last executing test programs: 7m27.959450762s ago: executing program 1 (id=2167): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000010000104000002000004000000000000", @ANYBLOB="8b90000010e3040008000500", @ANYRES32=r1, @ANYBLOB="2400128009000100766c616e00000000140002800600010004000000040004800400038008000a00", @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 7m27.943507656s ago: executing program 0 (id=2169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)='T', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="140000"], 0x18}, 0x0) recvmsg$unix(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/230, 0xe6}], 0x1}, 0x0) 7m27.803873881s ago: executing program 0 (id=2170): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000d40)='<', 0x1, 0x4000800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000d00)}, 0x2}], 0x1, 0x22, 0x0) 7m27.802769692s ago: executing program 1 (id=2171): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xa) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000c80)={&(0x7f0000000540)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}, 0x3}}, 0x10, 0x0}, 0x4000001) 7m27.685883155s ago: executing program 1 (id=2172): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x400}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x30) 7m27.639399912s ago: executing program 0 (id=2174): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e000000000000000c00", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x31) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, 0x0}, 0x20) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000040)=""/28, &(0x7f0000000100)=0x1c) r3 = gettid() r4 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008", @ANYRES32=r3, @ANYBLOB="140003002e"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 7m27.399015169s ago: executing program 0 (id=2177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "cc"}]}], {0x14}}, 0x8c}}, 0x0) 7m27.218736127s ago: executing program 0 (id=2180): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180), 0x48) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(0xffffffffffffffff) socketpair(0x1e, 0x80005, 0x0, 0x0) 7m26.959524925s ago: executing program 0 (id=2183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f00000003c0), &(0x7f0000000400)=r3}, 0x20) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd63"], 0x3e) 7m15.887419131s ago: executing program 1 (id=2189): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, &(0x7f0000000340)=0x3, 0x4) r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000a00)={{}, "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"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd030000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) close(0x3) 7m15.847701588s ago: executing program 1 (id=2191): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x4801}, 0x0) 7m15.772015843s ago: executing program 1 (id=2192): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 7m11.144173839s ago: executing program 32 (id=2183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f00000003c0), &(0x7f0000000400)=r3}, 0x20) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd63"], 0x3e) 7m0.711062058s ago: executing program 33 (id=2192): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 6m29.710694331s ago: executing program 2 (id=2284): bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r1, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40480d4) 6m29.665553641s ago: executing program 2 (id=2285): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xffffffffffffffda}, 0x0}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r7, 0xae80, 0x0) setitimer(0x2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0xc, 0x0, 0x4], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x800, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r8 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f00000003c0)=0x202, 0x12) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x1ff) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3c}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000000}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x3c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0xb7, 0x9}}, 0xe8) 6m27.167495896s ago: executing program 2 (id=2291): socket(0x1d, 0x2, 0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x3, 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 6m26.186203821s ago: executing program 2 (id=2295): setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) io_uring_setup(0x2f04, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0xc002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff0002000000000000000000000600000004"], 0xfc}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 6m25.080569984s ago: executing program 2 (id=2296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000a00)={{}, "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"}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd030000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) close(0x3) 6m10.962943253s ago: executing program 2 (id=2303): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$kcm(0x2, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0c00990001fcffff2f000000"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x40) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r9 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r9, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r10, 0x0, 0xf, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r2, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5m55.675670596s ago: executing program 34 (id=2303): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$kcm(0x2, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0c00990001fcffff2f000000"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x40) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r9 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r9, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r10, 0x0, 0xf, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r2, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m25.001504628s ago: executing program 3 (id=2798): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|B\xe2ar\x04R%[k\x0f\xfdV\xacL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dI\xbd\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x86P\x8d\x12\\\xf9\x00T\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93vw\x85\r|\xf0\xa6\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b\"\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}9q\x92~}M\xceA\xe1)\a\xf0p\xa3\x8dkCvo\x85N(\xdd%DP\x88FW\xb5\x97\xe7\xb8}\xb6/\x95\xb0\xb9\xc9\xb1=\ac\x91\x1d,\xd2\xf5g\xfd\x97X\x1e[\x84\x7f\bO\x16\x84\xefa\xd1\xb3\xf7\\g`\x026\x1f\x89/\x01l\xc1%\xda\xa1:\x99\xf1,\x86f\xe1\xb6\x83\x06\xdd\x91{x\xa1P\xd7\x1d\xa9c\xde\x7f\x8fJ\xae\xf1\xc3\x81@\x1e\x93\xaed-X\xd2\xa7e\xa0\xb3\x16*\xa5\xb1\xd3\x8d\xa4\xf2\xe5\xa2\xe7A\x19\xf4\xa92ok\xf2\xd2\xc74\t*\xb67{#J\x1b\'\xbb\x9b\x99\xda^\x1e\xf6\x03\x9316\xb5T\xbb\xb2\x93\x1b\xfaj\x00\xe8i\x85\xd2\x05!\x87Q\xe5\xbdZ\xcc\x98\xcbY]0\xf7\fl!\x00<', 0x0) r2 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r4, &(0x7f0000000480)="dc", 0x1) splice(r3, 0x0, r2, &(0x7f0000000140)=0x8008, 0x4, 0x0) 1m22.846415807s ago: executing program 3 (id=2801): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1m22.787929692s ago: executing program 3 (id=2802): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000880), 0x12) unshare(0xa020480) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x8) 1m22.619506856s ago: executing program 3 (id=2803): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m20.36385311s ago: executing program 3 (id=2804): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000200000400000000000000000200000000000000000000000200000000000000010000000000"], 0x0, 0x4e}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x48) 1m18.902616753s ago: executing program 3 (id=2806): close(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000040) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYRES16], 0x100}}, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRES32, @ANYBLOB="0025000000000000240012800b000100697036746e6c00001400028008000700fbffffff06000f005e"], 0x44}, 0x1, 0x0, 0x0, 0x40005}, 0x20004090) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40404}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000002bc0), r4) 1m3.369366111s ago: executing program 35 (id=2806): close(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000040) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYRES16], 0x100}}, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRES32, @ANYBLOB="0025000000000000240012800b000100697036746e6c00001400028008000700fbffffff06000f005e"], 0x44}, 0x1, 0x0, 0x0, 0x40005}, 0x20004090) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40404}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000002bc0), r4) 21.681845774s ago: executing program 4 (id=2880): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = memfd_create(0x0, 0x0) write(r4, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r4, r4, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 20.515061169s ago: executing program 4 (id=2881): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000050000000000000000"], 0x50) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYBLOB="018000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000500000002000000000000000e00"/28], 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r1, 0x0, 0x9}, 0x18) bpf$MAP_CREATE(0x25, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0x2, 0xfc, 0x9, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x8, 0x7800, 0x82e, 0x1}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) 20.334311006s ago: executing program 4 (id=2882): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x3ff}]}}]}, 0x60}}, 0x44080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x3ff, 0x6, 0x4, 0x5}, {0xff, 0x1, 0x401, 0xf64a, 0x1, 0x9}, 0xf97, 0x6, 0xb70}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x592f3ca27be3fa98}, @TCA_TBF_RATE64={0xc, 0x4, 0x2e27b565961173ac}]}}]}, 0x70}}, 0x800) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x220, 0x100, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss, @window={0x3, 0x1, 0x3}, @mss={0x2, 0x1}, @mss={0x2, 0x1}, @window, @window={0x3, 0x1, 0x1}, @window={0x3, 0xfff5, 0x8}, @timestamp], 0x8) 15.530750257s ago: executing program 4 (id=2883): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLL', 0xe}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r2, 0x0, 0x0, 0x1, &(0x7f0000000b40)='L'}) 15.461117415s ago: executing program 4 (id=2884): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 15.368212561s ago: executing program 4 (id=2885): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x30, r4, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 0s ago: executing program 36 (id=2885): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x30, r4, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) kernel console output (not intermixed with test programs): ts in 'hsr' [ 498.690450][T12972] Cannot create hsr debugfs directory [ 499.459125][T13334] netlink: 'syz.4.2403': attribute type 11 has an invalid length. [ 499.459141][T13334] netlink: 'syz.4.2403': attribute type 4 has an invalid length. [ 499.459147][T13334] netlink: 199780 bytes leftover after parsing attributes in process `syz.4.2403'. [ 499.904595][T13340] overlayfs: missing 'lowerdir' [ 500.077948][T13341] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 500.561511][ T5810] Bluetooth: hci1: command tx timeout [ 501.106309][T10068] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.380171][T12997] hsr_slave_0: entered promiscuous mode [ 501.381071][T12997] hsr_slave_1: entered promiscuous mode [ 501.381729][T12997] debugfs: 'hsr0' already exists in 'hsr' [ 501.381744][T12997] Cannot create hsr debugfs directory [ 501.571090][T10068] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.725171][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.725248][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.953851][T10068] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.324412][T10068] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.599055][ T5810] Bluetooth: hci1: command tx timeout [ 503.651789][T13292] chnl_net:caif_netlink_parms(): no params data found [ 503.905903][T13374] netlink: 'syz.4.2412': attribute type 11 has an invalid length. [ 503.905924][T13374] netlink: 'syz.4.2412': attribute type 4 has an invalid length. [ 503.905937][T13374] netlink: 199780 bytes leftover after parsing attributes in process `syz.4.2412'. [ 504.058566][T10068] bridge_slave_1: left allmulticast mode [ 504.058594][T10068] bridge_slave_1: left promiscuous mode [ 504.059206][T10068] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.389218][T10068] bridge_slave_0: left allmulticast mode [ 504.389247][T10068] bridge_slave_0: left promiscuous mode [ 504.389502][T10068] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.317024][ T5810] Bluetooth: hci1: command tx timeout [ 505.458912][T10068] bridge_slave_1: left allmulticast mode [ 505.458943][T10068] bridge_slave_1: left promiscuous mode [ 505.459180][T10068] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.608762][T10068] bridge_slave_0: left allmulticast mode [ 505.608790][T10068] bridge_slave_0: left promiscuous mode [ 505.609071][T10068] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.081488][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 506.097243][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 506.098601][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 506.101451][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 506.102296][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 506.338349][T10068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.461353][T10068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.575833][T10068] bond0 (unregistering): Released all slaves [ 508.212479][ T61] Bluetooth: hci2: command tx timeout [ 510.277100][ T61] Bluetooth: hci2: command tx timeout [ 510.373197][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 510.377817][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 510.387158][ T5810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 510.408814][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 510.409827][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 510.809394][T10068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.898549][T10068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.941146][T10068] bond0 (unregistering): Released all slaves [ 514.143982][ T61] Bluetooth: hci2: command tx timeout [ 514.144052][ T61] Bluetooth: hci4: command tx timeout [ 516.318228][ T61] Bluetooth: hci4: command tx timeout [ 516.318261][ T61] Bluetooth: hci2: command tx timeout [ 516.378916][T13292] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.379063][T13292] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.379321][T13292] bridge_slave_0: entered allmulticast mode [ 516.382526][T13292] bridge_slave_0: entered promiscuous mode [ 516.428949][T13399] wg1 speed is unknown, defaulting to 1000 [ 516.859853][T13481] overlayfs: overlapping lowerdir path [ 516.956001][T13482] overlayfs: overlapping lowerdir path [ 518.419529][ T5810] Bluetooth: hci4: command tx timeout [ 518.708157][T13292] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.708298][T13292] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.708555][T13292] bridge_slave_1: entered allmulticast mode [ 518.711253][T13292] bridge_slave_1: entered promiscuous mode [ 518.726582][T13433] wg1 speed is unknown, defaulting to 1000 [ 519.202993][T13292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.255131][T13292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.462936][T10068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.501133][T10068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.667617][T10068] hsr_slave_0: left promiscuous mode [ 519.687394][T10068] hsr_slave_1: left promiscuous mode [ 519.688532][T10068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.688557][T10068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.740026][T10068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.740044][T10068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.233285][T10068] veth1_macvtap: left promiscuous mode [ 520.233368][T10068] veth0_macvtap: left promiscuous mode [ 520.233525][T10068] veth1_vlan: left promiscuous mode [ 520.233634][T10068] veth0_vlan: left promiscuous mode [ 521.199257][ T5810] Bluetooth: hci4: command tx timeout [ 521.633412][T13513] overlayfs: overlapping lowerdir path [ 521.782086][T13514] overlayfs: overlapping lowerdir path [ 523.355371][T10068] team0 (unregistering): Port device team_slave_1 removed [ 523.569353][T10068] team0 (unregistering): Port device team_slave_0 removed [ 526.039039][T13543] overlayfs: overlapping lowerdir path [ 526.203479][T13544] overlayfs: overlapping lowerdir path [ 530.761655][T13581] overlayfs: overlapping lowerdir path [ 530.924049][T13582] overlayfs: overlapping lowerdir path [ 539.578460][T10068] team0 (unregistering): Port device team_slave_1 removed [ 541.327765][T10068] team0 (unregistering): Port device team_slave_0 removed [ 546.686268][T13679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.658061][T13686] netlink: 'syz.4.2503': attribute type 11 has an invalid length. [ 547.658084][T13686] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.2503'. [ 555.598826][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 555.621101][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 555.622383][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 555.623476][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 555.626116][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 556.325963][T13738] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2516'. [ 557.330852][ C0] vkms_vblank_simulate: vblank timer overrun [ 557.684613][T13747] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 558.406419][ C0] vkms_vblank_simulate: vblank timer overrun [ 558.656476][ C0] vkms_vblank_simulate: vblank timer overrun [ 558.930982][ T5810] Bluetooth: hci5: command tx timeout [ 559.251371][ C0] vkms_vblank_simulate: vblank timer overrun [ 559.571042][ C0] vkms_vblank_simulate: vblank timer overrun [ 560.005079][ C0] vkms_vblank_simulate: vblank timer overrun [ 