1b30 block/blk-mq.c:2032 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:170 [inline] blk_mq_do_dispatch_sched block/blk-mq-sched.c:184 [inline] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 block/blk-mq-sched.c:309 blk_mq_sched_dispatch_requests+0xcb/0x140 block/blk-mq-sched.c:331 blk_mq_run_hw_queue+0x576/0xae0 block/blk-mq.c:2245 blk_mq_flush_plug_list+0x1115/0x1880 block/blk-mq.c:2794 __blk_flush_plug+0x420/0x500 block/blk-core.c:1198 blk_finish_plug block/blk-core.c:1225 [inline] __submit_bio+0x422/0x560 block/blk-core.c:623 __submit_bio_noacct_mq block/blk-core.c:696 [inline] submit_bio_noacct_nocheck+0x4d3/0xe30 block/blk-core.c:725 submit_bh fs/buffer.c:2829 [inline] block_read_full_folio+0x93b/0xcd0 fs/buffer.c:2456 filemap_read_folio+0x1a0/0x790 mm/filemap.c:2355 do_read_cache_folio+0x134/0x820 mm/filemap.c:3789 read_mapping_folio include/linux/pagemap.h:913 [inline] read_part_sector+0xb3/0x330 block/partitions/core.c:712 adfspart_check_ICS+0xd9/0x9a0 block/partitions/acorn.c:360 check_partition block/partitions/core.c:138 [inline] blk_add_partitions block/partitions/core.c:579 [inline] bdev_disk_changed+0x72c/0x13d0 block/partitions/core.c:683 blkdev_get_whole+0x2d2/0x450 block/bdev.c:700 bdev_open+0x2d4/0xc60 block/bdev.c:909 blkdev_open+0x3e8/0x570 block/fops.c:630 do_dentry_open+0x970/0x1440 fs/open.c:959 vfs_open+0x3e/0x330 fs/open.c:1089 do_open fs/namei.c:3727 [inline] path_openat+0x2b3e/0x3470 fs/namei.c:3886 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2c213169a4 RSP: 002b:00007ffe36d17840 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000055b38f0bfe10 RCX: 00007f2c213169a4 RDX: 00000000000a0800 RSI: 000055b38f105710 RDI: 00000000ffffff9c RBP: 000055b38f105710 R08: 0000000000000001 R09: 7fffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 R13: 000055b38f0b3540 R14: 0000000000000001 R15: 000055b38f09e910 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings Showing all locks held in the system: 1 lock held by khungtaskd/30: #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:326 [inline] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6626 2 locks held by getty/4983: #0: ffff88803063b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 drivers/tty/n_tty.c:2211 3 locks held by udevd/5258: #0: ffff888025e5d4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 block/bdev.c:897 #1: ffff888025de2910 (set->srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:151 [inline] #1: ffff888025de2910 (set->srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:250 [inline] #1: ffff888025de2910 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 block/blk-mq.c:2245 #2: ffff8880261b8180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 drivers/block/nbd.c:1115 3 locks held by udevd/5821: #0: ffff88802600e4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 block/bdev.c:897 #1: ffff88802566fc90 (set->srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:151 [inline] #1: ffff88802566fc90 (set->srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:250 [inline] #1: ffff88802566fc90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 block/blk-mq.c:2245 #2: ffff888026188180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 drivers/block/nbd.c:1115 3 locks held by udevd/6313: #0: ffff88802614a4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 block/bdev.c:897 #1: ffff88802609c310 (set->srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:151 [inline] #1: ffff88802609c310 (set->srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:250 [inline] #1: ffff88802609c310 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 block/blk-mq.c:2245 #2: ffff888026218180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 drivers/block/nbd.c:1115 3 locks held by udevd/6324: #0: ffff8880261e94c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 block/bdev.c:897 #1: ffff888025de2f90 (set->srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:151 [inline] #1: ffff888025de2f90 (set->srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:250 [inline] #1: ffff888025de2f90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 block/blk-mq.c:2245 #2: ffff888026280180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 drivers/block/nbd.c:1115 3 locks held by udevd/7372: #0: ffff8880261ed4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 block/bdev.c:897 #1: ffff88802604e590 (set->srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:151 [inline] #1: ffff88802604e590 (set->srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:250 [inline] #1: ffff88802604e590 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 block/blk-mq.c:2245 #2: ffff8880262e8180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 drivers/block/nbd.c:1115 3 locks held by udevd/9085: #0: ffff88802614e4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 block/bdev.c:897 #1: ffff88802609cd10 (set->srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:151 [inline] #1: ffff88802609cd10 (set->srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:250 [inline] #1: ffff88802609cd10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 block/blk-mq.c:2245 #2: ffff888026368180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 drivers/block/nbd.c:1115 3 locks held by udevd/9480: #0: ffff8880262c24c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 block/bdev.c:897 #1: ffff888026243210 (set->srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:151 [inline] #1: ffff888026243210 (set->srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:250 [inline] #1: ffff888026243210 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 block/blk-mq.c:2245 #2: ffff8880263c0180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 drivers/block/nbd.c:1115 3 locks held by udevd/10013: #0: