last executing test programs: 3m30.643930679s ago: executing program 3 (id=2044): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x300000e, 0x2172, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfe1f, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) 3m29.680475653s ago: executing program 3 (id=2054): ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000080), 0x0}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mlock(&(0x7f00001f7000/0x1000)=nil, 0x1000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x800, 0x12) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)='./file0\x00', 0x8, 0x1) syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) poll(0x0, 0x0, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) 3m28.648026038s ago: executing program 3 (id=2060): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986"], 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m28.595312213s ago: executing program 3 (id=2062): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x1410, 0x10100, 0x3, 0x1, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x54, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3m28.211616608s ago: executing program 3 (id=2065): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20048800}, 0x4040901) io_setup(0xff, &(0x7f0000000380)=0x0) r3 = dup2(r1, r1) write(r3, &(0x7f0000000100)="ce6c90b6eeab968d8872147101", 0xd) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) 3m28.042328416s ago: executing program 3 (id=2067): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x7fffffe, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fefbffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcefffff0000000000000000049edff7c3fc4db0000000000000000000000000000000000000000000000000000000006350b3ad568a554c"]}, 0x108) 3m12.991718477s ago: executing program 32 (id=2067): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x7fffffe, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fefbffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcefffff0000000000000000049edff7c3fc4db0000000000000000000000000000000000000000000000000000000006350b3ad568a554c"]}, 0x108) 25.078610683s ago: executing program 4 (id=3212): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000", @ANYRES64=r0], 0x10) 24.890657681s ago: executing program 4 (id=3214): connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x80e0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r2, 0x0, 0x1000efffffff000) 24.22527028s ago: executing program 4 (id=3220): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpgid(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_io_uring_setup(0x838, &(0x7f00000000c0)={0x0, 0x1998, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x39a904175f124fbf}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 23.406852771s ago: executing program 1 (id=3226): socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x95, 0x7f, 0xffffffff, 0xfff, 0x1, 0xf, 0x1, 0x4, 0xfffffffffffffffd, 0x61, 0xfff, 0x100000001, 0xfffffffffffffffa, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0x4, 0x6, 0xff, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0x8, 0x8, 0x0, 0x8, 0x401, 0x3, 0xc1bd, 0xffffffff, 0x8000000000000001, 0x800003, 0x0, 0x7, 0x72, 0x9, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e692ff, 0x5, 0x2, 0x5, 0x2, 0x1, 0x9, 0x7, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x7ffe, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0x8, 0x1, 0xb, 0x1, 0xffff, 0x1, 0xcc, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x3, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0x9, 0x5, 0x40, 0x52a7, 0x83d0, 0xf0, 0x100000000, 0x140000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000080)={0x1, 0x0, 0x1fc, 0x1001, 0x2, 0x800008, 0x0, 0x4, 0x4000}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7a, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') name_to_handle_at(r5, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="1c00000081000000050000000000000000100000000000f378dc600000000000fcffff"], &(0x7f0000001500), 0x200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r7, 0x1, 0x4070bd2b, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x800}]}, 0x24}}, 0x18) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00"], 0x1c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f00000077c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002040)=""/4096, 0x1000}], 0x0, 0x0, 0xfffffe2a}}, {{0x0, 0x0, 0x0}}], 0x400000000000059, 0x2040, 0x0) 23.023968977s ago: executing program 4 (id=3227): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x30, r5, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r3], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 22.684356981s ago: executing program 4 (id=3229): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8404) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00', @broadcast}) recvmmsg(r3, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x1}], 0x1}, 0xe75}], 0x3aa0, 0x60002000, 0x0) 22.580473863s ago: executing program 0 (id=3230): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)={0x8e8, 0x12, 0x10, 0x70bd29, 0x25dfdbfe, {0x2, 0x40, 0xba, 0xfb, {0x4e23, 0x4e21, [0x5, 0x8, 0x23, 0x80000000], [0x8, 0x6, 0x0, 0x3], 0x0, [0xff, 0x4]}, 0xd3bb, 0x7}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "8bc09c5ae8a4d6adf8"}, @INET_DIAG_REQ_BYTECODE={0x6, 0x1, '{y'}, @INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "319bdba6eb2c4c267f7fff2c63510aae4934b6d0b951a1360d2e6561b6c6b260192f11dc701ea1cce1d93e2fe75b20d3966f1f5f9fb5bc38edf0b21e9a9e16fe26ab77f631774110b8827e6692df7a95d2063444dce3976a4656ae54bc98ca417ff9e7e314a617c0e370566f222d503740bfe70c69c56beb7c52e271c2a38b3e61b2f5f553ee25159bff838a26c81788620287b511aced8abd6a840167"}, @INET_DIAG_REQ_BYTECODE={0xe9, 0x1, "c6ab6e78ffc6c4bb87f0a7ac56e9a2177734bbe6b2694164e0143803fcf67784d9c4387943139edb100a652515984ebc2b1574eee028cb0feec2773163800a6775a194319bd7208255ee2f487915cf0d881932a7b41800f8c2c205df57d0570629cfaf0c8b89e8c61b1cc852b33285c3f4644d8ca963e1c92452ad6f61e3f471ed72fa2a769275a66221fc4a341086f7bea13e1dc4cd9324408430a96aad7183f3422f2c43a0b5d9dde74794fb6d250e9254131fa49cd3af5e805756d8c174af2372ae6f387006897a1dbaebf54d94ff24de387408626a6275adf7ce4faf062e0637a7d8b6"}, @INET_DIAG_REQ_BYTECODE={0x6f1, 0x1, "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"}]}, 0x8e8}, 0x1, 0x0, 0x0, 0x1}, 0x40) 22.15844719s ago: executing program 1 (id=3232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 21.943166249s ago: executing program 0 (id=3235): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c0000"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b00010062726964676500"], 0x6c}}, 0x40000) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 21.755892053s ago: executing program 0 (id=3236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 21.708864294s ago: executing program 2 (id=3237): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpgid(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_io_uring_setup(0x838, &(0x7f00000000c0)={0x0, 0x1998, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x39a904175f124fbf}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 21.632422408s ago: executing program 1 (id=3238): syz_open_dev$sg(0x0, 0x7, 0x204c01) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xb) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) accept4(r0, 0x0, 0x0, 0x800) 21.474512105s ago: executing program 0 (id=3239): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 21.360092665s ago: executing program 0 (id=3240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 21.258966334s ago: executing program 0 (id=3242): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000007000000000000003400", @ANYRES32=r0], 0x98}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4000) 20.896039534s ago: executing program 4 (id=3243): socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x95, 0x7f, 0xffffffff, 0xfff, 0x1, 0xf, 0x1, 0x4, 0xfffffffffffffffd, 0x61, 0xfff, 0x100000001, 0xfffffffffffffffa, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0x4, 0x6, 0xff, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0x8, 0x8, 0x0, 0x8, 0x401, 0x3, 0xc1bd, 0xffffffff, 0x8000000000000001, 0x800003, 0x0, 0x7, 0x72, 0x9, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e692ff, 0x5, 0x2, 0x5, 0x2, 0x1, 0x9, 0x7, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x7ffe, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0x8, 0x1, 0xb, 0x1, 0xffff, 0x1, 0xcc, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x3, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0x9, 0x5, 0x40, 0x52a7, 0x83d0, 0xf0, 0x100000000, 0x140000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000080)={0x1, 0x0, 0x1fc, 0x1001, 0x2, 0x800008, 0x0, 0x4, 0x4000}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7a, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') name_to_handle_at(r5, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="1c00000081000000050000000000000000100000000000f378dc600000000000fcffff"], &(0x7f0000001500), 0x200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r7, 0x1, 0x4070bd2b, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x800}]}, 0x24}}, 0x18) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00"], 0x1c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f00000077c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002040)=""/4096, 0x1000}], 0x0, 0x0, 0xfffffe2a}}, {{0x0, 0x0, 0x0}}], 0x400000000000059, 0x2040, 0x0) 20.862100054s ago: executing program 1 (id=3244): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x400, 0x33}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffdfdfc, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xb, 0x8}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x2, 0x1, 0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 20.481522962s ago: executing program 2 (id=3245): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)={0x8e8, 0x12, 0x10, 0x70bd29, 0x25dfdbfe, {0x2, 0x40, 0xba, 0xfb, {0x4e23, 0x4e21, [0x5, 0x8, 0x23, 0x80000000], [0x8, 0x6, 0x0, 0x3], 0x0, [0xff, 0x4]}, 0xd3bb, 0x7}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "8bc09c5ae8a4d6adf8"}, @INET_DIAG_REQ_BYTECODE={0x6, 0x1, '{y'}, @INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "319bdba6eb2c4c267f7fff2c63510aae4934b6d0b951a1360d2e6561b6c6b260192f11dc701ea1cce1d93e2fe75b20d3966f1f5f9fb5bc38edf0b21e9a9e16fe26ab77f631774110b8827e6692df7a95d2063444dce3976a4656ae54bc98ca417ff9e7e314a617c0e370566f222d503740bfe70c69c56beb7c52e271c2a38b3e61b2f5f553ee25159bff838a26c81788620287b511aced8abd6a840167"}, @INET_DIAG_REQ_BYTECODE={0xe9, 0x1, "c6ab6e78ffc6c4bb87f0a7ac56e9a2177734bbe6b2694164e0143803fcf67784d9c4387943139edb100a652515984ebc2b1574eee028cb0feec2773163800a6775a194319bd7208255ee2f487915cf0d881932a7b41800f8c2c205df57d0570629cfaf0c8b89e8c61b1cc852b33285c3f4644d8ca963e1c92452ad6f61e3f471ed72fa2a769275a66221fc4a341086f7bea13e1dc4cd9324408430a96aad7183f3422f2c43a0b5d9dde74794fb6d250e9254131fa49cd3af5e805756d8c174af2372ae6f387006897a1dbaebf54d94ff24de387408626a6275adf7ce4faf062e0637a7d8b6"}, @INET_DIAG_REQ_BYTECODE={0x6f1, 0x1, "b6abf21f01782d2a99a72fd97561e51ecb4b268eb5a7617de45d6a13c2ef761d00068c588091bf1e418318c17550d365d19f92a10fed6d1b67910f1f706d84fd9eb27a760215594b2a0a7f320f4734aba9d61d872f674dc46189c38b8f904a4489faea7dc95a185df5c7e35f7e3dd2d9fdc71fc8c14ec51ccb7da8da011be14e0f49ff35e30aecda52f668412d9ccdca6297bfcb1b53a2977d2950d3bc8d5ef0b6a47c54a76bc7303924b1aacbb27810bc6fc592827e3d980668a3411cf42cc61bac0e469cf6bda94a73a3811d32867930d713103ade7b929fa4c83701682fa08a8e922d01c5a9bb9e9dd1bd502c7dd31b0729041dc6aa1a4e479151bd96818e3d6e0fa6e3c37095c868194e2029a3020f2ea224964388e6ac180ec1b8eff7b724009003724c11a8d392b126ab8c31f616e7eaa0ff9851a38f98f33aeec5881425b8abfc667bd9ea6d4902d2c3fbace6af93a7ce65282af54bae94a6fb26cf96ae318b2e341df20a2ee68a2a7a0f1e593328e1b12938d21724b9826b4f25e928c3a0df97fc7c3577850de289ef391fdd4487ced9fa1c8330eef0d1794c93c1e363b153ebe18f4182c048383f9533bfc270c10cf2f53b9d630859a60698fbfbf2258c7c4eacb526f1b00661650322d3839772b337154b0248323239be9de58439acb59a0874886a25f6806dec89aed890847f007fa0fbef1f4e134434df4c77b2e4a1fee7a55be36fe7e26bd2d6ee3feb3caef102e913efb4367e42f73668bd9e6f343c3478a9632d8280c76c421045cf7898afb37620bc4918da1b2b4365772744aae60e7f380d5a05f9fa68e8e693d7c32ce7b1340e538fe521cc15769f606392a2b2a9469353c49d7a870908e0449be2d4bf41d6959ad66798f94c1af12c1e5fc0816242e856149a3d7af8bb238bbbc75641ef846a979c08952c52f77437bd8fbffdd1ee5368ae3a6e23e0c1803f6bb9803883532e53a30b83d4c8d0e07849bd5b3fd54c0d99922becb924446bd4f8ba45543e9d71d1f26f59e16281e571e2cd97a897410126543f9b73665a6bb0e7d06c81b55b1620e74f46542a7ae89e8f3400d3a7eb682c294400bd10e7585c3421aa348166e2f4e9d78b2387c602b55a984af48ef9a7bc3a28d9ff5f2abce2ed7583457713f43b03d14ab7c9d571b0d05e0bc6b1781fdc5ae7ea976b58c139932e6eae04d52a525ba1964bb8fe6a74d145d3d3cb75a5a41cf7ff6fed3e19a26f9134c648edce7900dcab3c40f9ff97689b72d7318de83e6e6819bfa4d84ce743054a6080fb948be6ad8d7868be4437b1737252a86a5e5505e60a67ef4ea35ae650378d63f91949b35dce141e079117ed9c45af6da04539828996ae4ed7ee3aab729e0d680e1f25bd4bad57084a2e9397989adc51bbd2e857ff51e2d09ca1c2b5699c70a2b3c53214451115c0fa1c4f1398245762459d99e0308886ea5d3aaa0f5040f2c9e388cb3583ea07560be24a82c09ef8e0378cd4a5f039f127aa99864ccd4b810ad9fcf0ef6c61989d45aff58ea3108bb9ff7d1931843f374177ae0234505e8b66ad683f2b6e2c1e76b8d0741d342d55545fb99a393e0c6821a73d56b07f37d5bdde655ada9a3af7a555fcb811a4ce693ff150fcfb80a4187e503fcf10014a254d524a3256488445020a50732ceeec59e0b808ee90dfa7f6614f521bfade5b2487b6beed3a27b220de8fae06ed8902e1d4f64cdde62ee5d81cff4b2cf9c15c8685033b1ba11b83e3c83f040c9a6bf3014f506434bffac6a6132cd6e95beeda8961bb526ef1ec2ba4d944d35e5275676d5ff61b736c8269f2d64039870994d1a8ab919941a463045057cad683686b8f163fd77c1bf7213c0f4bc1e0da05c815dc9551097e43fed19b730c1b7b53e375e2c20cff51308be0c8f208f596c6fa24c5e6d01f656878d869b229163e3635240676cfd991832b2b3d05ce150595c769afbc3654a371c561942e235c98eefa74c5cf649b9f82b49a99226138e92d94e9457c332d54cd46376eeef0010f2d1cc7fc9e6d2ea41a41e0f09ec444e4a19a9cf02e0b0b6490272a60f5cbc32360ceb2269a2c5adae53a969f5ff8311e9822504bcea36f4cba916a25d11c97b4c76b998d146e41a984bbda28bc14274812e4cc74fce4dc4be14d722f645763875dce4082f4bf105854fc531bf37d9fbaae8a03ca66793fcfd03a9688f9675726244e433e49f0cb1bcb3b115228450481f50678f7245efc3a67a5784559795578739fa46697673a607d95e1a23814cfd1e5f0541896873e149741a1a0c20f58092feb52870a846aff95f0ffc2c7ecd4268f7727eee9ff9b0e146d328248e81998c634c049e6490af993abb6883ec8a9a9653a7c7e9fcb558b0ce34c37dfd157c78c3d20a344fa4d5fd80d7e79e59df236608ca72ea906ac5a12465f56a96e386118cef0f050e7a545a29d904b08332174a298a46f05ff8635751f323cf55bb043c2668b8f3d1f9f6bcc5eaae97610"}]}, 0x8e8}, 0x1, 0x0, 0x0, 0x1}, 0x40) 20.391281572s ago: executing program 2 (id=3246): r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80, 0x0}, 0x4000) 19.419395062s ago: executing program 1 (id=3248): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 19.22957929s ago: executing program 2 (id=3249): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x24, r5, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, 0x0, 0x80) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)="00400f558f53adb3", 0x8}], 0x1}, 0x4) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 19.17392735s ago: executing program 1 (id=3250): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 19.077632078s ago: executing program 2 (id=3252): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 18.97629117s ago: executing program 2 (id=3253): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x5) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 16.189078575s ago: executing program 5 (id=3259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x9, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x10}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xe8b, 0x93, 0x1, 0x3}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 16.132583152s ago: executing program 5 (id=3260): fsopen(&(0x7f0000000040)='gfs2meta\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x5) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8925, 0x0) 15.211036354s ago: executing program 5 (id=3261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 15.138802846s ago: executing program 5 (id=3262): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x24, r5, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, 0x0, 0x80) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)="00400f558f53adb3", 0x8}], 0x1}, 0x4) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 15.073481583s ago: executing program 5 (id=3263): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 15.033856132s ago: executing program 5 (id=3264): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) listen(r2, 0x3) listen(r2, 0x1) r3 = socket(0x840000000002, 0x3, 0xff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) sendmmsg$inet(r3, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x0, 0x1, 0x900, 0x0, 0xffffff80}}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40005}, 0x2004c000) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r7, 0x0, 0x44080) syz_80211_inject_frame(&(0x7f0000001f80)=@broadcast, &(0x7f0000001fc0)=@ctrl_frame=@ba={{}, {0xf}, @device_b, @device_a, @basic={{0x1, 0x0, 0x0, 0x0, 0x6}, {0x6, 0x1}, "89b3630fd2bead961be2761f5a56762f3e77cd8cac6fdc963ab4cd268ff65c42950fa7580a36581d0536609be6cdd5b5848eefc43a9b307032fa8480546ad2c157ca3940d9586bf5d49d6ce6f5404f6f10ed55359ff61e4b653a4541ec0d5563606e4536196bdd84661efd3905d57c7b6e2a4afa9dbc7a9efb358e7dea9711d4"}}, 0x94) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @broadcast}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r10}}], 0x20, 0x2400e044}, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r12, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 6.004777722s ago: executing program 33 (id=3242): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000007000000000000003400", @ANYRES32=r0], 0x98}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4000) 5.502320196s ago: executing program 34 (id=3243): socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x95, 0x7f, 0xffffffff, 0xfff, 0x1, 0xf, 0x1, 0x4, 0xfffffffffffffffd, 0x61, 0xfff, 0x100000001, 0xfffffffffffffffa, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0x4, 0x6, 0xff, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0x8, 0x8, 0x0, 0x8, 0x401, 0x3, 0xc1bd, 0xffffffff, 0x8000000000000001, 0x800003, 0x0, 0x7, 0x72, 0x9, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e692ff, 0x5, 0x2, 0x5, 0x2, 0x1, 0x9, 0x7, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x7ffe, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0x8, 0x1, 0xb, 0x1, 0xffff, 0x1, 0xcc, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x3, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0x9, 0x5, 0x40, 0x52a7, 0x83d0, 0xf0, 0x100000000, 0x140000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000080)={0x1, 0x0, 0x1fc, 0x1001, 0x2, 0x800008, 0x0, 0x4, 0x4000}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7a, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') name_to_handle_at(r5, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="1c00000081000000050000000000000000100000000000f378dc600000000000fcffff"], &(0x7f0000001500), 0x200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r7, 0x1, 0x4070bd2b, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x800}]}, 0x24}}, 0x18) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00"], 0x1c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f00000077c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002040)=""/4096, 0x1000}], 0x0, 0x0, 0xfffffe2a}}, {{0x0, 0x0, 0x0}}], 0x400000000000059, 0x2040, 0x0) 4.002560013s ago: executing program 35 (id=3250): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 3.984996092s ago: executing program 36 (id=3253): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x5) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 0s ago: executing program 37 (id=3264): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) listen(r2, 0x3) listen(r2, 0x1) r3 = socket(0x840000000002, 0x3, 0xff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) sendmmsg$inet(r3, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x0, 0x1, 0x900, 0x0, 0xffffff80}}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40005}, 0x2004c000) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r7, 0x0, 0x44080) syz_80211_inject_frame(&(0x7f0000001f80)=@broadcast, &(0x7f0000001fc0)=@ctrl_frame=@ba={{}, {0xf}, @device_b, @device_a, @basic={{0x1, 0x0, 0x0, 0x0, 0x6}, {0x6, 0x1}, "89b3630fd2bead961be2761f5a56762f3e77cd8cac6fdc963ab4cd268ff65c42950fa7580a36581d0536609be6cdd5b5848eefc43a9b307032fa8480546ad2c157ca3940d9586bf5d49d6ce6f5404f6f10ed55359ff61e4b653a4541ec0d5563606e4536196bdd84661efd3905d57c7b6e2a4afa9dbc7a9efb358e7dea9711d4"}}, 0x94) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @broadcast}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r10}}], 0x20, 0x2400e044}, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r12, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) kernel console output (not intermixed with test programs): gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13521 comm="syz.2.