560.064816][ C0] vkms_vblank_simulate: vblank timer overrun [ 560.348579][ C0] vkms_vblank_simulate: vblank timer overrun [ 561.127048][ T5810] Bluetooth: hci5: command tx timeout [ 562.001504][ C0] vkms_vblank_simulate: vblank timer overrun [ 563.279845][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.279919][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.339877][ T5810] Bluetooth: hci5: command tx timeout [ 563.869407][T13782] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2528'. [ 565.587513][T13790] overlayfs: missing 'lowerdir' [ 565.719714][ T5810] Bluetooth: hci5: command tx timeout [ 566.133220][T13730] wg1 speed is unknown, defaulting to 1000 [ 567.619727][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 568.174122][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 568.460143][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 568.497484][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 568.524386][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 569.097476][T13433] chnl_net:caif_netlink_parms(): no params data found [ 569.868364][T13806] wg1 speed is unknown, defaulting to 1000 [ 570.828316][T13433] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 571.088714][ T5810] Bluetooth: hci1: command tx timeout [ 571.571345][T13849] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2537'. [ 572.233850][T13851] overlayfs: missing 'lowerdir' [ 572.403151][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 572.415416][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 572.465067][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 572.478528][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 572.479442][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 573.926937][ T61] Bluetooth: hci1: command tx timeout [ 574.529495][ T61] Bluetooth: hci2: command tx timeout [ 575.841025][T13852] wg1 speed is unknown, defaulting to 1000 [ 576.045524][ T61] Bluetooth: hci1: command tx timeout [ 576.116375][T13730] chnl_net:caif_netlink_parms(): no params data found [ 576.740483][ T61] Bluetooth: hci2: command tx timeout [ 577.563559][ C1] vkms_vblank_simulate: vblank timer overrun [ 577.847854][T13898] overlayfs: missing 'lowerdir' [ 577.851207][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.067050][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.308588][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.347075][ T61] Bluetooth: hci1: command tx timeout [ 578.429212][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.578314][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.757829][ T61] Bluetooth: hci2: command tx timeout [ 578.831925][T13905] netlink: 'syz.4.2549': attribute type 11 has an invalid length. [ 578.831946][T13905] netlink: 'syz.4.2549': attribute type 4 has an invalid length. [ 578.831959][T13905] netlink: 199780 bytes leftover after parsing attributes in process `syz.4.2549'. [ 578.994856][T13730] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.994994][T13730] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.995261][T13730] bridge_slave_0: entered allmulticast mode [ 579.001201][T13730] bridge_slave_0: entered promiscuous mode [ 579.152129][T13730] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.152266][T13730] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.152530][T13730] bridge_slave_1: entered allmulticast mode [ 579.177277][T13730] bridge_slave_1: entered promiscuous mode [ 579.712103][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.127609][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.590939][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.628715][T13806] chnl_net:caif_netlink_parms(): no params data found [ 580.653684][T10068] bridge_slave_1: left allmulticast mode [ 580.653703][T10068] bridge_slave_1: left promiscuous mode [ 580.653848][T10068] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.731041][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.778748][T10068] bridge_slave_0: left allmulticast mode [ 580.778776][T10068] bridge_slave_0: left promiscuous mode [ 580.779115][T10068] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.837214][ T61] Bluetooth: hci2: command tx timeout [ 581.057474][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.103093][T10068] bridge_slave_1: left allmulticast mode [ 581.103122][T10068] bridge_slave_1: left promiscuous mode [ 581.103402][T10068] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.809336][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.960052][T10068] bridge_slave_0: left allmulticast mode [ 581.960081][T10068] bridge_slave_0: left promiscuous mode [ 581.960322][T10068] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.230986][ C1] vkms_vblank_simulate: vblank timer overrun [ 582.259839][T10068] bridge_slave_1: left allmulticast mode [ 582.259861][T10068] bridge_slave_1: left promiscuous mode [ 582.260026][T10068] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.454591][ C1] vkms_vblank_simulate: vblank timer overrun [ 582.498610][T10068] bridge_slave_0: left allmulticast mode [ 582.498640][T10068] bridge_slave_0: left promiscuous mode [ 582.499120][T10068] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.732567][T10068] bond0 (unregistering): Released all slaves [ 582.881669][T10068] bond0 (unregistering): Released all slaves [ 583.084299][T13938] netlink: 'syz.3.2557': attribute type 11 has an invalid length. [ 583.084322][T13938] netlink: 'syz.3.2557': attribute type 4 has an invalid length. [ 583.084335][T13938] netlink: 199780 bytes leftover after parsing attributes in process `syz.3.2557'. [ 583.147928][T10068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.257819][T10068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.319020][T10068] bond0 (unregistering): Released all slaves [ 583.609688][T10068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.708627][T10068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.772330][T10068] bond0 (unregistering): Released all slaves [ 583.856681][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.110283][T10068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.214182][T13944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.227777][T10068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.311339][T10068] bond0 (unregistering): Released all slaves [ 584.330758][T13730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.463647][T13730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.873048][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.285620][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.453459][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.581313][T13730] team0: Port device team_slave_0 added [ 585.731682][T13730] team0: Port device team_slave_1 added [ 586.438146][T13730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.438162][T13730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.438187][T13730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.569589][T13852] chnl_net:caif_netlink_parms(): no params data found [ 586.586224][T13730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.586248][T13730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.586275][T13730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.611505][T13806] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.611690][T13806] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.611949][T13806] bridge_slave_0: entered allmulticast mode [ 586.628452][T13806] bridge_slave_0: entered promiscuous mode [ 586.637131][T13806] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.637258][T13806] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.637499][T13806] bridge_slave_1: entered allmulticast mode [ 586.647211][T13806] bridge_slave_1: entered promiscuous mode [ 587.173731][T10068] hsr_slave_0: left promiscuous mode [ 587.219529][T10068] hsr_slave_1: left promiscuous mode [ 587.220500][T10068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.267950][T10068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.464423][T14000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 587.513995][T10068] hsr_slave_0: left promiscuous mode [ 587.547238][T10068] hsr_slave_1: left promiscuous mode [ 587.548240][T10068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.588012][T10068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.768669][T14013] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 590.737906][T10068] team0 (unregistering): Port device team_slave_1 removed [ 590.887658][T10068] team0 (unregistering): Port device team_slave_0 removed [ 591.897742][T10068] team0 (unregistering): Port device team_slave_1 removed [ 592.037961][T10068] team0 (unregistering): Port device team_slave_0 removed [ 592.593486][T13806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.634537][T13806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.449350][T13730] hsr_slave_0: entered promiscuous mode [ 594.450759][T13730] hsr_slave_1: entered promiscuous mode [ 594.451716][T13730] debugfs: 'hsr0' already exists in 'hsr' [ 594.451739][T13730] Cannot create hsr debugfs directory [ 594.454236][T13806] team0: Port device team_slave_0 added [ 594.493694][T13806] team0: Port device team_slave_1 added [ 595.128840][T13806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.128856][T13806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.128879][T13806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.131613][T13852] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.131802][T13852] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.132011][T13852] bridge_slave_0: entered allmulticast mode [ 595.169455][T13852] bridge_slave_0: entered promiscuous mode [ 595.177433][T13806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.177448][T13806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.177471][T13806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.191593][T13852] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.192537][T13852] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.192736][T13852] bridge_slave_1: entered allmulticast mode [ 595.195715][T13852] bridge_slave_1: entered promiscuous mode [ 596.843743][T13852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.031266][T13852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.413559][T13806] hsr_slave_0: entered promiscuous mode [ 598.414390][T13806] hsr_slave_1: entered promiscuous mode [ 598.414961][T13806] debugfs: 'hsr0' already exists in 'hsr' [ 598.414977][T13806] Cannot create hsr debugfs directory [ 599.571465][T13852] team0: Port device team_slave_0 added [ 599.585368][T13852] team0: Port device team_slave_1 added [ 599.965069][T13852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.965081][T13852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.965094][T13852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.324721][T13852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.324738][T13852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.324764][T13852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.000494][T13852] hsr_slave_0: entered promiscuous mode [ 605.330151][T13852] hsr_slave_1: entered promiscuous mode [ 605.331204][T13852] debugfs: 'hsr0' already exists in 'hsr' [ 605.331227][T13852] Cannot create hsr debugfs directory [ 609.212525][T14173] overlayfs: missing 'lowerdir' [ 609.376967][T14174] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 612.194551][T13730] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 612.450053][T14190] ptrace attach of "./syz-executor exec"[5805] was attempted by " [ 612.457971][T13730] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 612.574030][T13730] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 612.823273][T13730] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 614.081359][T13806] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 614.306561][T13806] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 614.386451][T13806] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 614.424186][T13806] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 614.676215][T13852] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 615.154985][T14241] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2620'. [ 615.619243][T13852] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 615.896656][T13852] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 615.964548][T13852] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 616.741957][T13806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.837746][T14263] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2621'. [ 617.690466][T13806] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.760209][T13852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.059905][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 618.099963][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 618.101814][ T5810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 618.103401][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 618.104197][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 618.769440][ C0] vkms_vblank_simulate: vblank timer overrun [ 619.569484][ C0] vkms_vblank_simulate: vblank timer overrun [ 619.661790][T10068] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.661942][T10068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.713790][ T1482] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.737693][ T1482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.830292][T13852] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.976092][ C0] vkms_vblank_simulate: vblank timer overrun [ 619.996667][T14273] wg1 speed is unknown, defaulting to 1000 [ 620.006049][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.021474][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.222130][ C0] vkms_vblank_simulate: vblank timer overrun [ 620.222353][ T5810] Bluetooth: hci4: command tx timeout [ 621.121647][ C0] vkms_vblank_simulate: vblank timer overrun [ 621.417461][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.934796][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.935154][ T5810] Bluetooth: hci4: command tx timeout [ 623.332176][ C0] vkms_vblank_simulate: vblank timer overrun [ 624.700282][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.700363][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.730806][T10071] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.730982][T10071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.405008][ T5810] Bluetooth: hci4: command tx timeout [ 627.499279][ T5810] Bluetooth: hci4: command tx timeout [ 627.868854][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 627.889762][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 627.891119][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 627.893875][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 627.894722][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 628.526022][T14387] ptrace attach of "./syz-executor exec"[5805] was attempted by " [ 629.957182][ T61] Bluetooth: hci5: command tx timeout [ 630.372305][T14381] wg1 speed is unknown, defaulting to 1000 [ 630.727762][T14273] chnl_net:caif_netlink_parms(): no params data found [ 632.145773][ T61] Bluetooth: hci5: command tx timeout [ 633.336028][ T5810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 633.351412][ T5810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 633.365864][ T5810] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 633.377167][ T5810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 633.378773][ T5810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 634.197793][ T5810] Bluetooth: hci5: command tx timeout [ 635.367488][T14273] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.367732][T14273] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.368013][T14273] bridge_slave_0: entered allmulticast mode [ 635.371131][T14273] bridge_slave_0: entered promiscuous mode [ 635.387072][T14447] nbd0: detected capacity change from 0 to 127 [ 635.420884][ T5810] block nbd0: Receive control failed (result -104) [ 635.485671][T14273] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.485809][T14273] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.486076][T14273] bridge_slave_1: entered allmulticast mode [ 635.492987][T14273] bridge_slave_1: entered promiscuous mode [ 635.569114][ T5810] Bluetooth: hci1: command tx timeout [ 635.951492][T14273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.986471][T14273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.986710][ T1482] bridge_slave_1: left allmulticast mode [ 635.986731][ T1482] bridge_slave_1: left promiscuous mode [ 636.000118][ T1482] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.067944][ T1482] bridge_slave_0: left allmulticast mode [ 636.067964][ T1482] bridge_slave_0: left promiscuous mode [ 636.068249][ T1482] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.365707][ T5810] Bluetooth: hci5: command tx timeout [ 637.637610][ T5810] Bluetooth: hci1: command tx timeout [ 639.717354][ T5810] Bluetooth: hci1: command tx timeout [ 640.409189][ T1482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.547637][ T1482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.609043][ T1482] bond0 (unregistering): Released all slaves [ 640.638042][T14437] wg1 speed is unknown, defaulting to 1000 [ 640.947327][T14489] netlink: 340 bytes leftover after parsing attributes in process `syz.3.2667'. [ 640.972849][T14381] chnl_net:caif_netlink_parms(): no params data found [ 640.997965][T14273] team0: Port device team_slave_0 added [ 641.607019][ T1482] hsr_slave_0: left promiscuous mode [ 641.897085][ T5810] Bluetooth: hci1: command tx timeout [ 641.897143][ T1482] hsr_slave_1: left promiscuous mode [ 641.897866][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.171960][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.167796][ T1482] team0 (unregistering): Port device team_slave_1 removed [ 646.678812][ T1482] team0 (unregistering): Port device team_slave_0 removed [ 650.375368][T14544] ubi0: attaching mtd0 [ 650.461553][T14544] ubi0: scanning is finished [ 650.461598][T14544] ubi0: empty MTD device detected [ 650.959936][T14273] team0: Port device team_slave_1 added [ 651.309137][T14544] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 