last executing test programs: 18.474171433s ago: executing program 3 (id=16321): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1800000014002100000000400000000033001ced01000000a4489fa8ca2d5ae1def7c32f9dce812d5621ba115f8bcab6d4ff30c2f05ff8675173e74bb6bf0681d8f2f74b73252dd64149ad6f0174b39ce19890e611ff3ecce0fde90a700d895c3f1a3f7cbf8a96c6a36580d7795f7096c0caa7d73b9274778604da7b891b69586a694c6572d7d6a279278f3d6870b944dce1ca9d92573bd3375a1ffd4764d32a73f1f25424a4e126c64b13ea2fc3da8d0d56146a4f9ed7732d491f301d17ab82d3f9a99cb63fd590997c9cbfbcd7c8"], 0x18}}, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001b040)) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) 18.408606729s ago: executing program 3 (id=16323): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4a, &(0x7f0000000600)=0x3fa, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x4a, &(0x7f0000000600)=0x3fa, 0x4) r2 = socket(0x2d, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) socket$inet6(0xa, 0x1, 0x0) (async) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x0, 0x0, 0x103, 0x1}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000140)={@local, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000040)=0x20) unshare(0x20400) (async) unshare(0x20400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) (async) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x100010, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x100010, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000fd9100000000000018130000", @ANYRES32=r5, @ANYBLOB="0000000000000000850000001f0000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r2}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xeac, &(0x7f0000002bc0)=ANY=[@ANYBLOB="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"/3756], 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) (async) r7 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x80, 0xd, 0x2, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @remote}, 0x7800, 0x10, 0x4853, 0x400000}}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff}, 0x48) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r8}, 0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xffffffff}) ioctl(r9, 0x8b22, &(0x7f0000000040)) (async) ioctl(r9, 0x8b22, &(0x7f0000000040)) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/53, 0xf98}], 0x1) (async) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/53, 0xf98}], 0x1) 18.270765343s ago: executing program 1 (id=16325): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newtfilter={0x54, 0x2c, 0xd27, 0x3, 0x1, {0x0, 0x0, 0x0, r1, {0x4, 0xfff3}, {0x2000}, {0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x2, 0x2, 0x7f}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x3}]}}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40081}, 0x24000084) 18.173415703s ago: executing program 1 (id=16326): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000080)=0x9, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e2e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 17.980367808s ago: executing program 1 (id=16330): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x140c, 0x10, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x894) (async) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e, 0x800) r2 = accept4$unix(r1, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r3, 0x0, 0xcd, &(0x7f0000000280)={@empty, @broadcast, 0xffffffffffffffff, "002b14551adbf6b593a3c37e49fb279cba5ac436b769488275e1e31553db07c1", 0x3ff, 0x40, 0x3, 0x4}, 0x3c) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x2, {0x0, 0x0, 0x2}}, 0x18) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, &(0x7f0000000380)=0xfe, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x410000, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x98, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r8}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x168}, @NL80211_ATTR_STA_WME={0x54, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xe}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x47}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x10}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xa0}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2e}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x8002) (async) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000600), 0x4) (async) r9 = socket$alg(0x26, 0x5, 0x0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000017c0)={0x11, 0x0, 0x0}, &(0x7f0000001800)=0x14) sendmsg$inet(r9, &(0x7f0000001900)={&(0x7f0000000640)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001780)=[{&(0x7f0000000680)="d07926", 0x3}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="18cf4670db51c5ae9b8b68e2ef9316556a459f6e3612d1142c678c4a5dfdc609cce8b0ebc59976af29228ed5d03f7196cfd0865aba6b5c3c12faf5603b00a0dabaf1fad9052fce07080c3b4e82d9a3db50be565a5970", 0x56}, {&(0x7f0000001740)="d55320de138dc6f3f784e3b3b6c7a0", 0xf}], 0x4, &(0x7f0000001840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @loopback, @multicast2}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0x3d, [@remote, @loopback, @multicast1, @multicast2, @remote, @private=0xa010101, @remote, @dev={0xac, 0x14, 0x14, 0x23}]}, @timestamp={0x44, 0x24, 0x19, 0x0, 0xd, [0xc8a, 0x3ce, 0x2, 0x1, 0x8, 0x1, 0x1, 0x2]}, @generic={0x89, 0xa, "6d095a0b0796347b"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}], 0xa0}, 0x80) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001940)={0x63dc9fcb, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001980)=r11, 0x4) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000019c0), r12) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$kcm(0x29, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000001a00), r6) (async) r13 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r13, 0x0, 0xc8, &(0x7f0000001a40), 0x4) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x9c45, @bearer=@l2={'ib', 0x3a, 'netpci0\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8804}, 0x200c8054) sendmsg$NFC_CMD_GET_DEVICE(r12, &(0x7f0000001d80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x40d0) 17.968859428s ago: executing program 3 (id=16332): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r3, 0x40046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r3, 0x40046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000040)=0x3, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000007cc0)=@o_path={&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, r4}, 0x18) (async) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000007cc0)=@o_path={&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, r4}, 0x18) socket$nl_route(0x10, 0x3, 0x0) connect$ax25(r5, &(0x7f0000000080)={{0x3, @null, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) connect$ax25(r5, &(0x7f0000000080)={{0x3, @null, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 17.711975381s ago: executing program 1 (id=16335): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000008c0)=0x576, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000", 0x36}], 0x1) 17.71077574s ago: executing program 3 (id=16336): socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) connect$pppl2tp(r0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000041c0)=ANY=[@ANYBLOB="140000db00000000000400008000000000000000"], 0x14}], 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f00000004c0), 0x48, 0x820b, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) writev(r6, &(0x7f0000003700)=[{&(0x7f0000002380)="d3", 0x1}], 0x1) r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) r9 = accept4(r5, 0x0, 0x0, 0x800) write(r9, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) 17.590087543s ago: executing program 0 (id=16338): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000b00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.512327116s ago: executing program 0 (id=16340): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0xd, 0xe}}}, 0x24}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000500000000000a00000000000000ff01000000000000000000000000000100000000000000000200120002000200000000000000000006002b00000000000000000000000000fc010000000000000000000000000000fc01000000000000007900000000000004000400"/192], 0xc0}}, 0x0) sendto$packet(r1, &(0x7f0000000000)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x1a, 0x0, &(0x7f0000000040)={0x11, 0x0, r2}, 0x14) 17.510725031s ago: executing program 4 (id=16341): pipe(&(0x7f0000000080)) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') r1 = socket(0x10, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @aes256, 0x0, @desc2}) write(r1, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) 17.283801201s ago: executing program 4 (id=16343): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000880) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 17.281901521s ago: executing program 0 (id=16344): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6b3a6e7e216920a8}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 17.09421378s ago: executing program 2 (id=16346): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r2, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x41, 0x5f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x38}, 0x1, 0x0, 0x30000}, 0x0) 17.09406043s ago: executing program 0 (id=16347): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x210, 0x206, 0x240, 0x210, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xd8, 0x138, 0x38010000, {0x390, 0x8f00}, [@common=@set={{0x40}, {{0x0, [0x5, 0x2, 0x1, 0x4, 0x5], 0x3}}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7, 0x0, [0x2d, 0x12, 0x2e, 0x40, 0xd, 0x3a, 0x23, 0x2b, 0x103, 0x1c, 0x4037, 0x15, 0x31, 0x4, 0x31, 0x1d], 0x1, 0x8, 0x7}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x900, 0x10, 0x8, 'snmp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 17.048827344s ago: executing program 4 (id=16348): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x10, &(0x7f00000000c0)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x5c83}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x3}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}}, 0x48010) 17.031144597s ago: executing program 2 (id=16349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x2cc, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x710}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf7}, @TIPC_NLA_NODE_ID={0x6b, 0x3, "e4f7e6bae403b8567d3815adc65d68d071364027caf7db20ac173d8207dc26029c24fa2e6017f9786b211e6e2a80d1aa2d138e437eaffc85a3f31b01c169e7017cb482d50f40a443478f72186beed5bb254b7a9b64ce6d808ef2ab2a311c159214c0aaef06f05b"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}]}, @TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5564}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x1}, 0x20004041) (async) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x2cc, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x710}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf7}, @TIPC_NLA_NODE_ID={0x6b, 0x3, "e4f7e6bae403b8567d3815adc65d68d071364027caf7db20ac173d8207dc26029c24fa2e6017f9786b211e6e2a80d1aa2d138e437eaffc85a3f31b01c169e7017cb482d50f40a443478f72186beed5bb254b7a9b64ce6d808ef2ab2a311c159214c0aaef06f05b"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}]}, @TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5564}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x1}, 0x20004041) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bb9cba53c20aeae2e758bb77381d70252cfbf6152552308dcf4ec0a154d8373458841c98c7ff80b170e1d627c706810d1e2181199d321814e3c2af22daa2510d4dc35a79ca1a35f9b90409a8b115f7580f4387a9059e819262087935f4d3", @ANYRESHEX=r0, @ANYRESHEX=r1], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x21e142, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee01) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) 16.917757977s ago: executing program 0 (id=16350): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xac, 0x24, 0x100, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0xfffd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) 16.917270281s ago: executing program 2 (id=16351): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000b00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x61000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.864269375s ago: executing program 4 (id=16352): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) (async) r2 = socket$isdn(0x22, 0x3, 0x1) ioctl$IMCTRLREQ(r2, 0x80044945, &(0x7f0000000280)={0x0, 0x7, 0x4, 0x22000}) connect$tipc(r1, &(0x7f0000003100)=@id, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) (async) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x11, 0x3, 0x8, 0x0, 0x5, 0x2, 0x1, 0x2, 0x6}}) (async) r3 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x11d, 0x70, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x68, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}]}]}], {0x14}}, 0x90}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000084c0)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000480)="c8858b0407fc12a9be2eddb2", 0xc}], 0x1, 0x0, 0x0, 0x4000004}}], 0x1, 0x0) (async) r7 = socket(0x2a, 0x2, 0x0) listen(r5, 0xf) (async) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfffb, 0x4}, {}, {0x1, 0xfff9}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_LINK={0x8}, @TCA_U32_SEL={0x14, 0x5, {0xb, 0x0, 0x0, 0xe60, 0x9, 0x9, 0x0, 0x2}}, @TCA_U32_CLASSID={0x8, 0x1, {0xe}}, @TCA_U32_LINK={0x8, 0x3, 0x3}]}}]}, 0x5c}}, 0x24000000) (async) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) accept4(r6, &(0x7f0000000200)=@generic, &(0x7f0000000000)=0x80, 0x800) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r11, 0x29, 0x2a, &(0x7f0000000040)="51e452bbb83aa410b80b4e5c2b0efb318e1675d157f4dbb09cf578c5d695d4c19669d6f75f4dd7fae5ca772264762e2caa7397be8dae54494bcb85b118ce878d2945924a24a25cf9c6672e7904f0301ffa0f360f9526057e1225a4d032ad0cc690cd327c226b57d5a0243bda5f379f6054b1851c1fa2cbad88d3f0039dddd6b426560bc03965da43", 0x88) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000071103e00000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) 16.857474728s ago: executing program 0 (id=16353): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x3f, 0x0, 0xfd}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c00018008000100", @ANYRES32=r3], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000d9a446b46003a61f0666aec54b44737ac5dcfd052be77f7bbe1faeee1633610d1d9eab00da80d2b944795b763c07c9a129c496bd4fc47bf7200cb7b5edc51bb9ba4890d4bead778ed3783c197565f37ca63129c776f350c5f416bc139a8764995a4f26f115e65f1fccda7d2d100290261ac7e4503ffb6a8a0d2730d682fb7c63f3eddb4a301c2c57a7f8f4d055f7bda8e39a89cc77a8532a3e8e6c759a2e3001128d9529e03bc14621894866f354855c91de1e516eb97bd726c89a05bfdbdf733a5bc0304e8fbe76bdcf4503bc3fcf908565dbbc5981af9c9335e2ca2716", @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250600000008000500e0000002"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x23, 0x8}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r5, 0xc040ff0b, 0x110c2300fe) 16.758094899s ago: executing program 2 (id=16354): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x3000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r3, 0x80000000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0x0) ioctl$FIOCLEX(r4, 0x5451) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) 16.738524983s ago: executing program 3 (id=16355): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6b3a6e7e216920a8}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) (fail_nth: 5) 16.720588785s ago: executing program 1 (id=16356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="6802000000050104280000000000000000002800540201"], 0x268}, 0x1, 0x0, 0x0, 0x8064}, 0x0) 16.663980878s ago: executing program 3 (id=16357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r12) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xfffc}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x9, 0x6, 0x1, 0x401}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r15) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r15, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r16, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000ec0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x24}}, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x2f, &(0x7f0000001240)="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", 0x108) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) 16.546145561s ago: executing program 4 (id=16358): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, 0x0, 0x0, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40002062, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$kcm(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x12) 16.51523769s ago: executing program 1 (id=16359): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000880) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 16.314009058s ago: executing program 2 (id=16360): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x18, 0xa, 0x20000001) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x0, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x5}, {0x8}, {0xb, 0xffe0}}}, 0x24}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x6c, 0x2c, 0xd27, 0x2, 0xfffffffc, {0x0, 0x0, 0x0, r2, {0x4, 0x9}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x30, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x7}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x0, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x6}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x1, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x3}]}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x20054004) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x48010) 16.19223596s ago: executing program 2 (id=16361): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3100000000080002400000000120000000000a03000000000000000000070000000900010073a27a310000000028000000000a030000000000000000000200000008000240000000000900010073797a310000000014000000110001"], 0x98}}, 0x0) recvmmsg(r2, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtclass={0x24, 0x28, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0xb}, {0x6, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x4000) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r5, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x22000011) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0x8008b705, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) 15.660950855s ago: executing program 4 (id=16362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ffffff7}}], 0x30}, 0x884) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r4, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x24, r6, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r10, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802ef98b", @ANYRES8], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 1.156322375s ago: executing program 32 (id=16353): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x3f, 0x0, 0xfd}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c00018008000100", @ANYRES32=r3], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000d9a446b46003a61f0666aec54b44737ac5dcfd052be77f7bbe1faeee1633610d1d9eab00da80d2b944795b763c07c9a129c496bd4fc47bf7200cb7b5edc51bb9ba4890d4bead778ed3783c197565f37ca63129c776f350c5f416bc139a8764995a4f26f115e65f1fccda7d2d100290261ac7e4503ffb6a8a0d2730d682fb7c63f3eddb4a301c2c57a7f8f4d055f7bda8e39a89cc77a8532a3e8e6c759a2e3001128d9529e03bc14621894866f354855c91de1e516eb97bd726c89a05bfdbdf733a5bc0304e8fbe76bdcf4503bc3fcf908565dbbc5981af9c9335e2ca2716", @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250600000008000500e0000002"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x23, 0x8}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r5, 0xc040ff0b, 0x110c2300fe) 1.13374326s ago: executing program 33 (id=16359): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000880) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1.090065609s ago: executing program 34 (id=16361): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3100000000080002400000000120000000000a03000000000000000000070000000900010073a27a310000000028000000000a030000000000000000000200000008000240000000000900010073797a310000000014000000110001"], 0x98}}, 0x0) recvmmsg(r2, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtclass={0x24, 0x28, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0xb}, {0x6, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x4000) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r5, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x22000011) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0x8008b705, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) 1.051839327s ago: executing program 35 (id=16357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r12) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xfffc}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x9, 0x6, 0x1, 0x401}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r15) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r15, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r16, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000ec0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x24}}, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x2f, &(0x7f0000001240)="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", 