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043cb9acb9 code=0x7ffc0000 [ 431.677581][ T5830] usb 5-1: config 0 descriptor?? [ 431.704357][ T5830] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 431.742197][ T5824] Bluetooth: hci4: command 0x0406 tx timeout [ 431.775940][T13544] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.824775][T13552] netlink: 'syz.1.2417': attribute type 1 has an invalid length. [ 431.856944][T13552] bond4: entered promiscuous mode [ 431.869609][T13552] 8021q: adding VLAN 0 to HW filter on device bond4 [ 431.960846][T13544] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.984712][T13561] syz.2.2420(13561): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 432.040104][T13554] 8021q: adding VLAN 0 to HW filter on device bond4 [ 432.061049][T13567] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2422'. [ 432.075221][T13554] bond4: (slave wireguard2): The slave device specified does not support setting the MAC address [ 432.114046][T13554] bond4: (slave wireguard2): Error -95 calling set_mac_address [ 432.137762][T13552] bond4: entered allmulticast mode [ 432.216077][T13544] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.340657][T13544] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.500122][ T4362] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.558860][ T4362] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.589801][ T4362] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.619927][ T4362] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.636428][ T5940] IPVS: starting estimator thread 0... [ 432.731904][T13602] IPVS: using max 42 ests per chain, 100800 per kthread [ 432.777549][T13609] evm: overlay not supported [ 432.895721][T13618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2434'. [ 433.891701][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 434.265178][ T5830] usb 5-1: USB disconnect, device number 52 [ 434.827900][T13633] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.875968][T13633] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.973887][T13633] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.063162][T13633] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.622890][ T5188] udevd[5188]: worker [11854] /devices/virtual/block/nbd0 is taking a long time [ 437.632105][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 437.632119][ T30] audit: type=1400 audit(1768935673.071:863): avc: denied { mount } for pid=13651 comm="syz.1.2441" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 438.011550][T13668] fuse: Bad value for 'group_id' [ 438.023433][T13668] fuse: Bad value for 'group_id' [ 438.368409][ T51] Bluetooth: hci3: unexpected event for opcode 0x080b [ 438.984699][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2450'. [ 438.994037][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2450'. [ 439.504165][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.510426][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.523823][ T30] audit: type=1326 audit(1768935675.521:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13695 comm="syz.4.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2e79acb9 code=0x7ffc0000 [ 439.599238][ T30] audit: type=1326 audit(1768935675.541:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13695 comm="syz.4.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2e79acb9 code=0x7ffc0000 [ 439.625674][T13700] tipc: Enabling of bearer rejected, already enabled [ 439.663604][ T30] audit: type=1326 audit(1768935675.571:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13695 comm="syz.4.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c2e79acb9 code=0x7ffc0000 [ 439.698629][T13700] tipc: Enabling of bearer rejected, failed to enable media [ 439.739722][ T30] audit: type=1326 audit(1768935675.571:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13695 comm="syz.4.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2e79acb9 code=0x7ffc0000 [ 439.793244][ T30] audit: type=1326 audit(1768935675.571:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13695 comm="syz.4.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2e79acb9 code=0x7ffc0000 [ 439.827020][T13702] fuse: Bad value for 'group_id' [ 439.839274][T13702] fuse: Bad value for 'group_id' [ 439.860568][ T30] audit: type=1326 audit(1768935675.591:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13695 comm="syz.4.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c2e79c547 code=0x7ffc0000 [ 439.984013][ T30] audit: type=1326 audit(1768935675.591:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13695 comm="syz.4.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8c2e75b58e code=0x7ffc0000 [ 440.008460][ T6033] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.030615][ T6033] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.064424][ T6033] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.075214][ T6033] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.084458][ T30] audit: type=1326 audit(1768935675.591:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13695 comm="syz.4.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8c2e75b58e code=0x7ffc0000 [ 440.110965][ T30] audit: type=1326 audit(1768935675.591:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13695 comm="syz.4.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8c2e75b58e code=0x7ffc0000 [ 440.711686][ T5830] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 440.970735][ T5830] usb 6-1: unable to get BOS descriptor or descriptor too short [ 440.999299][ T5830] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 441.009256][ T5830] usb 6-1: can't read configurations, error -71 [ 441.150942][T13733] overlayfs: failed to clone upperpath [ 441.160984][T13733] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 441.169802][T13733] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 441.178957][T13733] overlayfs: missing 'lowerdir' [ 441.641352][ T11] block nbd0: Possible stuck request ffff888026550000: control (read@0,1024B). Runtime 90 seconds [ 441.662271][ T11] block nbd0: Possible stuck request ffff888026550200: control (read@1024,1024B). Runtime 90 seconds [ 441.703131][ T11] block nbd0: Possible stuck request ffff888026550400: control (read@2048,1024B). Runtime 90 seconds [ 441.714019][ T11] block nbd0: Possible stuck request ffff888026550600: control (read@3072,1024B). Runtime 90 seconds [ 441.903076][ T5945] hid-generic 0005:0002:5508.0009: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 441.993413][T13745] fido_id[13745]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci5/hci5:200/report_descriptor': No such file or directory [ 442.400237][ T51] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 442.409213][ T51] Bluetooth: hci3: Injecting HCI hardware error event [ 442.423380][ T51] Bluetooth: hci3: hardware error 0x00 [ 442.707125][T13765] fuse: Bad value for 'group_id' [ 442.713345][T13765] fuse: Bad value for 'group_id' [ 443.623042][T13772] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2482'. [ 443.653612][T13772] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2482'. [ 444.461726][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 445.069638][T13793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2491'. [ 445.202560][T13796] fuse: Bad value for 'fd' [ 445.817473][T13801] fuse: Bad value for 'group_id' [ 445.822677][T13801] fuse: Bad value for 'group_id' [ 446.821168][T13839] macvtap0: entered allmulticast mode [ 446.826719][T13839] veth0_macvtap: entered allmulticast mode [ 447.129177][T13850] fuse: Bad value for 'group_id' [ 447.140672][T13850] fuse: Bad value for 'group_id' [ 447.644163][T13859] fuse: Bad value for 'fd' [ 448.058266][T13863] overlayfs: failed to clone upperpath [ 448.338485][T13876] fuse: Unknown parameter 'grou00000000000000000000' [ 448.984220][T13886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2524'. [ 449.510171][T13905] fuse: Unknown parameter 'grou00000000000000000000' [ 449.753468][T13909] overlayfs: failed to clone lowerpath [ 449.832248][T13910] overlayfs: failed to clone lowerpath [ 450.899888][T13913] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2534'. [ 451.251577][T13924] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 451.264834][T13924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2538'. [ 451.430539][T13926] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2536'. [ 452.249943][T13925] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.520252][T13929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2538'. [ 452.533620][T13929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2538'. [ 452.599112][T13925] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.711974][T13929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2538'. [ 452.730566][T13929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2538'. [ 452.860075][T13929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2538'. [ 452.873258][T13929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2538'. [ 453.347669][T13944] fuse: Unknown parameter 'grou00000000000000000000' [ 453.360011][T13925] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.374071][T13929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2538'. [ 453.535039][T13925] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.642144][T13948] overlayfs: failed to clone lowerpath [ 453.716934][T13949] overlayfs: failed to clone lowerpath [ 454.766295][ T4536] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.774583][ T4536] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.783630][ T4536] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.792040][ T4536] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.464447][T13976] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.475970][T13976] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.597365][T13976] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.607848][T13976] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.688931][T13976] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.702587][T13976] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.928506][T13976] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.002099][T13983] overlayfs: failed to clone lowerpath [ 456.077210][T13984] overlayfs: failed to clone lowerpath [ 457.121382][T13976] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.377467][ T49] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.390052][ T49] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.431903][ T49] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.448018][ T49] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.489035][ T49] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.501735][ T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.532033][T13928] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 457.543609][ T49] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.557693][ T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.683372][T13928] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 457.722210][T13928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.741866][T13928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.763218][T13928] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 457.779200][T13928] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 457.793821][T13928] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 457.802708][T13928] usb 6-1: Manufacturer: syz [ 457.816844][T13928] usb 6-1: config 0 descriptor?? [ 458.248357][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 458.248372][ T30] audit: type=1400 audit(1768935694.181:901): avc: denied { create } for pid=14014 comm="syz.4.2569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 458.550150][ T30] audit: type=1400 audit(1768935694.181:902): avc: denied { ioctl } for pid=14014 comm="syz.4.2569" path="socket:[38430]" dev="sockfs" ino=38430 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 458.765238][T14025] bridge0: port 3(erspan0) entered blocking state [ 458.772664][T14025] bridge0: port 3(erspan0) entered disabled state [ 458.781175][T14025] erspan0: entered allmulticast mode [ 458.850755][ T30] audit: type=1400 audit(1768935694.421:903): avc: denied { create } for pid=14018 comm="syz.1.2570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 458.958896][T14025] erspan0: entered promiscuous mode [ 458.990138][T13928] usbhid 6-1:0.0: can't add hid device: -71 [ 458.999002][T13928] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 459.009208][T13928] usb 6-1: USB disconnect, device number 5 [ 459.087926][ T30] audit: type=1400 audit(1768935695.061:904): avc: denied { shutdown } for pid=14026 comm="syz.4.2571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 459.092801][T14030] erspan0: left allmulticast mode [ 459.200491][ T30] audit: type=1400 audit(1768935695.151:905): avc: denied { map } for pid=14026 comm="syz.4.2571" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 459.230835][ T30] audit: type=1400 audit(1768935695.151:906): avc: denied { execute } for pid=14026 comm="syz.4.2571" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 459.260560][T14030] erspan0: left promiscuous mode [ 459.269277][T14030] bridge0: port 3(erspan0) entered disabled state [ 459.341880][T14034] tipc: Started in network mode [ 459.354079][T14034] tipc: Node identity 7f000001, cluster identity 4711 [ 459.363745][T14034] tipc: Enabling of bearer rejected, failed to enable media [ 459.459553][T14034] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 459.490643][T14034] tipc: Enabled bearer , priority 10 [ 460.480457][T14061] ======================================================= [ 460.480457][T14061] WARNING: The mand mount option has been deprecated and [ 460.480457][T14061] and is ignored by this kernel. Remove the mand [ 460.480457][T14061] option from the mount to silence this warning. [ 460.480457][T14061] ======================================================= [ 460.659988][ T90] tipc: Node number set to 2130706433 [ 461.331381][T14085] fuse: Unknown parameter 'group_id00000000000000000000' [ 461.416111][T14090] __nla_validate_parse: 32 callbacks suppressed [ 461.416128][T14090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2595'. [ 461.511697][ T90] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 461.685368][ T90] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.701531][ T90] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 461.772328][T14101] 9p: Bad value for 'wfdno' [ 461.799062][ T90] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 461.843334][ T90] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.876018][ T90] usb 5-1: config 0 descriptor?? [ 461.898118][ T90] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 461.931470][ T90] dvb-usb: bulk message failed: -22 (3/0) [ 461.952644][ T90] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 461.984525][ T90] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 462.006701][ T90] usb 5-1: media controller created [ 462.023860][ T90] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 462.060246][ T90] dvb-usb: bulk message failed: -22 (6/0) [ 462.094429][ T90] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 462.129340][ T90] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 462.176599][ T90] dvb-usb: schedule remote query interval to 150 msecs. [ 462.183916][ T30] audit: type=1400 audit(1768935698.181:907): avc: denied { read } for pid=5173 comm="acpid" name="event4" dev="devtmpfs" ino=3042 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 462.216143][ T90] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 462.261804][ T90] usb 5-1: USB disconnect, device number 53 [ 462.275526][ T30] audit: type=1400 audit(1768935698.201:908): avc: denied { open } for pid=5173 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3042 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 462.389546][ T90] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 462.403956][ T30] audit: type=1400 audit(1768935698.201:909): avc: denied { ioctl } for pid=5173 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3042 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 462.479329][ T30] audit: type=1400 audit(1768935698.401:910): avc: denied { mount } for pid=14114 comm="syz.1.2602" name="/" dev="hugetlbfs" ino=39843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 462.874456][T14124] fuse: Unknown parameter 'group_id00000000000000000000' [ 463.126138][T14131] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.165335][T14135] overlayfs: failed to clone upperpath [ 463.603211][T14131] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.611728][ T30] audit: type=1804 audit(1768935699.211:911): pid=14136 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2608" name="/newroot/432/bus/bus" dev="overlay" ino=2255 res=1 errno=0 [ 463.691790][ T30] audit: type=1804 audit(1768935699.221:912): pid=14136 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.2608" name="/newroot/432/bus/bus" dev="overlay" ino=2255 res=1 errno=0 [ 463.765823][T14131] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.928230][T14131] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.244382][ T4536] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.267786][ T4536] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.326427][ T4536] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.353681][ T4536] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.687443][ T30] audit: type=1326 audit(1768935700.661:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14165 comm="syz.5.2623" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa0abf9acb9 code=0x0 [ 464.955890][ T30] audit: type=1400 audit(1768935700.741:914): avc: denied { read write } for pid=14165 comm="syz.5.2623" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 465.080739][ T30] audit: type=1400 audit(1768935700.741:915): avc: denied { open } for pid=14165 comm="syz.5.2623" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 468.570650][T14233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2643'. [ 469.096797][ T30] audit: type=1400 audit(1768935705.091:916): avc: denied { read } for pid=14260 comm="syz.5.