ffff8880262c64c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 block/bdev.c:897 #1: ffff888026243a90 (set->srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:151 [inline] #1: ffff888026243a90 (set->srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:250 [inline] #1: ffff888026243a90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 block/blk-mq.c:2245 #2: ffff888026860180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 drivers/block/nbd.c:1115 3 locks held by udevd/10613: #0: ffff8880263254c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 block/bdev.c:897 #1: ffff888026380610 (set->srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:151 [inline] #1: ffff888026380610 (set->srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:250 [inline] #1: ffff888026380610 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 block/blk-mq.c:2245 #2: ffff8880268d0180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 drivers/block/nbd.c:1115 3 locks held by udevd/10833: #0: ffff8880263214c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 block/bdev.c:897 #1: ffff88802604ef90 (set->srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:151 [inline] #1: ffff88802604ef90 (set->srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:250 [inline] #1: ffff88802604ef90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 block/blk-mq.c:2245 #2: ffff888026820180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 drivers/block/nbd.c:1115 3 locks held by udevd/11510: #0: ffff8880263fa4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 block/bdev.c:897 #1: ffff888026271110 (set->srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:151 [inline] #1: ffff888026271110 (set->srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:250 [inline] #1: ffff888026271110 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 block/blk-mq.c:2245 #2: ffff888026938180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 drivers/block/nbd.c:1115 3 locks held by udevd/11605: #0: ffff8880268914c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 block/bdev.c:897 #1: ffff888026380e90 (set->srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:151 [inline] #1: ffff888026380e90 (set->srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:250 [inline] #1: ffff888026380e90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 block/blk-mq.c:2245 #2: ffff8880269a0180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 drivers/block/nbd.c:1115 3 locks held by syz-executor202/1927: #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 net/netlink/genetlink.c:1209 #2: ffff888030955198 (&nbd->config_lock){+.+.}-{3:3}, at: nbd_genl_connect+0xc26/0x1c80 drivers/block/nbd.c:2025 2 locks held by syz-executor202/1929: #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 net/netlink/genetlink.c:1209 2 locks held by syz-executor202/1931: #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 net/netlink/genetlink.c:1209 2 locks held by syz-executor202/1930: #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 net/netlink/genetlink.c:1209 2 locks held by syz-executor202/1932: #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 net/netlink/genetlink.c:1209 ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 Call Trace: __dump_stack lib/dump_stack.c:93 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119 nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline] watchdog+0xff4/0x1040 kernel/hung_task.c:379 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 4684 Comm: udevd Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 RIP: 0033:0x7f2c213615bd Code: 07 fe ff ff 66 0f 1f 84 00 00 00 00 00 83 fa 01 76 7b 89 f8 09 f0 25 ff 0f 00 00 3d e0 0f 00 00 7f 2b c5 fe 6f 16 c5 ed 74 17 fd d7 c2 ff c0 c4 e2 68 f5 d0 0f 85 c2 fd ff ff 31 c0 e9 c9 fd RSP: 002b:00007ffe36d17a68 EFLAGS: 00000283 RAX: 0000000000000fa4 RBX: 000055b38fd15c60 RCX: 0000000000000000 RDX: 000000000000001c RSI: 000055b38fd15724 RDI: 000055b38f4c5a84 RBP: 000055b38f4c5fc0 R08: 000000000000001c R09: 000000000000001c R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000002707 R13: 000055b38f4c5a84 R14: 0000000000000000 R15: 0000000000000000 FS: 00007f2c216a3c80 GS: 0000000000000000 final repro crashed as (corrupted=false): INFO: task udevd:5258 blocked for more than 143 seconds. Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:20536 pid:5258 tgid:5258 ppid:4684 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 wait_for_reconnect drivers/block/nbd.c:1023 [inline] nbd_handle_cmd drivers/block/nbd.c:1065 [inline] nbd_queue_rq+0x7cd/0x2f70 drivers/block/nbd.c:1123 blk_mq_dispatch_rq_list+0xb89/0x1b30 block/blk-mq.c:2032 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:170 [inline] blk_mq_do_dispatch_sched block/blk-mq-sched.c:184 [inline] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 block/blk-mq-sched.c:309 blk_mq_sched_dispatch_requests+0xcb/0x140 block/blk-mq-sched.c:331 blk_mq_run_hw_queue+0x576/0xae0 block/blk-mq.c:2245 blk_mq_flush_plug_list+0x1115/0x1880 block/blk-mq.c:2794 __blk_flush_plug+0x420/0x500 block/blk-core.c:1198 blk_finish_plug block/blk-core.c:1225 [inline] __submit_bio+0x422/0x560 block/blk-core.c:623 __submit_bio_noacct_mq block/blk-core.c:696 [inline] submit_bio_noacct_nocheck+0x4d3/0xe30 block/blk-core.c:725 submit_bh fs/buffer.c:2829 [inline] block_read_full_folio+0x93b/0xcd0 fs/buffer.c:2456 filemap_read_folio+0x1a0/0x790 mm/filemap.c:2355 do_read_cache_folio+0x134/0x820 mm/filemap.c:3789 read_mapping_folio include/linux/pagemap.h:913 [inline] read_part_sector+0xb3/0x330 block/partitions/core.c:712 adfspart_check_ICS+0xd9/0x9a0 block/partitions/acorn.c:360 check_partition block/partitions/core.c:138 [inline] blk_add_partitions block/partitions/core.c:579 [inline] bdev_disk_changed+0x72c/0x13d0 block/partitions/core.c:683 blkdev_get_whole+0x2d2/0x450 block/bdev.c:700 bdev_open+0x2d4/0xc60 block/bdev.c:909 blkdev_open+0x3e8/0x570 block/fops.c:630 do_dentry_open+0x970/0x1440 fs/open.c:959 vfs_open+0x3e/0x330 fs/open.c:1089 do_open fs/namei.c:3727 [inline] path_openat+0x2b3e/0x3470 fs/namei.c:3886 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2c213169a4 RSP: 002b:00007ffe36d17840 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000055b38f0b2230 RCX: 00007f2c213169a4 RDX: 00000000000a0800 RSI: 000055b38f0c3940 RDI: 00000000ffffff9c RBP: 000055b38f0c3940 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 R13: 000055b38f0b3540 R14: 0000000000000001 R15: 000055b38f09e910 INFO: task udevd:5821 blocked for more than 143 seconds. Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:20856 pid:5821 tgid:5821 ppid:4684 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 wait_for_reconnect drivers/block/nbd.c:1023 [inline] nbd_handle_cmd drivers/block/nbd.c:1065 [inline] nbd_queue_rq+0x7cd/0x2f70 drivers/block/nbd.c:1123 blk_mq_dispatch_rq_list+0xb89/0x1b30 block/blk-mq.c:2032 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:170 [inline] blk_mq_do_dispatch_sched block/blk-mq-sched.c:184 [inline] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 block/blk-mq-sched.c:309 blk_mq_sched_dispatch_requests+0xcb/0x140 block/blk-mq-sched.c:331 blk_mq_run_hw_queue+0x576/0xae0 block/blk-mq.c:2245 blk_mq_flush_plug_list+0x1115/0x1880 block/blk-mq.c:2794 __blk_flush_plug+0x420/0x500 block/blk-core.c:1198 blk_finish_plug block/blk-core.c:1225 [inline] __submit_bio+0x422/0x560 block/blk-core.c:623 __submit_bio_noacct_mq block/blk-core.c:696 [inline] submit_bio_noacct_nocheck+0x4d3/0xe30 block/blk-core.c:725 submit_bh fs/buffer.c:2829 [inline] block_read_full_folio+0x93b/0xcd0 fs/buffer.c:2456 filemap_read_folio+0x1a0/0x790 mm/filemap.c:2355 do_read_cache_folio+0x134/0x820 mm/filemap.c:3789 read_mapping_folio include/linux/pagemap.h:913 [inline] read_part_sector+0xb3/0x330 block/partitions/core.c:712 adfspart_check_ICS+0xd9/0x9a0 block/partitions/acorn.c:360 check_partition block/partitions/core.c:138 [inline] blk_add_partitions block/partitions/core.c:579 [inline] bdev_disk_changed+0x72c/0x13d0 block/partitions/core.c:683 blkdev_get_whole+0x2d2/0x450 block/bdev.c:700 bdev_open+0x2d4/0xc60 block/bdev.c:909 blkdev_open+0x3e8/0x570 block/fops.c:630 do_dentry_open+0x970/0x1440 fs/open.c:959 vfs_open+0x3e/0x330 fs/open.c:1089 do_open fs/namei.c:3727 [inline] path_openat+0x2b3e/0x3470 fs/namei.c:3886 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2c213169a4 RSP: 002b:00007ffe36d17840 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000055b38f0b2230 RCX: 00007f2c213169a4 RDX: 00000000000a0800 RSI: 000055b38f0afa70 RDI: 00000000ffffff9c RBP: 000055b38f0afa70 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 R13: 000055b38f0b1250 R14: 0000000000000001 R15: 000055b38f09e910 INFO: task udevd:6313 blocked for more than 144 seconds. Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:21072 pid:6313 tgid:6313 ppid:4684 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 wait_for_reconnect drivers/block/nbd.c:1023 [inline] nbd_handle_cmd drivers/block/nbd.c:1065 [inline] nbd_queue_rq+0x7cd/0x2f70 drivers/block/nbd.c:1123 blk_mq_dispatch_rq_list+0xb89/0x1b30 block/blk-mq.c:2032 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:170 [inline] blk_mq_do_dispatch_sched block/blk-mq-sched.c:184 [inline] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 block/blk-mq-sched.c:309 blk_mq_sched_dispatch_requests+0xcb/0x140 block/blk-mq-sched.c:331 blk_mq_run_hw_queue+0x576/0xae0 block/blk-mq.c:2245 blk_mq_flush_plug_list+0x1115/0x1880 block/blk-mq.c:2794 __blk_flush_plug+0x420/0x500 block/blk-core.c:1198 blk_finish_plug block/blk-core.c:1225 [inline] __submit_bio+0x422/0x560 block/blk-core.c:623 __submit_bio_noacct_mq block/blk-core.c:696 [inline] submit_bio_noacct_nocheck+0x4d3/0xe30 block/blk-core.c:725 submit_bh fs/buffer.c:2829 [inline] block_read_full_folio+0x93b/0xcd0 fs/buffer.c:2456 filemap_read_folio+0x1a0/0x790 mm/filemap.c:2355 do_read_cache_folio+0x134/0x820 mm/filemap.c:3789 read_mapping_folio include/linux/pagemap.h:913 [inline] read_part_sector+0xb3/0x330 block/partitions/core.c:712 adfspart_check_ICS+0xd9/0x9a0 block/partitions/acorn.c:360 check_partition block/partitions/core.c:138 [inline] blk_add_partitions block/partitions/core.c:579 [inline] bdev_disk_changed+0x72c/0x13d0 block/partitions/core.c:683 blkdev_get_whole+0x2d2/0x450 block/bdev.c:700 bdev_open+0x2d4/0xc60 block/bdev.c:909 blkdev_open+0x3e8/0x570 block/fops.c:630 do_dentry_open+0x970/0x1440 fs/open.c:959 vfs_open+0x3e/0x330 fs/open.c:1089 do_open fs/namei.c:3727 [inline] path_openat+0x2b3e/0x3470 fs/namei.c:3886 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2c213169a4 RSP: 002b:00007ffe36d17840 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000055b38f1c80c0 RCX: 00007f2c213169a4 RDX: 00000000000a0800 RSI: 000055b38f0a8230 RDI: 00000000ffffff9c RBP: 000055b38f0a8230 R08: 0000000000000001 R09: 7fffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 R13: 000055b38f0c1a60 R14: 00007ffe36d178ec R15: 000055b38f09e910 INFO: task udevd:6324 blocked for more than 145 seconds. Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:21072 pid:6324 tgid:6324 ppid:4684 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 wait_for_reconnect drivers/block/nbd.c:1023 [inline] nbd_handle_cmd drivers/block/nbd.c:1065 [inline] nbd_queue_rq+0x7cd/0x2f70 drivers/block/nbd.c:1123 blk_mq_dispatch_rq_list+0xb89/0x1b30 block/blk-mq.c:2032 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:170 [inline] blk_mq_do_dispatch_sched block/blk-mq-sched.c:184 [inline] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 block/blk-mq-sched.c:309 blk_mq_sched_dispatch_requests+0xcb/0x140 block/blk-mq-sched.c:331 blk_mq_run_hw_queue+0x576/0xae0 block/blk-mq.c:2245 blk_mq_flush_plug_list+0x1115/0x1880 block/blk-mq.c:2794 __blk_flush_plug+0x420/0x500 block/blk-core.c:1198 blk_finish_plug block/blk-core.c:1225 [inline] __submit_bio+0x422/0x560 block/blk-core.c:623 __submit_bio_noacct_mq block/blk-core.c:696 [inline] submit_bio_noacct_nocheck+0x4d3/0xe30 block/blk-core.c:725 submit_bh fs/buffer.c:2829 [inline] block_read_full_folio+0x93b/0xcd0 fs/buffer.c:2456 filemap_read_folio+0x1a0/0x790 mm/filemap.c:2355 do_read_cache_folio+0x134/0x820 mm/filemap.c:3789 read_mapping_folio include/linux/pagemap.h:913 [inline] read_part_sector+0xb3/0x330 block/partitions/core.c:712 adfspart_check_ICS+0xd9/0x9a0 block/partitions/acorn.c:360 check_partition block/partitions/core.c:138 [inline] blk_add_partitions block/partitions/core.c:579 [inline] bdev_disk_changed+0x72c/0x13d0 block/partitions/core.c:683 blkdev_get_whole+0x2d2/0x450 block/bdev.c:700 bdev_open+0x2d4/0xc60 block/bdev.c:909 blkdev_open+0x3e8/0x570 block/fops.c:630 do_dentry_open+0x970/0x1440 fs/open.c:959 vfs_open+0x3e/0x330 fs/open.c:1089 do_open fs/namei.c:3727 [inline] path_openat+0x2b3e/0x3470 fs/namei.c:3886 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2c213169a4 RSP: 002b:00007ffe36d17840 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000055b38f0b2230 RCX: 00007f2c213169a4 RDX: 00000000000a0800 RSI: 000055b38f0b84a0 RDI: 00000000ffffff9c RBP: 000055b38f0b84a0 R08: 0000000000000001 R09: 7fffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 R13: 000055b38f0a7a90 R14: 0000000000000001 R15: 000055b38f09e910 INFO: task udevd:7372 blocked for more than 145 seconds. Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:21072 pid:7372 tgid:7372 ppid:4684 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 wait_for_reconnect drivers/block/nbd.c:1023 [inline] nbd_handle_cmd drivers/block/nbd.c:1065 [inline] nbd_queue_rq+0x7cd/0x2f70 drivers/block/nbd.c:1123 blk_mq_dispatch_rq_list+0xb89/0x1b30 block/blk-mq.c:2032 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:170 [inline] blk_mq_do_dispatch_sched block/blk-mq-sched.c:184 [inline] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 block/blk-mq-sched.c:309 blk_mq_sched_dispatch_requests+0xcb/0x140 block/blk-mq-sched.c:331 blk_mq_run_hw_queue+0x576/0xae0 block/blk-mq.c:2245 blk_mq_flush_plug_list+0x1115/0x1880 block/blk-mq.c:2794 __blk_flush_plug+0x420/0x500 block/blk-core.c:1198 blk_finish_plug block/blk-core.c:1225 [inline] __submit_bio+0x422/0x560 block/blk-core.c:623 __submit_bio_noacct_mq block/blk-core.c:696 [inline] submit_bio_noacct_nocheck+0x4d3/0xe30 block/blk-core.c:725 submit_bh fs/buffer.c:2829 [inline] block_read_full_folio+0x93b/0xcd0 fs/buffer.c:2456 filemap_read_folio+0x1a0/0x790 mm/filemap.c:2355 do_read_cache_folio+0x134/0x820 mm/filemap.c:3789 read_mapping_folio include/linux/pagemap.h:913 [inline] read_part_sector+0xb3/0x330 block/partitions/core.c:712 adfspart_check_ICS+0xd9/0x9a0 block/partitions/acorn.c:360 check_partition block/partitions/core.c:138 [inline] blk_add_partitions block/partitions/core.c:579 [inline] bdev_disk_changed+0x72c/0x13d0 block/partitions/core.c:683 blkdev_get_whole+0x2d2/0x450 block/bdev.c:700 bdev_open+0x2d4/0xc60 block/bdev.c:909 blkdev_open+0x3e8/0x570 block/fops.c:630 do_dentry_open+0x970/0x1440 fs/open.c:959 vfs_open+0x3e/0x330 fs/open.c:1089 do_open fs/namei.c:3727 [inline] path_openat+0x2b3e/0x3470 fs/namei.c:3886 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2c213169a4 RSP: 002b:00007ffe36d17840 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000055b38f0bfe10 RCX: 00007f2c213169a4 RDX: 00000000000a0800 RSI: 000055b38f09f470 RDI: 00000000ffffff9c RBP: 000055b38f09f470 R08: 00000000ffffffff R09: 7fffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 R13: 000055b38f0b1250 R14: 0000000000000001 R15: 000055b38f09e910 INFO: task udevd:9085 blocked for more than 146 seconds. Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:22032 pid:9085 tgid:9085 ppid:4684 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 wait_for_reconnect drivers/block/nbd.c:1023 [inline] nbd_handle_cmd drivers/block/nbd.c:1065 [inline] nbd_queue_rq+0x7cd/0x2f70 drivers/block/nbd.c:1123 blk_mq_dispatch_rq_list+0xb89/0x1b30 block/blk-mq.c:2032 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:170 [inline] blk_mq_do_dispatch_sched block/blk-mq-sched.c:184 [inline] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 block/blk-mq-sched.c:309 blk_mq_sched_dispatch_requests+0xcb/0x140 block/blk-mq-sched.c:331 blk_mq_run_hw_queue+0x576/0xae0 block/blk-mq.c:2245 blk_mq_flush_plug_list+0x1115/0x1880 block/blk-mq.c:2794 __blk_flush_plug+0x420/0x500 block/blk-core.c:1198 blk_finish_plug block/blk-core.c:1225 [inline] __submit_bio+0x422/0x560 block/blk-core.c:623 __submit_bio_noacct_mq block/blk-core.c:696 [inline] submit_bio_noacct_nocheck+0x4d3/0xe30 block/blk-core.c:725 submit_bh fs/buffer.c:2829 [inline] block_read_full_folio+0x93b/0xcd0 fs/buffer.c:2456 filemap_read_folio+0x1a0/0x790 mm/filemap.c:2355 do_read_cache_folio+0x134/0x820 mm/filemap.c:3789 read_mapping_folio include/linux/pagemap.h:913 [inline] read_part_sector+0xb3/0x330 block/partitions/core.c:712 adfspart_check_ICS+0xd9/0x9a0 block/partitions/acorn.c:360 check_partition block/partitions/core.c:138 [inline] blk_add_partitions block/partitions/core.c:579 [inline] bdev_disk_changed+0x72c/0x13d0 block/partitions/core.c:683 blkdev_get_whole+0x2d2/0x450 block/bdev.c:700 bdev_open+0x2d4/0xc60 block/bdev.c:909 blkdev_open+0x3e8/0x570 block/fops.c:630 do_dentry_open+0x970/0x1440 fs/open.c:959 vfs_open+0x3e/0x330 fs/open.c:1089 do_open fs/namei.c:3727 [inline] path_openat+0x2b3e/0x3470 fs/namei.c:3886 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2c213169a4 RSP: 002b:00007ffe36d17840 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000055b38f0bda90 RCX: 00007f2c213169a4 RDX: 00000000000a0800 RSI: 000055b38f09f560 RDI: 00000000ffffff9c RBP: 000055b38f09f560 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 R13: 000055b38f0b3540 R14: 0000000000000001 R15: 000055b38f09e910 INFO: task udevd:9480 blocked for more than 147 seconds. Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:21072 pid:9480 tgid:9480 ppid:4684 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 wait_for_reconnect drivers/block/nbd.c:1023 [inline] nbd_handle_cmd drivers/block/nbd.c:1065 [inline] nbd_queue_rq+0x7cd/0x2f70 drivers/block/nbd.c:1123 blk_mq_dispatch_rq_list+0xb89/0x1b30 block/blk-mq.c:2032 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:170 [inline] blk_mq_do_dispatch_sched block/blk-mq-sched.c:184 [inline] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 block/blk-mq-sched.c:309 blk_mq_sched_dispatch_requests+0xcb/0x140 block/blk-mq-sched.c:331 blk_mq_run_hw_queue+0x576/0xae0 block/blk-mq.c:2245 blk_mq_flush_plug_list+0x1115/0x1880 block/blk-mq.c:2794 __blk_flush_plug+0x420/0x500 block/blk-core.c:1198 blk_finish_plug block/blk-core.c:1225 [inline] __submit_bio+0x422/0x560 block/blk-core.c:623 __submit_bio_noacct_mq block/blk-core.c:696 [inline] submit_bio_noacct_nocheck+0x4d3/0xe30 block/blk-core.c:725 submit_bh fs/buffer.c:2829 [inline] block_read_full_folio+0x93b/0xcd0 fs/buffer.c:2456 filemap_read_folio+0x1a0/0x790 mm/filemap.c:2355 do_read_cache_folio+0x134/0x820 mm/filemap.c:3789 read_mapping_folio include/linux/pagemap.h:913 [inline] read_part_sector+0xb3/0x330 block/partitions/core.c:712 adfspart_check_ICS+0xd9/0x9a0 block/partitions/acorn.c:360 check_partition block/partitions/core.c:138 [inline] blk_add_partitions block/partitions/core.c:579 [inline] bdev_disk_changed+0x72c/0x13d0 block/partitions/core.c:683 blkdev_get_whole+0x2d2/0x450 block/bdev.c:700 bdev_open+0x2d4/0xc60 block/bdev.c:909 blkdev_open+0x3e8/0x570 block/fops.c:630 do_dentry_open+0x970/0x1440 fs/open.c:959 vfs_open+0x3e/0x330 fs/open.c:1089 do_open fs/namei.c:3727 [inline] path_openat+0x2b3e/0x3470 fs/namei.c:3886 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2c213169a4 RSP: 002b:00007ffe36d17840 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000055b38f0b2230 RCX: 00007f2c213169a4 RDX: 00000000000a0800 RSI: 000055b38f0c0830 RDI: 00000000ffffff9c RBP: 000055b38f0c0830 R08: 0000000000000001 R09: 7fffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 R13: 000055b38f0b3540 R14: 0000000000000001 R15: 000055b38f09e910 INFO: task udevd:10013 blocked for more than 147 seconds. Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:21072 pid:10013 tgid:10013 ppid:4684 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 wait_for_reconnect drivers/block/nbd.c:1023 [inline] nbd_handle_cmd drivers/block/nbd.c:1065 [inline] nbd_queue_rq+0x7cd/0x2f70 drivers/block/nbd.c:1123 blk_mq_dispatch_rq_list+0xb89/0x1b30 block/blk-mq.c:2032 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:170 [inline] blk_mq_do_dispatch_sched block/blk-mq-sched.c:184 [inline] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 block/blk-mq-sched.c:309 blk_mq_sched_dispatch_requests+0xcb/0x140 block/blk-mq-sched.c:331 blk_mq_run_hw_queue+0x576/0xae0 block/blk-mq.c:2245 blk_mq_flush_plug_list+0x1115/0x1880 block/blk-mq.c:2794 __blk_flush_plug+0x420/0x500 block/blk-core.c:1198 blk_finish_plug block/blk-core.c:1225 [inline] __submit_bio+0x422/0x560 block/blk-core.c:623 __submit_bio_noacct_mq block/blk-core.c:696 [inline] submit_bio_noacct_nocheck+0x4d3/0xe30 block/blk-core.c:725 submit_bh fs/buffer.c:2829 [inline] block_read_full_folio+0x93b/0xcd0 fs/buffer.c:2456 filemap_read_folio+0x1a0/0x790 mm/filemap.c:2355 do_read_cache_folio+0x134/0x820 mm/filemap.c:3789 read_mapping_folio include/linux/pagemap.h:913 [inline] read_part_sector+0xb3/0x330 block/partitions/core.c:712 adfspart_check_ICS+0xd9/0x9a0 block/partitions/acorn.c:360 check_partition block/partitions/core.c:138 [inline] blk_add_partitions block/partitions/core.c:579 [inline] bdev_disk_changed+0x72c/0x13d0 block/partitions/core.c:683 blkdev_get_whole+0x2d2/0x450 block/bdev.c:700 bdev_open+0x2d4/0xc60 block/bdev.c:909 blkdev_open+0x3e8/0x570 block/fops.c:630 do_dentry_open+0x970/0x1440 fs/open.c:959 vfs_open+0x3e/0x330 fs/open.c:1089 do_open fs/namei.c:3727 [inline] path_openat+0x2b3e/0x3470 fs/namei.c:3886 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2c213169a4 RSP: 002b:00007ffe36d17840 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000055b38f0b2230 RCX: 00007f2c213169a4 RDX: 00000000000a0800 RSI: 000055b38f0b84a0 RDI: 00000000ffffff9c RBP: 000055b38f0b84a0 R08: 0000000000000001 R09: 7fffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 R13: 000055b38f0b1250 R14: 0000000000000001 R15: 000055b38f09e910 INFO: task udevd:10613 blocked for more than 148 seconds. Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:20344 pid:10613 tgid:10613 ppid:4684 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 wait_for_reconnect drivers/block/nbd.c:1023 [inline] nbd_handle_cmd drivers/block/nbd.c:1065 [inline] nbd_queue_rq+0x7cd/0x2f70 drivers/block/nbd.c:1123 blk_mq_dispatch_rq_list+0xb89/0x1b30 block/blk-mq.c:2032 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:170 [inline] blk_mq_do_dispatch_sched block/blk-mq-sched.c:184 [inline] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 block/blk-mq-sched.c:309 blk_mq_sched_dispatch_requests+0xcb/0x140 block/blk-mq-sched.c:331 blk_mq_run_hw_queue+0x576/0xae0 block/blk-mq.c:2245 blk_mq_flush_plug_list+0x1115/0x1880 block/blk-mq.c:2794 __blk_flush_plug+0x420/0x500 block/blk-core.c:1198 blk_finish_plug block/blk-core.c:1225 [inline] __submit_bio+0x422/0x560 block/blk-core.c:623 __submit_bio_noacct_mq block/blk-core.c:696 [inline] submit_bio_noacct_nocheck+0x4d3/0xe30 