0x108) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) 0s ago: executing program 36 (id=16362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ffffff7}}], 0x30}, 0x884) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r4, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x24, r6, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r10, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802ef98b", @ANYRES8], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) kernel console output (not intermixed with test programs): 2046] syzkaller0: entered allmulticast mode [ 845.559499][T12046] tipc: Enabled bearer , priority 0 [ 845.574919][T12043] tipc: Resetting bearer [ 845.620994][T12043] tipc: Disabling bearer [ 845.637799][T12051] veth0: entered promiscuous mode [ 845.646487][T12055] veth0: left promiscuous mode [ 845.656766][T12051] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15741'. [ 845.851860][T12068] netlink: 'syz.2.15746': attribute type 4 has an invalid length. [ 845.867591][T12068] netlink: 'syz.2.15746': attribute type 4 has an invalid length. [ 845.890363][T12068] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 845.908820][T12070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15748'. [ 845.909472][T12068] netlink: 'syz.2.15746': attribute type 1 has an invalid length. [ 845.928140][T12068] netlink: 'syz.2.15746': attribute type 4 has an invalid length. [ 845.946298][T12068] netlink: 9491 bytes leftover after parsing attributes in process `syz.2.15746'. [ 846.096377][T12080] syzkaller0: entered promiscuous mode [ 846.102044][T12080] syzkaller0: entered allmulticast mode [ 846.192341][T12082] syzkaller0: entered promiscuous mode [ 846.216294][T12082] syzkaller0: entered allmulticast mode [ 846.248690][T12082] tipc: Enabled bearer , priority 0 [ 846.272063][T12081] tipc: Resetting bearer [ 846.342670][T12081] tipc: Disabling bearer [ 847.218431][T12161] ipt_ECN: cannot use operation on non-tcp rule [ 847.348703][T12164] netlink: 'syz.3.15783': attribute type 1 has an invalid length. [ 847.697956][T12191] veth19: left promiscuous mode [ 847.710068][T12198] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 847.738251][T12198] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 848.018833][T12222] syzkaller0: entered promiscuous mode [ 848.024407][T12222] syzkaller0: entered allmulticast mode [ 848.050344][T12225] Cannot find set identified by id 65534 to match [ 848.058319][T12227] netlink: 'syz.0.15802': attribute type 29 has an invalid length. [ 848.068068][T12219] netlink: 'syz.0.15802': attribute type 29 has an invalid length. [ 848.079083][T12227] netlink: 'syz.0.15802': attribute type 29 has an invalid length. [ 848.089731][T12220] netlink: 'syz.2.15801': attribute type 1 has an invalid length. [ 848.095555][T12219] netlink: 'syz.0.15802': attribute type 29 has an invalid length. [ 848.107572][T12219] netlink: 'syz.0.15802': attribute type 29 has an invalid length. [ 848.117935][T12222] tipc: Enabled bearer , priority 0 [ 848.126521][T12221] tipc: Resetting bearer [ 848.177651][T12221] tipc: Disabling bearer [ 848.199628][T12219] netlink: 'syz.0.15802': attribute type 29 has an invalid length. [ 848.218469][T12227] netlink: 'syz.0.15802': attribute type 29 has an invalid length. [ 848.235916][T12219] netlink: 'syz.0.15802': attribute type 29 has an invalid length. [ 848.262574][T12227] netlink: 'syz.0.15802': attribute type 29 has an invalid length. [ 849.312511][T12322] 8021q: VLANs not supported on gre0 [ 849.337017][T12318] syzkaller0: entered promiscuous mode [ 849.358369][T12318] syzkaller0: entered allmulticast mode [ 849.375595][T12327] nbd: must specify a device to reconfigure [ 849.400217][T12329] pim6reg527: entered allmulticast mode [ 849.428137][T12318] tipc: Enabled bearer , priority 0 [ 849.469486][T12317] tipc: Resetting bearer [ 849.538648][T12317] tipc: Disabling bearer [ 850.177486][T12378] syzkaller0: entered promiscuous mode [ 850.183009][T12378] syzkaller0: entered allmulticast mode [ 850.205131][T12383] __nla_validate_parse: 39 callbacks suppressed [ 850.205149][T12383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15858'. [ 850.226252][T12378] tipc: Enabled bearer , priority 0 [ 850.235883][T12375] tipc: Resetting bearer [ 850.275591][T12375] tipc: Disabling bearer [ 850.276783][T12382] netlink: 224 bytes leftover after parsing attributes in process `syz.0.15860'. [ 850.310584][T12392] netlink: 72 bytes leftover after parsing attributes in process `syz.1.15862'. [ 850.354412][T12383] sctp: [Deprecated]: syz.3.15858 (pid 12383) Use of int in max_burst socket option deprecated. [ 850.354412][T12383] Use struct sctp_assoc_value instead [ 850.509178][T12406] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15865'. [ 850.603064][T12411] xt_HMARK: spi-set and port-set can't be combined [ 850.705036][T12421] SET target dimension over the limit! [ 850.727040][T12422] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 850.964011][T12445] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15882'. [ 851.040722][T12455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15886'. [ 851.406223][T12465] netlink: 52 bytes leftover after parsing attributes in process `syz.1.15888'. [ 851.697528][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15895'. [ 851.863772][T12495] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15897'. [ 851.924623][T12499] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15899'. [ 852.291945][T12514] bond28: option arp_missed_max: invalid value (0) [ 852.349169][T12514] bond28: option arp_missed_max: allowed values 1 - 255 [ 852.366558][T12513] nbd14: detected capacity change from 0 to 63 [ 852.369155][T12514] bond28 (unregistering): Released all slaves [ 852.374803][T12521] nbd: must specify an index to disconnect [ 852.399224][ T5835] block nbd14: Receive control failed (result -104) [ 852.584392][T12535] FAULT_INJECTION: forcing a failure. [ 852.584392][T12535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 852.607925][T12535] CPU: 0 UID: 0 PID: 12535 Comm: syz.3.15913 Not tainted syzkaller #0 PREEMPT(full) [ 852.607953][T12535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 852.607965][T12535] Call Trace: [ 852.607973][T12535] [ 852.607990][T12535] dump_stack_lvl+0xe8/0x150 [ 852.608022][T12535] should_fail_ex+0x414/0x560 [ 852.608056][T12535] _copy_from_user+0x2d/0xb0 [ 852.608080][T12535] ___sys_sendmsg+0x158/0x2a0 [ 852.608107][T12535] ? __pfx____sys_sendmsg+0x10/0x10 [ 852.608167][T12535] ? __fget_files+0x2a/0x420 [ 852.608191][T12535] ? __fget_files+0x3a0/0x420 [ 852.608226][T12535] __x64_sys_sendmsg+0x19b/0x260 [ 852.608252][T12535] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 852.608286][T12535] ? __pfx_ksys_write+0x10/0x10 [ 852.608317][T12535] do_syscall_64+0xec/0xf80 [ 852.608337][T12535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.608356][T12535] ? trace_irq_disable+0x37/0x100 [ 852.608381][T12535] ? clear_bhb_loop+0x60/0xb0 [ 852.608405][T12535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.608424][T12535] RIP: 0033:0x7f7ff0b8f749 [ 852.608442][T12535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 852.608460][T12535] RSP: 002b:00007f7ff1b0d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 852.608482][T12535] RAX: ffffffffffffffda RBX: 00007f7ff0de5fa0 RCX: 00007f7ff0b8f749 [ 852.608497][T12535] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 852.608510][T12535] RBP: 00007f7ff1b0d090 R08: 0000000000000000 R09: 0000000000000000 [ 852.608523][T12535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.608535][T12535] R13: 00007f7ff0de6038 R14: 00007f7ff0de5fa0 R15: 00007ffd50960cb8 [ 852.608569][T12535] [ 852.863611][ T30] audit: type=1804 audit(1767668050.102:6): pid=12545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.15915" name="/newroot/3191/cgroup.controllers" dev="tmpfs" ino=16078 res=1 errno=0 [ 852.934154][ T30] audit: type=1800 audit(1767668050.132:7): pid=12545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.15915" name="cgroup.controllers" dev="tmpfs" ino=16078 res=0 errno=0 [ 853.088354][T12560] bond22: (slave veth17): Releasing active interface [ 853.106806][T12560] bond26: (slave geneve4): Releasing active interface [ 853.121346][T19556] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 853.132027][T19556] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 853.219414][T19556] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 853.228433][T19556] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 853.436373][T12588] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 853.442576][T12573] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 853.528360][T12587] nbd15: detected capacity change from 0 to 63 [ 853.536656][T12592] nbd: must specify an index to disconnect [ 853.546017][ T5835] block nbd15: Receive control failed (result -32) [ 854.045673][ T11] block nbd1: Possible stuck request ffff888024af8000: control (read@0,1024B). Runtime 90 seconds [ 854.066349][ T11] block nbd1: Possible stuck request ffff888024af8200: control (read@1024,1024B). Runtime 90 seconds [ 854.077444][ T11] block nbd1: Possible stuck request ffff888024af8400: control (read@2048,1024B). Runtime 90 seconds [ 854.088474][ T11] block nbd1: Possible stuck request ffff888024af8600: control (read@3072,1024B). Runtime 90 seconds [ 854.374731][T12656] validate_nla: 15 callbacks suppressed [ 854.374750][T12656] netlink: 'syz.1.15950': attribute type 5 has an invalid length. [ 854.500304][T12666] netlink: 'syz.2.15951': attribute type 2 has an invalid length. [ 854.512793][T12659] netlink: 'syz.3.15952': attribute type 21 has an invalid length. [ 854.797238][T12684] syzkaller0: entered promiscuous mode [ 854.806231][T12676] nbd16: detected capacity change from 0 to 63 [ 854.814795][T12684] syzkaller0: entered allmulticast mode [ 854.826549][T12682] nbd: must specify an index to disconnect [ 854.838597][T12684] tipc: Enabled bearer , priority 0 [ 854.849703][T12683] tipc: Resetting bearer [ 854.855877][ T5835] block nbd16: Receive control failed (result -32) [ 854.907859][T12683] tipc: Disabling bearer [ 854.954692][T12694] netlink: 'syz.0.15962': attribute type 16 has an invalid length. [ 854.976927][T12694] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 854.984618][T12694] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 855.041165][T12700] netlink: 'syz.3.15964': attribute type 5 has an invalid length. [ 855.273636][T12717] netlink: 'syz.3.15971': attribute type 12 has an invalid length. [ 855.417838][T12725] syzkaller0: entered promiscuous mode [ 855.423359][T12725] syzkaller0: entered allmulticast mode [ 855.460254][T12725] tipc: Enabled bearer , priority 0 [ 855.480769][T12734] netlink: 'syz.2.15977': attribute type 5 has an invalid length. [ 855.496916][T12734] __nla_validate_parse: 18 callbacks suppressed [ 855.496935][T12734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15977'. [ 855.506322][T12723] tipc: Resetting bearer [ 855.577891][T12723] tipc: Disabling bearer [ 855.598778][T12742] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15979'. [ 855.608585][T12738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15980'. [ 855.617179][T12743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15980'. [ 855.634361][T12743] chnl_net:caif_netlink_parms(): no params data found [ 855.684753][T12738] chnl_net:caif_netlink_parms(): no params data found [ 855.732526][T12750] syzkaller1: entered promiscuous mode [ 855.738153][T12750] syzkaller1: entered allmulticast mode [ 855.874843][T12765] FAULT_INJECTION: forcing a failure. [ 855.874843][T12765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 855.875228][T12758] 8021q: VLANs not supported on sit0 [ 855.916814][T12765] CPU: 1 UID: 0 PID: 12765 Comm: syz.2.15987 Not tainted syzkaller #0 PREEMPT(full) [ 855.916843][T12765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 855.916854][T12765] Call Trace: [ 855.916862][T12765] [ 855.916871][T12765] dump_stack_lvl+0xe8/0x150 [ 855.916901][T12765] should_fail_ex+0x414/0x560 [ 855.916936][T12765] _copy_from_iter+0x1cd/0x1630 [ 855.916971][T12765] ? __pfx__copy_from_iter+0x10/0x10 [ 855.916994][T12765] ? __build_skb_around+0x22d/0x3c0 [ 855.917017][T12765] ? __alloc_skb+0x198/0x3a0 [ 855.917036][T12765] ? netlink_sendmsg+0x642/0xb30 [ 855.917059][T12765] ? skb_put+0x11b/0x210 [ 855.917083][T12765] netlink_sendmsg+0x6b2/0xb30 [ 855.917120][T12765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 855.917148][T12765] ? aa_sock_msg_perm+0xf1/0x1b0 [ 855.917175][T12765] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 855.917194][T12765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 855.917222][T12765] __sock_sendmsg+0x21c/0x270 [ 855.917254][T12765] sock_write_iter+0x279/0x360 [ 855.917283][T12765] ? __pfx_sock_write_iter+0x10/0x10 [ 855.917319][T12765] ? bpf_lsm_file_permission+0x9/0x20 [ 855.917340][T12765] ? security_file_permission+0x75/0x290 [ 855.917370][T12765] vfs_write+0x5c9/0xb30 [ 855.917395][T12765] ? __pfx_sock_write_iter+0x10/0x10 [ 855.917423][T12765] ? __pfx_vfs_write+0x10/0x10 [ 855.917454][T12765] ? __fget_files+0x2a/0x420 [ 855.917488][T12765] ksys_write+0x145/0x250 [ 855.917511][T12765] ? __pfx_ksys_write+0x10/0x10 [ 855.917542][T12765] do_syscall_64+0xec/0xf80 [ 855.917564][T12765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.917583][T12765] ? trace_irq_disable+0x37/0x100 [ 855.917616][T12765] ? clear_bhb_loop+0x60/0xb0 [ 855.917639][T12765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.917659][T12765] RIP: 0033:0x7fe4b2f8f749 [ 855.917676][T12765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 855.917695][T12765] RSP: 002b:00007fe4b3d98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 855.917716][T12765] RAX: ffffffffffffffda RBX: 00007fe4b31e5fa0 RCX: 00007fe4b2f8f749 [ 855.917732][T12765] RDX: 00000000000000fc RSI: 00002000000002c0 RDI: 0000000000000003 [ 855.917745][T12765] RBP: 00007fe4b3d98090 R08: 0000000000000000 R09: 0000000000000000 [ 855.917759][T12765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 855.917772][T12765] R13: 00007fe4b31e6038 R14: 00007fe4b31e5fa0 R15: 00007fffffa61e38 [ 855.917807][T12765] [ 856.324774][T12779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15990'. [ 856.445132][T12789] tipc: Enabling of bearer rejected, already enabled [ 856.599650][ T11] block nbd3: Possible stuck request ffff888024ba5600: control (read@0,1024B). Runtime 90 seconds [ 856.611681][ T11] block nbd3: Possible stuck request ffff888024ba5800: control (read@1024,1024B). Runtime 90 seconds [ 856.623359][ T11] block nbd3: Possible stuck request ffff888024ba5a00: control (read@2048,1024B). Runtime 90 seconds [ 856.634444][ T11] block nbd3: Possible stuck request ffff888024ba5c00: control (read@3072,1024B). Runtime 90 seconds [ 856.676932][T12805] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15999'. [ 856.699034][T12807] ip6t_srh: unknown srh invflags 4000 [ 856.739995][T12807] ip6t_srh: unknown srh invflags 4000 [ 856.884574][T12822] netlink: 44 bytes leftover after parsing attributes in process `syz.1.16003'. [ 856.934601][T12822] netlink: 43 bytes leftover after parsing attributes in process `syz.1.16003'. [ 856.946674][T12822] netlink: 'syz.1.16003': attribute type 6 has an invalid length. [ 856.976582][T12822] netlink: 'syz.1.16003': attribute type 5 has an invalid length. [ 856.988325][T12822] netlink: 43 bytes leftover after parsing attributes in process `syz.1.16003'. [ 857.005364][T12834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16009'. [ 857.017076][T12834] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 857.040759][T12834] netlink: 'syz.2.16009': attribute type 32 has an invalid length. [ 857.042053][T12837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 857.572546][T12866] macvtap1: entered promiscuous mode [ 857.584214][T12866] macvtap1: entered allmulticast mode [ 857.590095][T12866] º: entered allmulticast mode [ 857.605048][T12866] macvtap2: entered promiscuous mode [ 857.636875][T12866] macvtap2: entered allmulticast mode [ 857.768162][T12877] FAULT_INJECTION: forcing a failure. [ 857.768162][T12877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 857.801812][T12877] CPU: 0 UID: 0 PID: 12877 Comm: syz.1.16024 Not tainted syzkaller #0 PREEMPT(full) [ 857.801840][T12877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 857.801852][T12877] Call Trace: [ 857.801860][T12877] [ 857.801869][T12877] dump_stack_lvl+0xe8/0x150 [ 857.801897][T12877] should_fail_ex+0x414/0x560 [ 857.801931][T12877] _copy_from_user+0x2d/0xb0 [ 857.801954][T12877] ___sys_sendmsg+0x158/0x2a0 [ 857.801979][T12877] ? __pfx____sys_sendmsg+0x10/0x10 [ 857.802006][T12877] ? kstrtouint+0x6e/0xe0 [ 857.802061][T12877] ? __fget_files+0x2a/0x420 [ 857.802084][T12877] ? __fget_files+0x3a0/0x420 [ 857.802118][T12877] __sys_sendmmsg+0x227/0x430 [ 857.802147][T12877] ? __pfx___sys_sendmmsg+0x10/0x10 [ 857.802166][T12877] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 857.802212][T12877] ? ksys_write+0x22a/0x250 [ 857.802233][T12877] ? __pfx_ksys_write+0x10/0x10 [ 857.802258][T12877] __x64_sys_sendmmsg+0xa0/0xc0 [ 857.802283][T12877] do_syscall_64+0xec/0xf80 [ 857.802303][T12877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.802321][T12877] ? trace_irq_disable+0x37/0x100 [ 857.802345][T12877] ? clear_bhb_loop+0x60/0xb0 [ 857.802367][T12877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.802385][T12877] RIP: 0033:0x7f3fcf78f749 [ 857.802401][T12877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 857.802419][T12877] RSP: 002b:00007f3fd06fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 857.802437][T12877] RAX: ffffffffffffffda RBX: 00007f3fcf9e5fa0 RCX: 00007f3fcf78f749 [ 857.802449][T12877] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000003 [ 857.802461][T12877] RBP: 00007f3fd06fc090 R08: 0000000000000000 R09: 0000000000000000 [ 857.802472][T12877] R10: 0000000004008800 R11: 0000000000000246 R12: 0000000000000001 [ 857.802483][T12877] R13: 00007f3fcf9e6038 R14: 00007f3fcf9e5fa0 R15: 00007ffe536a87f8 [ 857.802513][T12877] [ 858.185730][T12895] ip6tnl6: entered promiscuous mode [ 858.809432][T12933] FAULT_INJECTION: forcing a failure. [ 858.809432][T12933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 858.865769][T12933] CPU: 1 UID: 0 PID: 12933 Comm: syz.2.16049 Not tainted syzkaller #0 PREEMPT(full) [ 858.865798][T12933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 858.865811][T12933] Call Trace: [ 858.865820][T12933] [ 858.865829][T12933] dump_stack_lvl+0xe8/0x150 [ 858.865859][T12933] should_fail_ex+0x414/0x560 [ 858.865896][T12933] _copy_from_user+0x2d/0xb0 [ 858.865922][T12933] wext_handle_ioctl+0xba/0x1c0 [ 858.865945][T12933] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 858.865962][T12933] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 858.866001][T12933] sock_ioctl+0x15f/0x790 [ 858.866031][T12933] ? __pfx_sock_ioctl+0x10/0x10 [ 858.866059][T12933] ? __fget_files+0x2a/0x420 [ 858.866081][T12933] ? __fget_files+0x3a0/0x420 [ 858.866102][T12933] ? __fget_files+0x2a/0x420 [ 858.866130][T12933] ? bpf_lsm_file_ioctl+0x9/0x20 [ 858.866152][T12933] ? __pfx_sock_ioctl+0x10/0x10 [ 858.866179][T12933] __se_sys_ioctl+0xfc/0x170 [ 858.866201][T12933] do_syscall_64+0xec/0xf80 [ 858.866222][T12933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.866242][T12933] ? trace_irq_disable+0x37/0x100 [ 858.866267][T12933] ? clear_bhb_loop+0x60/0xb0 [ 858.866292][T12933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.866312][T12933] RIP: 0033:0x7fe4b2f8f749 [ 858.866330][T12933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 858.866349][T12933] RSP: 002b:00007fe4b3d98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 858.866370][T12933] RAX: ffffffffffffffda RBX: 00007fe4b31e5fa0 RCX: 00007fe4b2f8f749 [ 858.866387][T12933] RDX: 0000200000000000 RSI: 0000000000008b0f RDI: 0000000000000003 [ 858.866401][T12933] RBP: 00007fe4b3d98090 R08: 0000000000000000 R09: 0000000000000000 [ 858.866414][T12933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.866427][T12933] R13: 00007fe4b31e6038 R14: 00007fe4b31e5fa0 R15: 00007fffffa61e38 [ 858.866461][T12933] [ 859.186306][ T56] block nbd10: Possible stuck request ffff888024dc0000: control (read@0,1024B). Runtime 60 seconds [ 859.197400][ T56] block nbd10: Possible stuck request ffff888024dc0200: control (read@1024,1024B). Runtime 60 seconds [ 859.208884][ T56] block nbd10: Possible stuck request ffff888024dc0400: control (read@2048,1024B). Runtime 60 seconds [ 859.220510][ T56] block nbd10: Possible stuck request ffff888024dc0600: control (read@3072,1024B). Runtime 60 seconds [ 859.593860][T12968] validate_nla: 6 callbacks suppressed [ 859.593879][T12968] netlink: 'syz.2.16063': attribute type 1 has an invalid length. [ 859.785632][T12986] xt_l2tp: v2 doesn't support IP mode [ 860.011021][T13006] netlink: 'syz.2.16074': attribute type 1 has an invalid length. [ 860.189223][T13012] netlink: 'syz.1.16077': attribute type 1 has an invalid length. [ 860.375596][T13027] netlink: 'syz.0.16081': attribute type 13 has an invalid length. [ 860.384376][T13030] netlink: 'syz.1.16082': attribute type 1 has an invalid length. [ 860.460473][T13035] netlink: 'syz.3.16085': attribute type 5 has an invalid length. [ 860.495625][T13037] netlink: 'syz.1.16086': attribute type 4 has an invalid length. [ 