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 469.946562][ T30] audit: type=1400 audit(1768935705.941:917): avc: denied { bind } for pid=14271 comm="syz.2.2656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 470.110916][T14288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2664'. [ 470.207740][T14292] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2660'. [ 470.233622][T14291] fuse: Bad value for 'fd' [ 471.851973][T14312] netlink: 'syz.5.2670': attribute type 6 has an invalid length. [ 471.859878][T14312] netlink: 'syz.5.2670': attribute type 7 has an invalid length. [ 471.905993][ T30] audit: type=1400 audit(1768935715.904:918): avc: denied { mount } for pid=14314 comm="syz.1.2671" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 471.906923][T14316] overlayfs: failed to clone lowerpath [ 471.934403][T14312] netlink: 'syz.5.2670': attribute type 8 has an invalid length. [ 472.020404][T14321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2673'. [ 472.193533][ T11] block nbd0: Possible stuck request ffff888026550000: control (read@0,1024B). Runtime 120 seconds [ 472.207935][ T11] block nbd0: Possible stuck request ffff888026550200: control (read@1024,1024B). Runtime 120 seconds [ 472.221161][ T11] block nbd0: Possible stuck request ffff888026550400: control (read@2048,1024B). Runtime 120 seconds [ 472.234064][ T11] block nbd0: Possible stuck request ffff888026550600: control (read@3072,1024B). Runtime 120 seconds [ 472.282025][T14333] overlayfs: failed to clone upperpath [ 474.037366][T14365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2688'. [ 474.844824][T14380] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2692'. [ 475.251286][T14397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2700'. [ 476.187539][T14411] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2705'. [ 476.426287][T14418] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2707'. [ 476.466257][T14418] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2707'. [ 476.814006][T14418] bond0: entered promiscuous mode [ 476.819063][T14418] bond_slave_0: entered promiscuous mode [ 476.852902][T14418] bond_slave_1: entered promiscuous mode [ 476.872100][T14418] gretap0: entered promiscuous mode [ 476.980018][T14427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2712'. [ 477.960990][T14448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2719'. [ 478.142617][T14456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2723'. [ 478.179255][T14458] team0: No ports can be present during mode change [ 478.807827][ T5894] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 478.951650][ T5894] usb 5-1: device descriptor read/64, error -71 [ 479.108823][T14479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2732'. [ 479.191989][ T5894] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 479.291163][T14490] fuse: Bad value for 'fd' [ 479.331658][ T5894] usb 5-1: device descriptor read/64, error -71 [ 479.349012][T14493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2737'. [ 479.359092][T14490] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2733'. [ 479.459776][ T5894] usb usb5-port1: attempt power cycle [ 479.812121][ T5894] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 479.842045][ T5894] usb 5-1: device descriptor read/8, error -71 [ 480.269870][ T5894] usb 5-1: new low-speed USB device number 57 using dummy_hcd [ 480.303742][ T5894] usb 5-1: device descriptor read/8, error -71 [ 480.411998][ T5894] usb usb5-port1: unable to enumerate USB device [ 480.722532][T14521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2747'. [ 482.090374][T14553] netlink: 'syz.4.2754': attribute type 29 has an invalid length. [ 482.105009][T14553] netlink: 'syz.4.2754': attribute type 29 has an invalid length. [ 482.136242][T14553] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2754'. [ 483.279587][T14567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2758'. [ 483.697407][T14577] mkiss: ax0: crc mode is auto. [ 485.425577][ T30] audit: type=1400 audit(1768935729.324:919): avc: denied { ioctl } for pid=14587 comm="syz.0.2766" path="socket:[40767]" dev="sockfs" ino=40767 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 486.223318][T14624] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2776'. [ 486.241252][T14620] fuse: Bad value for 'fd' [ 486.254503][T14620] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2775'. [ 486.486111][T14632] netlink: 'syz.4.2780': attribute type 1 has an invalid length. [ 486.519069][T14632] bond1: entered promiscuous mode [ 486.526804][T14632] 8021q: adding VLAN 0 to HW filter on device bond1 [ 486.560383][T14632] bond1: entered allmulticast mode [ 488.300027][T14672] netlink: 'syz.2.2793': attribute type 1 has an invalid length. [ 488.453767][T14672] bond1: entered promiscuous mode [ 488.469315][T14672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 489.542890][T14682] fuse: Bad value for 'fd' [ 489.554032][T14678] bond1: entered allmulticast mode [ 489.631327][T14686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2797'. [ 490.124176][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 490.132743][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 490.142312][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 490.149994][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 490.158430][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 490.400304][ T6120] syz_tun (unregistering): left allmulticast mode [ 490.520816][T14714] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 490.529234][T14714] tipc: Enabled bearer , priority 10 [ 490.682783][T14705] chnl_net:caif_netlink_parms(): no params data found [ 491.404100][T14705] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.411949][T14705] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.419458][T14705] bridge_slave_0: entered allmulticast mode [ 491.430580][T14705] bridge_slave_0: entered promiscuous mode [ 491.438915][T14705] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.553297][T14705] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.560498][T14705] bridge_slave_1: entered allmulticast mode [ 491.567697][T14705] bridge_slave_1: entered promiscuous mode [ 491.585280][ T4290] bridge_slave_1: left allmulticast mode [ 491.590919][ T4290] bridge_slave_1: left promiscuous mode [ 491.597384][ T4290] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.611693][ T30] audit: type=1400 audit(1768935735.604:920): avc: denied { setopt } for pid=14741 comm="syz.4.2816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 491.670739][ T4290] bridge_slave_0: left allmulticast mode [ 491.680919][ T4290] bridge_slave_0: left promiscuous mode [ 491.680943][ T30] audit: type=1400 audit(1768935735.604:921): avc: denied { getopt } for pid=14741 comm="syz.4.2816" lport=28196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 491.687333][ T4290] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.132641][ T4290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.146134][ T4290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.158782][ T4290] bond0 (unregistering): Released all slaves [ 492.196485][ T4290] bond1 (unregistering): Released all slaves [ 492.228988][ T51] Bluetooth: hci2: command tx timeout [ 492.372466][ T4290] bond2 (unregistering): (slave wireguard0): Releasing backup interface [ 492.381087][ T4290] wireguard0: left promiscuous mode [ 492.390409][ T4290] bond2 (unregistering): Released all slaves [ 492.496658][ T4290] bond3 (unregistering): Released all slaves [ 492.660606][ T4290] bond4 (unregistering): Released all slaves [ 492.735951][T14705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.769030][T14705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.826801][T14705] team0: Port device team_slave_0 added [ 492.869986][T14705] team0: Port device team_slave_1 added [ 492.899385][ T4290] tipc: Disabling bearer [ 492.904874][ T4290] tipc: Disabling bearer [ 492.925162][ T4290] tipc: Left network mode [ 492.960534][T14705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.974648][T14705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.001840][T14705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.025561][ T4290] IPVS: stopping backup sync thread 9010 ... [ 493.062671][T14705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.077231][T14705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.131548][T14705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.298949][T14705] hsr_slave_0: entered promiscuous mode [ 493.338053][T14705] hsr_slave_1: entered promiscuous mode [ 493.363378][T14705] debugfs: 'hsr0' already exists in 'hsr' [ 493.507551][T14705] Cannot create hsr debugfs directory [ 493.522859][T14771] tipc: Enabling of bearer rejected, already enabled [ 493.566701][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2824'. [ 493.622631][T14790] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2829'. [ 493.732545][T14792] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2830'. [ 493.819695][T14792] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2830'. [ 494.051863][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.070301][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.302201][ T51] Bluetooth: hci2: command tx timeout [ 495.131751][ T4290] team0 (unregistering): Port device team_slave_1 removed [ 495.160772][ T4290] team0 (unregistering): Port device team_slave_0 removed [ 495.459141][T14815] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.570945][T14815] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.651172][T14815] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.806671][T14815] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.861023][T14848] fuse: Bad value for 'fd' [ 495.916776][T14845] mkiss: ax0: crc mode is auto. [ 495.976193][ T4008] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.010186][ T4008] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.062633][ T75] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.111516][ T75] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.206300][T14705] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 496.251528][T14705] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 496.279150][T14705] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 496.290967][T14705] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 496.381674][ T51] Bluetooth: hci2: command tx timeout [ 496.390282][T14873] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 496.407123][T14873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2846'. [ 496.453612][T14873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2846'. [ 496.465088][T14873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2846'. [ 496.497073][T14873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2846'. [ 496.506702][T14873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2846'. [ 496.516322][T14873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2846'. [ 496.668363][T14705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.684028][T14705] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.746006][ T4008] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.753091][ T4008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.818508][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.825589][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.383639][T14705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.634435][ T4290] IPVS: stop unused estimator thread 0... [ 497.660555][T14705] veth0_vlan: entered promiscuous mode [ 497.748115][T14705] veth1_vlan: entered promiscuous mode [ 497.812879][T14705] veth0_macvtap: entered promiscuous mode [ 497.901443][T14705] veth1_macvtap: entered promiscuous mode [ 498.032055][T14705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.047032][T14705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.061354][ T4075] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.087110][ T4075] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.124074][ T4075] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.214671][ T4075] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.397426][T14925] fuse: Bad value for 'group_id' [ 498.402577][T14925] fuse: Bad value for 'group_id' [ 498.421320][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.440217][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.462347][ T51] Bluetooth: hci2: command tx timeout [ 498.518529][ T4075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.530128][ T4075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.840567][ T5824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 499.850117][ T5824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 499.858200][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 499.867027][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 499.895861][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 500.945208][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.951575][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.146388][T10553] syz_tun (unregistering): left allmulticast mode [ 501.979160][ T4075] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.981891][ T51] Bluetooth: hci4: command tx timeout [ 502.251716][ T11] block nbd0: Possible stuck request ffff888026550000: control (read@0,1024B). Runtime 150 seconds [ 502.262508][ T11] block nbd0: Possible stuck request ffff888026550200: control (read@1024,1024B). Runtime 150 seconds [ 502.273633][ T11] block nbd0: Possible stuck request ffff888026550400: control (read@2048,1024B). Runtime 150 seconds [ 502.309998][ T11] block nbd0: Possible stuck request ffff888026550600: control (read@3072,1024B). Runtime 150 seconds [ 502.426266][ T4075] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.497712][T14952] chnl_net:caif_netlink_parms(): no params data found [ 502.595383][T15010] __nla_validate_parse: 36 callbacks suppressed [ 502.595400][T15010] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2870'. [ 502.673091][ T4075] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.212990][ T4075] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.463305][T14952] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.941881][T14952] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.949141][T14952] bridge_slave_0: entered allmulticast mode [ 503.994693][T14952] bridge_slave_0: entered promiscuous mode [ 504.011299][T14952] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.025338][T14952] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.034042][T14952] bridge_slave_1: entered allmulticast mode [ 504.042989][T14952] bridge_slave_1: entered promiscuous mode [ 504.062620][ T51] Bluetooth: hci4: command tx timeout [ 504.121151][T14952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.170092][T14952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.247970][ T4075] bridge_slave_1: left allmulticast mode [ 504.298520][T15035] fuse: Unknown parameter 'user_i00000000000000000000' [ 504.311657][ T4075] bridge_slave_1: left promiscuous mode [ 504.317327][ T4075] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.379968][ T4075] bridge_slave_0: left allmulticast mode [ 504.386858][ T4075] bridge_slave_0: left promiscuous mode [ 504.406424][ T4075] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.728453][ T4075] dvmrp6 (unregistering): left allmulticast mode [ 505.273263][ T4075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 505.283168][ T4075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 505.292804][ T4075] bond0 (unregistering): Released all slaves [ 505.419934][ T4075] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 505.429152][ T4075] wireguard0: left promiscuous mode [ 505.435076][ T4075] wireguard0: left allmulticast mode [ 505.466676][ T4075] bond1 (unregistering): Released all slaves [ 505.479894][T14952] team0: Port device team_slave_0 added [ 505.540800][T14952] team0: Port device team_slave_1 added [ 505.557450][ T30] audit: type=1400 audit(1768935749.554:922): avc: denied { listen } for pid=15055 comm="syz.5.2888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 505.577455][ T4075] tipc: Disabling bearer [ 505.587776][ T4075] tipc: Left network mode [ 505.593338][ T30] audit: type=1400 audit(1768935749.584:923): avc: denied { create } for pid=15055 comm="syz.5.2888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 505.710483][T14952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.718703][T14952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.745297][T14952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.804842][T14952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.815400][T14952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.879465][T14952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.976371][T15067] tipc: Enabling of bearer rejected, already enabled [ 506.002771][T15062] syzkaller0: entered promiscuous mode [ 506.011516][T15062] syzkaller0: entered allmulticast mode [ 506.058416][T14952] hsr_slave_0: entered promiscuous mode [ 506.096025][T14952] hsr_slave_1: entered promiscuous mode [ 506.141971][ T51] Bluetooth: hci4: command tx timeout [ 506.163419][T14952] debugfs: 'hsr0' already exists in 'hsr' [ 506.176797][T14952] Cannot create hsr debugfs directory [ 506.345611][ T4075] hsr_slave_0: left promiscuous mode [ 506.362196][ T4075] hsr_slave_1: left promiscuous mode [ 506.375043][ T4075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.396565][ T4075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.404588][T15061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.487754][ T4075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.511468][ T4075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.543504][ T4075] veth1_macvtap: left promiscuous mode [ 506.549241][ T4075] veth0_macvtap: left promiscuous mode [ 506.573381][ T4075] veth1_vlan: left promiscuous mode [ 506.584796][ T4075] veth0_vlan: left promiscuous mode [ 506.749915][T15089] netlink: 'syz.1.2895': attribute type 39 has an invalid length. [ 507.361073][ T4075] team0 (unregistering): Port device team_slave_1 removed [ 507.438992][ T4075] team0 (unregistering): Port device team_slave_0 removed [ 507.448830][ T75] smc: removing ib device !yz! [ 507.956312][T15102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2898'. [ 507.998233][T15102] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2898'. [ 508.221957][ T51] Bluetooth: hci4: command tx timeout [ 510.207315][T15150] netlink: 203340 bytes leftover after parsing attributes in process `syz.5.2906'. [ 510.831816][T15141] tipc: Enabled bearer , priority 0 [ 510.838658][T15149] netlink: 248 bytes leftover after parsing attributes in process `syz.5.2906'. [ 510.847862][T15134] syzkaller0: entered promiscuous mode [ 510.854165][T15134] syzkaller0: entered allmulticast mode [ 510.883530][T15146] tipc: Resetting bearer [ 510.894866][T15132] tipc: Resetting bearer [ 510.934462][T15132] tipc: Disabling bearer [ 510.973156][ T4075] IPVS: stop unused estimator thread 0... [ 511.237110][T14952] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 511.249226][T14952] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 512.226148][T14952] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 512.325229][T14952] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 512.536149][T15189] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2911'. [ 512.572799][T15189] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2911'. [ 512.771099][T14952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.880605][T14952] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.900895][T15200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2913'. [ 512.924835][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.931967][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.950712][T15200] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2913'. [ 513.072949][T15210] netlink: 'syz.2.2915': attribute type 1 has an invalid length. [ 513.075782][T15200] geneve2: entered