651.600258][T14273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.600269][T14273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.600284][T14273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.666304][T14273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.666321][T14273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.666346][T14273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.048870][T14381] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.049001][T14381] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.049251][T14381] bridge_slave_0: entered allmulticast mode [ 653.052093][T14381] bridge_slave_0: entered promiscuous mode [ 653.196646][T14381] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.198443][T14381] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.198709][T14381] bridge_slave_1: entered allmulticast mode [ 653.211722][T14381] bridge_slave_1: entered promiscuous mode [ 653.225861][T14273] hsr_slave_0: entered promiscuous mode [ 653.237723][T14273] hsr_slave_1: entered promiscuous mode [ 653.238781][T14273] debugfs: 'hsr0' already exists in 'hsr' [ 653.238804][T14273] Cannot create hsr debugfs directory [ 655.415092][T14381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.524309][T14381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.830842][T14381] team0: Port device team_slave_0 added [ 655.865177][T14381] team0: Port device team_slave_1 added [ 656.333214][ C1] vkms_vblank_simulate: vblank timer overrun [ 657.202671][ C1] vkms_vblank_simulate: vblank timer overrun [ 657.606545][ C1] vkms_vblank_simulate: vblank timer overrun [ 657.639802][T14381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.639819][T14381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.639855][T14381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.659433][T14437] chnl_net:caif_netlink_parms(): no params data found [ 658.042963][T14381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.043128][T14381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.043278][T14381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.443860][ C1] vkms_vblank_simulate: vblank timer overrun [ 658.617198][ C1] vkms_vblank_simulate: vblank timer overrun [ 658.881994][ C1] vkms_vblank_simulate: vblank timer overrun [ 659.368287][ C1] vkms_vblank_simulate: vblank timer overrun [ 659.830230][ C1] vkms_vblank_simulate: vblank timer overrun [ 659.942554][ C1] vkms_vblank_simulate: vblank timer overrun [ 660.077459][ C1] vkms_vblank_simulate: vblank timer overrun [ 660.738271][ C1] vkms_vblank_simulate: vblank timer overrun [ 661.086621][ C1] vkms_vblank_simulate: vblank timer overrun [ 661.269633][T14646] ubi0: attaching mtd0 [ 661.310393][T14646] ubi0: scanning is finished [ 661.843703][ C1] vkms_vblank_simulate: vblank timer overrun [ 662.334472][ C1] vkms_vblank_simulate: vblank timer overrun [ 662.475100][ C1] vkms_vblank_simulate: vblank timer overrun [ 662.662865][T14646] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 663.137427][ C1] vkms_vblank_simulate: vblank timer overrun [ 663.397996][ C1] vkms_vblank_simulate: vblank timer overrun [ 664.262885][ C1] vkms_vblank_simulate: vblank timer overrun [ 664.472466][ C1] vkms_vblank_simulate: vblank timer overrun [ 664.990049][ C1] vkms_vblank_simulate: vblank timer overrun [ 665.245456][ C1] vkms_vblank_simulate: vblank timer overrun [ 665.408834][ C1] vkms_vblank_simulate: vblank timer overrun [ 665.743424][ C1] vkms_vblank_simulate: vblank timer overrun [ 665.747216][ T59] block nbd0: Possible stuck request ffff888024b87000: control (read@0,1024B). Runtime 30 seconds [ 665.749768][ T59] block nbd0: Possible stuck request ffff888024b871c0: control (read@1024,1024B). Runtime 30 seconds [ 665.749825][ T59] block nbd0: Possible stuck request ffff888024b87380: control (read@2048,1024B). Runtime 30 seconds [ 665.749851][ T59] block nbd0: Possible stuck request ffff888024b87540: control (read@3072,1024B). Runtime 30 seconds [ 667.415969][T14381] hsr_slave_0: entered promiscuous mode [ 667.419858][T14381] hsr_slave_1: entered promiscuous mode [ 667.420863][T14381] debugfs: 'hsr0' already exists in 'hsr' [ 667.420887][T14381] Cannot create hsr debugfs directory [ 667.442867][ T43] wg1 speed is unknown, defaulting to 1000 [ 667.443081][ T43] syz0: Port: 1 Link DOWN [ 671.593213][T14437] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.604209][T14437] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.604474][T14437] bridge_slave_0: entered allmulticast mode [ 671.621885][T14437] bridge_slave_0: entered promiscuous mode [ 672.467033][T14437] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.467194][T14437] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.467460][T14437] bridge_slave_1: entered allmulticast mode [ 672.471521][T14437] bridge_slave_1: entered promiscuous mode [ 675.738598][T14733] overlayfs: missing 'lowerdir' [ 676.792841][T14437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.809624][T14437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.356057][T14437] team0: Port device team_slave_0 added [ 677.388981][T14437] team0: Port device team_slave_1 added [ 677.501917][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 677.520221][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 677.522604][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 677.523808][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 677.526139][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 678.995646][T14437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.995661][T14437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.995683][T14437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.378580][T14437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.378596][T14437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.378622][T14437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.681933][ T5810] Bluetooth: hci2: command tx timeout [ 681.088084][T14766] overlayfs: missing 'lowerdir' [ 682.771922][ T5810] Bluetooth: hci2: command tx timeout [ 684.909478][ T5810] Bluetooth: hci2: command tx timeout [ 684.949328][T14743] wg1 speed is unknown, defaulting to 1000 [ 685.057999][ C1] vkms_vblank_simulate: vblank timer overrun [ 685.281888][ C1] vkms_vblank_simulate: vblank timer overrun [ 685.395546][ C1] vkms_vblank_simulate: vblank timer overrun [ 685.581434][ C1] vkms_vblank_simulate: vblank timer overrun [ 685.620945][T14437] hsr_slave_0: entered promiscuous mode [ 685.624903][T14437] hsr_slave_1: entered promiscuous mode [ 685.646359][T14437] debugfs: 'hsr0' already exists in 'hsr' [ 685.646458][T14437] Cannot create hsr debugfs directory [ 686.057655][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.057728][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.102326][ C1] vkms_vblank_simulate: vblank timer overrun [ 686.388676][ C1] vkms_vblank_simulate: vblank timer overrun [ 686.421157][ T5810] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 686.421196][ T5810] CPU: 0 UID: 0 PID: 5810 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 686.421210][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 686.421218][ T5810] Workqueue: hci3 hci_rx_work [ 686.421246][ T5810] Call Trace: [ 686.421254][ T5810] [ 686.421260][ T5810] dump_stack_lvl+0x189/0x250 [ 686.421281][ T5810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 686.421297][ T5810] ? __pfx__printk+0x10/0x10 [ 686.421315][ T5810] ? kernfs_path_from_node+0x2c/0x280 [ 686.421326][ T5810] ? kernfs_path_from_node+0x243/0x280 [ 686.421335][ T5810] ? kernfs_path_from_node+0x2c/0x280 [ 686.421347][ T5810] sysfs_create_dir_ns+0x259/0x280 [ 686.421357][ T5810] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 686.421370][ T5810] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 686.421382][ T5810] ? rt_spin_unlock+0x161/0x200 [ 686.421395][ T5810] kobject_add_internal+0x5a5/0xb50 [ 686.421410][ T5810] kobject_add+0x155/0x220 [ 686.421423][ T5810] ? __pfx_kobject_add+0x10/0x10 [ 686.421437][ T5810] ? get_device_parent+0x370/0x3a0 [ 686.421453][ T5810] device_add+0x408/0xb50 [ 686.421468][ T5810] hci_conn_add_sysfs+0xd5/0x1e0 [ 686.421480][ T5810] le_conn_complete_evt+0xf39/0x1500 [ 686.421502][ T5810] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 686.421516][ T5810] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 686.421529][ T5810] ? lockdep_hardirqs_on+0x9c/0x150 [ 686.421545][ T5810] ? skb_pull_data+0xfb/0x200 [ 686.421562][ T5810] hci_le_conn_complete_evt+0x187/0x450 [ 686.421579][ T5810] hci_event_packet+0x78f/0x1200 [ 686.421593][ T5810] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 686.421607][ T5810] ? __pfx_hci_event_packet+0x10/0x10 [ 686.421624][ T5810] ? hci_send_to_monitor+0xe2/0x570 [ 686.421640][ T5810] hci_rx_work+0x46a/0xe80 [ 686.421657][ T5810] ? process_scheduled_works+0x9ef/0x17b0 [ 686.421671][ T5810] process_scheduled_works+0xae1/0x17b0 [ 686.421700][ T5810] ? __pfx_process_scheduled_works+0x10/0x10 [ 686.421722][ T5810] worker_thread+0x8a0/0xda0 [ 686.421749][ T5810] kthread+0x711/0x8a0 [ 686.421773][ T5810] ? __pfx_worker_thread+0x10/0x10 [ 686.421785][ T5810] ? __pfx_kthread+0x10/0x10 [ 686.421797][ T5810] ? rt_spin_unlock+0x150/0x200 [ 686.421811][ T5810] ? rt_spin_unlock+0x161/0x200 [ 686.421821][ T5810] ? __pfx_kthread+0x10/0x10 [ 686.421836][ T5810] ret_from_fork+0x4bc/0x870 [ 686.421852][ T5810] ? __pfx_ret_from_fork+0x10/0x10 [ 686.421870][ T5810] ? __switch_to_asm+0x39/0x70 [ 686.421884][ T5810] ? __switch_to_asm+0x33/0x70 [ 686.421897][ T5810] ? __pfx_kthread+0x10/0x10 [ 686.421921][ T5810] ret_from_fork_asm+0x1a/0x30 [ 686.421955][ T5810] [ 686.421986][ T5810] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 686.422020][ T5810] Bluetooth: hci3: failed to register connection device [ 686.997060][ T5810] Bluetooth: hci2: command tx timeout [ 688.132329][ C1] vkms_vblank_simulate: vblank timer overrun [ 689.122021][ C1] vkms_vblank_simulate: vblank timer overrun [ 689.289457][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 689.295179][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 689.314580][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 689.315789][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 689.316597][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 689.492380][ C1] vkms_vblank_simulate: vblank timer overrun [ 689.915676][T14813] wg1 speed is unknown, defaulting to 1000 [ 691.440994][ T5810] Bluetooth: hci4: command tx timeout [ 692.753450][T14743] chnl_net:caif_netlink_parms(): no params data found [ 693.030115][T14849] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 693.053197][T14849] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2753'. [ 694.009874][ T5810] Bluetooth: hci4: command tx timeout [ 695.028210][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 695.053192][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 695.054460][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 695.056111][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 695.058388][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 696.072157][ T5810] Bluetooth: hci4: command tx timeout [ 696.318122][ T59] block nbd0: Possible stuck request ffff888024b87000: control (read@0,1024B). Runtime 60 seconds [ 696.318166][ T59] block nbd0: Possible stuck request ffff888024b871c0: control (read@1024,1024B). Runtime 60 seconds [ 696.318193][ T59] block nbd0: Possible stuck request ffff888024b87380: control (read@2048,1024B). Runtime 60 seconds [ 696.318229][ T59] block nbd0: Possible stuck request ffff888024b87540: control (read@3072,1024B). Runtime 60 seconds [ 697.199669][ T5810] Bluetooth: hci5: command tx timeout [ 697.549722][ T1482] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.804578][T14882] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 698.040934][T14882] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2762'. [ 698.332523][ T5810] Bluetooth: hci4: command tx timeout [ 698.819711][T14743] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.819852][T14743] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.820086][T14743] bridge_slave_0: entered allmulticast mode [ 698.822904][T14743] bridge_slave_0: entered promiscuous mode [ 699.009805][T14743] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.010178][T14743] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.010411][T14743] bridge_slave_1: entered allmulticast mode [ 699.013398][T14743] bridge_slave_1: entered promiscuous mode [ 699.185083][ T1482] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.237196][ T5810] Bluetooth: hci5: command tx timeout [ 700.792544][T14897] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2765'. [ 701.438062][ T5810] Bluetooth: hci5: command tx timeout [ 701.442634][ T1482] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.600292][T14743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.600389][T14856] wg1 speed is unknown, defaulting to 1000 [ 701.867662][T14743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.869156][T14813] chnl_net:caif_netlink_parms(): no params data found [ 702.221565][ T1482] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.274764][T14743] team0: Port device team_slave_0 added [ 703.617370][ T5810] Bluetooth: hci5: command tx timeout [ 703.826518][T14743] team0: Port device team_slave_1 added [ 706.302692][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88803d021400: rx timeout, send abort [ 706.305320][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88803d021400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 706.588457][T14743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.588469][T14743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.588485][T14743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.768358][T14743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.768374][T14743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.768397][T14743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.887479][T14813] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.887661][T14813] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.888195][T14813] bridge_slave_0: entered allmulticast mode [ 706.891116][T14813] bridge_slave_0: entered promiscuous mode [ 706.949798][T14813] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.949922][T14813] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.950117][T14813] bridge_slave_1: entered allmulticast mode [ 706.954049][T14813] bridge_slave_1: entered promiscuous mode [ 710.369221][T14813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.075043][T14743] hsr_slave_0: entered promiscuous mode [ 711.080372][T14743] hsr_slave_1: entered promiscuous mode [ 711.081386][T14743] debugfs: 'hsr0' already exists in 'hsr' [ 711.081409][T14743] Cannot create hsr debugfs directory [ 711.084810][T14813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.778151][ T1482] bridge_slave_1: left allmulticast mode [ 712.778178][ T1482] bridge_slave_1: left promiscuous mode [ 712.778405][ T1482] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.618941][ T1482] bridge_slave_0: left allmulticast mode [ 713.618976][ T1482] bridge_slave_0: left promiscuous mode [ 713.619245][ T1482] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.714513][ T1482] bridge_slave_1: left allmulticast mode [ 713.714548][ T1482] bridge_slave_1: left promiscuous mode [ 713.714791][ T1482] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.799406][ T1482] bridge_slave_0: left allmulticast mode [ 713.799436][ T1482] bridge_slave_0: left promiscuous mode [ 713.799692][ T1482] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.096506][ T1482] bridge_slave_1: left allmulticast mode [ 714.096526][ T1482] bridge_slave_1: left promiscuous mode [ 714.096687][ T1482] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.972505][ T5167] udevd[5167]: worker [14037] /devices/virtual/block/nbd0 is taking a long time [ 714.980712][ T1482] bridge_slave_0: left allmulticast mode [ 714.980740][ T1482] bridge_slave_0: left promiscuous mode [ 714.980973][ T1482] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.271553][ T5810] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 715.271579][ T5810] CPU: 0 UID: 0 PID: 5810 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 715.271611][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 715.271623][ T5810] Workqueue: hci0 hci_rx_work [ 715.271649][ T5810] Call Trace: [ 715.271658][ T5810] [ 715.271667][ T5810] dump_stack_lvl+0x189/0x250 [ 715.271698][ T5810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 715.271724][ T5810] ? __pfx__printk+0x10/0x10 [ 715.271750][ T5810] ? kernfs_path_from_node+0x2c/0x280 [ 715.271770][ T5810] ? kernfs_path_from_node+0x243/0x280 [ 715.271787][ T5810] ? kernfs_path_from_node+0x2c/0x280 [ 715.271809][ T5810] sysfs_create_dir_ns+0x259/0x280 [ 715.271828][ T5810] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 715.271851][ T5810] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 715.271875][ T5810] ? rt_spin_unlock+0x161/0x200 [ 715.271899][ T5810] kobject_add_internal+0x5a5/0xb50 [ 715.271929][ T5810] kobject_add+0x155/0x220 [ 715.271953][ T5810] ? __pfx_kobject_add+0x10/0x10 [ 715.271981][ T5810] ? get_device_parent+0x370/0x3a0 [ 715.272009][ T5810] device_add+0x408/0xb50 [ 715.272037][ T5810] hci_conn_add_sysfs+0xd5/0x1e0 [ 715.272060][ T5810] le_conn_complete_evt+0xf39/0x1500 [ 715.272099][ T5810] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 715.272124][ T5810] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 715.272148][ T5810] ? lockdep_hardirqs_on+0x9c/0x150 [ 715.272177][ T5810] ? skb_pull_data+0xfb/0x200 [ 715.272206][ T5810] hci_le_conn_complete_evt+0x187/0x450 [ 715.272236][ T5810] hci_event_packet+0x78f/0x1200 [ 715.272260][ T5810] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 715.272285][ T5810] ? __pfx_hci_event_packet+0x10/0x10 [ 715.272317][ T5810] ? hci_send_to_monitor+0xe2/0x570 [ 715.272345][ T5810] hci_rx_work+0x46a/0xe80 [ 715.272375][ T5810] ? process_scheduled_works+0x9ef/0x17b0 [ 715.272399][ T5810] process_scheduled_works+0xae1/0x17b0 [ 715.272458][ T5810] ? __pfx_process_scheduled_works+0x10/0x10 [ 715.272499][ T5810] worker_thread+0x8a0/0xda0 [ 715.272551][ T5810] kthread+0x711/0x8a0 [ 715.272579][ T5810] ? __pfx_worker_thread+0x10/0x10 [ 715.272606][ T5810] ? __pfx_kthread+0x10/0x10 [ 715.272627][ T5810] ? rt_spin_unlock+0x150/0x200 [ 715.272653][ T5810] ? rt_spin_unlock+0x161/0x200 [ 715.272672][ T5810] ? __pfx_kthread+0x10/0x10 [ 715.272698][ T5810] ret_from_fork+0x4bc/0x870 [ 715.272723][ T5810] ? __pfx_ret_from_fork+0x10/0x10 [ 715.272753][ T5810] ? __switch_to_asm+0x39/0x70 [ 715.272769][ T5810] ? __switch_to_asm+0x33/0x70 [ 715.272785][ T5810] ? __pfx_kthread+0x10/0x10 [ 715.272809][ T5810] ret_from_fork_asm+0x1a/0x30 [ 715.272848][ T5810] [ 715.274008][ T5810] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 715.274056][ T5810] Bluetooth: hci0: failed to register connection device [ 715.563350][ T1482] bridge_slave_1: left allmulticast mode [ 715.563378][ T1482] bridge_slave_1: left promiscuous mode [ 715.563638][ T1482] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.778575][ T1482] bridge_slave_0: left allmulticast mode [ 715.778611][ T1482] bridge_slave_0: left promiscuous mode [ 715.778878][ T1482] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.158349][ T1482] bridge0 (unregistering): left allmulticast mode [ 726.404462][ T59] block nbd0: Possible stuck request ffff888024b87000: control (read@0,1024B). Runtime 90 seconds [ 726.404507][ T59] block nbd0: Possible stuck request ffff888024b871c0: control (read@1024,1024B). Runtime 90 seconds [ 726.404534][ T59] block nbd0: Possible stuck request ffff888024b87380: control (read@2048,1024B). Runtime 90 seconds [ 726.404559][ T59] block nbd0: Possible stuck request ffff888024b87540: control (read@3072,1024B). Runtime 90 seconds [ 726.489957][ T1482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.970420][ T1482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.990883][ T1482] bond0 (unregistering): Released all slaves [ 727.019062][ T1482] bond1 (unregistering): Released all slaves [ 729.056196][T15054] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2811'. [ 731.997766][ T1482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.057916][ T1482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.081628][ T1482] bond0 (unregistering): Released all slaves [ 735.727939][ T1482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.967691][ T1482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.781435][ T1482] bond0 (unregistering): Released all slaves [ 738.438180][ T1482] bridge0 (unregistering): left allmulticast mode [ 738.815096][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 739.272134][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 739.297426][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 739.460020][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 739.461463][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 741.481287][ T61] Bluetooth: hci1: command tx timeout [ 741.897603][ T1482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.977727][ T1482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 742.027384][ T1482] bond0 (unregistering): Released all slaves [ 742.221564][ T5810] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 742.224982][ T5810] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 742.241913][ T5810] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 742.259432][ T5810] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 742.260237][ T5810] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 742.310782][T14813] team0: Port device team_slave_0 added [ 742.999311][T14813] team0: Port device team_slave_1 added [ 743.273541][ T1482] tipc: Disabling bearer [ 743.273766][ T1482] tipc: Left network mode [ 743.585583][ T61] Bluetooth: hci1: command tx timeout [ 743.689039][T14813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.689054][T14813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.689074][T14813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.694278][T14856] chnl_net:caif_netlink_parms(): no params data found [ 743.709576][T14813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.709592][T14813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.709617][T14813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.848878][T15094] wg1 speed is unknown, defaulting to 1000 [ 744.374394][ T61] Bluetooth: hci6: command tx timeout [ 744.449960][ T1482] tipc: Disabling bearer [ 744.450162][ T1482] tipc: Left network mode [ 744.466829][T15112] wg1 speed is unknown, defaulting to 1000 [ 745.876474][ T61] Bluetooth: hci1: command tx timeout [ 745.947158][T15131] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2830'. [ 745.979291][T14813] hsr_slave_0: entered promiscuous mode [ 745.980849][T14813] hsr_slave_1: entered promiscuous mode [ 745.981917][T14813] debugfs: 'hsr0' already exists in 'hsr' [ 745.981941][T14813] Cannot create hsr debugfs directory [ 746.449387][ T61] Bluetooth: hci6: command tx timeout [ 747.481382][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.481484][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.301607][ T61] Bluetooth: hci1: command tx timeout [ 748.516940][ T61] Bluetooth: hci6: command tx timeout [ 748.718624][T14856] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.718791][T14856] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.719101][T14856] bridge_slave_0: entered allmulticast mode [ 748.723040][T14856] bridge_slave_0: entered promiscuous mode [ 748.765921][T14856] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.766020][T14856] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.766195][T14856] bridge_slave_1: entered allmulticast mode [ 748.781859][T14856] bridge_slave_1: entered promiscuous mode [ 749.306185][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 749.419994][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 749.449069][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 749.488155][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 749.511957][ T5810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 750.320016][T15162] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2837'. [ 750.349813][T14856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.374224][T14856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.596924][T14745] Bluetooth: hci6: command tx timeout [ 751.717069][T14745] Bluetooth: hci2: command tx timeout [ 752.039745][T15150] wg1 speed is unknown, defaulting to 1000 [ 753.213910][T15153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 753.216022][T15153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 753.397479][T15153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 753.400528][T15153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 753.456998][T15153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 753.799389][T15153] Bluetooth: hci2: command tx timeout [ 755.593924][T15153] Bluetooth: hci3: command tx timeout [ 755.636570][T15205] Bluetooth: MGMT ver 1.23 [ 755.847800][T15094] chnl_net:caif_netlink_parms(): no params data found [ 755.877774][T15153] Bluetooth: hci2: command tx timeout [ 755.948592][T15112] chnl_net:caif_netlink_parms(): no params data found [ 755.989461][T15216] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2844'. [ 756.232448][T15188] wg1 speed is unknown, defaulting to 1000 [ 756.479735][ T59] block nbd0: Possible stuck request ffff888024b87000: control (read@0,1024B). Runtime 120 seconds [ 756.479935][ T59] block nbd0: Possible stuck request ffff888024b871c0: control (read@1024,1024B). Runtime 120 seconds [ 756.480012][ T59] block nbd0: Possible stuck request ffff888024b87380: control (read@2048,1024B). Runtime 120 seconds [ 756.480114][ T59] block nbd0: Possible stuck request ffff888024b87540: control (read@3072,1024B). Runtime 120 seconds [ 757.645922][T15153] Bluetooth: hci3: command tx timeout [ 757.979078][T15153] Bluetooth: hci2: command tx timeout [ 759.236827][ T1482] hsr_slave_0: left promiscuous mode [ 759.245635][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.297805][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.456950][ T1482] hsr_slave_0: left promiscuous mode [ 759.477220][ T1482] hsr_slave_1: left promiscuous mode [ 759.478061][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.517937][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.656978][ T1482] hsr_slave_0: left promiscuous mode [ 759.677129][ T1482] hsr_slave_1: left promiscuous mode [ 759.677927][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.716911][T15153] Bluetooth: hci3: command tx timeout [ 759.717988][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.868793][ T1482] hsr_slave_0: left promiscuous mode [ 759.869469][ T1482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.869486][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.890683][ T1482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.890710][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.989160][ T1482] veth1_macvtap: left promiscuous mode [ 759.989225][ T1482] veth0_macvtap: left promiscuous mode [ 759.989367][ T1482] veth1_vlan: left promiscuous mode [ 759.989467][ T1482] veth0_vlan: left promiscuous mode [ 760.397475][ T1482] pimreg (unregistering): left allmulticast mode [ 760.473626][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805d72e400: rx timeout, send abort [ 760.473849][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805d72e400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 761.797095][T15153] Bluetooth: hci3: command tx timeout [ 764.638085][ T1482] team0 (unregistering): Port device team_slave_1 removed [ 764.887597][ T1482] team0 (unregistering): Port device team_slave_0 removed [ 766.398197][ T1482] team0 (unregistering): Port device dummy0 removed [ 768.457985][ T1482] team0 (unregistering): Port device team_slave_1 removed [ 768.919301][ T1482] team0 (unregistering): Port device team_slave_0 removed [ 769.183496][T15267] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 772.715630][T15283] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2863'. [ 776.379228][ T1482] team0 (unregistering): Port device team_slave_1 removed [ 776.707731][ T1482] team0 (unregistering): Port device team_slave_0 removed [ 779.952466][ C1] vkms_vblank_simulate: vblank timer overrun [ 779.999804][ C1] vkms_vblank_simulate: vblank timer overrun [ 780.167080][ C1] vkms_vblank_simulate: vblank timer overrun [ 780.450723][ C1] vkms_vblank_simulate: vblank timer overrun [ 780.738145][ T1482] pimreg (unregistering): left allmulticast mode [ 780.872872][ C1] vkms_vblank_simulate: vblank timer overrun [ 781.084225][ C1] vkms_vblank_simulate: vblank timer overrun [ 781.263063][ C1] vkms_vblank_simulate: vblank timer overrun [ 781.507545][ C1] vkms_vblank_simulate: vblank timer overrun [ 782.350603][ C1] vkms_vblank_simulate: vblank timer overrun [ 782.418634][ C1] vkms_vblank_simulate: vblank timer overrun [ 782.633908][ C1] vkms_vblank_simulate: vblank timer overrun [ 783.336315][ C1] vkms_vblank_simulate: vblank timer overrun [ 783.711848][ C1] vkms_vblank_simulate: vblank timer overrun [ 783.750747][ C1] vkms_vblank_simulate: vblank timer overrun [ 784.679510][ C1] vkms_vblank_simulate: vblank timer overrun [ 786.567479][ T59] block nbd0: Possible stuck request ffff888024b87000: control (read@0,1024B). Runtime 150 seconds [ 786.567573][ T59] block nbd0: Possible stuck request ffff888024b871c0: control (read@1024,1024B). Runtime 150 seconds [ 786.567597][ T59] block nbd0: Possible stuck request ffff888024b87380: control (read@2048,1024B). Runtime 150 seconds [ 786.567620][ T59] block nbd0: Possible stuck request ffff888024b87540: control (read@3072,1024B). Runtime 150 seconds [ 786.621075][ T1482] team0 (unregistering): Port device team_slave_1 removed [ 786.853487][ T1482] team0 (unregistering): Port device team_slave_0 removed [ 788.487957][ T1482] team0 (unregistering): Port device dummy0 removed [ 789.499391][T15349] sch_tbf: burst 1023 is lower than device lo mtu (11337746) ! [ 789.547656][T15094] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.547857][T15094] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.548198][T15094] bridge_slave_0: entered allmulticast mode [ 789.551180][T15094] bridge_slave_0: entered promiscuous mode [ 789.670719][T15094] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.670868][T15094] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.671090][T15094] bridge_slave_1: entered allmulticast mode [ 789.674188][T15094] bridge_slave_1: entered promiscuous mode [ 789.934274][T15112] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.934419][T15112] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.934652][T15112] bridge_slave_0: entered allmulticast mode [ 789.938916][T15112] bridge_slave_0: entered promiscuous mode [ 789.977203][T15359] nbd1: detected capacity change from 0 to 127 [ 789.978565][T15360] netlink: 'syz.4.2885': attribute type 3 has an invalid length. [ 789.978576][T15360] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2885'. [ 790.093945][T15112] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.097351][T15112] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.097625][T15112] bridge_slave_1: entered allmulticast mode [ 790.100598][T15112] bridge_slave_1: entered promiscuous mode [ 790.110719][T15094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.263340][T15094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.491863][T15112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.601255][T15112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.706612][T15153] block nbd1: Receive control failed (result -104) [ 790.749758][T15094] team0: Port device team_slave_0 added [ 790.751521][T15150] chnl_net:caif_netlink_parms(): no params data found [ 790.831430][T15094] team0: Port device team_slave_1 added [ 791.033349][T15112] team0: Port device team_slave_0 added [ 791.241085][T15112] team0: Port device team_slave_1 added [ 791.242832][T15094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.242855][T15094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.242881][T15094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.360696][T15094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.360711][T15094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.360730][T15094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.538350][T15112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.538363][T15112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.538377][T15112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.668615][T15112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.668627][T15112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.668641][T15112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.988312][T15150] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.988450][T15150] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.988604][T15150] bridge_slave_0: entered allmulticast mode [ 791.990223][T15150] bridge_slave_0: entered promiscuous mode [ 792.093240][T15150] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.093379][T15150] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.093556][T15150] bridge_slave_1: entered allmulticast mode [ 792.095122][T15150] bridge_slave_1: entered promiscuous mode [ 792.105140][T15094] hsr_slave_0: entered promiscuous mode [ 792.106519][T15094] hsr_slave_1: entered promiscuous mode [ 792.109672][T15094] debugfs: 'hsr0' already exists in 'hsr' [ 792.109698][T15094] Cannot create hsr debugfs directory [ 792.114746][T15188] chnl_net:caif_netlink_parms(): no params data found [ 792.481900][T15150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.577879][T15112] hsr_slave_0: entered promiscuous mode [ 792.579264][T15112] hsr_slave_1: entered promiscuous mode [ 792.580722][T15112] debugfs: 'hsr0' already exists in 'hsr' [ 792.580747][T15112] Cannot create hsr debugfs directory [ 792.703387][T15150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.282634][T15150] team0: Port device team_slave_0 added [ 793.419263][T15150] team0: Port device team_slave_1 added [ 793.681223][T15188] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.681422][T15188] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.681646][T15188] bridge_slave_0: entered allmulticast mode [ 793.683207][T15188] bridge_slave_0: entered promiscuous mode [ 793.820231][T15188] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.820394][T15188] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.820594][T15188] bridge_slave_1: entered allmulticast mode [ 793.822262][T15188] bridge_slave_1: entered promiscuous mode [ 793.889722][T15150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.889733][T15150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.889747][T15150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 794.008873][T15150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 794.008884][T15150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.008898][T15150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 794.244660][T15188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.269176][T15188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.677736][T15150] hsr_slave_0: entered promiscuous mode [ 794.679306][T15150] hsr_slave_1: entered promiscuous mode [ 794.679930][T15150] debugfs: 'hsr0' already exists in 'hsr' [ 794.679958][T15150] Cannot create hsr debugfs directory [ 794.681874][T15188] team0: Port device team_slave_0 added [ 794.722900][T15188] team0: Port device team_slave_1 added [ 795.182627][T15188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.182638][T15188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.182652][T15188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.288983][T15188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.288995][T15188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.289009][T15188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.556556][T15188] hsr_slave_0: entered promiscuous mode [ 795.558401][T15188] hsr_slave_1: entered promiscuous mode [ 795.559330][T15188] debugfs: 'hsr0' already exists in 'hsr' [ 795.559352][T15188] Cannot create hsr debugfs directory [ 796.467731][ T1482] bridge_slave_1: left allmulticast mode [ 796.467765][ T1482] bridge_slave_1: left promiscuous mode [ 796.467992][ T1482] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.537991][ T1482] bridge_slave_0: left allmulticast mode [ 796.538011][ T1482] bridge_slave_0: left promiscuous mode [ 796.538183][ T1482] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.601675][ T1482] bridge_slave_1: left allmulticast mode [ 796.601704][ T1482] bridge_slave_1: left promiscuous mode [ 796.601961][ T1482] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.667855][ T1482] bridge_slave_0: left allmulticast mode [ 796.667875][ T1482] bridge_slave_0: left promiscuous mode [ 796.668032][ T1482] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.741055][ T1482] bridge_slave_1: left allmulticast mode [ 796.741075][ T1482] bridge_slave_1: left promiscuous mode [ 796.741216][ T1482] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.798088][ T1482] bridge_slave_0: left allmulticast mode [ 796.798109][ T1482] bridge_slave_0: left promiscuous mode [ 796.798276][ T1482] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.869799][ T1482] bridge_slave_1: left allmulticast mode [ 796.869820][ T1482] bridge_slave_1: left promiscuous mode [ 796.869971][ T1482] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.938616][ T1482] bridge_slave_0: left allmulticast mode [ 796.938646][ T1482] bridge_slave_0: left promiscuous mode [ 796.938899][ T1482] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.000516][ T1482] bridge_slave_1: left allmulticast mode [ 797.000539][ T1482] bridge_slave_1: left promiscuous mode [ 797.000713][ T1482] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.058229][ T1482] bridge_slave_0: left allmulticast mode [ 797.058250][ T1482] bridge_slave_0: left promiscuous mode [ 797.058407][ T1482] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.119981][ T1482] bridge_slave_1: left allmulticast mode [ 797.120002][ T1482] bridge_slave_1: left promiscuous mode [ 797.120161][ T1482] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.178265][ T1482] bridge_slave_0: left allmulticast mode [ 797.178286][ T1482] bridge_slave_0: left promiscuous mode [ 797.178505][ T1482] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.398269][ T1482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 797.478779][ T1482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.539126][ T1482] bond0 (unregistering): Released all slaves [ 797.728177][ T1482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 797.807564][ T1482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.868996][ T1482] bond0 (unregistering): Released all slaves [ 798.047710][ T1482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.127881][ T1482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.189293][ T1482] bond0 (unregistering): Released all slaves [ 798.417668][ T1482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.497620][ T1482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.559025][ T1482] bond0 (unregistering): Released all slaves [ 798.778321][ T1482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.857798][ T1482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.939078][ T1482] bond0 (unregistering): Released all slaves [ 799.117759][ T1482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.207682][ T1482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.288864][ T1482] bond0 (unregistering): Released all slaves [ 799.881831][T14745] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 799.908518][T14745] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 799.909875][T14745] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 799.911526][T14745] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 799.912377][T14745] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 800.221073][T15373] chnl_net:caif_netlink_parms(): no params data found [ 800.456969][ T1482] hsr_slave_0: left promiscuous mode [ 800.507116][ T1482] hsr_slave_1: left promiscuous mode [ 800.507858][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.558886][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.700556][ T1482] hsr_slave_0: left promiscuous mode [ 800.747397][ T1482] hsr_slave_1: left promiscuous mode [ 800.748118][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.801800][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.967061][ T1482] hsr_slave_0: left promiscuous mode [ 800.987115][ T1482] hsr_slave_1: left promiscuous mode [ 800.987955][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.027669][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.166988][ T1482] hsr_slave_0: left promiscuous mode [ 801.186974][ T1482] hsr_slave_1: left promiscuous mode [ 801.187708][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.228326][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.386970][ T1482] hsr_slave_0: left promiscuous mode [ 801.427091][ T1482] hsr_slave_1: left promiscuous mode [ 801.427769][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.451686][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 802.037033][T14745] Bluetooth: hci4: command tx timeout [ 802.307778][ T1482] team0 (unregistering): Port device team_slave_1 removed [ 802.468612][ T1482] team0 (unregistering): Port device team_slave_0 removed [ 802.529425][T15153] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 802.544222][T15153] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 802.546496][T15153] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 802.561334][T15153] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 802.580629][T15153] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 803.447535][ T1482] team0 (unregistering): Port device team_slave_1 removed [ 803.587592][ T1482] team0 (unregistering): Port device team_slave_0 removed [ 804.117065][T14745] Bluetooth: hci4: command tx timeout [ 804.611851][T14745] Bluetooth: hci5: command tx timeout [ 804.680081][ T1482] team0 (unregistering): Port device team_slave_1 removed [ 804.827474][ T1482] team0 (unregistering): Port device team_slave_0 removed [ 805.527796][T15153] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 805.532396][T15153] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 805.534532][T15153] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 805.536128][T15153] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 805.540711][T15153] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 806.007509][ T1482] team0 (unregistering): Port device team_slave_1 removed [ 806.157977][ T1482] team0 (unregistering): Port device team_slave_0 removed [ 806.197248][T15153] Bluetooth: hci4: command tx timeout [ 806.677028][T15153] Bluetooth: hci5: command tx timeout [ 807.158433][ T1482] team0 (unregistering): Port device team_slave_1 removed [ 807.319514][ T1482] team0 (unregistering): Port device team_slave_0 removed [ 807.568401][T15153] Bluetooth: hci7: command tx timeout [ 808.079845][T15373] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.080115][T15373] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.080338][T15373] bridge_slave_0: entered allmulticast mode [ 808.081959][T15373] bridge_slave_0: entered promiscuous mode [ 808.086334][T15373] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.086549][T15373] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.089203][T15373] bridge_slave_1: entered allmulticast mode [ 808.091850][T15373] bridge_slave_1: entered promiscuous mode [ 808.277291][T14745] Bluetooth: hci4: command tx timeout [ 808.345079][T15373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.385737][T15373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.579297][T15373] team0: Port device team_slave_0 added [ 808.594022][T15373] team0: Port device team_slave_1 added [ 808.757127][T15153] Bluetooth: hci5: command tx timeout [ 808.818935][T15373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.818951][T15373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.818975][T15373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.832047][T15373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.832063][T15373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.832088][T15373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.927098][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.927203][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.345167][T15373] hsr_slave_0: entered promiscuous mode [ 809.346030][T15373] hsr_slave_1: entered promiscuous mode [ 809.346659][T15373] debugfs: 'hsr0' already exists in 'hsr' [ 809.346674][T15373] Cannot create hsr debugfs directory [ 809.637849][T15153] Bluetooth: hci7: command tx timeout [ 809.989257][T15384] chnl_net:caif_netlink_parms(): no params data found [ 810.074809][T15381] chnl_net:caif_netlink_parms(): no params data found [ 810.264770][T14745] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 810.268687][T14745] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 810.271516][T14745] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 810.272647][T14745] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 810.273370][T14745] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 810.837043][T15153] Bluetooth: hci5: command tx timeout [ 810.923952][T15384] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.924138][T15384] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.924272][T15384] bridge_slave_0: entered allmulticast mode [ 810.925804][T15384] bridge_slave_0: entered promiscuous mode [ 811.042748][T15384] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.042845][T15384] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.042978][T15384] bridge_slave_1: entered allmulticast mode [ 811.044539][T15384] bridge_slave_1: entered promiscuous mode [ 811.147703][T15381] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.149254][T15381] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.149467][T15381] bridge_slave_0: entered allmulticast mode [ 811.151057][T15381] bridge_slave_0: entered promiscuous mode [ 811.248070][T15381] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.248165][T15381] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.248308][T15381] bridge_slave_1: entered allmulticast mode [ 811.249897][T15381] bridge_slave_1: entered promiscuous mode [ 811.565526][T15384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 811.694446][T15384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 811.704923][T15381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 811.717369][T15153] Bluetooth: hci7: command tx timeout [ 811.831770][T15381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.078230][T15384] team0: Port device team_slave_0 added [ 812.187394][T15384] team0: Port device team_slave_1 added [ 812.200829][T15381] team0: Port device team_slave_0 added [ 812.327600][T15381] team0: Port device team_slave_1 added [ 812.356975][T15153] Bluetooth: hci8: command tx timeout [ 812.799375][T15384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.799386][T15384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.799400][T15384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.932065][T15384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.932081][T15384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.932105][T15384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.933837][T15381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.933851][T15381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.933874][T15381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.082349][T15381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.082365][T15381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.082390][T15381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.232358][T14745] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 813.245231][T14745] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 813.246480][T14745] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 813.265368][T14745] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 813.271646][T14745] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 813.475874][T15384] hsr_slave_0: entered promiscuous mode [ 813.482991][T15384] hsr_slave_1: entered promiscuous mode [ 813.484101][T15384] debugfs: 'hsr0' already exists in 'hsr' [ 813.484125][T15384] Cannot create hsr debugfs directory [ 813.602183][T15381] hsr_slave_0: entered promiscuous mode [ 813.603094][T15381] hsr_slave_1: entered promiscuous mode [ 813.603994][T15381] debugfs: 'hsr0' already exists in 'hsr' [ 813.604010][T15381] Cannot create hsr debugfs directory [ 813.797091][T14745] Bluetooth: hci7: command tx timeout [ 814.007623][T15395] chnl_net:caif_netlink_parms(): no params data found [ 814.436930][T14745] Bluetooth: hci8: command tx timeout [ 814.785795][T15395] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.785928][T15395] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.786198][T15395] bridge_slave_0: entered allmulticast mode [ 814.800574][T15395] bridge_slave_0: entered promiscuous mode [ 814.819682][T15395] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.819874][T15395] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.820146][T15395] bridge_slave_1: entered allmulticast mode [ 814.822999][T15395] bridge_slave_1: entered promiscuous mode [ 815.069869][T15395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.094796][T15395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.302287][T15395] team0: Port device team_slave_0 added [ 815.317948][T14745] Bluetooth: hci9: command tx timeout [ 815.326356][T15395] team0: Port device team_slave_1 added [ 815.604851][T15395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.604863][T15395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.604877][T15395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.605579][T15405] chnl_net:caif_netlink_parms(): no params data found [ 815.662593][T15395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.662608][T15395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.662629][T15395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.113057][T15395] hsr_slave_0: entered promiscuous mode [ 816.114603][T15395] hsr_slave_1: entered promiscuous mode [ 816.115186][T15395] debugfs: 'hsr0' already exists in 'hsr' [ 816.115201][T15395] Cannot create hsr debugfs directory [ 816.473772][T15405] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.473938][T15405] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.474079][T15405] bridge_slave_0: entered allmulticast mode [ 816.475677][T15405] bridge_slave_0: entered promiscuous mode [ 816.517016][T14745] Bluetooth: hci8: command tx timeout [ 816.558115][T15405] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.558285][T15405] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.558519][T15405] bridge_slave_1: entered allmulticast mode [ 816.560569][T15405] bridge_slave_1: entered promiscuous mode [ 816.637194][ T59] block nbd0: Possible stuck request ffff888024b87000: control (read@0,1024B). Runtime 180 seconds [ 816.637263][ T59] block nbd0: Possible stuck request ffff888024b871c0: control (read@1024,1024B). Runtime 180 seconds [ 816.637290][ T59] block nbd0: Possible stuck request ffff888024b87380: control (read@2048,1024B). Runtime 180 seconds [ 816.637315][ T59] block nbd0: Possible stuck request ffff888024b87540: control (read@3072,1024B). Runtime 180 seconds [ 816.774208][T15405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.822706][T15405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.169390][T15405] team0: Port device team_slave_0 added [ 817.193829][T15405] team0: Port device team_slave_1 added [ 817.396978][T14745] Bluetooth: hci9: command tx timeout [ 817.402423][T15405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.402434][T15405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.402448][T15405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.408166][T15405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.408179][T15405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.408199][T15405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.873957][T15405] hsr_slave_0: entered promiscuous mode [ 817.874867][T15405] hsr_slave_1: entered promiscuous mode [ 817.875513][T15405] debugfs: 'hsr0' already exists in 'hsr' [ 817.875529][T15405] Cannot create hsr debugfs directory [ 818.597052][T14745] Bluetooth: hci8: command tx timeout [ 819.477021][T14745] Bluetooth: hci9: command tx timeout [ 820.477197][ T59] block nbd1: Possible stuck request ffff888024c20000: control (read@0,1024B). Runtime 30 seconds [ 820.477243][ T59] block nbd1: Possible stuck request ffff888024c201c0: control (read@1024,1024B). Runtime 30 seconds [ 820.477271][ T59] block nbd1: Possible stuck request ffff888024c20380: control (read@2048,1024B). Runtime 30 seconds [ 820.477298][ T59] block nbd1: Possible stuck request ffff888024c20540: control (read@3072,1024B). Runtime 30 seconds [ 821.557047][T14745] Bluetooth: hci9: command tx timeout [ 822.038073][ T5167] udevd[5167]: worker [14037] /devices/virtual/block/nbd0 timeout; kill it [ 822.038179][ T5167] udevd[5167]: seq 21810 '/devices/virtual/block/nbd0' killed [ 846.717098][ T104] block nbd0: Possible stuck request ffff888024b87000: control (read@0,1024B). Runtime 210 seconds [ 846.717132][ T104] block nbd0: Possible stuck request ffff888024b871c0: control (read@1024,1024B). Runtime 210 seconds [ 846.717148][ T104] block nbd0: Possible stuck request ffff888024b87380: control (read@2048,1024B). Runtime 210 seconds [ 846.717162][ T104] block nbd0: Possible stuck request ffff888024b87540: control (read@3072,1024B). Runtime 210 seconds [ 850.557024][ T104] block nbd1: Possible stuck request ffff888024c20000: control (read@0,1024B). Runtime 60 seconds [ 850.557059][ T104] block nbd1: Possible stuck request ffff888024c201c0: control (read@1024,1024B). Runtime 60 seconds [ 850.557074][ T104] block nbd1: Possible stuck request ffff888024c20380: control (read@2048,1024B). Runtime 60 seconds [ 850.557088][ T104] block nbd1: Possible stuck request ffff888024c20540: control (read@3072,1024B). Runtime 60 seconds [ 852.085916][ T5167] udevd[5167]: worker [14781] /devices/virtual/block/nbd1 is taking a long time [ 860.760523][ T61] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 860.770662][ T61] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 860.771995][ T61] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 860.773583][ T61] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 860.774677][ T61] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 860.979950][T15419] chnl_net:caif_netlink_parms(): no params data found [ 861.239233][T15419] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.239369][T15419] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.239709][T15419] bridge_slave_0: entered allmulticast mode [ 861.241316][T15419] bridge_slave_0: entered promiscuous mode [ 861.243673][T15419] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.243792][T15419] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.243942][T15419] bridge_slave_1: entered allmulticast mode [ 861.245477][T15419] bridge_slave_1: entered promiscuous mode [ 861.412009][T15419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 