860.659999][T13051] __nla_validate_parse: 21 callbacks suppressed [ 860.660018][T13051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16091'. [ 860.728528][T13050] netlink: 'syz.1.16092': attribute type 1 has an invalid length. [ 860.746248][T13050] netlink: 224 bytes leftover after parsing attributes in process `syz.1.16092'. [ 860.765717][T13064] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16095'. [ 860.971468][T13081] netlink: 'syz.1.16099': attribute type 1 has an invalid length. [ 861.014885][T13082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16095'. [ 861.030332][T13081] netlink: 228 bytes leftover after parsing attributes in process `syz.1.16099'. [ 861.064744][T13081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16099'. [ 861.174097][T13093] 8021q: VLANs not supported on gre0 [ 861.325664][T13110] netlink: 'syz.2.16109': attribute type 21 has an invalid length. [ 861.336657][T13110] netlink: 128 bytes leftover after parsing attributes in process `syz.2.16109'. [ 861.346549][T13108] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16108'. [ 861.397869][T13113] netlink: 128 bytes leftover after parsing attributes in process `syz.2.16109'. [ 861.415453][T13110] netlink: 3 bytes leftover after parsing attributes in process `syz.2.16109'. [ 861.810860][ T5198] udevd[5198]: worker [8394] /devices/virtual/block/nbd10 is taking a long time [ 862.050204][T13145] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 862.201721][T13169] FAULT_INJECTION: forcing a failure. [ 862.201721][T13169] name failslab, interval 1, probability 0, space 0, times 0 [ 862.240645][T13169] CPU: 1 UID: 0 PID: 13169 Comm: syz.3.16127 Not tainted syzkaller #0 PREEMPT(full) [ 862.240675][T13169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 862.240689][T13169] Call Trace: [ 862.240698][T13169] [ 862.240706][T13169] dump_stack_lvl+0xe8/0x150 [ 862.240738][T13169] should_fail_ex+0x414/0x560 [ 862.240773][T13169] should_failslab+0xa8/0x100 [ 862.240798][T13169] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 862.240830][T13169] ? __alloc_skb+0x1dc/0x3a0 [ 862.240849][T13169] ? __local_bh_enable_ip+0xd0/0x130 [ 862.240870][T13169] ? __alloc_skb+0x198/0x3a0 [ 862.240890][T13169] __alloc_skb+0x1dc/0x3a0 [ 862.240912][T13169] netlink_ack+0x146/0xa50 [ 862.240932][T13169] ? __pfx_genl_rcv_msg+0x10/0x10 [ 862.240965][T13169] netlink_rcv_skb+0x28c/0x470 [ 862.240988][T13169] ? __pfx_genl_rcv_msg+0x10/0x10 [ 862.241008][T13169] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 862.241028][T13169] ? genl_rcv+0x19/0x40 [ 862.241072][T13169] ? down_read+0x274/0x2e0 [ 862.241093][T13169] ? genl_rcv+0xd/0x40 [ 862.241121][T13169] genl_rcv+0x28/0x40 [ 862.241145][T13169] netlink_unicast+0x82f/0x9e0 [ 862.241175][T13169] ? __pfx_netlink_unicast+0x10/0x10 [ 862.241194][T13169] ? __alloc_skb+0x198/0x3a0 [ 862.241212][T13169] ? netlink_sendmsg+0x642/0xb30 [ 862.241239][T13169] ? skb_put+0x11b/0x210 [ 862.241262][T13169] netlink_sendmsg+0x805/0xb30 [ 862.241294][T13169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 862.241321][T13169] ? aa_sock_msg_perm+0xf1/0x1b0 [ 862.241347][T13169] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 862.241364][T13169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 862.241388][T13169] __sock_sendmsg+0x21c/0x270 [ 862.241419][T13169] ____sys_sendmsg+0x505/0x820 [ 862.241447][T13169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 862.241477][T13169] ? import_iovec+0x74/0xa0 [ 862.241503][T13169] ___sys_sendmsg+0x21f/0x2a0 [ 862.241526][T13169] ? __pfx____sys_sendmsg+0x10/0x10 [ 862.241586][T13169] ? __fget_files+0x2a/0x420 [ 862.241609][T13169] ? __fget_files+0x3a0/0x420 [ 862.241641][T13169] __x64_sys_sendmsg+0x19b/0x260 [ 862.241672][T13169] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 862.241705][T13169] ? __pfx_ksys_write+0x10/0x10 [ 862.241736][T13169] do_syscall_64+0xec/0xf80 [ 862.241754][T13169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.241770][T13169] ? trace_irq_disable+0x37/0x100 [ 862.241794][T13169] ? clear_bhb_loop+0x60/0xb0 [ 862.241817][T13169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.241836][T13169] RIP: 0033:0x7f7ff0b8f749 [ 862.241853][T13169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 862.241871][T13169] RSP: 002b:00007f7ff1b0d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 862.241892][T13169] RAX: ffffffffffffffda RBX: 00007f7ff0de5fa0 RCX: 00007f7ff0b8f749 [ 862.241907][T13169] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 862.241920][T13169] RBP: 00007f7ff1b0d090 R08: 0000000000000000 R09: 0000000000000000 [ 862.241933][T13169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.241945][T13169] R13: 00007f7ff0de6038 R14: 00007f7ff0de5fa0 R15: 00007ffd50960cb8 [ 862.241978][T13169] [ 863.085115][T13211] FAULT_INJECTION: forcing a failure. [ 863.085115][T13211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 863.116422][T13211] CPU: 0 UID: 0 PID: 13211 Comm: syz.1.16141 Not tainted syzkaller #0 PREEMPT(full) [ 863.116451][T13211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 863.116464][T13211] Call Trace: [ 863.116473][T13211] [ 863.116482][T13211] dump_stack_lvl+0xe8/0x150 [ 863.116513][T13211] should_fail_ex+0x414/0x560 [ 863.116549][T13211] _copy_from_user+0x2d/0xb0 [ 863.116574][T13211] kstrtouint_from_user+0xc4/0x170 [ 863.116597][T13211] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 863.116635][T13211] proc_fail_nth_write+0x88/0x200 [ 863.116658][T13211] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 863.116685][T13211] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 863.116708][T13211] vfs_write+0x27e/0xb30 [ 863.116735][T13211] ? __pfx_vfs_write+0x10/0x10 [ 863.116755][T13211] ? __fget_files+0x2a/0x420 [ 863.116783][T13211] ? __fget_files+0x3a0/0x420 [ 863.116805][T13211] ? __fget_files+0x2a/0x420 [ 863.116838][T13211] ksys_write+0x145/0x250 [ 863.116861][T13211] ? __pfx_ksys_write+0x10/0x10 [ 863.116900][T13211] do_syscall_64+0xec/0xf80 [ 863.116919][T13211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.116937][T13211] ? trace_irq_disable+0x37/0x100 [ 863.116962][T13211] ? clear_bhb_loop+0x60/0xb0 [ 863.116986][T13211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.117005][T13211] RIP: 0033:0x7f3fcf78e1ff [ 863.117023][T13211] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 863.117040][T13211] RSP: 002b:00007f3fd06fc030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 863.117061][T13211] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3fcf78e1ff [ 863.117076][T13211] RDX: 0000000000000001 RSI: 00007f3fd06fc0a0 RDI: 0000000000000003 [ 863.117089][T13211] RBP: 00007f3fd06fc090 R08: 0000000000000000 R09: 0000000000000000 [ 863.117103][T13211] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 863.117115][T13211] R13: 00007f3fcf9e6038 R14: 00007f3fcf9e5fa0 R15: 00007ffe536a87f8 [ 863.117149][T13211] [ 863.341835][T13214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 863.364459][T13218] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 863.981050][T13265] team0: Caught tx_queue_len zero misconfig [ 864.084705][T13278] block nbd2: NBD_DISCONNECT [ 864.106285][T13278] block nbd2: Send disconnect failed -32 [ 864.460608][T13302] 8021q: adding VLAN 0 to HW filter on device bond14 [ 864.510827][T13298] bond14: (slave veth25): Enslaving as an active interface with a down link [ 864.551113][T13298] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 864.558477][T13298] bond14: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 864.734115][T13326] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 864.769813][T13326] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 864.781774][T13326] gretap4: entered promiscuous mode [ 864.793073][T13326] gretap4: entered allmulticast mode [ 864.847819][T13336] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 864.888059][T13328] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 865.030521][T13349] tipc: Enabling of bearer rejected, already enabled [ 865.051598][T13349] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 865.072072][T13351] tipc: Enabled bearer , priority 0 [ 865.082744][T13350] tipc: Disabling bearer [ 865.105957][T13353] validate_nla: 11 callbacks suppressed [ 865.105974][T13353] netlink: 'syz.4.16185': attribute type 1 has an invalid length. [ 865.332312][T13372] C: renamed from team_slave_0 [ 865.341404][T13372] netlink: 'syz.1.16193': attribute type 1 has an invalid length. [ 865.349971][T13372] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 865.557637][ T56] block nbd12: Possible stuck request ffff888024e68000: control (read@0,1024B). Runtime 30 seconds [ 865.570926][ T56] block nbd12: Possible stuck request ffff888024e68200: control (read@1024,1024B). Runtime 30 seconds [ 865.582363][ T56] block nbd12: Possible stuck request ffff888024e68400: control (read@2048,1024B). Runtime 30 seconds [ 865.593905][ T56] block nbd12: Possible stuck request ffff888024e68600: control (read@3072,1024B). Runtime 30 seconds [ 865.677001][T13385] netlink: 'syz.3.16197': attribute type 1 has an invalid length. [ 865.686977][T13385] __nla_validate_parse: 28 callbacks suppressed [ 865.686995][T13385] netlink: 224 bytes leftover after parsing attributes in process `syz.3.16197'. [ 865.704761][T13387] tipc: Enabled bearer , priority 0 [ 865.744254][T13386] tipc: Disabling bearer [ 865.938835][T13408] netlink: 152 bytes leftover after parsing attributes in process `syz.4.16204'. [ 866.262584][T13414] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 866.278585][T13420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16210'. [ 866.388066][T13427] netlink: 'syz.2.16211': attribute type 1 has an invalid length. [ 866.402260][T13427] netlink: 224 bytes leftover after parsing attributes in process `syz.2.16211'. [ 866.547443][T13438] tipc: Enabled bearer , priority 0 [ 866.560204][T13437] tipc: Disabling bearer [ 866.835251][T13458] pim6reg1: entered promiscuous mode [ 866.841673][ T56] block nbd7: Possible stuck request ffff888024c98000: control (read@0,1024B). Runtime 90 seconds [ 866.852556][ T56] block nbd7: Possible stuck request ffff888024c98200: control (read@1024,1024B). Runtime 90 seconds [ 866.855767][ T11] block nbd13: Possible stuck request ffff888024ee0000: control (read@0,1024B). Runtime 30 seconds [ 866.863722][ T56] block nbd7: Possible stuck request ffff888024c98400: control (read@2048,1024B). Runtime 90 seconds [ 866.875076][ T11] block nbd13: Possible stuck request ffff888024ee0200: control (read@1024,1024B). Runtime 30 seconds [ 866.885731][ T56] block nbd7: Possible stuck request ffff888024c98600: control (read@3072,1024B). Runtime 90 seconds [ 866.896920][ T11] block nbd13: Possible stuck request ffff888024ee0400: control (read@2048,1024B). Runtime 30 seconds [ 866.896954][ T11] block nbd13: Possible stuck request ffff888024ee0600: control (read@3072,1024B). Runtime 30 seconds [ 866.897200][T13458] pim6reg1: entered allmulticast mode [ 866.948840][T13462] netlink: 'syz.0.16223': attribute type 1 has an invalid length. [ 867.013509][T13464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16223'. [ 867.091890][T13462] bond18: (slave gretap3): making interface the new active one [ 867.106756][T13462] bond18: (slave gretap3): Enslaving as an active interface with an up link [ 867.427122][T13487] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16231'. [ 867.523361][T13499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16235'. [ 867.680441][T13499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16235'. [ 867.701959][T13511] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002 [ 867.715363][T13514] FAULT_INJECTION: forcing a failure. [ 867.715363][T13514] name failslab, interval 1, probability 0, space 0, times 0 [ 867.730408][T13514] CPU: 1 UID: 0 PID: 13514 Comm: syz.4.16241 Not tainted syzkaller #0 PREEMPT(full) [ 867.730434][T13514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 867.730446][T13514] Call Trace: [ 867.730453][T13514] [ 867.730461][T13514] dump_stack_lvl+0xe8/0x150 [ 867.730490][T13514] should_fail_ex+0x414/0x560 [ 867.730523][T13514] should_failslab+0xa8/0x100 [ 867.730547][T13514] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 867.730577][T13514] ? __alloc_skb+0x198/0x3a0 [ 867.730597][T13514] ? __alloc_skb+0x1dc/0x3a0 [ 867.730613][T13514] ? __local_bh_enable_ip+0xd0/0x130 [ 867.730643][T13514] ? __alloc_skb+0x198/0x3a0 [ 867.730664][T13514] __alloc_skb+0x1dc/0x3a0 [ 867.730688][T13514] netlink_sendmsg+0x5c6/0xb30 [ 867.730724][T13514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 867.730753][T13514] ? aa_sock_msg_perm+0xf1/0x1b0 [ 867.730779][T13514] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 867.730797][T13514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 867.730822][T13514] __sock_sendmsg+0x21c/0x270 [ 867.730852][T13514] ____sys_sendmsg+0x505/0x820 [ 867.730880][T13514] ? __pfx_____sys_sendmsg+0x10/0x10 [ 867.730912][T13514] ? import_iovec+0x74/0xa0 [ 867.730939][T13514] ___sys_sendmsg+0x21f/0x2a0 [ 867.730965][T13514] ? __pfx____sys_sendmsg+0x10/0x10 [ 867.731022][T13514] ? __fget_files+0x2a/0x420 [ 867.731046][T13514] ? __fget_files+0x3a0/0x420 [ 867.731081][T13514] __x64_sys_sendmsg+0x19b/0x260 [ 867.731107][T13514] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 867.731140][T13514] ? __pfx_ksys_write+0x10/0x10 [ 867.731172][T13514] do_syscall_64+0xec/0xf80 [ 867.731192][T13514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.731211][T13514] ? trace_irq_disable+0x37/0x100 [ 867.731236][T13514] ? clear_bhb_loop+0x60/0xb0 [ 867.731260][T13514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.731279][T13514] RIP: 0033:0x7fdf5c38f749 [ 867.731295][T13514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 867.731315][T13514] RSP: 002b:00007fdf5d266038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 867.731336][T13514] RAX: ffffffffffffffda RBX: 00007fdf5c5e5fa0 RCX: 00007fdf5c38f749 [ 867.731351][T13514] RDX: 0000000024000084 RSI: 0000200000000080 RDI: 0000000000000004 [ 867.731365][T13514] RBP: 00007fdf5d266090 R08: 0000000000000000 R09: 0000000000000000 [ 867.731377][T13514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.731388][T13514] R13: 00007fdf5c5e6038 R14: 00007fdf5c5e5fa0 R15: 00007ffe9aa4da08 [ 867.731422][T13514] [ 867.732983][T13512] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002 [ 867.823702][T13519] FAULT_INJECTION: forcing a failure. [ 867.823702][T13519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 868.006858][T13519] CPU: 0 UID: 0 PID: 13519 Comm: syz.1.16242 Not tainted syzkaller #0 PREEMPT(full) [ 868.006886][T13519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 868.006898][T13519] Call Trace: [ 868.006905][T13519] [ 868.006913][T13519] dump_stack_lvl+0xe8/0x150 [ 868.006940][T13519] should_fail_ex+0x414/0x560 [ 868.006969][T13519] _copy_from_iter+0x1cd/0x1630 [ 868.006987][T13519] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 868.007018][T13519] ? policy_nodemask+0x27c/0x720 [ 868.007037][T13519] ? __pfx__copy_from_iter+0x10/0x10 [ 868.007061][T13519] ? set_page_refcounted+0xa0/0x1e0 [ 868.007081][T13519] ? page_copy_sane+0x4e/0x280 [ 868.007101][T13519] copy_page_from_iter+0xdd/0x170 [ 868.007123][T13519] tun_get_user+0x1d40/0x3dc0 [ 868.007160][T13519] ? tun_get_user+0x6fc/0x3dc0 [ 868.007191][T13519] ? aa_file_perm+0x44c/0x1530 [ 868.007216][T13519] ? __pfx_tun_get_user+0x10/0x10 [ 868.007240][T13519] ? __lock_acquire+0x6b6/0x2cf0 [ 868.007261][T13519] ? kstrtoull+0x12f/0x1d0 [ 868.007292][T13519] ? ref_tracker_alloc+0x318/0x460 [ 868.007308][T13519] ? get_pid_task+0x20/0x1f0 [ 868.007333][T13519] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 868.007352][T13519] ? tun_get+0x1c/0x2f0 [ 868.007373][T13519] ? tun_get+0x1c/0x2f0 [ 868.007400][T13519] ? tun_get+0x1c/0x2f0 [ 868.007419][T13519] ? tun_get+0x1c/0x2f0 [ 868.007444][T13519] tun_chr_write_iter+0x113/0x200 [ 868.007470][T13519] vfs_write+0x5c9/0xb30 [ 868.007494][T13519] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 868.007517][T13519] ? __pfx_vfs_write+0x10/0x10 [ 868.007545][T13519] ? __fget_files+0x2a/0x420 [ 868.007578][T13519] ksys_write+0x145/0x250 [ 868.007607][T13519] ? __pfx_ksys_write+0x10/0x10 [ 868.007633][T13519] do_syscall_64+0xec/0xf80 [ 868.007651][T13519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.007668][T13519] ? trace_irq_disable+0x37/0x100 [ 868.007693][T13519] ? clear_bhb_loop+0x60/0xb0 [ 868.007717][T13519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.007737][T13519] RIP: 0033:0x7f3fcf78e1ff [ 868.007755][T13519] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 868.007773][T13519] RSP: 002b:00007f3fd06db000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 868.007792][T13519] RAX: ffffffffffffffda RBX: 00007f3fcf9e6090 RCX: 00007f3fcf78e1ff [ 868.007805][T13519] RDX: 000000000000002a RSI: 0000200000000100 RDI: 00000000000000c8 [ 868.007817][T13519] RBP: 00007f3fd06db090 R08: 0000000000000000 R09: 0000000000000000 [ 868.007827][T13519] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001 [ 868.007837][T13519] R13: 00007f3fcf9e6128 R14: 00007f3fcf9e6090 R15: 00007ffe536a87f8 [ 868.007867][T13519] [ 868.588153][T13537] netlink: 256 bytes leftover after parsing attributes in process `syz.0.16246'. [ 868.706114][T13551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16251'. [ 868.831487][T13560] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 868.898207][T13564] netlink: 'syz.2.16254': attribute type 5 has an invalid length. [ 868.911628][T13563] openvswitch: netlink: Tunnel attr 44 out of range max 16 [ 869.179736][T13582] ipt_REJECT: TCP_RESET invalid for non-tcp [ 869.210095][T13583] ipt_REJECT: TCP_RESET invalid for non-tcp [ 869.244968][T13590] ipt_REJECT: TCP_RESET invalid for non-tcp [ 869.262365][T13589] openvswitch: netlink: Message has 8 unknown bytes. [ 869.358459][T13593] bond0: (slave ip6gretap1): making interface the new active one [ 869.388114][T13593] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 869.394486][T13598] netlink: 'syz.2.16266': attribute type 2 has an invalid length. [ 869.800379][T13619] netlink: 'syz.4.16274': attribute type 4 has an invalid length. [ 870.040653][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 870.334446][T13662] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 870.680199][ T56] block nbd5: Possible stuck request ffff888024c28000: control (read@0,1024B). Runtime 150 seconds [ 870.691643][ T56] block nbd5: Possible stuck request ffff888024c28200: control (read@1024,1024B). Runtime 150 seconds [ 870.703018][ T56] block nbd5: Possible stuck request ffff888024c28400: control (read@2048,1024B). Runtime 150 seconds [ 870.714507][ T56] block nbd5: Possible stuck request ffff888024c28600: control (read@3072,1024B). Runtime 150 seconds [ 870.792507][T13697] __nla_validate_parse: 13 callbacks suppressed [ 870.792527][T13697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16291'. [ 870.826574][T13697] openvswitch: netlink: Message has 8 unknown bytes. [ 870.887104][T13701] netlink: 88 bytes leftover after parsing attributes in process `syz.3.16293'. [ 870.916347][T13701] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16293'. [ 870.925423][T13701] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16293'. [ 871.065923][T13715] netlink: 'syz.2.16297': attribute type 1 has an invalid length. [ 871.099272][T13715] netlink: 'syz.2.16297': attribute type 2 has an invalid length. [ 871.106292][T13714] netlink: 'syz.3.16298': attribute type 21 has an invalid length. [ 871.217555][T13714] bond24: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 871.258061][T13714] bond24 (unregistering): Released all slaves [ 871.316828][ T11] block nbd11: Possible stuck request ffff888024e08000: control (read@0,1024B). Runtime 60 seconds [ 871.327893][ T11] block nbd11: Possible stuck request ffff888024e08200: control (read@1024,1024B). Runtime 60 seconds [ 871.339707][ T11] block nbd11: Possible stuck request ffff888024e08400: control (read@2048,1024B). Runtime 60 seconds [ 871.351099][ T11] block nbd11: Possible stuck request ffff888024e08600: control (read@3072,1024B). Runtime 60 seconds [ 871.415086][T13736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16306'. [ 871.510278][T13743] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 871.735615][T13761] netlink: 'syz.3.16316': attribute type 5 has an invalid length. [ 871.743966][T13761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16316'. [ 871.833736][T13766] netlink: 'syz.3.16318': attribute type 1 has an invalid length. [ 871.872317][T13766] 8021q: adding VLAN 0 to HW filter on device bond24 [ 871.957944][ T25] block nbd9: Possible stuck request ffff888024d98000: control (read@0,1024B). Runtime 90 seconds [ 871.969570][ T56] block nbd8: Possible stuck request ffff888024d48000: control (read@0,1024B). Runtime 90 seconds [ 871.980755][ T25] block nbd9: Possible stuck request ffff888024d98200: control (read@1024,1024B). Runtime 90 seconds [ 871.991851][ T56] block nbd8: Possible stuck request ffff888024d48200: control (read@1024,1024B). Runtime 90 seconds [ 872.003429][ T56] block nbd8: Possible stuck request ffff888024d48400: control (read@2048,1024B). Runtime 90 seconds [ 872.016420][ T56] block nbd8: Possible stuck request ffff888024d48600: control (read@3072,1024B). Runtime 90 seconds [ 872.027784][ T25] block nbd9: Possible stuck request ffff888024d98400: control (read@2048,1024B). Runtime 90 seconds [ 872.039026][ T25] block nbd9: Possible stuck request ffff888024d98600: control (read@3072,1024B). Runtime 90 seconds [ 872.159447][T13788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16324'. [ 872.244913][T13788] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 872.283815][T13788] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 872.293780][T13793] TCP: TCP_TX_DELAY enabled [ 872.301914][T13788] team0: Failed to send options change via netlink (err -105) [ 872.313166][T13788] team0: Port device batadv1 added [ 872.379449][T13796] netlink: 'syz.4.16327': attribute type 5 has an invalid length. [ 872.388535][T13796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16327'. [ 872.531119][T13799] bond20: entered allmulticast mode [ 872.610875][T13806] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 872.653185][T13806] bond4: (slave lo): Enslaving as a backup interface with an up link [ 872.662773][T13806] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 872.865557][T13832] FAULT_INJECTION: forcing a failure. [ 872.865557][T13832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 872.887433][T13832] CPU: 1 UID: 0 PID: 13832 Comm: syz.2.16339 Not tainted syzkaller #0 PREEMPT(full) [ 872.887461][T13832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 872.887475][T13832] Call Trace: [ 872.887483][T13832] [ 872.887492][T13832] dump_stack_lvl+0xe8/0x150 [ 872.887523][T13832] should_fail_ex+0x414/0x560 [ 872.887559][T13832] _copy_from_user+0x2d/0xb0 [ 872.887585][T13832] __copy_msghdr+0x3c5/0x5b0 [ 872.887614][T13832] ___sys_sendmsg+0x1a5/0x2a0 [ 872.887640][T13832] ? __pfx____sys_sendmsg+0x10/0x10 [ 872.887661][T13832] ? __lock_acquire+0x6b6/0x2cf0 [ 872.887688][T13832] ? kstrtouint+0x6e/0xe0 [ 872.887760][T13832] __sys_sendmmsg+0x227/0x430 [ 872.887791][T13832] ? __pfx___sys_sendmmsg+0x10/0x10 [ 872.887813][T13832] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 872.887870][T13832] ? ksys_write+0x22a/0x250 [ 872.887893][T13832] ? __pfx_ksys_write+0x10/0x10 [ 872.887919][T13832] __x64_sys_sendmmsg+0xa0/0xc0 [ 872.887946][T13832] do_syscall_64+0xec/0xf80 [ 872.887967][T13832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.887986][T13832] ? trace_irq_disable+0x37/0x100 [ 872.888012][T13832] ? clear_bhb_loop+0x60/0xb0 [ 872.888036][T13832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.888054][T13832] RIP: 0033:0x7fe4b2f8f749 [ 872.888072][T13832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 872.888090][T13832] RSP: 002b:00007fe4b3d98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 872.888110][T13832] RAX: ffffffffffffffda RBX: 00007fe4b31e5fa0 RCX: 00007fe4b2f8f749 [ 872.888126][T13832] RDX: 0000000000000002 RSI: 0000200000001500 RDI: 0000000000000005 [ 872.888139][T13832] RBP: 00007fe4b3d98090 R08: 0000000000000000 R09: 0000000000000000 [ 872.888152][T13832] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 872.888166][T13832] R13: 00007fe4b31e6038 R14: 00007fe4b31e5fa0 R15: 00007fffffa61e38 [ 872.888200][T13832] [ 873.107579][T13841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16341'. [ 873.177309][T13843] netlink: 'syz.2.16342': attribute type 5 has an invalid length. [ 873.185375][T13843] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16342'. [ 873.340728][T13855] tipc: Enabling of bearer rejected, failed to enable media [ 873.722623][T13882] netlink: 'syz.0.16353': attribute type 2 has an invalid length. [ 873.735097][T13881] FAULT_INJECTION: forcing a failure. [ 873.735097][T13881] name failslab, interval 1, probability 0, space 0, times 0 [ 873.748800][T13881] CPU: 0 UID: 0 PID: 13881 Comm: syz.3.16355 Not tainted syzkaller #0 PREEMPT(full) [ 873.748828][T13881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 873.748840][T13881] Call Trace: [ 873.748849][T13881] [ 873.748858][T13881] dump_stack_lvl+0xe8/0x150 [ 873.748889][T13881] should_fail_ex+0x414/0x560 [ 873.748925][T13881] should_failslab+0xa8/0x100 [ 873.748951][T13881] __kmalloc_cache_noprof+0x84/0x700 [ 873.748973][T13881] ? tcf_proto_create+0x65/0x330 [ 873.749005][T13881] tcf_proto_create+0x65/0x330 [ 873.749038][T13881] tc_new_tfilter+0x11aa/0x15b0 [ 873.749094][T13881] ? __pfx_tc_new_tfilter+0x10/0x10 [ 873.749135][T13881] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 873.749173][T13881] ? __pfx_tc_new_tfilter+0x10/0x10 [ 873.749198][T13881] rtnetlink_rcv_msg+0x7cf/0xb70 [ 873.749223][T13881] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 873.749243][T13881] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 873.749264][T13881] ? __lock_acquire+0x6b6/0x2cf0 [ 873.749299][T13881] netlink_rcv_skb+0x208/0x470 [ 873.749326][T13881] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 873.749349][T13881] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 873.749385][T13881] ? netlink_deliver_tap+0x2e/0x1b0 [ 873.749418][T13881] netlink_unicast+0x82f/0x9e0 [ 873.749449][T13881] ? __pfx_netlink_unicast+0x10/0x10 [ 873.749489][T13881] ? __alloc_skb+0x198/0x3a0 [ 873.749509][T13881] ? netlink_sendmsg+0x642/0xb30 [ 873.749532][T13881] ? skb_put+0x11b/0x210 [ 873.749557][T13881] netlink_sendmsg+0x805/0xb30 [ 873.749592][T13881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 873.749621][T13881] ? aa_sock_msg_perm+0xf1/0x1b0 [ 873.749648][T13881] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 873.749667][T13881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 873.749693][T13881] __sock_sendmsg+0x21c/0x270 [ 873.749725][T13881] ____sys_sendmsg+0x505/0x820 [ 873.749754][T13881] ? __pfx_____sys_sendmsg+0x10/0x10 [ 873.749788][T13881] ? import_iovec+0x74/0xa0 [ 873.749815][T13881] ___sys_sendmsg+0x21f/0x2a0 [ 873.749841][T13881] ? __pfx____sys_sendmsg+0x10/0x10 [ 873.749899][T13881] ? __fget_files+0x2a/0x420 [ 873.749922][T13881] ? __fget_files+0x3a0/0x420 [ 873.749957][T13881] __x64_sys_sendmsg+0x19b/0x260 [ 873.749984][T13881] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 873.750017][T13881] ? __pfx_ksys_write+0x10/0x10 [ 873.750049][T13881] do_syscall_64+0xec/0xf80 [ 873.750069][T13881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.750094][T13881] ? trace_irq_disable+0x37/0x100 [ 873.750119][T13881] ? clear_bhb_loop+0x60/0xb0 [ 873.750143][T13881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.750162][T13881] RIP: 0033:0x7f7ff0b8f749 [ 873.750180][T13881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 873.750197][T13881] RSP: 002b:00007f7ff1b0d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 873.750220][T13881] RAX: ffffffffffffffda RBX: 00007f7ff0de5fa0 RCX: 00007f7ff0b8f749 [ 873.750235][T13881] RDX: 0000000000004010 RSI: 0000200000000280 RDI: 0000000000000005 [ 873.750249][T13881] RBP: 00007f7ff1b0d090 R08: 0000000000000000 R09: 0000000000000000 [ 873.750262][T13881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 873.750274][T13881] R13: 00007f7ff0de6038 R14: 00007f7ff0de5fa0 R15: 00007ffd50960cb8 [ 873.750308][T13881] [ 873.758866][T13882] netlink: 'syz.0.16353': attribute type 2 has an invalid length. [ 874.079142][T13888] syzkaller0: entered promiscuous mode [ 874.106362][T13888] syzkaller0: entered allmulticast mode [ 874.119414][T13890] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 874.136965][T13888] TC_ACT_REPEAT abuse ? [ 875.377506][ T5198] udevd[5198]: worker [9751] /devices/virtual/block/nbd11 is taking a long time [ 882.836594][ T25] block nbd14: Possible stuck request ffff888024f88000: control (read@0,1024B). Runtime 30 seconds [ 882.847681][ T25] block nbd14: Possible stuck request ffff888024f88200: control (read@1024,1024B). Runtime 30 seconds [ 882.858893][ T25] block nbd14: Possible stuck request ffff888024f88400: control (read@2048,1024B). Runtime 30 seconds [ 882.870075][ T25] block nbd14: Possible stuck request ffff888024f88600: control (read@3072,1024B). Runtime 30 seconds [ 884.126186][ T11] block nbd1: Possible stuck request ffff888024af8000: control (read@0,1024B). Runtime 120 seconds [ 884.137132][ T11] block nbd1: Possible stuck request ffff888024af8200: control (read@1024,1024B). Runtime 120 seconds [ 884.148153][ T11] block nbd1: Possible stuck request ffff888024af8400: control (read@2048,1024B). Runtime 120 seconds [ 884.159167][ T11] block nbd1: Possible stuck request ffff888024af8600: control (read@3072,1024B). Runtime 120 seconds [ 886.678313][ T11] block nbd3: Possible stuck request ffff888024ba5600: control (read@0,1024B). Runtime 120 seconds [ 886.689077][ T11] block nbd3: Possible stuck request ffff888024ba5800: control (read@1024,1024B). Runtime 120 seconds [ 886.700370][ T11] block nbd3: Possible stuck request ffff888024ba5a00: control (read@2048,1024B). Runtime 120 seconds [ 886.711439][ T11] block nbd3: Possible stuck request ffff888024ba5c00: control (read@3072,1024B). Runtime 120 seconds [ 889.237066][ T25] block nbd10: Possible stuck request ffff888024dc0000: control (read@0,1024B). Runtime 90 seconds [ 889.247899][ T25] block nbd10: Possible stuck request ffff888024dc0200: control (read@1024,1024B). Runtime 90 seconds [ 889.259244][ T25] block nbd10: Possible stuck request ffff888024dc0400: control (read@2048,1024B). Runtime 90 seconds [ 889.270393][ T25] block nbd10: Possible stuck request ffff888024dc0600: control (read@3072,1024B). Runtime 90 seconds [ 889.528498][T30767] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 889.540743][T30767] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 889.549516][T30767] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 889.557569][T30767] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 889.565406][T30767] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 889.584337][T30767] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 889.594673][T30767] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 889.605138][T30767] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 889.613425][T13914] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 889.624808][T13914] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 889.632712][T13914] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 889.641625][T13914] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 889.659996][T13914] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 889.669059][T13914] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 889.684242][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 889.697494][T13921] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 889.710002][T13921] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 889.719357][T13918] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 889.727688][T13921] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 889.737815][T13921] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 889.742103][T13916] lo speed is unknown, defaulting to 1000 [ 889.751194][T13921] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 889.753963][T13912] lo speed is unknown, defaulting to 1000 [ 889.765427][T13916] wlan0 speed is unknown, defaulting to 1000 [ 889.765677][T13918] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 889.774205][T13912] wlan0 speed is unknown, defaulting to 1000 [ 889.785320][T13921] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 889.786510][T13916] macsec0 speed is unknown, defaulting to 1000 [ 889.802860][T13912] macsec0 speed is unknown, defaulting to 1000 [ 889.825556][T30767] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 889.833512][T30767] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 889.912178][T13919] lo speed is unknown, defaulting to 1000 [ 889.921205][T13919] wlan0 speed is unknown, defaulting to 1000 [ 889.937004][T13919] macsec0 speed is unknown, defaulting to 1000 [ 889.937946][T13915] lo speed is unknown, defaulting to 1000 [ 889.950937][T13915] wlan0 speed is unknown, defaulting to 1000 [ 889.959257][T13915] macsec0 speed is unknown, defaulting to 1000 [ 890.193360][T13916] chnl_net:caif_netlink_parms(): no params data found [ 890.502259][T13916] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.526317][T13916] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.533575][T13916] bridge_slave_0: entered allmulticast mode [ 890.541612][T13916] bridge_slave_0: entered promiscuous mode [ 890.554697][T13916] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.561997][T13916] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.569606][T13916] bridge_slave_1: entered allmulticast mode [ 890.577473][T13916] bridge_slave_1: entered promiscuous mode [ 890.663923][T13914] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 890.675628][T13914] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 890.684581][T13914] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 890.697211][T13914] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 890.707446][T13914] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 890.739137][T13916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 890.761570][T13916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.799569][T13912] chnl_net:caif_netlink_parms(): no params data found [ 890.811935][T13916] team0: Port device team_slave_0 added [ 890.835183][T13916] team0: Port device team_slave_1 added [ 890.972301][T13916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.979409][T13916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.005620][T13916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.018005][T13933] lo speed is unknown, defaulting to 1000 [ 891.052787][T13916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.060257][T13916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.088255][T13916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 891.102476][T13933] wlan0 speed is unknown, defaulting to 1000 [ 891.130393][T13919] chnl_net:caif_netlink_parms(): no params data found [ 891.153555][T13933] macsec0 speed is unknown, defaulting to 1000 [ 891.161505][T13912] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.169272][T13912] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.176609][T13912] bridge_slave_0: entered allmulticast mode [ 891.183684][T13912] bridge_slave_0: entered promiscuous mode [ 891.222822][T13912] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.230776][T13912] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.240205][T13912] bridge_slave_1: entered allmulticast mode [ 891.249173][T13912] bridge_slave_1: entered promiscuous mode [ 891.372983][T13916] hsr_slave_0: entered promiscuous mode [ 891.380352][T13916] hsr_slave_1: entered promiscuous mode [ 891.387352][T13916] debugfs: 'hsr0' already exists in 'hsr' [ 891.393082][T13916] Cannot create hsr debugfs directory [ 891.469090][T13912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.485195][T13912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 891.580453][T13919] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.588091][T13919] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.595318][T13919] bridge_slave_0: entered allmulticast mode [ 891.602767][T13919] bridge_slave_0: entered promiscuous mode [ 891.621177][T13912] team0: Port device team_slave_0 added [ 891.633209][T13912] team0: Port device team_slave_1 added [ 891.639350][T13919] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.646817][T13919] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.654031][T13919] bridge_slave_1: entered allmulticast mode [ 891.661097][T13919] bridge_slave_1: entered promiscuous mode [ 891.679012][T13915] chnl_net:caif_netlink_parms(): no params data found [ 891.716358][T30767] Bluetooth: hci6: command tx timeout [ 891.723560][T13914] Bluetooth: hci5: command tx timeout [ 891.789620][T13919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.814968][T13912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.822327][T13912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.848697][T13912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.867074][T13919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 891.877469][T30767] Bluetooth: hci8: command tx timeout [ 891.879091][T13914] Bluetooth: hci7: command tx timeout [ 891.897936][T13912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.904907][T13912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.931731][T13912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 891.994263][T13919] team0: Port device team_slave_0 added [ 892.037372][T13915] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.045018][T13915] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.052484][T13915] bridge_slave_0: entered allmulticast mode [ 892.060112][T13915] bridge_slave_0: entered promiscuous mode [ 892.069799][T13919] team0: Port device team_slave_1 added [ 892.093829][T13915] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.101110][T13915] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.109226][T13915] bridge_slave_1: entered allmulticast mode [ 892.116365][T13915] bridge_slave_1: entered promiscuous mode [ 892.189874][T13912] hsr_slave_0: entered promiscuous mode [ 892.197092][T13912] hsr_slave_1: entered promiscuous mode [ 892.203476][T13912] debugfs: 'hsr0' already exists in 'hsr' [ 892.209326][T13912] Cannot create hsr debugfs directory [ 892.225463][T13919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.232481][T13919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.258933][T13919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.308099][T13915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.318576][T13919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.325516][T13919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.351934][T13919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.392552][T13915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.467318][T13915] team0: Port device team_slave_0 added [ 892.475899][T13915] team0: Port device team_slave_1 added [ 892.552723][T13933] chnl_net:caif_netlink_parms(): no params data found [ 892.584867][T13919] hsr_slave_0: entered promiscuous mode [ 892.591910][T13919] hsr_slave_1: entered promiscuous mode [ 892.598664][T13919] debugfs: 'hsr0' already exists in 'hsr' [ 892.604382][T13919] Cannot create hsr debugfs directory [ 892.617368][T13915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.624317][T13915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.650943][T13915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.691850][T13915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.699140][T13915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.725444][T13915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.757395][T13914] Bluetooth: hci9: command tx timeout [ 892.914355][T13915] hsr_slave_0: entered promiscuous mode [ 892.924789][T13915] hsr_slave_1: entered promiscuous mode [ 892.931525][T13915] debugfs: 'hsr0' already exists in 'hsr' [ 892.937382][T13915] Cannot create hsr debugfs directory [ 892.955306][T13933] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.963063][T13933] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.970453][T13933] bridge_slave_0: entered allmulticast mode [ 892.978260][T13933] bridge_slave_0: entered promiscuous mode [ 892.988692][T13933] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.995824][T13933] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.003802][T13933] bridge_slave_1: entered allmulticast mode [ 893.011255][T13933] bridge_slave_1: entered promiscuous mode [ 893.117180][T13933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.148187][T13933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.225376][T13933] team0: Port device team_slave_0 added [ 893.249497][T13933] team0: Port device team_slave_1 added [ 893.316788][T13933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.323768][T13933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.350372][T13933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.379810][T13933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.387022][T13933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.413606][T13933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.497671][T13933] hsr_slave_0: entered promiscuous mode [ 893.504408][T13933] hsr_slave_1: entered promiscuous mode [ 893.510904][T13933] debugfs: 'hsr0' already exists in 'hsr' [ 893.517515][T13933] Cannot create hsr debugfs directory [ 893.797286][T30767] Bluetooth: hci6: command tx timeout [ 893.802764][T13914] Bluetooth: hci5: command tx timeout [ 893.956408][T30767] Bluetooth: hci8: command tx timeout [ 893.957501][T13914] Bluetooth: hci7: command tx timeout [ 894.846883][T13914] Bluetooth: hci9: command tx timeout [ 895.636773][ T25] block nbd12: Possible stuck request ffff888024e68000: control (read@0,1024B). Runtime 60 seconds [ 895.647714][ T25] block nbd12: Possible stuck request ffff888024e68200: control (read@1024,1024B). Runtime 60 seconds [ 895.658877][ T25] block nbd12: Possible stuck request ffff888024e68400: control (read@2048,1024B). Runtime 60 seconds [ 895.670093][ T25] block nbd12: Possible stuck request ffff888024e68600: control (read@3072,1024B). Runtime 60 seconds [ 895.877121][T13914] Bluetooth: hci5: command tx timeout [ 895.877147][T30767] Bluetooth: hci6: command tx timeout [ 896.036377][T30767] Bluetooth: hci8: command tx timeout [ 896.037555][T13914] Bluetooth: hci7: command tx timeout [ 896.700328][ T5198] udevd[5198]: worker [9966] /devices/virtual/block/nbd12 is taking a long time [ 