promiscuous mode [ 513.113863][T15200] geneve2: entered allmulticast mode [ 513.124517][T15213] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2915'. [ 513.241720][T15210] bond2: entered promiscuous mode [ 513.247161][T15210] 8021q: adding VLAN 0 to HW filter on device bond2 [ 513.260075][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.267238][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.343939][T15215] bond2: entered allmulticast mode [ 513.367793][T15204] vlan2: entered allmulticast mode [ 513.448163][T15204] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 514.055765][T14952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.363275][T14952] veth0_vlan: entered promiscuous mode [ 514.524112][T14952] veth1_vlan: entered promiscuous mode [ 514.533335][T15240] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2918'. [ 514.617396][T15259] netlink: 203340 bytes leftover after parsing attributes in process `syz.2.2918'. [ 514.642891][T14952] veth0_macvtap: entered promiscuous mode [ 514.671488][T14952] veth1_macvtap: entered promiscuous mode [ 514.706433][T14952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.771702][T14952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.812945][ T65] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.824107][ T65] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.899412][ T65] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.937850][ T65] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.122214][ T6033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.141097][ T6033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.178051][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.197266][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.782266][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 515.791853][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 515.799931][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 515.810651][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 515.818266][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 516.553236][T15286] chnl_net:caif_netlink_parms(): no params data found [ 516.922078][T15316] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2936'. [ 517.901799][ T51] Bluetooth: hci0: command tx timeout [ 517.986075][T15286] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.017670][T15286] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.150533][T15286] bridge_slave_0: entered allmulticast mode [ 518.173270][T15286] bridge_slave_0: entered promiscuous mode [ 518.193320][T15286] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.200509][T15286] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.208035][T15286] bridge_slave_1: entered allmulticast mode [ 518.217425][T15286] bridge_slave_1: entered promiscuous mode [ 518.251531][T15286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.362450][T15286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.443673][T15325] 9p: Bad value for 'wfdno' [ 518.464625][T15323] syzkaller0: entered promiscuous mode [ 518.470104][T15323] syzkaller0: entered allmulticast mode [ 518.508893][T15286] team0: Port device team_slave_0 added [ 518.528684][T15286] team0: Port device team_slave_1 added [ 518.678313][T15335] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 518.741731][T15335] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 518.752202][T15335] overlayfs: failed to look up (tracing) for ino (-66) [ 518.766961][T15286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.799811][T15286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.931886][T15286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.017492][T15286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.053887][T15286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.431910][T15339] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2944'. [ 519.454143][T15286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.506728][ T30] audit: type=1400 audit(1768935763.504:924): avc: denied { unmount } for pid=14705 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 519.648841][ T6461] syz_tun (unregistering): left allmulticast mode [ 519.977706][T15286] hsr_slave_0: entered promiscuous mode [ 519.993199][ T51] Bluetooth: hci0: command tx timeout [ 519.997958][T15286] hsr_slave_1: entered promiscuous mode [ 520.019865][T15348] syzkaller0: entered promiscuous mode [ 520.051826][T15348] syzkaller0: entered allmulticast mode [ 520.078517][ T65] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.099553][ T65] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.245262][ T65] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.302813][ T65] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.308573][T15356] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2948'. [ 520.517327][ T65] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.581353][ T65] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.698454][T15367] 9p: Bad value for 'wfdno' [ 520.760534][T15364] netdevsim netdevsim1: Direct firmware load for / [ 520.760534][T15364] failed with error -2 [ 520.784596][T15364] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 520.784596][T15364] [ 520.808788][ T30] audit: type=1400 audit(1768935764.784:925): avc: denied { firmware_load } for pid=15360 comm="syz.1.2949" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 520.924674][T15370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2953'. [ 520.936762][ T65] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.948193][ T65] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.004762][T15372] overlayfs: failed to resolve './file1': -2 [ 521.088781][T15374] syzkaller0: entered promiscuous mode [ 521.131120][T15374] syzkaller0: entered allmulticast mode [ 521.419016][ T65] bridge_slave_1: left allmulticast mode [ 521.455925][ T65] bridge_slave_1: left promiscuous mode [ 521.569594][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.603294][T15383] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2958'. [ 521.665740][ T65] bridge_slave_0: left allmulticast mode [ 521.671398][ T65] bridge_slave_0: left promiscuous mode [ 521.720349][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.927417][T15398] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2960'. [ 522.062018][ T51] Bluetooth: hci0: command tx timeout [ 522.146181][T15407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2962'. [ 522.297427][ T65] gretap0 (unregistering): left promiscuous mode [ 522.379748][ T65] dvmrp6 (unregistering): left allmulticast mode [ 522.613542][ T65] bond0 (unregistering): left promiscuous mode [ 522.619942][ T65] bond_slave_0: left promiscuous mode [ 522.651438][ T65] bond_slave_1: left promiscuous mode [ 522.696327][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.707372][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.716873][ T65] bond0 (unregistering): Released all slaves [ 522.780436][ T65] bond1 (unregistering): Released all slaves [ 522.846324][ T65] bond2 (unregistering): Released all slaves [ 523.017151][T15415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2964'. [ 523.049854][ T65] tipc: Disabling bearer [ 523.069952][ T65] tipc: Disabling bearer [ 523.083071][ T65] tipc: Left network mode [ 523.110734][T15418] syzkaller0: entered promiscuous mode [ 523.174679][T15418] syzkaller0: entered allmulticast mode [ 523.715425][T15442] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.757123][T15447] fuse: Unknown parameter 'group_i00000000000000000000' [ 523.850060][T15442] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.941292][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.958229][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.976226][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.987685][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.028113][ T65] batadv_slave_1: left promiscuous mode [ 524.040044][ T65] hsr0: left allmulticast mode [ 524.054479][ T65] veth1_macvtap: left promiscuous mode [ 524.069882][ T65] veth0_macvtap: left allmulticast mode [ 524.082875][ T65] veth0_macvtap: left promiscuous mode [ 524.096213][ T65] veth1_vlan: left promiscuous mode [ 524.109101][ T65] veth0_vlan: left promiscuous mode [ 524.142225][ T51] Bluetooth: hci0: command tx timeout [ 524.330015][T15464] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2974'. [ 524.341736][T15461] nbd1: detected capacity change from 0 to 127 [ 524.353820][ T51] block nbd1: Receive control failed (result -104) [ 524.434951][T15467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2977'. [ 526.456661][ T65] team0 (unregistering): Port device team_slave_1 removed [ 526.600712][ T65] team0 (unregistering): Port device team_slave_0 removed [ 526.867709][T15442] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.893923][T15485] syzkaller0: entered promiscuous mode [ 526.899445][T15485] syzkaller0: entered allmulticast mode [ 526.988764][T15442] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.083288][T15286] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 527.112550][T15286] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 527.129332][T15286] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 527.178652][T15286] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 527.200078][ T75] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.292264][ T3953] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.489761][ T3953] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.520084][ T30] audit: type=1400 audit(1768935771.514:926): avc: denied { map } for pid=15504 comm="syz.4.2985" path="socket:[47272]" dev="sockfs" ino=47272 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 527.551484][ T3953] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.671780][T15517] nbd2: detected capacity change from 0 to 127 [ 527.679903][ T51] block nbd2: Receive control failed (result -104) [ 527.750113][T15522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2987'. [ 527.788337][T15286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.938533][T15528] overlayfs: missing 'lowerdir' [ 527.997297][T15286] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.020441][T15286] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 528.037143][T15286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 528.050325][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.057429][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.089570][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.096626][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.580336][T15286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.709053][T15286] veth0_vlan: entered promiscuous mode [ 528.778195][T15286] veth1_vlan: entered promiscuous mode [ 528.901222][T15286] veth0_macvtap: entered promiscuous mode [ 528.928098][T15286] veth1_macvtap: entered promiscuous mode [ 529.024751][T15286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.084948][T15286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.138651][ T4075] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.155545][ T4075] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.164961][ T4075] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.201072][ T4075] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.257468][T15569] overlayfs: missing 'lowerdir' [ 529.525833][T15577] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2997'. [ 529.925299][ T3953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.935298][ T3953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.017043][ T1216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.025984][ T1216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.455627][T15604] netlink: 'syz.1.3005': attribute type 1 has an invalid length. [ 530.493724][T15604] bond1: entered promiscuous mode [ 530.529955][T15606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3005'. [ 530.579676][T15604] 8021q: adding VLAN 0 to HW filter on device bond1 [ 530.791725][T15606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3005'. [ 530.840161][T15604] bond1: entered allmulticast mode [ 531.019882][T15629] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3010'. [ 531.669157][T15657] Bluetooth: MGMT ver 1.23 [ 531.700519][T15657] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3018'. [ 531.782546][T15657] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3018'. [ 532.293389][T15671] 9p: Bad value for 'rfdno' [ 532.312809][ T11] block nbd0: Possible stuck request ffff888026550000: control (read@0,1024B). Runtime 180 seconds [ 532.325873][ T11] block nbd0: Possible stuck request ffff888026550200: control (read@1024,1024B). Runtime 180 seconds [ 532.337184][ T11] block nbd0: Possible stuck request ffff888026550400: control (read@2048,1024B). Runtime 180 seconds [ 532.363484][ T11] block nbd0: Possible stuck request ffff888026550600: control (read@3072,1024B). Runtime 180 seconds [ 532.826534][T15687] tipc: Enabled bearer , priority 0 [ 532.834146][T15687] syzkaller0: entered promiscuous mode [ 532.848598][T15687] syzkaller0: entered allmulticast mode [ 532.886964][T15697] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3032'. [ 532.967347][T15683] tipc: Resetting bearer [ 532.974690][ T30] audit: type=1400 audit(1768935776.974:927): avc: denied { bind } for pid=15698 comm="syz.1.3034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 533.007646][ T30] audit: type=1400 audit(1768935776.974:928): avc: denied { ioctl } for pid=15698 comm="syz.1.3034" path="socket:[47044]" dev="sockfs" ino=47044 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 533.107813][T15683] tipc: Disabling bearer [ 533.164778][T15707] syzkaller0: entered promiscuous mode [ 533.170261][T15707] syzkaller0: entered allmulticast mode [ 534.599166][T15752] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3044'. [ 535.771135][T15781] fuse: Bad value for 'group_id' [ 535.776317][T15781] fuse: Bad value for 'group_id' [ 535.999719][T15791] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 536.033127][T15791] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 536.044457][T15791] overlayfs: failed to look up (tracing) for ino (-66) [ 537.397970][T15822] mkiss: ax0: crc mode is auto. [ 539.051782][T15836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3066'. [ 539.141765][T15836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3066'. [ 539.557570][ T30] audit: type=1400 audit(1768935783.554:929): avc: denied { create } for pid=15860 comm="syz.4.3072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 539.805743][T15870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3072'. [ 539.815573][T15870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3072'. [ 539.824718][T15870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3072'. [ 539.834280][T15870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3072'. [ 539.843457][T15870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3072'. [ 539.855184][T15870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3072'. [ 539.864305][T15870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3072'. [ 539.873618][T15870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3072'. [ 539.942483][T15871] fuse: Bad value for 'group_id' [ 539.947549][T15871] fuse: Bad value for 'group_id' [ 540.388831][T15880] overlayfs: failed to resolve './file0': -2 [ 540.590505][T15886] syzkaller0: entered promiscuous mode [ 540.596157][T15886] syzkaller0: entered allmulticast mode [ 540.809286][T15890] 9p: Bad value for 'wfdno' [ 540.848906][T15893] syzkaller0: entered promiscuous mode [ 540.863459][T15893] syzkaller0: entered allmulticast mode [ 541.249469][T15912] syzkaller0: entered promiscuous mode [ 541.275331][T15904] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 541.286892][T15912] syzkaller0: entered allmulticast mode [ 542.538979][T15941] syzkaller0: entered promiscuous mode [ 542.587474][T15941] syzkaller0: entered allmulticast mode [ 542.739301][ T30] audit: type=1400 audit(1768935794.727:930): avc: denied { shutdown } for pid=15945 comm="syz.0.3103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 542.927911][T15952] syzkaller0: entered promiscuous mode [ 542.934385][T15952] syzkaller0: entered allmulticast mode [ 543.109725][T15965] syzkaller1: entered promiscuous mode [ 543.123596][T15967] 9p: Bad value for 'rfdno' [ 543.141936][T15965] syzkaller1: entered allmulticast mode [ 543.852539][T15992] syzkaller0: entered promiscuous mode [ 543.858103][T15992] syzkaller0: entered allmulticast mode [ 544.107978][ T30] audit: type=1400 audit(1768935796.097:931): avc: denied { write } for pid=16003 comm="syz.2.3128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 544.132673][ T30] audit: type=1400 audit(1768935796.127:932): avc: denied { read } for pid=16003 comm="syz.2.3128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 544.181892][ T30] audit: type=1400 audit(1768935796.177:933): avc: denied { ioctl } for pid=16003 comm="syz.2.3128" path="socket:[49507]" dev="sockfs" ino=49507 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 544.247455][T16012] syzkaller1: entered promiscuous mode [ 544.279511][T16012] syzkaller1: entered allmulticast mode [ 544.447669][T16026] syzkaller0: entered promiscuous mode [ 544.456474][T16026] syzkaller0: entered allmulticast mode [ 544.740338][T16045] __nla_validate_parse: 33 callbacks suppressed [ 544.740354][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3145'. [ 544.770197][T16045] ipvlan0: entered promiscuous mode [ 544.776939][T16045] ipvlan0: left promiscuous mode [ 544.837639][T16049] netlink: 'syz.1.3148': attribute type 13 has an invalid length. [ 544.927872][T16056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3150'. [ 544.952894][T16058] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3151'. [ 544.965705][T16058] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3151'. [ 545.116126][T16064] syzkaller0: entered promiscuous mode [ 545.122563][T16064] syzkaller0: entered allmulticast mode [ 545.162944][T16066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3155'. [ 545.327697][T16072] netlink: 'syz.1.3155': attribute type 13 has an invalid length. [ 545.546862][T16072] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.554453][T16072] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.664825][T16072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.681119][T16072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.938462][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.972737][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.995630][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.020043][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.061397][T16102] syzkaller0: entered promiscuous mode [ 547.093833][T16102] syzkaller0: entered allmulticast mode [ 547.350984][T16110] mkiss: ax0: crc mode is auto. [ 548.816794][T16114] tipc: Enabling of bearer rejected, already enabled [ 549.236327][T16122] syzkaller0: entered promiscuous mode [ 549.261193][T16122] syzkaller0: entered allmulticast mode [ 549.353971][ T30] audit: type=1400 audit(1768935801.347:934): avc: denied { getopt } for pid=16129 comm="syz.0.3174" lport=43703 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 549.413802][T16140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3172'. [ 549.705831][T16152] tipc: Enabled bearer , priority 0 [ 549.723395][T16152] syzkaller0: entered promiscuous mode [ 549.728872][T16152] syzkaller0: entered allmulticast mode [ 549.761394][T16152] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3179'. [ 549.793890][T16152] tipc: Resetting bearer [ 549.806661][T16151] tipc: Resetting bearer [ 550.078280][T16151] tipc: Disabling bearer [ 550.254224][T16179] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3186'. [ 550.706411][T16195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3191'. [ 