last executing test programs: 18.713441406s ago: executing program 1 (id=9663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x5150c1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 18.340645457s ago: executing program 1 (id=9670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) 18.152731368s ago: executing program 1 (id=9674): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180800b0ffffffffffffff000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 17.881972884s ago: executing program 1 (id=9678): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0xffffffffffffffff}}], 0x1, 0x100, 0x0) (async) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0xffffffffffffffff}}], 0x1, 0x100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000000)="9c", 0xffffff7d}], 0x1) (async) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000000)="9c", 0xffffff7d}], 0x1) shutdown(r1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 17.61223407s ago: executing program 3 (id=9682): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3264}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) 17.549031838s ago: executing program 3 (id=9683): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x14, 0x10, 0x0, 0xfffffd5a}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRESHEX=r1, @ANYBLOB="f9ffffffbd56ffff042df33ddb464ba9966f06bca9f1575214e97e4ba68c"], 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000880)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic, @initr0, @exit, @tail_call]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x90) 17.488055448s ago: executing program 1 (id=9684): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_SRC={0x8, 0x2, @local}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x3ff}]}, 0x2c}}, 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0x200000c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r1, 0x1, 0x1e, 0x0, &(0x7f00000004c0)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000f05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) 17.402666819s ago: executing program 0 (id=9686): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 17.316807189s ago: executing program 2 (id=9687): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000d060300000000000000000000ead79ef629e97e64c40000000500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x3, 0x10, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0xf789, 0x401, 0x7}}) 17.155028079s ago: executing program 3 (id=9688): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180800c0ffffffffffffff000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 17.152795577s ago: executing program 0 (id=9690): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2080, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000005140)={0xa0, 0x0, 0x2, 0x5, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x8c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2041, &(0x7f0000003700)={0x77359400}) close(0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000000c0)={r5, 0x5}, 0x8) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="530000c602"], 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000440)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000022c0)={{r6}, r7, 0x8, @unused=[0x8, 0x9, 0x7, 0x7f], @subvolid=0x9}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r8) 17.032967096s ago: executing program 1 (id=9691): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xfffffd6d, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, {0x2, 0x4e21, @remote}, {0x2, 0x4e22, @rand_addr=0x64010102}, 0x236, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)='xfrm0\x00', 0x3, 0x400, 0x8}) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfffd}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 17.032850627s ago: executing program 2 (id=9692): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r2, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r1, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) 16.99367829s ago: executing program 3 (id=9693): r0 = socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="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", 0x3f5}], 0x1}, 0x84) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x38a}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000080)=""/113, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random="000500000020"}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000100)={r4, 0x0, 0x10, 0x20000000006, 0xb1aa}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e23, 0x8, @empty, 0x1}}}, &(0x7f0000000580)=0x84) 16.967494274s ago: executing program 0 (id=9695): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0xb0}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x2500, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdba, 0x0, 0xfffd, 0x1, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3a}}}}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000100)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x10004}}, 0x20}}, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x5, 0x4) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xb, 0x81, 0x6, 0xfff9, 0x10, 0x2, 0x8, 'syz0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x1c, r2, 0xb7a006d1969b963b, 0x1, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8011}, 0x10) 16.895247s ago: executing program 2 (id=9696): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004881) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0xffffffffffffff23, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 28) 16.612706308s ago: executing program 4 (id=9697): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x200000}}}}}, 0x0) 16.474012851s ago: executing program 0 (id=9698): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004000) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000140)=0x10040060) (async) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000140)=0x10040060) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x2000800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) pipe(&(0x7f0000000100)) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_pwait(r8, &(0x7f0000000180)=[{}], 0x1, 0xdeb, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@gettaction={0xec, 0x32, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_gd=@TCA_ACT_TAB={0x94, 0x1, [{0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0xec}}, 0x2) socket$can_raw(0x1d, 0x3, 0x1) (async) r9 = socket$can_raw(0x1d, 0x3, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x15, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000001b80)={'dummy0\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705e, 0x64ef}, {0xe, 0x1207}]}}) (async) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000001b80)={'dummy0\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705e, 0x64ef}, {0xe, 0x1207}]}}) 16.456415108s ago: executing program 3 (id=9699): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x12800, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x6, 0x1, 0x1}, 0x8) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000d, 0x110, r0, 0x1b98b000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ip6gre0\x00', 0x400}) write$rfkill(r1, &(0x7f0000000100)={0x0, 0x9, 0x2}, 0x8) vmsplice(r0, &(0x7f0000001140)=[{&(0x7f0000000140)="ba1f43fecf31a3748933462df0d1ebfe5169ea977683a164dc1a207c7c8b2ac84c0ebffbf438f6027ac7fb408439a2685353657c202798afd1feacd245d3613cef3bf8c338d9815ab1913cf0a047e8827e7fdf7bc0b91060e2b8748a8c7e48964c97fdaa585905f43b14db062198f8e2a2df4fb69c63ec14f7db5ad0e22fe2715bc7f50627a800feb254dbb8cd5ca890e3704a175d53d1a23241b56b888ffe56d0090bc0e36a5fdbd617ea415fbd668610fdc325ade6dbf649eb4974a4a4aabe7d4e4a657d45456a54138a5ce49f22b3293c66add59c23725bf136b656e64362a0e15d14506b452570ecb59faae044b35729cad4af00fdea8220d6e8f7a8b241d55d055ea637a17f171135bab55cfa2e0514b184dc0d3370ce126bfc6e5f3d52250592fa05fca50601ef10adfa431db1fa7ac55928bbc300dd460223dbc2b865fd279ba7d42ba2c6881a51b0b10c7414bc07c01aeeb221138f0069966dcc784724bc67bf6341bd03467927790c9481525240b149fad6204dd6b0bc19b1645bbc3d41d15fef7534c9cba4bf29e503e28c0995ee34e4407bf9d8c5d335833714275479e9e239df217a7314a1b341fdfe14305487cb07629d3b9f408d176ca1f37b1af3e714e9eb09ead317deb88d1a3e75af605fbfbcd3dfbfce96fd9067f00b05d53c6d9e43652739dd0fb91e955f1b82d868f746550da07b934d843d87ba7dba2ce52d2d88e4fc133950edce26f1e759ab0025f625af069c33522e3351337a06a6edad33e3f19dac7481a20f02cd1c8564adf5f83053546d2827c98421a14458901fed168bdcb08a16ae736e1f9114ca642e65ae3dbee032348f672d09ecbe2e34ff068f4c9227ab47d62e596758cbc9b00f53dd4305a6991e67f6a305375cce61123ba681f1d89b14d2f0405254ccae10a3bef287872406c8777605fd473fd2c70159260e669b2c8b15b6737c6bba92a633f4aa9b4a400432e89f2d3189934aab2dfedf240c57d8507b46aeb06483965b6aaa8378d5ff00c62de8c1e76f8c993ca4678668bcd19113aa4ecaec1080ee761f54caf11407597b937a41ae93b6ec8be329dbb1b4e876927d8fe4faed418db8ef0adb1463da46ff83c59172d0af65a7f666a23c6b195bb0bdaf12d373e7a4430c9a83d00764f89eaa38f8f64630bd67c1c246637579c559dec7736566559b815bf39c1789c632aaed966b17d2d2e9286a8c0be5df3df8446a4a1d89041bc443e584e29d8002f5beb3d29cb8a4abf0cf430958dae90ca7892f15f1e623e85648266b646245f1b5e217f5cc030bb9cad6ab4b921e294ead2019272811715bfcd9871c47d9307a2a2df4ab2340f5b2df4f0df358eb584d877e5a61acc2b3dce68a5d76f9b545592d880c94f8130c21c1d82dca99f9ad9fcba58657cdc4cafb952f2bd84bc7e3b6aa57e6dfd2010137d5685f018da9138f7b6e1c46bc3eaca8e64013ae313d4ef088b72095fb85ed695c80a004f3c61d4eae5ede3c52acb1465ec506b522761c2be8f1ad4e1703de79bce1b0abdee9f841420757c9cd5811c808265f08175303f10c13de1b4e2ee2218180af887c80149c008398bcbc5cff2b7eea4d60b2baeb7c714b729d9b51040ac1b1f11868d43a2c777660c3d56ad52a0f9ec43b3aab2f5635cf52b437932a7b7976353df74012d008645686155e17d51df83c598851ff5b823c88463115d0a090fbe01769da00dbc2015b4e137c0bbf63eea2eb365e91f26cee74fd67e31e813df8c603f8ea8ee16e00794de74ce0bb3264971f51211db367421b8b5415049dc2978851e7b1620f41bf0d5a5c3dbc93de095d0a9dd7ea18c1630d4a7745d2f753143ff2d33d94274003fdce45600884c5c62a237dc9c61e15dc469f23c2384a83022c8d1edf47ad3f9240773a2883cdefdc357b9df2f152bcd5829877610ffd54ec4f3ab9cc3b7a8389a2c2153c7070da708b8b9ddf5b5a9c8448292e8d0b64d37550f09d1ed4462c2ffa85700f38a94dce4c74e96f3932ca22af59ba1c9a9292d1600b9faf24f4b01396c6199ee8c6fdd46ad2558006447bf5fac19de83101fe8885483f688ff79fec86a5d0353094e37580c3b4e9dcf59976d4f807b827fc8ea7f8fbc51f6b397c9b0466e38acc75c964642a653edb44c385f54650f306aa91deb0293e7a6fcad4806a449dc57101774ab4d02b172c8d3d366b319b51f09be2ebfcb6f5f62571961cc5ba0c2b21b981b08b38a81997c2b04d98f6e15282ca5cf290c41c2a6892c49b331464eebdce79aedb78540196f205267212793b6059354fdec325b1816cc0d91b3ed72409f63e679b807807bcc431a31f9d4703a6ccf07a757f52ba2e0ab87ac09bd6dfd36a2ad92b7366b949bd38d97d11884f89f48afe792a5ee2b07b3a22ec7cb2cce5a3b8f1d9785ea2a131078f2ee4f5fcbf6947ac5de653691d07c713b2b61e9d14b0eb4be837032ae40043128a22f7d440f246d48ee898ef16546cf939a962dce2379b53e332a7f476a008cf503bf90e0545ebffa25c6a780fe4a81a0b0ba568c924a3ce38387b3ed6f2075cc79c596d6601fc57611daa2bf2ee8e98857eada710548a85d6331487e892600b192c9d2bac5fb248b4842237fa05c22a9b8042c10db42ef312e2e53addcfd5e0278729698c80650200c22ab611d8b21380ce5036cf3e6292597b9b0fc943cfce239384aa1b5d0a7d5a6ebe0d2ffdc72f7265fd50886b931b9df24819d943e7fe1ae45d0e2a566d57664953ae6788507851b8390c1c79d0c079171d4f346c51bdba63dec1ca398f082c93449a1d24bbaa514420656c99dad338fac5afc3ba8b103de0442a02e7253b3c8656d771102f3d98fb312f7d8ec092497858d122e1761b52f4c6fd6f7509fc5e82e2cbe927b39e9569d9e1d5021a55d2f7dc71bc8adaa2dba9f3d669c7ac281677a10a3576de8e0297d18a024a777d1a160787218c6462908c36d5a39efb83809c537fc0642e6471fdb76aa176c317721ac2fe7bbe8bb871eb73496c9f92df1d505d5505b24f3f24c44d9a6a03ca1ad22bda56434e0e1d441c1f41d2b22a5e494f71c180605f958830bea6649d0d95b5038756cfdf4b602553b7801ae45d24dfba1cb0ab9ede1a137fd21bdca40548cfbb4be9a16dafc28acbf4996551c9ae849fc89fbbf5466dfc9288e8b708a02a89a59b015e4ec8da479948c6325d134f528bb5f4b97c344bab14c018942dc150afa2409f95a9eaad4f204abb24088d3abda75a084d5d03629805c0aba02867e374bc2583fdf0b6e2828b66994a1daf773c2560fa78849e8c59fa4707865412956019a1850a788969b0f96b127c491e0566b2051ddb8d869e0cf369190c3ff2dfb52790ca20c9347ea06a0cbcb08d766573dc92d1e323d897c316543c6e0f6dca18988e33470c0f16db7e32b49c675b2c377d56cc45d2e7939cf2c330955c3701925dd75a54e06b79c2265c6a0617e5c219d83a825b920ae6e06815c53449d86f06c5f4fa80807e05a23ce95f9c42a6050bfa715cc153802f90db02c4d8c7e4222a20ae92e28bc36a00813ca345c285fa9948b2cafe267d3a4045ead032c579b1429ba48f37a07b4f300922ea6e0184279a0251a728e5213c65892d6634f5c90651dbf78e759f1abec677c68ae42f319376b95742a8b89b0827a3f0d23224f0e87201d424b40495dc6c9d2449efac904f1cb6f112953ab62164e229e8a03ddc687dbe8427ff51a9d892d2f0d98e163b506198f379f1d367c9e87a4be1bfcae3485d504e4f5cbdc6b440b7ecbd031a388341b9a3c4aa269b11adad0935fe13e576423f047759a9357820d2c767cf91dfb89de6dd98bf8345dc767990fee1ca2e58dcdcd7b640e74a7bd153b28164c728f6c0631afaadd0c0a3caf0d75362675d7930e551b5abd070c44bb01cd47602262d729be22ef242204c9abe27a14153573bfe219e82aa4986a38ef7c504b58fea586b5e4c502d16bb8ece0225ff8e744a54e3e5ecf214d7a7ac08592392b8fda44da51a7ab284bb0c16504e5f7e92845aba3911bab5907193e2a26f6a23304674427327f58ea0e94f40f02db6b977b0fd40f25c5686bc80e70642ae9d4df12d779a10d8c6d28402b442de527d9001f5f9af0c861bf06aa8b6ea554e1396fe6f421f6dbd4bc6d4fb4920ae88bf731216b0999de33ead3d348f4b0b19bf857e1c184b29485de005df47426c8aecd4a6c17095df2eb0fd61f301e5478236408b5730a2356eaebad9197e0e9125902091d191408f4e976107bce69c21fca473bbbd9394f686b2968793640cb60fe0b230ae03b98b49f5360f5dbbe272f7292db82615711438a3fa15b430660ba4bcfa4e8efef11e5f59ccd1ab1b5ecbb761c1423579564e5442ae46950738880a1dfb5a9c20ce6e54ac5d3e48250c988df2a540187ff303ebdcb9db0eacd3288c409ce9a9f7b6de17b62d2f1b387f4a131724bbfbd8974243047f6cdebc4d8f6f14d242ba34c87507663c719fc07abaa4dd62c03289706963c9c4a905b0dd8e462146bbef57b42142e2ffca69d7b6bed3d2ae20a365cc508ef6d4e8f455f42e340260c35b859609ad705c31afb7d9145c637beae111d22dd3a7a2d1c8bde95f9264f50a6fa08df383be0b77a0cdbfc67ee3943bc954d3fa32134287a2cd944a2a32a287a033d6d4fbfe0b3fbd0c84df7e76b0431067a19f69e1b4b9543a325c03f60bf7e67ef14eebeee4e1603002babd2620c17784bf55385a069c924ee64ea30bc4299faea93ca00aee7eb65a53e8a4de94fe81ca926a50839e9f5e94c0cbbf2e33f898547e15a16e860362b13acbee91f62cd30262152a68e443eaaa06827013a6980650bb7c2f361956138ac4a6b302ccd0e608dae3efbaebf77db611c9192270e71aedc28223195a353ce8524df869518c2f32cadb17d082e81aaac8e3748c495f1de35729a615b254d0fa98a2cc82f38e3af5966ed07ff55ee6f1962c92ed6571e4911e5949c3124a87b31238732963644d8f0d4b3e499206c1c07c4785f2f5aaeb63f1b638e0517717eed8ae0ab0b0bfa0ec5c1e31db04ea87ff780fcc521c71b4a546cf4f6643a8bb3982b4924382622889b360fda6c8fd606ec1284addb7f252b8130ded9a61c2832e70e2f216c682bc34a530ef369282e2c31162c9570f43013a56dc608792fc5b4107b8f4ede65a0d0a68b6b89c833b33c9bddf87e8df852bc420c26ef6398f5f4875bee43256dc125c9f0fbfdd7cae5e4c13cfc4ae5c69f0b5762e8f4cf8331d8a4e9ebbbf6288670ef0ae5eddf568e10f10de8e9552fb83e610e29244ff9e209af4dcfb99484437b4259b2d268190111d8a07b79ec4adc2036a9ed50cf1941f60ab3a09f4ae98fa54fa82220d6d18fb64415859b9e452bc01b0502d3d14fbde777e501934129810b8b380ac0cc845cc0b1c0db06a730c4536f50a8e8d0db3a26114d572473dfd8386d21a76f1370b65a5991519874ef103b57c371e081e69cb1f34400bde19814626b246212f22039018789b14959e67b69208a02ffa754f8e67a38fd8799a1faaa2d9bfbe1541e6378d9d0aaeffe5cdd9ff5854a59c7ee36b35837b05a8a9570aea1a591c7593cbde459718c9a95bf58bbb993f1aad5b3308b135b7ad58acde34831fc7b22dec57c7dd550ecdefb7fadde523921ce5e1571a1cdaff7084c126fde6fb3a4a7688ea49271d64efa2324e94f23154d2467d951bd6c43d0a846eabb59de65a58c0046e4b302ac55d79dbc985bdd61e9c7c43a9014db139c1ab46148486", 0x1000}], 0x1, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001180)={'wlan0\x00'}) mkdirat$cgroup(r1, &(0x7f00000011c0)='syz0\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001200), 0x200, 0x0) ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f0000001240)={'wlan1\x00', 0x400}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8051}, 0x4000) ioctl$TUNSETOWNER(r3, 0x400454cc, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000001380)={0x0, 0x2, 0x6}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000013c0)={'syzkaller1\x00', 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000001400)={'vlan0\x00'}) sendto$packet(r1, &(0x7f0000001440)="cfe584bf0242d7766b35fb91e525b9122c40cf14a6c9fa94686f0c204f47c99a83568b25a7cae4a1040e8018ef73b6ca6d65875450bbb16c797bd27b180b545073979b7170b3768824022a4ba2372400cf37c622cea99d31602ef895aced56a8987fef449a9abd98b989f8efb873450e7676edbfd29a75481d3fc789e6885e63dce9b71ff26ed5970be81a5d0d22a2bace5bb79b2165c3d3c4", 0x99, 0x44, &(0x7f0000001500)={0x11, 0xa, 0x0, 0x1, 0x2, 0x6, @local}, 0x14) socketpair(0x18, 0xa, 0x3, &(0x7f0000001540)={0xffffffffffffffff}) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000001680)={'filter\x00', 0x0, 0x4, 0xa3, [0x9, 0x7, 0x8, 0x7fffffff, 0x9, 0x8], 0x1, &(0x7f0000001580)=[{}], &(0x7f00000015c0)=""/163}, &(0x7f0000001700)=0x78) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000001740)={{r6}, 0x6, 0xffffffffffffffff, 0x8}) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r7, 0x80306e85, &(0x7f0000001780)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000019c0)={0xfffffc01, 0x0}, 0x8) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a00)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xf, '\x00', r5, r2, 0x1, 0x1, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0xf, 0xd, &(0x7f00000017c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x880, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @jmp={0x5, 0x1, 0x7, 0x4, 0x5, 0x30, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @alu={0x7, 0x0, 0x0, 0x7, 0x6, 0x18, 0xffffffffffffffff}]}, &(0x7f0000001840)='GPL\x00', 0xcd1, 0xc5, &(0x7f0000001880)=""/197, 0xc2f00, 0x30, '\x00', r5, @fallback=0xc, r2, 0x8, &(0x7f0000001980)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, r8, r2, 0x8, &(0x7f0000001a80)=[r1, r9, r2], &(0x7f0000001ac0)=[{0x5, 0x1, 0x8, 0x1}, {0x1, 0x3, 0x5, 0xa}, {0x4, 0x5, 0x8, 0x3}, {0x4, 0x4, 0xc, 0x3}, {0x5, 0x2, 0x5, 0xa}, {0x1, 0x5, 0x5, 0x7}, {0x0, 0x1, 0x0, 0x4}, {0x5, 0x4, 0x9}], 0x10, 0xfffff800}, 0x94) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000001c00), 0x4) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000001c40)={0x1f, 0x2}, 0x6) 16.415910925s ago: executing program 2 (id=9700): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r1, &(0x7f0000003080)={0x0, 0x0, 0x0}, 0x200488d5) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x2, 0x2, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x700, 0x2, 0x6}}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x10, 0x803, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000002c0)=ANY=[], 0xc4}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f00000008c0), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 16.414961919s ago: executing program 4 (id=9701): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b7000000001f0009bfa30000000000000703000018feffff620af0fff8ffffff71a4f0ff00000000ae04020000000000be400300000000006504030001ed00007b130000000000004d44000000000000630a00fe000000007933000000000000b504fdff000000009500000000000000023bc065b7a379d17cf9333379fc05000000912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50bec919bc461e91a7168c5181554d1b583c587e436fe275daf51efd601b6bf01c8e8b1b526375ec5dd6fcd82e4fee5bef7af9a0200000000000000e3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f645679c294392cf538b07ce2646cb7798b3e6440c2fbdb00a3e35208b0bb1d2cd871c5548930be3835f2554b4a28610643a98d9ec21ead2ed51b104d4d91af25b84550a7925c3109b151b8b9f75d80000000eda88c658d42ecbf28bf7076c15b463bebc72f526d8e4a9e231d512381e7a78afcb913466aae7f6df70252e79166d858fc152b659da074e1320060d0b11008e59a5923906f88b53987ad1714e72ba7a5b74f0c33d39000d06a59ff61622cfd9aa58fe8d485ae2c0cc65c2a36aaec2477584b6a89adaf17b0a6041bde4cc3ed54d27f777e92b87496e6649cf728d236619074d6ebdf098bc908c423d228a40f9411fe7226a40409d6e37c4f46756d31cb46761bade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18de0ae564162a27afea62d84f3a10746443d64364f56e24e6d21053d901204a1deeed41556175cbd4041b7d301bcb72652d950ad31928b0b093778b68e2e9853c02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f98928d5e9b94ff9ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cff538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595bcf50ab32d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063b59261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6f8c3a13596c2ea3e2e04cfdce669e51731b2875353193f82ade69d0540059fe6c7fe7c00fb7502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abd47b64a1b304502dda787343ce3c95300000000010000003baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022af46667cf25c5d3038816106dec28eaeb88343261a48a18f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfeff59d54d1f92ecc4e95dd2d18383117c03987d198899b212c55318294270a1ad10d30fef7c24b78b29d83238273f4fc87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead8eaf68b0c5dda0467d35a3807000000b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ea1e717d29135753208165b9cdbae037f315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d7012c1b45f6ada1ee7baa5b6a686b50f09b7f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac4d73a008364e0602a594817031fc2ff2c32a1989e00f52f8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a3c3e6e4fd2e016820f78b796a825b3dad9ce7b37507e0b83c3ecd01549bca6a016b3e18a00c748894dc3bfe5efda8b0a477d6a6562fdee45eb16e276dee992094ba9830f6c164179e7d532d86060bea930118d3cae1b8f916b9671b7000000000040f4bee5ad2dea2d14e195265504c05bba38b095e1679f96ddef65ba5de9c8cfb6465ae4165c0689a314a6eb6b36aa705b957edef3035e14b879d4e7dc00624708042e00bf9a7f7ae5f308744770759558e4fcb99c0dc957521ef255362bf2f3966f3754e81fb9bdef22c19f5a49147b85343f9f36bcda9f64b7a5c5b2f5452f5b1de02e6f15c5640bf89d4a74d51dc233dee628c1dfbb5566b98478c174b34eb234481547e484c6af101396b6977dd668b401391c1dc54f2edccf1cabe6be9868d383eb937efdfd9ade018106f544f04fc07ad525497f65fbad3cf145396acf3b0d38e6b46e28d86880fd6f62c373000000000000000000005d194c27cd4d8f6727de79be80fb4493a0ee2e85f59c71dc84311c0f1fb6c87081c7be9355288610c32c2d8c18bf2027212182903687f48262aea54c5f8a315c9aa4a5af1aa2c4007d1baae38c270012b7eb9411ae451204dba30f8321b07a18db97c3e0cf6a15170e515b1cc463a67a5b2b23ec5662ccfa898b8d5075647bdfb390cde56efb8fd42df12c5c8f66bdc58449ec2b38bf12f5f0a49dcbcf4e6f11c47d23fa34793a0000a1cbb1e06e9a8d2449451d7a05ec0a0d3c9716f505ddeba488c60ebf44cac05c2739694359c925148137376dd3f1330ed0e9211f73ee279cc0b5c298422395ce438f48a39ff569375e609f9e904aacc3d8011326d5e4d654c74501cf16bbf72d3984f9b4ef000000003a8a3d49fc837001e4622e58e3a4ef6b55a8dd0680d951cdb6e54ed92a9a6a0e5e494b7b7b0ef4b4bafc5d964551b2a22bfd12b0761ef07a103e51e84917ee44f860b9785e264343f6a80e9318edecf73df6940856cd56c56eb3831445833c701044aaa49439a44a624267580b3c0980d7f87437bf498f6e1915450400000000000000564a02552c0a5fedbcf4da0db6ed03b9dbc224ee76d20aaf1ac74bcb7eb6f202209e64cc4d130dcf6ab3df8ae4911deb4bb5c7df97fc348d151e834be73915f854272f69d88123f666448b6a8e73322b04fffea9cc05e4129debf311c73b4d1a244b1e5b9943028745a0b6477686740ab877315e35624d791e6f71adb1acd3e22cf472ff7e048b16c11c84da9a3b16b92665912132a4dba680052919c20e191311d8092a09f3c609823fed1bd651ce1c34de105790ba2ca3afa26647f66efbf97b109e7226c74e32beb14ff3fd6918e255fc9b42f86b0188cf885afcc9bb77a7fc3ca7ec1015af494add960f8a11422ca005f24006867cd156e0350022943e301b2c07f4d37d07b05ac2fa1f1d5a0d6eb7e992b076bd77509c26034d2a740d578476410b413591884136259693effaf27e7bcfb58efa92625fb9bd68ecca42047f6e7d24b0446ea16a310073c163d1c6aa3ba1fe76b4e88d5f98cc05c6d033e2c28b4990892230d6b4e5c083a601a25145eb22f4f77313117f8147810d95c64fb78b0a000000000000000000000000e92ba8b066e4bd82bb6003d5da8791d838bcd6eefb13000000000000000000000000000000b652ff6fbad82da75114742bc6a27cba894ef490531be709a3a3c81b267dfafa55e6f855200b4e7518682c30f40808cd5bb8f00beb63b4989cc01d8e75a182337b9f9e08430ccec9bda0134d07a9f54b60033182f5d2bb61fd130d65e68bf148d26470060c707a8cf750ca954ee63c78cd975c7f565783383f02edcb7ce4a9ed0c511d18fe32352276d72eefe0d566f97ccae16b3492f60b96574aac4f1862fb6e4932c181dbf8c68ca16b765de9edba0bf5bfb9c4950d19c0bc31db02f374ce62141160436639d4b6cb0033a47ffdc54d55f1136743b1b26946f200000000000000007590ab8f29c7accd9d11786c4ca1271cd2293b572f14a3dfcaa3467f2783fc09e3eee3fa4b82b7b6ce904e05fa797a2f7ff63e4f874bd870821f6460904e05d7a3f8295a9a5fd21e3587b9d9e878c86ba9b66c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) 