896.709870][ T5198] udevd[5198]: worker [10132] /devices/virtual/block/nbd13 is taking a long time [ 896.916922][T13914] Bluetooth: hci9: command tx timeout [ 896.922608][ T25] block nbd7: Possible stuck request ffff888024c98000: control (read@0,1024B). Runtime 120 seconds [ 896.928825][ T11] block nbd13: Possible stuck request ffff888024ee0000: control (read@0,1024B). Runtime 60 seconds [ 896.933609][ T25] block nbd7: Possible stuck request ffff888024c98200: control (read@1024,1024B). Runtime 120 seconds [ 896.955130][ T11] block nbd13: Possible stuck request ffff888024ee0200: control (read@1024,1024B). Runtime 60 seconds [ 896.955164][ T11] block nbd13: Possible stuck request ffff888024ee0400: control (read@2048,1024B). Runtime 60 seconds [ 896.955192][ T11] block nbd13: Possible stuck request ffff888024ee0600: control (read@3072,1024B). Runtime 60 seconds [ 896.989208][ T25] block nbd7: Possible stuck request ffff888024c98400: control (read@2048,1024B). Runtime 120 seconds [ 897.000588][ T25] block nbd7: Possible stuck request ffff888024c98600: control (read@3072,1024B). Runtime 120 seconds [ 897.956326][T13914] Bluetooth: hci5: command tx timeout [ 897.957361][T30767] Bluetooth: hci6: command tx timeout [ 898.116423][T30767] Bluetooth: hci7: command tx timeout [ 898.118166][T13914] Bluetooth: hci8: command tx timeout [ 898.996384][T13914] Bluetooth: hci9: command tx timeout [ 900.756764][ T25] block nbd5: Possible stuck request ffff888024c28000: control (read@0,1024B). Runtime 180 seconds [ 900.767941][ T25] block nbd5: Possible stuck request ffff888024c28200: control (read@1024,1024B). Runtime 180 seconds [ 900.779122][ T25] block nbd5: Possible stuck request ffff888024c28400: control (read@2048,1024B). Runtime 180 seconds [ 900.790411][ T25] block nbd5: Possible stuck request ffff888024c28600: control (read@3072,1024B). Runtime 180 seconds [ 901.406562][ T11] block nbd11: Possible stuck request ffff888024e08000: control (read@0,1024B). Runtime 90 seconds [ 901.417640][ T11] block nbd11: Possible stuck request ffff888024e08200: control (read@1024,1024B). Runtime 90 seconds [ 901.428746][ T11] block nbd11: Possible stuck request ffff888024e08400: control (read@2048,1024B). Runtime 90 seconds [ 901.439732][ T11] block nbd11: Possible stuck request ffff888024e08600: control (read@3072,1024B). Runtime 90 seconds [ 902.037340][ T56] block nbd9: Possible stuck request ffff888024d98000: control (read@0,1024B). Runtime 120 seconds [ 902.048508][ T25] block nbd8: Possible stuck request ffff888024d48000: control (read@0,1024B). Runtime 120 seconds [ 902.059369][ T56] block nbd9: Possible stuck request ffff888024d98200: control (read@1024,1024B). Runtime 120 seconds [ 902.070397][ T25] block nbd8: Possible stuck request ffff888024d48200: control (read@1024,1024B). Runtime 120 seconds [ 902.081554][ T56] block nbd9: Possible stuck request ffff888024d98400: control (read@2048,1024B). Runtime 120 seconds [ 902.092859][ T25] block nbd8: Possible stuck request ffff888024d48400: control (read@2048,1024B). Runtime 120 seconds [ 902.116966][ T56] block nbd9: Possible stuck request ffff888024d98600: control (read@3072,1024B). Runtime 120 seconds [ 902.128080][ T25] block nbd8: Possible stuck request ffff888024d48600: control (read@3072,1024B). Runtime 120 seconds [ 902.726230][ T5198] udevd[5198]: worker [5085] /devices/virtual/block/nbd5 timeout; kill it [ 902.734885][ T5198] udevd[5198]: seq 25104 '/devices/virtual/block/nbd5' killed [ 912.916800][ T56] block nbd14: Possible stuck request ffff888024f88000: control (read@0,1024B). Runtime 60 seconds [ 912.927889][ T56] block nbd14: Possible stuck request ffff888024f88200: control (read@1024,1024B). Runtime 60 seconds [ 912.939240][ T56] block nbd14: Possible stuck request ffff888024f88400: control (read@2048,1024B). Runtime 60 seconds [ 912.950288][ T56] block nbd14: Possible stuck request ffff888024f88600: control (read@3072,1024B). Runtime 60 seconds [ 914.206277][ T11] block nbd1: Possible stuck request ffff888024af8000: control (read@0,1024B). Runtime 150 seconds [ 914.217597][ T11] block nbd1: Possible stuck request ffff888024af8200: control (read@1024,1024B). Runtime 150 seconds [ 914.228722][ T11] block nbd1: Possible stuck request ffff888024af8400: control (read@2048,1024B). Runtime 150 seconds [ 914.239708][ T11] block nbd1: Possible stuck request ffff888024af8600: control (read@3072,1024B). Runtime 150 seconds [ 914.756700][ T5198] udevd[5198]: worker [11600] /devices/virtual/block/nbd14 is taking a long time [ 916.766295][ T11] block nbd3: Possible stuck request ffff888024ba5600: control (read@0,1024B). Runtime 150 seconds [ 916.779253][ T11] block nbd3: Possible stuck request ffff888024ba5800: control (read@1024,1024B). Runtime 150 seconds [ 916.790398][ T11] block nbd3: Possible stuck request ffff888024ba5a00: control (read@2048,1024B). Runtime 150 seconds [ 916.801802][ T11] block nbd3: Possible stuck request ffff888024ba5c00: control (read@3072,1024B). Runtime 150 seconds [ 919.316798][ T56] block nbd10: Possible stuck request ffff888024dc0000: control (read@0,1024B). Runtime 120 seconds [ 919.328361][ T56] block nbd10: Possible stuck request ffff888024dc0200: control (read@1024,1024B). Runtime 120 seconds [ 919.340608][ T56] block nbd10: Possible stuck request ffff888024dc0400: control (read@2048,1024B). Runtime 120 seconds [ 919.351753][ T56] block nbd10: Possible stuck request ffff888024dc0600: control (read@3072,1024B). Runtime 120 seconds [ 925.716948][ T56] block nbd12: Possible stuck request ffff888024e68000: control (read@0,1024B). Runtime 90 seconds [ 925.727761][ T56] block nbd12: Possible stuck request ffff888024e68200: control (read@1024,1024B). Runtime 90 seconds [ 925.738950][ T56] block nbd12: Possible stuck request ffff888024e68400: control (read@2048,1024B). Runtime 90 seconds [ 925.750388][ T56] block nbd12: Possible stuck request ffff888024e68600: control (read@3072,1024B). Runtime 90 seconds [ 926.997851][ T11] block nbd13: Possible stuck request ffff888024ee0000: control (read@0,1024B). Runtime 90 seconds [ 926.997851][ T56] block nbd7: Possible stuck request ffff888024c98000: control (read@0,1024B). Runtime 150 seconds [ 926.997894][ T56] block nbd7: Possible stuck request ffff888024c98200: control (read@1024,1024B). Runtime 150 seconds [ 927.008965][ T11] block nbd13: Possible stuck request ffff888024ee0200: control (read@1024,1024B). Runtime 90 seconds [ 927.019935][ T56] block nbd7: Possible stuck request ffff888024c98400: control (read@2048,1024B). Runtime 150 seconds [ 927.030803][ T11] block nbd13: Possible stuck request ffff888024ee0400: control (read@2048,1024B). Runtime 90 seconds [ 927.064100][ T11] block nbd13: Possible stuck request ffff888024ee0600: control (read@3072,1024B). Runtime 90 seconds [ 927.064129][ T56] block nbd7: Possible stuck request ffff888024c98600: control (read@3072,1024B). Runtime 150 seconds [ 930.846453][ T56] block nbd5: Possible stuck request ffff888024c28000: control (read@0,1024B). Runtime 210 seconds [ 930.857498][ T56] block nbd5: Possible stuck request ffff888024c28200: control (read@1024,1024B). Runtime 210 seconds [ 930.868663][ T56] block nbd5: Possible stuck request ffff888024c28400: control (read@2048,1024B). Runtime 210 seconds [ 930.879636][ T56] block nbd5: Possible stuck request ffff888024c28600: control (read@3072,1024B). Runtime 210 seconds [ 931.479050][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 931.483920][ T11] block nbd11: Possible stuck request ffff888024e08000: control (read@0,1024B). Runtime 120 seconds [ 931.498857][ T11] block nbd11: Possible stuck request ffff888024e08200: control (read@1024,1024B). Runtime 120 seconds [ 931.510069][ T11] block nbd11: Possible stuck request ffff888024e08400: control (read@2048,1024B). Runtime 120 seconds [ 931.521449][ T11] block nbd11: Possible stuck request ffff888024e08600: control (read@3072,1024B). Runtime 120 seconds [ 932.116619][ T25] block nbd8: Possible stuck request ffff888024d48000: control (read@0,1024B). Runtime 150 seconds [ 932.127481][ T56] block nbd9: Possible stuck request ffff888024d98000: control (read@0,1024B). Runtime 150 seconds [ 932.138527][ T25] block nbd8: Possible stuck request ffff888024d48200: control (read@1024,1024B). Runtime 150 seconds [ 932.149530][ T56] block nbd9: Possible stuck request ffff888024d98200: control (read@1024,1024B). Runtime 150 seconds [ 932.160530][ T25] block nbd8: Possible stuck request ffff888024d48400: control (read@2048,1024B). Runtime 150 seconds [ 932.171646][ T56] block nbd9: Possible stuck request ffff888024d98400: control (read@2048,1024B). Runtime 150 seconds [ 932.196729][ T25] block nbd8: Possible stuck request ffff888024d48600: control (read@3072,1024B). Runtime 150 seconds [ 932.207968][ T56] block nbd9: Possible stuck request ffff888024d98600: control (read@3072,1024B). Runtime 150 seconds [ 935.790041][ T5198] udevd[5198]: worker [3926] /devices/virtual/block/nbd0 timeout; kill it [ 935.798961][ T5198] udevd[5198]: seq 26123 '/devices/virtual/block/nbd0' killed [ 942.996711][ T56] block nbd14: Possible stuck request ffff888024f88000: control (read@0,1024B). Runtime 90 seconds [ 943.007672][ T56] block nbd14: Possible stuck request ffff888024f88200: control (read@1024,1024B). Runtime 90 seconds [ 943.018843][ T56] block nbd14: Possible stuck request ffff888024f88400: control (read@2048,1024B). Runtime 90 seconds [ 943.029951][ T56] block nbd14: Possible stuck request ffff888024f88600: control (read@3072,1024B). Runtime 90 seconds [ 944.276478][ T11] block nbd1: Possible stuck request ffff888024af8000: control (read@0,1024B). Runtime 180 seconds [ 944.287290][ T11] block nbd1: Possible stuck request ffff888024af8200: control (read@1024,1024B). Runtime 180 seconds [ 944.298470][ T11] block nbd1: Possible stuck request ffff888024af8400: control (read@2048,1024B). Runtime 180 seconds [ 944.309457][ T11] block nbd1: Possible stuck request ffff888024af8600: control (read@3072,1024B). Runtime 180 seconds [ 944.816418][ T5198] udevd[5198]: worker [4437] /devices/virtual/block/nbd1 timeout; kill it [ 944.825109][ T5198] udevd[5198]: seq 26696 '/devices/virtual/block/nbd1' killed [ 946.838393][ T11] block nbd3: Possible stuck request ffff888024ba5600: control (read@0,1024B). Runtime 180 seconds [ 946.849422][ T11] block nbd3: Possible stuck request ffff888024ba5800: control (read@1024,1024B). Runtime 180 seconds [ 946.860525][ T11] block nbd3: Possible stuck request ffff888024ba5a00: control (read@2048,1024B). Runtime 180 seconds [ 946.871798][ T11] block nbd3: Possible stuck request ffff888024ba5c00: control (read@3072,1024B). Runtime 180 seconds [ 947.836605][ T5198] udevd[5198]: worker [3736] /devices/virtual/block/nbd3 timeout; kill it [ 947.845246][ T5198] udevd[5198]: seq 26785 '/devices/virtual/block/nbd3' killed [ 949.416766][ T56] block nbd10: Possible stuck request ffff888024dc0000: control (read@0,1024B). Runtime 150 seconds [ 949.427782][ T56] block nbd10: Possible stuck request ffff888024dc0200: control (read@1024,1024B). Runtime 150 seconds [ 949.438886][ T56] block nbd10: Possible stuck request ffff888024dc0400: control (read@2048,1024B). Runtime 150 seconds [ 949.449984][ T56] block nbd10: Possible stuck request ffff888024dc0600: control (read@3072,1024B). Runtime 150 seconds [ 949.924829][T30767] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 949.935903][T30767] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 949.951075][T13918] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 949.951777][T30767] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 949.963005][T13918] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 949.967841][T30767] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 949.980761][T13918] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 949.982572][T13918] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 949.997150][T13918] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 949.999309][T30767] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 950.094607][T13918] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 950.105243][T13918] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 950.114277][T13918] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 950.115287][T13921] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 950.125373][T13962] lo speed is unknown, defaulting to 1000 [ 950.136943][T13962] wlan0 speed is unknown, defaulting to 1000 [ 950.144602][T13962] macsec0 speed is unknown, defaulting to 1000 [ 950.144890][T13921] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 950.159353][T13921] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 950.159414][T13918] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 950.167786][T13960] lo speed is unknown, defaulting to 1000 [ 950.183573][T13921] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 950.192900][T13921] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 950.203803][T13921] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 950.258653][T13960] wlan0 speed is unknown, defaulting to 1000 [ 950.259449][T13966] lo speed is unknown, defaulting to 1000 [ 950.272429][T13966] wlan0 speed is unknown, defaulting to 1000 [ 950.289232][T13960] macsec0 speed is unknown, defaulting to 1000 [ 950.290142][T13964] lo speed is unknown, defaulting to 1000 [ 950.297100][T13966] macsec0 speed is unknown, defaulting to 1000 [ 950.318138][T13964] wlan0 speed is unknown, defaulting to 1000 [ 950.325832][T13964] macsec0 speed is unknown, defaulting to 1000 [ 950.590441][T13962] chnl_net:caif_netlink_parms(): no params data found [ 950.817305][T13962] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.824653][T13962] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.832501][T13962] bridge_slave_0: entered allmulticast mode [ 950.841278][T13962] bridge_slave_0: entered promiscuous mode [ 950.858565][T13962] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.865710][T13962] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.873916][T13962] bridge_slave_1: entered allmulticast mode [ 950.882044][T13962] bridge_slave_1: entered promiscuous mode [ 951.019383][T13962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.053038][T13962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.128790][T13914] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 951.136919][T13962] team0: Port device team_slave_0 added [ 951.148649][T13914] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 951.161739][T13962] team0: Port device team_slave_1 added [ 951.168720][T13914] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 951.169357][T13960] chnl_net:caif_netlink_parms(): no params data found [ 951.183516][T13914] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 951.191813][T13914] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 951.301528][T13962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 951.308995][T13962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 951.335543][T13962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 951.374528][T13962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 951.381708][T13962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 951.408372][T13962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 951.471321][T13960] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.478868][T13960] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.487392][T13960] bridge_slave_0: entered allmulticast mode [ 951.495018][T13960] bridge_slave_0: entered promiscuous mode [ 951.510424][T13966] chnl_net:caif_netlink_parms(): no params data found [ 951.522547][T13960] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.530129][T13960] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.537854][T13960] bridge_slave_1: entered allmulticast mode [ 951.544888][T13960] bridge_slave_1: entered promiscuous mode [ 951.616377][T13979] lo speed is unknown, defaulting to 1000 [ 951.638646][T13960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.653147][T13962] hsr_slave_0: entered promiscuous mode [ 951.659903][T13962] hsr_slave_1: entered promiscuous mode [ 951.665968][T13962] debugfs: 'hsr0' already exists in 'hsr' [ 951.671897][T13962] Cannot create hsr debugfs directory [ 951.682015][T13979] wlan0 speed is unknown, defaulting to 1000 [ 951.700756][T13960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.710755][T13979] macsec0 speed is unknown, defaulting to 1000 [ 951.874236][T13960] team0: Port device team_slave_0 added [ 951.919285][T13960] team0: Port device team_slave_1 added [ 951.947639][T13966] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.954806][T13966] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.964380][T13966] bridge_slave_0: entered allmulticast mode [ 951.972118][T13966] bridge_slave_0: entered promiscuous mode [ 952.010669][T13966] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.018427][T13966] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.025735][T13966] bridge_slave_1: entered allmulticast mode [ 952.033219][T13966] bridge_slave_1: entered promiscuous mode [ 952.046584][T13921] Bluetooth: hci11: command tx timeout [ 952.053601][T13914] Bluetooth: hci10: command tx timeout [ 952.090133][T13964] chnl_net:caif_netlink_parms(): no params data found [ 952.113746][T13960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.122062][T13960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.148976][T13960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.185266][T13966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 952.195773][T13960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.203240][T13921] Bluetooth: hci12: command tx timeout [ 952.213428][T13960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.240098][T13960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.276434][T13921] Bluetooth: hci13: command tx timeout [ 952.288064][T13966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 952.401229][T13966] team0: Port device team_slave_0 added [ 952.412510][T13960] hsr_slave_0: entered promiscuous mode [ 952.419260][T13960] hsr_slave_1: entered promiscuous mode [ 952.425521][T13960] debugfs: 'hsr0' already exists in 'hsr' [ 952.431541][T13960] Cannot create hsr debugfs directory [ 952.450512][T13966] team0: Port device team_slave_1 added [ 952.519057][T13964] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.526516][T13964] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.533733][T13964] bridge_slave_0: entered allmulticast mode [ 952.541170][T13964] bridge_slave_0: entered promiscuous mode [ 952.582609][T13964] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.590592][T13964] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.598624][T13964] bridge_slave_1: entered allmulticast mode [ 952.605646][T13964] bridge_slave_1: entered promiscuous mode [ 952.617396][T13966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.624342][T13966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.651086][T13966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.713756][T13966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.720843][T13966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.747345][T13966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.767943][T13964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 952.800846][T13964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 952.921329][T13964] team0: Port device team_slave_0 added [ 952.962757][T13964] team0: Port device team_slave_1 added [ 952.973182][T13966] hsr_slave_0: entered promiscuous mode [ 952.980345][T13966] hsr_slave_1: entered promiscuous mode [ 952.986658][T13966] debugfs: 'hsr0' already exists in 'hsr' [ 952.992390][T13966] Cannot create hsr debugfs directory [ 952.998532][T13979] chnl_net:caif_netlink_parms(): no params data found [ 953.078304][T13964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.085276][T13964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.112125][T13964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.151128][T13964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.158894][T13964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.185326][T13964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.236672][T13921] Bluetooth: hci14: command tx timeout [ 953.332364][T13979] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.339991][T13979] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.347703][T13979] bridge_slave_0: entered allmulticast mode [ 953.354720][T13979] bridge_slave_0: entered promiscuous mode [ 953.362533][T13979] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.369961][T13979] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.377690][T13979] bridge_slave_1: entered allmulticast mode [ 953.384726][T13979] bridge_slave_1: entered promiscuous mode [ 953.434162][T13964] hsr_slave_0: entered promiscuous mode [ 953.440749][T13964] hsr_slave_1: entered promiscuous mode [ 953.447684][T13964] debugfs: 'hsr0' already exists in 'hsr' [ 953.453398][T13964] Cannot create hsr debugfs directory [ 953.485563][T13979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.521018][T13979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.589137][T13979] team0: Port device team_slave_0 added [ 953.611527][T13979] team0: Port device team_slave_1 added [ 