550.885741][T16198] syzkaller0: entered promiscuous mode [ 550.900931][T16198] syzkaller0: entered allmulticast mode [ 551.321636][T16221] netlink: 'syz.5.3197': attribute type 13 has an invalid length. [ 551.642232][T16233] fuse: Bad value for 'fd' [ 552.308502][T16255] 9pnet_fd: Insufficient options for proto=fd [ 553.251635][T16274] nbd3: detected capacity change from 0 to 127 [ 553.271350][T16276] netlink: 'syz.5.3215': attribute type 6 has an invalid length. [ 553.296093][T16276] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3215'. [ 553.333149][ T51] block nbd3: Receive control failed (result -104) [ 553.473440][T16278] netlink: 'syz.5.3216': attribute type 13 has an invalid length. [ 553.954692][T16295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3223'. [ 553.976463][T16295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3223'. [ 554.065559][T16299] fuse: Bad value for 'fd' [ 554.841730][ T25] block nbd1: Possible stuck request ffff888026588000: control (read@0,1024B). Runtime 30 seconds [ 554.853107][ T25] block nbd1: Possible stuck request ffff888026588200: control (read@1024,1024B). Runtime 30 seconds [ 554.864215][ T25] block nbd1: Possible stuck request ffff888026588400: control (read@2048,1024B). Runtime 30 seconds [ 554.877018][ T25] block nbd1: Possible stuck request ffff888026588600: control (read@3072,1024B). Runtime 30 seconds [ 554.898377][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3226'. [ 554.910588][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3226'. [ 554.919848][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3226'. [ 554.960767][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3226'. [ 554.977867][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3226'. [ 555.046699][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3226'. [ 555.100991][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3226'. [ 555.128810][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3226'. [ 555.172949][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3226'. [ 555.184488][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3226'. [ 555.191863][T16321] nbd4: detected capacity change from 0 to 127 [ 555.205989][T16322] netlink: 'syz.4.3227': attribute type 6 has an invalid length. [ 555.217817][ T51] block nbd4: Receive control failed (result -32) [ 555.263252][T14113] block nbd4: Dead connection, failed to find a fallback [ 555.294141][T14113] block nbd4: shutting down sockets [ 555.324093][T14113] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 555.711896][T14113] Buffer I/O error on dev nbd4, logical block 0, async page read [ 555.756973][T14113] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 555.790158][T14113] Buffer I/O error on dev nbd4, logical block 1, async page read [ 555.810682][T14113] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 555.829452][T14113] Buffer I/O error on dev nbd4, logical block 2, async page read [ 555.847508][T14113] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 555.859614][T16337] netlink: 'syz.1.3232': attribute type 13 has an invalid length. [ 555.945470][T14113] Buffer I/O error on dev nbd4, logical block 3, async page read [ 555.960311][T14113] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 555.977784][T14113] Buffer I/O error on dev nbd4, logical block 0, async page read [ 555.998955][T14113] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 556.020234][T14113] Buffer I/O error on dev nbd4, logical block 1, async page read [ 556.028126][T14113] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 556.053955][T14113] Buffer I/O error on dev nbd4, logical block 2, async page read [ 556.076480][T14113] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 556.115159][T14113] Buffer I/O error on dev nbd4, logical block 3, async page read [ 556.133646][T14113] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 556.160503][T14113] Buffer I/O error on dev nbd4, logical block 0, async page read [ 556.232717][T14113] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 556.300490][T14113] Buffer I/O error on dev nbd4, logical block 1, async page read [ 556.317898][T14113] ldm_validate_partition_table(): Disk read failed. [ 556.325599][T14113] Dev nbd4: unable to read RDB block 0 [ 556.332197][T14113] nbd4: unable to read partition table [ 556.342546][T14113] ldm_validate_partition_table(): Disk read failed. [ 556.517301][T14113] Dev nbd4: unable to read RDB block 0 [ 556.534172][T14113] nbd4: unable to read partition table [ 557.025411][T16364] netlink: 'syz.0.3242': attribute type 3 has an invalid length. [ 558.427966][ T11] block nbd2: Possible stuck request ffff888026668000: control (read@0,1024B). Runtime 30 seconds [ 558.438640][ T11] block nbd2: Possible stuck request ffff888026668200: control (read@1024,1024B). Runtime 30 seconds [ 558.449514][ T11] block nbd2: Possible stuck request ffff888026668400: control (read@2048,1024B). Runtime 30 seconds [ 558.460618][ T11] block nbd2: Possible stuck request ffff888026668600: control (read@3072,1024B). Runtime 30 seconds [ 558.679144][T16382] syzkaller0: entered promiscuous mode [ 558.685016][T16382] syzkaller0: entered allmulticast mode [ 560.705779][T16409] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 560.954515][T16409] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 560.964679][T16409] overlayfs: failed to look up (tracing) for ino (-66) [ 561.938032][T16418] mkiss: ax0: crc mode is auto. [ 562.384779][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.390201][ T11] block nbd0: Possible stuck request ffff888026550000: control (read@0,1024B). Runtime 210 seconds [ 562.391109][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.401777][ T11] block nbd0: Possible stuck request ffff888026550200: control (read@1024,1024B). Runtime 210 seconds [ 562.418883][ T11] block nbd0: Possible stuck request ffff888026550400: control (read@2048,1024B). Runtime 210 seconds [ 562.429885][ T11] block nbd0: Possible stuck request ffff888026550600: control (read@3072,1024B). Runtime 210 seconds [ 562.719493][T16420] netlink: 'syz.5.3261': attribute type 13 has an invalid length. [ 562.934977][ T30] audit: type=1400 audit(1768935814.927:935): avc: denied { listen } for pid=16425 comm="syz.5.3264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 564.462410][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 567.471849][ T5188] udevd[5188]: worker [11854] /devices/virtual/block/nbd0 timeout; kill it [ 567.480819][ T5188] udevd[5188]: seq 13573 '/devices/virtual/block/nbd0' killed [ 571.963909][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 571.972358][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 571.979885][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 571.994042][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 572.001394][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 572.088064][T16429] chnl_net:caif_netlink_parms(): no params data found [ 572.131743][T16429] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.138837][T16429] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.146201][T16429] bridge_slave_0: entered allmulticast mode [ 572.152820][T16429] bridge_slave_0: entered promiscuous mode [ 572.160019][T16429] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.167335][T16429] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.174489][T16429] bridge_slave_1: entered allmulticast mode [ 572.181078][T16429] bridge_slave_1: entered promiscuous mode [ 572.200580][T16429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.211301][T16429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.233419][T16429] team0: Port device team_slave_0 added [ 572.240222][T16429] team0: Port device team_slave_1 added [ 572.256900][T16429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.264047][T16429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.289932][T16429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.302118][T16429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.309035][T16429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.335147][T16429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.364663][T16429] hsr_slave_0: entered promiscuous mode [ 572.370646][T16429] hsr_slave_1: entered promiscuous mode [ 572.376691][T16429] debugfs: 'hsr0' already exists in 'hsr' [ 572.382497][T16429] Cannot create hsr debugfs directory [ 572.697538][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 572.706122][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 572.714064][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 572.722186][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 572.729810][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 572.910185][T16438] chnl_net:caif_netlink_parms(): no params data found [ 572.951885][T16438] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.958960][T16438] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.966087][T16438] bridge_slave_0: entered allmulticast mode [ 572.972655][T16438] bridge_slave_0: entered promiscuous mode [ 572.979606][T16438] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.986782][T16438] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.993945][T16438] bridge_slave_1: entered allmulticast mode [ 573.000488][T16438] bridge_slave_1: entered promiscuous mode [ 573.019429][T16438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.032483][T16438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.052428][T16438] team0: Port device team_slave_0 added [ 573.059447][T16438] team0: Port device team_slave_1 added [ 573.075472][T16438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.082431][T16438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.108594][T16438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.126659][T16438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.133624][T16438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.159753][T16438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.187844][T16438] hsr_slave_0: entered promiscuous mode [ 573.194169][T16438] hsr_slave_1: entered promiscuous mode [ 573.199998][T16438] debugfs: 'hsr0' already exists in 'hsr' [ 573.205740][T16438] Cannot create hsr debugfs directory [ 574.001374][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 574.013365][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 574.022062][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 574.029797][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 574.043014][T16451] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 574.050194][T14708] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 574.057943][T16451] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 574.065399][T14708] Bluetooth: hci3: command tx timeout [ 574.074164][T14708] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 574.092467][T16454] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 574.100399][T16454] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 574.256492][T16448] chnl_net:caif_netlink_parms(): no params data found [ 574.294821][T16450] chnl_net:caif_netlink_parms(): no params data found [ 574.388188][T16448] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.395307][T16448] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.402784][T16448] bridge_slave_0: entered allmulticast mode [ 574.409377][T16448] bridge_slave_0: entered promiscuous mode [ 574.422825][T16448] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.429888][T16448] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.437124][T16448] bridge_slave_1: entered allmulticast mode [ 574.444267][T16448] bridge_slave_1: entered promiscuous mode [ 574.463335][T16450] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.470422][T16450] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.477561][T16450] bridge_slave_0: entered allmulticast mode [ 574.484184][T16450] bridge_slave_0: entered promiscuous mode [ 574.498076][T16450] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.505463][T16450] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.512598][T16450] bridge_slave_1: entered allmulticast mode [ 574.519165][T16450] bridge_slave_1: entered promiscuous mode [ 574.527820][T16448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.547572][T16448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.571154][T16450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.587492][T16450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.597691][T16448] team0: Port device team_slave_0 added [ 574.610594][T16448] team0: Port device team_slave_1 added [ 574.629969][T16450] team0: Port device team_slave_0 added [ 574.643122][T16450] team0: Port device team_slave_1 added [ 574.657951][T16448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.664994][T16448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.691371][T16448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.710394][T16448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.717478][T16448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.743443][T16448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.755152][T16450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.762730][T16450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.781690][ T51] Bluetooth: hci6: command tx timeout [ 574.789059][T16450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.810204][T16450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.817225][T16450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.843193][T16450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.892116][T16450] hsr_slave_0: entered promiscuous mode [ 574.898150][T16450] hsr_slave_1: entered promiscuous mode [ 574.904242][T16450] debugfs: 'hsr0' already exists in 'hsr' [ 574.909940][T16450] Cannot create hsr debugfs directory [ 574.918308][T16448] hsr_slave_0: entered promiscuous mode [ 574.924661][T16448] hsr_slave_1: entered promiscuous mode [ 574.930527][T16448] debugfs: 'hsr0' already exists in 'hsr' [ 574.936406][T16448] Cannot create hsr debugfs directory [ 576.141857][ T51] Bluetooth: hci7: command tx timeout [ 576.141863][ T5824] Bluetooth: hci8: command tx timeout [ 576.142654][T16454] Bluetooth: hci3: command tx timeout [ 576.861696][T16454] Bluetooth: hci6: command tx timeout [ 577.972888][ T51] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 577.980794][ T51] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 577.989500][ T51] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 577.997753][ T51] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 578.006000][ T51] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 578.097575][T16468] chnl_net:caif_netlink_parms(): no params data found [ 578.143521][T16468] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.150612][T16468] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.158028][T16468] bridge_slave_0: entered allmulticast mode [ 578.164772][T16468] bridge_slave_0: entered promiscuous mode [ 578.172024][T16468] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.180489][T16468] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.187867][T16468] bridge_slave_1: entered allmulticast mode [ 578.194584][T16468] bridge_slave_1: entered promiscuous mode [ 578.213873][T16468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.221885][ T51] Bluetooth: hci7: command tx timeout [ 578.223104][ T5824] Bluetooth: hci8: command tx timeout [ 578.235083][T16454] Bluetooth: hci3: command tx timeout [ 578.242907][T16468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.264758][T16468] team0: Port device team_slave_0 added [ 578.271860][T16468] team0: Port device team_slave_1 added [ 578.290167][T16468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.297140][T16468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 578.326185][T16468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.338190][T16468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.345192][T16468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 578.371243][T16468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.402706][T16468] hsr_slave_0: entered promiscuous mode [ 578.408750][T16468] hsr_slave_1: entered promiscuous mode [ 578.414771][T16468] debugfs: 'hsr0' already exists in 'hsr' [ 578.420477][T16468] Cannot create hsr debugfs directory [ 578.941666][ T5824] Bluetooth: hci6: command tx timeout [ 580.061671][ T5824] Bluetooth: hci9: command tx timeout [ 580.302080][ T5824] Bluetooth: hci7: command tx timeout [ 580.311798][T16454] Bluetooth: hci3: command tx timeout [ 580.317194][ T5824] Bluetooth: hci8: command tx timeout [ 581.021656][ T5824] Bluetooth: hci6: command tx timeout [ 582.151645][ T5824] Bluetooth: hci9: command tx timeout [ 582.382751][T16454] Bluetooth: hci7: command tx timeout [ 582.388162][ T5824] Bluetooth: hci8: command tx timeout [ 583.521757][ T25] block nbd3: Possible stuck request ffff8880266a0000: control (read@0,1024B). Runtime 30 seconds [ 583.532522][ T25] block nbd3: Possible stuck request ffff8880266a0200: control (read@1024,1024B). Runtime 30 seconds [ 583.543526][ T25] block nbd3: Possible stuck request ffff8880266a0400: control (read@2048,1024B). Runtime 30 seconds [ 583.554875][ T25] block nbd3: Possible stuck request ffff8880266a0600: control (read@3072,1024B). Runtime 30 seconds [ 584.221747][ T5824] Bluetooth: hci9: command tx timeout [ 584.791898][ T5188] udevd[5188]: worker [12088] /devices/virtual/block/nbd1 is taking a long time [ 585.451746][ T25] block nbd1: Possible stuck request ffff888026588000: control (read@0,1024B). Runtime 60 seconds [ 585.462417][ T25] block nbd1: Possible stuck request ffff888026588200: control (read@1024,1024B). Runtime 60 seconds [ 585.473300][ T25] block nbd1: Possible stuck request ffff888026588400: control (read@2048,1024B). Runtime 60 seconds [ 585.484170][ T25] block nbd1: Possible stuck request ffff888026588600: control (read@3072,1024B). Runtime 60 seconds [ 586.301742][ T5824] Bluetooth: hci9: command tx timeout [ 587.801816][ T5188] udevd[5188]: worker [12951] /devices/virtual/block/nbd2 is taking a long time [ 588.661733][ T11] block nbd2: Possible stuck request ffff888026668000: control (read@0,1024B). Runtime 60 seconds [ 588.672419][ T11] block nbd2: Possible stuck request ffff888026668200: control (read@1024,1024B). Runtime 60 seconds [ 588.683640][ T11] block nbd2: Possible stuck request ffff888026668400: control (read@2048,1024B). Runtime 60 seconds [ 588.694744][ T11] block nbd2: Possible stuck request ffff888026668600: control (read@3072,1024B). Runtime 60 seconds [ 592.481676][ T11] block nbd0: Possible stuck request ffff888026550000: control (read@0,1024B). Runtime 240 seconds [ 592.492471][ T11] block nbd0: Possible stuck request ffff888026550200: control (read@1024,1024B). Runtime 240 seconds [ 592.503562][ T11] block nbd0: Possible stuck request ffff888026550400: control (read@2048,1024B). Runtime 240 seconds [ 592.514571][ T11] block nbd0: Possible stuck request ffff888026550600: control (read@3072,1024B). Runtime 240 seconds [ 613.585435][ T25] block nbd3: Possible stuck request ffff8880266a0000: control (read@0,1024B). Runtime 60 seconds [ 613.596168][ T25] block nbd3: Possible stuck request ffff8880266a0200: control (read@1024,1024B). Runtime 60 seconds [ 613.607230][ T25] block nbd3: Possible stuck request ffff8880266a0400: control (read@2048,1024B). Runtime 60 seconds [ 613.618100][ T25] block nbd3: Possible stuck request ffff8880266a0600: control (read@3072,1024B). Runtime 60 seconds [ 614.839443][ T5188] udevd[5188]: worker [11992] /devices/virtual/block/nbd3 is taking a long time [ 615.511907][ T25] block nbd1: Possible stuck request ffff888026588000: control (read@0,1024B). Runtime 90 seconds [ 615.522734][ T25] block nbd1: Possible stuck request ffff888026588200: control (read@1024,1024B). Runtime 90 seconds [ 615.533627][ T25] block nbd1: Possible stuck request ffff888026588400: control (read@2048,1024B). Runtime 90 seconds [ 615.544551][ T25] block nbd1: Possible stuck request ffff888026588600: control (read@3072,1024B). Runtime 90 seconds [ 615.662674][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 618.702844][ T11] block nbd2: Possible stuck request ffff888026668000: control (read@0,1024B). Runtime 90 seconds [ 618.713539][ T11] block nbd2: Possible stuck request ffff888026668200: control (read@1024,1024B). Runtime 90 seconds [ 618.724428][ T11] block nbd2: Possible stuck request ffff888026668400: control (read@2048,1024B). Runtime 90 seconds [ 618.735292][ T11] block nbd2: Possible stuck request ffff888026668600: control (read@3072,1024B). Runtime 90 seconds [ 622.543828][ T11] block nbd0: Possible stuck request ffff888026550000: control (read@0,1024B). Runtime 270 seconds [ 622.554561][ T11] block nbd0: Possible stuck request ffff888026550200: control (read@1024,1024B). Runtime 270 seconds [ 622.565769][ T11] block nbd0: Possible stuck request ffff888026550400: control (read@2048,1024B). Runtime 270 seconds [ 622.577126][ T11] block nbd0: Possible stuck request ffff888026550600: control (read@3072,1024B). Runtime 270 seconds [ 623.823776][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.830062][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.904045][T16454] Bluetooth: hci4: command 0x0406 tx timeout [ 632.034746][T16454] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 632.044549][T16454] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 632.052386][T16454] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 632.060031][T16454] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 632.067789][T16454] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 632.163664][T16477] chnl_net:caif_netlink_parms(): no params data found [ 632.208147][T16477] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.215719][T16477] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.223380][T16477] bridge_slave_0: entered allmulticast mode [ 632.230025][T16477] bridge_slave_0: entered promiscuous mode [ 632.237340][T16477] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.244449][T16477] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.251704][T16477] bridge_slave_1: entered allmulticast mode [ 632.258327][T16477] bridge_slave_1: entered promiscuous mode [ 632.277429][T16477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.288287][T16477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.310311][T16477] team0: Port device team_slave_0 added [ 632.317877][T16477] team0: Port device team_slave_1 added [ 632.335198][T16477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.342170][T16477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.368048][T16477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.379668][T16477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.386792][T16477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.413269][T16477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.443079][T16477] hsr_slave_0: entered promiscuous mode [ 632.449081][T16477] hsr_slave_1: entered promiscuous mode [ 632.455158][T16477] debugfs: 'hsr0' already exists in 'hsr' [ 632.460854][T16477] Cannot create hsr debugfs directory [ 633.036603][T16454] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 633.046231][T16454] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 633.053945][T16454] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 633.061985][T16454] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 633.069469][T16454] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 633.163893][T16486] chnl_net:caif_netlink_parms(): no params data found [ 633.213263][T16486] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.221084][T16486] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.228294][T16486] bridge_slave_0: entered allmulticast mode [ 633.235001][T16486] bridge_slave_0: entered promiscuous mode [ 633.242390][T16486] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.249451][T16486] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.256825][T16486] bridge_slave_1: entered allmulticast mode [ 633.263736][T16486] bridge_slave_1: entered promiscuous mode [ 633.282961][T16486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.293897][T16486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.315375][T16486] team0: Port device team_slave_0 added [ 633.323525][T16486] team0: Port device team_slave_1 added [ 633.340268][T16486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.347872][T16486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.373959][T16486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.385673][T16486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.392659][T16486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.418563][T16486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.453485][T16486] hsr_slave_0: entered promiscuous mode [ 633.459575][T16486] hsr_slave_1: entered promiscuous mode [ 633.465573][T16486] debugfs: 'hsr0' already exists in 'hsr' [ 633.471271][T16486] Cannot create hsr debugfs directory [ 634.078434][ T5824] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 634.089698][T16453] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 634.089849][ T5824] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 634.106032][T16453] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 634.106244][ T5824] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 634.121497][T16453] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 634.130431][T16453] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 634.138036][T16453] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 634.145283][ T5824] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 634.145299][T16451] Bluetooth: hci10: command tx timeout [ 634.161839][T16451] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 634.355479][T16496] chnl_net:caif_netlink_parms(): no params data found [ 634.407191][T16498] chnl_net:caif_netlink_parms(): no params data found [ 634.481531][T16496] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.488767][T16496] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.496133][T16496] bridge_slave_0: entered allmulticast mode [ 634.502915][T16496] bridge_slave_0: entered promiscuous mode [ 634.514588][T16496] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.522367][T16496] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.529438][T16496] bridge_slave_1: entered allmulticast mode [ 634.536359][T16496] bridge_slave_1: entered promiscuous mode [ 634.569876][T16498] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.577024][T16498] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.584142][T16498] bridge_slave_0: entered allmulticast mode [ 634.590728][T16498] bridge_slave_0: entered promiscuous mode [ 634.601248][T16496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.610509][T16498] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.617713][T16498] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.624866][T16498] bridge_slave_1: entered allmulticast mode [ 634.631462][T16498] bridge_slave_1: entered promiscuous mode [ 634.639442][T16496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.676426][T16498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.686868][T16496] team0: Port device team_slave_0 added [ 634.694184][T16498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.705161][T16496] team0: Port device team_slave_1 added [ 634.736429][T16498] team0: Port device team_slave_0 added [ 634.742924][T16496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.749837][T16496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.776307][T16496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.788402][T16498] team0: Port device team_slave_1 added [ 634.794685][T16496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.802912][T16496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.828916][T16496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.858508][T16498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.865640][T16498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.891746][T16498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.903637][T16498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.910548][T16498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.936574][T16498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.970795][T16496] hsr_slave_0: entered promiscuous mode [ 634.976880][T16496] hsr_slave_1: entered promiscuous mode [ 634.982982][T16496] debugfs: 'hsr0' already exists in 'hsr' [ 634.988679][T16496] Cannot create hsr debugfs directory [ 635.018190][T16498] hsr_slave_0: entered promiscuous mode [ 635.025379][T16498] hsr_slave_1: entered promiscuous mode [ 635.031251][T16498] debugfs: 'hsr0' already exists in 'hsr' [ 635.036990][T16498] Cannot create hsr debugfs directory [ 635.101665][ T51] Bluetooth: hci11: command tx timeout [ 636.221783][ T51] Bluetooth: hci12: command tx timeout [ 636.221808][T16454] Bluetooth: hci13: command tx timeout [ 636.222783][T16451] Bluetooth: hci10: command tx timeout [ 637.181683][ T51] Bluetooth: hci11: command tx timeout [ 638.042589][T16454] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 638.050580][T16454] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 638.058277][T16454] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 638.067730][T16454] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 638.075457][T16454] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 638.166765][T16513] chnl_net:caif_netlink_parms(): no params data found [ 638.210055][T16513] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.217404][T16513] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.225314][T16513] bridge_slave_0: entered allmulticast mode [ 638.232453][T16513] bridge_slave_0: entered promiscuous mode [ 638.240021][T16513] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.247185][T16513] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.254407][T16513] bridge_slave_1: entered allmulticast mode [ 638.261138][T16513] bridge_slave_1: entered promiscuous mode [ 638.280641][T16513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.291768][T16513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.301787][T16451] Bluetooth: hci10: command tx timeout [ 638.307317][ T51] Bluetooth: hci13: command tx timeout [ 638.314113][T16454] Bluetooth: hci12: command tx timeout [ 638.320942][T16513] team0: Port device team_slave_0 added [ 638.328165][T16513] team0: Port device team_slave_1 added [ 638.346282][T16513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.353255][T16513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.379148][T16513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.391018][T16513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.398015][T16513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.424084][T16513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.455268][T16513] hsr_slave_0: entered promiscuous mode [ 638.461303][T16513] hsr_slave_1: entered promiscuous mode [ 638.467740][T16513] debugfs: 'hsr0' already exists in 'hsr' [ 638.473500][T16513] Cannot create hsr debugfs directory [ 639.261628][ T51] Bluetooth: hci11: command tx timeout [ 640.151765][ T51] Bluetooth: hci14: command tx timeout [ 640.391751][T16451] Bluetooth: hci10: command tx timeout [ 640.397253][ T51] Bluetooth: hci13: command tx timeout [ 640.401628][T16454] Bluetooth: hci12: command tx timeout [ 641.341754][T16454] Bluetooth: hci11: command tx timeout [ 642.221637][T16454] Bluetooth: hci14: command tx timeout [ 642.461706][T16454] Bluetooth: hci13: command tx timeout [ 642.461714][ T51] Bluetooth: hci12: command tx timeout [ 643.663580][ T25] block nbd3: Possible stuck request ffff8880266a0000: control (read@0,1024B). Runtime 90 seconds [ 643.674295][ T25] block nbd3: Possible stuck request ffff8880266a0200: control (read@1024,1024B). Runtime 90 seconds [ 643.685341][ T25] block nbd3: Possible stuck request ffff8880266a0400: control (read@2048,1024B). Runtime 90 seconds [ 643.696238][ T25] block nbd3: Possible stuck request ffff8880266a0600: control (read@3072,1024B). Runtime 90 seconds [ 644.306404][T16454] Bluetooth: hci14: command tx timeout [ 645.581987][ T25] block nbd1: Possible stuck request ffff888026588000: control (read@0,1024B). Runtime 120 seconds [ 645.592730][ T25] block nbd1: Possible stuck request ffff888026588200: control (read@1024,1024B). Runtime 120 seconds [ 645.603829][ T25] block nbd1: Possible stuck request ffff888026588400: control (read@2048,1024B). Runtime 120 seconds [ 645.615088][ T25] block nbd1: Possible stuck request ffff888026588600: control (read@3072,1024B). Runtime 120 seconds [ 646.381721][T16454] Bluetooth: hci14: command tx timeout [ 648.781945][ T11] block nbd2: Possible stuck request ffff888026668000: control (read@0,1024B). Runtime 120 seconds [ 648.792900][ T11] block nbd2: Possible stuck request ffff888026668200: control (read@1024,1024B). Runtime 120 seconds [ 648.805151][ T11] block nbd2: Possible stuck request ffff888026668400: control (read@2048,1024B). Runtime 120 seconds [ 648.816217][ T11] block nbd2: Possible stuck request ffff888026668600: control (read@3072,1024B). Runtime 120 seconds [ 652.641683][ T11] block nbd0: Possible stuck request ffff888026550000: control (read@0,1024B). Runtime 300 seconds [ 652.652409][ T11] block nbd0: Possible stuck request ffff888026550200: control (read@1024,1024B). Runtime 300 seconds [ 652.663456][ T11] block nbd0: Possible stuck request ffff888026550400: control (read@2048,1024B). Runtime 300 seconds [ 652.674675][ T11] block nbd0: Possible stuck request ffff888026550600: control (read@3072,1024B). Runtime 300 seconds [ 673.743472][ T25] block nbd3: Possible stuck request ffff8880266a0000: control (read@0,1024B). Runtime 120 seconds [ 673.754252][ T25] block nbd3: Possible stuck request ffff8880266a0200: control (read@1024,1024B). Runtime 120 seconds [ 673.765215][ T25] block nbd3: Possible stuck request ffff8880266a0400: control (read@2048,1024B). Runtime 120 seconds [ 673.776585][ T25] block nbd3: Possible stuck request ffff8880266a0600: control (read@3072,1024B). Runtime 120 seconds [ 675.701715][ T25] block nbd1: Possible stuck request ffff888026588000: control (read@0,1024B). Runtime 150 seconds [ 675.712498][ T25] block nbd1: Possible stuck request ffff888026588200: control (read@1024,1024B). Runtime 150 seconds [ 675.723910][ T25] block nbd1: Possible stuck request ffff888026588400: control (read@2048,1024B). Runtime 150 seconds [ 675.734883][ T25] block nbd1: Possible stuck request ffff888026588600: control (read@3072,1024B). Runtime 150 seconds [ 678.871920][ T11] block nbd2: Possible stuck request ffff888026668000: control (read@0,1024B). Runtime 150 seconds [ 678.882702][ T11] block nbd2: Possible stuck request ffff888026668200: control (read@1024,1024B). Runtime 150 seconds [ 678.894080][ T11] block nbd2: Possible stuck request ffff888026668400: control (read@2048,1024B). Runtime 150 seconds [ 678.905064][ T11] block nbd2: Possible stuck request ffff888026668600: control (read@3072,1024B). Runtime 150 seconds [ 682.703128][ T11] block nbd0: Possible stuck request ffff888026550000: control (read@0,1024B). Runtime 330 seconds [ 682.713868][ T11] block nbd0: Possible stuck request ffff888026550200: control (read@1024,1024B). Runtime 330 seconds [ 682.724825][ T11] block nbd0: Possible stuck request ffff888026550400: control (read@2048,1024B). Runtime 330 seconds [ 682.735801][ T11] block nbd0: Possible stuck request ffff888026550600: control (read@3072,1024B). Runtime 330 seconds [ 685.263493][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.269955][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.108835][ T51] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 692.116960][ T51] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 692.124683][ T51] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 692.132423][ T51] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 692.139870][ T51] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 692.236056][T16522] chnl_net:caif_netlink_parms(): no params data found [ 692.280432][T16522] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.287590][T16522] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.294829][T16522] bridge_slave_0: entered allmulticast mode [ 692.304749][T16522] bridge_slave_0: entered promiscuous mode [ 692.312365][T16522] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.319429][T16522] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.326983][T16522] bridge_slave_1: entered allmulticast mode [ 692.333726][T16522] bridge_slave_1: entered promiscuous mode [ 692.354178][T16522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.365108][T16522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.388532][T16522] team0: Port device team_slave_0 added [ 692.395763][T16522] team0: Port device team_slave_1 added [ 692.414656][T16522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.421625][T16522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.447535][T16522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.459030][T16522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.466124][T16522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.492199][T16522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.522488][T16522] hsr_slave_0: entered promiscuous mode [ 692.528572][T16522] hsr_slave_1: entered promiscuous mode [ 692.534582][T16522] debugfs: 'hsr0' already exists in 'hsr' [ 692.540278][T16522] Cannot create hsr debugfs directory [ 693.619127][ T51] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 693.627178][ T51] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 693.636333][ T51] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 693.644698][ T51] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 693.652959][ T51] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 693.751048][T16531] chnl_net:caif_netlink_parms(): no params data found [ 693.796222][T16531] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.803442][T16531] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.810592][T16531] bridge_slave_0: entered allmulticast mode [ 693.817372][T16531] bridge_slave_0: entered promiscuous mode [ 693.824547][T16531] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.831960][T16531] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.840320][T16531] bridge_slave_1: entered allmulticast mode [ 693.847175][T16531] bridge_slave_1: entered promiscuous mode [ 693.866536][T16531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.878112][T16531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.898866][T16531] team0: Port device team_slave_0 added [ 693.905985][T16531] team0: Port device team_slave_1 added [ 693.923116][T16531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.930026][T16531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.956509][T16531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.968401][T16531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.975423][T16531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.001981][T16531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.032489][T16531] hsr_slave_0: entered promiscuous mode [ 694.038639][T16531] hsr_slave_1: entered promiscuous mode [ 694.045136][T16531] debugfs: 'hsr0' already exists in 'hsr' [ 694.051714][T16531] Cannot create hsr debugfs directory [ 694.179588][T16454] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 694.189686][T16454] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 694.197510][T16454] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 