16.309119769s ago: executing program 4 (id=9702): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="070000000200"/20, @ANYRES32=0x1, @ANYBLOB="000000000000107600000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket(0x1e, 0x44e22b8e9fb04767, 0x40000000) socket$netlink(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES64=r0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x20044090) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r1, &(0x7f00000001c0), 0x0}, 0x20) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 16.258606158s ago: executing program 4 (id=9703): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711095000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee1768810003c00020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xb8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0xfffffffffffffffc, &(0x7f00000002c0), &(0x7f00000002c0), 0xd9, r2}, 0x38) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xe20, 0x9, @remote, 0x4}, 0x1c) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000240)={0x800, 0xf767, 0x0, 0x58b, 0x3, 0x101, 0x57, 0x6, r4}, &(0x7f0000000280)=0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x58, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) getsockopt$inet_tcp_buf(r5, 0x6, 0x15, 0x0, &(0x7f0000000100)) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000e14cdb32bbd7000fddbdf2508000100000000df070003"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4804) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000380)=0x100006, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "030000000400", "45e3e39562ef3053281f0b399ebff509", "593f1291", "fdd9a2d2f1bbec5a"}, 0x28) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) 16.149219986s ago: executing program 0 (id=9704): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180800d0ffffffffffffff000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 16.149004927s ago: executing program 2 (id=9705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3afffffff528000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xf0}}, 0x0) 16.148002943s ago: executing program 3 (id=9706): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r2, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r1, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) 16.147707206s ago: executing program 4 (id=9707): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000180001efff00000000000000050000000800b8"], 0x1c}, 0x1, 0x4000000000000000, 0x0, 0x44}, 0x0) 16.061146057s ago: executing program 4 (id=9708): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_BURST={0x8}]}}}]}]}], {0x14}}, 0x74}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf250a000000a000048054000780080001000600000008000400050000000800010015000000080002000200001008000400ff01000008000400000000000800010017000000080004000900ffffffffffffff7f000008000300030000001300010062726f6164636173fd6def9e6e6b"], 0x1ac}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000040)={{r2}, 0x6, &(0x7f0000000000)=[0x9, 0x8000000000000001, 0xfffffffffffff000, 0xa, 0x6, 0x7f], 0x6, 0x8}) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x8890}, 0x4000804) 16.014017553s ago: executing program 2 (id=9709): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x7f7aa7c5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='#\x00'], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000000)={0x3, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x37cb7880}, {0x0, 0xfe, 0x10}, {0x6, 0x0, 0x0, 0x8007}]}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xe0000000}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x1c, r3, 0xb7a006d1969b963b, 0x1, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8011}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r1, 0x7, 0x40, 0x5}) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000100)=0x9, 0x4) 16.013704841s ago: executing program 0 (id=9710): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x875}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x400c800}, 0x44025) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000780)={{r0, &(0x7f0000000580)='/*@@!\x00', 0x1a3201, &(0x7f00000005c0)={@align=0x7, {0x8, 0x5, 0xcfd9, 0x557c}}, 0xef69, &(0x7f0000000600), &(0x7f0000000640)=0x7fffffff}, {[0x9, 0x200, 0x4, 0x1]}, 0x344, 0xf0, &(0x7f0000000680)=""/240}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000380)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1ab0429c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r5 = socket$kcm(0x21, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_batadv\x00'}) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) readv(r5, &(0x7f0000004680)=[{&(0x7f0000003380)=""/85, 0x55}], 0x1) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000000001010200000000000000000a00000908001a400000d3750c000f800800014040000000739aaa4a1a809d993ce487f3cfa5ca6d1ac6c82f38653ca90e188920c3753eba6baead586ab80450f777b337c0995970000e9c172c33611b00acbeb03f7b438ad196d450efd3"], 0xffffffffffffff64}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.356865467s ago: executing program 32 (id=9691): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xfffffd6d, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, {0x2, 0x4e21, @remote}, {0x2, 0x4e22, @rand_addr=0x64010102}, 0x236, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)='xfrm0\x00', 0x3, 0x400, 0x8}) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfffd}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 318.753437ms ago: executing program 33 (id=9710): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x875}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x400c800}, 0x44025) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000780)={{r0, &(0x7f0000000580)='/*@@!\x00', 0x1a3201, &(0x7f00000005c0)={@align=0x7, {0x8, 0x5, 0xcfd9, 0x557c}}, 0xef69, &(0x7f0000000600), &(0x7f0000000640)=0x7fffffff}, {[0x9, 0x200, 0x4, 0x1]}, 0x344, 0xf0, &(0x7f0000000680)=""/240}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000380)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1ab0429c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r5 = socket$kcm(0x21, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_batadv\x00'}) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) readv(r5, &(0x7f0000004680)=[{&(0x7f0000003380)=""/85, 0x55}], 0x1) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000000001010200000000000000000a00000908001a400000d3750c000f800800014040000000739aaa4a1a809d993ce487f3cfa5ca6d1ac6c82f38653ca90e188920c3753eba6baead586ab80450f777b337c0995970000e9c172c33611b00acbeb03f7b438ad196d450efd3"], 0xffffffffffffff64}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 276.895214ms ago: executing program 34 (id=9709): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x7f7aa7c5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='#\x00'], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000000)={0x3, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x37cb7880}, {0x0, 0xfe, 0x10}, {0x6, 0x0, 0x0, 0x8007}]}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xe0000000}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x1c, r3, 0xb7a006d1969b963b, 0x1, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8011}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r1, 0x7, 0x40, 0x5}) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000100)=0x9, 0x4) 191.763761ms ago: executing program 35 (id=9706): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r2, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r1, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) 0s ago: executing program 36 (id=9708): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_BURST={0x8}]}}}]}]}], {0x14}}, 0x74}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf250a000000a000048054000780080001000600000008000400050000000800010015000000080002000200001008000400ff01000008000400000000000800010017000000080004000900ffffffffffffff7f000008000300030000001300010062726f6164636173fd6def9e6e6b"], 0x1ac}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000040)={{r2}, 0x6, &(0x7f0000000000)=[0x9, 0x8000000000000001, 0xfffffffffffff000, 0xa, 0x6, 0x7f], 0x6, 0x8}) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x8890}, 0x4000804) kernel console output (not intermixed with test programs): +0x683/0x2cf0 [ 992.021557][ T985] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 992.021584][ T985] ? tcp_sendmsg+0x21/0x50 [ 992.021613][ T985] ? __local_bh_enable_ip+0xd0/0x130 [ 992.021641][ T985] tcp_sendmsg+0x2f/0x50 [ 992.021658][ T985] ? __pfx_inet6_sendmsg+0x10/0x10 [ 992.021713][ T985] sock_sendmsg_nosec+0x90/0x180 [ 992.021739][ T985] __sys_sendto+0x408/0x5a0 [ 992.021773][ T985] ? __pfx___sys_sendto+0x10/0x10 [ 992.021830][ T985] ? do_user_addr_fault+0xc4a/0x1340 [ 992.021862][ T985] __x64_sys_sendto+0xde/0x100 [ 992.021890][ T985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.021912][ T985] do_syscall_64+0x174/0x580 [ 992.021930][ T985] ? trace_irq_disable+0x3b/0x140 [ 992.021954][ T985] ? clear_bhb_loop+0x40/0x90 [ 992.021975][ T985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.021994][ T985] RIP: 0033:0x7f69c9d5e6ce [ 992.022020][ T985] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 992.022037][ T985] RSP: 002b:00007f69c7ff4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 992.022057][ T985] RAX: ffffffffffffffda RBX: 00007f69c7ff66c0 RCX: 00007f69c9d5e6ce [ 992.022071][ T985] RDX: 0000000000000020 RSI: 00007f69c7ff5000 RDI: 0000000000000003 [ 992.022083][ T985] RBP: 0000000000000000 R08: 00007f69c7ff4f04 R09: 000000000000000c [ 992.022095][ T985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 992.022106][ T985] R13: 00007f69c7ff4f58 R14: 00007f69c7ff5000 R15: 0000000000000000 [ 992.022136][ T985] [ 992.550469][ T1002] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 992.575963][ T1002] bond3 (unregistering): Released all slaves [ 992.840095][ T1025] netlink: 'syz.0.9475': attribute type 1 has an invalid length. [ 992.848668][ T1025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 992.956957][ T1030] Cannot find add_set index 0 as target [ 993.058668][ T1035] No such timeout policy "syz0" [ 993.068100][ T1037] syzkaller0: entered promiscuous mode [ 993.073793][ T1037] syzkaller0: entered allmulticast mode [ 993.118540][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.277007][ T1051] netlink: 'syz.4.9484': attribute type 10 has an invalid length. [ 993.379487][ T1055] FAULT_INJECTION: forcing a failure. [ 993.379487][ T1055] name failslab, interval 1, probability 0, space 0, times 0 [ 993.420153][ T1055] CPU: 1 UID: 0 PID: 1055 Comm: syz.4.9487 Not tainted syzkaller #0 PREEMPT(full) [ 993.420177][ T1055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 993.420188][ T1055] Call Trace: [ 993.420196][ T1055] [ 993.420204][ T1055] dump_stack_lvl+0xe8/0x150 [ 993.420238][ T1055] should_fail_ex+0x40c/0x560 [ 993.420266][ T1055] should_failslab+0xa8/0x100 [ 993.420293][ T1055] __kmalloc_cache_noprof+0xa8/0x660 [ 993.420318][ T1055] ? __kmalloc_cache_noprof+0x150/0x660 [ 993.420339][ T1055] ? sctp_add_bind_addr+0x8c/0x370 [ 993.420363][ T1055] ? sctp_add_bind_addr+0x8c/0x370 [ 993.420395][ T1055] sctp_add_bind_addr+0x8c/0x370 [ 993.420425][ T1055] sctp_copy_local_addr_list+0x31a/0x4e0 [ 993.420452][ T1055] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 993.420477][ T1055] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 993.420504][ T1055] ? sctp_v6_is_any+0x64/0x80 [ 993.420529][ T1055] ? sctp_copy_one_addr+0x93/0x360 [ 993.420555][ T1055] sctp_bind_addr_copy+0xb3/0x3c0 [ 993.420580][ T1055] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 993.420606][ T1055] sctp_connect_new_asoc+0x2ff/0x6b0 [ 993.420629][ T1055] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 993.420654][ T1055] ? sctp_inet6_send_verify+0x23a/0x300 [ 993.420677][ T1055] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 993.420698][ T1055] __sctp_connect+0x5cb/0xdc0 [ 993.420729][ T1055] ? __pfx___sctp_connect+0x10/0x10 [ 993.420747][ T1055] ? security_sctp_bind_connect+0x7e/0x2c0 [ 993.420780][ T1055] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 993.420809][ T1055] sctp_getsockopt_connectx3+0x227/0x360 [ 993.420833][ T1055] ? lock_sock_nested+0x6a/0x100 [ 993.420858][ T1055] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 993.420887][ T1055] ? sctp_getsockopt+0x12f/0xb90 [ 993.420907][ T1055] ? __local_bh_enable_ip+0xd0/0x130 [ 993.420933][ T1055] sctp_getsockopt+0x984/0xb90 [ 993.420960][ T1055] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 993.420985][ T1055] do_sock_getsockopt+0x51d/0x7e0 [ 993.421019][ T1055] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 993.421109][ T1055] ? __fget_files+0x3a2/0x420 [ 993.421133][ T1055] ? __fget_files+0x2a/0x420 [ 993.421162][ T1055] __x64_sys_getsockopt+0x1a4/0x240 [ 993.421196][ T1055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.421216][ T1055] do_syscall_64+0x174/0x580 [ 993.421234][ T1055] ? trace_irq_disable+0x3b/0x140 [ 993.421256][ T1055] ? clear_bhb_loop+0x40/0x90 [ 993.421280][ T1055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.421297][ T1055] RIP: 0033:0x7f7a5cf9de99 [ 993.421316][ T1055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 993.421332][ T1055] RSP: 002b:00007f7a5def2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 993.421352][ T1055] RAX: ffffffffffffffda RBX: 00007f7a5d225fa0 RCX: 00007f7a5cf9de99 [ 993.421365][ T1055] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 993.421376][ T1055] RBP: 00007f7a5def2090 R08: 0000200000000140 R09: 0000000000000000 [ 993.421388][ T1055] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000002 [ 993.421400][ T1055] R13: 00007f7a5d226038 R14: 00007f7a5d225fa0 R15: 00007ffda38132e8 [ 993.421431][ T1055] [ 993.764535][ T1067] __nla_validate_parse: 17 callbacks suppressed [ 993.764556][ T1067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9488'. [ 993.809775][ T1614] block nbd2: Possible stuck request ffff888027a29f40: control (read@0,1024B). Runtime 30 seconds [ 993.820914][ T1614] block nbd2: Possible stuck request ffff888027a2a100: control (read@1024,1024B). Runtime 30 seconds [ 993.835228][ T1614] block nbd2: Possible stuck request ffff888027a2a2c0: control (read@2048,1024B). Runtime 30 seconds [ 993.847894][ T1614] block nbd2: Possible stuck request ffff888027a2a480: control (read@3072,1024B). Runtime 30 seconds [ 993.848834][ T1067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9488'. [ 993.879363][ T1073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9491'. [ 993.916708][ T1067] netlink: 'syz.3.9488': attribute type 15 has an invalid length. [ 993.968958][ T1067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9488'. [ 993.979838][ T1067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9488'. [ 993.989492][ T1067] netlink: 'syz.3.9488': attribute type 15 has an invalid length. [ 994.271271][ T1096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9499'. [ 994.282462][ T1101] FAULT_INJECTION: forcing a failure. [ 994.282462][ T1101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 994.295798][ T1101] CPU: 0 UID: 0 PID: 1101 Comm: syz.4.9500 Not tainted syzkaller #0 PREEMPT(full) [ 994.295825][ T1101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 994.295837][ T1101] Call Trace: [ 994.295846][ T1101] [ 994.295854][ T1101] dump_stack_lvl+0xe8/0x150 [ 994.295888][ T1101] should_fail_ex+0x40c/0x560 [ 994.295915][ T1101] _copy_to_iter+0x59c/0x1810 [ 994.295938][ T1101] ? arch_stack_walk+0xfb/0x150 [ 994.295972][ T1101] ? __pfx__copy_to_iter+0x10/0x10 [ 994.295997][ T1101] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 994.296024][ T1101] ? lockdep_hardirqs_on+0x7a/0x110 [ 994.296053][ T1101] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 994.296078][ T1101] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 994.296104][ T1101] __skb_datagram_iter+0xf8/0x980 [ 994.296126][ T1101] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 994.296155][ T1101] skb_copy_datagram_iter+0xb5/0x240 [ 994.296179][ T1101] netlink_recvmsg+0x2b9/0xa50 [ 994.296208][ T1101] ? __pfx_netlink_recvmsg+0x10/0x10 [ 994.296233][ T1101] ? aa_sock_msg_perm+0xf1/0x1b0 [ 994.296254][ T1101] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 994.296272][ T1101] ? security_socket_recvmsg+0x7e/0x2c0 [ 994.296296][ T1101] ? __pfx_netlink_recvmsg+0x10/0x10 [ 994.296316][ T1101] sock_recvmsg+0x196/0x1e0 [ 994.296343][ T1101] ____sys_recvmsg+0x1e6/0x4a0 [ 994.296361][ T1101] ? iovec_from_user+0x87/0x250 [ 994.296402][ T1101] ? __pfx_____sys_recvmsg+0x10/0x10 [ 994.296437][ T1101] ? import_iovec+0x73/0xa0 [ 994.296467][ T1101] ___sys_recvmsg+0x213/0x5a0 [ 994.296486][ T1101] ? ktime_get_ts64+0xa9/0x410 [ 994.296515][ T1101] ? __pfx____sys_recvmsg+0x10/0x10 [ 994.296538][ T1101] ? __fget_files+0x2a/0x420 [ 994.296579][ T1101] ? __fget_files+0x3a2/0x420 [ 994.296613][ T1101] do_recvmmsg+0x31a/0x7f0 [ 994.296641][ T1101] ? __pfx_do_recvmmsg+0x10/0x10 [ 994.296673][ T1101] ? get_timespec64+0x119/0x1b0 [ 994.296695][ T1101] ? __pfx_get_timespec64+0x10/0x10 [ 994.296727][ T1101] __x64_sys_recvmmsg+0x1b7/0x250 [ 994.296748][ T1101] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 994.296775][ T1101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.296795][ T1101] do_syscall_64+0x174/0x580 [ 994.296811][ T1101] ? trace_irq_disable+0x3b/0x140 [ 994.296834][ T1101] ? clear_bhb_loop+0x40/0x90 [ 994.296858][ T1101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.296876][ T1101] RIP: 0033:0x7f7a5cf9de99 [ 994.296895][ T1101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 994.296912][ T1101] RSP: 002b:00007f7a5def2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 994.296932][ T1101] RAX: ffffffffffffffda RBX: 00007f7a5d225fa0 RCX: 00007f7a5cf9de99 [ 994.296946][ T1101] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 994.296959][ T1101] RBP: 00007f7a5def2090 R08: 0000200000003700 R09: 0000000000000000 [ 994.296972][ T1101] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 994.296984][ T1101] R13: 00007f7a5d226038 R14: 00007f7a5d225fa0 R15: 00007ffda38132e8 [ 994.297021][ T1101] [ 994.984494][T24107] wlan1: Trigger new scan to find an IBSS to join [ 995.103588][ T1118] nbd8: detected capacity change from 0 to 63 [ 995.138703][ T1124] ip6tnl2: entered allmulticast mode [ 995.228064][T28414] block nbd8: Receive control failed (result -104) [ 995.268174][ T1131] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9510'. [ 995.328538][ T1134] netlink: 'syz.1.9512': attribute type 13 has an invalid length. [ 995.338563][ T1134] gretap0: refused to change device tx_queue_len [ 995.344943][ T1134] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 995.366670][ T1134] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9512'. [ 995.451026][ T1140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9515'. [ 995.459987][ T1140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9515'. [ 995.656807][ T1148] FAULT_INJECTION: forcing a failure. [ 995.656807][ T1148] name failslab, interval 1, probability 0, space 0, times 0 [ 995.669661][ T1148] CPU: 0 UID: 0 PID: 1148 Comm: syz.1.9518 Not tainted syzkaller #0 PREEMPT(full) [ 995.669686][ T1148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 995.669697][ T1148] Call Trace: [ 995.669706][ T1148] [ 995.669714][ T1148] dump_stack_lvl+0xe8/0x150 [ 995.669746][ T1148] should_fail_ex+0x40c/0x560 [ 995.669772][ T1148] should_failslab+0xa8/0x100 [ 995.669802][ T1148] __kmalloc_noprof+0xfe/0x720 [ 995.669825][ T1148] ? rcu_is_watching+0x15/0xb0 [ 995.669854][ T1148] ? tomoyo_realpath_from_path+0xef/0x640 [ 995.669875][ T1148] ? tomoyo_realpath_from_path+0xef/0x640 [ 995.669902][ T1148] tomoyo_realpath_from_path+0xef/0x640 [ 995.669934][ T1148] ? tomoyo_path_number_perm+0x219/0x5f0 [ 995.669960][ T1148] tomoyo_path_number_perm+0x246/0x5f0 [ 995.669989][ T1148] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 995.670012][ T1148] ? __lock_acquire+0x683/0x2cf0 [ 995.670050][ T1148] ? hook_file_ioctl+0x1f0/0x5f0 [ 995.670099][ T1148] ? __fget_files+0x2a/0x420 [ 995.670127][ T1148] ? __fget_files+0x2a/0x420 [ 995.670149][ T1148] ? __fget_files+0x3a2/0x420 [ 995.670172][ T1148] ? __fget_files+0x2a/0x420 [ 995.670199][ T1148] security_file_ioctl+0xc3/0x2a0 [ 995.670227][ T1148] __se_sys_ioctl+0x47/0x170 [ 995.670243][ T1148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.670271][ T1148] do_syscall_64+0x174/0x580 [ 995.670289][ T1148] ? trace_irq_disable+0x3b/0x140 [ 995.670313][ T1148] ? clear_bhb_loop+0x40/0x90 [ 995.670337][ T1148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.670356][ T1148] RIP: 0033:0x7ff48b99de99 [ 995.670375][ T1148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 995.670392][ T1148] RSP: 002b:00007ff48c7ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 995.670412][ T1148] RAX: ffffffffffffffda RBX: 00007ff48bc25fa0 RCX: 00007ff48b99de99 [ 995.670426][ T1148] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000003 [ 995.670439][ T1148] RBP: 00007ff48c7ab090 R08: 0000000000000000 R09: 0000000000000000 [ 995.670450][ T1148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 995.670461][ T1148] R13: 00007ff48bc26038 R14: 00007ff48bc25fa0 R15: 00007fff67b4f838 [ 995.670489][ T1148] [ 995.670497][ T1148] ERROR: Out of memory at tomoyo_realpath_from_path. [ 995.976161][ T1152] nbd9: detected capacity change from 0 to 63 [ 996.008287][T28414] block nbd9: Receive control failed (result -32) [ 996.027262][ T11] block nbd9: Dead connection, failed to find a fallback [ 996.034514][ T11] block nbd9: shutting down sockets [ 996.039730][ T11] blk_print_req_error: 79 callbacks suppressed [ 996.039746][ T11] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 996.055565][ T11] buffer_io_error: 138 callbacks suppressed [ 996.055581][ T11] Buffer I/O error on dev nbd9, logical block 0, async page read [ 996.069790][ T11] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 996.078916][ T11] Buffer I/O error on dev nbd9, logical block 1, async page read [ 996.086810][ T11] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 996.110315][ T11] Buffer I/O error on dev nbd9, logical block 2, async page read [ 996.118248][ T11] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 996.127821][ T11] Buffer I/O error on dev nbd9, logical block 3, async page read [ 996.136292][ T11] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 996.145397][ T11] Buffer I/O error on dev nbd9, logical block 0, async page read [ 996.153296][ T11] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 996.162490][ T11] Buffer I/O error on dev nbd9, logical block 1, async page read [ 996.170595][ T11] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 996.179705][ T11] Buffer I/O error on dev nbd9, logical block 2, async page read [ 996.187514][ T11] Buffer I/O error on dev nbd9, logical block 3, async page read [ 996.195560][ T11] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 996.204772][ T11] Buffer I/O error on dev nbd9, logical block 0, async page read [ 996.225384][ T11] Buffer I/O error on dev nbd9, logical block 1, async page read [ 996.233975][ T11] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 996.243694][ T11] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 996.254206][T32760] ldm_validate_partition_table(): Disk read failed. [ 996.262417][T32760] Dev nbd9: unable to read RDB block 0 [ 996.269655][T32760] nbd9: unable to read partition table [ 996.286739][T32760] ldm_validate_partition_table(): Disk read failed. [ 996.293680][T24115] wlan1: Creating new IBSS network, BSSID 92:49:9a:0a:36:f1 [ 996.295637][T32760] Dev nbd9: unable to read RDB block 0 [ 996.308929][T32760] nbd9: unable to read partition table [ 996.429183][ T1166] syz.3.9525: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 996.448542][ T1166] CPU: 1 UID: 0 PID: 1166 Comm: syz.3.9525 Not tainted syzkaller #0 PREEMPT(full) [ 996.448570][ T1166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 996.448582][ T1166] Call Trace: [ 996.448591][ T1166] [ 996.448599][ T1166] dump_stack_lvl+0xe8/0x150 [ 996.448634][ T1166] warn_alloc+0x24c/0x270 [ 996.448667][ T1166] ? stack_depot_save_flags+0x33/0x800 [ 996.448695][ T1166] ? __pfx_warn_alloc+0x10/0x10 [ 996.448721][ T1166] ? kasan_save_track+0x3e/0x80 [ 996.448750][ T1166] ? __kasan_kmalloc+0x93/0xb0 [ 996.448776][ T1166] ? xsk_setsockopt+0x52a/0x960 [ 996.448894][ T1166] ? do_sock_setsockopt+0x17c/0x1b0 [ 996.448923][ T1166] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 996.448950][ T1166] ? do_syscall_64+0x174/0x580 [ 996.448967][ T1166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.448995][ T1166] __vmalloc_node_range_noprof+0x12c/0x1730 [ 996.449062][ T1166] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 996.449090][ T1166] ? __kasan_kmalloc+0x93/0xb0 [ 996.449115][ T1166] ? __kmalloc_cache_noprof+0x32d/0x660 [ 996.449140][ T1166] ? __kmalloc_cache_noprof+0x150/0x660 [ 996.449173][ T1166] vmalloc_user_noprof+0xad/0xe0 [ 996.449197][ T1166] ? xskq_create+0xbf/0x170 [ 996.449266][ T1166] xskq_create+0xbf/0x170 [ 996.449296][ T1166] xsk_init_queue+0x8a/0xe0 [ 996.449325][ T1166] xsk_setsockopt+0x52a/0x960 [ 996.449351][ T1166] ? __fget_files+0x2a/0x420 [ 996.449376][ T1166] ? __pfx_xsk_setsockopt+0x10/0x10 [ 996.449402][ T1166] ? __pfx_aa_sk_perm+0x10/0x10 [ 996.449435][ T1166] ? aa_sock_opt_perm+0xff/0x1a0 [ 996.449459][ T1166] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 996.449480][ T1166] ? __pfx_xsk_setsockopt+0x10/0x10 [ 996.449508][ T1166] do_sock_setsockopt+0x17c/0x1b0 [ 996.449543][ T1166] __x64_sys_setsockopt+0x13d/0x1b0 [ 996.449575][ T1166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.449596][ T1166] do_syscall_64+0x174/0x580 [ 996.449614][ T1166] ? trace_irq_disable+0x3b/0x140 [ 996.449638][ T1166] ? clear_bhb_loop+0x40/0x90 [ 996.449661][ T1166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.449680][ T1166] RIP: 0033:0x7f34a419de99 [ 996.449701][ T1166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 996.449718][ T1166] RSP: 002b:00007f34a5067028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 996.449738][ T1166] RAX: ffffffffffffffda RBX: 00007f34a4425fa0 RCX: 00007f34a419de99 [ 996.449753][ T1166] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 996.449765][ T1166] RBP: 00007f34a4233eaf R08: 0000000000000004 R09: 0000000000000000 [ 996.449778][ T1166] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 996.449789][ T1166] R13: 00007f34a4426038 R14: 00007f34a4425fa0 R15: 00007ffc981eae18 [ 996.449818][ T1166] [ 996.449834][ T1166] Mem-Info: [ 996.764952][ T1166] active_anon:6017 inactive_anon:0 isolated_anon:0 [ 996.764952][ T1166] active_file:0 inactive_file:44198 isolated_file:0 [ 996.764952][ T1166] unevictable:768 dirty:216 writeback:0 [ 996.764952][ T1166] slab_reclaimable:13279 slab_unreclaimable:129235 [ 996.764952][ T1166] mapped:30109 shmem:1333 pagetables:1608 [ 996.764952][ T1166] sec_pagetables:0 bounce:0 [ 996.764952][ T1166] kernel_misc_reclaimable:0 [ 996.764952][ T1166] free:1285812 free_pcp:9792 free_cma:0 [ 996.812857][ T1166] Node 0 active_anon:24068kB inactive_anon:0kB active_file:0kB inactive_file:176592kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120436kB dirty:864kB writeback:0kB shmem:3796kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17624kB pagetables:5868kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 996.847331][ T1166] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 996.907294][ T1166] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 996.937441][ T1166] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 996.943429][ T1166] Node 0 DMA32 free:1180264kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23952kB inactive_anon:0kB active_file:0kB inactive_file:176592kB unevictable:1536kB writepending:864kB zspages:0kB present:3129332kB managed:2548676kB mlocked:0kB bounce:0kB free_pcp:36492kB local_pcp:8288kB free_cma:0kB [ 996.976483][ T1166] lowmem_reserve[]: 0 0 0 0 0 [ 996.981239][ T1166] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 997.023395][ T1166] lowmem_reserve[]: 0 0 0 0 0 [ 997.028180][ T1166] Node 1 Normal free:3951028kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 997.059836][ T1166] lowmem_reserve[]: 0 0 0 0 0 [ 997.064572][ T1166] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 997.077253][ T1166] Node 0 DMA32: 433*4kB (UME) 491*8kB (UM) 247*16kB (UM) 156*32kB (UME) 42*64kB (ME) 26*128kB (ME) 38*256kB (M) 22*512kB (UM) 8*1024kB (M) 6*2048kB (ME) 273*4096kB (UM) = 1180300kB [ 997.096017][ T1166] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 997.107541][ T1166] Node 1 Normal: 3*4kB (UM) 5*8kB (UM) 8*16kB (UM) 10*32kB (UM) 5*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 962*4096kB (UM) = 3951028kB [ 997.138142][ T1166] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 997.162980][ T1166] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 997.183181][ T1166] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 997.193415][ T1166] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 997.203163][ T1166] 45492 total pagecache pages [ 997.208324][ T1166] 0 pages in swap cache [ 997.222486][ T1166] Free swap = 124996kB [ 997.226707][ T1166] Total swap = 124996kB [ 997.232980][ T1166] 2097051 pages RAM [ 997.248341][ T1166] 0 pages HighMem/MovableOnly [ 997.253058][ T1166] 428202 pages reserved [ 997.257214][ T1166] 0 pages cma reserved [ 997.275430][ T1187] ieee802154 phy0 wpan0: encryption failed: -126 [ 997.453879][ T1198] bond0: entered promiscuous mode [ 997.500219][ T1198] bond0: left promiscuous mode [ 997.552683][ T1207] FAULT_INJECTION: forcing a failure. [ 997.552683][ T1207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 997.565831][ T1207] CPU: 0 UID: 0 PID: 1207 Comm: syz.4.9543 Not tainted syzkaller #0 PREEMPT(full) [ 997.565858][ T1207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 997.565870][ T1207] Call Trace: [ 997.565878][ T1207] [ 997.565887][ T1207] dump_stack_lvl+0xe8/0x150 [ 997.565922][ T1207] should_fail_ex+0x40c/0x560 [ 997.565949][ T1207] _copy_from_user+0x2d/0xb0 [ 997.565977][ T1207] wext_handle_ioctl+0xc7/0x1d0 [ 997.566008][ T1207] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 997.566031][ T1207] ? hook_file_ioctl+0x1f0/0x5f0 [ 997.566075][ T1207] sock_ioctl+0x159/0x7e0 [ 997.566100][ T1207] ? __pfx_sock_ioctl+0x10/0x10 [ 997.566122][ T1207] ? __fget_files+0x2a/0x420 [ 997.566146][ T1207] ? __fget_files+0x3a2/0x420 [ 997.566169][ T1207] ? __fget_files+0x2a/0x420 [ 997.566196][ T1207] ? bpf_lsm_file_ioctl+0x9/0x20 [ 997.566219][ T1207] ? __pfx_sock_ioctl+0x10/0x10 [ 997.566240][ T1207] __se_sys_ioctl+0xfc/0x170 [ 997.566259][ T1207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.566280][ T1207] do_syscall_64+0x174/0x580 [ 997.566298][ T1207] ? trace_irq_disable+0x3b/0x140 [ 997.566321][ T1207] ? clear_bhb_loop+0x40/0x90 [ 997.566344][ T1207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.566363][ T1207] RIP: 0033:0x7f7a5cf9de99 [ 997.566381][ T1207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 997.566398][ T1207] RSP: 002b:00007f7a5def2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 997.566418][ T1207] RAX: ffffffffffffffda RBX: 00007f7a5d225fa0 RCX: 00007f7a5cf9de99 [ 997.566432][ T1207] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000003 [ 997.566445][ T1207] RBP: 00007f7a5def2090 R08: 0000000000000000 R09: 0000000000000000 [ 997.566457][ T1207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 997.566469][ T1207] R13: 00007f7a5d226038 R14: 00007f7a5d225fa0 R15: 00007ffda38132e8 [ 997.566500][ T1207] [ 998.016866][ T1214] nbd10: detected capacity change from 0 to 63 [ 998.028863][T28414] block nbd10: Receive control failed (result -32) [ 998.030045][ T1614] block nbd10: Send control failed (result -32) [ 998.044701][ T1614] block nbd10: Request send failed, requeueing [ 998.060416][T29602] block nbd10: Dead connection, failed to find a fallback [ 998.072511][T29602] block nbd10: shutting down sockets [ 998.085497][T32760] ldm_validate_partition_table(): Disk read failed. [ 998.099050][ T1218] FAULT_INJECTION: forcing a failure. [ 998.099050][ T1218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 998.115386][T32760] Dev nbd10: unable to read RDB block 0 [ 998.118632][T32760] nbd10: unable to read partition table [ 998.152648][T32760] ldm_validate_partition_table(): Disk read failed. [ 998.173612][T32760] Dev nbd10: unable to read RDB block 0 [ 998.196330][T32760] nbd10: unable to read partition table [ 998.238122][ T1218] CPU: 0 UID: 0 PID: 1218 Comm: syz.4.9548 Not tainted syzkaller #0 PREEMPT(full) [ 998.238147][ T1218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 998.238158][ T1218] Call Trace: [ 998.238166][ T1218] [ 998.238175][ T1218] dump_stack_lvl+0xe8/0x150 [ 998.238208][ T1218] should_fail_ex+0x40c/0x560 [ 998.238235][ T1218] _copy_from_iter+0x1d3/0x1660 [ 998.238259][ T1218] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 998.238282][ T1218] ? rcu_is_watching+0x15/0xb0 [ 998.238311][ T1218] ? trace_kmem_cache_alloc+0x29/0xe0 [ 998.238334][ T1218] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 998.238356][ T1218] ? __pfx__copy_from_iter+0x10/0x10 [ 998.238378][ T1218] ? __alloc_skb+0x276/0x7a0 [ 998.238399][ T1218] ? __alloc_skb+0x276/0x7a0 [ 998.238425][ T1218] ? netlink_sendmsg+0x650/0xb40 [ 998.238441][ T1218] ? skb_put+0x112/0x210 [ 998.238462][ T1218] netlink_sendmsg+0x6c0/0xb40 [ 998.238483][ T1218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 998.238501][ T1218] ? aa_sock_msg_perm+0xf1/0x1b0 [ 998.238531][ T1218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 998.238546][ T1218] sock_sendmsg_nosec+0x13a/0x180 [ 998.238569][ T1218] ____sys_sendmsg+0x54e/0x850 [ 998.238589][ T1218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 998.238609][ T1218] ? import_iovec+0x73/0xa0 [ 998.238631][ T1218] ___sys_sendmsg+0x2a5/0x360 [ 998.238644][ T1218] ? __lock_acquire+0x683/0x2cf0 [ 998.238666][ T1218] ? __pfx____sys_sendmsg+0x10/0x10 [ 998.238706][ T1218] ? __fget_files+0x2a/0x420 [ 998.238725][ T1218] ? __fget_files+0x3a2/0x420 [ 998.238751][ T1218] __x64_sys_sendmsg+0x1b1/0x290 [ 998.238769][ T1218] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 998.238798][ T1218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.238814][ T1218] do_syscall_64+0x174/0x580 [ 998.238829][ T1218] ? trace_irq_disable+0x3b/0x140 [ 998.238847][ T1218] ? clear_bhb_loop+0x40/0x90 [ 998.238864][ T1218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.238879][ T1218] RIP: 0033:0x7f7a5cf9de99 [ 998.238895][ T1218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 998.238909][ T1218] RSP: 002b:00007f7a5def2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 998.238927][ T1218] RAX: ffffffffffffffda RBX: 00007f7a5d225fa0 RCX: 00007f7a5cf9de99 [ 998.238937][ T1218] RDX: 0000000000000010 RSI: 00002000000002c0 RDI: 0000000000000004 [ 998.238948][ T1218] RBP: 00007f7a5def2090 R08: 0000000000000000 R09: 0000000000000000 [ 998.238958][ T1218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.238967][ T1218] R13: 00007f7a5d226038 R14: 00007f7a5d225fa0 R15: 00007ffda38132e8 [ 998.238995][ T1218] [ 998.292552][ T1236] Cannot find del_set index 3 as target [ 998.329441][ T1241] openvswitch: netlink: Multiple metadata blocks provided [ 999.163983][ T1282] netlink: 'syz.4.9567': attribute type 1 has an invalid length. [ 999.172523][ T1282] __nla_validate_parse: 6 callbacks suppressed [ 999.172542][ T1282] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9567'. [ 999.291275][ T1290] openvswitch: netlink: Multiple metadata blocks provided [ 999.300759][ T1291] netlink: 'syz.3.9570': attribute type 7 has an invalid length. [ 999.322660][ T1291] netlink: 'syz.3.9570': attribute type 7 has an invalid length. [ 999.463242][ T1299] netlink: 'syz.0.9576': attribute type 7 has an invalid length. [ 999.471481][ T1299] FAULT_INJECTION: forcing a failure. [ 999.471481][ T1299] name failslab, interval 1, probability 0, space 0, times 0 [ 999.486530][ T1299] CPU: 0 UID: 0 PID: 1299 Comm: syz.0.9576 Not tainted syzkaller #0 PREEMPT(full) [ 999.486557][ T1299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 999.486568][ T1299] Call Trace: [ 999.486576][ T1299] [ 999.486584][ T1299] dump_stack_lvl+0xe8/0x150 [ 999.486617][ T1299] should_fail_ex+0x40c/0x560 [ 999.486640][ T1299] ? alloc_netdev_mqs+0xd45/0x12b0 [ 999.486663][ T1299] should_failslab+0xa8/0x100 [ 999.486693][ T1299] __kvmalloc_node_noprof+0x176/0x860 [ 999.486719][ T1299] ? __kmalloc_cache_noprof+0x32d/0x660 [ 999.486743][ T1299] ? __kmalloc_cache_noprof+0x150/0x660 [ 999.486767][ T1299] ? alloc_netdev_mqs+0xd45/0x12b0 [ 999.486796][ T1299] alloc_netdev_mqs+0xd45/0x12b0 [ 999.486825][ T1299] rtnl_create_link+0x321/0xd70 [ 999.486855][ T1299] rtnl_newlink_create+0x25f/0xb00 [ 999.486884][ T1299] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 999.486908][ T1299] ? __pfx___mutex_lock+0x10/0x10 [ 999.486938][ T1299] ? full_name_hash+0x92/0xe0 [ 999.486967][ T1299] rtnl_newlink+0x167f/0x1bd0 [ 999.487011][ T1299] ? __pfx_rtnl_newlink+0x10/0x10 [ 999.487048][ T1299] ? __lock_acquire+0x683/0x2cf0 [ 999.487089][ T1299] ? unwind_next_frame+0x8f/0x2550 [ 999.487117][ T1299] ? is_bpf_text_address+0x26/0x2b0 [ 999.487156][ T1299] ? is_bpf_text_address+0x26/0x2b0 [ 999.487188][ T1299] ? __lock_acquire+0x683/0x2cf0 [ 999.487216][ T1299] ? kernel_text_address+0xa5/0xe0 [ 999.487246][ T1299] ? __kernel_text_address+0xd/0x30 [ 999.487273][ T1299] ? unwind_get_return_address+0x4d/0x90 [ 999.487292][ T1299] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 999.487316][ T1299] ? arch_stack_walk+0xfb/0x150 [ 999.487344][ T1299] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 999.487386][ T1299] ? __pfx_rtnl_newlink+0x10/0x10 [ 999.487412][ T1299] rtnetlink_rcv_msg+0x802/0xc00 [ 999.487437][ T1299] ? netlink_sendmsg+0x5d4/0xb40 [ 999.487460][ T1299] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 999.487486][ T1299] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 999.487522][ T1299] ? __lock_acquire+0x683/0x2cf0 [ 999.487560][ T1299] netlink_rcv_skb+0x226/0x4a0 [ 999.487581][ T1299] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 999.487609][ T1299] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 999.487641][ T1299] ? netlink_deliver_tap+0x2e/0x1b0 [ 999.487659][ T1299] ? netlink_deliver_tap+0x2e/0x1b0 [ 999.487684][ T1299] netlink_unicast+0x7bb/0x940 [ 999.487724][ T1299] netlink_sendmsg+0x813/0xb40 [ 999.487754][ T1299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 999.487779][ T1299] ? aa_sock_msg_perm+0xf1/0x1b0 [ 999.487806][ T1299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 999.487825][ T1299] sock_sendmsg_nosec+0x13a/0x180 [ 999.487852][ T1299] ____sys_sendmsg+0x54e/0x850 [ 999.487878][ T1299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 999.487906][ T1299] ? import_iovec+0x73/0xa0 [ 999.487938][ T1299] ___sys_sendmsg+0x2a5/0x360 [ 999.487956][ T1299] ? __lock_acquire+0x683/0x2cf0 [ 999.487985][ T1299] ? __pfx____sys_sendmsg+0x10/0x10 [ 999.488002][ T1299] ? __lock_acquire+0x683/0x2cf0 [ 999.488031][ T1299] ? kstrtouint+0x6e/0xe0 [ 999.488093][ T1299] __sys_sendmmsg+0x273/0x4d0 [ 999.488117][ T1299] ? __pfx___sys_sendmmsg+0x10/0x10 [ 999.488146][ T1299] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 999.488180][ T1299] ? ksys_write+0x242/0x270 [ 999.488212][ T1299] ? __pfx_ksys_write+0x10/0x10 [ 999.488247][ T1299] __x64_sys_sendmmsg+0xa0/0xc0 [ 999.488266][ T1299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.488287][ T1299] do_syscall_64+0x174/0x580 [ 999.488304][ T1299] ? trace_irq_disable+0x3b/0x140 [ 999.488328][ T1299] ? clear_bhb_loop+0x40/0x90 [ 999.488352][ T1299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.488372][ T1299] RIP: 0033:0x7f69c9d9de99 [ 999.488390][ T1299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 999.488406][ T1299] RSP: 002b:00007f69c7ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 999.488427][ T1299] RAX: ffffffffffffffda RBX: 00007f69ca025fa0 RCX: 00007f69c9d9de99 [ 999.488441][ T1299] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 999.488454][ T1299] RBP: 00007f69c7ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 999.488466][ T1299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 999.488477][ T1299] R13: 00007f69ca026038 R14: 00007f69ca025fa0 R15: 00007ffd2290b328 [ 999.488516][ T1299] [ 999.498778][ T1299] netlink: 'syz.0.9576': attribute type 7 has an invalid length. [ 1000.196324][ T1315] Cannot find del_set index 3 as target [ 1000.223328][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 1000.250489][ T1321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9582'. [ 1000.267373][ T1321] bond0: left promiscuous mode [ 1000.279186][ T1321] bond_slave_0: left promiscuous mode [ 1000.291835][ T1321] bond_slave_1: left promiscuous mode [ 1000.311373][ T1321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.329926][ T1321] batman_adv: batadv0: Adding interface: bond0 [ 1000.336485][ T1321] batman_adv: batadv0: The MTU of interface bond0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.407391][ T1321] batman_adv: batadv0: Interface activated: bond0 [ 1000.451806][ T1331] netlink: 'syz.3.9584': attribute type 11 has an invalid length. [ 1000.500964][ T1334] netlink: 'syz.4.9587': attribute type 1 has an invalid length. [ 1000.516471][ T1336] openvswitch: netlink: Multiple metadata blocks provided [ 1000.529430][ T1334] bond1: entered promiscuous mode [ 1000.535352][ T1334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1000.593597][ T1334] bond1: (slave bridge3): making interface the new active one [ 1000.613429][ T1334] bridge3: entered promiscuous mode [ 1000.624303][ T1334] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 1000.663047][ T1344] netlink: 'syz.1.9589': attribute type 7 has an invalid length. [ 1000.675553][ T1334] bond1: (slave bridge4): Enslaving as a backup interface with an up link [ 1000.710928][ T1334] bond1: (slave bridge5): Enslaving as a backup interface with an up link [ 1000.719786][ T1344] FAULT_INJECTION: forcing a failure. [ 1000.719786][ T1344] name failslab, interval 1, probability 0, space 0, times 0 [ 1000.733327][ T1344] CPU: 0 UID: 0 PID: 1344 Comm: syz.1.9589 Not tainted syzkaller #0 PREEMPT(full) [ 1000.733350][ T1344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1000.733361][ T1344] Call Trace: [ 1000.733368][ T1344] [ 1000.733375][ T1344] dump_stack_lvl+0xe8/0x150 [ 1000.733407][ T1344] should_fail_ex+0x40c/0x560 [ 1000.733430][ T1344] should_failslab+0xa8/0x100 [ 1000.733458][ T1344] __kmalloc_cache_noprof+0xa8/0x660 [ 1000.733480][ T1344] ? __kmalloc_cache_noprof+0x150/0x660 [ 1000.733502][ T1344] ? alloc_netdev_mqs+0xca1/0x12b0 [ 1000.733523][ T1344] ? alloc_netdev_mqs+0xca1/0x12b0 [ 1000.733548][ T1344] alloc_netdev_mqs+0xca1/0x12b0 [ 1000.733576][ T1344] rtnl_create_link+0x321/0xd70 [ 1000.733599][ T1344] rtnl_newlink_create+0x25f/0xb00 [ 1000.733618][ T1344] ? __mutex_lock+0x5d4/0x1550 [ 1000.733635][ T1344] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1000.733653][ T1344] ? __pfx___mutex_lock+0x10/0x10 [ 1000.733675][ T1344] ? full_name_hash+0x92/0xe0 [ 1000.733698][ T1344] rtnl_newlink+0x167f/0x1bd0 [ 1000.733731][ T1344] ? __pfx_rtnl_newlink+0x10/0x10 [ 1000.733757][ T1344] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 1000.733800][ T1344] ? kasan_quarantine_put+0xbb/0x1f0 [ 1000.733819][ T1344] ? lockdep_hardirqs_on+0x7a/0x110 [ 1000.733844][ T1344] ? nlmon_xmit+0xb0/0x100 [ 1000.733864][ T1344] ? kmem_cache_free+0x182/0x650 [ 1000.733891][ T1344] ? __lock_acquire+0x683/0x2cf0 [ 1000.733933][ T1344] ? __dev_queue_xmit+0x29b/0x3820 [ 1000.733952][ T1344] ? __local_bh_enable_ip+0xd0/0x130 [ 1000.733971][ T1344] ? lockdep_hardirqs_on+0x7a/0x110 [ 1000.733993][ T1344] ? __dev_queue_xmit+0x29b/0x3820 [ 1000.734008][ T1344] ? __local_bh_enable_ip+0xd0/0x130 [ 1000.734024][ T1344] ? __dev_queue_xmit+0x29b/0x3820 [ 1000.734045][ T1344] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1000.734079][ T1344] ? __pfx_rtnl_newlink+0x10/0x10 [ 1000.734099][ T1344] rtnetlink_rcv_msg+0x802/0xc00 [ 1000.734123][ T1344] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1000.734143][ T1344] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1000.734163][ T1344] ? ref_tracker_free+0x689/0x830 [ 1000.734184][ T1344] ? __pfx_ref_tracker_free+0x10/0x10 [ 1000.734211][ T1344] netlink_rcv_skb+0x226/0x4a0 [ 1000.734228][ T1344] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1000.734252][ T1344] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1000.734277][ T1344] ? netlink_deliver_tap+0x2e/0x1b0 [ 1000.734292][ T1344] ? netlink_deliver_tap+0x2e/0x1b0 [ 1000.734312][ T1344] netlink_unicast+0x7bb/0x940 [ 1000.734342][ T1344] netlink_sendmsg+0x813/0xb40 [ 1000.734365][ T1344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1000.734384][ T1344] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1000.734405][ T1344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1000.734419][ T1344] sock_sendmsg_nosec+0x13a/0x180 [ 1000.734440][ T1344] ____sys_sendmsg+0x54e/0x850 [ 1000.734460][ T1344] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1000.734482][ T1344] ? import_iovec+0x73/0xa0 [ 1000.734506][ T1344] ___sys_sendmsg+0x2a5/0x360 [ 1000.734520][ T1344] ? __lock_acquire+0x683/0x2cf0 [ 1000.734543][ T1344] ? __pfx____sys_sendmsg+0x10/0x10 [ 1000.734556][ T1344] ? __lock_acquire+0x683/0x2cf0 [ 1000.734580][ T1344] ? kstrtouint+0x6e/0xe0 [ 1000.734629][ T1344] __sys_sendmmsg+0x273/0x4d0 [ 1000.734649][ T1344] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1000.734671][ T1344] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1000.734697][ T1344] ? ksys_write+0x242/0x270 [ 1000.734721][ T1344] ? __pfx_ksys_write+0x10/0x10 [ 1000.734754][ T1344] __x64_sys_sendmmsg+0xa0/0xc0 [ 1000.734769][ T1344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.734786][ T1344] do_syscall_64+0x174/0x580 [ 1000.734799][ T1344] ? trace_irq_disable+0x3b/0x140 [ 1000.734819][ T1344] ? clear_bhb_loop+0x40/0x90 [ 1000.734838][ T1344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.734854][ T1344] RIP: 0033:0x7ff48b99de99 [ 1000.734869][ T1344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1000.734883][ T1344] RSP: 002b:00007ff48c7ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1000.734900][ T1344] RAX: ffffffffffffffda RBX: 00007ff48bc25fa0 RCX: 00007ff48b99de99 [ 1000.734911][ T1344] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1000.734922][ T1344] RBP: 00007ff48c7ab090 R08: 0000000000000000 R09: 0000000000000000 [ 1000.734931][ T1344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1000.734941][ T1344] R13: 00007ff48bc26038 R14: 00007ff48bc25fa0 R15: 00007fff67b4f838 [ 1000.734967][ T1344] [ 1001.213012][ T1344] netlink: 'syz.1.9589': attribute type 7 has an invalid length. [ 1001.235829][ T1334] bond1: (slave bridge6): Enslaving as a backup interface with an up link [ 1001.256961][ T1334] bond1: (slave bridge7): Enslaving as a backup interface with an up link [ 1001.280620][ T1334] bond1: (slave bridge8): Enslaving as a backup interface with an up link [ 1001.298538][ T1334] bond1: (slave bridge9): Enslaving as a backup interface with an up link [ 1001.330661][ T1334] bond1: (slave bridge10): Enslaving as a backup interface with an up link [ 1001.379746][ T1334] bond1: (slave bridge11): Enslaving as a backup interface with an up link [ 1001.396422][ T1349] netlink: 'syz.0.9590': attribute type 8 has an invalid length. [ 1001.406968][ T1353] netlink: 'syz.0.9590': attribute type 8 has an invalid length. [ 1001.597207][ T1364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9596'. [ 1001.622359][ T1364] netlink: 'syz.0.9596': attribute type 10 has an invalid length. [ 1001.630480][ T1364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9596'. [ 1001.880228][ T1388] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.9602'. [ 1001.889937][ T1388] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.9602'. [ 1002.007495][ T1392] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9604'. [ 1002.082474][ T1399] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:11 [ 1002.219602][ T1407] sctp: [Deprecated]: syz.2.9611 (pid 1407) Use of int in max_burst socket option deprecated. [ 1002.219602][ T1407] Use struct sctp_assoc_value instead [ 1002.295872][ T1411] netlink: 'syz.4.9613': attribute type 1 has an invalid length. [ 1002.369957][ T1411] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1002.390324][ T1417] bond2: (slave gretap2): making interface the new active one [ 1002.400705][ T1417] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 1002.473826][ T1423] netlink: 100 bytes leftover after parsing attributes in process `syz.0.9617'. [ 1002.496389][ T1411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9613'. [ 1002.506616][ T1423] netlink: 100 bytes leftover after parsing attributes in process `syz.0.9617'. [ 1002.522538][ T1417] syz.4.9613 (1417) used greatest stack depth: 18144 bytes left [ 1002.681733][ T1435] FAULT_INJECTION: forcing a failure. [ 1002.681733][ T1435] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.694916][ T1435] CPU: 0 UID: 0 PID: 1435 Comm: syz.4.9622 Not tainted syzkaller #0 PREEMPT(full) [ 1002.694941][ T1435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1002.694951][ T1435] Call Trace: [ 1002.694959][ T1435] [ 1002.694967][ T1435] dump_stack_lvl+0xe8/0x150 [ 1002.695000][ T1435] should_fail_ex+0x40c/0x560 [ 1002.695028][ T1435] should_failslab+0xa8/0x100 [ 1002.695055][ T1435] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1002.695078][ T1435] ? mas_alloc_nodes+0x291/0x350 [ 1002.695217][ T1435] ? mas_alloc_nodes+0x291/0x350 [ 1002.695248][ T1435] mas_alloc_nodes+0x291/0x350 [ 1002.695277][ T1435] mas_preallocate+0x2cf/0x630 [ 1002.695303][ T1435] ? rcu_is_watching+0x15/0xb0 [ 1002.695333][ T1435] ? __pfx_mas_preallocate+0x10/0x10 [ 1002.695365][ T1435] ? anon_vma_name+0x61/0x210 [ 1002.695390][ T1435] ? __mas_set_range+0x11a/0x3a0 [ 1002.695408][ T1435] __split_vma+0x318/0xa50 [ 1002.695429][ T1435] ? validate_mm+0x42e/0x4f0 [ 1002.695454][ T1435] ? __pfx___split_vma+0x10/0x10 [ 1002.695468][ T1435] ? rcu_is_watching+0x15/0xb0 [ 1002.695502][ T1435] ? __pfx___up_read+0x10/0x10 [ 1002.695527][ T1435] vms_gather_munmap_vmas+0x322/0x1370 [ 1002.695554][ T1435] ? vms_complete_munmap_vmas+0x980/0xbe0 [ 1002.695591][ T1435] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1002.695625][ T1435] ? arch_get_unmapped_area_topdown+0x9e1/0xb50 [ 1002.695664][ T1435] do_vmi_align_munmap+0x2b4/0x4b0 [ 1002.695707][ T1435] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1002.695757][ T1435] do_vmi_munmap+0x252/0x2d0 [ 1002.695788][ T1435] __vm_munmap+0x241/0x3e0 [ 1002.695807][ T1435] ? __pfx___vm_munmap+0x10/0x10 [ 1002.695820][ T1435] ? vm_mmap_pgoff+0x35a/0x4e0 [ 1002.695862][ T1435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.695883][ T1435] __x64_sys_munmap+0x60/0x70 [ 1002.695905][ T1435] do_syscall_64+0x174/0x580 [ 1002.695921][ T1435] ? trace_irq_disable+0x3b/0x140 [ 1002.695943][ T1435] ? clear_bhb_loop+0x40/0x90 [ 1002.695963][ T1435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.695981][ T1435] RIP: 0033:0x7f7a5cf9dcc7 [ 1002.695998][ T1435] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.696014][ T1435] RSP: 002b:00007f7a5def0d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 1002.696032][ T1435] RAX: ffffffffffffffda RBX: 00007f7a54000000 RCX: 00007f7a5cf9dcc7 [ 1002.696045][ T1435] RDX: 0000000000000000 RSI: 0000000003000000 RDI: 00007f7a58000000 [ 1002.696056][ T1435] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 1002.696066][ T1435] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 1002.696078][ T1435] R13: 0000000000001000 R14: 00007f7a58000000 R15: 0000000001000000 [ 1002.696106][ T1435] [ 1003.133462][ T1443] FAULT_INJECTION: forcing a failure. [ 1003.133462][ T1443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1003.172304][ T1443] CPU: 1 UID: 0 PID: 1443 Comm: syz.2.9627 Not tainted syzkaller #0 PREEMPT(full) [ 1003.172331][ T1443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1003.172342][ T1443] Call Trace: [ 1003.172349][ T1443] [ 1003.172358][ T1443] dump_stack_lvl+0xe8/0x150 [ 1003.172391][ T1443] should_fail_ex+0x40c/0x560 [ 1003.172417][ T1443] _copy_from_user+0x2d/0xb0 [ 1003.172445][ T1443] ___sys_recvmsg+0x173/0x5a0 [ 1003.172463][ T1443] ? ktime_get_ts64+0xa9/0x410 [ 1003.172490][ T1443] ? __pfx____sys_recvmsg+0x10/0x10 [ 1003.172524][ T1443] ? ktime_get_ts64+0xa9/0x410 [ 1003.172573][ T1443] do_recvmmsg+0x31a/0x7f0 [ 1003.172601][ T1443] ? __pfx_do_recvmmsg+0x10/0x10 [ 1003.172634][ T1443] ? get_timespec64+0x119/0x1b0 [ 1003.172659][ T1443] ? __pfx_get_timespec64+0x10/0x10 [ 1003.172694][ T1443] __x64_sys_recvmmsg+0x1b7/0x250 [ 1003.172717][ T1443] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1003.172745][ T1443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.172766][ T1443] do_syscall_64+0x174/0x580 [ 1003.172784][ T1443] ? trace_irq_disable+0x3b/0x140 [ 1003.172807][ T1443] ? clear_bhb_loop+0x40/0x90 [ 1003.172831][ T1443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.172850][ T1443] RIP: 0033:0x7f30d879de99 [ 1003.172868][ T1443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1003.172885][ T1443] RSP: 002b:00007f30d69f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1003.172905][ T1443] RAX: ffffffffffffffda RBX: 00007f30d8a25fa0 RCX: 00007f30d879de99 [ 1003.172919][ T1443] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 1003.172933][ T1443] RBP: 00007f30d69f6090 R08: 0000200000003700 R09: 0000000000000000 [ 1003.172945][ T1443] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002 [ 1003.172957][ T1443] R13: 00007f30d8a26038 R14: 00007f30d8a25fa0 R15: 00007ffe826d0b28 [ 1003.172988][ T1443] [ 1003.452933][ T4994] udevd[4994]: worker [29944] /devices/virtual/block/nbd3 is taking a long time [ 1003.463647][ T4994] udevd[4994]: worker [30018] /devices/virtual/block/nbd4 is taking a long time [ 1003.956920][ T1463] FAULT_INJECTION: forcing a failure. [ 1003.956920][ T1463] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.969581][ T1463] CPU: 0 UID: 0 PID: 1463 Comm: syz.4.9635 Not tainted syzkaller #0 PREEMPT(full) [ 1003.969607][ T1463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1003.969619][ T1463] Call Trace: [ 1003.969627][ T1463] [ 1003.969636][ T1463] dump_stack_lvl+0xe8/0x150 [ 1003.969670][ T1463] should_fail_ex+0x40c/0x560 [ 1003.969698][ T1463] should_failslab+0xa8/0x100 [ 1003.969727][ T1463] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1003.969751][ T1463] ? mas_alloc_nodes+0x291/0x350 [ 1003.969778][ T1463] ? mas_alloc_nodes+0x291/0x350 [ 1003.969812][ T1463] mas_alloc_nodes+0x291/0x350 [ 1003.969845][ T1463] mas_preallocate+0x2cf/0x630 [ 1003.969874][ T1463] ? rcu_is_watching+0x15/0xb0 [ 1003.969905][ T1463] ? __pfx_mas_preallocate+0x10/0x10 [ 1003.969942][ T1463] ? anon_vma_name+0x61/0x210 [ 1003.969966][ T1463] ? __mas_set_range+0x11a/0x3a0 [ 1003.969986][ T1463] __split_vma+0x318/0xa50 [ 1003.970010][ T1463] ? validate_mm+0x42e/0x4f0 [ 1003.970036][ T1463] ? __pfx___split_vma+0x10/0x10 [ 1003.970053][ T1463] ? rcu_is_watching+0x15/0xb0 [ 1003.970086][ T1463] ? __pfx___up_read+0x10/0x10 [ 1003.970112][ T1463] vms_gather_munmap_vmas+0x322/0x1370 [ 1003.970139][ T1463] ? vms_complete_munmap_vmas+0x980/0xbe0 [ 1003.970175][ T1463] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1003.970206][ T1463] ? arch_get_unmapped_area_topdown+0x9e1/0xb50 [ 1003.970243][ T1463] do_vmi_align_munmap+0x2b4/0x4b0 [ 1003.970284][ T1463] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1003.970342][ T1463] do_vmi_munmap+0x252/0x2d0 [ 1003.970376][ T1463] __vm_munmap+0x241/0x3e0 [ 1003.970397][ T1463] ? __pfx___vm_munmap+0x10/0x10 [ 1003.970411][ T1463] ? vm_mmap_pgoff+0x35a/0x4e0 [ 1003.970457][ T1463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.970478][ T1463] __x64_sys_munmap+0x60/0x70 [ 1003.970501][ T1463] do_syscall_64+0x174/0x580 [ 1003.970516][ T1463] ? trace_irq_disable+0x3b/0x140 [ 1003.970538][ T1463] ? clear_bhb_loop+0x40/0x90 [ 1003.970562][ T1463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.970579][ T1463] RIP: 0033:0x7f7a5cf9dcc7 [ 1003.970598][ T1463] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1003.970614][ T1463] RSP: 002b:00007f7a5def0d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 1003.970635][ T1463] RAX: ffffffffffffffda RBX: 00007f7a54000000 RCX: 00007f7a5cf9dcc7 [ 1003.970649][ T1463] RDX: 0000000000000000 RSI: 0000000003000000 RDI: 00007f7a58000000 [ 1003.970662][ T1463] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 1003.970674][ T1463] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 1003.970686][ T1463] R13: 0000000000001000 R14: 00007f7a58000000 R15: 0000000001000000 [ 1003.970718][ T1463] [ 1004.427509][ T1474] __nla_validate_parse: 66 callbacks suppressed [ 1004.427530][ T1474] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9641'. [ 1004.546389][ T11] block nbd6: Possible stuck request ffff888027b20000: control (read@0,1024B). Runtime 30 seconds [ 1004.557511][ T11] block nbd6: Possible stuck request ffff888027b201c0: control (read@1024,1024B). Runtime 30 seconds [ 1004.568829][ T11] block nbd6: Possible stuck request ffff888027b20380: control (read@2048,1024B). Runtime 30 seconds [ 1004.579755][ T11] block nbd6: Possible stuck request ffff888027b20540: control (read@3072,1024B). Runtime 30 seconds [ 1004.647085][ T1485] netlink: 'syz.4.9643': attribute type 7 has an invalid length. [ 1004.659945][ T1485] netlink: 'syz.4.9643': attribute type 7 has an invalid length. [ 1004.669494][ T1488] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9644'. [ 1004.692731][ T1474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9641'. [ 1005.389736][ T1520] FAULT_INJECTION: forcing a failure. [ 1005.389736][ T1520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1005.396536][ T1522] FAULT_INJECTION: forcing a failure. [ 1005.396536][ T1522] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.411446][ T1520] CPU: 0 UID: 0 PID: 1520 Comm: syz.0.9656 Not tainted syzkaller #0 PREEMPT(full) [ 1005.411474][ T1520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1005.411487][ T1520] Call Trace: [ 1005.411495][ T1520] [ 1005.411503][ T1520] dump_stack_lvl+0xe8/0x150 [ 1005.411537][ T1520] should_fail_ex+0x40c/0x560 [ 1005.411564][ T1520] _copy_from_user+0x2d/0xb0 [ 1005.411592][ T1520] ___sys_recvmsg+0x173/0x5a0 [ 1005.411636][ T1520] ? ktime_get_ts64+0xa9/0x410 [ 1005.411665][ T1520] ? __pfx____sys_recvmsg+0x10/0x10 [ 1005.411690][ T1520] ? ktime_get_ts64+0xa9/0x410 [ 1005.411739][ T1520] do_recvmmsg+0x31a/0x7f0 [ 1005.411766][ T1520] ? __pfx_do_recvmmsg+0x10/0x10 [ 1005.411797][ T1520] ? get_timespec64+0x119/0x1b0 [ 1005.411822][ T1520] ? __pfx_get_timespec64+0x10/0x10 [ 1005.411858][ T1520] __x64_sys_recvmmsg+0x1b7/0x250 [ 1005.411877][ T1520] ? __irq_exit_rcu+0xca/0x220 [ 1005.411899][ T1520] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1005.411926][ T1520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.411946][ T1520] do_syscall_64+0x174/0x580 [ 1005.411967][ T1520] ? clear_bhb_loop+0x40/0x90 [ 1005.411989][ T1520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.412008][ T1520] RIP: 0033:0x7f69c9d9de99 [ 1005.412026][ T1520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1005.412042][ T1520] RSP: 002b:00007f69c7ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1005.412062][ T1520] RAX: ffffffffffffffda RBX: 00007f69ca025fa0 RCX: 00007f69c9d9de99 [ 1005.412076][ T1520] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 1005.412090][ T1520] RBP: 00007f69c7ff6090 R08: 0000200000003700 R09: 0000000000000000 [ 1005.412102][ T1520] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002 [ 1005.412113][ T1520] R13: 00007f69ca026038 R14: 00007f69ca025fa0 R15: 00007ffd2290b328 [ 1005.412144][ T1520] [ 1005.535074][ T1525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9660'. [ 1005.596207][ T1522] CPU: 1 UID: 0 PID: 1522 Comm: syz.3.9658 Not tainted syzkaller #0 PREEMPT(full) [ 1005.596235][ T1522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1005.596247][ T1522] Call Trace: [ 1005.596256][ T1522] [ 1005.596264][ T1522] dump_stack_lvl+0xe8/0x150 [ 1005.596297][ T1522] should_fail_ex+0x40c/0x560 [ 1005.596323][ T1522] should_failslab+0xa8/0x100 [ 1005.596352][ T1522] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1005.596376][ T1522] ? skb_clone+0x212/0x3a0 [ 1005.596393][ T1522] ? skb_clone+0x212/0x3a0 [ 1005.596418][ T1522] skb_clone+0x212/0x3a0 [ 1005.596440][ T1522] __netlink_deliver_tap+0x413/0x860 [ 1005.596471][ T1522] ? netlink_deliver_tap+0x2e/0x1b0 [ 1005.596492][ T1522] netlink_deliver_tap+0x19c/0x1b0 [ 1005.596512][ T1522] netlink_sendskb+0x68/0x140 [ 1005.596541][ T1522] netlink_rcv_skb+0x2a4/0x4a0 [ 1005.596561][ T1522] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1005.596589][ T1522] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1005.596629][ T1522] ? netlink_deliver_tap+0x2e/0x1b0 [ 1005.596648][ T1522] ? netlink_deliver_tap+0x2e/0x1b0 [ 1005.596672][ T1522] netlink_unicast+0x7bb/0x940 [ 1005.596710][ T1522] netlink_sendmsg+0x813/0xb40 [ 1005.596739][ T1522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1005.596763][ T1522] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1005.596787][ T1522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1005.596805][ T1522] sock_sendmsg_nosec+0x13a/0x180 [ 1005.596838][ T1522] ____sys_sendmsg+0x54e/0x850 [ 1005.596862][ T1522] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1005.596890][ T1522] ? import_iovec+0x73/0xa0 [ 1005.596919][ T1522] ___sys_sendmsg+0x2a5/0x360 [ 1005.596936][ T1522] ? __lock_acquire+0x683/0x2cf0 [ 1005.596965][ T1522] ? __pfx____sys_sendmsg+0x10/0x10 [ 1005.596980][ T1522] ? __lock_acquire+0x683/0x2cf0 [ 1005.597008][ T1522] ? kstrtouint+0x6e/0xe0 [ 1005.597069][ T1522] __sys_sendmmsg+0x273/0x4d0 [ 1005.597093][ T1522] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1005.597120][ T1522] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1005.597154][ T1522] ? ksys_write+0x242/0x270 [ 1005.597184][ T1522] ? __pfx_ksys_write+0x10/0x10 [ 1005.597216][ T1522] __x64_sys_sendmmsg+0xa0/0xc0 [ 1005.597235][ T1522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.597254][ T1522] do_syscall_64+0x174/0x580 [ 1005.597273][ T1522] ? trace_irq_disable+0x3b/0x140 [ 1005.597297][ T1522] ? clear_bhb_loop+0x40/0x90 [ 1005.597321][ T1522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.597341][ T1522] RIP: 0033:0x7f34a419de99 [ 1005.597360][ T1522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1005.597377][ T1522] RSP: 002b:00007f34a5067028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1005.597397][ T1522] RAX: ffffffffffffffda RBX: 00007f34a4425fa0 RCX: 00007f34a419de99 [ 1005.597412][ T1522] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1005.597425][ T1522] RBP: 00007f34a5067090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.597438][ T1522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1005.597449][ T1522] R13: 00007f34a4426038 R14: 00007f34a4425fa0 R15: 00007ffc981eae18 [ 1005.597482][ T1522] [ 1005.601087][ T1522] validate_nla: 1 callbacks suppressed [ 1005.601103][ T1522] netlink: 'syz.3.9658': attribute type 7 has an invalid length. [ 1006.199357][ T1548] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.9670'. [ 1006.236557][ T1548] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.9670'. [ 1006.470255][ T1560] FAULT_INJECTION: forcing a failure. [ 