953.691981][T13979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.699165][T13979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.726669][T13979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.739679][T13979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.746920][T13979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.773162][T13979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.861222][T13979] hsr_slave_0: entered promiscuous mode [ 953.868036][T13979] hsr_slave_1: entered promiscuous mode [ 953.874139][T13979] debugfs: 'hsr0' already exists in 'hsr' [ 953.880146][T13979] Cannot create hsr debugfs directory [ 954.117243][T13921] Bluetooth: hci11: command tx timeout [ 954.117715][T13914] Bluetooth: hci10: command tx timeout [ 954.276517][T13914] Bluetooth: hci12: command tx timeout [ 954.357753][T13914] Bluetooth: hci13: command tx timeout [ 955.316181][T13914] Bluetooth: hci14: command tx timeout [ 955.796836][ T56] block nbd12: Possible stuck request ffff888024e68000: control (read@0,1024B). Runtime 120 seconds [ 955.807870][ T56] block nbd12: Possible stuck request ffff888024e68200: control (read@1024,1024B). Runtime 120 seconds [ 955.819237][ T56] block nbd12: Possible stuck request ffff888024e68400: control (read@2048,1024B). Runtime 120 seconds [ 955.830619][ T56] block nbd12: Possible stuck request ffff888024e68600: control (read@3072,1024B). Runtime 120 seconds [ 956.196684][T13914] Bluetooth: hci10: command tx timeout [ 956.206461][T13914] Bluetooth: hci11: command tx timeout [ 956.357865][T13914] Bluetooth: hci12: command tx timeout [ 956.436571][T13914] Bluetooth: hci13: command tx timeout [ 957.096570][ T11] block nbd13: Possible stuck request ffff888024ee0000: control (read@0,1024B). Runtime 120 seconds [ 957.107574][ T11] block nbd13: Possible stuck request ffff888024ee0200: control (read@1024,1024B). Runtime 120 seconds [ 957.118665][ T11] block nbd13: Possible stuck request ffff888024ee0400: control (read@2048,1024B). Runtime 120 seconds [ 957.130110][ T11] block nbd13: Possible stuck request ffff888024ee0600: control (read@3072,1024B). Runtime 120 seconds [ 957.141262][ T56] block nbd7: Possible stuck request ffff888024c98000: control (read@0,1024B). Runtime 180 seconds [ 957.152554][ T56] block nbd7: Possible stuck request ffff888024c98200: control (read@1024,1024B). Runtime 180 seconds [ 957.163882][ T56] block nbd7: Possible stuck request ffff888024c98400: control (read@2048,1024B). Runtime 180 seconds [ 957.175116][ T56] block nbd7: Possible stuck request ffff888024c98600: control (read@3072,1024B). Runtime 180 seconds [ 957.397992][T13914] Bluetooth: hci14: command tx timeout [ 957.694026][ T5198] udevd[5198]: worker [7978] /devices/virtual/block/nbd7 timeout; kill it [ 957.702974][ T5198] udevd[5198]: seq 27110 '/devices/virtual/block/nbd7' killed [ 958.276476][T13921] Bluetooth: hci10: command tx timeout [ 958.281998][T13914] Bluetooth: hci11: command tx timeout [ 958.437527][T13914] Bluetooth: hci12: command tx timeout [ 958.516316][T13914] Bluetooth: hci13: command tx timeout [ 959.477570][T13914] Bluetooth: hci14: command tx timeout [ 960.936640][ T56] block nbd5: Possible stuck request ffff888024c28000: control (read@0,1024B). Runtime 240 seconds [ 960.947605][ T56] block nbd5: Possible stuck request ffff888024c28200: control (read@1024,1024B). Runtime 240 seconds [ 960.958647][ T56] block nbd5: Possible stuck request ffff888024c28400: control (read@2048,1024B). Runtime 240 seconds [ 960.969754][ T56] block nbd5: Possible stuck request ffff888024c28600: control (read@3072,1024B). Runtime 240 seconds [ 961.570312][ T11] block nbd11: Possible stuck request ffff888024e08000: control (read@0,1024B). Runtime 150 seconds [ 961.581245][ T11] block nbd11: Possible stuck request ffff888024e08200: control (read@1024,1024B). Runtime 150 seconds [ 961.592472][ T11] block nbd11: Possible stuck request ffff888024e08400: control (read@2048,1024B). Runtime 150 seconds [ 961.603705][ T11] block nbd11: Possible stuck request ffff888024e08600: control (read@3072,1024B). Runtime 150 seconds [ 962.197454][ T25] block nbd8: Possible stuck request ffff888024d48000: control (read@0,1024B). Runtime 180 seconds [ 962.208390][ T56] block nbd9: Possible stuck request ffff888024d98000: control (read@0,1024B). Runtime 180 seconds [ 962.219262][ T56] block nbd9: Possible stuck request ffff888024d98200: control (read@1024,1024B). Runtime 180 seconds [ 962.230724][ T25] block nbd8: Possible stuck request ffff888024d48200: control (read@1024,1024B). Runtime 180 seconds [ 962.241743][ T25] block nbd8: Possible stuck request ffff888024d48400: control (read@2048,1024B). Runtime 180 seconds [ 962.252741][ T56] block nbd9: Possible stuck request ffff888024d98400: control (read@2048,1024B). Runtime 180 seconds [ 962.276333][ T25] block nbd8: Possible stuck request ffff888024d48600: control (read@3072,1024B). Runtime 180 seconds [ 962.287646][ T56] block nbd9: Possible stuck request ffff888024d98600: control (read@3072,1024B). Runtime 180 seconds [ 963.716364][ T5198] udevd[5198]: worker [6385] /devices/virtual/block/nbd8 timeout; kill it [ 963.724982][ T5198] udevd[5198]: seq 27191 '/devices/virtual/block/nbd8' killed [ 963.732644][ T5198] udevd[5198]: worker [8225] /devices/virtual/block/nbd9 timeout; kill it [ 963.741555][ T5198] udevd[5198]: seq 27231 '/devices/virtual/block/nbd9' killed [ 973.076789][ T56] block nbd14: Possible stuck request ffff888024f88000: control (read@0,1024B). Runtime 120 seconds [ 973.088128][ T56] block nbd14: Possible stuck request ffff888024f88200: control (read@1024,1024B). Runtime 120 seconds [ 973.099299][ T56] block nbd14: Possible stuck request ffff888024f88400: control (read@2048,1024B). Runtime 120 seconds [ 973.110569][ T56] block nbd14: Possible stuck request ffff888024f88600: control (read@3072,1024B). Runtime 120 seconds [ 974.357780][ T11] block nbd1: Possible stuck request ffff888024af8000: control (read@0,1024B). Runtime 210 seconds [ 974.368638][ T11] block nbd1: Possible stuck request ffff888024af8200: control (read@1024,1024B). Runtime 210 seconds [ 974.379812][ T11] block nbd1: Possible stuck request ffff888024af8400: control (read@2048,1024B). Runtime 210 seconds [ 974.390930][ T11] block nbd1: Possible stuck request ffff888024af8600: control (read@3072,1024B). Runtime 210 seconds [ 976.926155][ T11] block nbd3: Possible stuck request ffff888024ba5600: control (read@0,1024B). Runtime 210 seconds [ 976.937032][ T11] block nbd3: Possible stuck request ffff888024ba5800: control (read@1024,1024B). Runtime 210 seconds [ 976.948205][ T11] block nbd3: Possible stuck request ffff888024ba5a00: control (read@2048,1024B). Runtime 210 seconds [ 976.959269][ T11] block nbd3: Possible stuck request ffff888024ba5c00: control (read@3072,1024B). Runtime 210 seconds [ 978.766574][ T5198] udevd[5198]: worker [8394] /devices/virtual/block/nbd10 timeout; kill it [ 978.775309][ T5198] udevd[5198]: seq 28100 '/devices/virtual/block/nbd10' killed [ 979.476652][ T56] block nbd10: Possible stuck request ffff888024dc0000: control (read@0,1024B). Runtime 180 seconds [ 979.487768][ T56] block nbd10: Possible stuck request ffff888024dc0200: control (read@1024,1024B). Runtime 180 seconds [ 979.499193][ T56] block nbd10: Possible stuck request ffff888024dc0400: control (read@2048,1024B). Runtime 180 seconds [ 979.510265][ T56] block nbd10: Possible stuck request ffff888024dc0600: control (read@3072,1024B). Runtime 180 seconds [ 985.876776][ T56] block nbd12: Possible stuck request ffff888024e68000: control (read@0,1024B). Runtime 150 seconds [ 985.887947][ T56] block nbd12: Possible stuck request ffff888024e68200: control (read@1024,1024B). Runtime 150 seconds [ 985.899368][ T56] block nbd12: Possible stuck request ffff888024e68400: control (read@2048,1024B). Runtime 150 seconds [ 985.910476][ T56] block nbd12: Possible stuck request ffff888024e68600: control (read@3072,1024B). Runtime 150 seconds [ 987.156707][ T11] block nbd13: Possible stuck request ffff888024ee0000: control (read@0,1024B). Runtime 150 seconds [ 987.167734][ T11] block nbd13: Possible stuck request ffff888024ee0200: control (read@1024,1024B). Runtime 150 seconds [ 987.167759][ T56] block nbd7: Possible stuck request ffff888024c98000: control (read@0,1024B). Runtime 210 seconds [ 987.178965][ T11] block nbd13: Possible stuck request ffff888024ee0400: control (read@2048,1024B). Runtime 150 seconds [ 987.178996][ T11] block nbd13: Possible stuck request ffff888024ee0600: control (read@3072,1024B). Runtime 150 seconds [ 987.212266][ T56] block nbd7: Possible stuck request ffff888024c98200: control (read@1024,1024B). Runtime 210 seconds [ 987.236502][ T56] block nbd7: Possible stuck request ffff888024c98400: control (read@2048,1024B). Runtime 210 seconds [ 987.247899][ T56] block nbd7: Possible stuck request ffff888024c98600: control (read@3072,1024B). Runtime 210 seconds [ 990.996810][ T56] block nbd5: Possible stuck request ffff888024c28000: control (read@0,1024B). Runtime 270 seconds [ 991.008081][ T56] block nbd5: Possible stuck request ffff888024c28200: control (read@1024,1024B). Runtime 270 seconds [ 991.019294][ T56] block nbd5: Possible stuck request ffff888024c28400: control (read@2048,1024B). Runtime 270 seconds [ 991.030417][ T56] block nbd5: Possible stuck request ffff888024c28600: control (read@3072,1024B). Runtime 270 seconds [ 991.646153][ T11] block nbd11: Possible stuck request ffff888024e08000: control (read@0,1024B). Runtime 180 seconds [ 991.657381][ T11] block nbd11: Possible stuck request ffff888024e08200: control (read@1024,1024B). Runtime 180 seconds [ 991.668763][ T11] block nbd11: Possible stuck request ffff888024e08400: control (read@2048,1024B). Runtime 180 seconds [ 991.679831][ T11] block nbd11: Possible stuck request ffff888024e08600: control (read@3072,1024B). Runtime 180 seconds [ 992.277416][ T25] block nbd8: Possible stuck request ffff888024d48000: control (read@0,1024B). Runtime 210 seconds [ 992.288358][ T56] block nbd9: Possible stuck request ffff888024d98000: control (read@0,1024B). Runtime 210 seconds [ 992.299146][ T56] block nbd9: Possible stuck request ffff888024d98200: control (read@1024,1024B). Runtime 210 seconds [ 992.310533][ T25] block nbd8: Possible stuck request ffff888024d48200: control (read@1024,1024B). Runtime 210 seconds [ 992.321508][ T56] block nbd9: Possible stuck request ffff888024d98400: control (read@2048,1024B). Runtime 210 seconds [ 992.332841][ T25] block nbd8: Possible stuck request ffff888024d48400: control (read@2048,1024B). Runtime 210 seconds [ 992.347105][ T56] block nbd9: Possible stuck request ffff888024d98600: control (read@3072,1024B). Runtime 210 seconds [ 992.358211][ T25] block nbd8: Possible stuck request ffff888024d48600: control (read@3072,1024B). Runtime 210 seconds [ 992.928937][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 993.799965][ T5198] udevd[5198]: worker [9751] /devices/virtual/block/nbd11 timeout; kill it [ 993.809019][ T5198] udevd[5198]: seq 28678 '/devices/virtual/block/nbd11' killed [ 1003.179079][ T56] block nbd14: Possible stuck request ffff888024f88000: control (read@0,1024B). Runtime 150 seconds [ 1003.190204][ T56] block nbd14: Possible stuck request ffff888024f88200: control (read@1024,1024B). Runtime 150 seconds [ 1003.201695][ T56] block nbd14: Possible stuck request ffff888024f88400: control (read@2048,1024B). Runtime 150 seconds [ 1003.213070][ T56] block nbd14: Possible stuck request ffff888024f88600: control (read@3072,1024B). Runtime 150 seconds [ 1004.436633][ T11] block nbd1: Possible stuck request ffff888024af8000: control (read@0,1024B). Runtime 240 seconds [ 1004.447644][ T11] block nbd1: Possible stuck request ffff888024af8200: control (read@1024,1024B). Runtime 240 seconds [ 1004.458861][ T11] block nbd1: Possible stuck request ffff888024af8400: control (read@2048,1024B). Runtime 240 seconds [ 1004.469849][ T11] block nbd1: Possible stuck request ffff888024af8600: control (read@3072,1024B). Runtime 240 seconds [ 1007.016147][ T11] block nbd3: Possible stuck request ffff888024ba5600: control (read@0,1024B). Runtime 240 seconds [ 1007.027101][ T11] block nbd3: Possible stuck request ffff888024ba5800: control (read@1024,1024B). Runtime 240 seconds [ 1007.038248][ T11] block nbd3: Possible stuck request ffff888024ba5a00: control (read@2048,1024B). Runtime 240 seconds [ 1007.049427][ T11] block nbd3: Possible stuck request ffff888024ba5c00: control (read@3072,1024B). Runtime 240 seconds [ 1009.556754][ T56] block nbd10: Possible stuck request ffff888024dc0000: control (read@0,1024B). Runtime 210 seconds [ 1009.567893][ T56] block nbd10: Possible stuck request ffff888024dc0200: control (read@1024,1024B). Runtime 210 seconds [ 1009.579277][ T56] block nbd10: Possible stuck request ffff888024dc0400: control (read@2048,1024B). Runtime 210 seconds [ 1009.590388][ T56] block nbd10: Possible stuck request ffff888024dc0600: control (read@3072,1024B). Runtime 210 seconds [ 1009.938329][T13921] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1009.945467][T13918] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1009.947932][T13918] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1009.956955][T13921] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1009.968647][T13918] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1009.969356][T13921] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1009.985254][T13921] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1009.993376][T13918] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1009.993576][T13921] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1010.001793][T13918] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1010.048809][T14004] lo speed is unknown, defaulting to 1000 [ 1010.057556][T14003] lo speed is unknown, defaulting to 1000 [ 1010.057556][T14004] wlan0 speed is unknown, defaulting to 1000 [ 1010.059007][T14004] macsec0 speed is unknown, defaulting to 1000 [ 1010.064772][T14003] wlan0 speed is unknown, defaulting to 1000 [ 1010.084375][T14003] macsec0 speed is unknown, defaulting to 1000 [ 1010.389141][T14004] chnl_net:caif_netlink_parms(): no params data found [ 1010.493942][T14004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.501228][T14004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.508893][T14004] bridge_slave_0: entered allmulticast mode [ 1010.515896][T14004] bridge_slave_0: entered promiscuous mode [ 1010.530494][T14004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.537892][T14004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.545177][T14004] bridge_slave_1: entered allmulticast mode [ 1010.552994][T14004] bridge_slave_1: entered promiscuous mode [ 1010.614371][T14004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1010.631374][T14004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.682000][T14004] team0: Port device team_slave_0 added [ 1010.688543][T14003] chnl_net:caif_netlink_parms(): no params data found [ 1010.701036][T14004] team0: Port device team_slave_1 added [ 1010.751083][T14004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1010.758953][T14004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.785831][T14004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1010.821808][T14004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1010.837194][T14004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.869706][T14004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.983148][T13914] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1010.992135][T13914] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1011.001412][T13914] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1011.016986][T13914] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1011.024658][T13914] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1011.043964][T13921] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1011.061406][T13921] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1011.070602][T13921] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1011.079845][T13921] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1011.087590][T13921] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1011.094171][T14004] hsr_slave_0: entered promiscuous mode [ 1011.102258][T14004] hsr_slave_1: entered promiscuous mode [ 1011.110259][T14004] debugfs: 'hsr0' already exists in 'hsr' [ 1011.117242][T14004] Cannot create hsr debugfs directory [ 1011.123421][T14003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.131207][T14003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.138803][T14003] bridge_slave_0: entered allmulticast mode [ 1011.145895][T14003] bridge_slave_0: entered promiscuous mode [ 1011.167747][T14003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.174952][T14003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.182509][T14003] bridge_slave_1: entered allmulticast mode [ 1011.189938][T14003] bridge_slave_1: entered promiscuous mode [ 1011.262046][T14003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1011.282290][T14023] lo speed is unknown, defaulting to 1000 [ 1011.294736][T14003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1011.314030][T14021] lo speed is unknown, defaulting to 1000 [ 1011.314045][T14023] wlan0 speed is unknown, defaulting to 1000 [ 1011.315552][T14023] macsec0 speed is unknown, defaulting to 1000 [ 1011.347329][T14021] wlan0 speed is unknown, defaulting to 1000 [ 1011.382934][T14021] macsec0 speed is unknown, defaulting to 1000 [ 1011.431427][T14003] team0: Port device team_slave_0 added [ 1011.460275][T14003] team0: Port device team_slave_1 added [ 1011.503899][T13921] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1011.518727][T13921] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1011.527442][T13921] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1011.535492][T13921] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1011.543498][T13921] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1011.620861][T14003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1011.629002][T14003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1011.655323][T14003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1011.673084][T14003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1011.681479][T14003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1011.707973][T14003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1011.844475][T14003] hsr_slave_0: entered promiscuous mode [ 1011.852211][T14003] hsr_slave_1: entered promiscuous mode [ 1011.860661][T14003] debugfs: 'hsr0' already exists in 'hsr' [ 1011.866701][T14003] Cannot create hsr debugfs directory [ 1011.893835][T14026] lo speed is unknown, defaulting to 1000 [ 1011.919685][T14026] wlan0 speed is unknown, defaulting to 1000 [ 1011.936690][T14026] macsec0 speed is unknown, defaulting to 1000 [ 1012.039883][T13921] Bluetooth: hci15: command tx timeout [ 1012.039891][T13914] Bluetooth: hci16: command tx timeout [ 1012.332026][T14023] chnl_net:caif_netlink_parms(): no params data found [ 1012.555417][T14023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.562944][T14023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.570957][T14023] bridge_slave_0: entered allmulticast mode [ 1012.578836][T14023] bridge_slave_0: entered promiscuous mode [ 1012.591848][T14023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.599551][T14023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.607171][T14023] bridge_slave_1: entered allmulticast mode [ 1012.614268][T14023] bridge_slave_1: entered promiscuous mode [ 1012.621759][T14021] chnl_net:caif_netlink_parms(): no params data found [ 1012.730126][T14023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1012.773142][T14023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1012.826550][T14026] chnl_net:caif_netlink_parms(): no params data found [ 1012.839094][T14023] team0: Port device team_slave_0 added [ 1012.870938][T14023] team0: Port device team_slave_1 added [ 1012.890251][T14021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.899614][T14021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.907350][T14021] bridge_slave_0: entered allmulticast mode [ 1012.914366][T14021] bridge_slave_0: entered promiscuous mode [ 1012.954016][T14021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.961667][T14021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.969100][T14021] bridge_slave_1: entered allmulticast mode [ 1012.976486][T14021] bridge_slave_1: entered promiscuous mode [ 1013.003056][T14023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1013.010296][T14023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.036622][T14023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1013.050082][T14023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1013.057361][T14023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.083689][T13921] Bluetooth: hci17: command tx timeout [ 1013.083705][T14023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1013.154730][T14021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.164425][T13921] Bluetooth: hci18: command tx timeout [ 1013.205017][T14021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1013.225203][T14026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.233103][T14026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.240593][T14026] bridge_slave_0: entered allmulticast mode [ 1013.248354][T14026] bridge_slave_0: entered promiscuous mode [ 