block/blk-core.c:725 submit_bh fs/buffer.c:2829 [inline] block_read_full_folio+0x93b/0xcd0 fs/buffer.c:2456 filemap_read_folio+0x1a0/0x790 mm/filemap.c:2355 do_read_cache_folio+0x134/0x820 mm/filemap.c:3789 read_mapping_folio include/linux/pagemap.h:913 [inline] read_part_sector+0xb3/0x330 block/partitions/core.c:712 adfspart_check_ICS+0xd9/0x9a0 block/partitions/acorn.c:360 check_partition block/partitions/core.c:138 [inline] blk_add_partitions block/partitions/core.c:579 [inline] bdev_disk_changed+0x72c/0x13d0 block/partitions/core.c:683 blkdev_get_whole+0x2d2/0x450 block/bdev.c:700 bdev_open+0x2d4/0xc60 block/bdev.c:909 blkdev_open+0x3e8/0x570 block/fops.c:630 do_dentry_open+0x970/0x1440 fs/open.c:959 vfs_open+0x3e/0x330 fs/open.c:1089 do_open fs/namei.c:3727 [inline] path_openat+0x2b3e/0x3470 fs/namei.c:3886 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2c213169a4 RSP: 002b:00007ffe36d17840 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000055b38f0bfe10 RCX: 00007f2c213169a4 RDX: 00000000000a0800 RSI: 000055b38f09f700 RDI: 00000000ffffff9c RBP: 000055b38f09f700 R08: 0000000000000001 R09: 7fffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 R13: 000055b38f0b1250 R14: 0000000000000001 R15: 000055b38f09e910 INFO: task udevd:10833 blocked for more than 149 seconds. Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:20944 pid:10833 tgid:10833 ppid:4684 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 wait_for_reconnect drivers/block/nbd.c:1023 [inline] nbd_handle_cmd drivers/block/nbd.c:1065 [inline] nbd_queue_rq+0x7cd/0x2f70 drivers/block/nbd.c:1123 blk_mq_dispatch_rq_list+0xb89/0x1b30 block/blk-mq.c:2032 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:170 [inline] blk_mq_do_dispatch_sched block/blk-mq-sched.c:184 [inline] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 block/blk-mq-sched.c:309 blk_mq_sched_dispatch_requests+0xcb/0x140 block/blk-mq-sched.c:331 blk_mq_run_hw_queue+0x576/0xae0 block/blk-mq.c:2245 blk_mq_flush_plug_list+0x1115/0x1880 block/blk-mq.c:2794 __blk_flush_plug+0x420/0x500 block/blk-core.c:1198 blk_finish_plug block/blk-core.c:1225 [inline] __submit_bio+0x422/0x560 block/blk-core.c:623 __submit_bio_noacct_mq block/blk-core.c:696 [inline] submit_bio_noacct_nocheck+0x4d3/0xe30 block/blk-core.c:725 submit_bh fs/buffer.c:2829 [inline] block_read_full_folio+0x93b/0xcd0 fs/buffer.c:2456 filemap_read_folio+0x1a0/0x790 mm/filemap.c:2355 do_read_cache_folio+0x134/0x820 mm/filemap.c:3789 read_mapping_folio include/linux/pagemap.h:913 [inline] read_part_sector+0xb3/0x330 block/partitions/core.c:712 adfspart_check_ICS+0xd9/0x9a0 block/partitions/acorn.c:360 check_partition block/partitions/core.c:138 [inline] blk_add_partitions block/partitions/core.c:579 [inline] bdev_disk_changed+0x72c/0x13d0 block/partitions/core.c:683 blkdev_get_whole+0x2d2/0x450 block/bdev.c:700 bdev_open+0x2d4/0xc60 block/bdev.c:909 blkdev_open+0x3e8/0x570 block/fops.c:630 do_dentry_open+0x970/0x1440 fs/open.c:959 vfs_open+0x3e/0x330 fs/open.c:1089 do_open fs/namei.c:3727 [inline] path_openat+0x2b3e/0x3470 fs/namei.c:3886 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2c213169a4 RSP: 002b:00007ffe36d17840 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000055b38f0bfe10 RCX: 00007f2c213169a4 RDX: 00000000000a0800 RSI: 000055b38f0f9d40 RDI: 00000000ffffff9c RBP: 000055b38f0f9d40 R08: 0000000000000001 R09: 7fffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 R13: 000055b38f0b3540 R14: 0000000000000001 R15: 000055b38f09e910 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task udevd:11510 blocked for more than 149 seconds. Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:21072 pid:11510 tgid:11510 ppid:4684 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 wait_for_reconnect drivers/block/nbd.c:1023 [inline] nbd_handle_cmd drivers/block/nbd.c:1065 [inline] nbd_queue_rq+0x7cd/0x2f70 drivers/block/nbd.c:1123 blk_mq_dispatch_rq_list+0xb89/0x1b30 block/blk-mq.c:2032 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:170 [inline] blk_mq_do_dispatch_sched block/blk-mq-sched.c:184 [inline] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 block/blk-mq-sched.c:309 blk_mq_sched_dispatch_requests+0xcb/0x140 block/blk-mq-sched.c:331 blk_mq_run_hw_queue+0x576/0xae0 block/blk-mq.c:2245 blk_mq_flush_plug_list+0x1115/0x1880 block/blk-mq.c:2794 __blk_flush_plug+0x420/0x500 block/blk-core.c:1198 blk_finish_plug block/blk-core.c:1225 [inline] __submit_bio+0x422/0x560 block/blk-core.c:623 __submit_bio_noacct_mq block/blk-core.c:696 [inline] submit_bio_noacct_nocheck+0x4d3/0xe30 block/blk-core.c:725 submit_bh fs/buffer.c:2829 [inline] block_read_full_folio+0x93b/0xcd0 fs/buffer.c:2456 filemap_read_folio+0x1a0/0x790 mm/filemap.c:2355 do_read_cache_folio+0x134/0x820 mm/filemap.c:3789 read_mapping_folio include/linux/pagemap.h:913 [inline] read_part_sector+0xb3/0x330 block/partitions/core.c:712 adfspart_check_ICS+0xd9/0x9a0 block/partitions/acorn.c:360 check_partition block/partitions/core.c:138 [inline] blk_add_partitions block/partitions/core.c:579 [inline] bdev_disk_changed+0x72c/0x13d0 block/partitions/core.c:683 blkdev_get_whole+0x2d2/0x450 block/bdev.c:700 bdev_open+0x2d4/0xc60 block/bdev.c:909 blkdev_open+0x3e8/0x570 block/fops.c:630 do_dentry_open+0x970/0x1440 fs/open.c:959 vfs_open+0x3e/0x330 fs/open.c:1089 do_open fs/namei.c:3727 [inline] path_openat+0x2b3e/0x3470 fs/namei.c:3886 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2c213169a4 RSP: 002b:00007ffe36d17840 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000055b38f0b2230 RCX: 00007f2c213169a4 RDX: 00000000000a0800 RSI: 000055b38f110320 RDI: 00000000ffffff9c RBP: 000055b38f110320 R08: 0000000000000001 R09: 7fffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 R13: 000055b38f0b3540 R14: 0000000000000001 R15: 000055b38f09e910 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings INFO: task udevd:11605 blocked for more than 150 seconds. Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:udevd state:D stack:22032 pid:11605 tgid:11605 ppid:4684 flags:0x00004002 Call Trace: context_switch kernel/sched/core.c:5188 [inline] __schedule+0x1800/0x4a60 kernel/sched/core.c:6529 __schedule_loop kernel/sched/core.c:6606 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6621 schedule_timeout+0x1be/0x310 kernel/time/timer.c:2581 wait_for_reconnect drivers/block/nbd.c:1023 [inline] nbd_handle_cmd drivers/block/nbd.c:1065 [inline] nbd_queue_rq+0x7cd/0x2f70 drivers/block/nbd.c:1123 blk_mq_dispatch_rq_list+0xb89/0x1b30 block/blk-mq.c:2032 __blk_mq_do_dispatch_sched block/blk-mq-sched.c:170 [inline] blk_mq_do_dispatch_sched block/blk-mq-sched.c:184 [inline] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 block/blk-mq-sched.c:309 blk_mq_sched_dispatch_requests+0xcb/0x140 block/blk-mq-sched.c:331 blk_mq_run_hw_queue+0x576/0xae0 block/blk-mq.c:2245 blk_mq_flush_plug_list+0x1115/0x1880 block/blk-mq.c:2794 __blk_flush_plug+0x420/0x500 block/blk-core.c:1198 blk_finish_plug block/blk-core.c:1225 [inline] __submit_bio+0x422/0x560 block/blk-core.c:623 __submit_bio_noacct_mq block/blk-core.c:696 [inline] submit_bio_noacct_nocheck+0x4d3/0xe30 block/blk-core.c:725 submit_bh fs/buffer.c:2829 [inline] block_read_full_folio+0x93b/0xcd0 fs/buffer.c:2456 filemap_read_folio+0x1a0/0x790 mm/filemap.c:2355 do_read_cache_folio+0x134/0x820 mm/filemap.c:3789 read_mapping_folio include/linux/pagemap.h:913 [inline] read_part_sector+0xb3/0x330 block/partitions/core.c:712 adfspart_check_ICS+0xd9/0x9a0 block/partitions/acorn.c:360 check_partition block/partitions/core.c:138 [inline] blk_add_partitions block/partitions/core.c:579 [inline] bdev_disk_changed+0x72c/0x13d0 block/partitions/core.c:683 blkdev_get_whole+0x2d2/0x450 block/bdev.c:700 bdev_open+0x2d4/0xc60 block/bdev.c:909 blkdev_open+0x3e8/0x570 block/fops.c:630 do_dentry_open+0x970/0x1440 fs/open.c:959 vfs_open+0x3e/0x330 fs/open.c:1089 do_open fs/namei.c:3727 [inline] path_openat+0x2b3e/0x3470 fs/namei.c:3886 do_filp_open+0x235/0x490 fs/namei.c:3913 do_sys_openat2+0x13e/0x1d0 fs/open.c:1416 do_sys_open fs/open.c:1431 [inline] __do_sys_openat fs/open.c:1447 [inline] __se_sys_openat fs/open.c:1442 [inline] __x64_sys_openat+0x247/0x2a0 fs/open.c:1442 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2c213169a4 RSP: 002b:00007ffe36d17840 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 RAX: ffffffffffffffda RBX: 000055b38f0bfe10 RCX: 00007f2c213169a4 RDX: 00000000000a0800 RSI: 000055b38f105710 RDI: 00000000ffffff9c RBP: 000055b38f105710 R08: 0000000000000001 R09: 7fffffffffffffff R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 R13: 000055b38f0b3540 R14: 0000000000000001 R15: 000055b38f09e910 Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings Showing all locks held in the system: 1 lock held by khungtaskd/30: #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire include/linux/rcupdate.h:326 [inline] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: rcu_read_lock include/linux/rcupdate.h:838 [inline] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 kernel/locking/lockdep.c:6626 2 locks held by getty/4983: #0: ffff88803063b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 drivers/tty/n_tty.c:2211 3 locks held by udevd/5258: #0: ffff888025e5d4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 block/bdev.c:897 #1: ffff888025de2910 (set->srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:151 [inline] #1: ffff888025de2910 (set->srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:250 [inline] #1: ffff888025de2910 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 block/blk-mq.c:2245 #2: ffff8880261b8180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 drivers/block/nbd.c:1115 3 locks held by udevd/5821: #0: ffff88802600e4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 block/bdev.c:897 #1: ffff88802566fc90 (set->srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:151 [inline] #1: ffff88802566fc90 (set->srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:250 [inline] #1: ffff88802566fc90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 block/blk-mq.c:2245 #2: ffff888026188180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 drivers/block/nbd.c:1115 3 locks held by udevd/6313: #0: ffff88802614a4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 block/bdev.c:897 #1: ffff88802609c310 (set->srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:151 [inline] #1: ffff88802609c310 (set->srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:250 [inline] #1: ffff88802609c310 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 block/blk-mq.c:2245 #2: ffff888026218180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 drivers/block/nbd.c:1115 3 locks held by udevd/6324: #0: ffff8880261e94c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 block/bdev.c:897 #1: ffff888025de2f90 (set->srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:151 [inline] #1: ffff888025de2f90 (set->srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:250 [inline] #1: ffff888025de2f90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 block/blk-mq.c:2245 #2: ffff888026280180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 drivers/block/nbd.c:1115 3 locks held by udevd/7372: #0: ffff8880261ed4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 block/bdev.c:897 #1: ffff88802604e590 (set->srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:151 [inline] #1: ffff88802604e590 (set->srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:250 [inline] #1: ffff88802604e590 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 block/blk-mq.c:2245 #2: ffff8880262e8180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 