694.207454][T16454] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 694.215244][T16454] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 694.222702][T16453] Bluetooth: hci15: command tx timeout [ 694.261365][T16454] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 694.269805][T16454] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 694.280259][T16454] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 694.289032][T16454] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 694.297649][T16454] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 694.495110][T16541] chnl_net:caif_netlink_parms(): no params data found [ 694.520624][T16543] chnl_net:caif_netlink_parms(): no params data found [ 694.634318][T16541] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.641438][T16541] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.648759][T16541] bridge_slave_0: entered allmulticast mode [ 694.655484][T16541] bridge_slave_0: entered promiscuous mode [ 694.662849][T16543] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.669914][T16543] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.677450][T16543] bridge_slave_0: entered allmulticast mode [ 694.684161][T16543] bridge_slave_0: entered promiscuous mode [ 694.691338][T16541] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.700087][T16541] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.707692][T16541] bridge_slave_1: entered allmulticast mode [ 694.714480][T16541] bridge_slave_1: entered promiscuous mode [ 694.720854][T16543] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.728057][T16543] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.735358][T16543] bridge_slave_1: entered allmulticast mode [ 694.742223][T16543] bridge_slave_1: entered promiscuous mode [ 694.777278][T16543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.792766][T16541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.803357][T16543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.814013][T16541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.848671][T16543] team0: Port device team_slave_0 added [ 694.855715][T16541] team0: Port device team_slave_0 added [ 694.865205][T16543] team0: Port device team_slave_1 added [ 694.872284][T16541] team0: Port device team_slave_1 added [ 694.904230][T16543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.911171][T16543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.937254][T16543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.948751][T16541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.955753][T16541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.982212][T16541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.993972][T16543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.000886][T16543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.027733][T16543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.039128][T16541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.046239][T16541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.072947][T16541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.118595][T16543] hsr_slave_0: entered promiscuous mode [ 695.124778][T16543] hsr_slave_1: entered promiscuous mode [ 695.130664][T16543] debugfs: 'hsr0' already exists in 'hsr' [ 695.136848][T16543] Cannot create hsr debugfs directory [ 695.152937][T16541] hsr_slave_0: entered promiscuous mode [ 695.159015][T16541] hsr_slave_1: entered promiscuous mode [ 695.165061][T16541] debugfs: 'hsr0' already exists in 'hsr' [ 695.171090][T16541] Cannot create hsr debugfs directory [ 695.742346][T16557] Bluetooth: hci16: command tx timeout [ 696.302651][T14708] Bluetooth: hci15: command tx timeout [ 696.302661][T16557] Bluetooth: hci17: command tx timeout [ 696.381769][T16557] Bluetooth: hci18: command tx timeout [ 697.581674][T16557] Bluetooth: hci7: command 0x0406 tx timeout [ 697.583946][T14708] Bluetooth: hci6: command 0x0406 tx timeout [ 697.591645][T16557] Bluetooth: hci3: command 0x0406 tx timeout [ 697.595724][T14708] Bluetooth: hci8: command 0x0406 tx timeout [ 697.821769][T16451] Bluetooth: hci16: command tx timeout [ 698.118754][ T5824] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 698.127161][ T5824] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 698.135061][ T5824] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 698.144963][ T5824] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 698.152448][ T5824] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 698.251311][T16560] chnl_net:caif_netlink_parms(): no params data found [ 698.296687][T16560] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.304572][T16560] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.311832][T16560] bridge_slave_0: entered allmulticast mode [ 698.318498][T16560] bridge_slave_0: entered promiscuous mode [ 698.326452][T16560] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.333763][T16560] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.340907][T16560] bridge_slave_1: entered allmulticast mode [ 698.348440][T16560] bridge_slave_1: entered promiscuous mode [ 698.368135][T16560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.379401][T16560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.381943][T16451] Bluetooth: hci15: command tx timeout [ 698.388585][ T5824] Bluetooth: hci17: command tx timeout [ 698.412339][T16560] team0: Port device team_slave_0 added [ 698.419354][T16560] team0: Port device team_slave_1 added [ 698.436955][T16560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.443943][T16560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.472725][ T5824] Bluetooth: hci18: command tx timeout [ 698.478205][T16560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.490190][T16560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.497262][T16560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.523182][T16560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.553869][T16560] hsr_slave_0: entered promiscuous mode [ 698.560856][T16560] hsr_slave_1: entered promiscuous mode [ 698.567047][T16560] debugfs: 'hsr0' already exists in 'hsr' [ 698.572837][T16560] Cannot create hsr debugfs directory [ 699.901829][ T5824] Bluetooth: hci16: command tx timeout [ 700.221728][ T5824] Bluetooth: hci19: command tx timeout [ 700.461843][ T5824] Bluetooth: hci15: command tx timeout [ 700.461848][T16451] Bluetooth: hci17: command tx timeout [ 700.551843][ T5824] Bluetooth: hci18: command tx timeout [ 701.991739][T16451] Bluetooth: hci16: command tx timeout [ 702.311749][T16451] Bluetooth: hci19: command tx timeout [ 702.551621][T16451] Bluetooth: hci17: command tx timeout [ 702.622013][T16451] Bluetooth: hci18: command tx timeout [ 702.701664][T16451] Bluetooth: hci9: command 0x0406 tx timeout [ 703.822318][ T25] block nbd3: Possible stuck request ffff8880266a0000: control (read@0,1024B). Runtime 150 seconds [ 703.833295][ T25] block nbd3: Possible stuck request ffff8880266a0200: control (read@1024,1024B). Runtime 150 seconds [ 703.844279][ T25] block nbd3: Possible stuck request ffff8880266a0400: control (read@2048,1024B). Runtime 150 seconds [ 703.855233][ T25] block nbd3: Possible stuck request ffff8880266a0600: control (read@3072,1024B). Runtime 150 seconds [ 704.381686][ T5824] Bluetooth: hci19: command tx timeout [ 705.716249][ T5188] udevd[5188]: worker [12088] /devices/virtual/block/nbd1 timeout; kill it [ 705.725348][ T5188] udevd[5188]: seq 16462 '/devices/virtual/block/nbd1' killed [ 705.744722][ T25] block nbd1: Possible stuck request ffff888026588000: control (read@0,1024B). Runtime 180 seconds [ 705.755444][ T25] block nbd1: Possible stuck request ffff888026588200: control (read@1024,1024B). Runtime 180 seconds [ 705.766440][ T25] block nbd1: Possible stuck request ffff888026588400: control (read@2048,1024B). Runtime 180 seconds [ 705.777395][ T25] block nbd1: Possible stuck request ffff888026588600: control (read@3072,1024B). Runtime 180 seconds [ 706.461748][ T5824] Bluetooth: hci19: command tx timeout [ 708.302168][ T31] INFO: task dhcpcd:5482 blocked for more than 143 seconds. [ 708.309483][ T31] Tainted: G L syzkaller #0 [ 708.318037][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 708.326759][ T31] task:dhcpcd state:D stack:24696 pid:5482 tgid:5482 ppid:1 task_flags:0x400140 flags:0x00080000 [ 708.338777][ T31] Call Trace: [ 708.342141][ T31] [ 708.345062][ T31] ? __schedule+0xf65/0x5e10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 708.349627][ T31] __schedule+0xfe4/0x5e10 [ 708.354169][ T31] ? __lock_acquire+0x499/0x2690 [ 708.359120][ T31] ? find_held_lock+0x2b/0x80 [ 708.364028][ T31] ? __pfx___schedule+0x10/0x10 [ 708.368881][ T31] ? find_held_lock+0x2b/0x80 [ 708.391602][ T31] ? schedule+0x2bf/0x390 [ 708.395967][ T31] schedule+0xdd/0x390 [ 708.400032][ T31] schedule_preempt_disabled+0x13/0x30 [ 708.416362][ T31] __mutex_lock+0xc9a/0x1b90 [ 708.420981][ T31] ? genl_rcv_msg+0x57b/0x800 [ 708.429632][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 708.434815][ T31] ? kasan_save_stack+0x3f/0x50 [ 708.439655][ T31] ? kasan_save_stack+0x30/0x50 [ 708.444550][ T31] ? netlink_alloc_large_skb+0x69/0x150 [ 708.450092][ T31] ? netlink_sendmsg+0x680/0xda0 [ 708.455059][ T31] ? ____sys_sendmsg+0xa54/0xc30 [ 708.459982][ T31] ? ___sys_sendmsg+0x190/0x1e0 [ 708.464990][ T31] ? __sys_sendmsg+0x170/0x220 [ 708.469834][ T31] ? do_syscall_64+0xc9/0xf80 [ 708.474547][ T31] ? __radix_tree_lookup+0x217/0x2b0 [ 708.479823][ T31] ? genl_rcv_msg+0x57b/0x800 [ 708.484840][ T31] genl_rcv_msg+0x57b/0x800 [ 708.489341][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 708.494400][ T31] ? __lock_acquire+0x499/0x2690 [ 708.499333][ T31] ? __lock_acquire+0x499/0x2690 [ 708.504325][ T31] netlink_rcv_skb+0x159/0x420 [ 708.509086][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 708.514337][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 708.519610][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 708.524994][ T31] genl_rcv+0x28/0x40 [ 708.528969][ T31] netlink_unicast+0x5aa/0x870 [ 708.533775][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 708.539071][ T31] netlink_sendmsg+0x8b0/0xda0 [ 708.544162][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 708.549438][ T31] ____sys_sendmsg+0xa54/0xc30 [ 708.554210][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 708.559495][ T31] ? netdev_run_todo+0x84c/0x12c0 [ 708.564567][ T31] ___sys_sendmsg+0x190/0x1e0 [ 708.569240][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 708.574475][ T31] ? full_name_hash+0xbc/0x100 [ 708.579256][ T31] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 708.585261][ T31] ? __seccomp_filter+0x89d/0x1140 [ 708.590383][ T31] __sys_sendmsg+0x170/0x220 [ 708.595033][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 708.600169][ T31] ? __secure_computing+0x201/0x2e0 [ 708.605398][ T31] do_syscall_64+0xc9/0xf80 [ 708.609895][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.615828][ T31] RIP: 0033:0x7f45ffc1b407 [ 708.620231][ T31] RSP: 002b:00007ffdf01e9090 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 708.628886][ T31] RAX: ffffffffffffffda RBX: 00007f45ffb91740 RCX: 00007f45ffc1b407 [ 708.636913][ T31] RDX: 0000000000000000 RSI: 00007ffdf01e9110 RDI: 000000000000000e [ 708.644908][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 708.652874][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055d41091be10 [ 708.660832][ T31] R13: 000000000000000e R14: 00007ffdf01fd5d0 R15: 000055d438822840 [ 708.668882][ T31] [ 708.671963][ T31] INFO: task syz.0.3242:16364 blocked for more than 143 seconds. [ 708.679673][ T31] Tainted: G L syzkaller #0 [ 708.686260][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 708.695265][ T31] task:syz.0.3242 state:D stack:27000 pid:16364 tgid:16363 ppid:14952 task_flags:0x480140 flags:0x00080002 [ 708.707330][ T31] Call Trace: [ 708.710624][ T31] [ 708.713572][ T31] ? __schedule+0xf65/0x5e10 [ 708.718153][ T31] __schedule+0xfe4/0x5e10 [ 708.722596][ T31] ? __lock_acquire+0x499/0x2690 [ 708.727537][ T31] ? __pfx___schedule+0x10/0x10 [ 708.732596][ T31] ? find_held_lock+0x2b/0x80 [ 708.737267][ T31] ? schedule+0x2bf/0x390 [ 708.737320][ T5188] udevd[5188]: worker [12951] /devices/virtual/block/nbd2 timeout; kill it [ 708.741655][ T31] schedule+0xdd/0x390 [ 708.752218][ T5188] udevd[5188]: seq 16515 '/devices/virtual/block/nbd2' killed [ 708.754347][ T31] blk_mq_freeze_queue_wait+0x14a/0x1b0 [ 708.767249][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 708.773366][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 708.779429][ T31] queue_limits_commit_update_frozen+0x60/0xd0 [ 708.785939][ T31] nbd_set_size+0x4cd/0x720 [ 708.790722][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 708.795810][ T31] ? __asan_memcpy+0x3c/0x60 [ 708.800397][ T31] nbd_genl_size_set+0x2ab/0x3d0 [ 708.805413][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 708.810875][ T31] ? bpf_lsm_capable+0x9/0x10 [ 708.816110][ T31] ? __radix_tree_lookup+0x217/0x2b0 [ 708.821388][ T31] nbd_genl_reconfigure+0x548/0x1a00 [ 708.826719][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 708.833590][ T31] ? rcu_is_watching+0x12/0xc0 [ 708.838325][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 708.845435][ T31] ? trace_kmalloc+0x83/0xb0 [ 708.850006][ T31] ? __kmalloc_noprof+0x365/0x9c0 [ 708.855065][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 708.860775][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 708.867979][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 708.875003][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 708.880544][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 708.886629][ T31] ? genl_get_cmd+0x3ef/0x720 [ 708.891305][ T31] ? __sys_sendmsg+0x170/0x220 [ 708.896533][ T31] ? do_syscall_64+0xc9/0xf80 [ 708.901195][ T31] ? __radix_tree_lookup+0x217/0x2b0 [ 708.906538][ T31] genl_rcv_msg+0x560/0x800 [ 708.911031][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 708.916086][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 708.921922][ T31] ? __lock_acquire+0x499/0x2690 [ 708.926858][ T31] netlink_rcv_skb+0x159/0x420 [ 708.931672][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 708.936691][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 708.951073][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 708.956593][ T31] genl_rcv+0x28/0x40 [ 708.960561][ T31] netlink_unicast+0x5aa/0x870 [ 708.965557][ T11] block nbd2: Possible stuck request ffff888026668000: control (read@0,1024B). Runtime 180 seconds [ 708.976267][ T11] block nbd2: Possible stuck request ffff888026668200: control (read@1024,1024B). Runtime 180 seconds [ 708.987248][ T11] block nbd2: Possible stuck request ffff888026668400: control (read@2048,1024B). Runtime 180 seconds [ 708.998498][ T11] block nbd2: Possible stuck request ffff888026668600: control (read@3072,1024B). Runtime 180 seconds [ 709.009521][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 709.014838][ T31] netlink_sendmsg+0x8b0/0xda0 [ 709.019598][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.025049][ T31] ? __might_fault+0x30/0x140 [ 709.029732][ T31] ____sys_sendmsg+0xa54/0xc30 [ 709.034615][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 709.039890][ T31] ? __pfx___futex_wait+0x10/0x10 [ 709.044977][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 709.050266][ T31] ___sys_sendmsg+0x190/0x1e0 [ 709.054985][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 709.060178][ T31] ? find_held_lock+0x2b/0x80 [ 709.064922][ T31] __sys_sendmsg+0x170/0x220 [ 709.069512][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 709.074881][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 709.079837][ T31] do_syscall_64+0xc9/0xf80 [ 709.084399][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.090282][ T31] RIP: 0033:0x7f728219acb9 [ 709.094701][ T31] RSP: 002b:00007f728302a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 709.103451][ T31] RAX: ffffffffffffffda RBX: 00007f7282415fa0 RCX: 00007f728219acb9 [ 709.111415][ T31] RDX: 0000000000004000 RSI: 0000200000000680 RDI: 0000000000000006 [ 709.119418][ T31] RBP: 00007f7282208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 709.127391][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 709.135397][ T31] R13: 00007f7282416038 R14: 00007f7282415fa0 R15: 00007ffdd616dce8 [ 709.143391][ T31] [ 709.146396][ T31] INFO: task syz.4.3243:16375 blocked for more than 144 seconds. [ 709.154167][ T31] Tainted: G L syzkaller #0 [ 709.160656][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 709.169341][ T31] task:syz.4.3243 state:D stack:26856 pid:16375 tgid:16365 ppid:5816 task_flags:0x400140 flags:0x00080002 [ 709.181250][ T31] Call Trace: [ 709.185289][ T31] [ 709.188236][ T31] ? __schedule+0xf65/0x5e10 [ 709.192868][ T31] __schedule+0xfe4/0x5e10 [ 709.197278][ T31] ? __lock_acquire+0x499/0x2690 [ 709.202697][ T31] ? __pfx___schedule+0x10/0x10 [ 709.207548][ T31] ? find_held_lock+0x2b/0x80 [ 709.212280][ T31] ? schedule+0x2bf/0x390 [ 709.216604][ T31] schedule+0xdd/0x390 [ 709.220643][ T31] schedule_preempt_disabled+0x13/0x30 [ 709.226137][ T31] __mutex_lock+0xc9a/0x1b90 [ 709.230718][ T31] ? finish_task_switch.isra.0+0x204/0xb70 [ 709.236546][ T31] ? genl_rcv_msg+0x57b/0x800 [ 709.241214][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 709.246248][ T31] ? __radix_tree_lookup+0x217/0x2b0 [ 709.251563][ T31] ? genl_rcv_msg+0x57b/0x800 [ 709.256225][ T31] genl_rcv_msg+0x57b/0x800 [ 709.260698][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 709.265936][ T31] ? irqentry_exit+0x180/0x670 [ 709.270701][ T31] netlink_rcv_skb+0x159/0x420 [ 709.275502][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 709.280516][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 709.285863][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 709.291139][ T31] ? __rcu_read_unlock+0x24d/0x550 [ 709.296452][ T31] genl_rcv+0x28/0x40 [ 709.300408][ T31] netlink_unicast+0x5aa/0x870 [ 709.305566][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 709.310873][ T31] netlink_sendmsg+0x8b0/0xda0 [ 709.315670][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.320953][ T31] __sys_sendto+0x4aa/0x520 [ 709.325515][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 709.330542][ T31] ? __schedule+0xf65/0x5e10 [ 709.335183][ T31] ? __schedule+0xff6/0x5e10 [ 709.339789][ T31] ? __pfx___sys_socket+0x10/0x10 [ 709.346840][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 709.351643][ T31] ? do_syscall_64+0x94/0xf80 [ 709.356311][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 709.361487][ T31] do_syscall_64+0xc9/0xf80 [ 709.366016][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.371911][ T31] RIP: 0033:0x7f8c2e75b58e [ 709.376297][ T31] RSP: 002b:00007f8c2f58ee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 709.384770][ T31] RAX: ffffffffffffffda RBX: 00007f8c2f5906c0 RCX: 00007f8c2e75b58e [ 709.392769][ T31] RDX: 0000000000000020 RSI: 00007f8c2f58f000 RDI: 000000000000000d [ 709.400723][ T31] RBP: 0000000000000000 R08: 00007f8c2f58ef04 R09: 000000000000000c [ 709.409348][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 709.417395][ T31] R13: 00007f8c2f58ef58 R14: 00007f8c2f58f000 R15: 0000000000000000 [ 709.425434][ T31] [ 709.428445][ T31] INFO: task syz.1.3250:16390 blocked for more than 144 seconds. [ 709.437884][ T31] Tainted: G L syzkaller #0 [ 709.444408][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 709.453112][ T31] task:syz.1.3250 state:D stack:28728 pid:16390 tgid:16389 ppid:14705 task_flags:0x400140 flags:0x00080002 [ 709.465034][ T31] Call Trace: [ 709.468304][ T31] [ 709.471232][ T31] ? __schedule+0xf65/0x5e10 [ 709.475853][ T31] __schedule+0xfe4/0x5e10 [ 709.480244][ T31] ? __lock_acquire+0x499/0x2690 [ 709.485191][ T31] ? find_held_lock+0x2b/0x80 [ 