1013.285007][T14026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.292721][T14026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.300532][T14026] bridge_slave_1: entered allmulticast mode [ 1013.308349][T14026] bridge_slave_1: entered promiscuous mode [ 1013.320541][T14023] hsr_slave_0: entered promiscuous mode [ 1013.327281][T14023] hsr_slave_1: entered promiscuous mode [ 1013.333387][T14023] debugfs: 'hsr0' already exists in 'hsr' [ 1013.339507][T14023] Cannot create hsr debugfs directory [ 1013.370330][T14021] team0: Port device team_slave_0 added [ 1013.392951][T14021] team0: Port device team_slave_1 added [ 1013.430691][T14026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.475629][T14026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1013.505394][T14021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1013.512639][T14021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.539034][T14021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1013.584429][T14021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1013.591764][T14021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.618467][T14021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1013.632309][T14026] team0: Port device team_slave_0 added [ 1013.638003][T14047] Bluetooth: hci19: command tx timeout [ 1013.664927][T14026] team0: Port device team_slave_1 added [ 1013.728976][T14026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1013.735922][T14026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.762323][T14026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1013.789869][T14026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1013.797566][T14026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.823972][T14026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1013.839937][T14021] hsr_slave_0: entered promiscuous mode [ 1013.846600][T14021] hsr_slave_1: entered promiscuous mode [ 1013.852773][T14021] debugfs: 'hsr0' already exists in 'hsr' [ 1013.858800][T14021] Cannot create hsr debugfs directory [ 1013.974560][T14026] hsr_slave_0: entered promiscuous mode [ 1013.981665][T14026] hsr_slave_1: entered promiscuous mode [ 1013.988086][T14026] debugfs: 'hsr0' already exists in 'hsr' [ 1013.993799][T14026] Cannot create hsr debugfs directory [ 1014.117500][T14047] Bluetooth: hci15: command tx timeout [ 1014.126879][T14047] Bluetooth: hci16: command tx timeout [ 1015.156424][T14047] Bluetooth: hci17: command tx timeout [ 1015.236518][T14047] Bluetooth: hci18: command tx timeout [ 1015.484569][T14047] Bluetooth: hci9: command 0x0406 tx timeout [ 1015.491010][T14047] Bluetooth: hci5: command 0x0406 tx timeout [ 1015.493745][T14046] Bluetooth: hci8: command 0x0406 tx timeout [ 1015.497560][T14047] Bluetooth: hci7: command 0x0406 tx timeout [ 1015.503171][T14048] Bluetooth: hci6: command 0x0406 tx timeout [ 1015.726326][T13918] Bluetooth: hci19: command tx timeout [ 1015.957239][ T56] block nbd12: Possible stuck request ffff888024e68000: control (read@0,1024B). Runtime 180 seconds [ 1015.968343][ T56] block nbd12: Possible stuck request ffff888024e68200: control (read@1024,1024B). Runtime 180 seconds [ 1015.979616][ T56] block nbd12: Possible stuck request ffff888024e68400: control (read@2048,1024B). Runtime 180 seconds [ 1015.991089][ T56] block nbd12: Possible stuck request ffff888024e68600: control (read@3072,1024B). Runtime 180 seconds [ 1016.196547][T13918] Bluetooth: hci16: command tx timeout [ 1016.196557][T13921] Bluetooth: hci15: command tx timeout [ 1017.246698][ T56] block nbd7: Possible stuck request ffff888024c98000: control (read@0,1024B). Runtime 240 seconds [ 1017.256105][T13921] Bluetooth: hci17: command tx timeout [ 1017.257550][ T56] block nbd7: Possible stuck request ffff888024c98200: control (read@1024,1024B). Runtime 240 seconds [ 1017.263080][ T11] block nbd13: Possible stuck request ffff888024ee0000: control (read@0,1024B). Runtime 180 seconds [ 1017.285742][ T11] block nbd13: Possible stuck request ffff888024ee0200: control (read@1024,1024B). Runtime 180 seconds [ 1017.296814][ T11] block nbd13: Possible stuck request ffff888024ee0400: control (read@2048,1024B). Runtime 180 seconds [ 1017.307986][ T11] block nbd13: Possible stuck request ffff888024ee0600: control (read@3072,1024B). Runtime 180 seconds [ 1017.319566][T13921] Bluetooth: hci18: command tx timeout [ 1017.325210][ T56] block nbd7: Possible stuck request ffff888024c98400: control (read@2048,1024B). Runtime 240 seconds [ 1017.336735][ T56] block nbd7: Possible stuck request ffff888024c98600: control (read@3072,1024B). Runtime 240 seconds [ 1017.796200][T13921] Bluetooth: hci19: command tx timeout [ 1018.276425][T13921] Bluetooth: hci16: command tx timeout [ 1018.286194][T13921] Bluetooth: hci15: command tx timeout [ 1018.536375][ T5198] udevd[5198]: worker [9966] /devices/virtual/block/nbd12 timeout; kill it [ 1018.545081][ T5198] udevd[5198]: seq 29923 '/devices/virtual/block/nbd12' killed [ 1018.552901][ T5198] udevd[5198]: worker [10132] /devices/virtual/block/nbd13 timeout; kill it [ 1018.561917][ T5198] udevd[5198]: seq 29967 '/devices/virtual/block/nbd13' killed [ 1019.326289][T13921] Bluetooth: hci17: command tx timeout [ 1019.396483][T13921] Bluetooth: hci18: command tx timeout [ 1019.876382][T13921] Bluetooth: hci19: command tx timeout [ 1021.077124][ T56] block nbd5: Possible stuck request ffff888024c28000: control (read@0,1024B). Runtime 300 seconds [ 1021.087981][ T56] block nbd5: Possible stuck request ffff888024c28200: control (read@1024,1024B). Runtime 300 seconds [ 1021.099177][ T56] block nbd5: Possible stuck request ffff888024c28400: control (read@2048,1024B). Runtime 300 seconds [ 1021.110476][ T56] block nbd5: Possible stuck request ffff888024c28600: control (read@3072,1024B). Runtime 300 seconds [ 1021.726185][ T11] block nbd11: Possible stuck request ffff888024e08000: control (read@0,1024B). Runtime 210 seconds [ 1021.737360][ T11] block nbd11: Possible stuck request ffff888024e08200: control (read@1024,1024B). Runtime 210 seconds [ 1021.748774][ T11] block nbd11: Possible stuck request ffff888024e08400: control (read@2048,1024B). Runtime 210 seconds [ 1021.760056][ T11] block nbd11: Possible stuck request ffff888024e08600: control (read@3072,1024B). Runtime 210 seconds [ 1022.366510][ T25] block nbd8: Possible stuck request ffff888024d48000: control (read@0,1024B). Runtime 240 seconds [ 1022.377418][ T56] block nbd9: Possible stuck request ffff888024d98000: control (read@0,1024B). Runtime 240 seconds [ 1022.388251][ T56] block nbd9: Possible stuck request ffff888024d98200: control (read@1024,1024B). Runtime 240 seconds [ 1022.399461][ T25] block nbd8: Possible stuck request ffff888024d48200: control (read@1024,1024B). Runtime 240 seconds [ 1022.410582][ T56] block nbd9: Possible stuck request ffff888024d98400: control (read@2048,1024B). Runtime 240 seconds [ 1022.421590][ T25] block nbd8: Possible stuck request ffff888024d48400: control (read@2048,1024B). Runtime 240 seconds [ 1022.432791][ T25] block nbd8: Possible stuck request ffff888024d48600: control (read@3072,1024B). Runtime 240 seconds [ 1022.447779][ T56] block nbd9: Possible stuck request ffff888024d98600: control (read@3072,1024B). Runtime 240 seconds [ 1028.756459][ T31] INFO: task syz.0.16353:13882 blocked for more than 143 seconds. [ 1028.764344][ T31] Not tainted syzkaller #0 [ 1028.769444][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1028.778288][ T31] task:syz.0.16353 state:D stack:26040 pid:13882 tgid:13879 ppid:5906 task_flags:0x480140 flags:0x00080002 [ 1028.790343][ T31] Call Trace: [ 1028.793617][ T31] [ 1028.796693][ T31] __schedule+0x149b/0x4fd0 [ 1028.801190][ T31] ? __lock_acquire+0x6b6/0x2cf0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1028.806177][ T31] ? __pfx___schedule+0x10/0x10 [ 1028.811182][ T31] ? schedule+0x91/0x360 [ 1028.815443][ T31] schedule+0x165/0x360 [ 1028.820132][ T31] blk_mq_freeze_queue_wait+0xf1/0x170 [ 1028.825615][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 1028.832005][ T31] ? queue_limits_commit_update_frozen+0x56/0xd0 [ 1028.866219][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1028.872369][ T31] queue_limits_commit_update_frozen+0x56/0xd0 [ 1028.897625][ T31] nbd_set_size+0x47e/0x6a0 [ 1028.902190][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 1028.907637][ T31] ? nla_memcpy+0x5b/0xc0 [ 1028.912010][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 1028.917441][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 1028.922933][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 1028.929090][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1028.933784][ T31] ? security_capable+0x7e/0x2e0 [ 1028.939093][ T31] ? radix_tree_lookup+0x240/0x290 [ 1028.944218][ T31] nbd_genl_reconfigure+0x414/0x1a50 [ 1028.950070][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1028.955823][ T31] ? rcu_is_watching+0x15/0xb0 [ 1028.960777][ T31] ? __nla_parse+0x40/0x60 [ 1028.965223][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1028.971742][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 1028.977549][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1028.983629][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1028.988649][ T31] genl_rcv_msg+0x60e/0x790 [ 1028.993141][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1028.998933][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1029.004679][ T31] netlink_rcv_skb+0x208/0x470 [ 1029.009633][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1029.014672][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1029.020176][ T31] ? genl_rcv+0x19/0x40 [ 1029.024336][ T31] ? down_read+0x274/0x2e0 [ 1029.029012][ T31] ? genl_rcv+0xd/0x40 [ 1029.033077][ T31] genl_rcv+0x28/0x40 [ 1029.037204][ T31] netlink_unicast+0x82f/0x9e0 [ 1029.041958][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1029.047328][ T31] ? __alloc_skb+0x198/0x3a0 [ 1029.051926][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1029.057280][ T31] ? skb_put+0x11b/0x210 [ 1029.061516][ T31] netlink_sendmsg+0x805/0xb30 [ 1029.066345][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1029.071638][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1029.076850][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1029.082120][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1029.087551][ T31] __sock_sendmsg+0x21c/0x270 [ 1029.092220][ T31] ____sys_sendmsg+0x505/0x820 [ 1029.097178][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1029.102475][ T31] ? import_iovec+0x74/0xa0 [ 1029.107027][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 1029.111707][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1029.117175][ T31] ? futex_wake+0x4b2/0x560 [ 1029.121693][ T31] ? __fget_files+0x2a/0x420 [ 1029.126321][ T31] ? __fget_files+0x3a0/0x420 [ 1029.130992][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 1029.135961][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1029.141637][ T31] ? rcu_is_watching+0x15/0xb0 [ 1029.146583][ T31] do_syscall_64+0xec/0xf80 [ 1029.151077][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.158145][ T31] ? trace_irq_disable+0x37/0x100 [ 1029.163193][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1029.168120][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.174022][ T31] RIP: 0033:0x7f83bd78f749 [ 1029.178840][ T31] RSP: 002b:00007f83be5c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1029.187290][ T31] RAX: ffffffffffffffda RBX: 00007f83bd9e5fa0 RCX: 00007f83bd78f749 [ 1029.195255][ T31] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1029.203523][ T31] RBP: 00007f83bd813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1029.211716][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1029.219841][ T31] R13: 00007f83bd9e6038 R14: 00007f83bd9e5fa0 R15: 00007ffeb7fc4858 [ 1029.227854][ T31] [ 1029.230889][ T31] INFO: task syz.3.16357:13884 blocked for more than 143 seconds. [ 1029.239066][ T31] Not tainted syzkaller #0 [ 1029.243986][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1029.252765][ T31] task:syz.3.16357 state:D stack:28536 pid:13884 tgid:13883 ppid:5917 task_flags:0x400040 flags:0x00080002 [ 1029.264866][ T31] Call Trace: [ 1029.268397][ T31] [ 1029.271335][ T31] __schedule+0x149b/0x4fd0 [ 1029.275835][ T31] ? irqentry_exit+0x5dd/0x660 [ 1029.280829][ T31] ? __pfx___schedule+0x10/0x10 [ 1029.285678][ T31] ? schedule+0x91/0x360 [ 1029.289961][ T31] schedule+0x165/0x360 [ 1029.294105][ T31] schedule_preempt_disabled+0x13/0x30 [ 1029.299833][ T31] __mutex_lock+0x7e6/0x1350 [ 1029.304411][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1029.309199][ T31] ? genl_rcv_msg+0x10d/0x790 [ 1029.313857][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1029.319256][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1029.324218][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1029.329895][ T31] ? radix_tree_lookup+0x240/0x290 [ 1029.335018][ T31] genl_rcv_msg+0x10d/0x790 [ 1029.339656][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1029.344663][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1029.349643][ T31] netlink_rcv_skb+0x208/0x470 [ 1029.354391][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1029.359711][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1029.365001][ T31] ? genl_rcv+0x19/0x40 [ 1029.369190][ T31] ? down_read+0x274/0x2e0 [ 1029.373586][ T31] ? genl_rcv+0xd/0x40 [ 1029.377860][ T31] genl_rcv+0x28/0x40 [ 1029.381839][ T31] netlink_unicast+0x82f/0x9e0 [ 1029.386868][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1029.392138][ T31] ? __alloc_skb+0x198/0x3a0 [ 1029.397134][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1029.402080][ T31] ? skb_put+0x11b/0x210 [ 1029.406500][ T31] netlink_sendmsg+0x805/0xb30 [ 1029.411311][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1029.416884][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1029.421819][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1029.427181][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1029.432469][ T31] __sock_sendmsg+0x21c/0x270 [ 1029.437271][ T31] __sys_sendto+0x3bd/0x520 [ 1029.441765][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1029.447115][ T31] ? exc_page_fault+0x71/0xd0 [ 1029.451783][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 1029.457208][ T31] __x64_sys_sendto+0xde/0x100 [ 1029.461962][ T31] do_syscall_64+0xec/0xf80 [ 1029.466616][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.472692][ T31] ? trace_irq_disable+0x37/0x100 [ 1029.478443][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1029.483134][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.489046][ T31] RIP: 0033:0x7f7ff0b915dc [ 1029.493442][ T31] RSP: 002b:00007f7ff1b0bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1029.502071][ T31] RAX: ffffffffffffffda RBX: 00007f7ff1b0bfc0 RCX: 00007f7ff0b915dc [ 1029.510205][ T31] RDX: 0000000000000020 RSI: 00007f7ff1b0c010 RDI: 0000000000000005 [ 1029.518310][ T31] RBP: 0000000000000000 R08: 00007f7ff1b0bf14 R09: 000000000000000c [ 1029.526310][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 1029.534275][ T31] R13: 00007f7ff1b0bf68 R14: 00007f7ff1b0c010 R15: 0000000000000000 [ 1029.542564][ T31] [ 1029.545585][ T31] INFO: task syz.1.16359:13895 blocked for more than 144 seconds. [ 1029.553438][ T31] Not tainted syzkaller #0 [ 1029.558636][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1029.567484][ T31] task:syz.1.16359 state:D stack:26552 pid:13895 tgid:13893 ppid:5907 task_flags:0x400140 flags:0x00080002 [ 1029.579570][ T31] Call Trace: [ 1029.582838][ T31] [ 1029.585756][ T31] __schedule+0x149b/0x4fd0 [ 1029.590332][ T31] ? __pfx___schedule+0x10/0x10 [ 1029.595175][ T31] ? schedule+0x91/0x360 [ 1029.599763][ T31] schedule+0x165/0x360 [ 1029.603924][ T31] schedule_preempt_disabled+0x13/0x30 [ 1029.609495][ T31] __mutex_lock+0x7e6/0x1350 [ 1029.614072][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1029.619036][ T31] ? genl_rcv_msg+0x10d/0x790 [ 1029.623714][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1029.628897][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1029.633835][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1029.639858][ T31] ? radix_tree_lookup+0x240/0x290 [ 1029.644990][ T31] genl_rcv_msg+0x10d/0x790 [ 1029.649578][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1029.654585][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1029.659792][ T31] netlink_rcv_skb+0x208/0x470 [ 1029.664543][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1029.669595][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1029.674862][ T31] ? genl_rcv+0x19/0x40 [ 1029.679164][ T31] ? down_read+0x274/0x2e0 [ 1029.683566][ T31] ? genl_rcv+0xd/0x40 [ 1029.687874][ T31] genl_rcv+0x28/0x40 [ 1029.691847][ T31] netlink_unicast+0x82f/0x9e0 [ 1029.696936][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1029.702232][ T31] ? __alloc_skb+0x198/0x3a0 [ 1029.706852][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1029.711778][ T31] ? skb_put+0x11b/0x210 [ 1029.716000][ T31] netlink_sendmsg+0x805/0xb30 [ 1029.721142][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1029.726498][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1029.731443][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1029.736926][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1029.742224][ T31] __sock_sendmsg+0x21c/0x270 [ 1029.747892][ T31] __sys_sendto+0x3bd/0x520 [ 1029.752396][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1029.757456][ T31] ? exc_page_fault+0x71/0xd0 [ 1029.762117][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 1029.767578][ T31] __x64_sys_sendto+0xde/0x100 [ 1029.772342][ T31] do_syscall_64+0xec/0xf80 [ 1029.777207][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.783284][ T31] ? trace_irq_disable+0x37/0x100 [ 1029.788324][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1029.792986][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.799039][ T31] RIP: 0033:0x7f3fcf7915dc [ 1029.803441][ T31] RSP: 002b:00007f3fd06faec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1029.812240][ T31] RAX: ffffffffffffffda RBX: 00007f3fd06fafc0 RCX: 00007f3fcf7915dc [ 1029.820380][ T31] RDX: 0000000000000020 RSI: 00007f3fd06fb010 RDI: 0000000000000007 [ 1029.828404][ T31] RBP: 0000000000000000 R08: 00007f3fd06faf14 R09: 000000000000000c [ 1029.836659][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 1029.844640][ T31] R13: 00007f3fd06faf68 R14: 00007f3fd06fb010 R15: 0000000000000000 [ 1029.852656][ T31] [ 1029.855676][ T31] INFO: task syz.2.16361:13903 blocked for more than 144 seconds. [ 1029.863833][ T31] Not tainted syzkaller #0 [ 1029.869038][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1029.877920][ T31] task:syz.2.16361 state:D stack:24440 pid:13903 tgid:13902 ppid:5908 task_flags:0x400140 flags:0x00080002 [ 1029.889903][ T31] Call Trace: [ 1029.893186][ T31] [ 1029.896488][ T31] __schedule+0x149b/0x4fd0 [ 1029.901045][ T31] ? __pfx___schedule+0x10/0x10 [ 1029.905914][ T31] ? schedule+0x91/0x360 [ 1029.910193][ T31] schedule+0x165/0x360 [ 1029.914339][ T31] schedule_preempt_disabled+0x13/0x30 [ 1029.919996][ T31] __mutex_lock+0x7e6/0x1350 [ 1029.924598][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1029.929512][ T31] ? genl_rcv_msg+0x10d/0x790 [ 1029.934175][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1029.939275][ T31] ? radix_tree_lookup+0x240/0x290 [ 1029.944404][ T31] genl_rcv_msg+0x10d/0x790 [ 1029.948968][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1029.953987][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1029.959355][ T31] ? __asan_memcpy+0x40/0x70 [ 1029.963959][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1029.969366][ T31] netlink_rcv_skb+0x208/0x470 [ 1029.974118][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1029.979167][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1029.984434][ T31] ? genl_rcv+0x19/0x40 [ 1029.988956][ T31] ? down_read+0x274/0x2e0 [ 1029.993389][ T31] ? genl_rcv+0xd/0x40 [ 1029.997530][ T31] genl_rcv+0x28/0x40 [ 1030.001522][ T31] netlink_unicast+0x82f/0x9e0 [ 1030.006338][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1030.011649][ T31] ? __alloc_skb+0x198/0x3a0 [ 1030.016569][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1030.021518][ T31] ? skb_put+0x11b/0x210 [ 1030.025760][ T31] netlink_sendmsg+0x805/0xb30 [ 1030.030639][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1030.035920][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1030.042073][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1030.047662][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1030.052978][ T31] __sock_sendmsg+0x21c/0x270 [ 1030.057691][ T31] __sys_sendto+0x3bd/0x520 [ 1030.062193][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1030.067248][ T31] ? exc_page_fault+0x71/0xd0 [ 1030.071908][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 1030.077397][ T31] __x64_sys_sendto+0xde/0x100 [ 1030.082168][ T31] do_syscall_64+0xec/0xf80 [ 1030.086763][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.092815][ T31] ? trace_irq_disable+0x37/0x100 [ 1030.097863][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1030.102527][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.108562][ T31] RIP: 0033:0x7fe4b2f915dc [ 1030.112961][ T31] RSP: 002b:00007fe4b3d96ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1030.121500][ T31] RAX: ffffffffffffffda