861.415187][T15419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 861.560242][T15419] team0: Port device team_slave_0 added [ 861.562611][T15419] team0: Port device team_slave_1 added [ 861.721729][T15419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 861.721745][T15419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 861.721770][T15419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 861.724360][T15419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 861.724383][T15419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 861.724406][T15419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 861.953838][T15419] hsr_slave_0: entered promiscuous mode [ 861.954783][T15419] hsr_slave_1: entered promiscuous mode [ 861.956152][T15419] debugfs: 'hsr0' already exists in 'hsr' [ 861.956169][T15419] Cannot create hsr debugfs directory [ 862.197047][ T61] Bluetooth: hci1: command 0x0406 tx timeout [ 862.837946][T14745] Bluetooth: hci10: command tx timeout [ 862.998631][ T61] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 863.016075][ T61] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 863.018453][ T61] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 863.019981][ T61] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 863.021061][ T61] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 863.368044][T15428] chnl_net:caif_netlink_parms(): no params data found [ 863.639069][T15428] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.639203][T15428] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.639535][T15428] bridge_slave_0: entered allmulticast mode [ 863.641107][T15428] bridge_slave_0: entered promiscuous mode [ 863.643758][T15428] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.643894][T15428] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.644035][T15428] bridge_slave_1: entered allmulticast mode [ 863.645616][T15428] bridge_slave_1: entered promiscuous mode [ 863.851652][T15428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 863.854815][T15428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.970018][T15428] team0: Port device team_slave_0 added [ 863.973847][T15428] team0: Port device team_slave_1 added [ 864.228858][T15428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 864.228870][T15428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.228884][T15428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 864.230444][T15428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 864.230453][T15428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.230467][T15428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 864.393639][T15428] hsr_slave_0: entered promiscuous mode [ 864.394623][T15428] hsr_slave_1: entered promiscuous mode [ 864.395258][T15428] debugfs: 'hsr0' already exists in 'hsr' [ 864.395273][T15428] Cannot create hsr debugfs directory [ 864.917052][ T61] Bluetooth: hci10: command tx timeout [ 865.077190][ T61] Bluetooth: hci11: command tx timeout [ 865.973772][T15153] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 865.980936][T15153] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 865.982217][T15153] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 865.983694][T15153] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 865.984437][T15153] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 866.200363][T15437] chnl_net:caif_netlink_parms(): no params data found [ 866.478614][T15437] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.478753][T15437] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.479105][T15437] bridge_slave_0: entered allmulticast mode [ 866.480705][T15437] bridge_slave_0: entered promiscuous mode [ 866.483087][T15437] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.483220][T15437] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.483369][T15437] bridge_slave_1: entered allmulticast mode [ 866.484941][T15437] bridge_slave_1: entered promiscuous mode [ 866.651954][T15437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.655191][T15437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.791788][T15437] team0: Port device team_slave_0 added [ 866.794220][T15437] team0: Port device team_slave_1 added [ 866.959060][T15437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.959072][T15437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.959085][T15437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.960589][T15437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.960600][T15437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.960614][T15437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 867.005487][T15153] Bluetooth: hci10: command tx timeout [ 867.153652][T15437] hsr_slave_0: entered promiscuous mode [ 867.154633][T15437] hsr_slave_1: entered promiscuous mode [ 867.155289][T15437] debugfs: 'hsr0' already exists in 'hsr' [ 867.155304][T15437] Cannot create hsr debugfs directory [ 867.161566][T15153] Bluetooth: hci11: command tx timeout [ 867.317053][T15153] Bluetooth: hci6: command 0x0406 tx timeout [ 868.037007][ T61] Bluetooth: hci12: command tx timeout [ 869.077159][ T61] Bluetooth: hci10: command tx timeout [ 869.236998][ T61] Bluetooth: hci11: command tx timeout [ 870.117126][ T61] Bluetooth: hci12: command tx timeout [ 870.363028][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.363131][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.317053][ T61] Bluetooth: hci11: command tx timeout [ 871.790140][T14745] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 871.793467][T14745] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 871.794557][T14745] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 871.795789][T14745] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 871.799897][T14745] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 872.012344][T15446] chnl_net:caif_netlink_parms(): no params data found [ 872.197030][ T61] Bluetooth: hci12: command tx timeout [ 872.308485][T15446] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.308622][T15446] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.308792][T15446] bridge_slave_0: entered allmulticast mode [ 872.310427][T15446] bridge_slave_0: entered promiscuous mode [ 872.313122][T15446] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.313254][T15446] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.313604][T15446] bridge_slave_1: entered allmulticast mode [ 872.315208][T15446] bridge_slave_1: entered promiscuous mode [ 872.437439][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 872.502444][T15446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.505876][T15446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.660251][T15446] team0: Port device team_slave_0 added [ 872.662882][T15446] team0: Port device team_slave_1 added [ 872.809086][T15446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.809099][T15446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.809113][T15446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.810607][T15446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.810616][T15446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.810629][T15446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 873.183524][T15446] hsr_slave_0: entered promiscuous mode [ 873.184520][T15446] hsr_slave_1: entered promiscuous mode [ 873.185152][T15446] debugfs: 'hsr0' already exists in 'hsr' [ 873.185167][T15446] Cannot create hsr debugfs directory [ 873.877217][T15153] Bluetooth: hci13: command tx timeout [ 874.280793][T14745] Bluetooth: hci12: command tx timeout [ 874.285362][ T61] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 874.312472][ T61] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 874.313692][ T61] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 874.315272][ T61] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 874.316404][ T61] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 874.537332][T15455] chnl_net:caif_netlink_parms(): no params data found [ 874.779712][T15455] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.779853][T15455] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.780033][T15455] bridge_slave_0: entered allmulticast mode [ 874.781689][T15455] bridge_slave_0: entered promiscuous mode [ 874.784137][T15455] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.784258][T15455] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.784583][T15455] bridge_slave_1: entered allmulticast mode [ 874.786153][T15455] bridge_slave_1: entered promiscuous mode [ 874.912276][T15455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.915564][T15455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.119697][T15455] team0: Port device team_slave_0 added [ 875.122560][T15455] team0: Port device team_slave_1 added [ 875.300251][T15455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.300268][T15455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.300282][T15455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.301847][T15455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.301860][T15455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.301876][T15455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.464459][T15455] hsr_slave_0: entered promiscuous mode [ 875.465501][T15455] hsr_slave_1: entered promiscuous mode [ 875.466160][T15455] debugfs: 'hsr0' already exists in 'hsr' [ 875.466175][T15455] Cannot create hsr debugfs directory [ 875.957060][ T61] Bluetooth: hci13: command tx timeout [ 876.357084][ T61] Bluetooth: hci14: command tx timeout [ 876.796997][ T104] block nbd0: Possible stuck request ffff888024b87000: control (read@0,1024B). Runtime 240 seconds [ 876.797043][ T104] block nbd0: Possible stuck request ffff888024b871c0: control (read@1024,1024B). Runtime 240 seconds [ 876.797070][ T104] block nbd0: Possible stuck request ffff888024b87380: control (read@2048,1024B). Runtime 240 seconds [ 876.797096][ T104] block nbd0: Possible stuck request ffff888024b87540: control (read@3072,1024B). Runtime 240 seconds [ 877.556942][ T61] Bluetooth: hci3: command 0x0406 tx timeout [ 878.037113][T15153] Bluetooth: hci13: command tx timeout [ 878.436909][T15153] Bluetooth: hci14: command tx timeout [ 880.117105][T15153] Bluetooth: hci13: command tx timeout [ 880.517161][T15153] Bluetooth: hci14: command tx timeout [ 880.636908][ T104] block nbd1: Possible stuck request ffff888024c20000: control (read@0,1024B). Runtime 90 seconds [ 880.636937][ T104] block nbd1: Possible stuck request ffff888024c201c0: control (read@1024,1024B). Runtime 90 seconds [ 880.636952][ T104] block nbd1: Possible stuck request ffff888024c20380: control (read@2048,1024B). Runtime 90 seconds [ 880.636967][ T104] block nbd1: Possible stuck request ffff888024c20540: control (read@3072,1024B). Runtime 90 seconds [ 882.597118][T15153] Bluetooth: hci14: command tx timeout [ 906.876992][ T104] block nbd0: Possible stuck request ffff888024b87000: control (read@0,1024B). Runtime 270 seconds [ 906.877026][ T104] block nbd0: Possible stuck request ffff888024b871c0: control (read@1024,1024B). Runtime 270 seconds [ 906.877042][ T104] block nbd0: Possible stuck request ffff888024b87380: control (read@2048,1024B). Runtime 270 seconds [ 906.877056][ T104] block nbd0: Possible stuck request ffff888024b87540: control (read@3072,1024B). Runtime 270 seconds [ 910.717070][ T104] block nbd1: Possible stuck request ffff888024c20000: control (read@0,1024B). Runtime 120 seconds [ 910.717111][ T104] block nbd1: Possible stuck request ffff888024c201c0: control (read@1024,1024B). Runtime 120 seconds [ 910.717138][ T104] block nbd1: Possible stuck request ffff888024c20380: control (read@2048,1024B). Runtime 120 seconds [ 910.717164][ T104] block nbd1: Possible stuck request ffff888024c20540: control (read@3072,1024B). Runtime 120 seconds [ 921.928281][T14745] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 921.933166][T14745] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 921.934325][T14745] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 921.935676][T14745] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 921.936358][T14745] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 922.154240][T15465] chnl_net:caif_netlink_parms(): no params data found [ 922.428536][T15465] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.428675][T15465] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.428862][T15465] bridge_slave_0: entered allmulticast mode [ 922.430527][T15465] bridge_slave_0: entered promiscuous mode [ 922.435166][T15465] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.435313][T15465] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.435678][T15465] bridge_slave_1: entered allmulticast mode [ 922.461158][T15465] bridge_slave_1: entered promiscuous mode [ 922.602177][T15465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 922.605681][T15465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 922.750407][T15465] team0: Port device team_slave_0 added [ 922.753542][T15465] team0: Port device team_slave_1 added [ 922.900606][T15465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 922.900623][T15465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 922.900639][T15465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 922.902178][T15465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 922.902188][T15465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 922.902201][T15465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 923.113828][T15465] hsr_slave_0: entered promiscuous mode [ 923.115580][T15465] hsr_slave_1: entered promiscuous mode [ 923.116295][T15465] debugfs: 'hsr0' already exists in 'hsr' [ 923.116311][T15465] Cannot create hsr debugfs directory [ 923.559961][T15153] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 923.579061][T15153] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 923.580423][T15153] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 923.583648][T15153] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 923.584874][T15153] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 923.647190][T14745] Bluetooth: hci4: command 0x0406 tx timeout [ 923.958405][ T61] Bluetooth: hci15: command tx timeout [ 924.183115][T15474] chnl_net:caif_netlink_parms(): no params data found [ 924.519539][T15474] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.519783][T15474] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.520387][T15474] bridge_slave_0: entered allmulticast mode [ 924.522376][T15474] bridge_slave_0: entered promiscuous mode [ 924.524848][T15474] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.524984][T15474] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.525131][T15474] bridge_slave_1: entered allmulticast mode [ 924.528578][T15474] bridge_slave_1: entered promiscuous mode [ 924.726022][T15474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.738572][T15474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.943143][T15474] team0: Port device team_slave_0 added [ 924.952531][T15474] team0: Port device team_slave_1 added [ 925.128812][T15474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.128826][T15474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 925.128847][T15474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.131263][T15474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.131276][T15474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 925.131299][T15474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 925.484134][T15474] hsr_slave_0: entered promiscuous mode [ 925.485205][T15474] hsr_slave_1: entered promiscuous mode [ 925.485878][T15474] debugfs: 'hsr0' already exists in 'hsr' [ 925.485893][T15474] Cannot create hsr debugfs directory [ 925.636975][ T61] Bluetooth: hci16: command tx timeout [ 926.037049][ T61] Bluetooth: hci15: command tx timeout [ 926.615409][T14745] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 926.622300][T14745] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 926.624034][T14745] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 926.629206][T14745] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 926.630239][T14745] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 926.868133][T15483] chnl_net:caif_netlink_parms(): no params data found [ 927.118519][T15483] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.118651][T15483] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.119000][T15483] bridge_slave_0: entered allmulticast mode [ 927.121170][T15483] bridge_slave_0: entered promiscuous mode [ 927.123659][T15483] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.123779][T15483] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.123935][T15483] bridge_slave_1: entered allmulticast mode [ 927.125530][T15483] bridge_slave_1: entered promiscuous mode [ 927.271956][T15483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.275248][T15483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.499871][T15483] team0: Port device team_slave_0 added [ 927.502282][T15483] team0: Port device team_slave_1 added [ 927.669067][T15483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 927.669079][T15483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 927.669093][T15483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 927.670593][T15483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 927.670602][T15483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 927.670615][T15483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 927.716985][ T61] Bluetooth: hci16: command tx timeout [ 927.843841][T15483] hsr_slave_0: entered promiscuous mode [ 927.845052][T15483] hsr_slave_1: entered promiscuous mode [ 927.845691][T15483] debugfs: 'hsr0' already exists in 'hsr' [ 927.845705][T15483] Cannot create hsr debugfs directory [ 928.117222][ T61] Bluetooth: hci15: command tx timeout [ 928.678268][ T61] Bluetooth: hci17: command tx timeout [ 928.756996][ T61] Bluetooth: hci7: command 0x0406 tx timeout [ 928.757621][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 929.807098][T15153] Bluetooth: hci16: command tx timeout [ 930.196980][T15153] Bluetooth: hci15: command tx timeout [ 930.757142][T15153] Bluetooth: hci17: command tx timeout [ 931.805385][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.805483][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.876937][T15153] Bluetooth: hci16: command tx timeout [ 932.846838][T15153] Bluetooth: hci17: command tx timeout [ 932.943644][ T5810] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 