709.489859][ T31] ? __pfx___schedule+0x10/0x10 [ 709.494734][ T31] ? find_held_lock+0x2b/0x80 [ 709.499402][ T31] ? schedule+0x2bf/0x390 [ 709.504009][ T31] schedule+0xdd/0x390 [ 709.508348][ T31] schedule_preempt_disabled+0x13/0x30 [ 709.514084][ T31] __mutex_lock+0xc9a/0x1b90 [ 709.518657][ T31] ? genl_rcv_msg+0x57b/0x800 [ 709.523360][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 709.528379][ T31] ? kasan_save_stack+0x3f/0x50 [ 709.533246][ T31] ? kasan_save_stack+0x30/0x50 [ 709.538086][ T31] ? netlink_alloc_large_skb+0x69/0x150 [ 709.543642][ T31] ? netlink_sendmsg+0x680/0xda0 [ 709.548582][ T31] ? __sys_sendto+0x4aa/0x520 [ 709.553272][ T31] ? __x64_sys_sendto+0xe0/0x1c0 [ 709.558218][ T31] ? do_syscall_64+0xc9/0xf80 [ 709.562931][ T31] ? __radix_tree_lookup+0x217/0x2b0 [ 709.568208][ T31] ? genl_rcv_msg+0x57b/0x800 [ 709.572896][ T31] genl_rcv_msg+0x57b/0x800 [ 709.577401][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 709.582728][ T31] ? __lock_acquire+0x499/0x2690 [ 709.587665][ T31] ? __lock_acquire+0x499/0x2690 [ 709.592640][ T31] netlink_rcv_skb+0x159/0x420 [ 709.597405][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 709.602454][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 709.607740][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 709.613389][ T31] genl_rcv+0x28/0x40 [ 709.617364][ T31] netlink_unicast+0x5aa/0x870 [ 709.622369][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 709.627639][ T31] netlink_sendmsg+0x8b0/0xda0 [ 709.632421][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.637718][ T31] __sys_sendto+0x4aa/0x520 [ 709.642235][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 709.647264][ T31] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 709.653704][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 709.658460][ T31] ? do_syscall_64+0x94/0xf80 [ 709.663214][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 709.668420][ T31] do_syscall_64+0xc9/0xf80 [ 709.672952][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.678835][ T31] RIP: 0033:0x7efde875b58e [ 709.683273][ T31] RSP: 002b:00007efde971de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 709.691701][ T31] RAX: ffffffffffffffda RBX: 00007efde971f6c0 RCX: 00007efde875b58e [ 709.699656][ T31] RDX: 000000000000001c RSI: 00007efde971e000 RDI: 0000000000000003 [ 709.707651][ T31] RBP: 0000000000000000 R08: 00007efde971df04 R09: 000000000000000c [ 709.716659][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 709.724689][ T31] R13: 00007efde971df58 R14: 00007efde971e000 R15: 0000000000000000 [ 709.732934][ T31] [ 709.735957][ T31] INFO: task syz.2.3253:16398 blocked for more than 144 seconds. [ 709.743730][ T31] Tainted: G L syzkaller #0 [ 709.750211][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 709.758897][ T31] task:syz.2.3253 state:D stack:27256 pid:16398 tgid:16397 ppid:15286 task_flags:0x400040 flags:0x00080002 [ 709.770843][ T31] Call Trace: [ 709.774144][ T31] [ 709.777063][ T31] ? __schedule+0xf65/0x5e10 [ 709.781672][ T31] __schedule+0xfe4/0x5e10 [ 709.786077][ T31] ? __lock_acquire+0x499/0x2690 [ 709.790997][ T31] ? __pfx___schedule+0x10/0x10 [ 709.795861][ T31] ? find_held_lock+0x2b/0x80 [ 709.800538][ T31] ? schedule+0x2bf/0x390 [ 709.804883][ T31] schedule+0xdd/0x390 [ 709.808941][ T31] schedule_preempt_disabled+0x13/0x30 [ 709.814758][ T31] __mutex_lock+0xc9a/0x1b90 [ 709.819372][ T31] ? genl_rcv_msg+0x57b/0x800 [ 709.824127][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 709.829142][ T31] ? consume_skb+0xd6/0x110 [ 709.833684][ T31] ? find_held_lock+0x2b/0x80 [ 709.838358][ T31] ? __dev_queue_xmit+0x7dc/0x46f0 [ 709.843665][ T31] ? __local_bh_enable_ip+0x9e/0x120 [ 709.848928][ T31] ? __dev_queue_xmit+0x7dc/0x46f0 [ 709.854070][ T31] ? __dev_queue_xmit+0x7fd/0x46f0 [ 709.859174][ T31] ? __radix_tree_lookup+0x217/0x2b0 [ 709.864484][ T31] ? genl_rcv_msg+0x57b/0x800 [ 709.869153][ T31] genl_rcv_msg+0x57b/0x800 [ 709.873702][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 709.878715][ T31] ? __lock_acquire+0x499/0x2690 [ 709.883699][ T31] netlink_rcv_skb+0x159/0x420 [ 709.888522][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 709.893577][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 709.898867][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 709.904204][ T31] genl_rcv+0x28/0x40 [ 709.908174][ T31] netlink_unicast+0x5aa/0x870 [ 709.913049][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 709.918614][ T31] netlink_sendmsg+0x8b0/0xda0 [ 709.923464][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.928744][ T31] ? __might_fault+0x30/0x140 [ 709.933452][ T31] ____sys_sendmsg+0xa54/0xc30 [ 709.938206][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 709.943511][ T31] ? __pfx___futex_wait+0x10/0x10 [ 709.948529][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 709.954107][ T31] ___sys_sendmsg+0x190/0x1e0 [ 709.958778][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 709.964038][ T31] ? find_held_lock+0x2b/0x80 [ 709.968715][ T31] __sys_sendmsg+0x170/0x220 [ 709.973325][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 709.978430][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 709.984554][ T31] do_syscall_64+0xc9/0xf80 [ 709.989049][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.994990][ T31] RIP: 0033:0x7fa4d859acb9 [ 709.999391][ T31] RSP: 002b:00007fa4d67f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 710.007844][ T31] RAX: ffffffffffffffda RBX: 00007fa4d8815fa0 RCX: 00007fa4d859acb9 [ 710.015842][ T31] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 710.024171][ T31] RBP: 00007fa4d8608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 710.032155][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.040113][ T31] R13: 00007fa4d8816038 R14: 00007fa4d8815fa0 R15: 00007ffeaef24e88 [ 710.048102][ T31] [ 710.051115][ T31] INFO: task syz.5.3264:16426 blocked for more than 145 seconds. [ 710.058868][ T31] Tainted: G L syzkaller #0 [ 710.065738][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 710.074438][ T31] task:syz.5.3264 state:D stack:26936 pid:16426 tgid:16425 ppid:12584 task_flags:0x400140 flags:0x00080002 [ 710.086371][ T31] Call Trace: [ 710.089624][ T31] [ 710.092629][ T31] ? __schedule+0xf65/0x5e10 [ 710.097210][ T31] __schedule+0xfe4/0x5e10 [ 710.101688][ T31] ? __lock_acquire+0x499/0x2690 [ 710.106638][ T31] ? __pfx___schedule+0x10/0x10 [ 710.111479][ T31] ? find_held_lock+0x2b/0x80 [ 710.116212][ T31] ? schedule+0x2bf/0x390 [ 710.120993][ T31] schedule+0xdd/0x390 [ 710.125089][ T31] schedule_preempt_disabled+0x13/0x30 [ 710.130539][ T31] __mutex_lock+0xc9a/0x1b90 [ 710.135156][ T31] ? netdev_pick_tx+0x4ab/0xe50 [ 710.140019][ T31] ? genl_rcv_msg+0x57b/0x800 [ 710.144729][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 710.149747][ T31] ? find_held_lock+0x2b/0x80 [ 710.154444][ T31] ? __local_bh_enable_ip+0x9e/0x120 [ 710.159721][ T31] ? __dev_queue_xmit+0x7dc/0x46f0 [ 710.164878][ T31] ? __dev_queue_xmit+0x7fd/0x46f0 [ 710.169977][ T31] ? __radix_tree_lookup+0x217/0x2b0 [ 710.175476][ T31] ? genl_rcv_msg+0x57b/0x800 [ 710.180127][ T31] genl_rcv_msg+0x57b/0x800 [ 710.184641][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 710.189653][ T31] ? __lock_acquire+0x499/0x2690 [ 710.194614][ T31] netlink_rcv_skb+0x159/0x420 [ 710.199384][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 710.204416][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 710.209701][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 710.215025][ T31] genl_rcv+0x28/0x40 [ 710.218992][ T31] netlink_unicast+0x5aa/0x870 [ 710.224655][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 710.229955][ T31] netlink_sendmsg+0x8b0/0xda0 [ 710.234760][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 710.240058][ T31] __sys_sendto+0x4aa/0x520 [ 710.244609][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 710.249641][ T31] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 710.256115][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 710.260872][ T31] ? do_syscall_64+0x94/0xf80 [ 710.265563][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 710.270752][ T31] do_syscall_64+0xc9/0xf80 [ 710.275279][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.281164][ T31] RIP: 0033:0x7fa0abf5b58e [ 710.285812][ T31] RSP: 002b:00007fa0ace56e58 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 710.294266][ T31] RAX: ffffffffffffffda RBX: 00007fa0ace586c0 RCX: 00007fa0abf5b58e [ 710.302334][ T31] RDX: 0000000000000028 RSI: 00007fa0ace56fe0 RDI: 000000000000000b [ 710.310279][ T31] RBP: 0000000000000000 R08: 00007fa0ace56ed4 R09: 000000000000000c [ 710.318295][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 710.326592][ T31] R13: 00007fa0ace56f28 R14: 00007fa0ace56fe0 R15: 0000000000000000 [ 710.334615][ T31] [ 710.337671][ T31] [ 710.337671][ T31] Showing all locks held in the system: [ 710.345445][ T31] 1 lock held by khungtaskd/31: [ 710.350305][ T31] #0: ffffffff8e3ca3a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 710.360192][ T31] 2 locks held by dhcpcd/5482: [ 710.364981][ T31] #0: ffffffff901feef0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.373189][ T31] #1: ffffffff901fefa8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 710.384689][ T31] 2 locks held by getty/5571: [ 710.389344][ T31] #0: ffff88814de940a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 710.399347][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 710.409486][ T31] 1 lock held by udevd/11854: [ 710.414173][ T31] #0: ffff8881423df358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 710.423490][ T31] 1 lock held by udevd/11992: [ 710.428531][ T31] #0: ffff8880264d5358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 710.437901][ T31] 1 lock held by udevd/12088: [ 710.442578][ T31] #0: ffff888025f1e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 710.451913][ T31] 1 lock held by udevd/12951: [ 710.456570][ T31] #0: ffff8880264d3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 710.465904][ T31] 6 locks held by syz.0.3242/16364: [ 710.471082][ T31] #0: ffffffff901feef0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.479270][ T31] #1: ffffffff901fefa8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 710.488259][ T31] #2: ffff8880264af278 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4a7/0x1a00 [ 710.498630][ T31] #3: ffff8881423cc978 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2a5/0x720 [ 710.508261][ T31] #4: ffff8881423cc318 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 710.519965][ T31] #5: ffff8881423cc350 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 710.532363][ T31] 2 locks held by syz.4.3243/16375: [ 710.537558][ T31] #0: ffffffff901feef0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.546009][ T31] #1: ffffffff901fefa8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 710.555011][ T31] 2 locks held by syz.1.3250/16390: [ 710.560193][ T31] #0: ffffffff901feef0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.568398][ T31] #1: ffffffff901fefa8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 710.577405][ T31] 2 locks held by syz.2.3253/16398: [ 710.582607][ T31] #0: ffffffff901feef0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.590789][ T31] #1: ffffffff901fefa8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 710.599781][ T31] 2 locks held by syz.5.3264/16426: [ 710.604983][ T31] #0: ffffffff901feef0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.613353][ T31] #1: ffffffff901fefa8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 710.622544][ T31] 2 locks held by syz-executor/16429: [ 710.627888][ T31] #0: ffffffff901feef0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.636461][ T31] #1: ffffffff901fefa8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 710.645477][ T31] 2 locks held by syz-executor/16438: [ 710.650827][ T31] #0: ffffffff901feef0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.659034][ T31] #1: ffffffff901fefa8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 710.668032][ T31] 2 locks held by syz-executor/16448: [ 710.673457][ T31] #0: ffffffff901feef0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.681690][ T31] #1: ffffffff901fefa8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 710.690636][ T31] 2 locks held by syz-executor/16450: [ 710.696014][ T31] #0: ffffffff901feef0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.704268][ T31] #1: ffffffff901fefa8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 710.713251][ T31] 2 locks held by syz-executor/16468: [ 710.718605][ T31] #0: ffffffff901feef0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.726996][ T31] #1: ffffffff901fefa8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 710.736256][ T31] 2 locks held by syz-executor/16477: [ 710.741653][ T31] #0: ffffffff901feef0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.749827][ T31] #1: ffffffff901fefa8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 710.758812][ T31] 2 locks held by syz-executor/16486: [ 710.764184][ T31] #0: ffffffff901feef0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.772353][ T31] #1: ffffffff901fefa8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 710.781312][ T31] 2 locks held by syz-executor/16496: [ 710.786711][ T31] #0: ffffffff901feef0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.794916][ T31] #1: ffffffff901fefa8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 710.803898][ T31] 2 locks held by syz-executor/16498: [ 710.809253][ T31] #0: ffffffff901feef0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.817467][ T31] #1: ffffffff901fefa8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 710.826470][ T31] 2 locks held by syz-executor/16513: [ 710.832097][ T31] #0: ffffffff901feef0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.840570][ T31] #1: ffffffff901fefa8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 710.849599][ T31] 2 locks held by syz-executor/16522: [ 710.854973][ T31] #0: ffffffff901feef0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.863420][ T31] #1: ffffffff901fefa8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 710.872402][ T31] 2 locks held by syz-executor/16531: [ 710.877753][ T31] #0: ffffffff901feef0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.885935][ T31] #1: ffffffff901fefa8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 710.894926][ T31] 2 locks held by syz-executor/16541: [ 710.900266][ T31] #0: ffffffff901feef0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.908466][ T31] #1: ffffffff901fefa8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 710.917448][ T31] 2 locks held by syz-executor/16543: [ 710.922832][ T31] #0: ffffffff901feef0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.931003][ T31] #1: ffffffff901fefa8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 710.940357][ T31] 2 locks held by syz-executor/16560: [ 710.945999][ T31] #0: ffffffff901feef0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.954244][ T31] #1: ffffffff901fefa8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 710.963258][ T31] [ 710.965566][ T31] ============================================= [ 710.965566][ T31] [ 710.973982][ T31] NMI backtrace for cpu 0 [ 710.973996][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 710.974019][ T31] Tainted: [L]=SOFTLOCKUP [ 710.974024][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 710.974034][ T31] Call Trace: [ 710.974040][ T31] [ 710.974046][ T31] dump_stack_lvl+0x100/0x190 [ 710.974069][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 710.974090][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 710.974115][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 710.974144][ T31] sys_info+0x141/0x190 [ 710.974165][ T31] watchdog+0xcc3/0xfe0 [ 710.974194][ T31] ? __pfx_watchdog+0x10/0x10 [ 710.974215][ T31] ? __kthread_parkme+0x18c/0x230 [ 710.974239][ T31] ? __pfx_watchdog+0x10/0x10 [ 710.974260][ T31] ? __pfx_watchdog+0x10/0x10 [ 710.974278][ T31] kthread+0x3b3/0x730 [ 710.974304][ T31] ? __pfx_kthread+0x10/0x10 [ 710.974332][ T31] ? ret_from_fork+0x79/0xaf0 [ 710.974357][ T31] ? ret_from_fork+0x79/0xaf0 [ 710.974384][ T31] ? rcu_is_watching+0x12/0xc0 [ 710.974403][ T31] ? __pfx_kthread+0x10/0x10 [ 710.974429][ T31] ret_from_fork+0x754/0xaf0 [ 710.974456][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 710.974483][ T31] ? __switch_to+0x7b9/0x10c0 [ 710.974503][ T31] ? __pfx_kthread+0x10/0x10 [ 710.974528][ T31] ret_from_fork_asm+0x1a/0x30 [ 710.974562][ T31] [ 710.974569][ T31] Sending NMI from CPU 0 to CPUs 1: [ 711.118699][ C1] NMI backtrace for cpu 1 [ 711.118714][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 711.118733][ C1] Tainted: [L]=SOFTLOCKUP [ 711.118737][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 711.118745][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 711.118765][ C1] Code: 36 6b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 3b 17 00 fb f4 fc 34 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 711.118777][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 000002c2 [ 711.118789][ C1] RAX: 00000000019a1b21 RBX: ffff88801daaa4c0 RCX: ffffffff8b7324b5 [ 711.118798][ C1] RDX: 0000000000000000 RSI: ffffffff8db39b4c RDI: ffffffff8bf2fb20 [ 711.118807][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a673d [ 711.118814][ C1] R10: ffff8880b85339eb R11: 0000000000000000 R12: ffffed1003b55498 [ 711.118823][ C1] R13: 0000000000000001 R14: ffffffff908a5dd0 R15: 0000000000000000 [ 711.118831][ C1] FS: 0000000000000000(0000) GS:ffff8881249c5000(0000) knlGS:0000000000000000 [ 711.118845][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 711.118854][ C1] CR2: 00007ffd4c07df4c CR3: 000000000e186000 CR4: 00000000003526f0 [ 711.118863][ C1] Call Trace: [ 711.118868][ C1] [ 711.118873][ C1] default_idle+0x13/0x20 [ 711.118889][ C1] default_idle_call+0x6c/0xb0 [ 711.118905][ C1] do_idle+0x35b/0x4b0 [ 711.118921][ C1] ? __pfx_do_idle+0x10/0x10 [ 711.118937][ C1] cpu_startup_entry+0x4f/0x60 [ 711.118952][ C1] start_secondary+0x21d/0x2d0 [ 711.118970][ C1] ? __pfx_start_secondary+0x10/0x10 [ 711.118989][ C1] common_startup_64+0x13e/0x148 [ 711.119009][ C1] [ 711.290794][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 711.297640][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 711.308282][ T31] Tainted: [L]=SOFTLOCKUP [ 711.312577][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 711.322600][ T31] Call Trace: [ 711.325848][ T31] [ 711.328750][ T31] dump_stack_lvl+0x100/0x190 [ 711.333403][ T31] vpanic+0x20d/0x630 [ 711.337354][ T31] panic+0xd1/0xd1 [ 711.341041][ T31] ? __pfx_panic+0x10/0x10 [ 711.345425][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 711.351564][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 711.357711][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 711.363846][ T31] ? watchdog.cold+0x198/0x1ca [ 711.368581][ T31] ? watchdog+0xcd3/0xfe0 [ 711.372881][ T31] watchdog.cold+0x1a9/0x1ca [ 711.377446][ T31] ? __pfx_watchdog+0x10/0x10 [ 711.382093][ T31] ? __kthread_parkme+0x18c/0x230 [ 711.387088][ T31] ? __pfx_watchdog+0x10/0x10 [ 711.391735][ T31] ? __pfx_watchdog+0x10/0x10 [ 711.396382][ T31] kthread+0x3b3/0x730 [ 711.400424][ T31] ? __pfx_kthread+0x10/0x10 [ 711.404985][ T31] ? ret_from_fork+0x79/0xaf0 [ 711.409647][ T31] ? ret_from_fork+0x79/0xaf0 [ 711.414297][ T31] ? rcu_is_watching+0x12/0xc0 [ 711.419031][ T31] ? __pfx_kthread+0x10/0x10 [ 711.423595][ T31] ret_from_fork+0x754/0xaf0 [ 711.428168][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 711.433254][ T31] ? __switch_to+0x7b9/0x10c0 [ 711.437899][ T31] ? __pfx_kthread+0x10/0x10 [ 711.442461][ T31] ret_from_fork_asm+0x1a/0x30 [ 711.447204][ T31] [ 711.450509][ T31] Kernel Offset: disabled [ 711.454817][ T31] Rebooting in 86400 seconds..