1006.470255][ T1560] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1006.484068][ T1560] CPU: 0 UID: 0 PID: 1560 Comm: syz.0.9675 Not tainted syzkaller #0 PREEMPT(full) [ 1006.484094][ T1560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1006.484107][ T1560] Call Trace: [ 1006.484115][ T1560] [ 1006.484124][ T1560] dump_stack_lvl+0xe8/0x150 [ 1006.484159][ T1560] should_fail_ex+0x40c/0x560 [ 1006.484188][ T1560] prepare_alloc_pages+0x230/0x650 [ 1006.484231][ T1560] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1006.484262][ T1560] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1006.484292][ T1560] ? __pfx_policy_nodemask+0x10/0x10 [ 1006.484320][ T1560] ? __pfx_change_protection+0x10/0x10 [ 1006.484346][ T1560] alloc_pages_mpol+0x212/0x380 [ 1006.484379][ T1560] alloc_pages_noprof+0xac/0x2a0 [ 1006.484409][ T1560] pte_alloc_one+0x22/0x370 [ 1006.484432][ T1560] __pte_alloc+0x25/0x1a0 [ 1006.484462][ T1560] do_pte_missing+0x2db7/0x34b0 [ 1006.484486][ T1560] ? __lock_acquire+0x683/0x2cf0 [ 1006.484514][ T1560] ? lock_vma_under_rcu+0x1d1/0x500 [ 1006.484538][ T1560] ? lock_vma_under_rcu+0x1d1/0x500 [ 1006.484569][ T1560] handle_mm_fault+0x1b36/0x3080 [ 1006.484603][ T1560] ? handle_mm_fault+0xec/0x3080 [ 1006.484633][ T1560] ? __pfx_handle_mm_fault+0x10/0x10 [ 1006.484651][ T1560] ? lock_vma_under_rcu+0x45a/0x500 [ 1006.484701][ T1560] do_user_addr_fault+0xa4d/0x1340 [ 1006.484738][ T1560] ? trace_page_fault_user+0x84/0x1e0 [ 1006.484769][ T1560] exc_page_fault+0x6a/0xc0 [ 1006.484800][ T1560] asm_exc_page_fault+0x26/0x30 [ 1006.484819][ T1560] RIP: 0033:0x7f69c9d5fdc2 [ 1006.484838][ T1560] Code: 8d 15 c6 09 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 f8 0f 29 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 1006.484855][ T1560] RSP: 002b:00007f69c7ff4d20 EFLAGS: 00010286 [ 1006.484872][ T1560] RAX: ffffffffffffffff RBX: 00007f69c0000000 RCX: 00007f69c9d9dc97 [ 1006.484887][ T1560] RDX: 00007f69c9e50764 RSI: 0000000000021000 RDI: 00007f69c0000000 [ 1006.484901][ T1560] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 1006.484912][ T1560] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 1006.484924][ T1560] R13: 0000000000001000 R14: 00007f69c4000000 R15: 0000000000200000 [ 1006.484964][ T1560] [ 1006.485203][ T1560] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1006.746440][ T1566] netlink: 'syz.4.9676': attribute type 7 has an invalid length. [ 1006.754880][ T1566] netlink: 'syz.4.9676': attribute type 7 has an invalid length. [ 1006.857110][ T1571] netlink: 'syz.0.9679': attribute type 7 has an invalid length. [ 1006.907678][ T1571] FAULT_INJECTION: forcing a failure. [ 1006.907678][ T1571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1006.962154][ T1571] CPU: 1 UID: 0 PID: 1571 Comm: syz.0.9679 Not tainted syzkaller #0 PREEMPT(full) [ 1006.962180][ T1571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1006.962191][ T1571] Call Trace: [ 1006.962199][ T1571] [ 1006.962211][ T1571] dump_stack_lvl+0xe8/0x150 [ 1006.962244][ T1571] should_fail_ex+0x40c/0x560 [ 1006.962271][ T1571] _copy_from_iter+0x1d3/0x1660 [ 1006.962294][ T1571] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 1006.962318][ T1571] ? rcu_is_watching+0x15/0xb0 [ 1006.962347][ T1571] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1006.962370][ T1571] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1006.962391][ T1571] ? __pfx__copy_from_iter+0x10/0x10 [ 1006.962407][ T1579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9681'. [ 1006.962414][ T1571] ? __alloc_skb+0x276/0x7a0 [ 1006.962437][ T1571] ? __alloc_skb+0x276/0x7a0 [ 1006.962459][ T1571] ? netlink_sendmsg+0x650/0xb40 [ 1006.962476][ T1571] ? skb_put+0x112/0x210 [ 1006.962501][ T1571] netlink_sendmsg+0x6c0/0xb40 [ 1006.962529][ T1571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1006.962553][ T1571] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1006.962577][ T1571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1006.962594][ T1571] sock_sendmsg_nosec+0x13a/0x180 [ 1006.962619][ T1571] ____sys_sendmsg+0x54e/0x850 [ 1006.962642][ T1571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1006.962669][ T1571] ? import_iovec+0x73/0xa0 [ 1006.962698][ T1571] ___sys_sendmsg+0x2a5/0x360 [ 1006.962715][ T1571] ? __lock_acquire+0x683/0x2cf0 [ 1006.962744][ T1571] ? __pfx____sys_sendmsg+0x10/0x10 [ 1006.962760][ T1571] ? __lock_acquire+0x683/0x2cf0 [ 1006.962789][ T1571] ? kstrtouint+0x6e/0xe0 [ 1006.962848][ T1571] __sys_sendmmsg+0x273/0x4d0 [ 1006.962872][ T1571] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1006.962899][ T1571] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1006.962931][ T1571] ? ksys_write+0x242/0x270 [ 1006.962961][ T1571] ? __pfx_ksys_write+0x10/0x10 [ 1006.962993][ T1571] __x64_sys_sendmmsg+0xa0/0xc0 [ 1006.963012][ T1571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.963032][ T1571] do_syscall_64+0x174/0x580 [ 1006.963048][ T1571] ? trace_irq_disable+0x3b/0x140 [ 1006.963071][ T1571] ? clear_bhb_loop+0x40/0x90 [ 1006.963093][ T1571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.963112][ T1571] RIP: 0033:0x7f69c9d9de99 [ 1006.963149][ T1571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1006.963165][ T1571] RSP: 002b:00007f69c7ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1006.963185][ T1571] RAX: ffffffffffffffda RBX: 00007f69ca025fa0 RCX: 00007f69c9d9de99 [ 1006.963199][ T1571] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1006.963212][ T1571] RBP: 00007f69c7ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1006.963223][ T1571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1006.963235][ T1571] R13: 00007f69ca026038 R14: 00007f69ca025fa0 R15: 00007ffd2290b328 [ 1006.963264][ T1571] [ 1007.207192][ T1590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9687'. [ 1007.389529][ T1598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9689'. [ 1007.600850][ T1603] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9691'. [ 1007.611225][ T1612] netlink: 'syz.1.9691': attribute type 1 has an invalid length. [ 1007.612718][ T1613] netlink: 'syz.2.9696': attribute type 7 has an invalid length. [ 1007.641111][ T1613] FAULT_INJECTION: forcing a failure. [ 1007.641111][ T1613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1007.672464][ T1613] CPU: 0 UID: 0 PID: 1613 Comm: syz.2.9696 Not tainted syzkaller #0 PREEMPT(full) [ 1007.672491][ T1613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1007.672503][ T1613] Call Trace: [ 1007.672511][ T1613] [ 1007.672519][ T1613] dump_stack_lvl+0xe8/0x150 [ 1007.672552][ T1613] should_fail_ex+0x40c/0x560 [ 1007.672587][ T1613] _copy_from_iter+0x1d3/0x1660 [ 1007.672610][ T1613] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 1007.672635][ T1613] ? rcu_is_watching+0x15/0xb0 [ 1007.672663][ T1613] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1007.672687][ T1613] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1007.672710][ T1613] ? __pfx__copy_from_iter+0x10/0x10 [ 1007.672733][ T1613] ? __alloc_skb+0x276/0x7a0 [ 1007.672758][ T1613] ? __alloc_skb+0x276/0x7a0 [ 1007.672789][ T1613] ? netlink_sendmsg+0x650/0xb40 [ 1007.672809][ T1613] ? skb_put+0x112/0x210 [ 1007.672838][ T1613] netlink_sendmsg+0x6c0/0xb40 [ 1007.672868][ T1613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1007.672892][ T1613] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1007.672918][ T1613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1007.672937][ T1613] sock_sendmsg_nosec+0x13a/0x180 [ 1007.672965][ T1613] ____sys_sendmsg+0x54e/0x850 [ 1007.672990][ T1613] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1007.673018][ T1613] ? import_iovec+0x73/0xa0 [ 1007.673048][ T1613] ___sys_sendmsg+0x2a5/0x360 [ 1007.673066][ T1613] ? __lock_acquire+0x683/0x2cf0 [ 1007.673095][ T1613] ? __pfx____sys_sendmsg+0x10/0x10 [ 1007.673112][ T1613] ? __lock_acquire+0x683/0x2cf0 [ 1007.673141][ T1613] ? kstrtouint+0x6e/0xe0 [ 1007.673199][ T1613] __sys_sendmmsg+0x273/0x4d0 [ 1007.673238][ T1613] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1007.673262][ T1613] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1007.673291][ T1613] ? ksys_write+0x242/0x270 [ 1007.673320][ T1613] ? __pfx_ksys_write+0x10/0x10 [ 1007.673354][ T1613] __x64_sys_sendmmsg+0xa0/0xc0 [ 1007.673374][ T1613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.673394][ T1613] do_syscall_64+0x174/0x580 [ 1007.673411][ T1613] ? trace_irq_disable+0x3b/0x140 [ 1007.673435][ T1613] ? clear_bhb_loop+0x40/0x90 [ 1007.673459][ T1613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.673478][ T1613] RIP: 0033:0x7f30d879de99 [ 1007.673496][ T1613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1007.673512][ T1613] RSP: 002b:00007f30d69f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1007.673531][ T1613] RAX: ffffffffffffffda RBX: 00007f30d8a25fa0 RCX: 00007f30d879de99 [ 1007.673544][ T1613] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1007.673557][ T1613] RBP: 00007f30d69f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1007.673575][ T1613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1007.673587][ T1613] R13: 00007f30d8a26038 R14: 00007f30d8a25fa0 R15: 00007ffe826d0b28 [ 1007.673618][ T1613] [ 1008.265686][ T1630] netlink: 'syz.4.9703': attribute type 1 has an invalid length. [ 1008.273468][ T1630] netlink: 'syz.4.9703': attribute type 2 has an invalid length. [ 1008.282419][ T1630] netlink: 'syz.4.9703': attribute type 3 has an invalid length. [ 1008.392512][T24115] ÿ: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1012.863386][ T11] block nbd1: Possible stuck request ffff8880533b24c0: control (read@0,1024B). Runtime 60 seconds [ 1012.875591][ T11] block nbd1: Possible stuck request ffff8880533b2680: control (read@1024,1024B). Runtime 60 seconds [ 1012.886585][ T11] block nbd1: Possible stuck request ffff8880533b2840: control (read@2048,1024B). Runtime 60 seconds [ 1012.898154][ T11] block nbd1: Possible stuck request ffff8880533b2a00: control (read@3072,1024B). Runtime 60 seconds [ 1013.509540][T29602] block nbd3: Possible stuck request ffff888027a50000: control (read@0,1024B). Runtime 90 seconds [ 1013.864103][T29602] block nbd3: Possible stuck request ffff888027a501c0: control (read@1024,1024B). Runtime 90 seconds [ 1013.882345][T29602] block nbd3: Possible stuck request ffff888027a50380: control (read@2048,1024B). Runtime 90 seconds [ 1013.893418][T29602] block nbd3: Possible stuck request ffff888027a50540: control (read@3072,1024B). Runtime 90 seconds [ 1014.146143][T29602] block nbd4: Possible stuck request ffff888027a8b280: control (read@0,1024B). Runtime 90 seconds [ 1014.157738][T29602] block nbd4: Possible stuck request ffff888027a8b440: control (read@1024,1024B). Runtime 90 seconds [ 1014.169540][T29602] block nbd4: Possible stuck request ffff888027a8b600: control (read@2048,1024B). Runtime 90 seconds [ 1014.180850][T29602] block nbd4: Possible stuck request ffff888027a8b7c0: control (read@3072,1024B). Runtime 90 seconds [ 1015.240003][ T4994] udevd[4994]: worker [31333] /devices/virtual/block/nbd1 is taking a long time [ 1019.262262][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1023.267030][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1023.277130][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1023.286445][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1023.304638][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1023.316408][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1023.686839][ T1660] vxcan1 speed is unknown, defaulting to 1000 [ 1023.891203][ T1660] ±ÿª¨úrBº speed is unknown, defaulting to 1000 [ 1024.383697][T29602] block nbd2: Possible stuck request ffff888027a29f40: control (read@0,1024B). Runtime 60 seconds [ 1024.395373][T29602] block nbd2: Possible stuck request ffff888027a2a100: control (read@1024,1024B). Runtime 60 seconds [ 1024.407618][T29602] block nbd2: Possible stuck request ffff888027a2a2c0: control (read@2048,1024B). Runtime 60 seconds [ 1024.422201][T29602] block nbd2: Possible stuck request ffff888027a2a480: control (read@3072,1024B). Runtime 60 seconds [ 1024.595701][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1024.672591][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1024.697213][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1024.708835][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1024.733032][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1025.122728][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1025.148180][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1025.175764][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1025.192172][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1025.201977][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1025.244097][T28414] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1025.257940][ T1691] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1025.273482][ T1660] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.275841][ T1660] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.276121][ T1660] bridge_slave_0: entered allmulticast mode [ 1025.280115][ T1660] bridge_slave_0: entered promiscuous mode [ 1025.319458][ T1691] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1025.337182][ T1691] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1025.346471][ T1691] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1025.385934][ T50] Bluetooth: hci4: command tx timeout [ 1025.432494][ T1660] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.448235][ T1660] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.456769][ T1660] bridge_slave_1: entered allmulticast mode [ 1025.465664][ T1660] bridge_slave_1: entered promiscuous mode [ 1025.518230][ T1660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1025.591937][ T1691] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1025.606479][ T1660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1025.633964][ T1691] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1025.643701][ T1691] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1025.652822][ T1691] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1025.660894][ T1691] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1025.724696][ T1660] team0: Port device team_slave_0 added [ 1025.733700][ T1660] team0: Port device team_slave_1 added [ 1025.759721][ T11] block nbd8: Possible stuck request ffff888027b80000: control (read@0,4096B). Runtime 30 seconds [ 1025.808500][ T1660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1025.815492][ T1660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.869928][ T1660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1025.883074][ T1660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1025.890147][ T1660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.916187][ T1660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.017110][ T1660] hsr_slave_0: entered promiscuous mode [ 1026.023930][ T1660] hsr_slave_1: entered promiscuous mode [ 1026.030454][ T1660] debugfs: 'hsr0' already exists in 'hsr' [ 1026.036295][ T1660] Cannot create hsr debugfs directory [ 1026.152246][ T1677] vxcan1 speed is unknown, defaulting to 1000 [ 1026.601032][ T1677] ±ÿª¨úrBº speed is unknown, defaulting to 1000 [ 1026.604833][ T1688] vxcan1 speed is unknown, defaulting to 1000 [ 1026.855466][ T50] Bluetooth: hci6: command tx timeout [ 1026.896136][ T1688] ±ÿª¨úrBº speed is unknown, defaulting to 1000 [ 1026.903517][ T1686] vxcan1 speed is unknown, defaulting to 1000 [ 1027.248791][ T1677] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.282536][ T1677] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.295462][ T50] Bluetooth: hci7: command tx timeout [ 1027.303824][ T1677] bridge_slave_0: entered allmulticast mode [ 1027.315921][ T1677] bridge_slave_0: entered promiscuous mode [ 1027.325825][ T1686] ±ÿª¨úrBº speed is unknown, defaulting to 1000 [ 1027.333095][ T1700] vxcan1 speed is unknown, defaulting to 1000 [ 1027.340314][ T1677] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.361771][ T1677] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.369112][ T1677] bridge_slave_1: entered allmulticast mode [ 1027.377478][ T1677] bridge_slave_1: entered promiscuous mode [ 1027.421904][ T50] Bluetooth: hci4: command tx timeout [ 1027.428029][ T1691] Bluetooth: hci8: command tx timeout [ 1027.514029][ T1677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1027.527267][ T1677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1027.696087][ T1677] team0: Port device team_slave_0 added [ 1027.746309][ T50] Bluetooth: hci9: command tx timeout [ 1027.749407][ T1677] team0: Port device team_slave_1 added [ 1027.778977][ T1700] ±ÿª¨úrBº speed is unknown, defaulting to 1000 [ 1027.826424][ T1677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.833418][ T1677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.860956][ T1677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.957960][ T1677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.965673][ T1677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.021912][ T1677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1028.222824][ T1677] hsr_slave_0: entered promiscuous mode [ 1028.229864][ T1677] hsr_slave_1: entered promiscuous mode [ 1028.237129][ T1677] debugfs: 'hsr0' already exists in 'hsr' [ 1028.245326][ T1677] Cannot create hsr debugfs directory [ 1028.360271][ T1688] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.368991][ T1688] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.377456][ T1688] bridge_slave_0: entered allmulticast mode [ 1028.385168][ T1688] bridge_slave_0: entered promiscuous mode [ 1028.418390][ T1688] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.427513][ T1688] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.434952][ T1688] bridge_slave_1: entered allmulticast mode [ 1028.442500][ T1688] bridge_slave_1: entered promiscuous mode [ 1028.509819][ T1688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1028.532393][ T1688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1028.611058][ T1688] team0: Port device team_slave_0 added [ 1028.659405][ T1688] team0: Port device team_slave_1 added [ 1028.766616][ T1688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1028.781800][ T1688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.807899][ T1688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1028.860515][ T1688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1028.886085][ T1688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.919279][ T1688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1028.970564][ T50] Bluetooth: hci6: command tx timeout [ 1029.102429][ T1700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.116544][ T1700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.124772][ T1700] bridge_slave_0: entered allmulticast mode [ 1029.132926][ T1700] bridge_slave_0: entered promiscuous mode [ 1029.193874][ T1700] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.201164][ T1700] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.208481][ T1700] bridge_slave_1: entered allmulticast mode [ 1029.216259][ T1700] bridge_slave_1: entered promiscuous mode [ 1029.228229][ T1688] hsr_slave_0: entered promiscuous mode [ 1029.234806][ T1688] hsr_slave_1: entered promiscuous mode [ 1029.240985][ T1688] debugfs: 'hsr0' already exists in 'hsr' [ 1029.246719][ T1688] Cannot create hsr debugfs directory [ 1029.340093][ T1700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1029.355434][ T1700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1029.365200][ T1686] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.373604][ T1686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.380890][ T1686] bridge_slave_0: entered allmulticast mode [ 1029.388191][ T1686] bridge_slave_0: entered promiscuous mode [ 1029.404971][ T50] Bluetooth: hci7: command tx timeout [ 1029.405839][ T1686] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.417586][ T1686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.424981][ T1686] bridge_slave_1: entered allmulticast mode [ 1029.432873][ T1686] bridge_slave_1: entered promiscuous mode [ 1029.512665][ T50] Bluetooth: hci4: command tx timeout [ 1029.512935][T20202] Bluetooth: hci8: command tx timeout [ 1029.531577][ T1700] team0: Port device team_slave_0 added [ 1029.540684][ T1686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1029.554122][ T1686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1029.572587][ T1700] team0: Port device team_slave_1 added [ 1029.671227][ T1686] team0: Port device team_slave_0 added [ 1029.683222][ T1686] team0: Port device team_slave_1 added [ 1029.699552][ T1700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.707750][ T1700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.736058][ T1700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.778888][ T1700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.786684][ T1700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.813758][ T1700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1029.831836][T20202] Bluetooth: hci9: command tx timeout [ 1029.886389][ T1686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.893614][ T1686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.920617][ T1686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.967541][ T1686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.975722][ T1686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.004961][ T1686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.056096][ T1700] hsr_slave_0: entered promiscuous mode [ 1030.063021][ T1700] hsr_slave_1: entered promiscuous mode [ 1030.069498][ T1700] debugfs: 'hsr0' already exists in 'hsr' [ 1030.076403][ T1700] Cannot create hsr debugfs directory [ 1030.136007][ T1686] hsr_slave_0: entered promiscuous mode [ 1030.142587][T24118] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1030.143793][ T1686] hsr_slave_1: entered promiscuous mode [ 1030.160092][ T1686] debugfs: 'hsr0' already exists in 'hsr' [ 1030.166931][ T1686] Cannot create hsr debugfs directory [ 1031.021749][T20202] Bluetooth: hci6: command tx timeout [ 1031.032225][T20202] Bluetooth: hci3: command 0x0406 tx timeout [ 1031.425062][ T1691] Bluetooth: hci7: command tx timeout [ 1031.582668][ T1691] Bluetooth: hci4: command tx timeout [ 1031.589276][T20202] Bluetooth: hci8: command tx timeout [ 1031.903528][ T1691] Bluetooth: hci9: command tx timeout [ 1033.103108][ T1691] Bluetooth: hci6: command tx timeout [ 1033.504067][ T1691] Bluetooth: hci7: command tx timeout [ 1033.663604][ T1691] Bluetooth: hci8: command tx timeout [ 1033.987398][ T1691] Bluetooth: hci9: command tx timeout [ 1034.052389][ T4994] udevd[4994]: worker [30913] /devices/virtual/block/nbd0 is taking a long time [ 1034.063914][ T4994] udevd[4994]: worker [32333] /devices/virtual/block/nbd2 is taking a long time [ 1034.623347][ T11] block nbd6: Possible stuck request ffff888027b20000: control (read@0,1024B). Runtime 60 seconds [ 1034.635967][ T11] block nbd6: Possible stuck request ffff888027b201c0: control (read@1024,1024B). Runtime 60 seconds [ 1034.648718][ T11] block nbd6: Possible stuck request ffff888027b20380: control (read@2048,1024B). Runtime 60 seconds [ 1034.661301][ T11] block nbd6: Possible stuck request ffff888027b20540: control (read@3072,1024B). Runtime 60 seconds [ 1037.075977][ T4994] udevd[4994]: worker [30019] /devices/virtual/block/nbd6 is taking a long time [ 1040.382642][T24113] ÿ: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1042.943400][ T11] block nbd1: Possible stuck request ffff8880533b24c0: control (read@0,1024B). Runtime 90 seconds [ 1042.954882][ T11] block nbd1: Possible stuck request ffff8880533b2680: control (read@1024,1024B). Runtime 90 seconds [ 1042.966697][ T11] block nbd1: Possible stuck request ffff8880533b2840: control (read@2048,1024B). Runtime 90 seconds [ 1042.979147][ T11] block nbd1: Possible stuck request ffff8880533b2a00: control (read@3072,1024B). Runtime 90 seconds [ 1043.583901][T29602] block nbd3: Possible stuck request ffff888027a50000: control (read@0,1024B). Runtime 120 seconds [ 1043.882543][T29602] block nbd3: Possible stuck request ffff888027a501c0: control (read@1024,1024B). Runtime 120 seconds [ 1043.912846][T29602] block nbd3: Possible stuck request ffff888027a50380: control (read@2048,1024B). Runtime 120 seconds [ 1043.924844][T29602] block nbd3: Possible stuck request ffff888027a50540: control (read@3072,1024B). Runtime 120 seconds [ 1044.224521][T29602] block nbd4: Possible stuck request ffff888027a8b280: control (read@0,1024B). Runtime 120 seconds [ 1044.236064][T29602] block nbd4: Possible stuck request ffff888027a8b440: control (read@1024,1024B). Runtime 120 seconds [ 1044.247780][T29602] block nbd4: Possible stuck request ffff888027a8b600: control (read@2048,1024B). Runtime 120 seconds [ 1044.261416][T29602] block nbd4: Possible stuck request ffff888027a8b7c0: control (read@3072,1024B). Runtime 120 seconds [ 1051.272185][T24107] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1054.464387][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.478541][T29602] block nbd2: Possible stuck request ffff888027a29f40: control (read@0,1024B). Runtime 90 seconds [ 1054.490415][T29602] block nbd2: Possible stuck request ffff888027a2a100: control (read@1024,1024B). Runtime 90 seconds [ 1054.502133][T29602] block nbd2: Possible stuck request ffff888027a2a2c0: control (read@2048,1024B). Runtime 90 seconds [ 1054.514067][T29602] block nbd2: Possible stuck request ffff888027a2a480: control (read@3072,1024B). Runtime 90 seconds [ 1056.385969][ T11] block nbd8: Possible stuck request ffff888027b80000: control (read@0,4096B). Runtime 60 seconds [ 1058.111029][ T4994] udevd[4994]: worker [366] /devices/virtual/block/nbd8 is taking a long time [ 1062.143030][T24107] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1064.702736][ T11] block nbd6: Possible stuck request ffff888027b20000: control (read@0,1024B). Runtime 90 seconds [ 1064.715159][ T11] block nbd6: Possible stuck request ffff888027b201c0: control (read@1024,1024B). Runtime 90 seconds [ 1064.727029][ T11] block nbd6: Possible stuck request ffff888027b20380: control (read@2048,1024B). Runtime 90 seconds [ 1064.737931][ T11] block nbd6: Possible stuck request ffff888027b20540: control (read@3072,1024B). Runtime 90 seconds [ 1071.351286][T24107] ÿ: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1073.024893][ T11] block nbd1: Possible stuck request ffff8880533b24c0: control (read@0,1024B). Runtime 120 seconds [ 1073.036912][ T11] block nbd1: Possible stuck request ffff8880533b2680: control (read@1024,1024B). Runtime 120 seconds [ 1073.048975][ T11] block nbd1: Possible stuck request ffff8880533b2840: control (read@2048,1024B). Runtime 120 seconds [ 1073.059961][ T11] block nbd1: Possible stuck request ffff8880533b2a00: control (read@3072,1024B). Runtime 120 seconds [ 1073.666230][T29602] block nbd3: Possible stuck request ffff888027a50000: control (read@0,1024B). Runtime 150 seconds [ 1073.903752][T29602] block nbd3: Possible stuck request ffff888027a501c0: control (read@1024,1024B). Runtime 150 seconds [ 1073.934709][T29602] block nbd3: Possible stuck request ffff888027a50380: control (read@2048,1024B). Runtime 150 seconds [ 1073.946565][T29602] block nbd3: Possible stuck request ffff888027a50540: control (read@3072,1024B). Runtime 150 seconds [ 1074.304580][T29602] block nbd4: Possible stuck request ffff888027a8b280: control (read@0,1024B). Runtime 150 seconds [ 1074.316229][T29602] block nbd4: Possible stuck request ffff888027a8b440: control (read@1024,1024B). Runtime 150 seconds [ 1074.328579][T29602] block nbd4: Possible stuck request ffff888027a8b600: control (read@2048,1024B). Runtime 150 seconds [ 1074.340691][T29602] block nbd4: Possible stuck request ffff888027a8b7c0: control (read@3072,1024B). Runtime 150 seconds [ 1083.269595][T24106] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1083.393817][T20202] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1083.405533][T20202] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1083.417079][T20202] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1083.435663][T20202] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1083.444568][T20202] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1083.810799][ T1760] vxcan1 speed is unknown, defaulting to 1000 [ 1084.018821][ T1760] ±ÿª¨úrBº speed is unknown, defaulting to 1000 [ 1084.542876][T29602] block nbd2: Possible stuck request ffff888027a29f40: control (read@0,1024B). Runtime 120 seconds [ 1084.554982][T29602] block nbd2: Possible stuck request ffff888027a2a100: control (read@1024,1024B). Runtime 120 seconds [ 1084.568289][T29602] block nbd2: Possible stuck request ffff888027a2a2c0: control (read@2048,1024B). Runtime 120 seconds [ 1084.574480][ T1760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.580481][T29602] block nbd2: Possible stuck request ffff888027a2a480: control (read@3072,1024B). Runtime 120 seconds [ 1084.589130][ T1760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.607932][ T1760] bridge_slave_0: entered allmulticast mode [ 1084.616833][ T1760] bridge_slave_0: entered promiscuous mode [ 1084.630300][ T1760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.640940][ T1760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.649205][ T1760] bridge_slave_1: entered allmulticast mode [ 1084.658341][ T1760] bridge_slave_1: entered promiscuous mode [ 1084.702948][ T1760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1084.717394][ T1760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1084.761008][ T1760] team0: Port device team_slave_0 added [ 1084.771244][ T1760] team0: Port device team_slave_1 added [ 1084.809783][ T1760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1084.818165][ T1760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.844886][ T1760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1084.864370][ T1760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1084.872664][ T1760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.899759][ T1760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.964829][ T1760] hsr_slave_0: entered promiscuous mode [ 1084.973484][ T1760] hsr_slave_1: entered promiscuous mode [ 1084.980130][ T1760] debugfs: 'hsr0' already exists in 'hsr' [ 1084.986966][ T1760] Cannot create hsr debugfs directory [ 1085.631795][T20202] Bluetooth: hci10: command tx timeout [ 1085.755174][ T1691] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1085.803571][ T1691] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1085.814504][ T1691] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1085.887098][ T1691] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1085.895305][ T1691] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1086.041578][ T1691] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1086.055019][ T1691] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1086.065779][ T1691] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1086.096818][ T1691] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1086.106736][ T1691] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1086.226651][ T1691] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1086.252002][ T1691] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1086.267624][ T1691] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1086.282291][ T1691] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1086.314464][ T1691] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1086.315710][ T1794] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1086.356006][ T1794] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1086.365316][ T1794] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1086.374209][ T1794] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1086.384640][ T1794] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1086.525622][ T11] block nbd8: Possible stuck request ffff888027b80000: control (read@0,4096B). Runtime 90 seconds [ 1086.811106][ T1781] vxcan1 speed is unknown, defaulting to 1000 [ 1087.234384][ T1781] ±ÿª¨úrBº speed is unknown, defaulting to 1000 [ 1087.252421][ T1784] vxcan1 speed is unknown, defaulting to 1000 [ 1087.543281][ T1784] ±ÿª¨úrBº speed is unknown, defaulting to 1000 [ 1087.543314][ T1791] vxcan1 speed is unknown, defaulting to 1000 [ 1087.662016][ T1794] Bluetooth: hci10: command tx timeout [ 1087.923538][ T1791] ±ÿª¨úrBº speed is unknown, defaulting to 1000 [ 1087.934785][ T1790] vxcan1 speed is unknown, defaulting to 1000 [ 1087.982618][ T1794] Bluetooth: hci11: command tx timeout [ 1088.117256][ T1781] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.124737][ T1781] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.132070][ T1781] bridge_slave_0: entered allmulticast mode [ 1088.162363][ T1781] bridge_slave_0: entered promiscuous mode [ 1088.223638][ T1794] Bluetooth: hci12: command tx timeout [ 1088.278230][ T1790] ±ÿª¨úrBº speed is unknown, defaulting to 1000 [ 1088.278404][ T1781] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.305139][ T1781] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.312528][ T1781] bridge_slave_1: entered allmulticast mode [ 1088.319857][ T1781] bridge_slave_1: entered promiscuous mode [ 1088.389403][ T1781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.441239][ T1781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.462344][ T1794] Bluetooth: hci13: command tx timeout [ 1088.626079][ T1794] Bluetooth: hci14: command tx timeout [ 1088.646877][ T1781] team0: Port device team_slave_0 added [ 1088.676035][ T1781] team0: Port device team_slave_1 added [ 1088.778813][ T1781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1088.785885][ T1781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1088.812476][ T1781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1088.830543][ T1781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1088.848710][ T1781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1088.877937][ T1781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1089.111652][ T1781] hsr_slave_0: entered promiscuous mode [ 1089.120657][ T1781] hsr_slave_1: entered promiscuous mode [ 1089.128525][ T1781] debugfs: 'hsr0' already exists in 'hsr' [ 1089.137693][ T1781] Cannot create hsr debugfs directory [ 1089.349120][ T1784] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.357221][ T1784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.365664][ T1784] bridge_slave_0: entered allmulticast mode [ 1089.376213][ T1784] bridge_slave_0: entered promiscuous mode [ 1089.418529][ T1784] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.427158][ T1784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.436310][ T1784] bridge_slave_1: entered allmulticast mode [ 1089.445210][ T1784] bridge_slave_1: entered promiscuous mode [ 1089.607669][ T1784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1089.635476][ T1791] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.643966][ T1791] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.651370][ T1791] bridge_slave_0: entered allmulticast mode [ 1089.658716][ T1791] bridge_slave_0: entered promiscuous mode [ 1089.670303][ T1784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1089.711083][ T1791] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.718274][ T1791] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.725727][ T1791] bridge_slave_1: entered allmulticast mode [ 1089.733532][ T1791] bridge_slave_1: entered promiscuous mode [ 1089.742626][ T1794] Bluetooth: hci10: command tx timeout [ 1089.798346][ T1784] team0: Port device team_slave_0 added [ 1089.833336][ T1791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1089.846007][ T1784] team0: Port device team_slave_1 added [ 1089.874531][ T1791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1089.972824][ T1784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.979905][ T1784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.022704][ T1784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.043640][ T1791] team0: Port device team_slave_0 added [ 1090.055919][ T1784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.063612][ T1794] Bluetooth: hci11: command tx timeout [ 1090.063654][ T1784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.094965][ T1784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.134888][ T1791] team0: Port device team_slave_1 added [ 1090.198766][ T1791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1090.205766][ T1791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.231728][ T1791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.242972][ T1790] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.250216][ T1790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.257678][ T1790] bridge_slave_0: entered allmulticast mode [ 1090.273572][ T1790] bridge_slave_0: entered promiscuous mode [ 1090.283379][ T1791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.290604][ T1791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.302865][ T1794] Bluetooth: hci12: command tx timeout [ 1090.316652][ T1791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.344411][ T1790] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.351614][ T1790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.359024][ T1790] bridge_slave_1: entered allmulticast mode [ 1090.366474][ T1790] bridge_slave_1: entered promiscuous mode [ 1090.451191][ T1791] hsr_slave_0: entered promiscuous mode [ 1090.458134][ T1791] hsr_slave_1: entered promiscuous mode [ 1090.464810][ T1791] debugfs: 'hsr0' already exists in 'hsr' [ 1090.470580][ T1791] Cannot create hsr debugfs directory [ 1090.496627][ T1790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1090.512495][ T1784] hsr_slave_0: entered promiscuous mode [ 1090.518993][ T1784] hsr_slave_1: entered promiscuous mode [ 1090.526355][ T1784] debugfs: 'hsr0' already exists in 'hsr' [ 1090.532215][ T1784] Cannot create hsr debugfs directory [ 1090.541955][ T1790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1090.542218][ T1794] Bluetooth: hci13: command tx timeout [ 1090.668474][ T1790] team0: Port device team_slave_0 added [ 1090.678855][ T1790] team0: Port device team_slave_1 added [ 1090.709542][ T1794] Bluetooth: hci14: command tx timeout [ 1090.798964][ T1790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1090.809041][ T1790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.838894][ T1790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.909091][ T1790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.916084][ T1790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.942052][ T1790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1091.113682][ T1790] hsr_slave_0: entered promiscuous mode [ 1091.120411][ T1790] hsr_slave_1: entered promiscuous mode [ 1091.126726][ T1790] debugfs: 'hsr0' already exists in 'hsr' [ 1091.132459][ T1790] Cannot create hsr debugfs directory [ 1091.822416][ T1794] Bluetooth: hci10: command tx timeout [ 1092.142703][ T1794] Bluetooth: hci11: command tx timeout [ 1092.382294][ T1794] Bluetooth: hci12: command tx timeout [ 1092.622182][ T1794] Bluetooth: hci13: command tx timeout [ 1092.784036][ T1794] Bluetooth: hci14: command tx timeout [ 1094.222446][ T1794] Bluetooth: hci11: command tx timeout [ 1094.462629][ T1794] Bluetooth: hci12: command tx timeout [ 1094.702596][ T1794] Bluetooth: hci13: command tx timeout [ 1094.783210][ T11] block nbd6: Possible stuck request ffff888027b20000: control (read@0,1024B). Runtime 120 seconds [ 1094.794866][ T11] block nbd6: Possible stuck request ffff888027b201c0: control (read@1024,1024B). Runtime 120 seconds [ 1094.807713][ T11] block nbd6: Possible stuck request ffff888027b20380: control (read@2048,1024B). Runtime 120 seconds [ 1094.820013][ T11] block nbd6: Possible stuck request ffff888027b20540: control (read@3072,1024B). Runtime 120 seconds [ 1094.862937][ T1794] Bluetooth: hci14: command tx timeout [ 1097.501731][ T1794] Bluetooth: hci0: command 0x0406 tx timeout [ 1102.276249][T24113] ÿ: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1103.114438][ T11] block nbd1: Possible stuck request ffff8880533b24c0: control (read@0,1024B). Runtime 150 seconds [ 1103.126333][ T11] block nbd1: Possible stuck request ffff8880533b2680: control (read@1024,1024B). Runtime 150 seconds [ 1103.138481][ T11] block nbd1: Possible stuck request ffff8880533b2840: control (read@2048,1024B). Runtime 150 seconds [ 1103.149455][ T11] block nbd1: Possible stuck request ffff8880533b2a00: control (read@3072,1024B). Runtime 150 seconds [ 1103.523733][ T4994] udevd[4994]: worker [29944] /devices/virtual/block/nbd3 timeout; kill it [ 1103.534512][ T4994] udevd[4994]: seq 32945 '/devices/virtual/block/nbd3' killed [ 1103.744258][T29602] block nbd3: Possible stuck request ffff888027a50000: control (read@0,1024B). Runtime 180 seconds [ 1103.923628][T29602] block nbd3: Possible stuck request ffff888027a501c0: control (read@1024,1024B). Runtime 180 seconds [ 1103.953448][T29602] block nbd3: Possible stuck request ffff888027a50380: control (read@2048,1024B). Runtime 180 seconds [ 1103.965152][T29602] block nbd3: Possible stuck request ffff888027a50540: control (read@3072,1024B). Runtime 180 seconds [ 1104.389340][T29602] block nbd4: Possible stuck request ffff888027a8b280: control (read@0,1024B). Runtime 180 seconds [ 1104.401079][T29602] block nbd4: Possible stuck request ffff888027a8b440: control (read@1024,1024B). Runtime 180 seconds [ 1104.412965][T29602] block nbd4: Possible stuck request ffff888027a8b600: control (read@2048,1024B). Runtime 180 seconds [ 1104.424630][T29602] block nbd4: Possible stuck request ffff888027a8b7c0: control (read@3072,1024B). Runtime 180 seconds [ 1106.546744][ T4994] udevd[4994]: worker [30018] /devices/virtual/block/nbd4 timeout; kill it [ 1106.555919][ T4994] udevd[4994]: seq 32961 '/devices/virtual/block/nbd4' killed [ 1114.627559][T29602] block nbd2: Possible stuck request ffff888027a29f40: control (read@0,1024B). Runtime 150 seconds [ 1114.639384][T29602] block nbd2: Possible stuck request ffff888027a2a100: control (read@1024,1024B). Runtime 150 seconds [ 1114.650989][T29602] block nbd2: Possible stuck request ffff888027a2a2c0: control (read@2048,1024B). Runtime 150 seconds [ 1114.663009][T29602] block nbd2: Possible stuck request ffff888027a2a480: control (read@3072,1024B). Runtime 150 seconds [ 1115.263672][T24079] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1115.914234][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.552152][ T11] block nbd8: Possible stuck request ffff888027b80000: control (read@0,4096B). Runtime 120 seconds [ 1122.943290][T24079] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1124.863054][ T11] block nbd6: Possible stuck request ffff888027b20000: control (read@0,1024B). Runtime 150 seconds [ 1124.874719][ T11] block nbd6: Possible stuck request ffff888027b201c0: control (read@1024,1024B). Runtime 150 seconds [ 1124.886815][ T11] block nbd6: Possible stuck request ffff888027b20380: control (read@2048,1024B). Runtime 150 seconds [ 1124.900381][ T11] block nbd6: Possible stuck request ffff888027b20540: control (read@3072,1024B). Runtime 150 seconds [ 1133.192728][ T11] block nbd1: Possible stuck request ffff8880533b24c0: control (read@0,1024B). Runtime 180 seconds [ 1133.201430][T24113] ÿ: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1133.207058][ T11] block nbd1: Possible stuck request ffff8880533b2680: control (read@1024,1024B). Runtime 180 seconds [ 1133.227956][ T11] block nbd1: Possible stuck request ffff8880533b2840: control (read@2048,1024B). Runtime 180 seconds [ 1133.239758][ T11] block nbd1: Possible stuck request ffff8880533b2a00: control (read@3072,1024B). Runtime 180 seconds [ 1133.593822][ T4994] udevd[4994]: worker [31333] /devices/virtual/block/nbd1 