last executing test programs: 1m47.377527237s ago: executing program 4 (id=814): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4008800) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c00018008000100", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 1m46.986934571s ago: executing program 4 (id=818): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(0x0, 0x27) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040f0406004320"], 0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0xc, &(0x7f0000000200)={0x3, 0x4}) r1 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 1m45.681349597s ago: executing program 4 (id=823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800ef0100800000000000000a0000000000c800000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="14000500000000000000"], 0x3c}, 0x1, 0x11, 0x0, 0x80}, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 1m43.623511532s ago: executing program 4 (id=828): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a40)='d'}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4e, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad7"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m42.181641813s ago: executing program 4 (id=839): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x6) setsockopt(r5, 0x10e, 0xb, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@flushsa={0x58, 0x1c, 0x905, 0x0, 0x0, {}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x0, @in6=@remote}]}]}, 0x58}}, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r4, &(0x7f0000000500)={'#! ', './file0'}, 0xb) 1m40.510734343s ago: executing program 4 (id=841): creat(&(0x7f0000000080)='./control\x00', 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) gettimeofday(&(0x7f00000000c0), &(0x7f0000000140)) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) 1m25.233724791s ago: executing program 32 (id=841): creat(&(0x7f0000000080)='./control\x00', 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) gettimeofday(&(0x7f00000000c0), &(0x7f0000000140)) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) 45.090182653s ago: executing program 0 (id=962): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newtfilter={0x50, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x6}, @TCA_FLOWER_INDEV={0x14, 0x2, 'ipvlan1\x00'}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) 44.477915365s ago: executing program 0 (id=965): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x6) setsockopt(r5, 0x10e, 0xb, 0x0, 0x0) sendmsg$nl_xfrm(r5, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r4, &(0x7f0000000500)={'#! ', './file0'}, 0xb) 42.472762244s ago: executing program 0 (id=966): sendto$inet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x4000080, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) r0 = openat$sequencer(0xffffff9c, 0x0, 0x2002, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x0, 0x1, 0x1, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000000400)={0x5, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0x1}, &(0x7f0000000280)={0x77359400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x80) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="0f0053a6fa153bdf0000", @ANYRES16=r6, @ANYBLOB="0100fdffffff0010000007000000080009000200000008000b0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x890) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000480)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0, @ANYBLOB="020025bd7000030000000700000006000e000120000006000e00070000000500060000000000140020002001000000000000000000000000000208000c000100000006000e0081000000060002000000000073b9ad0c87d562a212205d3f37c95ddba0654c84df3249c364a691aa86174a7ba231ad54589e0961399a9393b68b9833c1e68de45f12472e0cd1b906049f1b41b439"], 0x58}, 0x1, 0x0, 0x0, 0x20044080}, 0x200040d1) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c000240"], 0xdc}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0x100, @local}, @echo_reply={0xe0}}}}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r9}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r8, &(0x7f0000000040), &(0x7f00000000c0)=""/198}, 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x3f00, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 33.306161923s ago: executing program 5 (id=992): sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0xe8}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x30, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x214e}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) 32.744171999s ago: executing program 5 (id=996): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x101001, 0x0) write$proc_mixer(r0, &(0x7f0000000040)=ANY=[], 0x33) close(r0) 32.588069605s ago: executing program 5 (id=997): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, 0x0) 32.321428212s ago: executing program 0 (id=999): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="380000001214010027bd7000fddbdf250800010000000000080015000000000008004f000000000008004b0013000000080003"], 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) 31.77813903s ago: executing program 0 (id=1001): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xd, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xfff, 0x0, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x5dc}], 0x1}, 0x4) 31.568963939s ago: executing program 5 (id=1004): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, 0x0) userfaultfd(0x801) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioperm(0xa, 0x1, 0xffff) 30.110337254s ago: executing program 5 (id=1008): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='nfs\x00', 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000380)={0x0, 0x0, 0x2}) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14) 29.963259602s ago: executing program 0 (id=1010): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x8884) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf25030000000c00080040000000000000000c000200030000000000000008000100000000000c000800ffff0000000000000c0006000100000000000000100007800c00018008000100", @ANYRES32, @ANYBLOB="0c000200ffffffff000000000c00080008000000000000000c0008000200000000000000c2d17418372f2e7d21c6251ea7db793bb209e15c2aeba8572f6f9e709b68260cd0dac082e67ba279d00129a06da30a7afaf77064e9a3c515e5b54b3634d9c673ccf7110061c7e477400466ef77bc681112121b2ec891812ae126f063f9cda9d231dae88bffaae8c9314d88cedb751ceefd2bbcfab7893bf7b2545f95e39f4d9883e6185de91a36a486a677d721a149926ebdeff940c849a24be5da7567a96b981c41b24c6da9d62612ddb64f65b02051742eb7855a27312418ef724c20d258e0d51040a63f2edfa586d7cb940ba0337348554ab625312ad4c8d9ed0e391f380676af"], 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x48000) 29.442715296s ago: executing program 5 (id=1011): sendto$inet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x4000080, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) r0 = openat$sequencer(0xffffff9c, 0x0, 0x2002, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x0, 0x1, 0x1, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000000400)={0x5, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0x1}, &(0x7f0000000280)={0x77359400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x80) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="0f0053a6fa153bdf0000", @ANYRES16=r6, @ANYBLOB="0100fdffffff0010000007000000080009000200000008000b0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x890) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000480)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0, @ANYBLOB="020025bd7000030000000700000006000e000120000006000e00070000000500060000000000140020002001000000000000000000000000000208000c000100000006000e0081000000060002000000000073b9ad0c87d562a212205d3f37c95ddba0654c84df3249c364a691aa86174a7ba231ad54589e0961399a9393b68b9833c1e68de45f12472e0cd1b906049f1b41b439"], 0x58}, 0x1, 0x0, 0x0, 0x20044080}, 0x200040d1) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c000240"], 0xdc}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0x100, @local}, @echo_reply={0xe0}}}}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r9}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r8, &(0x7f0000000040), &(0x7f00000000c0)=""/198}, 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x3f00, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 27.694998165s ago: executing program 3 (id=1019): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x600, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) readlink(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs/file0\x00', &(0x7f0000000500)=""/250, 0xfa) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ptrace$setregs(0xd, 0x0, 0x400, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000006) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0xffffffff, 0x4) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000002700), 0x200, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000002740)) 26.733552287s ago: executing program 3 (id=1021): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) 26.402213125s ago: executing program 3 (id=1023): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='nfs\x00', 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000380)={0x0, 0x0, 0x2}) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14) 25.810711646s ago: executing program 3 (id=1026): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000080, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) r0 = openat$sequencer(0xffffff9c, 0x0, 0x2002, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000480)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0, @ANYBLOB="020025bd7000030000000700000006000e000120000006000e00070000000500060000000000140020002001000000000000000000000000000208000c000100000006000e0081000000060002000000000073b9ad0c87d562a212205d3f37c95ddba0654c84df3249c364a691aa86174a7ba231ad54589e0961399a9393b68b9833c1e68de45f12472e0cd1b906049f1b41b439"], 0x58}, 0x1, 0x0, 0x0, 0x20044080}, 0x200040d1) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c000240"], 0xdc}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0x100, @local}, @echo_reply={0xe0}}}}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r7}, 0xc) 25.35043801s ago: executing program 1 (id=1027): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021009090a0000002abd7000fbdbdf25080012"], 0x50}}, 0x40010) 24.806055539s ago: executing program 1 (id=1030): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xefdd}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x18b0}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 24.053019044s ago: executing program 1 (id=1031): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, 0x0) 23.683472687s ago: executing program 6 (id=1032): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x1, 0x8, 0x1, 0x7ffe, 0x5, 0x0, {0x2}}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) fsopen(&(0x7f0000000080)='nfsd\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x442, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001a0001000000000000000000020000000000ff000000000006001c004e20000008000b005000000008000400", @ANYRES32=0x0, @ANYBLOB="080042c5000000"], 0x3c}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 22.785307077s ago: executing program 1 (id=1033): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x600, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) readlink(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs/file0\x00', &(0x7f0000000500)=""/250, 0xfa) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ptrace$setregs(0xd, 0x0, 0x400, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000006) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0xffffffff, 0x4) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000002700), 0x200, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000002740)) 22.614974348s ago: executing program 6 (id=1034): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r1, 0x83, &(0x7f00000010c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/194, 0xc2}}, 0x10) 21.703608642s ago: executing program 1 (id=1036): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2\xdf', &(0x7f00000007c0)='{\xe0e%m\"\x92\xb5\xcb\x00\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xf2j\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x1c\x81>\t\xc30-\xe2\xb3\xb00xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$packet(r6, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee", 0xfffffffffffffec6, 0x100000000000000, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0x6) socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffe, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x32) ioctl$DRM_IOCTL_MODE_GETENCODER(r7, 0xc01464a6, &(0x7f00000001c0)) tkill(r1, 0xb) 21.649269917s ago: executing program 6 (id=1038): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='nfs\x00', 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000380)={0x0, 0x0, 0x2}) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2}) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14) 20.338199482s ago: executing program 3 (id=1040): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) clock_getres(0xe2249e36e7addc67, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001f40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15}, {0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="1c50c1cee51e5951d34ddc43f52ae5205a5485588c3a0905", 0x18}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="800000000000000030010000020000006a0000008fb0ca307fb01c22cbbe93201b36bb90d5bdd61a5e3150609fc49a8b3c7df2229e76fe4d9600a1c957d2fcb3953d7418551f7e7af10b9377dfa6044be73a751de6286c2172c1c600fdcf544f85850afb686c5d5bd034d3eba66dbd386ed165c6c75b5c6a0878eb66bacf79a0000018000000000000001701000002000000000000000000000018000000000000001701000004000000720500000000"], 0xb0, 0x8c91}, {0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000700)="286c7b2ef2314c5b6fb8302c644bfcd43e27323258c6122077e47e0121355af34edac99e6ee122878cd55a8c3108606659fb470c0ff6e017ce8b979d77c2537dc2f677f182f79c4043e22acebc11c2f3a1e0e96c501b70274538526a206f192ba89a71c18e74b9892450976c945bb2c368ac293d76be526d856d315a8e528e49d6648d933fd363cc2c1b8292daa0e1b2d8cee577544688860e9ec6cf3bad65a1c269a5ef55247b4a33374d8bc3c10879b50ba03da7339df858cd999dbb40d474d6a1eb4e383d47bcf51e", 0xca}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="3177fb13519286728c133c48a8a491918aa798502cd849693c561d9cbb88ad94d696a7c168eee87b7ba3525088923cccb99cb7b9954342ea9f58b3bff11d825eecabb335131bd96362fa5d324c64c157b234175dc95a3a385b155ebc7d4a1b98f58e1fe0e504a26f88cbccce8378f1ff9fd2b628c776d25426a1079617dff9dafc960e5b0f5fa965b6586a5c247175edf26a5458f4d1e2bd0393264665393367376823a97a87cd4bb4b62fed66c2736eee672d77b1f7d0caf463dabf46c0c71dc36b667bb2cd1240d598b68969e7af35d84f3b", 0xd3}, {&(0x7f0000000040)="44b008ff55e6486382668ef2b202c9c48db5501bc2e664df14e4c69b4b05f55235ea3389254c8094635ce96dcd78800556fcbbf902c70d3dbea8014d33c0cfe48e84337144b4be4a195b4136ad35b6983c644b4872e7f2ace5fe1eab62c6a41440f61a7e15c907f0e402e31583ada1c6", 0x70}, {&(0x7f0000001900)="584628d502c4ede73961e956842139163a2f95e316ad4d86872c26494fa3541962071df1d65dae10", 0x28}, {&(0x7f0000001940)="1a3482d0a3e7a9e11b354f2fc21f8d3e6796d69374cdcbc82ef7abe3ab60687da0aae5634d999e2cd2d7cd3e515226d8d7d0becf568c485eed1f6da94a6f833a9c93941f2e0a0f67cec75c931795d4db8c388fcc4038adf12b05a8334a72546c0dcb4c764b71c1d80ef549f6921852f10ff0ad8ebf0b2c8423766a3de85825fb7fb8b6d00d926cc22417d3b9598b8dbc416e3bbdabe84765199b491623ee10d7e32a4af96e2f80900a1929e16d858a60985235c9df3e76e350cfb1b1cc493119fd38cf870d32fc504d13819cc41007e41c7b4a887a689596aa8883727490d412cc3bfcbd9579b88dc423d5f665e3", 0xee}], 0x6, &(0x7f0000001ac0)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30, 0x804}, {0x0, 0x0, &(0x7f0000001ec0), 0x0, 0x0, 0x0, 0x10}], 0x4, 0x8001) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0042, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 19.962239205s ago: executing program 1 (id=1043): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, 0x0, 0x20000000) 19.174302846s ago: executing program 3 (id=1045): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x2000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 18.547593154s ago: executing program 6 (id=1046): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000580)='wg2\x00', 0x4) connect$phonet_pipe(r0, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 18.489944822s ago: executing program 6 (id=1047): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800105c, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 18.153538277s ago: executing program 2 (id=1048): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x600, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) readlink(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs/file0\x00', &(0x7f0000000500)=""/250, 0xfa) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ptrace$setregs(0xd, 0x0, 0x400, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000006) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0xffffffff, 0x4) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000002700), 0x200, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000002740)) 17.221980805s ago: executing program 2 (id=1049): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10000008ebc, 0x0) 17.051077148s ago: executing program 2 (id=1050): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x4) 16.810050711s ago: executing program 2 (id=1051): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 16.658897668s ago: executing program 2 (id=1052): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000080, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) r0 = openat$sequencer(0xffffff9c, 0x0, 0x2002, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000480)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0, @ANYBLOB="020025bd7000030000000700000006000e000120000006000e00070000000500060000000000140020002001000000000000000000000000000208000c000100000006000e0081000000060002000000000073b9ad0c87d562a212205d3f37c95ddba0654c84df3249c364a691aa86174a7ba231ad54589e0961399a9393b68b9833c1e68de45f12472e0cd1b906049f1b41b439"], 0x58}, 0x1, 0x0, 0x0, 0x20044080}, 0x200040d1) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c000240"], 0xdc}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0x100, @local}, @echo_reply={0xe0}}}}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r7}, 0xc) 16.638711819s ago: executing program 6 (id=1053): memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) bind$rds(r2, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100), 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {0x0}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) 15.333830647s ago: executing program 2 (id=1054): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x8, 0x0, 0x0}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x10, 0x3, "91abc12404cf378042f26c43"}]}], {0x14}}, 0x78}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="93", 0x1}], 0x1}}], 0x1, 0x4c000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}]}]}, 0x30}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x9}, 0xe) sendmmsg(r7, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)='z', 0x1}], 0x1}}], 0x1, 0x4004004) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000080)) sendmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 14.523962454s ago: executing program 33 (id=1010): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x8884) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf25030000000c00080040000000000000000c000200030000000000000008000100000000000c000800ffff0000000000000c0006000100000000000000100007800c00018008000100", @ANYRES32, @ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x48000) 14.01425124s ago: executing program 34 (id=1011): sendto$inet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x4000080, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) r0 = openat$sequencer(0xffffff9c, 0x0, 0x2002, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0x0, 0x1, 0x1, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000000400)={0x5, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0x1}, &(0x7f0000000280)={0x77359400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x80) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="0f0053a6fa153bdf0000", @ANYRES16=r6, @ANYBLOB="0100fdffffff0010000007000000080009000200000008000b0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x890) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000480)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0, @ANYBLOB="020025bd7000030000000700000006000e000120000006000e00070000000500060000000000140020002001000000000000000000000000000208000c000100000006000e0081000000060002000000000073b9ad0c87d562a212205d3f37c95ddba0654c84df3249c364a691aa86174a7ba231ad54589e0961399a9393b68b9833c1e68de45f12472e0cd1b906049f1b41b439"], 0x58}, 0x1, 0x0, 0x0, 0x20044080}, 0x200040d1) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c000240"], 0xdc}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0x100, @local}, @echo_reply={0xe0}}}}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r9}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r8, &(0x7f0000000040), &(0x7f00000000c0)=""/198}, 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x3f00, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 4.50417867s ago: executing program 35 (id=1043): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, 0x0, 0x20000000) 4.004899321s ago: executing program 36 (id=1045): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x2000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.502662963s ago: executing program 37 (id=1053): memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) bind$rds(r2, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100), 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {0x0}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) 0s ago: executing program 38 (id=1054): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x8, 0x0, 0x0}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x10, 0x3, "91abc12404cf378042f26c43"}]}], {0x14}}, 0x78}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="93", 0x1}], 0x1}}], 0x1, 0x4c000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}]}]}, 0x30}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x9}, 0xe) sendmmsg(r7, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)='z', 0x1}], 0x1}}], 0x1, 0x4004004) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000080)) sendmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.2.268'. [ 188.981288][ T6944] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 190.381794][ T6963] binder: 6962:6963 ioctl c0306201 0 returned -14 [ 191.139503][ T6973] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 192.977851][ T6982] syzkaller0: entered promiscuous mode [ 192.983625][ T6982] syzkaller0: entered allmulticast mode [ 193.837846][ T6991] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.282'. [ 193.960429][ T6990] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.282'. [ 195.240858][ T7001] fuse: Unknown parameter '' [ 195.912100][ T7006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.286'. [ 197.222801][ T7015] binder: 7014:7015 ioctl c0306201 0 returned -14 [ 197.319474][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.291'. [ 198.661822][ T7037] syzkaller0: entered promiscuous mode [ 198.667358][ T7037] syzkaller0: entered allmulticast mode [ 198.733729][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.746202][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.753349][ T7050] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 202.427267][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.302'. [ 203.839396][ T7074] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.307'. [ 203.858623][ T7073] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.307'. [ 204.070225][ T7076] binder: 7075:7076 ioctl c0306201 0 returned -14 [ 204.196605][ T7080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.309'. [ 205.229107][ T7084] syzkaller0: entered promiscuous mode [ 205.234646][ T7084] syzkaller0: entered allmulticast mode [ 206.916967][ T7101] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 206.923603][ T7101] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 207.118534][ T7101] vhci_hcd vhci_hcd.0: Device attached [ 207.374417][ T7111] vhci_hcd: connection closed [ 207.374894][ T61] vhci_hcd vhci_hcd.0: stop threads [ 207.391984][ T61] vhci_hcd vhci_hcd.0: release socket [ 207.398228][ T61] vhci_hcd vhci_hcd.0: disconnect device [ 207.415946][ T5923] usb 34-1: enqueue for inactive port 0 [ 207.664389][ T7123] siw: device registration error -23 [ 207.909550][ T5923] usb usb34-port1: attempt power cycle [ 208.506897][ T5923] usb usb34-port1: unable to enumerate USB device [ 208.918959][ T7132] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.323'. [ 208.928422][ T7131] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.323'. [ 209.526266][ T52] Bluetooth: hci0: command tx timeout [ 211.696566][ T7152] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.324'. [ 214.801314][ T7163] syzkaller0: entered promiscuous mode [ 214.838379][ T7163] syzkaller0: entered allmulticast mode [ 215.078611][ T7187] netlink: 'syz.5.337': attribute type 13 has an invalid length. [ 216.206061][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 216.212175][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 216.218625][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 216.226082][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 216.232128][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 218.939785][ T7186] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.336'. [ 219.027607][ T7230] netlink: 44 bytes leftover after parsing attributes in process `syz.2.344'. [ 219.060546][ T7237] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.342'. [ 219.394847][ T7246] ptrace attach of "./syz-executor exec"[5831] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ /dev/snd/seq Àÿ ÿÿÿÿ   8   € \x09 Û  þÿÿú ÿÿÿÿ"[7246] [ 221.052808][ T7265] siw: device registration error -23 [ 223.102697][ T7282] netlink: 'syz.1.357': attribute type 13 has an invalid length. [ 223.524978][ T7287] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.358'. [ 223.535215][ T7286] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.358'. [ 224.004320][ T7293] 9pnet_fd: Insufficient options for proto=fd [ 224.218695][ T7293] binder: 7290:7293 ioctl 400c620e 0 returned -14 [ 226.672520][ T7325] netlink: 56 bytes leftover after parsing attributes in process `syz.3.370'. [ 227.189248][ T7327] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.364'. [ 227.219609][ T7326] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.364'. [ 227.492070][ T7329] netlink: 'syz.4.371': attribute type 13 has an invalid length. [ 228.864475][ T7329] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.872137][ T7329] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.196647][ T7329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.258343][ T7329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.293409][ T7337] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.373'. [ 232.445626][ T3447] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.594288][ T3447] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.610921][ T3447] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.624390][ T3447] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.019217][ T7424] netlink: 56 bytes leftover after parsing attributes in process `syz.5.391'. [ 237.441225][ T7431] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.394'. [ 237.451375][ T7430] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.394'. [ 238.890670][ T7436] netlink: 'syz.0.395': attribute type 13 has an invalid length. [ 239.359301][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.398'. [ 242.485064][ T7491] netlink: 'syz.5.410': attribute type 13 has an invalid length. [ 242.496640][ T7489] syzkaller0: entered promiscuous mode [ 242.502099][ T7489] syzkaller0: entered allmulticast mode [ 242.891716][ T7496] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.407'. [ 242.927280][ T7494] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.407'. [ 244.450696][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.416'. [ 245.547076][ T7535] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.412'. [ 245.757555][ T7499] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.412'. [ 246.265489][ T7544] 9pnet_fd: Insufficient options for proto=fd [ 246.344117][ T7544] binder: 7539:7544 ioctl 400c620e 0 returned -14 [ 246.378374][ T7546] syzkaller0: entered promiscuous mode [ 246.407261][ T7546] syzkaller0: entered allmulticast mode [ 246.550220][ T7548] netlink: 'syz.2.424': attribute type 13 has an invalid length. [ 247.969159][ T7548] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.976775][ T7548] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.250529][ T7548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.281902][ T7548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.463129][ T7562] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.426'. [ 249.681394][ T1084] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.714433][ T1084] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.797742][ T1084] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.883044][ T1084] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.701499][ T7610] syzkaller0: entered promiscuous mode [ 250.726641][ T7610] syzkaller0: entered allmulticast mode [ 251.877673][ T7624] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.439'. [ 252.153433][ T7623] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.439'. [ 252.310592][ T7631] siw: device registration error -23 [ 252.840697][ T7634] netlink: 'syz.3.443': attribute type 13 has an invalid length. [ 253.769564][ T7634] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.777466][ T7634] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.241234][ T7634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.288821][ T7634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.203639][ T7659] 9pnet_fd: Insufficient options for proto=fd [ 255.211983][ T7659] binder: 7658:7659 ioctl 400c620e 0 returned -14 [ 256.628495][ T7642] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.444'. [ 256.830507][ T60] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.910218][ T60] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.945932][ T60] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.428229][ T7687] syzkaller0: entered promiscuous mode [ 257.446119][ T7687] syzkaller0: entered allmulticast mode [ 257.466680][ T60] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.745515][ T7709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.460'. [ 259.995970][ T7718] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.458'. [ 260.056918][ T7717] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.458'. [ 260.168211][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.176622][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.490241][ T7724] 9pnet_fd: Insufficient options for proto=fd [ 260.501325][ T7724] binder: 7723:7724 ioctl 400c620e 0 returned -14 [ 260.677896][ T7727] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 261.329196][ T7736] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.466'. [ 261.741117][ T7740] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.467'. [ 261.751040][ T7739] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.467'. [ 263.840456][ T7751] syzkaller0: entered promiscuous mode [ 263.846021][ T7751] syzkaller0: entered allmulticast mode [ 264.173404][ T7754] kAFS: unable to lookup cell 'ÿ' [ 264.803364][ T7767] 9pnet_fd: Insufficient options for proto=fd [ 264.811729][ T7767] binder: 7765:7767 ioctl 400c620e 0 returned -14 [ 264.878284][ T7769] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 265.061515][ T7775] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.479'. [ 265.126921][ T6012] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 265.350181][ T6012] usb 6-1: config 0 has no interfaces? [ 265.512225][ T6012] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 265.522371][ T6012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.554584][ T6012] usb 6-1: config 0 descriptor?? [ 265.573989][ T7785] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.481'. [ 265.583690][ T7780] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.481'. [ 265.787255][ T7789] syz_tun: entered allmulticast mode [ 265.834937][ T6014] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 265.875662][ T6014] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 265.950301][ T6012] usb 6-1: USB disconnect, device number 2 [ 266.976767][ T7792] fido_id[7792]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 267.815106][ T7804] tipc: Started in network mode [ 267.845881][ T7804] tipc: Node identity daa5aca049db, cluster identity 4711 [ 267.894285][ T7804] tipc: Enabled bearer , priority 0 [ 267.915603][ T7807] netlink: 44 bytes leftover after parsing attributes in process `syz.1.487'. [ 267.927047][ T7804] tipc: Resetting bearer [ 268.065271][ T7803] tipc: Disabling bearer [ 268.422953][ T7813] siw: device registration error -23 [ 268.521490][ T7815] 9pnet_fd: Insufficient options for proto=fd [ 268.544924][ T7815] binder: 7814:7815 ioctl 400c620e 0 returned -14 [ 269.798375][ T7828] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.495'. [ 270.014926][ T7827] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 270.104805][ T7835] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.497'. [ 270.114291][ T7832] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.497'. [ 270.365897][ T6014] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 270.518578][ T6014] usb 4-1: config 0 has no interfaces? [ 270.527506][ T6014] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 270.551054][ T6014] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.580288][ T6014] usb 4-1: config 0 descriptor?? [ 271.602233][ T6012] usb 4-1: USB disconnect, device number 2 [ 272.345122][ T7854] tipc: Started in network mode [ 272.361465][ T7854] tipc: Node identity 3602648c0a1e, cluster identity 4711 [ 272.376728][ T7854] tipc: Enabled bearer , priority 0 [ 272.390575][ T7854] syzkaller0: entered promiscuous mode [ 272.456790][ T7854] syzkaller0: entered allmulticast mode [ 272.587494][ T7854] netlink: 44 bytes leftover after parsing attributes in process `syz.4.504'. [ 272.636322][ T7853] tipc: Resetting bearer [ 272.688187][ T7853] tipc: Disabling bearer [ 273.676726][ T7876] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.510'. [ 274.574840][ T7889] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.514'. [ 274.586918][ T7888] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.514'. [ 275.393049][ T7897] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 277.466810][ T7914] siw: device registration error -23 [ 278.198687][ T7920] tipc: Enabled bearer , priority 0 [ 278.238308][ T7920] syzkaller0: entered promiscuous mode [ 278.272238][ T7920] syzkaller0: entered allmulticast mode [ 278.327994][ T7920] netlink: 44 bytes leftover after parsing attributes in process `syz.2.522'. [ 278.370328][ T7917] tipc: Resetting bearer [ 278.450457][ T7917] tipc: Disabling bearer [ 278.803546][ T31] kauditd_printk_skb: 43 callbacks suppressed [ 278.812203][ T31] audit: type=1326 audit(1769135765.913:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c0f9acb9 code=0x7ffc0000 [ 278.995461][ T31] audit: type=1326 audit(1769135765.913:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f49c0f9acb9 code=0x7ffc0000 [ 279.018791][ T31] audit: type=1326 audit(1769135765.913:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c0f9acb9 code=0x7ffc0000 [ 279.087679][ T31] audit: type=1326 audit(1769135765.953:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f49c0f9acb9 code=0x7ffc0000 [ 279.815930][ T31] audit: type=1326 audit(1769135765.953:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c0f9acb9 code=0x7ffc0000 [ 279.966557][ T31] audit: type=1326 audit(1769135765.953:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f49c0f9acb9 code=0x7ffc0000 [ 279.992630][ T7934] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.526'. [ 280.134472][ T31] audit: type=1326 audit(1769135765.953:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c0f9acb9 code=0x7ffc0000 [ 280.406104][ T31] audit: type=1326 audit(1769135765.953:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c0f9acb9 code=0x7ffc0000 [ 280.436142][ T31] audit: type=1326 audit(1769135765.953:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f49c0f9acb9 code=0x7ffc0000 [ 280.459023][ T31] audit: type=1326 audit(1769135765.953:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c0f9acb9 code=0x7ffc0000 [ 281.001864][ T7944] nbd0: detected capacity change from 0 to 63 [ 281.034302][ T7948] block nbd0: NBD_DISCONNECT [ 281.076639][ T7948] block nbd0: Disconnected due to user request. [ 281.236769][ T7948] block nbd0: shutting down sockets [ 282.086122][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 282.096251][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 282.112244][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 282.121802][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 282.179981][ C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 282.189561][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 282.205886][ C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 282.215423][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 282.232655][ T7148] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 282.290422][ T7963] tipc: Started in network mode [ 282.329062][ T7148] Buffer I/O error on dev nbd0, logical block 0, async page read [ 282.335928][ T7963] tipc: Node identity 225fb85e642b, cluster identity 4711 [ 282.384438][ T7963] tipc: Enabled bearer , priority 0 [ 282.426093][ T7148] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 282.432278][ T7965] syzkaller0: entered promiscuous mode [ 282.471809][ T7965] syzkaller0: entered allmulticast mode [ 282.500561][ T7148] Buffer I/O error on dev nbd0, logical block 1, async page read [ 282.522147][ T7963] netlink: 44 bytes leftover after parsing attributes in process `syz.5.536'. [ 282.554958][ T7148] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 282.592224][ T7148] Buffer I/O error on dev nbd0, logical block 2, async page read [ 282.604462][ T7962] tipc: Resetting bearer [ 282.634465][ T7148] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 282.817843][ T7962] tipc: Disabling bearer [ 282.847336][ T7148] Buffer I/O error on dev nbd0, logical block 3, async page read [ 283.508859][ T7148] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 283.520214][ T7148] Buffer I/O error on dev nbd0, logical block 0, async page read [ 283.528905][ T7148] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 283.659291][ T7148] Buffer I/O error on dev nbd0, logical block 1, async page read [ 283.707342][ T7148] ldm_validate_partition_table(): Disk read failed. [ 283.719448][ T7148] Dev nbd0: unable to read RDB block 0 [ 283.727364][ T7148] nbd0: unable to read partition table [ 283.748097][ T6010] tipc: Node number set to 1182054494 [ 283.767734][ T7148] ldm_validate_partition_table(): Disk read failed. [ 283.810394][ T7148] Dev nbd0: unable to read RDB block 0 [ 283.856560][ T7148] nbd0: unable to read partition table [ 284.193032][ T7984] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.542'. [ 284.821333][ T6010] Process accounting resumed [ 287.502937][ T8021] fuse: Bad value for 'fd' [ 287.966112][ T8025] tipc: Enabled bearer , priority 0 [ 287.973442][ T8025] syzkaller0: entered promiscuous mode [ 287.979086][ T8025] syzkaller0: entered allmulticast mode [ 287.988279][ T8025] netlink: 44 bytes leftover after parsing attributes in process `syz.4.553'. [ 287.999367][ T8025] tipc: Resetting bearer [ 288.028175][ T8027] netlink: 56 bytes leftover after parsing attributes in process `syz.2.552'. [ 288.090906][ T8024] tipc: Resetting bearer [ 288.154741][ T8024] tipc: Disabling bearer [ 288.545893][ T31] kauditd_printk_skb: 118 callbacks suppressed [ 288.545914][ T31] audit: type=1326 audit(1769135775.483:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40cb9acb9 code=0x7ffc0000 [ 289.227913][ T31] audit: type=1326 audit(1769135775.483:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd40cb9acb9 code=0x7ffc0000 [ 289.251597][ T31] audit: type=1326 audit(1769135775.483:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40cb9acb9 code=0x7ffc0000 [ 289.273928][ T31] audit: type=1326 audit(1769135775.483:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd40cb9acb9 code=0x7ffc0000 [ 289.273991][ T31] audit: type=1326 audit(1769135775.483:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40cb9acb9 code=0x7ffc0000 [ 289.274038][ T31] audit: type=1326 audit(1769135775.493:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd40cb9acb9 code=0x7ffc0000 [ 289.274084][ T31] audit: type=1326 audit(1769135775.493:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40cb9acb9 code=0x7ffc0000 [ 289.274131][ T31] audit: type=1326 audit(1769135775.493:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40cb9acb9 code=0x7ffc0000 [ 289.274179][ T31] audit: type=1326 audit(1769135775.493:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd40cb9acb9 code=0x7ffc0000 [ 289.274226][ T31] audit: type=1326 audit(1769135775.493:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8029 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40cb9acb9 code=0x7ffc0000 [ 289.360411][ T8038] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.557'. [ 290.358444][ T8053] Cannot find add_set index 0 as target [ 293.506448][ T8070] fuse: Unknown parameter '0x0000000000000003' [ 295.344535][ T5970] Process accounting resumed [ 296.266701][ T31] kauditd_printk_skb: 44 callbacks suppressed [ 296.266722][ T31] audit: type=1326 audit(1769135783.383:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c0f9acb9 code=0x7ffc0000 [ 296.518621][ T8098] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.572'. [ 296.582993][ T31] audit: type=1326 audit(1769135783.383:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f49c0f9acb9 code=0x7ffc0000 [ 296.705951][ T31] audit: type=1326 audit(1769135783.383:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c0f9acb9 code=0x7ffc0000 [ 296.854316][ T31] audit: type=1326 audit(1769135783.383:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f49c0f9acb9 code=0x7ffc0000 [ 296.947185][ T31] audit: type=1326 audit(1769135783.383:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c0f9acb9 code=0x7ffc0000 [ 297.050358][ T31] audit: type=1326 audit(1769135783.383:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f49c0f9acb9 code=0x7ffc0000 [ 297.105927][ T31] audit: type=1326 audit(1769135783.383:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c0f9acb9 code=0x7ffc0000 [ 297.425968][ T31] audit: type=1326 audit(1769135783.383:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c0f9acb9 code=0x7ffc0000 [ 297.705918][ T31] audit: type=1326 audit(1769135783.383:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f49c0f9acb9 code=0x7ffc0000 [ 297.884220][ T31] audit: type=1326 audit(1769135783.383:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8092 comm="syz.3.