drivers/block/nbd.c:1115 3 locks held by udevd/9085: #0: ffff88802614e4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 block/bdev.c:897 #1: ffff88802609cd10 (set->srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:151 [inline] #1: ffff88802609cd10 (set->srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:250 [inline] #1: ffff88802609cd10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 block/blk-mq.c:2245 #2: ffff888026368180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 drivers/block/nbd.c:1115 3 locks held by udevd/9480: #0: ffff8880262c24c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 block/bdev.c:897 #1: ffff888026243210 (set->srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:151 [inline] #1: ffff888026243210 (set->srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:250 [inline] #1: ffff888026243210 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 block/blk-mq.c:2245 #2: ffff8880263c0180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 drivers/block/nbd.c:1115 3 locks held by udevd/10013: #0: ffff8880262c64c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 block/bdev.c:897 #1: ffff888026243a90 (set->srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:151 [inline] #1: ffff888026243a90 (set->srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:250 [inline] #1: ffff888026243a90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 block/blk-mq.c:2245 #2: ffff888026860180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 drivers/block/nbd.c:1115 3 locks held by udevd/10613: #0: ffff8880263254c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 block/bdev.c:897 #1: ffff888026380610 (set->srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:151 [inline] #1: ffff888026380610 (set->srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:250 [inline] #1: ffff888026380610 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 block/blk-mq.c:2245 #2: ffff8880268d0180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 drivers/block/nbd.c:1115 3 locks held by udevd/10833: #0: ffff8880263214c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 block/bdev.c:897 #1: ffff88802604ef90 (set->srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:151 [inline] #1: ffff88802604ef90 (set->srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:250 [inline] #1: ffff88802604ef90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 block/blk-mq.c:2245 #2: ffff888026820180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 drivers/block/nbd.c:1115 3 locks held by udevd/11510: #0: ffff8880263fa4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 block/bdev.c:897 #1: ffff888026271110 (set->srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:151 [inline] #1: ffff888026271110 (set->srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:250 [inline] #1: ffff888026271110 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 block/blk-mq.c:2245 #2: ffff888026938180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 drivers/block/nbd.c:1115 3 locks held by udevd/11605: #0: ffff8880268914c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 block/bdev.c:897 #1: ffff888026380e90 (set->srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:151 [inline] #1: ffff888026380e90 (set->srcu){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:250 [inline] #1: ffff888026380e90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 block/blk-mq.c:2245 #2: ffff8880269a0180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 drivers/block/nbd.c:1115 3 locks held by syz-executor202/1927: #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 net/netlink/genetlink.c:1209 #2: ffff888030955198 (&nbd->config_lock){+.+.}-{3:3}, at: nbd_genl_connect+0xc26/0x1c80 drivers/block/nbd.c:2025 2 locks held by syz-executor202/1929: #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 net/netlink/genetlink.c:1209 2 locks held by syz-executor202/1931: #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 net/netlink/genetlink.c:1209 2 locks held by syz-executor202/1930: #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 net/netlink/genetlink.c:1209 2 locks held by syz-executor202/1932: #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 net/netlink/genetlink.c:1218 #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_lock net/netlink/genetlink.c:35 [inline] #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_op_lock net/netlink/genetlink.c:60 [inline] #1: ffffffff8fcee168 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 net/netlink/genetlink.c:1209 ============================================= NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 Call Trace: __dump_stack lib/dump_stack.c:93 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119 nmi_cpu_backtrace+0x49c/0x4d0 lib/nmi_backtrace.c:113 nmi_trigger_cpumask_backtrace+0x198/0x320 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:162 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:223 [inline] watchdog+0xff4/0x1040 kernel/hung_task.c:379 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 4684 Comm: udevd Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 RIP: 0033:0x7f2c213615bd Code: 07 fe ff ff 66 0f 1f 84 00 00 00 00 00 83 fa 01 76 7b 89 f8 09 f0 25 ff 0f 00 00 3d e0 0f 00 00 7f 2b c5 fe 6f 16 c5 ed 74 17 fd d7 c2 ff c0 c4 e2 68 f5 d0 0f 85 c2 fd ff ff 31 c0 e9 c9 fd RSP: 002b:00007ffe36d17a68 EFLAGS: 00000283 RAX: 0000000000000fa4 RBX: 000055b38fd15c60 RCX: 0000000000000000 RDX: 000000000000001c RSI: 000055b38fd15724 RDI: 000055b38f4c5a84 RBP: 000055b38f4c5fc0 R08: 000000000000001c R09: 000000000000001c R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000002707 R13: 000055b38f4c5a84 R14: 0000000000000000 R15: 0000000000000000 FS: 00007f2c216a3c80 GS: 0000000000000000