timeout; kill it [ 1133.603452][ T4994] udevd[4994]: seq 33783 '/devices/virtual/block/nbd1' killed [ 1133.823434][T29602] block nbd3: Possible stuck request ffff888027a50000: control (read@0,1024B). Runtime 210 seconds [ 1133.942483][T29602] block nbd3: Possible stuck request ffff888027a501c0: control (read@1024,1024B). Runtime 210 seconds [ 1133.974172][T29602] block nbd3: Possible stuck request ffff888027a50380: control (read@2048,1024B). Runtime 210 seconds [ 1133.986313][T29602] block nbd3: Possible stuck request ffff888027a50540: control (read@3072,1024B). Runtime 210 seconds [ 1134.465661][T29602] block nbd4: Possible stuck request ffff888027a8b280: control (read@0,1024B). Runtime 210 seconds [ 1134.477736][T29602] block nbd4: Possible stuck request ffff888027a8b440: control (read@1024,1024B). Runtime 210 seconds [ 1134.489429][T29602] block nbd4: Possible stuck request ffff888027a8b600: control (read@2048,1024B). Runtime 210 seconds [ 1134.501271][T29602] block nbd4: Possible stuck request ffff888027a8b7c0: control (read@3072,1024B). Runtime 210 seconds [ 1142.622248][ T4994] udevd[4994]: worker [30913] /devices/virtual/block/nbd0 timeout; kill it [ 1142.632578][ T4994] udevd[4994]: seq 34020 '/devices/virtual/block/nbd0' killed [ 1143.999655][ T1794] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1144.010177][ T1794] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1144.024583][ T1794] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1144.034006][ T1794] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1144.046424][ T1794] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1144.426478][ T1858] vxcan1 speed is unknown, defaulting to 1000 [ 1144.640238][ T1858] ±ÿª¨úrBº speed is unknown, defaulting to 1000 [ 1144.703282][T29602] block nbd2: Possible stuck request ffff888027a29f40: control (read@0,1024B). Runtime 180 seconds [ 1144.715867][T29602] block nbd2: Possible stuck request ffff888027a2a100: control (read@1024,1024B). Runtime 180 seconds [ 1144.727862][T29602] block nbd2: Possible stuck request ffff888027a2a2c0: control (read@2048,1024B). Runtime 180 seconds [ 1144.739740][T29602] block nbd2: Possible stuck request ffff888027a2a480: control (read@3072,1024B). Runtime 180 seconds [ 1145.162941][ T1858] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.170262][ T1858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.178220][ T1858] bridge_slave_0: entered allmulticast mode [ 1145.188377][ T1858] bridge_slave_0: entered promiscuous mode [ 1145.200335][ T1858] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.207952][ T1858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.216167][ T1858] bridge_slave_1: entered allmulticast mode [ 1145.224004][ T1858] bridge_slave_1: entered promiscuous mode [ 1145.252537][ T1858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1145.265458][ T1858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1145.299671][ T1858] team0: Port device team_slave_0 added [ 1145.309385][ T1858] team0: Port device team_slave_1 added [ 1145.335185][ T1858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1145.343494][ T1858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1145.370817][ T1858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1145.383928][ T1858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1145.391005][ T1858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1145.427737][ T1858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1145.467101][ T1858] hsr_slave_0: entered promiscuous mode [ 1145.473839][ T1858] hsr_slave_1: entered promiscuous mode [ 1145.480446][ T1858] debugfs: 'hsr0' already exists in 'hsr' [ 1145.486191][ T1858] Cannot create hsr debugfs directory [ 1146.184486][T24106] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1146.228411][ T1794] Bluetooth: hci15: command tx timeout [ 1146.348531][T20202] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1146.372397][T20202] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1146.383323][T20202] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1146.396850][T20202] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1146.410096][T20202] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1146.602037][ T1794] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1146.617111][ T1794] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1146.688418][ T1887] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1146.777827][ T11] block nbd8: Possible stuck request ffff888027b80000: control (read@0,4096B). Runtime 150 seconds [ 1146.789579][ T1890] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1146.804247][ T1895] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1146.822623][ T1890] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1146.833005][ T1895] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1146.840569][ T1890] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1146.856544][ T1890] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1146.871331][ T1895] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1146.943306][T28414] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1146.972267][T28414] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1146.996590][T28414] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1147.023458][T28414] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1147.043156][T28414] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1147.255983][ T1879] vxcan1 speed is unknown, defaulting to 1000 [ 1147.612944][ T1879] ±ÿª¨úrBº speed is unknown, defaulting to 1000 [ 1147.865197][ T1896] vxcan1 speed is unknown, defaulting to 1000 [ 1148.143576][ T1896] ±ÿª¨úrBº speed is unknown, defaulting to 1000 [ 1148.145002][ T1883] vxcan1 speed is unknown, defaulting to 1000 [ 1148.322108][ T1895] Bluetooth: hci15: command tx timeout [ 1148.494667][ T1886] vxcan1 speed is unknown, defaulting to 1000 [ 1148.523277][ T1883] ±ÿª¨úrBº speed is unknown, defaulting to 1000 [ 1148.546569][ T1895] Bluetooth: hci16: command tx timeout [ 1148.713463][ T1895] Bluetooth: hci4: command 0x0406 tx timeout [ 1148.713475][T28414] Bluetooth: hci8: command 0x0406 tx timeout [ 1148.766152][ T1895] Bluetooth: hci9: command 0x0406 tx timeout [ 1148.879215][ T1691] Bluetooth: hci6: command 0x0406 tx timeout [ 1148.885318][ T1691] Bluetooth: hci7: command 0x0406 tx timeout [ 1148.944131][ T1887] Bluetooth: hci17: command tx timeout [ 1148.989639][ T1887] Bluetooth: hci18: command tx timeout [ 1149.005586][ T1879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.012742][ T1879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.020023][ T1879] bridge_slave_0: entered allmulticast mode [ 1149.027452][ T1879] bridge_slave_0: entered promiscuous mode [ 1149.040762][ T1886] ±ÿª¨úrBº speed is unknown, defaulting to 1000 [ 1149.056159][ T1879] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.064063][ T1879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.072270][ T1879] bridge_slave_1: entered allmulticast mode [ 1149.080234][ T1879] bridge_slave_1: entered promiscuous mode [ 1149.101767][ T1887] Bluetooth: hci19: command tx timeout [ 1149.249452][ T1879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1149.293958][ T1879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1149.453613][ T1879] team0: Port device team_slave_0 added [ 1149.510532][ T1879] team0: Port device team_slave_1 added [ 1149.637508][ T1896] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.646350][ T1896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.655432][ T1896] bridge_slave_0: entered allmulticast mode [ 1149.667093][ T1896] bridge_slave_0: entered promiscuous mode [ 1149.677553][ T1879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1149.687849][ T1879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.714658][ T1879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1149.759085][ T1896] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.767668][ T1896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.776427][ T1896] bridge_slave_1: entered allmulticast mode [ 1149.785507][ T1896] bridge_slave_1: entered promiscuous mode [ 1149.795664][ T1879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1149.803335][ T1879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.830448][ T1879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1149.910610][ T1896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1149.939549][ T1896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1150.047172][ T1896] team0: Port device team_slave_0 added [ 1150.059535][ T1879] hsr_slave_0: entered promiscuous mode [ 1150.066193][ T1879] hsr_slave_1: entered promiscuous mode [ 1150.072657][ T1879] debugfs: 'hsr0' already exists in 'hsr' [ 1150.078386][ T1879] Cannot create hsr debugfs directory [ 1150.095475][ T1896] team0: Port device team_slave_1 added [ 1150.201267][ T1896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1150.208256][ T1896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1150.244959][ T1896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1150.282903][ T1896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1150.289891][ T1896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1150.315850][ T1896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1150.381631][ T1887] Bluetooth: hci15: command tx timeout [ 1150.490068][ T1896] hsr_slave_0: entered promiscuous mode [ 1150.497373][ T1896] hsr_slave_1: entered promiscuous mode [ 1150.504671][ T1896] debugfs: 'hsr0' already exists in 'hsr' [ 1150.511076][ T1896] Cannot create hsr debugfs directory [ 1150.567556][ T1883] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.577869][ T1883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.586031][ T1883] bridge_slave_0: entered allmulticast mode [ 1150.594059][ T1883] bridge_slave_0: entered promiscuous mode [ 1150.622165][ T1887] Bluetooth: hci16: command tx timeout [ 1150.638225][ T1883] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.645542][ T1883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.653035][ T1883] bridge_slave_1: entered allmulticast mode [ 1150.660448][ T1883] bridge_slave_1: entered promiscuous mode [ 1150.853613][ T1883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1150.913414][ T1883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1150.949469][ T1886] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.958233][ T1886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.966882][ T1886] bridge_slave_0: entered allmulticast mode [ 1150.976183][ T1886] bridge_slave_0: entered promiscuous mode [ 1151.022649][ T1887] Bluetooth: hci18: command tx timeout [ 1151.028899][ T50] Bluetooth: hci17: command tx timeout [ 1151.033160][ T1883] team0: Port device team_slave_0 added [ 1151.044932][ T1883] team0: Port device team_slave_1 added [ 1151.057155][ T1886] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.065056][ T1886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.072578][ T1886] bridge_slave_1: entered allmulticast mode [ 1151.079777][ T1886] bridge_slave_1: entered promiscuous mode [ 1151.155913][ T1886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1151.166120][ T1883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1151.173947][ T1883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1151.200012][ T1883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1151.213486][ T1883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1151.220482][ T1883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1151.246514][ T1883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1151.265124][ T50] Bluetooth: hci19: command tx timeout [ 1151.290539][ T1886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1151.353773][ T1886] team0: Port device team_slave_0 added [ 1151.387974][ T1886] team0: Port device team_slave_1 added [ 1151.441190][ T1883] hsr_slave_0: entered promiscuous mode [ 1151.447903][ T1883] hsr_slave_1: entered promiscuous mode [ 1151.454355][ T1883] debugfs: 'hsr0' already exists in 'hsr' [ 1151.460190][ T1883] Cannot create hsr debugfs directory [ 1151.466793][ T1886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1151.475530][ T1886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1151.506821][ T1886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1151.520019][ T1886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1151.527637][ T1886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1151.555250][ T1886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1151.714849][ T1886] hsr_slave_0: entered promiscuous mode [ 1151.723063][ T1886] hsr_slave_1: entered promiscuous mode [ 1151.729620][ T1886] debugfs: 'hsr0' already exists in 'hsr' [ 1151.737580][ T1886] Cannot create hsr debugfs directory [ 1152.532724][ T50] Bluetooth: hci15: command tx timeout [ 1152.712272][ T50] Bluetooth: hci16: command tx timeout [ 1153.105163][ T50] Bluetooth: hci17: command tx timeout [ 1153.113664][ T1887] Bluetooth: hci18: command tx timeout [ 1153.341713][ T1887] Bluetooth: hci19: command tx timeout [ 1153.886014][T24107] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1154.781674][ T1887] Bluetooth: hci16: command tx timeout [ 1154.942513][ T11] block nbd6: Possible stuck request ffff888027b20000: control (read@0,1024B). Runtime 180 seconds [ 1154.955239][ T11] block nbd6: Possible stuck request ffff888027b201c0: control (read@1024,1024B). Runtime 180 seconds [ 1154.966268][ T11] block nbd6: Possible stuck request ffff888027b20380: control (read@2048,1024B). Runtime 180 seconds [ 1154.977342][ T11] block nbd6: Possible stuck request ffff888027b20540: control (read@3072,1024B). Runtime 180 seconds [ 1155.185106][ T1887] Bluetooth: hci18: command tx timeout [ 1155.193406][ T50] Bluetooth: hci17: command tx timeout [ 1155.422319][ T50] Bluetooth: hci19: command tx timeout [ 1155.585032][ T31] INFO: task syz.1.9691:1612 blocked for more than 143 seconds. [ 1155.593547][ T31] Not tainted syzkaller #0 [ 1155.598538][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1155.608136][ T31] task:syz.1.9691 state:D stack:26312 pid:1612 tgid:1601 ppid:29342 task_flags:0x480140 flags:0x00080002 [ 1155.620900][ T31] Call Trace: [ 1155.624800][ T31] [ 1155.628357][ T31] __schedule+0x17d9/0x56c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1155.633776][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1155.638843][ T31] ? __pfx___schedule+0x10/0x10 [ 1155.644378][ T31] ? schedule+0x90/0x2b0 [ 1155.648686][ T31] schedule+0x164/0x2b0 [ 1155.654934][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 1155.660625][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 1155.668420][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 1155.675914][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1155.683195][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 1155.689608][ T31] nbd_set_size+0x454/0x680 [ 1155.695349][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 1155.700458][ T31] ? nla_memcpy+0x5b/0xc0 [ 1155.705938][ T31] nbd_genl_reconfigure+0x7e9/0x1e80 [ 1155.724622][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1155.744030][ T31] ? rcu_is_watching+0x15/0xb0 [ 1155.763548][ T31] ? trace_kmalloc+0x2a/0xf0 [ 1155.769817][ T31] ? __kmalloc_noprof+0x396/0x720 [ 1155.782733][ T31] ? __nla_parse+0x40/0x60 [ 1155.788187][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1155.802397][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1155.822849][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 1155.838662][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1155.846869][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1155.852114][ T31] genl_rcv_msg+0x614/0x7a0 [ 1155.856766][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1155.862673][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1155.868634][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1155.874282][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1155.879360][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1155.885160][ T31] ? down_read+0x2be/0x330 [ 1155.889593][ T31] genl_rcv+0x28/0x40 [ 1155.894179][ T31] netlink_unicast+0x7bb/0x940 [ 1155.898997][ T31] netlink_sendmsg+0x813/0xb40 [ 1155.904564][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1155.909910][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1155.915434][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1155.920747][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1155.926339][ T31] ____sys_sendmsg+0x54e/0x850 [ 1155.931117][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1155.937725][ T31] ? import_iovec+0x73/0xa0 [ 1155.942841][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1155.947547][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1155.955026][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1155.960448][ T31] ? futex_wake+0x51b/0x5f0 [ 1155.965778][ T31] ? __fget_files+0x2a/0x420 [ 1155.970418][ T31] ? __fget_files+0x3a2/0x420 [ 1155.975806][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1155.980781][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1155.987260][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.993923][ T31] do_syscall_64+0x174/0x580 [ 1155.998565][ T31] ? trace_irq_disable+0x3b/0x140 [ 1156.003842][ T31] ? clear_bhb_loop+0x40/0x90 [ 1156.008652][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.014749][ T31] RIP: 0033:0x7ff48b99de99 [ 1156.019194][ T31] RSP: 002b:00007ff48c78a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1156.027799][ T31] RAX: ffffffffffffffda RBX: 00007ff48bc26090 RCX: 00007ff48b99de99 [ 1156.036726][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1156.045383][ T31] RBP: 00007ff48ba33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1156.054102][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1156.063261][ T31] R13: 00007ff48bc26128 R14: 00007ff48bc26090 R15: 00007fff67b4f838 [ 1156.071372][ T31] [ 1156.075139][ T31] INFO: task syz.4.9708:1635 blocked for more than 143 seconds. [ 1156.083510][ T31] Not tainted syzkaller #0 [ 1156.088501][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1156.097938][ T31] task:syz.4.9708 state:D stack:27872 pid:1635 tgid:1634 ppid:30371 task_flags:0x400040 flags:0x00080002 [ 1156.110637][ T31] Call Trace: [ 1156.114536][ T31] [ 1156.117494][ T31] __schedule+0x17d9/0x56c0 [ 1156.122653][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1156.127651][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1156.133292][ T31] ? __pfx___schedule+0x10/0x10 [ 1156.138622][ T31] ? schedule+0x90/0x2b0 [ 1156.143484][ T31] schedule+0x164/0x2b0 [ 1156.147703][ T31] schedule_preempt_disabled+0x13/0x30 [ 1156.153958][ T31] __mutex_lock+0x7bf/0x1550 [ 1156.158793][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1156.164219][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1156.168940][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1156.174671][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 1156.179858][ T31] ? radix_tree_lookup+0x240/0x290 [ 1156.185952][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1156.190579][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1156.196267][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1156.202127][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1156.207010][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1156.212605][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1156.217920][ T31] ? down_read+0x2be/0x330 [ 1156.225109][ T31] genl_rcv+0x28/0x40 [ 1156.229155][ T31] netlink_unicast+0x7bb/0x940 [ 1156.234643][ T31] netlink_sendmsg+0x813/0xb40 [ 1156.239484][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1156.245770][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1156.250754][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1156.256682][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1156.262637][ T31] __sys_sendto+0x408/0x5a0 [ 1156.267181][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1156.272936][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 1156.278294][ T31] __x64_sys_sendto+0xde/0x100 [ 1156.283457][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.289525][ T31] do_syscall_64+0x174/0x580 [ 1156.294480][ T31] ? trace_irq_disable+0x3b/0x140 [ 1156.299589][ T31] ? clear_bhb_loop+0x40/0x90 [ 1156.305340][ T4994] udevd[4994]: worker [32333] /devices/virtual/block/nbd2 timeout; kill it [ 1156.306303][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.315090][ T4994] udevd[4994]: seq 34030 '/devices/virtual/block/nbd2' killed [ 1156.320879][ T31] RIP: 0033:0x7f7a5cf5e6ce [ 1156.320908][ T31] RSP: 002b:00007f7a5def0e88 EFLAGS: 00000246 [ 1156.330045][ T4994] udevd[4994]: worker [30019] /devices/virtual/block/nbd6 timeout; kill it [ 1156.333469][ T31] ORIG_RAX: 000000000000002c [ 1156.333483][ T31] RAX: ffffffffffffffda RBX: 00007f7a5def26c0 RCX: 00007f7a5cf5e6ce [ 1156.333498][ T31] RDX: 0000000000000020 RSI: 00007f7a5def1000 RDI: 0000000000000004 [ 1156.333511][ T31] RBP: 0000000000000000 R08: 00007f7a5def0f04 R09: 000000000000000c [ 1156.333524][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1156.333537][ T31] R13: 00007f7a5def0f58 R14: 00007f7a5def1000 R15: 0000000000000000 [ 1156.333572][ T31] [ 1156.333664][ T31] INFO: task syz.3.9706:1640 blocked for more than 144 seconds. [ 1156.333682][ T31] Not tainted syzkaller #0 [ 1156.333694][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1156.333705][ T31] task:syz.3.9706 state:D stack:27872 pid:1640 tgid:1638 ppid:28425 task_flags:0x400040 flags:0x00080002 [ 1156.333761][ T31] Call Trace: [ 1156.333769][ T31] [ 1156.333783][ T31] __schedule+0x17d9/0x56c0 [ 1156.333819][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1156.333851][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1156.333899][ T31] ? __pfx___schedule+0x10/0x10 [ 1156.333938][ T31] ? schedule+0x90/0x2b0 [ 1156.333971][ T31] schedule+0x164/0x2b0 [ 1156.334002][ T31] schedule_preempt_disabled+0x13/0x30 [ 