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c0f9acb9 code=0x7ffc0000 [ 300.163865][ T8144] netlink: 56 bytes leftover after parsing attributes in process `syz.0.584'. [ 301.975940][ T8156] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 301.982589][ T8156] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 302.009397][ T8156] vhci_hcd vhci_hcd.0: Device attached [ 302.193823][ T8158] vhci_hcd: connection closed [ 302.194208][ T1084] vhci_hcd vhci_hcd.5: stop threads [ 302.207846][ T1084] vhci_hcd vhci_hcd.5: release socket [ 302.225857][ T1084] vhci_hcd vhci_hcd.5: disconnect device [ 302.883445][ T8157] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 303.950118][ T8171] mkiss: ax0: crc mode is auto. [ 304.010295][ T8172] netlink: 180 bytes leftover after parsing attributes in process `syz.2.592'. [ 305.165260][ T8187] netlink: 'syz.1.597': attribute type 3 has an invalid length. [ 306.396160][ T8203] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.601'. [ 306.411884][ T8201] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.601'. [ 307.181841][ T8212] fuse: Unknown parameter 'group_i00000000000000000000' [ 309.820204][ T8231] netlink: 44 bytes leftover after parsing attributes in process `syz.1.610'. [ 311.078996][ T8244] syzkaller0: entered promiscuous mode [ 311.084533][ T8244] syzkaller0: entered allmulticast mode [ 311.442310][ T8254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.619'. [ 313.027777][ T8272] netlink: 44 bytes leftover after parsing attributes in process `syz.3.624'. [ 313.794133][ T8288] Cannot find add_set index 0 as target [ 317.796735][ T6014] Process accounting resumed [ 319.050051][ T8285] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.627'. [ 319.073199][ T8292] macvtap1: entered promiscuous mode [ 319.084983][ T8292] dummy0: entered promiscuous mode [ 319.117583][ T8292] macvtap1: entered allmulticast mode [ 319.132830][ T8292] dummy0: entered allmulticast mode [ 319.170892][ T8292] dummy0: left allmulticast mode [ 319.190481][ T8292] dummy0: left promiscuous mode [ 321.757246][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.805984][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.482406][ T8364] Cannot find add_set index 0 as target [ 326.525222][ T8392] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.656'. [ 326.534880][ T8389] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.656'. [ 327.274256][ T8394] mkiss: ax0: crc mode is auto. [ 327.545107][ T5970] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 327.685934][ T8412] syzkaller0: entered promiscuous mode [ 327.691469][ T8412] syzkaller0: entered allmulticast mode [ 327.736652][ T5970] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.753266][ T5970] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 327.783320][ T5970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.818358][ T5970] usb 1-1: config 0 descriptor?? [ 327.852798][ T5970] pwc: Askey VC010 type 2 USB webcam detected. [ 328.068600][ T6014] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 328.295891][ T5970] pwc: recv_control_msg error -32 req 02 val 2b00 [ 328.535508][ T5970] pwc: recv_control_msg error -32 req 02 val 2700 [ 328.908841][ T8402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.917746][ T6014] usb 5-1: Using ep0 maxpacket: 16 [ 328.919628][ T8402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.939760][ T6014] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.950994][ T6014] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.961439][ T6014] usb 5-1: config 0 interface 0 has no altsetting 0 [ 328.962420][ T8427] Cannot find add_set index 0 as target [ 328.974545][ T5970] pwc: recv_control_msg error -71 req 04 val 1000 [ 328.996089][ T5970] pwc: recv_control_msg error -71 req 04 val 1300 [ 329.013640][ T6014] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 329.024380][ T5970] pwc: recv_control_msg error -71 req 04 val 1400 [ 329.064980][ T5970] pwc: recv_control_msg error -71 req 02 val 2000 [ 329.102858][ T5970] pwc: recv_control_msg error -71 req 02 val 2100 [ 329.127998][ T5970] pwc: recv_control_msg error -71 req 04 val 1500 [ 329.150189][ T5970] pwc: recv_control_msg error -71 req 02 val 2500 [ 329.194003][ T6014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.210681][ T5970] pwc: recv_control_msg error -71 req 02 val 2400 [ 329.240579][ T5970] pwc: recv_control_msg error -71 req 02 val 2600 [ 329.262501][ T5970] pwc: recv_control_msg error -71 req 02 val 2900 [ 329.277414][ T5970] pwc: recv_control_msg error -71 req 02 val 2800 [ 329.301374][ T5970] pwc: recv_control_msg error -71 req 04 val 1100 [ 329.826001][ T5970] pwc: recv_control_msg error -71 req 04 val 1200 [ 329.840246][ T5970] pwc: Registered as video103. [ 329.848256][ T5970] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 329.864178][ T5970] usb 1-1: USB disconnect, device number 5 [ 330.016591][ T6014] usb 5-1: config 0 descriptor?? [ 330.490681][ T8435] mkiss: ax0: crc mode is auto. [ 330.490863][ T8440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.562020][ T8440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.570321][ T8442] netlink: 180 bytes leftover after parsing attributes in process `syz.1.669'. [ 330.668489][ T6014] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 330.705164][ T6014] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 330.722250][ T6014] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 330.730870][ T6014] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 330.771217][ T8441] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.670'. [ 330.780984][ T8438] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.670'. [ 330.905073][ T6014] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 331.054313][ T6014] usb 5-1: USB disconnect, device number 2 [ 331.520810][ T8447] fido_id[8447]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 331.688808][ T8451] mkiss: ax0: crc mode is auto. [ 331.987841][ T31] kauditd_printk_skb: 57 callbacks suppressed [ 331.987861][ T31] audit: type=1326 audit(1769135819.103:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.2.677" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f188679acb9 code=0x0 [ 333.670364][ T8483] loop9: detected capacity change from 0 to 7 [ 333.681747][ C1] blk_print_req_error: 138 callbacks suppressed [ 333.681764][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 333.697793][ C1] buffer_io_error: 138 callbacks suppressed [ 333.697813][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 333.715901][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 333.725540][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 333.734454][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 333.744172][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 333.752798][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 333.762463][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 333.771102][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 333.780907][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 333.940701][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 333.950369][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 333.958994][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 333.968624][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 334.028844][ T8486] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.685'. [ 334.038519][ T8480] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.685'. [ 334.206930][ T8483] ldm_validate_partition_table(): Disk read failed. [ 334.219696][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.229425][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 334.773988][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.783637][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 334.797070][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.806709][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 334.852647][ T8483] Dev loop9: unable to read RDB block 0 [ 334.896124][ T8483] loop9: unable to read partition table [ 334.927073][ T8483] loop9: partition table beyond EOD, truncated [ 335.875258][ T8483] loop_reread_partitions: partition scan of loop9 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œë) failed (rc=-5) [ 336.300404][ T8485] ldm_validate_partition_table(): Disk read failed. [ 336.344180][ T8485] Dev loop9: unable to read RDB block 0 [ 336.388799][ T8485] loop9: unable to read partition table [ 336.403547][ T8485] loop9: partition table beyond EOD, truncated [ 336.586117][ T6014] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 336.876211][ T6014] usb 6-1: Using ep0 maxpacket: 16 [ 337.092866][ T6014] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.118140][ T6014] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.150649][ T6014] usb 6-1: config 0 interface 0 has no altsetting 0 [ 337.169096][ T6014] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 337.195166][ T6014] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.214685][ T6014] usb 6-1: config 0 descriptor?? [ 338.217628][ T6014] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 338.225036][ T6014] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 338.360623][ T8534] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.700'. [ 338.370174][ T8532] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.700'. [ 338.565706][ T6014] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 338.625148][ T6014] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 339.721043][ T6014] usb 6-1: USB disconnect, device number 3 [ 339.948165][ T8538] fido_id[8538]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 340.527488][ T8553] fuse: Unknown parameter 'fd0x0000000000000003' [ 342.036824][ T5970] Process accounting resumed [ 342.094128][ T8578] netlink: 20 bytes leftover after parsing attributes in process `syz.3.712'. [ 343.147032][ T8590] binder: 8584:8590 ioctl 400c620e 0 returned -14 [ 344.671962][ T8604] syz_tun: entered allmulticast mode [ 345.676765][ T8610] fuse: Bad value for 'user_id' [ 345.685930][ T8610] fuse: Bad value for 'user_id' [ 346.132135][ T8621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 348.347859][ T8631] netlink: 20 bytes leftover after parsing attributes in process `syz.2.728'. [ 349.357043][ T6014] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 350.428196][ T6014] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 350.440404][ T6014] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.480923][ T6014] usb 5-1: config 0 has no interface number 0 [ 350.499754][ T6014] usb 5-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 350.519431][ T6014] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 350.539076][ T6014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.559333][ T6014] usb 5-1: Product: syz [ 350.573478][ T6014] usb 5-1: Manufacturer: syz [ 350.586374][ T6014] usb 5-1: SerialNumber: syz [ 350.609937][ T8652] fuse: Bad value for 'user_id' [ 350.651836][ T6014] usb 5-1: config 0 descriptor?? [ 350.699748][ T8652] fuse: Bad value for 'user_id' [ 350.722442][ T6014] yurex 5-1:0.50: Could not find endpoints [ 350.962534][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.731'. [ 351.708559][ T8663] Cannot find add_set index 0 as target [ 353.408226][ T5970] usb 5-1: USB disconnect, device number 3 [ 354.764655][ T8683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.742'. [ 357.969479][ T8704] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 358.046755][ T8706] fuse: Bad value for 'fd' [ 358.454168][ T8712] netlink: 7 bytes leftover after parsing attributes in process `syz.5.750'. [ 362.954063][ T8741] netlink: 68 bytes leftover after parsing attributes in process `syz.1.759'. [ 364.486276][ T8757] fuse: Bad value for 'fd' [ 365.809268][ T8773] ptrace attach of "./syz-executor exec"[5837] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ /dev/snd/seq Àÿ ÿÿÿÿ   /sys/kernel/debug/binder/stats 8   € \x09 Û  þÿÿú ÿÿÿÿ"[8773] [ 365.931988][ T8771] netlink: 'syz.2.767': attribute type 4 has an invalid length. [ 366.036337][ T8776] netlink: 'syz.2.767': attribute type 4 has an invalid length. [ 368.529000][ T8788] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 370.881221][ T8809] netlink: 24 bytes leftover after parsing attributes in process `syz.0.776'. [ 372.179128][ T8821] fuse: Bad value for 'fd' [ 373.627753][ T8835] tipc: New replicast peer: 255.255.255.255 [ 374.361936][ T8835] tipc: Enabled bearer , priority 10 [ 376.166162][ T8869] fuse: Bad value for 'fd' [ 376.196634][ T8867] syzkaller0: entered promiscuous mode [ 376.206621][ T8867] syzkaller0: entered allmulticast mode [ 377.561967][ T8887] ptrace attach of "./syz-executor exec"[5831] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ /dev/snd/seq Àÿ ÿÿÿÿ   /sys/kernel/debug/binder/stats 8   € \x09 Û  þÿÿú ÿÿÿÿ"[8887] [ 378.042521][ T8893] mkiss: ax0: crc mode is auto. [ 380.581275][ T8921] syzkaller0: entered promiscuous mode [ 380.586842][ T8921] syzkaller0: entered allmulticast mode [ 380.666490][ T8925] netlink: 64 bytes leftover after parsing attributes in process `syz.4.814'. [ 380.706814][ T8925] block nbd0: not configured, cannot reconfigure [ 380.866126][ T6012] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 380.938913][ T5842] Bluetooth: hci3: unexpected event for opcode 0x2043 [ 381.798919][ T8938] mkiss: ax0: crc mode is auto. [ 381.851126][ T6012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.066110][ T6012] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 382.128438][ T6012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.169526][ T6012] usb 3-1: config 0 descriptor?? [ 383.154318][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.161128][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.290853][ T6012] hid_mf 0003:0079:1846.0004: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.2-1/input0 [ 383.302779][ T6012] hid_mf 0003:0079:1846.0004: Invalid report, this should never happen! [ 383.311985][ T6012] hid_mf 0003:0079:1846.0004: Force feedback init failed. [ 384.705360][ T6012] usb 3-1: USB disconnect, device number 5 [ 384.774766][ T8974] syzkaller0: entered promiscuous mode [ 384.787294][ T8974] syzkaller0: entered allmulticast mode [ 384.788546][ T8970] fido_id[8970]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 384.943984][ T8980] syzkaller0: entered promiscuous mode [ 384.953199][ T8980] syzkaller0: entered allmulticast mode [ 384.967610][ T5842] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 384.976300][ T5842] Bluetooth: hci3: Injecting HCI hardware error event [ 384.984826][ T5843] Bluetooth: hci3: hardware error 0x00 [ 385.124751][ T5842] Bluetooth: hci0: unexpected event for opcode 0x2043 [ 385.916643][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.837'. [ 386.836158][ T8996] netlink: 68 bytes leftover after parsing attributes in process `syz.4.839'. [ 387.089838][ T5843] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 387.314460][ T8992] mkiss: ax0: crc mode is auto. [ 387.412149][ T8994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.456199][ T9004] netlink: 44 bytes leftover after parsing attributes in process `syz.5.840'. [ 387.781936][ T9011] 9pnet_fd: Insufficient options for proto=fd [ 387.812557][ T9011] binder: 9008:9011 ioctl 400c620e 0 returned -14 [ 388.152053][ T6012] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 388.328041][ T6012] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.346413][ T6012] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 388.373298][ T6012] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.467373][ T6012] usb 2-1: config 0 descriptor?? [ 388.969776][ T9019] tipc: Enabled bearer , priority 0 [ 389.066602][ T6012] hid_mf 0003:0079:1846.0005: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.1-1/input0 [ 389.125991][ T6012] hid_mf 0003:0079:1846.0005: Invalid report, this should never happen! [ 389.159641][ T6012] hid_mf 0003:0079:1846.0005: Force feedback init failed. [ 389.196551][ T5843] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 389.205177][ T5843] Bluetooth: hci0: Injecting HCI hardware error event [ 389.213837][ T5843] Bluetooth: hci0: hardware error 0x00 [ 390.126181][ T9033] netlink: 68 bytes leftover after parsing attributes in process `syz.0.853'. [ 390.538656][ T9026] syzkaller0: entered promiscuous mode [ 390.561401][ T9026] syzkaller0: entered allmulticast mode [ 390.568753][ T9026] tipc: Resetting bearer [ 390.652243][ T3688] tipc: Resetting bearer [ 390.696054][ T9018] tipc: Resetting bearer [ 390.739065][ T6012] usb 2-1: USB disconnect, device number 4 [ 391.286170][ T5843] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 392.192837][ T9063] 9pnet_fd: Insufficient options for proto=fd [ 392.211081][ T9063] binder: 9061:9063 ioctl 400c620e 0 returned -14 [ 396.856212][ T9093] netlink: 68 bytes leftover after parsing attributes in process `syz.0.867'. [ 397.398905][ T9018] tipc: Disabling bearer [ 397.586185][ T9049] syzkaller0: entered promiscuous mode [ 397.591700][ T9049] syzkaller0: entered allmulticast mode [ 398.923773][ T9111] 9pnet_fd: Insufficient options for proto=fd [ 398.949641][ T9111] binder: 9109:9111 ioctl 400c620e 0 returned -14 [ 402.266150][ T9146] netlink: 68 bytes leftover after parsing attributes in process `syz.0.880'. [ 403.101322][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 403.118068][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 403.126115][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 403.134110][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 403.142585][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 403.657354][ T9133] netlink: 132 bytes leftover after parsing attributes in process `syz.5.875'. [ 403.768913][ T5842] Bluetooth: hci2: unexpected event for opcode 0x2043 [ 404.813570][ T9169] mkiss: ax0: crc mode is auto. [ 405.139542][ T9157] lo speed is unknown, defaulting to 1000 [ 405.306023][ T5842] Bluetooth: hci6: command tx timeout [ 405.620619][ T9183] Cannot find add_set index 0 as target [ 406.622775][ T9181] mkiss: ax0: crc mode is auto. [ 406.919846][ T9197] siw: device registration error -23 [ 407.355935][ T5842] Bluetooth: hci6: command tx timeout [ 407.835974][ T5842] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 407.845553][ T5842] Bluetooth: hci2: Injecting HCI hardware error event [ 407.854034][ T5843] Bluetooth: hci2: hardware error 0x00 [ 409.676165][ T9205] netlink: 68 bytes leftover after parsing attributes in process `syz.5.893'. [ 410.056867][ T5842] Bluetooth: hci6: command tx timeout [ 410.073350][ T5843] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 411.142903][ T6010] libceph: connect (1)[c::]:6789 error -101 [ 411.163100][ T6010] libceph: mon0 (1)[c::]:6789 connect error [ 411.268681][ T9043] syz_tun (unregistering): left allmulticast mode [ 411.437928][ T9224] ceph: No mds server is up or the cluster is laggy [ 411.444862][ T9157] chnl_net:caif_netlink_parms(): no params data found [ 411.506094][ T6010] libceph: connect (1)[c::]:6789 error -101 [ 411.520647][ T6010] libceph: mon0 (1)[c::]:6789 connect error [ 411.588276][ T9238] tipc: Started in network mode [ 411.593181][ T9238] tipc: Node identity b6321f591d5b, cluster identity 4711 [ 411.682303][ T9238] tipc: Enabled bearer , priority 0 [ 411.707042][ T9240] syzkaller0: entered promiscuous mode [ 411.765910][ T9240] syzkaller0: entered allmulticast mode [ 412.076006][ T5843] Bluetooth: hci6: command tx timeout [ 412.665729][ T9238] tipc: Resetting bearer [ 412.688305][ T9250] mkiss: ax0: crc mode is auto. [ 412.699502][ T9235] tipc: Resetting bearer [ 412.732698][ T9235] tipc: Disabling bearer [ 413.883558][ T9157] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.906897][ T9157] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.922328][ T9157] bridge_slave_0: entered allmulticast mode [ 413.937767][ T9157] bridge_slave_0: entered promiscuous mode [ 414.107319][ T9157] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.951268][ T9275] siw: device registration error -23 [ 414.984180][ T9157] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.996743][ T9157] bridge_slave_1: entered allmulticast mode [ 415.264675][ T9157] bridge_slave_1: entered promiscuous mode [ 415.523642][ T9157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.536556][ T9157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.908652][ T9157] team0: Port device team_slave_0 added [ 415.917748][ T9157] team0: Port device team_slave_1 added [ 416.434029][ T9157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.455204][ T9157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.657960][ T9157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.671571][ T9157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.768073][ T9157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.770813][ T9287] nbd0: detected capacity change from 0 to 63 [ 416.836391][ T9284] netlink: 68 bytes leftover after parsing attributes in process `syz.3.908'. [ 416.851682][ T9157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.062212][ T5843] block nbd0: Receive control failed (result -104) [ 417.132289][ T9303] tipc: Enabled bearer , priority 0 [ 417.207450][ T9157] hsr_slave_0: entered promiscuous mode [ 417.223036][ T9157] hsr_slave_1: entered promiscuous mode [ 417.233941][ T9157] debugfs: 'hsr0' already exists in 'hsr' [ 417.243403][ T9157] Cannot create hsr debugfs directory [ 417.254800][ T9300] syzkaller0: entered promiscuous mode [ 417.269054][ T9300] syzkaller0: entered allmulticast mode [ 417.771093][ T9300] tipc: Resetting bearer [ 417.812196][ T9299] tipc: Resetting bearer [ 417.839034][ T9314] Cannot find add_set index 0 as target [ 417.912218][ T9299] tipc: Disabling bearer [ 418.541643][ T3447] bridge_slave_1: left allmulticast mode [ 418.551568][ T3447] bridge_slave_1: left promiscuous mode [ 418.563846][ T3447] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.612773][ T3447] bridge_slave_0: left allmulticast mode [ 418.631613][ T3447] bridge_slave_0: left promiscuous mode [ 418.650442][ T3447] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.111474][ T3447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.166786][ T3447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.193312][ T3447] bond0 (unregistering): Released all slaves [ 423.647706][ T3447] bond1 (unregistering): Released all slaves [ 424.276041][ T3447] tipc: Left network mode [ 424.532324][ T9370] netlink: 'syz.3.928': attribute type 1 has an invalid length. [ 424.588903][ T9370] netlink: 224 bytes leftover after parsing attributes in process `syz.3.928'. [ 424.636956][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 424.661470][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 424.937430][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 424.943552][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 425.039733][ T9375] ceph: No mds server is up or the cluster is laggy [ 425.202301][ T9374] syzkaller0: entered promiscuous mode [ 425.248255][ T9374] syzkaller0: entered allmulticast mode [ 425.278753][ T9386] nbd1: detected capacity change from 0 to 63 [ 425.620592][ T5843] block nbd1: Receive control failed (result -104) [ 426.404684][ T9406] mkiss: ax0: crc mode is auto. [ 427.835931][ T5970] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 427.948769][ T3447] hsr_slave_0: left promiscuous mode [ 427.980745][ T3447] hsr_slave_1: left promiscuous mode [ 428.000591][ T5970] usb 4-1: Using ep0 maxpacket: 32 [ 428.008290][ T9430] Cannot find add_set index 0 as target [ 428.033338][ T3447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.034751][ T5970] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 428.098596][ T3447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.099425][ T5970] usb 4-1: config 0 has no interface number 0 [ 428.385974][ T5970] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 428.428539][ T5970] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 428.447477][ T5970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.485495][ T5970] usb 4-1: Product: syz [ 428.491141][ T5970] usb 4-1: Manufacturer: syz [ 428.525998][ T5970] usb 4-1: SerialNumber: syz [ 428.547168][ T5970] usb 4-1: config 0 descriptor?? [ 428.576973][ T9419] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 428.846572][ T9419] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 431.792907][ T5970] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 431.829622][ T5970] asix 4-1:0.188: probe with driver asix failed with error -61 [ 432.607461][ T3447] team0 (unregistering): Port device team_slave_1 removed [ 432.669205][ T5970] usb 4-1: USB disconnect, device number 3 [ 432.831194][ T3447] team0 (unregistering): Port device team_slave_0 removed [ 432.946642][ T9459] netlink: 'syz.3.942': attribute type 1 has an invalid length. [ 432.998800][ T9459] netlink: 224 bytes leftover after parsing attributes in process `syz.3.942'. [ 433.173039][ T9457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.942'. [ 434.087187][ T9471] siw: device registration error -23 [ 434.125100][ T9157] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 434.164694][ T9157] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 434.193961][ T6014] libceph: connect (1)[c::]:6789 error -101 [ 434.200962][ T6014] libceph: mon0 (1)[c::]:6789 connect error [ 434.242342][ T9157] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 434.335280][ T9157] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 434.481130][ T9488] nbd2: detected capacity change from 0 to 63 [ 434.490494][ T6014] libceph: connect (1)[c::]:6789 error -101 [ 434.512021][ T6014] libceph: mon0 (1)[c::]:6789 connect error [ 434.545283][ T9492] block nbd1: NBD_DISCONNECT [ 434.592030][ T9492] block nbd1: Send disconnect failed -32 [ 434.624526][ T9475] ceph: No mds server is up or the cluster is laggy [ 434.632152][ T9492] block nbd1: shutting down sockets [ 434.858201][ C0] blk_print_req_error: 25 callbacks suppressed [ 434.858227][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 434.874237][ C0] buffer_io_error: 25 callbacks suppressed [ 434.874258][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 435.575853][ C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 435.585484][ C0] Buffer I/O error on dev nbd1, logical block 1, async page read [ 435.593334][ C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 435.602931][ C0] Buffer I/O error on dev nbd1, logical block 2, async page read [ 435.610860][ C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 435.620366][ C0] Buffer I/O error on dev nbd1, logical block 3, async page read [ 435.628404][ T9301] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 435.630062][ T6014] libceph: connect (1)[c::]:6789 error -101 [ 435.662520][ T6014] libceph: mon0 (1)[c::]:6789 connect error [ 435.733859][ T9301] Buffer I/O error on dev nbd1, logical block 0, async page read [ 435.787915][ T9301] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 435.830991][ T9301] Buffer I/O error on dev nbd1, logical block 1, async page read [ 435.847648][ T9301] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 435.864670][ T5843] block nbd2: Receive control failed (result -104) [ 435.893564][ T9301] Buffer I/O error on dev nbd1, logical block 2, async page read [ 435.912144][ T9301] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 435.942070][ T9301] Buffer I/O error on dev nbd1, logical block 3, async page read [ 435.992399][ T9301] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 436.167896][ T9301] Buffer I/O error on dev nbd1, logical block 0, async page read [ 436.205952][ T9301] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 436.238915][ T9301] Buffer I/O error on dev nbd1, logical block 1, async page read [ 436.276783][ T9301] ldm_validate_partition_table(): Disk read failed. [ 436.304836][ T9301] Dev nbd1: unable to read RDB block 0 [ 436.335425][ T9301] nbd1: unable to read partition table [ 436.517982][ T9157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.553792][ T9301] ldm_validate_partition_table(): Disk read failed. [ 436.554175][ T9157] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.302932][ T9301] Dev nbd1: unable to read RDB block 0 [ 437.330405][ T3688] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.337579][ T3688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.348863][ T9301] nbd1: unable to read partition table [ 439.166947][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.174122][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.365598][ T9531] netlink: 'syz.2.955': attribute type 1 has an invalid length. [ 442.806570][ T9157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.876118][ T6014] libceph: connect (1)[c::]:6789 error -101 [ 442.882244][ T6014] libceph: mon0 (1)[c::]:6789 connect error [ 443.166522][ T6014] libceph: connect (1)[c::]:6789 error -101 [ 443.187612][ T6014] libceph: mon0 (1)[c::]:6789 connect error [ 443.255962][ T9587] nbd1: detected capacity change from 0 to 63 [ 443.274154][ T9592] block nbd1: NBD_DISCONNECT [ 443.310688][ T9592] block nbd1: Disconnected due to user request. [ 443.325095][ T9592] block nbd1: shutting down sockets [ 443.361064][ C0] blk_print_req_error: 138 callbacks suppressed [ 443.361087][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 443.376950][ C0] buffer_io_error: 138 callbacks suppressed [ 443.376962][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 443.398233][ C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 443.407744][ C0] Buffer I/O error on dev nbd1, logical block 1, async page read [ 443.415775][ C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 443.425275][ C0] Buffer I/O error on dev nbd1, logical block 2, async page read [ 443.433084][ C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 443.442657][ C0] Buffer I/O error on dev nbd1, logical block 3, async page read [ 443.451128][ T9301] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 443.484927][ T9572] ceph: No mds server is up or the cluster is laggy [ 443.505279][ T9301] Buffer I/O error on dev nbd1, logical block 0, async page read [ 443.542122][ T9301] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 443.571743][ T9301] Buffer I/O error on dev nbd1, logical block 1, async page read [ 443.593221][ T9301] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 443.654434][ T9301] Buffer I/O error on dev nbd1, logical block 2, async page read [ 445.304459][ T6014] libceph: connect (1)[c::]:6789 error -101 [ 445.310611][ T6014] libceph: mon0 (1)[c::]:6789 connect error [ 445.376913][ T9301] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 445.473423][ T9301] Buffer I/O error on dev nbd1, logical block 3, async page read [ 445.692004][ T9301] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 445.750616][ T9301] Buffer I/O error on dev nbd1, logical block 0, async page read [ 445.810506][ T9301] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 445.854616][ T9301] Buffer I/O error on dev nbd1, logical block 1, async page read [ 445.885688][ T9301] ldm_validate_partition_table(): Disk read failed. [ 445.913740][ T9301] Dev nbd1: unable to read RDB block 0 [ 445.922051][ T9157] veth0_vlan: entered promiscuous mode [ 445.938894][ T9301] nbd1: unable to read partition table [ 445.960426][ T9157] veth1_vlan: entered promiscuous mode [ 445.972826][ T9301] ldm_validate_partition_table(): Disk read failed. [ 445.999025][ T9301] Dev nbd1: unable to read RDB block 0 [ 446.021748][ T9301] nbd1: unable to read partition table [ 446.109611][ T9157] veth0_macvtap: entered promiscuous mode [ 446.148989][ T9157] veth1_macvtap: entered promiscuous mode [ 446.174499][ T9620] ALSA: mixer_oss: invalid OSS volume '' [ 446.196160][ T9614] netlink: 'syz.5.968': attribute type 1 has an invalid length. [ 446.470911][ T9157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.512912][ T9157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.025793][ T6066] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.148529][ T6066] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.339623][ T11] block nbd0: Possible stuck request ffff88802527a200: control (read@0,1024B). Runtime 30 seconds [ 447.346832][ T6066] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.352049][ T11] block nbd0: Possible stuck request ffff88802527a400: control (read@1024,1024B). Runtime 30 seconds [ 447.370144][ T11] block nbd0: Possible stuck request ffff88802527a600: control (read@2048,1024B). Runtime 30 seconds [ 447.381084][ T11] block nbd0: Possible stuck request ffff88802527a800: control (read@3072,1024B). Runtime 30 seconds [ 447.487652][ T6066] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.506544][ T2989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.514409][ T2989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.881794][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 449.908440][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 449.920019][ T6066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.946560][ T6066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.199752][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 450.227001][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 450.416837][ T9656] ceph: No mds server is up or the cluster is laggy [ 451.155975][ T9685] nbd1: detected capacity change from 0 to 63 [ 451.166340][ T9689] ALSA: mixer_oss: invalid OSS volume '' [ 451.307544][ T9688] block nbd1: NBD_DISCONNECT [ 451.374425][ T9688] block nbd1: Disconnected due to user request. [ 451.384724][ T9692] siw: device registration error -23 [ 451.565449][ T9688] block nbd1: shutting down sockets [ 451.566953][ T9301] blk_print_req_error: 138 callbacks suppressed [ 451.566970][ T9301] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 451.596181][ T9301] buffer_io_error: 138 callbacks suppressed [ 451.596202][ T9301] Buffer I/O error on dev nbd1, logical block 0, async page read [ 452.102992][ T6188] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 452.114565][ T6188] Buffer I/O error on dev nbd1, logical block 1, async page read [ 452.122526][ T6188] Buffer I/O error on dev nbd1, logical block 2, async page read [ 452.130353][ T6188] Buffer I/O error on dev nbd1, logical block 3, async page read [ 452.139450][ T9301] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.566635][ T9711] ALSA: mixer_oss: invalid OSS volume '' [ 453.122583][ T9301] Buffer I/O error on dev nbd1, logical block 0, async page read [ 453.150482][ T9699] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 453.177517][ T9301] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 453.295022][ T9301] Buffer I/O error on dev nbd1, logical block 1, async page read [ 453.314388][ T9301] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.191997][ T9301] Buffer I/O error on dev nbd1, logical block 2, async page read [ 454.205939][ T9301] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.215552][ T9301] Buffer I/O error on dev nbd1, logical block 3, async page read [ 454.234445][ T9720] netlink: 'syz.6.985': attribute type 1 has an invalid length. [ 454.235943][ T9301] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.265961][ T9301] Buffer I/O error on dev nbd1, logical block 0, async page read [ 454.273870][ T9301] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.298784][ T9301] Buffer I/O error on dev nbd1, logical block 1, async page read [ 454.306684][ T9301] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.316530][ T9301] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 454.328464][ T9301] ldm_validate_partition_table(): Disk read failed. [ 454.335586][ T9301] Dev nbd1: unable to read RDB block 0 [ 454.341809][ T9301] nbd1: unable to read partition table [ 454.360374][ T9301] ldm_validate_partition_table(): Disk read failed. [ 454.376426][ T9301] Dev nbd1: unable to read RDB block 0 [ 454.399635][ T9301] nbd1: unable to read partition table [ 455.082075][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 455.105731][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 455.168490][ T9751] ALSA: mixer_oss: invalid OSS volume '' [ 455.396315][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 455.411390][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 455.551221][ T9744] ceph: No mds server is up or the cluster is laggy [ 455.946258][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 455.952386][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 458.231089][ T9804] Cannot find add_set index 0 as target [ 459.215700][ T9825] binder: 9820:9825 ioctl c0306201 0 returned -14 [ 459.911642][ T6010] libceph: connect (1)[c::]:6789 error -101 [ 459.917892][ T6010] libceph: mon0 (1)[c::]:6789 connect error [ 459.979314][ T9834] siw: device registration error -23 [ 460.186637][ T6010] libceph: connect (1)[c::]:6789 error -101 [ 460.286443][ T6010] libceph: mon0 (1)[c::]:6789 connect error [ 460.816174][ T6010] libceph: connect (1)[c::]:6789 error -101 [ 460.823501][ T6010] libceph: mon0 (1)[c::]:6789 connect error [ 461.100477][ T9830] ceph: No mds server is up or the cluster is laggy [ 461.969122][ T9867] Cannot find add_set index 0 as target [ 463.309705][ T9880] mkiss: ax0: crc mode is auto. [ 463.594539][ T9878] syzkaller0: entered promiscuous mode [ 463.601275][ T9878] syzkaller0: entered allmulticast mode [ 465.027061][ T6188] block nbd2: Possible stuck request ffff888025348000: control (read@0,1024B). Runtime 30 seconds [ 465.037852][ T6188] block nbd2: Possible stuck request ffff888025348200: control (read@1024,1024B). Runtime 30 seconds [ 465.056197][ T6188] block nbd2: Possible stuck request ffff888025348400: control (read@2048,1024B). Runtime 30 seconds [ 465.067429][ T6188] block nbd2: Possible stuck request ffff888025348600: control (read@3072,1024B). Runtime 30 seconds [ 466.256716][ T6014] libceph: connect (1)[c::]:6789 error -101 [ 466.262999][ T6014] libceph: mon0 (1)[c::]:6789 connect error [ 466.529480][ T6014] libceph: connect (1)[c::]:6789 error -101 [ 466.597736][ T6014] libceph: mon0 (1)[c::]:6789 connect error [ 467.181563][ T6014] libceph: connect (1)[c::]:6789 error -101 [ 467.189893][ T6014] libceph: mon0 (1)[c::]:6789 connect error [ 467.474121][ T9902] ceph: No mds server is up or the cluster is laggy [ 467.932862][ T9929] Cannot find add_set index 0 as target [ 468.535263][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1044'. [ 469.072988][ T9937] syzkaller0: entered promiscuous mode [ 469.104593][ T9937] syzkaller0: entered allmulticast mode [ 470.808286][ T9950] syzkaller0: entered promiscuous mode [ 470.813795][ T9950] syzkaller0: entered allmulticast mode [ 473.410084][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 473.417975][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 473.425948][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 473.434427][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 473.445060][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 473.482585][ T9970] lo speed is unknown, defaulting to 1000 [ 473.620739][ T9970] chnl_net:caif_netlink_parms(): no params data found [ 473.712028][ T9970] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.719362][ T9970] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.727818][ T9970] bridge_slave_0: entered allmulticast mode [ 473.735460][ T9970] bridge_slave_0: entered promiscuous mode [ 473.744223][ T9970] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.751670][ T9970] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.758976][ T9970] bridge_slave_1: entered allmulticast mode [ 473.776969][ T9970] bridge_slave_1: entered promiscuous mode [ 473.824638][ T9970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.843614][ T9970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.887927][ T9970] team0: Port device team_slave_0 added [ 473.897477][ T9970] team0: Port device team_slave_1 added [ 473.934711][ T9970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.942053][ T9970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.972260][ T5843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 473.980970][ T9970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.992613][ T5843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 474.001873][ T5843] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 474.008487][ T9970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.016864][ T9970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.043737][ T9970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.043776][ T5843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 474.063109][ T5843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 474.119229][ T9970] hsr_slave_0: entered promiscuous mode [ 474.126475][ T9970] hsr_slave_1: entered promiscuous mode [ 474.132690][ T9970] debugfs: 'hsr0' already exists in 'hsr' [ 474.138549][ T9970] Cannot create hsr debugfs directory [ 474.175413][ T9979] lo speed is unknown, defaulting to 1000 [ 474.447156][ T9979] chnl_net:caif_netlink_parms(): no params data found [ 474.551551][ T9979] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.559620][ T9979] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.567162][ T9979] bridge_slave_0: entered allmulticast mode [ 474.574675][ T9979] bridge_slave_0: entered promiscuous mode [ 474.584379][ T9979] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.591765][ T9979] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.599147][ T9979] bridge_slave_1: entered allmulticast mode [ 474.606881][ T9979] bridge_slave_1: entered promiscuous mode [ 474.646936][ T9979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.659322][ T9979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.696690][ T9979] team0: Port device team_slave_0 added [ 474.705139][ T9979] team0: Port device team_slave_1 added [ 474.735462][ T9979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.742499][ T9979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.768814][ T9979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.781297][ T9979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.790228][ T9979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.816824][ T9979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.867492][ T9979] hsr_slave_0: entered promiscuous mode [ 474.873988][ T9979] hsr_slave_1: entered promiscuous mode [ 474.880905][ T9979] debugfs: 'hsr0' already exists in 'hsr' [ 474.887541][ T9979] Cannot create hsr debugfs directory [ 475.516327][ T5842] Bluetooth: hci3: command tx timeout [ 476.156410][ T5842] Bluetooth: hci7: command tx timeout [ 477.595976][ T5842] Bluetooth: hci3: command tx