932.948739][ T5810] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 932.950136][ T5810] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 932.959299][ T5810] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 932.960800][ T5810] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 933.184320][T15492] chnl_net:caif_netlink_parms(): no params data found [ 933.448651][T15492] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.448788][T15492] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.449184][T15492] bridge_slave_0: entered allmulticast mode [ 933.450865][T15492] bridge_slave_0: entered promiscuous mode [ 933.453330][T15492] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.453450][T15492] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.453654][T15492] bridge_slave_1: entered allmulticast mode [ 933.455289][T15492] bridge_slave_1: entered promiscuous mode [ 933.602592][T15492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 933.606446][T15492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 933.770466][T15492] team0: Port device team_slave_0 added [ 933.773861][T15492] team0: Port device team_slave_1 added [ 933.876901][ T5810] Bluetooth: hci8: command 0x0406 tx timeout [ 933.929172][T15492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 933.929185][T15492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.929198][T15492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 933.930844][T15492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 933.930852][T15492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.930866][T15492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 934.114161][T15492] hsr_slave_0: entered promiscuous mode [ 934.115282][T15492] hsr_slave_1: entered promiscuous mode [ 934.115995][T15492] debugfs: 'hsr0' already exists in 'hsr' [ 934.116011][T15492] Cannot create hsr debugfs directory [ 934.917052][T14745] Bluetooth: hci17: command tx timeout [ 934.997074][T14745] Bluetooth: hci18: command tx timeout [ 935.760668][ T5810] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 935.765769][ T5810] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 935.767592][ T5810] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 935.776197][ T5810] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 935.779010][ T5810] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 935.991439][T15501] chnl_net:caif_netlink_parms(): no params data found [ 936.268690][T15501] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.268826][T15501] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.269058][T15501] bridge_slave_0: entered allmulticast mode [ 936.270803][T15501] bridge_slave_0: entered promiscuous mode [ 936.273113][T15501] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.273232][T15501] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.273405][T15501] bridge_slave_1: entered allmulticast mode [ 936.275006][T15501] bridge_slave_1: entered promiscuous mode [ 936.452379][T15501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.455935][T15501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 936.621141][T15501] team0: Port device team_slave_0 added [ 936.623819][T15501] team0: Port device team_slave_1 added [ 936.809326][T15501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 936.809338][T15501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 936.809352][T15501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 936.811051][T15501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 936.811060][T15501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 936.811074][T15501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 936.957004][ T104] block nbd0: Possible stuck request ffff888024b87000: control (read@0,1024B). Runtime 300 seconds [ 936.957059][ T104] block nbd0: Possible stuck request ffff888024b871c0: control (read@1024,1024B). Runtime 300 seconds [ 936.957091][ T104] block nbd0: Possible stuck request ffff888024b87380: control (read@2048,1024B). Runtime 300 seconds [ 936.957113][ T104] block nbd0: Possible stuck request ffff888024b87540: control (read@3072,1024B). Runtime 300 seconds [ 937.016054][T15501] hsr_slave_0: entered promiscuous mode [ 937.017803][T15501] hsr_slave_1: entered promiscuous mode [ 937.018867][T15501] debugfs: 'hsr0' already exists in 'hsr' [ 937.018891][T15501] Cannot create hsr debugfs directory [ 937.077092][T14745] Bluetooth: hci18: command tx timeout [ 937.797044][T14745] Bluetooth: hci19: command tx timeout [ 938.997487][T14745] Bluetooth: hci9: command 0x0406 tx timeout [ 939.157243][ T5810] Bluetooth: hci18: command tx timeout [ 939.877455][ T5810] Bluetooth: hci19: command tx timeout [ 940.797018][ T104] block nbd1: Possible stuck request ffff888024c20000: control (read@0,1024B). Runtime 150 seconds [ 940.797048][ T104] block nbd1: Possible stuck request ffff888024c201c0: control (read@1024,1024B). Runtime 150 seconds [ 940.797063][ T104] block nbd1: Possible stuck request ffff888024c20380: control (read@2048,1024B). Runtime 150 seconds [ 940.797078][ T104] block nbd1: Possible stuck request ffff888024c20540: control (read@3072,1024B). Runtime 150 seconds [ 941.247215][ T5810] Bluetooth: hci18: command tx timeout [ 941.957263][ T5810] Bluetooth: hci19: command tx timeout [ 944.037212][ T5810] Bluetooth: hci19: command tx timeout [ 950.357258][ T38] INFO: task dhcpcd:5461 blocked for more than 143 seconds. [ 950.357283][ T38] Not tainted syzkaller #0 [ 950.357291][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 950.357300][ T38] task:dhcpcd state:D stack:24936 pid:5461 tgid:5461 ppid:1 task_flags:0x400140 flags:0x00080001 [ 950.357349][ T38] Call Trace: [ 950.357356][ T38] [ 950.357369][ T38] __schedule+0x16f3/0x4c20 [ 950.357406][ T38] ? sched_clock+0x3f/0x60 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 950.357426][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 950.357454][ T38] ? __pfx___schedule+0x10/0x10 [ 950.357500][ T38] rt_mutex_schedule+0x77/0xf0 [ 950.357517][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 950.357550][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 950.357573][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 950.357594][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 950.357613][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 950.357629][ T38] ? __lock_acquire+0xab9/0xd20 [ 950.357655][ T38] ? genl_rcv_msg+0x10d/0x790 [ 950.357682][ T38] ? genl_rcv_msg+0x10d/0x790 [ 950.357699][ T38] mutex_lock_nested+0x16a/0x1d0 [ 950.357717][ T38] ? radix_tree_lookup+0x243/0x290 [ 950.357740][ T38] genl_rcv_msg+0x10d/0x790 [ 950.357761][ T38] ? __lock_acquire+0xab9/0xd20 [ 950.357780][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 950.357804][ T38] ? __lock_acquire+0xab9/0xd20 [ 950.357831][ T38] netlink_rcv_skb+0x208/0x470 [ 950.357850][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 950.357873][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 950.357907][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 950.357926][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 950.357948][ T38] genl_rcv+0x28/0x40 [ 950.357967][ T38] netlink_unicast+0x846/0xa10 [ 950.358006][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 950.358025][ T38] ? netlink_sendmsg+0x642/0xb30 [ 950.358042][ T38] ? skb_put+0x11b/0x210 [ 950.358065][ T38] netlink_sendmsg+0x805/0xb30 [ 950.358094][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.358116][ T38] ? __lock_acquire+0xab9/0xd20 [ 950.358139][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 950.358159][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.358175][ T38] __sock_sendmsg+0x21c/0x270 [ 950.358201][ T38] ____sys_sendmsg+0x508/0x820 [ 950.358227][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 950.358257][ T38] ? import_iovec+0x74/0xa0 [ 950.358280][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 950.358302][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 950.358319][ T38] ? do_raw_spin_lock+0x121/0x290 [ 950.358395][ T38] __x64_sys_sendmsg+0x1a1/0x260 [ 950.358418][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 950.358452][ T38] ? __secure_computing+0xe2/0x2a0 [ 950.358480][ T38] do_syscall_64+0xfa/0xfa0 [ 950.358501][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 950.358522][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.358539][ T38] ? clear_bhb_loop+0x60/0xb0 [ 950.358560][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.358577][ T38] RIP: 0033:0x7fdeee917407 [ 950.358609][ T38] RSP: 002b:00007fff6ca996f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 950.358628][ T38] RAX: ffffffffffffffda RBX: 00007fdeee88d740 RCX: 00007fdeee917407 [ 950.358641][ T38] RDX: 0000000000000000 RSI: 00007fff6ca99770 RDI: 000000000000000e [ 950.358653][ T38] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 950.358664][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 0000557675e9ae10 [ 950.358675][ T38] R13: 000000000000000e R14: 00007fff6caadc30 R15: 000055767bfd0aa0 [ 950.358708][ T38] [ 950.358748][ T38] INFO: task syz-executor:15094 blocked for more than 143 seconds. [ 950.358761][ T38] Not tainted syzkaller #0 [ 950.358770][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 950.358779][ T38] task:syz-executor state:D stack:22568 pid:15094 tgid:15094 ppid:1 task_flags:0x400140 flags:0x00080002 [ 950.358825][ T38] Call Trace: [ 950.358831][ T38] [ 950.358843][ T38] __schedule+0x16f3/0x4c20 [ 950.358875][ T38] ? kobject_uevent_env+0x36e/0x8c0 [ 950.358895][ T38] ? kernel_text_address+0xa5/0xe0 [ 950.358918][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 950.358942][ T38] ? __pfx___schedule+0x10/0x10 [ 950.358990][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 950.359017][ T38] rt_mutex_schedule+0x77/0xf0 [ 950.359035][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 950.359055][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 950.359096][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 950.359117][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 950.359135][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 950.359152][ T38] ? __lock_acquire+0xab9/0xd20 [ 950.359181][ T38] ? genl_rcv_msg+0x10d/0x790 [ 950.359214][ T38] ? genl_rcv_msg+0x10d/0x790 [ 950.359231][ T38] mutex_lock_nested+0x16a/0x1d0 [ 950.359248][ T38] ? radix_tree_lookup+0x243/0x290 [ 950.359271][ T38] genl_rcv_msg+0x10d/0x790 [ 950.359295][ T38] ? __lock_acquire+0xab9/0xd20 [ 950.359315][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 950.359339][ T38] ? __lock_acquire+0xab9/0xd20 [ 950.359368][ T38] netlink_rcv_skb+0x208/0x470 [ 950.359388][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 950.359410][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 950.359443][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 950.359461][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 950.359482][ T38] genl_rcv+0x28/0x40 [ 950.359500][ T38] netlink_unicast+0x846/0xa10 [ 950.359524][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 950.359543][ T38] ? netlink_sendmsg+0x642/0xb30 [ 950.359559][ T38] ? skb_put+0x11b/0x210 [ 950.359581][ T38] netlink_sendmsg+0x805/0xb30 [ 950.359610][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.359637][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 950.359657][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.359676][ T38] __sock_sendmsg+0x21c/0x270 [ 950.359702][ T38] __sys_sendto+0x3c7/0x520 [ 950.359724][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 950.359740][ T38] ? __lock_acquire+0xab9/0xd20 [ 950.359789][ T38] ? fd_install+0x9a/0x550 [ 950.359810][ T38] ? fd_install+0x313/0x550 [ 950.359840][ T38] __x64_sys_sendto+0xde/0x100 [ 950.359864][ T38] do_syscall_64+0xfa/0xfa0 [ 950.359884][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 950.359905][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.359923][ T38] ? clear_bhb_loop+0x60/0xb0 [ 950.359944][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.359961][ T38] RIP: 0033:0x7fed3b2115dc [ 950.359983][ T38] RSP: 002b:00007ffd005101c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 950.360001][ T38] RAX: ffffffffffffffda RBX: 00007fed3bf94620 RCX: 00007fed3b2115dc [ 950.360015][ T38] RDX: 0000000000000020 RSI: 00007fed3bf94670 RDI: 0000000000000005 [ 950.360027][ T38] RBP: 0000000000000000 R08: 00007ffd00510214 R09: 000000000000000c [ 950.360038][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 950.360049][ T38] R13: 00007ffd00510268 R14: 00007fed3bf94670 R15: 0000000000000000 [ 950.360082][ T38] [ 950.360090][ T38] INFO: task syz-executor:15112 blocked for more than 143 seconds. [ 950.360103][ T38] Not tainted syzkaller #0 [ 950.360112][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 950.360121][ T38] task:syz-executor state:D stack:21832 pid:15112 tgid:15112 ppid:1 task_flags:0x400140 flags:0x00080002 [ 950.360165][ T38] Call Trace: [ 950.360171][ T38] [ 950.360183][ T38] __schedule+0x16f3/0x4c20 [ 950.360214][ T38] ? kobject_uevent_env+0x36e/0x8c0 [ 950.360233][ T38] ? kernel_text_address+0xa5/0xe0 [ 950.360254][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 950.360277][ T38] ? __pfx___schedule+0x10/0x10 [ 950.360319][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 950.360344][ T38] rt_mutex_schedule+0x77/0xf0 [ 950.360361][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 950.360381][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 950.360419][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 950.360441][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 950.360461][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 950.360478][ T38] ? __lock_acquire+0xab9/0xd20 [ 950.360511][ T38] ? genl_rcv_msg+0x10d/0x790 [ 950.360546][ T38] ? genl_rcv_msg+0x10d/0x790 [ 950.360564][ T38] mutex_lock_nested+0x16a/0x1d0 [ 950.360583][ T38] ? radix_tree_lookup+0x243/0x290 [ 950.360607][ T38] genl_rcv_msg+0x10d/0x790 [ 950.360630][ T38] ? __lock_acquire+0xab9/0xd20 [ 950.360652][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 950.360679][ T38] ? __lock_acquire+0xab9/0xd20 [ 950.360709][ T38] netlink_rcv_skb+0x208/0x470 [ 950.360729][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 950.360752][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 950.360788][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 950.360806][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 950.360828][ T38] genl_rcv+0x28/0x40 [ 950.360869][ T38] netlink_unicast+0x846/0xa10 [ 950.360896][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 950.360916][ T38] ? netlink_sendmsg+0x642/0xb30 [ 950.360932][ T38] ? skb_put+0x11b/0x210 [ 950.360955][ T38] netlink_sendmsg+0x805/0xb30 [ 950.360990][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.361019][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 950.361040][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.361060][ T38] __sock_sendmsg+0x21c/0x270 [ 950.361086][ T38] __sys_sendto+0x3c7/0x520 [ 950.361108][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 950.361124][ T38] ? __lock_acquire+0xab9/0xd20 [ 950.361173][ T38] ? fd_install+0x9a/0x550 [ 950.361193][ T38] ? fd_install+0x313/0x550 [ 950.361222][ T38] __x64_sys_sendto+0xde/0x100 [ 950.361245][ T38] do_syscall_64+0xfa/0xfa0 [ 950.361266][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 950.361292][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.361310][ T38] ? clear_bhb_loop+0x60/0xb0 [ 950.361331][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.361348][ T38] RIP: 0033:0x7fea4a4715dc [ 950.361362][ T38] RSP: 002b:00007ffffd8f1a50 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 950.361380][ T38] RAX: ffffffffffffffda RBX: 00007fea4b1f4620 RCX: 00007fea4a4715dc [ 950.361393][ T38] RDX: 0000000000000020 RSI: 00007fea4b1f4670 RDI: 0000000000000005 [ 950.361405][ T38] RBP: 0000000000000000 R08: 00007ffffd8f1aa4 R09: 000000000000000c [ 950.361416][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 950.361427][ T38] R13: 00007ffffd8f1af8 R14: 00007fea4b1f4670 R15: 0000000000000000 [ 950.361472][ T38] [ 950.361480][ T38] INFO: task syz-executor:15150 blocked for more than 143 seconds. [ 950.361492][ T38] Not tainted syzkaller #0 [ 950.361501][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 950.361509][ T38] task:syz-executor state:D stack:22264 pid:15150 tgid:15150 ppid:1 task_flags:0x400140 flags:0x00080002 [ 950.361554][ T38] Call Trace: [ 950.361560][ T38] [ 950.361571][ T38] __schedule+0x16f3/0x4c20 [ 950.361604][ T38] ? kobject_uevent_env+0x36e/0x8c0 [ 950.361623][ T38] ? kernel_text_address+0xa5/0xe0 [ 950.361645][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 950.361669][ T38] ? __pfx___schedule+0x10/0x10 [ 950.361710][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 950.361735][ T38] rt_mutex_schedule+0x77/0xf0 [ 950.361752][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 950.361772][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 950.361811][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 950.361833][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 950.361854][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 950.361871][ T38] ? __lock_acquire+0xab9/0xd20 [ 950.361904][ T38] ? genl_rcv_msg+0x10d/0x790 [ 950.361939][ T38] ? genl_rcv_msg+0x10d/0x790 [ 950.361958][ T38] mutex_lock_nested+0x16a/0x1d0 [ 950.361981][ T38] ? radix_tree_lookup+0x243/0x290 [ 950.362005][ T38] genl_rcv_msg+0x10d/0x790 [ 950.362029][ T38] ? __lock_acquire+0xab9/0xd20 [ 950.362051][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 950.362079][ T38] ? __lock_acquire+0xab9/0xd20 [ 950.362109][ T38] netlink_rcv_skb+0x208/0x470 [ 950.362129][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 950.362152][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 950.362188][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 950.362206][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 950.362228][ T38] genl_rcv+0x28/0x40 [ 950.362246][ T38] netlink_unicast+0x846/0xa10 [ 950.362273][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 950.362292][ T38] ? netlink_sendmsg+0x642/0xb30 [ 950.362309][ T38] ? skb_put+0x11b/0x210 [ 950.362331][ T38] netlink_sendmsg+0x805/0xb30 [ 950.362361][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.362389][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 950.362410][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.362430][ T38] __sock_sendmsg+0x21c/0x270 [ 950.362456][ T38] __sys_sendto+0x3c7/0x520 [ 