RBX: 00007fe4b3d96fc0 RCX: 00007fe4b2f915dc [ 1030.129551][ T31] RDX: 0000000000000024 RSI: 00007fe4b3d97010 RDI: 0000000000000008 [ 1030.137757][ T31] RBP: 0000000000000000 R08: 00007fe4b3d96f14 R09: 000000000000000c [ 1030.145733][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 1030.153805][ T31] R13: 00007fe4b3d96f68 R14: 00007fe4b3d97010 R15: 0000000000000000 [ 1030.161826][ T31] [ 1030.164871][ T31] INFO: task syz.2.16361:13904 blocked for more than 144 seconds. [ 1030.172861][ T31] Not tainted syzkaller #0 [ 1030.177816][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1030.186505][ T31] task:syz.2.16361 state:D stack:27608 pid:13904 tgid:13902 ppid:5908 task_flags:0x400140 flags:0x00080002 [ 1030.202206][ T31] Call Trace: [ 1030.205485][ T31] [ 1030.208451][ T31] __schedule+0x149b/0x4fd0 [ 1030.212963][ T31] ? __pfx___schedule+0x10/0x10 [ 1030.217949][ T31] ? schedule+0x91/0x360 [ 1030.222208][ T31] schedule+0x165/0x360 [ 1030.226533][ T31] schedule_preempt_disabled+0x13/0x30 [ 1030.231973][ T31] __mutex_lock+0x7e6/0x1350 [ 1030.236570][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1030.241322][ T31] ? genl_rcv_msg+0x10d/0x790 [ 1030.245980][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1030.251112][ T31] ? radix_tree_lookup+0x240/0x290 [ 1030.256516][ T31] genl_rcv_msg+0x10d/0x790 [ 1030.261023][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1030.266087][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1030.271058][ T31] ? __asan_memcpy+0x40/0x70 [ 1030.275626][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1030.281306][ T31] netlink_rcv_skb+0x208/0x470 [ 1030.286403][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1030.291437][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1030.296761][ T31] ? genl_rcv+0x19/0x40 [ 1030.300915][ T31] ? down_read+0x274/0x2e0 [ 1030.305316][ T31] ? genl_rcv+0xd/0x40 [ 1030.309416][ T31] genl_rcv+0x28/0x40 [ 1030.313384][ T31] netlink_unicast+0x82f/0x9e0 [ 1030.318294][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1030.323564][ T31] ? __alloc_skb+0x198/0x3a0 [ 1030.328169][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1030.333094][ T31] ? skb_put+0x11b/0x210 [ 1030.337337][ T31] netlink_sendmsg+0x805/0xb30 [ 1030.342095][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1030.347533][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1030.352461][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1030.357996][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1030.363298][ T31] __sock_sendmsg+0x21c/0x270 [ 1030.368007][ T31] __sys_sendto+0x3bd/0x520 [ 1030.372497][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1030.377689][ T31] ? exc_page_fault+0x71/0xd0 [ 1030.382353][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 1030.387654][ T31] __x64_sys_sendto+0xde/0x100 [ 1030.392409][ T31] do_syscall_64+0xec/0xf80 [ 1030.396937][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.403009][ T31] ? trace_irq_disable+0x37/0x100 [ 1030.408192][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1030.412857][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.418767][ T31] RIP: 0033:0x7fe4b2f915dc [ 1030.423163][ T31] RSP: 002b:00007fe4b3d75ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1030.431641][ T31] RAX: ffffffffffffffda RBX: 00007fe4b3d75fc0 RCX: 00007fe4b2f915dc [ 1030.440116][ T31] RDX: 0000000000000020 RSI: 00007fe4b3d76010 RDI: 0000000000000009 [ 1030.448145][ T31] RBP: 0000000000000000 R08: 00007fe4b3d75f14 R09: 000000000000000c [ 1030.456150][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 1030.464124][ T31] R13: 00007fe4b3d75f68 R14: 00007fe4b3d76010 R15: 0000000000000000 [ 1030.472324][ T31] [ 1030.475347][ T31] INFO: task syz.4.16362:13906 blocked for more than 145 seconds. [ 1030.483616][ T31] Not tainted syzkaller #0 [ 1030.488576][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1030.497381][ T31] task:syz.4.16362 state:D stack:26424 pid:13906 tgid:13905 ppid:5910 task_flags:0x400140 flags:0x00080002 [ 1030.509308][ T31] Call Trace: [ 1030.512574][ T31] [ 1030.515487][ T31] __schedule+0x149b/0x4fd0 [ 1030.520285][ T31] ? __pfx___schedule+0x10/0x10 [ 1030.525161][ T31] ? schedule+0x91/0x360 [ 1030.529558][ T31] schedule+0x165/0x360 [ 1030.533791][ T31] schedule_preempt_disabled+0x13/0x30 [ 1030.539333][ T31] __mutex_lock+0x7e6/0x1350 [ 1030.543930][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1030.548718][ T31] ? genl_rcv_msg+0x10d/0x790 [ 1030.553417][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1030.558699][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1030.563622][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1030.569011][ T31] ? radix_tree_lookup+0x240/0x290 [ 1030.574112][ T31] genl_rcv_msg+0x10d/0x790 [ 1030.578712][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1030.583854][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1030.589853][ T31] netlink_rcv_skb+0x208/0x470 [ 1030.594616][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1030.599879][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1030.605175][ T31] ? genl_rcv+0x19/0x40 [ 1030.609382][ T31] ? down_read+0x274/0x2e0 [ 1030.613821][ T31] ? genl_rcv+0xd/0x40 [ 1030.618051][ T31] genl_rcv+0x28/0x40 [ 1030.622022][ T31] netlink_unicast+0x82f/0x9e0 [ 1030.626822][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1030.632090][ T31] ? __alloc_skb+0x198/0x3a0 [ 1030.636723][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1030.641646][ T31] ? skb_put+0x11b/0x210 [ 1030.645878][ T31] netlink_sendmsg+0x805/0xb30 [ 1030.650791][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1030.656087][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1030.661029][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1030.666850][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1030.672120][ T31] __sock_sendmsg+0x21c/0x270 [ 1030.677287][ T31] __sys_sendto+0x3bd/0x520 [ 1030.681821][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1030.686974][ T31] ? exc_page_fault+0x71/0xd0 [ 1030.691641][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 1030.696991][ T31] __x64_sys_sendto+0xde/0x100 [ 1030.701854][ T31] do_syscall_64+0xec/0xf80 [ 1030.706624][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.712702][ T31] ? trace_irq_disable+0x37/0x100 [ 1030.717781][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1030.722453][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.728401][ T31] RIP: 0033:0x7fdf5c3915dc [ 1030.732821][ T31] RSP: 002b:00007fdf5d264ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1030.741391][ T31] RAX: ffffffffffffffda RBX: 00007fdf5d264fc0 RCX: 00007fdf5c3915dc [ 1030.749399][ T31] RDX: 0000000000000020 RSI: 00007fdf5d265010 RDI: 0000000000000009 [ 1030.757490][ T31] RBP: 0000000000000000 R08: 00007fdf5d264f14 R09: 000000000000000c [ 1030.765469][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 1030.773596][ T31] R13: 00007fdf5d264f68 R14: 00007fdf5d265010 R15: 0000000000000000 [ 1030.781602][ T31] [ 1030.784624][ T31] INFO: task syz.4.16362:13907 blocked for more than 145 seconds. [ 1030.792506][ T31] Not tainted syzkaller #0 [ 1030.797631][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1030.806331][ T31] task:syz.4.16362 state:D stack:27840 pid:13907 tgid:13905 ppid:5910 task_flags:0x400040 flags:0x00080002 [ 1030.818260][ T31] Call Trace: [ 1030.821523][ T31] [ 1030.824438][ T31] __schedule+0x149b/0x4fd0 [ 1030.829108][ T31] ? __pfx___schedule+0x10/0x10 [ 1030.834388][ T31] ? schedule+0x91/0x360 [ 1030.838999][ T31] schedule+0x165/0x360 [ 1030.843184][ T31] schedule_preempt_disabled+0x13/0x30 [ 1030.848714][ T31] __mutex_lock+0x7e6/0x1350 [ 1030.853314][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1030.858238][ T31] ? genl_rcv_msg+0x10d/0x790 [ 1030.862902][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1030.867943][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1030.872865][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1030.878255][ T31] ? radix_tree_lookup+0x240/0x290 [ 1030.883355][ T31] genl_rcv_msg+0x10d/0x790 [ 1030.888002][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1030.893005][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 1030.897981][ T31] netlink_rcv_skb+0x208/0x470 [ 1030.902739][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1030.907852][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1030.913149][ T31] ? genl_rcv+0x19/0x40 [ 1030.917472][ T31] ? down_read+0x274/0x2e0 [ 1030.921877][ T31] ? genl_rcv+0xd/0x40 [ 1030.925930][ T31] genl_rcv+0x28/0x40 [ 1030.929929][ T31] netlink_unicast+0x82f/0x9e0 [ 1030.934682][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1030.939982][ T31] ? __alloc_skb+0x198/0x3a0 [ 1030.944557][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1030.949626][ T31] ? skb_put+0x11b/0x210 [ 1030.953861][ T31] netlink_sendmsg+0x805/0xb30 [ 1030.958709][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1030.964011][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1030.969007][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1030.974280][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1030.979844][ T31] __sock_sendmsg+0x21c/0x270 [ 1030.984571][ T31] ____sys_sendmsg+0x505/0x820 [ 1030.989383][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1030.994668][ T31] ? import_iovec+0x74/0xa0 [ 1030.999254][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 1031.003923][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1031.009269][ T31] ? futex_wait+0x285/0x360 [ 1031.013776][ T31] ? __fget_files+0x2a/0x420 [ 1031.018444][ T31] ? __fget_files+0x3a0/0x420 [ 1031.023112][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 1031.028072][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1031.033531][ T31] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1031.039067][ T31] do_syscall_64+0xec/0xf80 [ 1031.043561][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.049657][ T31] ? trace_irq_disable+0x37/0x100 [ 1031.054679][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1031.059371][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.065248][ T31] RIP: 0033:0x7fdf5c38f749 [ 1031.069807][ T31] RSP: 002b:00007fdf5d245038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1031.078725][ T31] RAX: ffffffffffffffda RBX: 00007fdf5c5e6090 RCX: 00007fdf5c38f749 [ 1031.086754][ T31] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 000000000000000a [ 1031.094752][ T31] RBP: 00007fdf5c413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1031.103005][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1031.111027][ T31] R13: 00007fdf5c5e6128 R14: 00007fdf5c5e6090 R15: 00007ffe9aa4da08 [ 1031.119105][ T31] [ 1031.122184][ T31] [ 1031.122184][ T31] Showing all locks held in the system: [ 1031.130168][ T31] 1 lock held by khungtaskd/31: [ 1031.135004][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1031.144917][ T31] 2 locks held by getty/5584: [ 1031.149662][ T31] #0: ffff8880344720a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1031.159566][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 1031.169696][ T31] 1 lock held by udevd/3736: [ 1031.174265][ T31] #0: ffff8880249a5358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1031.183509][ T31] 1 lock held by udevd/3926: [ 1031.188261][ T31] #0: ffff8881423c4358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1031.197516][ T31] 1 lock held by udevd/4437: [ 1031.202085][ T31] #0: ffff8880249a1358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1031.211375][ T31] 1 lock held by udevd/5085: [ 1031.215958][ T31] #0: ffff888142761358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1031.225335][ T31] 1 lock held by udevd/6385: [ 1031.229936][ T31] #0: ffff888024b65358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1031.244427][ T31] 1 lock held by udevd/7978: [ 1031.249205][ T31] #0: ffff888024b63358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1031.258468][ T31] 1 lock held by udevd/8225: [ 1031.263036][ T31] #0: ffff8881427d1358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1031.272273][ T31] 1 lock held by udevd/8394: [ 1031.277009][ T31] #0: ffff888142779358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1031.286264][ T31] 1 lock held by udevd/9751: [ 1031.290849][ T31] #0: ffff88814277b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1031.300099][ T31] 1 lock held by udevd/9966: [ 1031.304710][ T31] #0: ffff88814277d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1031.314087][ T31] 1 lock held by udevd/10132: [ 1031.318949][ T31] #0: ffff88814277f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1031.328253][ T31] 1 lock held by udevd/11600: [ 1031.332910][ T31] #0: ffff888024e41358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1031.342271][ T31] 6 locks held by syz.0.16353/13882: [ 1031.347679][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1031.355864][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1031.364878][ T31] #2: ffff8880249a9a78 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x375/0x1a50 [ 1031.375418][ T31] #3: ffff888142395300 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 1031.384821][ T31] #4: ffff888142394ca0 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x56/0xd0 [ 1031.397213][ T31] #5: ffff888142394cd8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x56/0xd0 [ 1031.409564][ T31] 2 locks held by syz.3.16357/13884: [ 1031.414827][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1031.423029][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1031.432136][ T31] 2 locks held by syz.1.16359/13895: [ 1031.437628][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1031.445799][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1031.454764][ T31] 2 locks held by syz.2.16361/13903: [ 1031.460277][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1031.468532][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1031.477569][ T31] 2 locks held by syz.2.16361/13904: [ 1031.482852][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1031.491165][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1031.500163][ T31] 2 locks held by syz.4.16362/13906: [ 1031.505427][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1031.513633][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1031.522755][ T31] 2 locks held by syz.4.16362/13907: [ 1031.528061][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1031.536357][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1031.545336][ T31] 2 locks held by syz-executor/13912: [ 1031.550870][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1031.559130][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1031.568171][ T31] 2 locks held by syz-executor/13915: [ 1031.573522][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1031.582014][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1031.591036][ T31] 2 locks held by syz-executor/13916: [ 1031.596457][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1031.604672][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1031.613794][ T31] 2 locks held by syz-executor/13919: [ 1031.619184][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1031.627375][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1031.636649][ T31] 2 locks held by syz-executor/13933: [ 1031.642016][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1031.650216][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1031.659204][ T31] 2 locks held by syz-executor/13960: [ 1031.664552][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1031.672882][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1031.681920][ T31] 2 locks held by syz-executor/13962: [ 1031.687312][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1031.695477][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1031.704592][ T31] 2 locks held by syz-executor/13964: [ 1031.710015][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1031.718450][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1031.727600][ T31] 2 locks held by syz-executor/13966: [ 1031.732956][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1031.741144][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1031.750131][ T31] 2 locks held by syz-executor/13979: [ 1031.755479][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1031.763804][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1031.772795][ T31] 2 locks held by syz-executor/14003: [ 1031.778179][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1031.786718][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1031.795664][ T31] 2 locks held by syz-executor/14004: [ 1031.801198][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1031.809442][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1031.818566][ T31] 2 locks held by syz-executor/14021: [ 1031.823917][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1031.832125][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1031.841132][ T31] 2 locks held by syz-executor/14023: [ 1031.846692][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1031.854859][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1031.863848][ T31] 2 locks held by syz-executor/14026: [ 1031.869257][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1031.877825][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1031.886867][ T31] [ 1031.889185][ T31] ============================================= [ 1031.889185][ T31] [ 1031.897737][ T31] NMI backtrace for cpu 0 [ 1031.897750][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1031.897763][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1031.897770][ T31] Call Trace: [ 1031.897774][ T31] [ 1031.897780][ T31] dump_stack_lvl+0xe8/0x150 [ 1031.897798][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1031.897813][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1031.897831][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1031.897851][ T31] sys_info+0x135/0x170 [ 1031.897863][ T31] watchdog+0xf95/0xfe0 [ 1031.897880][ T31] ? watchdog+0x20a/0xfe0 [ 1031.897898][ T31] kthread+0x711/0x8a0 [ 1031.897914][ T31] ? __pfx_watchdog+0x10/0x10 [ 1031.897928][ T31] ? __pfx_kthread+0x10/0x10 [ 1031.897942][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1031.897958][ T31] ? __pfx_kthread+0x10/0x10 [ 1031.897972][ T31] ret_from_fork+0x510/0xa50 [ 1031.897983][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1031.897993][ T31] ? __switch_to+0xc9e/0x1480 [ 1031.898010][ T31] ? __pfx_kthread+0x10/0x10 [ 1031.898023][ T31] ret_from_fork_asm+0x1a/0x30 [ 1031.898045][ T31] [ 1031.898049][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1032.018001][ C1] NMI backtrace for cpu 1 [ 1032.018019][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1032.018038][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1032.018049][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1032.018071][ C1] Code: 13 e3 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 c1 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1032.018087][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 000002c2 [ 1032.018103][ C1] RAX: 0000000000325697 RBX: ffffffff819713ee RCX: 0000000080000001 [ 1032.018116][ C1] RDX: 0000000000000001 RSI: ffffffff8d792037 RDI: ffffffff8bc083e0 [ 1032.018128][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 1032.018142][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f822270 [ 1032.018156][ C1] R13: 1ffff110038d4b70 R14: 0000000000000001 R15: 0000000000000001 [ 1032.018168][ C1] FS: 0000000000000000(0000) GS:ffff888125f21000(0000) knlGS:0000000000000000 [ 1032.018182][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1032.018194][ C1] CR2: 0000562bf7854f40 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 1032.018211][ C1] Call Trace: [ 1032.018218][ C1] [ 1032.018225][ C1] default_idle+0x13/0x20 [ 1032.018244][ C1] default_idle_call+0x73/0xb0 [ 1032.018265][ C1] do_idle+0x1be/0x4d0 [ 1032.018283][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 1032.018303][ C1] ? __pfx_do_idle+0x10/0x10 [ 1032.018327][ C1] cpu_startup_entry+0x44/0x60 [ 1032.018345][ C1] start_secondary+0x101/0x110 [ 1032.018370][ C1] common_startup_64+0x13e/0x147 [ 1032.018400][ C1] [ 1032.185287][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1032.192116][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1032.201208][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1032.211248][ T31] Call Trace: [ 1032.214520][ T31] [ 1032.217435][ T31] vpanic+0x1e0/0x670 [ 1032.221403][ T31] panic+0xb9/0xc0 [ 1032.225103][ T31] ? __pfx_panic+0x10/0x10 [ 1032.229501][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1032.234857][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1032.241004][ T31] watchdog+0xfdf/0xfe0 [ 1032.245166][ T31] ? watchdog+0x20a/0xfe0 [ 1032.249498][ T31] kthread+0x711/0x8a0 [ 1032.253570][ T31] ? __pfx_watchdog+0x10/0x10 [ 1032.258329][ T31] ? __pfx_kthread+0x10/0x10 [ 1032.262921][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1032.268121][ T31] ? __pfx_kthread+0x10/0x10 [ 1032.272706][ T31] ret_from_fork+0x510/0xa50 [ 1032.277295][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1032.282405][ T31] ? __switch_to+0xc9e/0x1480 [ 1032.287085][ T31] ? __pfx_kthread+0x10/0x10 [ 1032.291673][ T31] ret_from_fork_asm+0x1a/0x30 [ 1032.296449][ T31] [ 1032.299849][ T31] Kernel Offset: disabled [ 1032.304162][ T31] Rebooting in 86400 seconds..