timeout [ 477.756536][ T11] block nbd0: Possible stuck request ffff88802527a200: control (read@0,1024B). Runtime 60 seconds [ 477.767401][ T11] block nbd0: Possible stuck request ffff88802527a400: control (read@1024,1024B). Runtime 60 seconds [ 477.778862][ T11] block nbd0: Possible stuck request ffff88802527a600: control (read@2048,1024B). Runtime 60 seconds [ 477.789923][ T11] block nbd0: Possible stuck request ffff88802527a800: control (read@3072,1024B). Runtime 60 seconds [ 478.063005][ T5196] udevd[5196]: worker [9293] /devices/virtual/block/nbd0 is taking a long time [ 478.246139][ T5842] Bluetooth: hci7: command tx timeout [ 479.677020][ T5842] Bluetooth: hci3: command tx timeout [ 480.317955][ T5842] Bluetooth: hci7: command tx timeout [ 481.756234][ T5842] Bluetooth: hci3: command tx timeout [ 482.396669][ T5842] Bluetooth: hci7: command tx timeout [ 483.405690][ T5843] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 483.414204][ T5843] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 483.422144][ T5843] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 483.431147][ T5843] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 483.441141][ T5843] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 483.479009][ T9988] lo speed is unknown, defaulting to 1000 [ 483.623618][ T9988] chnl_net:caif_netlink_parms(): no params data found [ 483.717623][ T9988] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.724839][ T9988] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.732730][ T9988] bridge_slave_0: entered allmulticast mode [ 483.740346][ T9988] bridge_slave_0: entered promiscuous mode [ 483.749146][ T9988] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.756594][ T9988] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.763844][ T9988] bridge_slave_1: entered allmulticast mode [ 483.772319][ T9988] bridge_slave_1: entered promiscuous mode [ 483.830057][ T9988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.844801][ T9988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.892874][ T9988] team0: Port device team_slave_0 added [ 483.904089][ T9988] team0: Port device team_slave_1 added [ 483.951350][ T9988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.958461][ T9988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.988156][ T9988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.008431][ T5843] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 484.009405][ T9988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.019409][ T5843] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 484.022562][ T9988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.032848][ T5843] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 484.056960][ T9988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.074606][ T5843] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 484.082475][ T5843] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 484.133053][ T9988] hsr_slave_0: entered promiscuous mode [ 484.139945][ T9988] hsr_slave_1: entered promiscuous mode [ 484.146623][ T9988] debugfs: 'hsr0' already exists in 'hsr' [ 484.152362][ T9988] Cannot create hsr debugfs directory [ 484.214108][ T9997] lo speed is unknown, defaulting to 1000 [ 484.489456][ T9997] chnl_net:caif_netlink_parms(): no params data found [ 484.580193][ T9997] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.587515][ T9997] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.594927][ T9997] bridge_slave_0: entered allmulticast mode [ 484.602852][ T9997] bridge_slave_0: entered promiscuous mode [ 484.611872][ T9997] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.620261][ T9997] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.627765][ T9997] bridge_slave_1: entered allmulticast mode [ 484.635307][ T9997] bridge_slave_1: entered promiscuous mode [ 484.679843][ T9997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.692254][ T9997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.729883][ T9997] team0: Port device team_slave_0 added [ 484.738481][ T9997] team0: Port device team_slave_1 added [ 484.769901][ T9997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.776896][ T9997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.803488][ T9997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.816353][ T9997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.823295][ T9997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.849840][ T9997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.901757][ T9997] hsr_slave_0: entered promiscuous mode [ 484.908484][ T9997] hsr_slave_1: entered promiscuous mode [ 484.914948][ T9997] debugfs: 'hsr0' already exists in 'hsr' [ 484.920767][ T9997] Cannot create hsr debugfs directory [ 485.516483][ T5843] Bluetooth: hci8: command tx timeout [ 486.155996][ T5843] Bluetooth: hci9: command tx timeout [ 486.444823][ T5842] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 486.454620][ T5842] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 486.462762][ T5842] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 486.471004][ T5842] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 486.479770][ T5842] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 486.517274][T10006] lo speed is unknown, defaulting to 1000 [ 486.662562][T10006] chnl_net:caif_netlink_parms(): no params data found [ 486.754345][T10006] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.762167][T10006] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.770742][T10006] bridge_slave_0: entered allmulticast mode [ 486.778341][T10006] bridge_slave_0: entered promiscuous mode [ 486.786952][T10006] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.794088][T10006] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.801593][T10006] bridge_slave_1: entered allmulticast mode [ 486.809175][T10006] bridge_slave_1: entered promiscuous mode [ 486.842369][T10006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.854820][T10006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.891778][T10006] team0: Port device team_slave_0 added [ 486.900210][T10006] team0: Port device team_slave_1 added [ 486.929463][T10006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.936819][T10006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.963791][T10006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.977878][T10006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.984820][T10006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.011035][T10006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.062748][T10006] hsr_slave_0: entered promiscuous mode [ 487.069694][T10006] hsr_slave_1: entered promiscuous mode [ 487.076881][T10006] debugfs: 'hsr0' already exists in 'hsr' [ 487.082692][T10006] Cannot create hsr debugfs directory [ 487.596016][ T5843] Bluetooth: hci8: command tx timeout [ 487.911259][ T5842] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 487.920294][ T5842] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 487.928455][ T5842] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 487.937059][ T5842] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 487.944864][ T5842] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 487.983346][T10015] lo speed is unknown, defaulting to 1000 [ 488.130119][T10015] chnl_net:caif_netlink_parms(): no params data found [ 488.218367][T10015] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.227255][T10015] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.234479][T10015] bridge_slave_0: entered allmulticast mode [ 488.240714][ T5842] Bluetooth: hci9: command tx timeout [ 488.248279][T10015] bridge_slave_0: entered promiscuous mode [ 488.257146][T10015] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.264291][T10015] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.271587][T10015] bridge_slave_1: entered allmulticast mode [ 488.279260][T10015] bridge_slave_1: entered promiscuous mode [ 488.315546][T10015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.329324][T10015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.366491][T10015] team0: Port device team_slave_0 added [ 488.375288][T10015] team0: Port device team_slave_1 added [ 488.409272][T10015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.416667][T10015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.442949][T10015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.456104][T10015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.463077][T10015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.492918][T10015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.544047][T10015] hsr_slave_0: entered promiscuous mode [ 488.550875][T10015] hsr_slave_1: entered promiscuous mode [ 488.556737][ T5842] Bluetooth: hci10: command tx timeout [ 488.563325][T10015] debugfs: 'hsr0' already exists in 'hsr' [ 488.569192][T10015] Cannot create hsr debugfs directory [ 489.686069][ T5842] Bluetooth: hci8: command tx timeout [ 489.996026][ T5842] Bluetooth: hci11: command tx timeout [ 490.316137][ T5842] Bluetooth: hci9: command tx timeout [ 490.636107][ T5842] Bluetooth: hci10: command tx timeout [ 491.756474][ T5842] Bluetooth: hci8: command tx timeout [ 492.076138][ T5842] Bluetooth: hci11: command tx timeout [ 492.396009][ T5842] Bluetooth: hci9: command tx timeout [ 492.716009][ T5842] Bluetooth: hci10: command tx timeout [ 494.165938][ T5842] Bluetooth: hci11: command tx timeout [ 494.806026][ T5842] Bluetooth: hci10: command tx timeout [ 495.040031][ T5196] udevd[5196]: worker [9455] /devices/virtual/block/nbd2 is taking a long time [ 495.688128][ T6188] block nbd2: Possible stuck request ffff888025348000: control (read@0,1024B). Runtime 60 seconds [ 495.698879][ T6188] block nbd2: Possible stuck request ffff888025348200: control (read@1024,1024B). Runtime 60 seconds [ 495.710226][ T6188] block nbd2: Possible stuck request ffff888025348400: control (read@2048,1024B). Runtime 60 seconds [ 495.721255][ T6188] block nbd2: Possible stuck request ffff888025348600: control (read@3072,1024B). Runtime 60 seconds [ 496.246159][ T5842] Bluetooth: hci11: command tx timeout [ 507.837293][ T6188] block nbd0: Possible stuck request ffff88802527a200: control (read@0,1024B). Runtime 90 seconds [ 507.848296][ T6188] block nbd0: Possible stuck request ffff88802527a400: control (read@1024,1024B). Runtime 90 seconds [ 507.860185][ T6188] block nbd0: Possible stuck request ffff88802527a600: control (read@2048,1024B). Runtime 90 seconds [ 507.871294][ T6188] block nbd0: Possible stuck request ffff88802527a800: control (read@3072,1024B). Runtime 90 seconds [ 525.760298][ T6188] block nbd2: Possible stuck request ffff888025348000: control (read@0,1024B). Runtime 90 seconds [ 525.771335][ T6188] block nbd2: Possible stuck request ffff888025348200: control (read@1024,1024B). Runtime 90 seconds [ 525.783133][ T6188] block nbd2: Possible stuck request ffff888025348400: control (read@2048,1024B). Runtime 90 seconds [ 525.794241][ T6188] block nbd2: Possible stuck request ffff888025348600: control (read@3072,1024B). Runtime 90 seconds [ 528.476021][ T5843] Bluetooth: hci6: command 0x0406 tx timeout [ 533.456049][ T5843] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 533.464333][ T5843] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 533.473149][ T5843] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 533.483779][ T5843] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 533.493665][ T5843] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 533.531634][T10025] lo speed is unknown, defaulting to 1000 [ 533.670747][T10025] chnl_net:caif_netlink_parms(): no params data found [ 533.765498][T10025] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.772841][T10025] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.780850][T10025] bridge_slave_0: entered allmulticast mode [ 533.788452][T10025] bridge_slave_0: entered promiscuous mode [ 533.797236][T10025] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.804470][T10025] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.811990][T10025] bridge_slave_1: entered allmulticast mode [ 533.820144][T10025] bridge_slave_1: entered promiscuous mode [ 533.859084][T10025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.873241][T10025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.920063][T10025] team0: Port device team_slave_0 added [ 533.929675][T10025] team0: Port device team_slave_1 added [ 533.973463][T10025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.980980][T10025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.007414][T10025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.020717][T10025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.028032][T10025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.054565][T10025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.123270][ T5842] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 534.132930][ T5842] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 534.136707][T10025] hsr_slave_0: entered promiscuous mode [ 534.148564][ T5842] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 534.148894][T10025] hsr_slave_1: entered promiscuous mode [ 534.164363][ T5842] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 534.170492][T10025] debugfs: 'hsr0' already exists in 'hsr' [ 534.177952][T10025] Cannot create hsr debugfs directory [ 534.183827][ T5842] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 534.283137][T10034] lo speed is unknown, defaulting to 1000 [ 534.521916][T10034] chnl_net:caif_netlink_parms(): no params data found [ 534.630588][T10034] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.638138][T10034] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.646182][T10034] bridge_slave_0: entered allmulticast mode [ 534.653963][T10034] bridge_slave_0: entered promiscuous mode [ 534.674982][T10034] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.682627][T10034] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.691139][T10034] bridge_slave_1: entered allmulticast mode [ 534.699770][T10034] bridge_slave_1: entered promiscuous mode [ 534.749896][T10034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.772359][T10034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.832597][T10034] team0: Port device team_slave_0 added [ 534.841687][T10034] team0: Port device team_slave_1 added [ 534.875154][T10034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.882600][T10034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.908963][T10034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.921570][T10034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.928910][T10034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.955528][T10034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.008052][T10034] hsr_slave_0: entered promiscuous mode [ 535.014750][T10034] hsr_slave_1: entered promiscuous mode [ 535.021546][T10034] debugfs: 'hsr0' already exists in 'hsr' [ 535.027403][T10034] Cannot create hsr debugfs directory [ 535.516001][ T5842] Bluetooth: hci12: command tx timeout [ 536.246160][ T5842] Bluetooth: hci13: command tx timeout [ 537.606171][ T5842] Bluetooth: hci12: command tx timeout [ 537.928239][ T6188] block nbd0: Possible stuck request ffff88802527a200: control (read@0,1024B). Runtime 120 seconds [ 537.939085][ T6188] block nbd0: Possible stuck request ffff88802527a400: control (read@1024,1024B). Runtime 120 seconds [ 537.951179][ T6188] block nbd0: Possible stuck request ffff88802527a600: control (read@2048,1024B). Runtime 120 seconds [ 537.962332][ T6188] block nbd0: Possible stuck request ffff88802527a800: control (read@3072,1024B). Runtime 120 seconds [ 538.316090][ T5842] Bluetooth: hci13: command tx timeout [ 539.676029][ T5842] Bluetooth: hci12: command tx timeout [ 540.396168][ T5842] Bluetooth: hci13: command tx timeout [ 541.756418][ T5842] Bluetooth: hci12: command tx timeout [ 542.476236][ T5842] Bluetooth: hci13: command tx timeout [ 543.566529][ T5843] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 543.575125][ T5843] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 543.583492][ T5843] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 543.592987][ T5843] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 543.601965][ T5843] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 543.641993][T10043] lo speed is unknown, defaulting to 1000 [ 543.782782][T10043] chnl_net:caif_netlink_parms(): no params data found [ 543.886107][T10043] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.893458][T10043] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.902070][T10043] bridge_slave_0: entered allmulticast mode [ 543.912465][T10043] bridge_slave_0: entered promiscuous mode [ 543.921960][T10043] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.930158][T10043] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.937779][T10043] bridge_slave_1: entered allmulticast mode [ 543.945959][T10043] bridge_slave_1: entered promiscuous mode [ 543.995465][T10043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.012543][T10043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.062947][T10043] team0: Port device team_slave_0 added [ 544.073398][T10043] team0: Port device team_slave_1 added [ 544.110878][T10043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.120466][T10043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.120768][ T5842] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 544.148592][T10043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.167656][ T5842] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 544.171377][T10043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.182380][T10043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.208704][T10043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.208761][ T5842] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 544.228749][ T5842] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 544.237907][ T5842] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 544.284950][T10043] hsr_slave_0: entered promiscuous mode [ 544.291763][T10043] hsr_slave_1: entered promiscuous mode [ 544.298251][T10043] debugfs: 'hsr0' already exists in 'hsr' [ 544.304022][T10043] Cannot create hsr debugfs directory [ 544.364912][T10052] lo speed is unknown, defaulting to 1000 [ 544.614482][T10052] chnl_net:caif_netlink_parms(): no params data found [ 544.726982][T10052] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.734271][T10052] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.742049][T10052] bridge_slave_0: entered allmulticast mode [ 544.750035][T10052] bridge_slave_0: entered promiscuous mode [ 544.758476][T10052] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.765679][T10052] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.773281][T10052] bridge_slave_1: entered allmulticast mode [ 544.781853][T10052] bridge_slave_1: entered promiscuous mode [ 544.838957][T10052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.855476][T10052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.909005][T10052] team0: Port device team_slave_0 added [ 544.925221][T10052] team0: Port device team_slave_1 added [ 544.970584][T10052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.977635][T10052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.004577][T10052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.028794][T10052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.037002][T10052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.063189][T10052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.116996][T10052] hsr_slave_0: entered promiscuous mode [ 545.123638][T10052] hsr_slave_1: entered promiscuous mode [ 545.130154][T10052] debugfs: 'hsr0' already exists in 'hsr' [ 545.137189][T10052] Cannot create hsr debugfs directory [ 545.686324][ T5843] Bluetooth: hci14: command tx timeout [ 546.316233][ T5843] Bluetooth: hci15: command tx timeout [ 546.565131][ T5842] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 546.576595][ T5842] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 546.585161][ T5842] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 546.593737][ T5842] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 546.601562][ T5842] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 546.645263][T10061] lo speed is unknown, defaulting to 1000 [ 546.790698][T10061] chnl_net:caif_netlink_parms(): no params data found [ 546.889686][T10061] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.897025][T10061] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.904290][T10061] bridge_slave_0: entered allmulticast mode [ 546.912285][T10061] bridge_slave_0: entered promiscuous mode [ 546.921004][T10061] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.928465][T10061] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.935744][T10061] bridge_slave_1: entered allmulticast mode [ 546.943765][T10061] bridge_slave_1: entered promiscuous mode [ 546.980529][T10061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.993516][T10061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.029774][T10061] team0: Port device team_slave_0 added [ 547.038970][T10061] team0: Port device team_slave_1 added [ 547.071413][T10061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.079119][T10061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.105602][T10061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.118785][T10061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.125726][T10061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.152984][T10061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.211853][T10061] hsr_slave_0: entered promiscuous mode [ 547.218665][T10061] hsr_slave_1: entered promiscuous mode [ 547.225020][T10061] debugfs: 'hsr0' already exists in 'hsr' [ 547.231029][T10061] Cannot create hsr debugfs directory [ 547.766092][ T5842] Bluetooth: hci14: command tx timeout [ 548.056316][ T5843] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 548.064783][ T5843] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 548.073350][ T5843] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 548.082478][ T5843] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 548.090330][ T5843] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 548.130425][T10070] lo speed is unknown, defaulting to 1000 [ 548.277025][T10070] chnl_net:caif_netlink_parms(): no params data found [ 548.390046][T10070] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.398592][T10070] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.406208][ T5843] Bluetooth: hci15: command tx timeout [ 548.406417][T10070] bridge_slave_0: entered allmulticast mode [ 548.420396][T10070] bridge_slave_0: entered promiscuous mode [ 548.429346][T10070] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.436998][T10070] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.444347][T10070] bridge_slave_1: entered allmulticast mode [ 548.452244][T10070] bridge_slave_1: entered promiscuous mode [ 548.489687][T10070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.502244][T10070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.538761][T10070] team0: Port device team_slave_0 added [ 548.547555][T10070] team0: Port device team_slave_1 added [ 548.579389][T10070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.586414][T10070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.612729][T10070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.626517][T10070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.633459][T10070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.661020][ T5843] Bluetooth: hci16: command tx timeout [ 548.667002][T10070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.719977][T10070] hsr_slave_0: entered promiscuous mode [ 548.726835][T10070] hsr_slave_1: entered promiscuous mode [ 548.733088][T10070] debugfs: 'hsr0' already exists in 'hsr' [ 548.738879][T10070] Cannot create hsr debugfs directory [ 549.836263][ T5843] Bluetooth: hci14: command tx timeout [ 550.156092][ T5843] Bluetooth: hci17: command tx timeout [ 550.476062][ T5843] Bluetooth: hci15: command tx timeout [ 550.726002][ T5843] Bluetooth: hci16: command tx timeout [ 551.916322][ T5843] Bluetooth: hci14: command tx timeout [ 552.246045][ T5843] Bluetooth: hci17: command tx timeout [ 552.556148][ T5843] Bluetooth: hci15: command tx timeout [ 552.796050][ T5843] Bluetooth: hci16: command tx timeout [ 554.316041][ T5843] Bluetooth: hci17: command tx timeout [ 554.876361][ T5843] Bluetooth: hci16: command tx timeout [ 555.836439][ T6188] block nbd2: Possible stuck request ffff888025348000: control (read@0,1024B). Runtime 120 seconds [ 555.847476][ T6188] block nbd2: Possible stuck request ffff888025348200: control (read@1024,1024B). Runtime 120 seconds [ 555.858685][ T6188] block nbd2: Possible stuck request ffff888025348400: control (read@2048,1024B). Runtime 120 seconds [ 555.869792][ T6188] block nbd2: Possible stuck request ffff888025348600: control (read@3072,1024B). Runtime 120 seconds [ 556.396172][ T5843] Bluetooth: hci17: command tx timeout [ 568.006060][ T6188] block nbd0: Possible stuck request ffff88802527a200: control (read@0,1024B). Runtime 150 seconds [ 568.017060][ T6188] block nbd0: Possible stuck request ffff88802527a400: control (read@1024,1024B). Runtime 150 seconds [ 568.028120][ T6188] block nbd0: Possible stuck request ffff88802527a600: control (read@2048,1024B). Runtime 150 seconds [ 568.039255][ T6188] block nbd0: Possible stuck request ffff88802527a800: control (read@3072,1024B). Runtime 150 seconds [ 585.916510][ T6188] block nbd2: Possible stuck request ffff888025348000: control (read@0,1024B). Runtime 150 seconds [ 585.927500][ T6188] block nbd2: Possible stuck request ffff888025348200: control (read@1024,1024B). Runtime 150 seconds [ 585.938893][ T6188] block nbd2: Possible stuck request ffff888025348400: control (read@2048,1024B). Runtime 150 seconds [ 585.949953][ T6188] block nbd2: Possible stuck request ffff888025348600: control (read@3072,1024B). Runtime 150 seconds [ 593.617023][ T5842] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 593.625114][ T5842] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 593.633040][ T5842] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 593.642018][ T5842] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 593.656762][ T5842] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 593.704251][T10080] lo speed is unknown, defaulting to 1000 [ 593.847623][T10080] chnl_net:caif_netlink_parms(): no params data found [ 593.955776][T10080] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.963362][T10080] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.971525][T10080] bridge_slave_0: entered allmulticast mode [ 593.981350][T10080] bridge_slave_0: entered promiscuous mode [ 593.993715][T10080] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.001413][T10080] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.010013][T10080] bridge_slave_1: entered allmulticast mode [ 594.019261][T10080] bridge_slave_1: entered promiscuous mode [ 594.065317][T10080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.079597][T10080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.169540][T10080] team0: Port device team_slave_0 added [ 594.192369][T10080] team0: Port device team_slave_1 added [ 594.192977][ T5842] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 594.208923][ T5842] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 594.219571][ T5842] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 594.228683][ T5842] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 594.237220][T10080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.244289][T10080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.270498][T10080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.270775][ T5842] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 594.284198][T10080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.295895][T10080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.322667][T10080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.394845][T10080] hsr_slave_0: entered promiscuous mode [ 594.401459][T10080] hsr_slave_1: entered promiscuous mode [ 594.408506][T10080] debugfs: 'hsr0' already exists in 'hsr' [ 594.414241][T10080] Cannot create hsr debugfs directory [ 594.420592][T10089] lo speed is unknown, defaulting to 1000 [ 594.732133][T10089] chnl_net:caif_netlink_parms(): no params data found [ 594.851789][T10089] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.859083][T10089] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.866801][T10089] bridge_slave_0: entered allmulticast mode [ 594.875070][T10089] bridge_slave_0: entered promiscuous mode [ 594.884412][T10089] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.892252][T10089] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.900860][T10089] bridge_slave_1: entered allmulticast mode [ 594.909584][T10089] bridge_slave_1: entered promiscuous mode [ 594.965633][T10089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.999599][T10089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.048380][T10089] team0: Port device team_slave_0 added [ 595.068977][T10089] team0: Port device team_slave_1 added [ 595.113250][T10089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.120651][T10089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.147534][T10089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.160380][T10089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.167500][T10089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.194100][T10089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.250840][T10089] hsr_slave_0: entered promiscuous mode [ 595.258150][T10089] hsr_slave_1: entered promiscuous mode [ 595.264471][T10089] debugfs: 'hsr0' already exists in 'hsr' [ 595.270264][T10089] Cannot create hsr debugfs directory [ 595.676334][ T5843] Bluetooth: hci18: command tx timeout [ 596.405975][ T5843] Bluetooth: hci19: command tx timeout [ 597.756063][ T5843] Bluetooth: hci18: command tx timeout [ 598.078323][ T6188] block nbd0: Possible stuck request ffff88802527a200: control (read@0,1024B). Runtime 180 seconds [ 598.090112][ T6188] block nbd0: Possible stuck request ffff88802527a400: control (read@1024,1024B). Runtime 180 seconds [ 598.101499][ T6188] block nbd0: Possible stuck request ffff88802527a600: control (read@2048,1024B). Runtime 180 seconds [ 598.112626][ T6188] block nbd0: Possible stuck request ffff88802527a800: control (read@3072,1024B). Runtime 180 seconds [ 598.476141][T10023] Bluetooth: hci19: command tx timeout [ 598.662158][ T5196] udevd[5196]: worker [9293] /devices/virtual/block/nbd0 timeout; kill it [ 598.670959][ T5196] udevd[5196]: seq 12903 '/devices/virtual/block/nbd0' killed [ 599.836005][T10023] Bluetooth: hci18: command tx timeout [ 600.156045][T10023] Bluetooth: hci7: command 0x0406 tx timeout [ 600.164613][T10023] Bluetooth: hci3: command 0x0406 tx timeout [ 600.556045][ T5843] Bluetooth: hci19: command tx timeout [ 601.926344][ T5843] Bluetooth: hci18: command tx timeout [ 602.646151][ T5843] Bluetooth: hci19: command tx timeout [ 603.658635][ T5842] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 603.666975][ T5842] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 603.675056][ T5842] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 603.686408][ T5842] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 603.694369][ T5842] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 603.734084][T10100] lo speed is unknown, defaulting to 1000 [ 604.042231][T10100] chnl_net:caif_netlink_parms(): no params data found [ 604.185759][ T5842] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 604.195695][ T5842] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 604.201894][T10100] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.210433][ T5842] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 604.210541][T10100] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.227647][ T5842] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 604.235106][T10100] bridge_slave_0: entered allmulticast mode [ 604.241540][ T5842] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 604.251276][T10100] bridge_slave_0: entered promiscuous mode [ 604.264505][T10100] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.271763][T10100] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.279188][T10100] bridge_slave_1: entered allmulticast mode [ 604.286958][T10100] bridge_slave_1: entered promiscuous mode [ 604.322785][T10100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.336136][T10100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.384722][T10100] team0: Port device team_slave_0 added [ 604.390626][T10109] lo speed is unknown, defaulting to 1000 [ 604.395123][T10100] team0: Port device team_slave_1 added [ 604.460276][T10100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.467386][T10100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.493578][T10100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.511018][T10100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.518264][T10100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.544562][T10100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.629391][T10100] hsr_slave_0: entered promiscuous mode [ 604.636824][T10100] hsr_slave_1: entered promiscuous mode [ 604.643101][T10100] debugfs: 'hsr0' already exists in 'hsr' [ 604.649524][T10100] Cannot create hsr debugfs directory [ 604.827499][T10109] chnl_net:caif_netlink_parms(): no params data found [ 605.025257][T10109] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.033145][T10109] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.042561][T10109] bridge_slave_0: entered allmulticast mode [ 605.051627][T10109] bridge_slave_0: entered promiscuous mode [ 605.061065][T10109] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.074024][T10109] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.082014][T10109] bridge_slave_1: entered allmulticast mode [ 605.091276][T10109] bridge_slave_1: entered promiscuous mode [ 605.154020][T10109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.181142][T10109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.227324][T10109] team0: Port device team_slave_0 added [ 605.237660][T10109] team0: Port device team_slave_1 added [ 605.340047][T10109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.348351][T10109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.374892][T10109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.402692][T10109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.410110][T10109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.436791][T10109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.534709][T10109] hsr_slave_0: entered promiscuous mode [ 605.542322][T10109] hsr_slave_1: entered promiscuous mode [ 605.550448][T10109] debugfs: 'hsr0' already exists in 'hsr' [ 605.556434][T10109] Cannot create hsr debugfs directory [ 605.756124][ T5843] Bluetooth: hci20: command tx timeout [ 606.316117][ T5843] Bluetooth: hci21: command tx timeout [ 606.621951][ T5842] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 606.630032][ T5842] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 606.638898][ T5842] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 606.647127][ T5842] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 606.654919][ T5842] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 606.699405][T10118] lo speed is unknown, defaulting to 1000 [ 606.908753][T10118] chnl_net:caif_netlink_parms(): no params data found [ 607.000551][T10118] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.007944][T10118] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.015219][T10118] bridge_slave_0: entered allmulticast mode [ 607.023545][T10118] bridge_slave_0: entered promiscuous mode [ 607.032019][T10118] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.040088][T10118] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.047742][T10118] bridge_slave_1: entered allmulticast mode [ 607.055635][T10118] bridge_slave_1: entered promiscuous mode [ 607.091005][T10118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.103269][T10118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.138326][T10118] team0: Port device team_slave_0 added [ 607.147063][T10118] team0: Port device team_slave_1 added [ 607.176985][T10118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.183932][T10118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.212330][T10118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.225034][T10118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.232060][T10118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.258716][T10118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.312238][T10118] hsr_slave_0: entered promiscuous mode [ 607.319354][T10118] hsr_slave_1: entered promiscuous mode [ 607.325985][T10118] debugfs: 'hsr0' already exists in 'hsr' [ 607.331730][T10118] Cannot create hsr debugfs directory [ 607.836101][ T5843] Bluetooth: hci20: command tx timeout [ 608.137236][ T5842] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1 [ 608.148525][ T5842] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9 [ 608.156699][ T5842] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9 [ 608.165434][ T5842] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4 [ 608.174783][ T5842] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2 [ 608.230883][T10127] lo speed is unknown, defaulting to 1000 [ 608.397253][T10098] Bluetooth: hci21: command tx timeout [ 608.432914][T10127] chnl_net:caif_netlink_parms(): no params data found [ 608.522994][T10127] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.530302][T10127] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.538011][T10127] bridge_slave_0: entered allmulticast mode [ 608.545600][T10127] bridge_slave_0: entered promiscuous mode [ 608.554526][T10127] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.561969][T10127] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.569413][T10127] bridge_slave_1: entered allmulticast mode [ 608.577342][T10127] bridge_slave_1: entered promiscuous mode [ 608.611896][T10127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.625133][T10127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.661573][T10127] team0: Port device team_slave_0 added [ 608.670420][T10127] team0: Port device team_slave_1 added [ 608.699542][T10127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.706605][T10127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.732617][T10098] Bluetooth: hci22: command tx timeout [ 608.739410][T10127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.752613][T10127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.759998][T10127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.786207][T10127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.838795][T10127] hsr_slave_0: entered promiscuous mode [ 608.845471][T10127] hsr_slave_1: entered promiscuous mode [ 608.852552][T10127] debugfs: 'hsr0' already exists in 'hsr' [ 608.858494][T10127] Cannot create hsr debugfs directory [ 609.916054][T10098] Bluetooth: hci20: command tx timeout [ 610.236383][T10098] Bluetooth: hci23: command tx timeout [ 610.407354][ T5842] Bluetooth: hci11: command 0x0406 tx timeout [ 610.407384][T10098] Bluetooth: hci9: command 0x0406 tx timeout [ 610.413687][ T5843] Bluetooth: hci10: command 0x0406 tx timeout [ 610.419540][T10098] Bluetooth: hci8: command 0x0406 tx timeout [ 610.476023][T10097] Bluetooth: hci21: command tx timeout [ 610.796193][T10097] Bluetooth: hci22: command tx timeout [ 611.996139][T10097] Bluetooth: hci20: command tx timeout [ 612.316067][T10097] Bluetooth: hci23: command tx timeout [ 612.555985][T10097] Bluetooth: hci21: command tx timeout [ 612.876010][T10097] Bluetooth: hci22: command tx timeout [ 614.397162][T10097] Bluetooth: hci23: command tx timeout [ 614.956166][T10097] Bluetooth: hci22: command tx timeout [ 615.996595][ T6188] block nbd2: Possible stuck request ffff888025348000: control (read@0,1024B). Runtime 180 seconds [ 616.007557][ T6188] block nbd2: Possible stuck request ffff888025348200: control (read@1024,1024B). Runtime 180 seconds [ 616.018697][ T6188] block nbd2: Possible stuck request ffff888025348400: control (read@2048,1024B). Runtime 180 seconds [ 616.029868][ T6188] block nbd2: Possible stuck request ffff888025348600: control (read@3072,1024B). Runtime 180 seconds [ 616.450094][ T5196] udevd[5196]: worker [9455] /devices/virtual/block/nbd2 timeout; kill it [ 616.458877][ T5196] udevd[5196]: seq 13151 '/devices/virtual/block/nbd2' killed [ 616.476041][T10097] Bluetooth: hci23: command tx timeout [ 617.918998][ T32] INFO: task dhcpcd:5490 blocked for more than 143 seconds. [ 617.926433][ T32] Not tainted syzkaller #0 [ 617.931354][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 617.940444][ T32] task:dhcpcd state:D stack:25120 pid:5490 tgid:5490 ppid:1 task_flags:0x400140 flags:0x00080000 [ 617.952672][ T32] Call Trace: [ 617.956026][ T32] [ 617.958967][ T32] __schedule+0x14ef/0x4fb0 [ 617.963493][ T32] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 617.968487][ T32] ? schedule+0x90/0x360 [ 617.972758][ T32] schedule+0x164/0x360 [ 617.976982][ T32] schedule_preempt_disabled+0x13/0x30 [ 617.982462][ T32] __mutex_lock+0x7fe/0x1300 [ 617.987202][ T32] ? __mutex_lock+0x5ac/0x1300 [ 617.991999][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 617.996922][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 618.001975][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.008210][ T32] ? __lock_acquire+0x6b5/0x2cf0 [ 618.013191][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.019302][ T32] ? radix_tree_lookup+0x240/0x290 [ 618.024445][ T32] genl_rcv_msg+0x10b/0x7a0 [ 618.029419][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 618.034475][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.040820][ T32] ? __lock_acquire+0x6b5/0x2cf0 [ 618.046048][ T32] netlink_rcv_skb+0x232/0x4b0 [ 618.050852][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 618.105870][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 618.111308][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.134942][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.140959][ T32] ? down_read+0x272/0x2e0 [ 618.145472][ T32] ? genl_rcv+0xd/0x40 [ 618.151904][ T32] genl_rcv+0x28/0x40 [ 618.156440][ T32] netlink_unicast+0x80f/0x9b0 [ 618.161266][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 618.166625][ T32] ? __alloc_skb+0x193/0x390 [ 618.171267][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.177119][ T32] ? skb_put+0x11b/0x210 [ 618.181402][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.187085][ T32] netlink_sendmsg+0x813/0xb40 [ 618.191946][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.197762][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.203060][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.208806][ T32] ? aa_sock_msg_perm+0xf1/0x1b0 [ 618.213761][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.219523][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.225166][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.230701][ T32] __sock_sendmsg+0x21c/0x270 [ 618.235480][ T32] ____sys_sendmsg+0x4d7/0x810 [ 618.240874][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 618.246233][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.251956][ T32] ? import_iovec+0x73/0xa0 [ 618.256568][ T32] ___sys_sendmsg+0x2a5/0x360 [ 618.261359][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 618.266618][ T32] ? __rtnl_unlock+0xc8/0xf0 [ 618.271302][ T32] __x64_sys_sendmsg+0x1bd/0x2a0 [ 618.276434][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 618.282010][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.287780][ T32] ? rcu_is_watching+0x15/0xb0 [ 618.292573][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.298358][ T32] ? __secure_computing+0xe1/0x2a0 [ 618.303490][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.309221][ T32] do_syscall_64+0xe2/0xf80 [ 618.313764][ T32] ? rcu_is_watching+0x15/0xb0 [ 618.318644][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.324725][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.330749][ T32] RIP: 0033:0x7f301006a407 [ 618.335184][ T32] RSP: 002b:00007ffc66729640 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 618.344002][ T32] RAX: ffffffffffffffda RBX: 00007f300ffe0740 RCX: 00007f301006a407 [ 618.352097][ T32] RDX: 0000000000000000 RSI: 00007ffc667296c0 RDI: 000000000000000e [ 618.360190][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 618.368212][ T32] R10: 0000000000000000 R11: 0000000000000202 R12: 0000560b29bd2e10 [ 618.376424][ T32] R13: 000000000000000e R14: 00007ffc6673db80 R15: 0000560b5793d710 [ 618.384430][ T32] [ 618.387616][ T32] INFO: task syz.0.1010:9806 blocked for more than 143 seconds. [ 618.395316][ T32] Not tainted syzkaller #0 [ 618.405736][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 618.417350][ T32] task:syz.0.1010 state:D stack:25976 pid:9806 tgid:9803 ppid:5830 task_flags:0x480140 flags:0x00080002 [ 618.429460][ T32] Call Trace: [ 618.432757][ T32] [ 618.435679][ T32] __schedule+0x14ef/0x4fb0 [ 618.440235][ T32] ? __lock_acquire+0x6b5/0x2cf0 [ 618.445293][ T32] ? __pfx___schedule+0x10/0x10 [ 618.450271][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.456005][ T32] ? schedule+0x90/0x360 [ 618.460263][ T32] schedule+0x164/0x360 [ 618.464414][ T32] blk_mq_freeze_queue_wait+0x101/0x180 [ 618.470018][ T32] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 618.476408][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.482078][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 618.488237][ T32] queue_limits_commit_update_frozen+0x55/0xd0 [ 618.494402][ T32] nbd_set_size+0x516/0x6d0 [ 618.498980][ T32] ? __pfx_nbd_set_size+0x10/0x10 [ 618.504051][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.510469][ T32] ? nla_memcpy+0x5b/0xc0 [ 618.514817][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.520545][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.526445][ T32] nbd_genl_size_set+0x32c/0x400 [ 618.531429][ T32] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 618.537747][ T32] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 618.543823][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.549665][ T32] ? security_capable+0x7e/0x2c0 [ 618.554626][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.560546][ T32] ? radix_tree_lookup+0x240/0x290 [ 618.565680][ T32] nbd_genl_reconfigure+0x428/0x1a70 [ 618.571178][ T32] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 618.576989][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.582634][ T32] ? rcu_is_watching+0x15/0xb0 [ 618.587446][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.593093][ T32] ? __nla_parse+0x40/0x60 [ 618.597555][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.603192][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.608882][ T32] genl_family_rcv_msg_doit+0x22a/0x330 [ 618.614449][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 618.620673][ T32] ? __lock_acquire+0x6b5/0x2cf0 [ 618.625640][ T32] genl_rcv_msg+0x61c/0x7a0 [ 618.630242][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 618.635309][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.641377][ T32] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 618.647255][ T32] netlink_rcv_skb+0x232/0x4b0 [ 618.652028][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 618.657114][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 618.662491][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.668173][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.673812][ T32] ? down_read+0x272/0x2e0 [ 618.678275][ T32] ? genl_rcv+0xd/0x40 [ 618.682357][ T32] genl_rcv+0x28/0x40 [ 618.686414][ T32] netlink_unicast+0x80f/0x9b0 [ 618.691268][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 618.696698][ T32] ? __alloc_skb+0x193/0x390 [ 618.701330][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.707041][ T32] netlink_sendmsg+0x813/0xb40 [ 618.711815][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.717544][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.722928][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.728599][ T32] ? aa_sock_msg_perm+0xf1/0x1b0 [ 618.733558][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.739339][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.744979][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.750530][ T32] __sock_sendmsg+0x21c/0x270 [ 618.755232][ T32] ____sys_sendmsg+0x4d7/0x810 [ 618.760288][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 618.765604][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.771405][ T32] ? import_iovec+0x73/0xa0 [ 618.775967][ T32] ___sys_sendmsg+0x2a5/0x360 [ 618.780731][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.786418][ T32] ? __lock_acquire+0x6b5/0x2cf0 [ 618.791369][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 618.796746][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.802398][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.808070][ T32] ? futex_wait+0x29a/0x380 [ 618.812612][ T32] ? __fget_files+0x2a/0x420 [ 618.817270][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.822912][ T32] ? __fget_files+0x3a0/0x420 [ 618.827958][ T32] __x64_sys_sendmsg+0x1bd/0x2a0 [ 618.832997][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 618.838586][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.844224][ T32] ? rcu_is_watching+0x15/0xb0 [ 618.849048][ T32] do_syscall_64+0xe2/0xf80 [ 618.853580][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.859720][ T32] ? trace_irq_disable+0x37/0x100 [ 618.864765][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.870779][ T32] RIP: 0033:0x7fd40cb9acb9 [ 618.875317][ T32] RSP: 002b:00007fd40d9b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 618.883859][ T32] RAX: ffffffffffffffda RBX: 00007fd40ce15fa0 RCX: 00007fd40cb9acb9 [ 618.891882][ T32] RDX: 0000000000048000 RSI: 0000200000000380 RDI: 0000000000000004 [ 618.899924][ T32] RBP: 00007fd40cc08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 618.907960][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.915971][ T32] R13: 00007fd40ce16038 R14: 00007fd40ce15fa0 R15: 00007fff0d5fbf78 [ 618.923962][ T32] [ 618.927068][ T32] INFO: task syz.5.1011:9827 blocked for more than 144 seconds. [ 618.934701][ T32] Not tainted syzkaller #0 [ 618.939695][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 618.948434][ T32] task:syz.5.1011 state:D stack:27152 pid:9827 tgid:9809 ppid:5831 task_flags:0x400040 flags:0x00080002 [ 618.960510][ T32] Call Trace: [ 618.963793][ T32] [ 618.966776][ T32] __schedule+0x14ef/0x4fb0 [ 618.971321][ T32] ? __pfx___schedule+0x10/0x10 [ 618.976315][ T32] ? schedule+0x90/0x360 [ 618.980622][ T32] schedule+0x164/0x360 [ 618.984785][ T32] schedule_preempt_disabled+0x13/0x30 [ 618.990339][ T32] __mutex_lock+0x7fe/0x1300 [ 618.994953][ T32] ? __mutex_lock+0x5ac/0x1300 [ 618.999813][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 619.004517][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 619.009725][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.015375][ T32] ? __lock_acquire+0x6b5/0x2cf0 [ 619.020406][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.026142][ T32] ? radix_tree_lookup+0x240/0x290 [ 619.031267][ T32] genl_rcv_msg+0x10b/0x7a0 [ 619.035773][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.040838][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.046790][ T32] ? __lock_acquire+0x6b5/0x2cf0 [ 619.051844][ T32] netlink_rcv_skb+0x232/0x4b0 [ 619.056717][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.061844][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 619.067149][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.072814][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.078531][ T32] ? down_read+0x272/0x2e0 [ 619.082951][ T32] ? genl_rcv+0xd/0x40 [ 619.087085][ T32] genl_rcv+0x28/0x40 [ 619.091082][ T32] netlink_unicast+0x80f/0x9b0 [ 619.095938][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 619.101260][ T32] ? __alloc_skb+0x193/0x390 [ 619.105899][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.111541][ T32] ? skb_put+0x11b/0x210 [ 619.115785][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.121656][ T32] netlink_sendmsg+0x813/0xb40 [ 619.126530][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.131836][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.137583][ T32] ? aa_sock_msg_perm+0xf1/0x1b0 [ 619.142543][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.148269][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.153999][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.159362][ T32] __sock_sendmsg+0x21c/0x270 [ 619.164137][ T32] __sys_sendto+0x3c0/0x550 [ 619.168721][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 619.173876][ T32] ? fd_install+0x94/0x3d0 [ 619.178332][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.184058][ T32] ? fd_install+0x306/0x3d0 [ 619.188638][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.194375][ T32] __x64_sys_sendto+0xde/0x100 [ 619.199782][ T32] do_syscall_64+0xe2/0xf80 [ 619.204338][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.210467][ T32] ? trace_irq_disable+0x37/0x100 [ 619.215529][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.221464][ T32] RIP: 0033:0x7f7d8eb5b58e [ 619.225931][ T32] RSP: 002b:00007f7d8c98fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 619.234343][ T32] RAX: ffffffffffffffda RBX: 00007f7d8c9916c0 RCX: 00007f7d8eb5b58e [ 619.242409][ T32] RDX: 0000000000000020 RSI: 00007f7d8c990000 RDI: 0000000000000008 [ 619.250452][ T32] RBP: 0000000000000000 R08: 00007f7d8c98ff04 R09: 000000000000000c [ 619.258581][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 619.266614][ T32] R13: 00007f7d8c98ff58 R14: 00007f7d8c990000 R15: 0000000000000000 [ 619.274623][ T32] [ 619.277801][ T32] INFO: task syz.1.1043:9930 blocked for more than 144 seconds. [ 619.285437][ T32] Not tainted syzkaller #0 [ 619.290509][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 619.299236][ T32] task:syz.1.1043 state:D stack:27040 pid:9930 tgid:9928 ppid:5844 task_flags:0x400140 flags:0x00080002 [ 619.311426][ T32] Call Trace: [ 619.314709][ T32] [ 619.317696][ T32] __schedule+0x14ef/0x4fb0 [ 619.322237][ T32] ? preempt_schedule_notrace+0x57/0x90 [ 619.327854][ T32] ? __pfx___schedule+0x10/0x10 [ 619.332729][ T32] ? schedule+0x90/0x360 [ 619.337036][ T32] schedule+0x164/0x360 [ 619.341284][ T32] schedule_preempt_disabled+0x13/0x30 [ 619.346788][ T32] __mutex_lock+0x7fe/0x1300 [ 619.351489][ T32] ? __mutex_lock+0x5ac/0x1300 [ 619.356410][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 619.361121][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 619.366210][ T32] ? radix_tree_lookup+0x74/0x290 [ 619.371291][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.377002][ T32] ? radix_tree_lookup+0x240/0x290 [ 619.382141][ T32] genl_rcv_msg+0x10b/0x7a0 [ 619.386709][ T32] ? rcu_is_watching+0x15/0xb0 [ 619.391590][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.396670][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.402320][ T32] ? __lock_acquire+0x6b5/0x2cf0 [ 619.407366][ T32] netlink_rcv_skb+0x232/0x4b0 [ 619.412135][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.417247][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 619.422701][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.428449][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.434119][ T32] ? down_read+0x272/0x2e0 [ 619.443986][ T32] ? genl_rcv+0xd/0x40 [ 619.448152][ T32] genl_rcv+0x28/0x40 [ 619.452146][ T32] netlink_unicast+0x80f/0x9b0 [ 619.457113][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 619.462465][ T32] netlink_sendmsg+0x813/0xb40 [ 619.467344][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.472641][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.478353][ T32] ? aa_sock_msg_perm+0xf1/0x1b0 [ 619.483315][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.489006][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.494653][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.500004][ T32] __sock_sendmsg+0x21c/0x270 [ 619.504697][ T32] __sys_sendto+0x3c0/0x550 [ 619.509402][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 619.514514][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.520259][ T32] ? rcu_is_watching+0x15/0xb0 [ 619.525145][ T32] __x64_sys_sendto+0xde/0x100 [ 619.530018][ T32] do_syscall_64+0xe2/0xf80 [ 619.534562][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.540764][ T32] ? trace_irq_disable+0x37/0x100 [ 619.545947][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.551854][ T32] RIP: 0033:0x7f178735b58e [ 619.556366][ T32] RSP: 002b:00007f178822ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 619.564878][ T32] RAX: ffffffffffffffda RBX: 00007f178822e6c0 RCX: 00007f178735b58e [ 619.572945][ T32] RDX: 000000000000001c RSI: 00007f178822d000 RDI: 0000000000000003 [ 619.580980][ T32] RBP: 0000000000000000 R08: 00007f178822cf04 R09: 000000000000000c [ 619.588995][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 619.597030][ T32] R13: 00007f178822cf58 R14: 00007f178822d000 R15: 0000000000000000 [ 619.605335][ T32] [ 619.608463][ T32] INFO: task syz.3.1045:9936 blocked for more than 145 seconds. [ 619.616325][ T32] Not tainted syzkaller #0 [ 619.621260][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 619.629971][ T32] task:syz.3.1045 state:D stack:26880 pid:9936 tgid:9935 ppid:5841 task_flags:0x400140 flags:0x00080002 [ 619.641982][ T32] Call Trace: [ 619.645286][ T32] [ 619.648297][ T32] __schedule+0x14ef/0x4fb0 [ 619.652859][ T32] ? __pfx___schedule+0x10/0x10 [ 619.657806][ T32] ? schedule+0x90/0x360 [ 619.662079][ T32] schedule+0x164/0x360 [ 619.666754][ T32] schedule_preempt_disabled+0x13/0x30 [ 619.672225][ T32] __mutex_lock+0x7fe/0x1300 [ 619.677402][ T32] ? __mutex_lock+0x5ac/0x1300 [ 619.682189][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 619.687022][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 619.692207][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.698007][ T32] ? __lock_acquire+0x6b5/0x2cf0 [ 619.702956][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.708659][ T32] ? radix_tree_lookup+0x240/0x290 [ 619.713796][ T32] genl_rcv_msg+0x10b/0x7a0 [ 619.718384][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.723424][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.729111][ T32] ? __lock_acquire+0x6b5/0x2cf0 [ 619.734170][ T32] netlink_rcv_skb+0x232/0x4b0 [ 619.739000][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.744049][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 619.749492][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.755157][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.761075][ T32] ? down_read+0x272/0x2e0 [ 619.765494][ T32] ? genl_rcv+0xd/0x40 [ 619.769659][ T32] genl_rcv+0x28/0x40 [ 619.773691][ T32] netlink_unicast+0x80f/0x9b0 [ 619.778797][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 619.784124][ T32] ? __alloc_skb+0x193/0x390 [ 619.788909][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.794555][ T32] ? skb_put+0x11b/0x210 [ 619.798847][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.805022][ T32] netlink_sendmsg+0x813/0xb40 [ 619.809890][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.815204][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.820983][ T32] ? aa_sock_msg_perm+0xf1/0x1b0 [ 619.825981][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.831817][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 619.837749][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.843142][ T32] __sock_sendmsg+0x21c/0x270 [ 619.847963][ T32] __sys_sendto+0x3c0/0x550 [ 619.852532][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 619.857666][ T32] ? exc_page_fault+0x6a/0xc0 [ 619.862376][ T32] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 619.868540][ T32] __x64_sys_sendto+0xde/0x100 [ 619.873339][ T32] do_syscall_64+0xe2/0xf80 [ 619.878260][ T32] ? rcu_is_watching+0x15/0xb0 [ 619.883047][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.889272][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.895180][ T32] RIP: 0033:0x7f49c0f5b58e [ 619.899675][ T32] RSP: 002b:00007f49c1e60e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 619.908203][ T32] RAX: ffffffffffffffda RBX: 00007f49c1e626c0 RCX: 00007f49c0f5b58e [ 619.916291][ T32] RDX: 0000000000000020 RSI: 00007f49c1e61000 RDI: 0000000000000005 [ 619.924312][ T32] RBP: 0000000000000000 R08: 00007f49c1e60f04 R09: 000000000000000c [ 619.932475][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 619.940548][ T32] R13: 00007f49c1e60f58 R14: 00007f49c1e61000 R15: 0000000000000000 [ 619.948626][ T32] [ 619.951675][ T32] INFO: task syz.6.1053:9958 blocked for more than 145 seconds. [ 619.959478][ T32] Not tainted syzkaller #0 [ 619.964424][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 619.973165][ T32] task:syz.6.1053 state:D stack:27040 pid:9958 tgid:9955 ppid:9157 task_flags:0x400040 flags:0x00080002 [ 619.985189][ T32] Call Trace: [ 619.988551][ T32] [ 619.991584][ T32] __schedule+0x14ef/0x4fb0 [ 619.996316][ T32] ? __pfx___schedule+0x10/0x10 [ 620.001191][ T32] ? schedule+0x90/0x360 [ 620.005442][ T32] schedule+0x164/0x360 [ 620.009725][ T32] schedule_preempt_disabled+0x13/0x30 [ 620.015218][ T32] __mutex_lock+0x7fe/0x1300 [ 620.019969][ T32] ? __mutex_lock+0x5ac/0x1300 [ 620.024846][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 620.029649][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 620.034711][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.040432][ T32] ? radix_tree_lookup+0x240/0x290 [ 620.045560][ T32] genl_rcv_msg+0x10b/0x7a0 [ 620.050184][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 620.055258][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.061000][ T32] ? __lock_acquire+0x6b5/0x2cf0 [ 620.066227][ T32] netlink_rcv_skb+0x232/0x4b0 [ 620.071136][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 620.076440][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 620.082021][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.087761][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.093433][ T32] ? down_read+0x272/0x2e0 [ 620.098018][ T32] ? genl_rcv+0xd/0x40 [ 620.102112][ T32] genl_rcv+0x28/0x40 [ 620.106152][ T32] netlink_unicast+0x80f/0x9b0 [ 620.111048][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 620.116435][ T32] ? netlink_sendmsg+0x6f0/0xb40 [ 620.121430][ T32] netlink_sendmsg+0x813/0xb40 [ 620.126291][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.131695][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.137408][ T32] ? aa_sock_msg_perm+0xf1/0x1b0 [ 620.142367][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.148073][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.153722][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.159105][ T32] __sock_sendmsg+0x21c/0x270 [ 620.163808][ T32] ____sys_sendmsg+0x4d7/0x810 [ 620.168715][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.174365][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 620.180051][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.185699][ T32] ? import_iovec+0x73/0xa0 [ 620.190307][ T32] ___sys_sendmsg+0x2a5/0x360 [ 620.194996][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.200791][ T32] ? __lock_acquire+0x6b5/0x2cf0 [ 620.205749][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 620.210998][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.216695][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.222343][ T32] ? futex_wait+0x29a/0x380 [ 620.226937][ T32] ? __fget_files+0x2a/0x420 [ 620.231539][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.237591][ T32] ? __fget_files+0x3a0/0x420 [ 620.242301][ T32] __x64_sys_sendmsg+0x1bd/0x2a0 [ 620.247578][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 620.253039][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.258910][ T32] ? rcu_is_watching+0x15/0xb0 [ 620.263711][ T32] do_syscall_64+0xe2/0xf80 [ 620.268326][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.274397][ T32] ? trace_irq_disable+0x37/0x100 [ 620.279497][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.285402][ T32] RIP: 0033:0x7f483df9acb9 [ 620.289878][ T32] RSP: 002b:00007f483c1b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 620.298458][ T32] RAX: ffffffffffffffda