1156.334027][ T31] __mutex_lock+0x7bf/0x1550 [ 1156.334051][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1156.334072][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1156.334099][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1156.334125][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 1156.334150][ T31] ? radix_tree_lookup+0x240/0x290 [ 1156.344814][ T4994] udevd[4994]: seq 34243 '/devices/virtual/block/nbd6' killed [ 1156.348874][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1156.530920][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1156.536685][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1156.542885][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1156.548361][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1156.554184][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1156.559530][ T31] ? down_read+0x2be/0x330 [ 1156.564748][ T31] genl_rcv+0x28/0x40 [ 1156.568817][ T31] netlink_unicast+0x7bb/0x940 [ 1156.574259][ T31] netlink_sendmsg+0x813/0xb40 [ 1156.579152][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1156.584797][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1156.589899][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1156.595511][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1156.600601][ T31] __sys_sendto+0x408/0x5a0 [ 1156.605685][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1156.610816][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 1156.617219][ T31] __x64_sys_sendto+0xde/0x100 [ 1156.622930][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.629070][ T31] do_syscall_64+0x174/0x580 [ 1156.634290][ T31] ? trace_irq_disable+0x3b/0x140 [ 1156.639359][ T31] ? clear_bhb_loop+0x40/0x90 [ 1156.644613][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.650979][ T31] RIP: 0033:0x7f34a415e6ce [ 1156.655935][ T31] RSP: 002b:00007f34a5065e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1156.664966][ T31] RAX: ffffffffffffffda RBX: 00007f34a50676c0 RCX: 00007f34a415e6ce [ 1156.673425][ T31] RDX: 0000000000000020 RSI: 00007f34a5066000 RDI: 0000000000000004 [ 1156.681413][ T31] RBP: 0000000000000000 R08: 00007f34a5065f04 R09: 000000000000000c [ 1156.690072][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1156.698603][ T31] R13: 00007f34a5065f58 R14: 00007f34a5066000 R15: 0000000000000000 [ 1156.707621][ T31] [ 1156.710702][ T31] INFO: task syz.0.9710:1645 blocked for more than 144 seconds. [ 1156.718861][ T31] Not tainted syzkaller #0 [ 1156.724443][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1156.733727][ T31] task:syz.0.9710 state:D stack:28136 pid:1645 tgid:1642 ppid:29773 task_flags:0x400140 flags:0x00080002 [ 1156.746476][ T31] Call Trace: [ 1156.749785][ T31] [ 1156.753661][ T31] __schedule+0x17d9/0x56c0 [ 1156.758198][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1156.763804][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1156.768805][ T31] ? unwind_next_frame+0x8f/0x2550 [ 1156.774537][ T31] ? __pfx___schedule+0x10/0x10 [ 1156.779438][ T31] ? schedule+0x90/0x2b0 [ 1156.784622][ T31] schedule+0x164/0x2b0 [ 1156.788830][ T31] schedule_preempt_disabled+0x13/0x30 [ 1156.794742][ T31] __mutex_lock+0x7bf/0x1550 [ 1156.799330][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1156.804696][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1156.809405][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1156.815070][ T31] ? stack_trace_save+0xa9/0x100 [ 1156.820029][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1156.825616][ T31] ? radix_tree_lookup+0x240/0x290 [ 1156.830804][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1156.835662][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1156.840684][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1156.846230][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1156.851106][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1156.857160][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1156.864631][ T31] ? down_read+0x2be/0x330 [ 1156.869082][ T31] genl_rcv+0x28/0x40 [ 1156.873216][ T31] netlink_unicast+0x7bb/0x940 [ 1156.878011][ T31] netlink_sendmsg+0x813/0xb40 [ 1156.883079][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1156.888394][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1156.893351][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1156.898633][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1156.903673][ T31] __sys_sendto+0x408/0x5a0 [ 1156.908297][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1156.913354][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 1156.918671][ T31] __x64_sys_sendto+0xde/0x100 [ 1156.939119][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.945250][ T31] do_syscall_64+0x174/0x580 [ 1156.949844][ T31] ? trace_irq_disable+0x3b/0x140 [ 1156.954865][ T31] ? clear_bhb_loop+0x40/0x90 [ 1156.959560][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.965452][ T31] RIP: 0033:0x7f69c9d5e6ce [ 1156.969856][ T31] RSP: 002b:00007f69c7ff4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1156.978255][ T31] RAX: ffffffffffffffda RBX: 00007f69c7ff66c0 RCX: 00007f69c9d5e6ce [ 1156.986307][ T31] RDX: 0000000000000020 RSI: 00007f69c7ff5000 RDI: 0000000000000005 [ 1156.994278][ T31] RBP: 0000000000000000 R08: 00007f69c7ff4f04 R09: 000000000000000c [ 1157.002250][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1157.010339][ T31] R13: 00007f69c7ff4f58 R14: 00007f69c7ff5000 R15: 0000000000000000 [ 1157.018411][ T31] [ 1157.021450][ T31] INFO: task syz.0.9710:1654 blocked for more than 144 seconds. [ 1157.029096][ T31] Not tainted syzkaller #0 [ 1157.046209][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1157.056048][ T31] task:syz.0.9710 state:D stack:27456 pid:1654 tgid:1642 ppid:29773 task_flags:0x400040 flags:0x00080002 [ 1157.070273][ T31] Call Trace: [ 1157.074405][ T31] [ 1157.077385][ T31] __schedule+0x17d9/0x56c0 [ 1157.082590][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1157.087594][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1157.093148][ T31] ? unwind_next_frame+0x8f/0x2550 [ 1157.098399][ T31] ? __pfx___schedule+0x10/0x10 [ 1157.104233][ T31] ? schedule+0x90/0x2b0 [ 1157.108528][ T31] schedule+0x164/0x2b0 [ 1157.113473][ T31] schedule_preempt_disabled+0x13/0x30 [ 1157.119080][ T31] __mutex_lock+0x7bf/0x1550 [ 1157.124380][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1157.129194][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1157.134447][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1157.139509][ T31] ? stack_trace_save+0xa9/0x100 [ 1157.145145][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1157.150188][ T31] ? radix_tree_lookup+0x240/0x290 [ 1157.158191][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1157.166523][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1157.171854][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1157.176980][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1157.182197][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1157.187376][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1157.193329][ T31] ? down_read+0x2be/0x330 [ 1157.197956][ T31] genl_rcv+0x28/0x40 [ 1157.202652][ T31] netlink_unicast+0x7bb/0x940 [ 1157.207666][ T31] netlink_sendmsg+0x813/0xb40 [ 1157.213232][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1157.218579][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1157.224200][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1157.229563][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1157.235213][ T31] ____sys_sendmsg+0x54e/0x850 [ 1157.240049][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1157.245999][ T31] ? import_iovec+0x73/0xa0 [ 1157.250578][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1157.255844][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1157.260858][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1157.271108][ T31] ? futex_wake+0x51b/0x5f0 [ 1157.279427][ T31] ? __fget_files+0x2a/0x420 [ 1157.285042][ T31] ? __fget_files+0x3a2/0x420 [ 1157.289799][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1157.295422][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1157.301130][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.307902][ T31] do_syscall_64+0x174/0x580 [ 1157.313230][ T31] ? trace_irq_disable+0x3b/0x140 [ 1157.318319][ T31] ? clear_bhb_loop+0x40/0x90 [ 1157.323841][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.329794][ T31] RIP: 0033:0x7f69c9d9de99 [ 1157.334969][ T31] RSP: 002b:00007f69c776e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1157.344646][ T31] RAX: ffffffffffffffda RBX: 00007f69ca026360 RCX: 00007f69c9d9de99 [ 1157.354092][ T31] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1157.362163][ T31] RBP: 00007f69c9e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1157.370201][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1157.378802][ T31] R13: 00007f69ca0263f8 R14: 00007f69ca026360 R15: 00007ffd2290b328 [ 1157.387603][ T31] [ 1157.390831][ T31] INFO: task syz.2.9709:1644 blocked for more than 145 seconds. [ 1157.399991][ T31] Not tainted syzkaller #0 [ 1157.405717][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1157.415146][ T31] task:syz.2.9709 state:D stack:27464 pid:1644 tgid:1643 ppid:28950 task_flags:0x400140 flags:0x00080002 [ 1157.431025][ T31] Call Trace: [ 1157.434854][ T31] [ 1157.437891][ T31] __schedule+0x17d9/0x56c0 [ 1157.443045][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1157.448049][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1157.453227][ T31] ? __pfx___schedule+0x10/0x10 [ 1157.458122][ T31] ? schedule+0x90/0x2b0 [ 1157.462574][ T31] schedule+0x164/0x2b0 [ 1157.466794][ T31] schedule_preempt_disabled+0x13/0x30 [ 1157.472749][ T31] __mutex_lock+0x7bf/0x1550 [ 1157.477377][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1157.482965][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1157.487739][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1157.493399][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 1157.498541][ T31] ? radix_tree_lookup+0x240/0x290 [ 1157.505099][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1157.509762][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1157.515446][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1157.520872][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1157.526270][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1157.531434][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1157.537270][ T31] ? down_read+0x2be/0x330 [ 1157.542239][ T31] genl_rcv+0x28/0x40 [ 1157.546275][ T31] netlink_unicast+0x7bb/0x940 [ 1157.551063][ T31] netlink_sendmsg+0x813/0xb40 [ 1157.556369][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1157.562225][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1157.567198][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1157.573775][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1157.578915][ T31] __sys_sendto+0x408/0x5a0 [ 1157.584547][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1157.589721][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 1157.595558][ T31] __x64_sys_sendto+0xde/0x100 [ 1157.600428][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.607147][ T31] do_syscall_64+0x174/0x580 [ 1157.612283][ T31] ? trace_irq_disable+0x3b/0x140 [ 1157.617367][ T31] ? clear_bhb_loop+0x40/0x90 [ 1157.622650][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.628591][ T31] RIP: 0033:0x7f30d875e6ce [ 1157.633523][ T31] RSP: 002b:00007f30d69f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1157.642532][ T31] RAX: ffffffffffffffda RBX: 00007f30d69f66c0 RCX: 00007f30d875e6ce [ 1157.650549][ T31] RDX: 0000000000000020 RSI: 00007f30d69f5000 RDI: 0000000000000007 [ 1157.659134][ T31] RBP: 0000000000000000 R08: 00007f30d69f4f04 R09: 000000000000000c [ 1157.667779][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 1157.677017][ T31] R13: 00007f30d69f4f58 R14: 00007f30d69f5000 R15: 0000000000000000 [ 1157.685697][ T31] [ 1157.688849][ T31] [ 1157.688849][ T31] Showing all locks held in the system: [ 1157.697344][ T31] 1 lock held by khungtaskd/31: [ 1157.702792][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1157.713333][ T31] 2 locks held by getty/5385: [ 1157.718074][ T31] #0: ffff8880369770a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1157.728564][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1157.739286][ T31] 1 lock held by udevd/29944: [ 1157.744568][ T31] #0: ffff8880207ba350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1157.754031][ T31] 1 lock held by udevd/30018: [ 1157.758697][ T31] #0: ffff8880207be350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1157.767939][ T31] 1 lock held by udevd/30019: [ 1157.772604][ T31] #0: ffff888025dae350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1157.781838][ T31] 1 lock held by udevd/30913: [ 1157.796797][ T31] #0: ffff888025c65350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1157.806116][ T31] 1 lock held by udevd/31333: [ 1157.810930][ T31] #0: ffff888068056350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1157.820217][ T31] 1 lock held by udevd/32333: [ 1157.824953][ T31] #0: ffff88801ffa6350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1157.834195][ T31] 1 lock held by udevd/366: [ 1157.838864][ T31] #0: ffff8880260c6350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1157.848416][ T31] 6 locks held by syz.1.9691/1612: [ 1157.853577][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1157.861763][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1157.870764][ T31] #2: ffff888047110a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4bc/0x1e80 [ 1157.881290][ T31] #3: ffff888027e30fe8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 1157.890685][ T31] #4: ffff888027e309b0 (&q->q_usage_counter(io)#69){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 1157.916005][ T31] #5: ffff888027e309e8 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 1157.929937][ T31] 2 locks held by syz.4.9708/1635: [ 1157.935077][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1157.943297][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1157.952288][ T31] 2 locks held by syz.3.9706/1640: [ 1157.957400][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1157.965624][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1157.974580][ T31] 2 locks held by syz.0.9710/1645: [ 1157.979674][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1157.987848][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1157.996816][ T31] 2 locks held by syz.0.9710/1654: [ 1158.001938][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1158.010498][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1158.019465][ T31] 2 locks held by syz.2.9709/1644: [ 1158.024570][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1158.040901][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1158.050183][ T31] 2 locks held by syz-executor/1660: [ 1158.055738][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1158.065286][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1158.075107][ T31] 2 locks held by syz-executor/1677: [ 1158.080436][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1158.090104][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1158.099913][ T31] 2 locks held by syz-executor/1686: [ 1158.106202][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1158.115361][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1158.127066][ T31] 2 locks held by syz-executor/1688: [ 1158.134062][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1158.144702][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1158.154423][ T31] 2 locks held by syz-executor/1700: [ 1158.159744][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1158.168739][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1158.178602][ T31] 2 locks held by syz-executor/1760: [ 1158.184577][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1158.194306][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1158.204029][ T31] 2 locks held by syz-executor/1781: [ 1158.209365][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1158.218608][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1158.228476][ T31] 2 locks held by syz-executor/1784: [ 1158.235603][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1158.244701][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1158.254359][ T31] 2 locks held by syz-executor/1790: [ 1158.259691][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1158.268552][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1158.278379][ T31] 2 locks held by syz-executor/1791: [ 1158.284359][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1158.293724][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1158.306015][ T31] 2 locks held by syz-executor/1858: [ 1158.311345][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1158.320507][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1158.329919][ T31] 2 locks held by syz-executor/1879: [ 1158.335299][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1158.344095][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1158.354208][ T31] 2 locks held by syz-executor/1883: [ 1158.359519][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1158.368491][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1158.379031][ T31] 2 locks held by syz-executor/1886: [ 1158.385639][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1158.395349][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1158.405152][ T31] 2 locks held by syz-executor/1896: [ 1158.410561][ T31] #0: ffffffff9009d5c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1158.419334][ T31] #1: ffffffff9009d400 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1158.429964][ T31] [ 1158.433052][ T31] ============================================= [ 1158.433052][ T31] [ 1158.442268][ T31] NMI backtrace for cpu 1 [ 1158.442286][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1158.442307][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1158.442319][ T31] Call Trace: [ 1158.442327][ T31] [ 1158.442336][ T31] dump_stack_lvl+0xe8/0x150 [ 1158.442370][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1158.442397][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1158.442428][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1158.442456][ T31] sys_info+0x135/0x170 [ 1158.442477][ T31] watchdog+0xfd7/0x1030 [ 1158.442507][ T31] ? watchdog+0x1c7/0x1030 [ 1158.442537][ T31] kthread+0x388/0x470 [ 1158.442564][ T31] ? __pfx_watchdog+0x10/0x10 [ 1158.442584][ T31] ? __pfx_kthread+0x10/0x10 [ 1158.442612][ T31] ret_from_fork+0x514/0xb70 [ 1158.442643][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1158.442670][ T31] ? __switch_to+0xc89/0x1420 [ 1158.442695][ T31] ? __pfx_kthread+0x10/0x10 [ 1158.442722][ T31] ret_from_fork_asm+0x1a/0x30 [ 1158.442756][ T31] [ 1158.442763][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1158.560912][ C0] NMI backtrace for cpu 0 [ 1158.560931][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1158.560950][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1158.560961][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1158.560994][ C0] Code: cc 7f 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 9a 19 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1158.561010][ C0] RSP: 0018:ffffffff8e807de0 EFLAGS: 00000242 [ 1158.561026][ C0] RAX: 0000000003c69343 RBX: ffffffff819ab450 RCX: 0000000080000001 [ 1158.561039][ C0] RDX: 0000000000000001 RSI: ffffffff8e22ba03 RDI: ffffffff8c4bda80 [ 1158.561052][ C0] RBP: ffffffff8e807eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 1158.561065][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 1158.561077][ C0] R13: 1ffffffff1d11de8 R14: 1ffffffff1d00fc4 R15: dffffc0000000000 [ 1158.561090][ C0] FS: 0000000000000000(0000) GS:ffff888124f54000(0000) knlGS:0000000000000000 [ 1158.561105][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1158.561117][ C0] CR2: 000055db8da03f40 CR3: 000000000e946000 CR4: 00000000003526f0 [ 1158.561132][ C0] Call Trace: [ 1158.561140][ C0] [ 1158.561146][ C0] default_idle+0x9/0x20 [ 1158.561165][ C0] default_idle_call+0x72/0xb0 [ 1158.561184][ C0] do_idle+0x2e0/0x540 [ 1158.561208][ C0] ? __pfx_do_idle+0x10/0x10 [ 1158.561231][ C0] ? do_idle+0x4cb/0x540 [ 1158.561254][ C0] cpu_startup_entry+0x43/0x60 [ 1158.561276][ C0] rest_init+0x2de/0x300 [ 1158.561296][ C0] start_kernel+0x392/0x3e0 [ 1158.561379][ C0] x86_64_start_reservations+0x24/0x30 [ 1158.561449][ C0] x86_64_start_kernel+0x137/0x1b0 [ 1158.561469][ C0] common_startup_64+0x13e/0x157 [ 1158.561492][ C0] [ 1158.567001][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1158.567023][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1158.567045][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1158.567057][ T31] Call Trace: [ 1158.567067][ T31] [ 1158.567078][ T31] vpanic+0x56c/0xa60 [ 1158.567111][ T31] ? __pfx___schedule+0x10/0x10 [ 1158.567140][ T31] ? __pfx_vpanic+0x10/0x10 [ 1158.567177][ T31] panic+0xc5/0xd0 [ 1158.567203][ T31] ? __pfx_panic+0x10/0x10 [ 1158.567228][ T31] ? preempt_schedule_common+0x82/0xd0 [ 1158.567255][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 1158.567279][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1158.567309][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1158.567335][ T31] watchdog+0x1030/0x1030 [ 1158.567366][ T31] ? watchdog+0x1c7/0x1030 [ 1158.567394][ T31] kthread+0x388/0x470 [ 1158.567420][ T31] ? __pfx_watchdog+0x10/0x10 [ 1158.567440][ T31] ? __pfx_kthread+0x10/0x10 [ 1158.567467][ T31] ret_from_fork+0x514/0xb70 [ 1158.567497][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1158.567523][ T31] ? __switch_to+0xc89/0x1420 [ 1158.567548][ T31] ? __pfx_kthread+0x10/0x10 [ 1158.567575][ T31] ret_from_fork_asm+0x1a/0x30 [ 1158.567608][ T31] [ 1158.866261][ T31] Kernel Offset: disabled [ 1158.870583][ T31] Rebooting in 86400 seconds..