RBX: 00007f483e216180 RCX: 00007f483df9acb9 [ 620.306480][ T32] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000007 [ 620.314460][ T32] RBP: 00007f483e008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 620.324074][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.332276][ T32] R13: 00007f483e216218 R14: 00007f483e216180 R15: 00007fff8b770058 [ 620.340323][ T32] [ 620.343348][ T32] INFO: task syz.2.1054:9967 blocked for more than 145 seconds. [ 620.351116][ T32] Not tainted syzkaller #0 [ 620.356078][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 620.364729][ T32] task:syz.2.1054 state:D stack:23136 pid:9967 tgid:9965 ppid:5836 task_flags:0x400140 flags:0x00080002 [ 620.376802][ T32] Call Trace: [ 620.380090][ T32] [ 620.383017][ T32] __schedule+0x14ef/0x4fb0 [ 620.387634][ T32] ? __pfx___schedule+0x10/0x10 [ 620.392595][ T32] ? schedule+0x90/0x360 [ 620.396921][ T32] schedule+0x164/0x360 [ 620.401100][ T32] schedule_preempt_disabled+0x13/0x30 [ 620.406798][ T32] __mutex_lock+0x7fe/0x1300 [ 620.411565][ T32] ? __mutex_lock+0x5ac/0x1300 [ 620.416408][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 620.421125][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 620.426326][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.431977][ T32] ? __lock_acquire+0x6b5/0x2cf0 [ 620.437004][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.442748][ T32] ? radix_tree_lookup+0x240/0x290 [ 620.448035][ T32] genl_rcv_msg+0x10b/0x7a0 [ 620.452579][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 620.457717][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.463387][ T32] ? __lock_acquire+0x6b5/0x2cf0 [ 620.468502][ T32] netlink_rcv_skb+0x232/0x4b0 [ 620.473363][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 620.483345][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 620.488723][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.494409][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.500069][ T32] ? down_read+0x272/0x2e0 [ 620.504658][ T32] ? genl_rcv+0xd/0x40 [ 620.508806][ T32] genl_rcv+0x28/0x40 [ 620.512883][ T32] netlink_unicast+0x80f/0x9b0 [ 620.517713][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 620.523033][ T32] ? __alloc_skb+0x193/0x390 [ 620.527691][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.533442][ T32] ? skb_put+0x11b/0x210 [ 620.537789][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.543437][ T32] netlink_sendmsg+0x813/0xb40 [ 620.548286][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.553591][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.559667][ T32] ? aa_sock_msg_perm+0xf1/0x1b0 [ 620.564643][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.570365][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.576058][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.581363][ T32] __sock_sendmsg+0x21c/0x270 [ 620.586118][ T32] __sys_sendto+0x3c0/0x550 [ 620.590662][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 620.595703][ T32] ? exc_page_fault+0x6a/0xc0 [ 620.600443][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.606140][ T32] ? do_user_addr_fault+0xc7c/0x1360 [ 620.611443][ T32] __x64_sys_sendto+0xde/0x100 [ 620.616286][ T32] do_syscall_64+0xe2/0xf80 [ 620.620808][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.626905][ T32] ? trace_irq_disable+0x37/0x100 [ 620.632135][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.638371][ T32] RIP: 0033:0x7f188675b58e [ 620.642790][ T32] RSP: 002b:00007f18875cee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 620.651327][ T32] RAX: ffffffffffffffda RBX: 00007f18875d06c0 RCX: 00007f188675b58e [ 620.659445][ T32] RDX: 0000000000000024 RSI: 00007f18875cf000 RDI: 0000000000000008 [ 620.667460][ T32] RBP: 0000000000000000 R08: 00007f18875cef04 R09: 000000000000000c [ 620.675457][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 620.683457][ T32] R13: 00007f18875cef58 R14: 00007f18875cf000 R15: 0000000000000000 [ 620.691508][ T32] [ 620.694539][ T32] INFO: task syz-executor:9970 blocked for more than 146 seconds. [ 620.702517][ T32] Not tainted syzkaller #0 [ 620.707551][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 620.716375][ T32] task:syz-executor state:D stack:22392 pid:9970 tgid:9970 ppid:1 task_flags:0x400140 flags:0x00080002 [ 620.728408][ T32] Call Trace: [ 620.731690][ T32] [ 620.734610][ T32] __schedule+0x14ef/0x4fb0 [ 620.739338][ T32] ? __pfx___schedule+0x10/0x10 [ 620.744220][ T32] ? schedule+0x90/0x360 [ 620.748534][ T32] schedule+0x164/0x360 [ 620.752712][ T32] schedule_preempt_disabled+0x13/0x30 [ 620.758246][ T32] __mutex_lock+0x7fe/0x1300 [ 620.762861][ T32] ? __mutex_lock+0x5ac/0x1300 [ 620.767698][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 620.772517][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 620.777620][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.783356][ T32] ? __lock_acquire+0x6b5/0x2cf0 [ 620.788370][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.794015][ T32] ? radix_tree_lookup+0x240/0x290 [ 620.799217][ T32] genl_rcv_msg+0x10b/0x7a0 [ 620.803838][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 620.808895][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.814540][ T32] ? __lock_acquire+0x6b5/0x2cf0 [ 620.819635][ T32] netlink_rcv_skb+0x232/0x4b0 [ 620.824419][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 620.829550][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 620.834885][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.840718][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.846433][ T32] ? down_read+0x272/0x2e0 [ 620.850959][ T32] ? genl_rcv+0xd/0x40 [ 620.855087][ T32] genl_rcv+0x28/0x40 [ 620.859624][ T32] netlink_unicast+0x80f/0x9b0 [ 620.864509][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 620.869966][ T32] ? __alloc_skb+0x193/0x390 [ 620.874574][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.880272][ T32] ? skb_put+0x11b/0x210 [ 620.884551][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.890291][ T32] netlink_sendmsg+0x813/0xb40 [ 620.895073][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.900455][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.906155][ T32] ? aa_sock_msg_perm+0xf1/0x1b0 [ 620.911112][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.916891][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.922553][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.927898][ T32] __sock_sendmsg+0x21c/0x270 [ 620.932725][ T32] __sys_sendto+0x3c0/0x550 [ 620.937352][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 620.942416][ T32] ? fd_install+0x94/0x3d0 [ 620.946913][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.952562][ T32] ? fd_install+0x306/0x3d0 [ 620.957158][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 620.962849][ T32] __x64_sys_sendto+0xde/0x100 [ 620.967710][ T32] do_syscall_64+0xe2/0xf80 [ 620.972294][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.978435][ T32] ? trace_irq_disable+0x37/0x100 [ 620.983486][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.989522][ T32] RIP: 0033:0x7f71f2b5b58e [ 620.993940][ T32] RSP: 002b:00007ffc5fa02668 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 621.002397][ T32] RAX: ffffffffffffffda RBX: 00005555895c2500 RCX: 00007f71f2b5b58e [ 621.010519][ T32] RDX: 0000000000000020 RSI: 00007f71f3944670 RDI: 0000000000000005 [ 621.018702][ T32] RBP: 0000000000000001 R08: 00007ffc5fa026e4 R09: 000000000000000c [ 621.026718][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 621.034866][ T32] R13: 00007ffc5fa02738 R14: 00007f71f3944670 R15: 0000000000000000 [ 621.042938][ T32] [ 621.046072][ T32] [ 621.046072][ T32] Showing all locks held in the system: [ 621.053780][ T32] 1 lock held by khungtaskd/32: [ 621.058720][ T32] #0: ffffffff8e35a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 621.068750][ T32] 2 locks held by dhcpcd/5490: [ 621.073507][ T32] #0: ffffffff8f816770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 621.081802][ T32] #1: ffffffff8f816588 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 621.090886][ T32] 2 locks held by getty/5585: [ 621.095585][ T32] #0: ffff8880301b20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 621.105691][ T32] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 621.116305][ T32] 1 lock held by udevd/9293: [ 621.120898][ T32] #0: ffff888141303358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 621.130540][ T32] 1 lock held by udevd/9455: [ 621.135131][ T32] #0: ffff88802522d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 621.144439][ T32] 6 locks held by syz.0.1010/9806: [ 621.149592][ T32] #0: ffffffff8f816770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 621.157888][ T32] #1: ffffffff8f816588 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 621.167084][ T32] #2: ffff8880251d8a78 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x38e/0x1a70 [ 621.177540][ T32] #3: ffff888140fea358 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2ba/0x6d0 [ 621.187042][ T32] #4: ffff888140fe9cf8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 621.199310][ T32] #5: ffff888140fe9d30 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 621.211669][ T32] 2 locks held by syz.5.1011/9827: [ 621.216862][ T32] #0: ffffffff8f816770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 621.225096][ T32] #1: ffffffff8f816588 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 621.234230][ T32] 2 locks held by syz.1.1043/9930: [ 621.239842][ T32] #0: ffffffff8f816770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 621.248137][ T32] #1: ffffffff8f816588 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 621.257244][ T32] 2 locks held by syz.3.1045/9936: [ 621.262364][ T32] #0: ffffffff8f816770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 621.270811][ T32] #1: ffffffff8f816588 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 621.280315][ T32] 2 locks held by syz.6.1053/9958: [ 621.285436][ T32] #0: ffffffff8f816770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 621.293707][ T32] #1: ffffffff8f816588 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 621.302833][ T32] 2 locks held by syz.2.1054/9967: [ 621.308006][ T32] #0: ffffffff8f816770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 621.316369][ T32] #1: ffffffff8f816588 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 621.325371][ T32] 2 locks held by syz-executor/9970: [ 621.330716][ T32] #0: ffffffff8f816770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 621.339002][ T32] #1: ffffffff8f816588 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 621.348356][ T32] 2 locks held by syz-executor/9979: [ 621.353653][ T32] #0: ffffffff8f816770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 621.362063][ T32] #1: ffffffff8f816588 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 621.371430][ T32] 2 locks held by syz-executor/9988: [ 621.376758][ T32] #0: ffffffff8f816770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 621.385084][ T32] #1: ffffffff8f816588 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 621.394196][ T32] 2 locks held by syz-executor/9997: [ 621.399536][ T32] #0: ffffffff8f816770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 621.407798][ T32] #1: ffffffff8f816588 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 621.416925][ T32] 2 locks held by syz-executor/10006: [ 621.422553][ T32] #0: ffffffff8f816770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 621.430816][ T32] #1: ffffffff8f816588 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 621.439876][ T32] 2 locks held by syz-executor/10015: [ 621.445259][ T32] #0: ffffffff8f816770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 621.453505][ T32] #1: ffffffff8f816588 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 621.462653][ T32] 2 locks held by syz-executor/10025: [ 621.468098][ T32] #0: ffffffff8f816770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 621.476686][ T32] #1: ffffffff8f816588 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 621.485671][ T32] 2 locks held by syz-executor/10034: [ 621.491105][ T32] #0: ffffffff8f816770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 621.499377][ T32] #1: ffffffff8f816588 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 621.508463][ T32] 2 locks held by syz-executor/10043: [ 621.513844][ T32] #0: ffffffff8f816770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 621.527112][ T32] #1: ffffffff8f816588 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 621.536174][ T32] 2 locks held by syz-executor/10052: [ 621.541630][ T32] #0: ffffffff8f816770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 621.549913][ T32] #1: ffffffff8f816588 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 621.559145][ T32] 2 locks held by syz-executor/10061: [ 621.564501][ T32] #0: ffffffff8f816770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 621.573025][ T32] #1: ffffffff8f816588 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 621.582081][ T32] 2 locks held by syz-executor/10070: [ 621.587508][ T32] #0: ffffffff8f816770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 621.595886][ T32] #1: ffffffff8f816588 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 621.604911][ T32] 2 locks held by syz-executor/10080: [ 621.610435][ T32] #0: ffffffff8f816770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 621.618841][ T32] #1: ffffffff8f816588 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 621.627943][ T32] 2 locks held by syz-executor/10089: [ 621.633324][ T32] #0: ffffffff8f816770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 621.641623][ T32] #1: ffffffff8f816588 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 621.650651][ T32] 2 locks held by syz-executor/10100: [ 621.656052][ T32] #0: ffffffff8f816770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 621.664246][ T32] #1: ffffffff8f816588 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 621.673347][ T32] 2 locks held by syz-executor/10109: [ 621.678857][ T32] #0: ffffffff8f816770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 621.687218][ T32] #1: ffffffff8f816588 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 621.696494][ T32] 2 locks held by syz-executor/10118: [ 621.701860][ T32] #0: ffffffff8f816770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 621.710132][ T32] #1: ffffffff8f816588 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 621.719356][ T32] 2 locks held by syz-executor/10127: [ 621.724711][ T32] #0: ffffffff8f816770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 621.733067][ T32] #1: ffffffff8f816588 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 621.742174][ T32] [ 621.744504][ T32] ============================================= [ 621.744504][ T32] [ 621.753101][ T32] NMI backtrace for cpu 0 [ 621.753121][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 621.753146][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 621.753160][ T32] Call Trace: [ 621.753170][ T32] [ 621.753180][ T32] dump_stack_lvl+0xe8/0x150 [ 621.753216][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 621.753254][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 621.753281][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 621.753312][ T32] sys_info+0x135/0x170 [ 621.753334][ T32] watchdog+0xf90/0xfe0 [ 621.753375][ T32] ? watchdog+0x209/0xfe0 [ 621.753417][ T32] kthread+0x726/0x8b0 [ 621.753455][ T32] ? __pfx_watchdog+0x10/0x10 [ 621.753488][ T32] ? __pfx_kthread+0x10/0x10 [ 621.753518][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 621.753552][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 621.753584][ T32] ? __pfx_kthread+0x10/0x10 [ 621.753623][ T32] ret_from_fork+0x51b/0xa40 [ 621.753653][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 621.753675][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 621.753703][ T32] ? __switch_to+0xc82/0x1410 [ 621.753745][ T32] ? __pfx_kthread+0x10/0x10 [ 621.753779][ T32] ret_from_fork_asm+0x1a/0x30 [ 621.753835][ T32] [ 621.753845][ T32] Sending NMI from CPU 0 to CPUs 1: [ 621.885215][ C1] NMI backtrace for cpu 1 [ 621.885235][ C1] CPU: 1 UID: 0 PID: 6066 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 621.885259][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 621.885275][ C1] Workqueue: events_unbound toggle_allocation_gate [ 621.885307][ C1] RIP: 0010:update_se+0x38f/0x5e0 [ 621.885332][ C1] Code: 57 6a 95 00 4d 8b 24 24 4d 8d ac 24 08 01 00 00 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8 36 6a 95 00 49 83 7d 00 00 <74> 0b 4c 89 e7 4c 89 f6 e8 54 3a 27 00 0f 1f 44 00 00 4c 89 f0 48 [ 621.885350][ C1] RSP: 0018:ffffc90004ce7528 EFLAGS: 00000046 [ 621.885369][ C1] RAX: 1ffffffff1c734c1 RBX: dffffc0000000000 RCX: 0000000080000002 [ 621.885385][ C1] RDX: 0000000000000000 RSI: ffffffff8dd38b9b RDI: ffffffff8be73880 [ 621.885400][ C1] RBP: 1ffff1100612c025 R08: ffffffff8fced577 R09: 1ffffffff1f9daae [ 621.885417][ C1] R10: dffffc0000000000 R11: fffffbfff1f9daaf R12: ffffffff8e39a500 [ 621.885433][ C1] R13: ffffffff8e39a608 R14: 00000000008c25b2 R15: ffff888030960128 [ 621.885452][ C1] FS: 0000000000000000(0000) GS:ffff888125a28000(0000) knlGS:0000000000000000 [ 621.885469][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 621.885489][ C1] CR2: 000055f9e1cdaee8 CR3: 000000000e146000 CR4: 0000000000350ef0 [ 621.885506][ C1] Call Trace: [ 621.885516][ C1] [ 621.885529][ C1] update_curr+0x76/0x4f0 [ 621.885566][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 621.885602][ C1] dequeue_entities+0x1b8/0x2f30 [ 621.885632][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 621.885658][ C1] ? sched_clock+0x3f/0x60 [ 621.885690][ C1] ? sched_clock_cpu+0x74/0x440 [ 621.885714][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 621.885742][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 621.885767][ C1] ? rcu_is_watching+0x15/0xb0 [ 621.885801][ C1] dequeue_task_fair+0x1fd/0x760 [ 621.885837][ C1] __schedule+0x67b/0x4fb0 [ 621.885864][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 621.885889][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 621.885913][ C1] ? static_key_enable+0x1a/0x20 [ 621.885941][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 621.885970][ C1] ? __pfx___schedule+0x10/0x10 [ 621.885998][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 621.886022][ C1] ? schedule+0x90/0x360 [ 621.886048][ C1] schedule+0x164/0x360 [ 621.886074][ C1] toggle_allocation_gate+0x17c/0x290 [ 621.886097][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 621.886120][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 621.886149][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 621.886174][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 621.886194][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 621.886215][ C1] process_scheduled_works+0xaec/0x17a0 [ 621.886253][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 621.886272][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 621.886302][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 621.886324][ C1] ? assign_work+0x3d3/0x440 [ 621.886346][ C1] worker_thread+0x89f/0xd90 [ 621.886369][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 621.886395][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 621.886418][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 621.886446][ C1] kthread+0x726/0x8b0 [ 621.886479][ C1] ? __pfx_worker_thread+0x10/0x10 [ 621.886500][ C1] ? __pfx_kthread+0x10/0x10 [ 621.886523][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 621.886548][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 621.886575][ C1] ? __pfx_kthread+0x10/0x10 [ 621.886603][ C1] ret_from_fork+0x51b/0xa40 [ 621.886623][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 621.886640][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 621.886661][ C1] ? __switch_to+0xc82/0x1410 [ 621.886690][ C1] ? __pfx_kthread+0x10/0x10 [ 621.886714][ C1] ret_from_fork_asm+0x1a/0x30 [ 621.886750][ C1] [ 621.887747][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 621.887765][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 621.887791][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 621.887807][ T32] Call Trace: [ 621.887816][ T32] [ 621.887825][ T32] vpanic+0x1e0/0x670 [ 621.887862][ T32] panic+0xc5/0xd0 [ 621.887893][ T32] ? __pfx_panic+0x10/0x10 [ 621.887922][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 621.887953][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 621.887982][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 621.888013][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 621.888042][ T32] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 621.888077][ T32] watchdog+0xfda/0xfe0 [ 621.888119][ T32] ? watchdog+0x209/0xfe0 [ 621.888162][ T32] kthread+0x726/0x8b0 [ 621.888200][ T32] ? __pfx_watchdog+0x10/0x10 [ 621.888243][ T32] ? __pfx_kthread+0x10/0x10 [ 621.888274][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 621.888309][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 621.888340][ T32] ? __pfx_kthread+0x10/0x10 [ 621.888375][ T32] ret_from_fork+0x51b/0xa40 [ 621.888405][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 621.888429][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 621.888458][ T32] ? __switch_to+0xc82/0x1410 [ 621.888503][ T32] ? __pfx_kthread+0x10/0x10 [ 621.888540][ T32] ret_from_fork_asm+0x1a/0x30 [ 621.888593][ T32] [ 622.398346][ T32] Kernel Offset: disabled [ 622.402704][ T32] Rebooting in 86400 seconds..