950.362478][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 950.362493][ T38] ? __lock_acquire+0xab9/0xd20 [ 950.362542][ T38] ? fd_install+0x9a/0x550 [ 950.362562][ T38] ? fd_install+0x313/0x550 [ 950.362592][ T38] __x64_sys_sendto+0xde/0x100 [ 950.362615][ T38] do_syscall_64+0xfa/0xfa0 [ 950.362635][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 950.362657][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.362674][ T38] ? clear_bhb_loop+0x60/0xb0 [ 950.362695][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.362712][ T38] RIP: 0033:0x7fe71a3c15dc [ 950.362726][ T38] RSP: 002b:00007ffebcf9fc30 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 950.362743][ T38] RAX: ffffffffffffffda RBX: 00007fe71b144620 RCX: 00007fe71a3c15dc [ 950.362756][ T38] RDX: 0000000000000020 RSI: 00007fe71b144670 RDI: 0000000000000005 [ 950.362768][ T38] RBP: 0000000000000000 R08: 00007ffebcf9fc84 R09: 000000000000000c [ 950.362779][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 950.362790][ T38] R13: 00007ffebcf9fcd8 R14: 00007fe71b144670 R15: 0000000000000000 [ 950.362823][ T38] [ 950.362832][ T38] INFO: task syz-executor:15188 blocked for more than 143 seconds. [ 950.362844][ T38] Not tainted syzkaller #0 [ 950.362853][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 950.362861][ T38] task:syz-executor state:D stack:21592 pid:15188 tgid:15188 ppid:1 task_flags:0x400140 flags:0x00080002 [ 950.362910][ T38] Call Trace: [ 950.362916][ T38] [ 950.362928][ T38] __schedule+0x16f3/0x4c20 [ 950.362959][ T38] ? kobject_uevent_env+0x36e/0x8c0 [ 950.362983][ T38] ? kernel_text_address+0xa5/0xe0 [ 950.363005][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 950.363029][ T38] ? __pfx___schedule+0x10/0x10 [ 950.363070][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 950.363096][ T38] rt_mutex_schedule+0x77/0xf0 [ 950.363113][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 950.363134][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 950.363172][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 950.363194][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 950.363215][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 950.363232][ T38] ? __lock_acquire+0xab9/0xd20 [ 950.363265][ T38] ? genl_rcv_msg+0x10d/0x790 [ 950.363298][ T38] ? genl_rcv_msg+0x10d/0x790 [ 950.363317][ T38] mutex_lock_nested+0x16a/0x1d0 [ 950.363335][ T38] ? radix_tree_lookup+0x243/0x290 [ 950.363358][ T38] genl_rcv_msg+0x10d/0x790 [ 950.363388][ T38] ? __lock_acquire+0xab9/0xd20 [ 950.363409][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 950.363437][ T38] ? __lock_acquire+0xab9/0xd20 [ 950.363467][ T38] netlink_rcv_skb+0x208/0x470 [ 950.363492][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 950.363516][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 950.363551][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 950.363569][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 950.363593][ T38] genl_rcv+0x28/0x40 [ 950.363612][ T38] netlink_unicast+0x846/0xa10 [ 950.363640][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 950.363660][ T38] ? netlink_sendmsg+0x642/0xb30 [ 950.363677][ T38] ? skb_put+0x11b/0x210 [ 950.363700][ T38] netlink_sendmsg+0x805/0xb30 [ 950.363730][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.363758][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 950.363778][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.363798][ T38] __sock_sendmsg+0x21c/0x270 [ 950.363825][ T38] __sys_sendto+0x3c7/0x520 [ 950.363846][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 950.363863][ T38] ? __lock_acquire+0xab9/0xd20 [ 950.363911][ T38] ? fd_install+0x9a/0x550 [ 950.363931][ T38] ? fd_install+0x313/0x550 [ 950.363961][ T38] __x64_sys_sendto+0xde/0x100 [ 950.363990][ T38] do_syscall_64+0xfa/0xfa0 [ 950.364010][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 950.364032][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.364049][ T38] ? clear_bhb_loop+0x60/0xb0 [ 950.364070][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.364087][ T38] RIP: 0033:0x7f895ad715dc [ 950.364101][ T38] RSP: 002b:00007ffdbfab44e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 950.364119][ T38] RAX: ffffffffffffffda RBX: 00007f895baf4620 RCX: 00007f895ad715dc [ 950.364132][ T38] RDX: 0000000000000020 RSI: 00007f895baf4670 RDI: 0000000000000005 [ 950.364144][ T38] RBP: 0000000000000000 R08: 00007ffdbfab4534 R09: 000000000000000c [ 950.364156][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 950.364167][ T38] R13: 00007ffdbfab4588 R14: 00007f895baf4670 R15: 0000000000000000 [ 950.364199][ T38] [ 950.364210][ T38] INFO: task syz.4.2885:15360 blocked for more than 143 seconds. [ 950.364221][ T38] Not tainted syzkaller #0 [ 950.364230][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 950.364238][ T38] task:syz.4.2885 state:D stack:26024 pid:15360 tgid:15358 ppid:5797 task_flags:0x480140 flags:0x00080002 [ 950.364287][ T38] Call Trace: [ 950.364293][ T38] [ 950.364304][ T38] __schedule+0x16f3/0x4c20 [ 950.364335][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 950.364359][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 950.364388][ T38] ? __lock_acquire+0xab9/0xd20 [ 950.364409][ T38] ? __pfx___schedule+0x10/0x10 [ 950.364448][ T38] ? schedule+0x91/0x360 [ 950.364473][ T38] schedule+0x165/0x360 [ 950.364497][ T38] blk_mq_freeze_queue_wait+0xf4/0x170 [ 950.364518][ T38] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 950.364539][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 950.364577][ T38] queue_limits_commit_update_frozen+0x5d/0x3e0 [ 950.364608][ T38] nbd_set_size+0x47e/0x6b0 [ 950.364637][ T38] ? __pfx_nbd_set_size+0x10/0x10 [ 950.364680][ T38] ? nla_memcpy+0x5b/0xc0 [ 950.364708][ T38] nbd_genl_size_set+0x2eb/0x3c0 [ 950.364735][ T38] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 950.364761][ T38] ? mutex_lock_nested+0x154/0x1d0 [ 950.364779][ T38] ? nbd_genl_reconfigure+0x375/0x1a70 [ 950.364802][ T38] nbd_genl_reconfigure+0x414/0x1a70 [ 950.364843][ T38] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 950.364863][ T38] ? rcu_is_watching+0x15/0xb0 [ 950.364884][ T38] ? __nla_parse+0x40/0x60 [ 950.364909][ T38] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 950.364939][ T38] genl_family_rcv_msg_doit+0x215/0x300 [ 950.364995][ T38] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 950.365043][ T38] genl_rcv_msg+0x60e/0x790 [ 950.365071][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 950.365092][ T38] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 950.365116][ T38] ? __lock_acquire+0xab9/0xd20 [ 950.365146][ T38] netlink_rcv_skb+0x208/0x470 [ 950.365166][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 950.365193][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 950.365227][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 950.365245][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 950.365268][ T38] genl_rcv+0x28/0x40 [ 950.365287][ T38] netlink_unicast+0x846/0xa10 [ 950.365315][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 950.365335][ T38] ? netlink_sendmsg+0x642/0xb30 [ 950.365352][ T38] ? skb_put+0x11b/0x210 [ 950.365375][ T38] netlink_sendmsg+0x805/0xb30 [ 950.365404][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.365431][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 950.365451][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.365470][ T38] __sock_sendmsg+0x21c/0x270 [ 950.365496][ T38] ____sys_sendmsg+0x508/0x820 [ 950.365523][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 950.365554][ T38] ? import_iovec+0x74/0xa0 [ 950.365577][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 950.365600][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 950.365662][ T38] ? __fget_files+0x2a/0x420 [ 950.365683][ T38] ? __fget_files+0x3a6/0x420 [ 950.365716][ T38] __x64_sys_sendmsg+0x1a1/0x260 [ 950.365740][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 950.365771][ T38] ? do_user_addr_fault+0xc85/0x1380 [ 950.365797][ T38] ? do_syscall_64+0xbe/0xfa0 [ 950.365823][ T38] do_syscall_64+0xfa/0xfa0 [ 950.365844][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 950.365865][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.365882][ T38] ? clear_bhb_loop+0x60/0xb0 [ 950.365903][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.365920][ T38] RIP: 0033:0x7ff938bcf749 [ 950.365935][ T38] RSP: 002b:00007ff936e15038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 950.365952][ T38] RAX: ffffffffffffffda RBX: 00007ff938e26090 RCX: 00007ff938bcf749 [ 950.365965][ T38] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000004 [ 950.365985][ T38] RBP: 00007ff938c53f91 R08: 0000000000000000 R09: 0000000000000000 [ 950.365997][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 950.366008][ T38] R13: 00007ff938e26128 R14: 00007ff938e26090 R15: 00007fff4489c0c8 [ 950.366040][ T38] [ 950.366111][ T38] [ 950.366111][ T38] Showing all locks held in the system: [ 950.366127][ T38] 1 lock held by khungtaskd/38: [ 950.366136][ T38] #0: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 950.366199][ T38] 2 locks held by dhcpcd/5461: [ 950.366204][ T38] #0: ffffffff8e8ca0e0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.366232][ T38] #1: ffffffff8e8c9ed8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.366257][ T38] 2 locks held by getty/5561: [ 950.366263][ T38] #0: ffff88823bf700a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 950.366287][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 950.366320][ T38] 1 lock held by udevd/14037: [ 950.366325][ T38] #0: ffff888024aae4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 950.366353][ T38] 1 lock held by udevd/14781: [ 950.366358][ T38] #0: ffff888024b074c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 950.366384][ T38] 2 locks held by syz-executor/15094: [ 950.366390][ T38] #0: ffffffff8e8ca0e0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.366413][ T38] #1: ffffffff8e8c9ed8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.366438][ T38] 2 locks held by syz-executor/15112: [ 950.366443][ T38] #0: ffffffff8e8ca0e0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.366467][ T38] #1: ffffffff8e8c9ed8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.366491][ T38] 2 locks held by syz-executor/15150: [ 950.366497][ T38] #0: ffffffff8e8ca0e0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.366521][ T38] #1: ffffffff8e8c9ed8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.366546][ T38] 2 locks held by syz-executor/15188: [ 950.366552][ T38] #0: ffffffff8e8ca0e0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.366575][ T38] #1: ffffffff8e8c9ed8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.366600][ T38] 6 locks held by syz.4.2885/15360: [ 950.366605][ T38] #0: ffffffff8e8ca0e0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.366629][ T38] #1: ffffffff8e8c9ed8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.583206][ T38] #2: ffff888024aa5240 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x375/0x1a70 [ 950.583251][ T38] #3: ffff888143384738 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6b0 [ 950.583294][ T38] #4: ffff8881433840a8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 950.583346][ T38] #5: ffff8881433840e0 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 950.583400][ T38] 2 locks held by syz-executor/15373: [ 950.583411][ T38] #0: ffffffff8e8ca0e0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.583451][ T38] #1: ffffffff8e8c9ed8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.583500][ T38] 2 locks held by syz-executor/15381: [ 950.583510][ T38] #0: ffffffff8e8ca0e0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.583551][ T38] #1: ffffffff8e8c9ed8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.583593][ T38] 2 locks held by syz-executor/15384: [ 950.583603][ T38] #0: ffffffff8e8ca0e0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.583644][ T38] #1: ffffffff8e8c9ed8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.583687][ T38] 2 locks held by syz-executor/15395: [ 950.583696][ T38] #0: ffffffff8e8ca0e0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.583738][ T38] #1: ffffffff8e8c9ed8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.583780][ T38] 2 locks held by syz-executor/15405: [ 950.583789][ T38] #0: ffffffff8e8ca0e0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.583830][ T38] #1: ffffffff8e8c9ed8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.583872][ T38] 2 locks held by syz-executor/15419: [ 950.583882][ T38] #0: ffffffff8e8ca0e0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.583923][ T38] #1: ffffffff8e8c9ed8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.583965][ T38] 2 locks held by syz-executor/15428: [ 950.583975][ T38] #0: ffffffff8e8ca0e0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.584024][ T38] #1: ffffffff8e8c9ed8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.584066][ T38] 2 locks held by syz-executor/15437: [ 950.584076][ T38] #0: ffffffff8e8ca0e0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.584116][ T38] #1: ffffffff8e8c9ed8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.584159][ T38] 2 locks held by syz-executor/15446: [ 950.584168][ T38] #0: ffffffff8e8ca0e0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.584209][ T38] #1: ffffffff8e8c9ed8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.584252][ T38] 2 locks held by syz-executor/15455: [ 950.584262][ T38] #0: ffffffff8e8ca0e0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.584302][ T38] #1: ffffffff8e8c9ed8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.584346][ T38] 2 locks held by syz-executor/15465: [ 950.584356][ T38] #0: ffffffff8e8ca0e0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.584395][ T38] #1: ffffffff8e8c9ed8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.584437][ T38] 2 locks held by syz-executor/15474: [ 950.584447][ T38] #0: ffffffff8e8ca0e0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.584487][ T38] #1: ffffffff8e8c9ed8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.584531][ T38] 2 locks held by syz-executor/15483: [ 950.584541][ T38] #0: ffffffff8e8ca0e0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.584581][ T38] #1: ffffffff8e8c9ed8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.584624][ T38] 2 locks held by syz-executor/15492: [ 950.584634][ T38] #0: ffffffff8e8ca0e0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.584675][ T38] #1: ffffffff8e8c9ed8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.584717][ T38] 2 locks held by syz-executor/15501: [ 950.584727][ T38] #0: ffffffff8e8ca0e0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 950.584768][ T38] #1: ffffffff8e8c9ed8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 950.584870][ T38] [ 950.584875][ T38] ============================================= [ 950.584875][ T38] [ 950.584900][ T38] NMI backtrace for cpu 1 [ 950.584914][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 950.584933][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 950.584944][ T38] Call Trace: [ 950.584951][ T38] [ 950.584958][ T38] dump_stack_lvl+0x189/0x250 [ 950.584986][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 950.585015][ T38] ? __pfx__printk+0x10/0x10 [ 950.585047][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 950.585070][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 950.585091][ T38] ? __pfx__printk+0x10/0x10 [ 950.585114][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 950.585134][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 950.585156][ T38] watchdog+0xf60/0xfa0 [ 950.585186][ T38] ? watchdog+0x1e2/0xfa0 [ 950.585212][ T38] kthread+0x711/0x8a0 [ 950.585238][ T38] ? __pfx_watchdog+0x10/0x10 [ 950.585258][ T38] ? __pfx_kthread+0x10/0x10 [ 950.585277][ T38] ? rt_spin_unlock+0x150/0x200 [ 950.585299][ T38] ? rt_spin_unlock+0x161/0x200 [ 950.585316][ T38] ? __pfx_kthread+0x10/0x10 [ 950.585337][ T38] ret_from_fork+0x4bc/0x870 [ 950.585360][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 950.585385][ T38] ? __switch_to_asm+0x39/0x70 [ 950.585400][ T38] ? __switch_to_asm+0x33/0x70 [ 950.585415][ T38] ? __pfx_kthread+0x10/0x10 [ 950.585437][ T38] ret_from_fork_asm+0x1a/0x30 [ 950.585470][ T38] [ 950.585476][ T38] Sending NMI from CPU 1 to CPUs 0: [ 950.585500][ C0] NMI backtrace for cpu 0 [ 950.585515][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 950.585533][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 950.585544][ C0] RIP: 0010:delay_tsc+0x71/0xc0 [ 950.585564][ C0] Code: 00 00 e8 c2 61 d0 f6 65 8b 05 3b 59 e3 06 85 c0 74 1c f3 90 bf 01 00 00 00 e8 fb 5f d0 f6 e8 06 64 01 00 39 c5 75 0e 0f 01 f9 <66> 90 eb bd e8 06 91 73 f6 eb dd 4c 29 fb e8 ec 63 01 00 89 c5 0f [ 950.585580][ C0] RSP: 0018:ffffc90000167870 EFLAGS: 00000246 [ 950.585595][ C0] RAX: 0000000056987be2 RBX: 0000000000000899 RCX: 0000000000000000 [ 950.585607][ C0] RDX: 00000000000001e9 RSI: ffffffff8b3ddfc0 RDI: ffffffff8b3ddf80 [ 950.585620][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 950.585630][ C0] R10: dffffc0000000000 R11: ffffffff8abf46a0 R12: 1ffffffff31d241e [ 950.585643][ C0] R13: 00000000ffffffff R14: 000001e956987ab8 R15: 00000000000000a2 [ 950.585655][ C0] FS: 0000000000000000(0000) GS:ffff888126df6000(0000) knlGS:0000000000000000 [ 950.585669][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 950.585681][ C0] CR2: 00007f7291986cc0 CR3: 0000000033734000 CR4: 00000000003526f0 [ 950.585697][ C0] Call Trace: [ 950.585704][ C0] [ 950.585711][ C0] wait_for_lsr+0x166/0x2f0 [ 950.585732][ C0] serial8250_console_write+0x11bd/0x1b40 [ 950.585761][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 950.585783][ C0] ? console_flush_all+0x13a/0xb40 [ 950.585804][ C0] ? console_flush_all+0x476/0xb40 [ 950.585824][ C0] console_flush_all+0x666/0xb40 [ 950.585843][ C0] ? console_flush_all+0x13a/0xb40 [ 950.585863][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 950.585889][ C0] __console_flush_and_unlock+0x9b/0x160 [ 950.585907][ C0] ? legacy_kthread_func+0x136/0x1a0 [ 950.585927][ C0] ? __pfx___console_flush_and_unlock+0x10/0x10 [ 950.585944][ C0] ? schedule+0x91/0x360 [ 950.585969][ C0] legacy_kthread_func+0x13b/0x1a0 [ 950.585989][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 950.586008][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 950.586029][ C0] ? __kthread_parkme+0x7b/0x200 [ 950.586049][ C0] ? __kthread_parkme+0x1a1/0x200 [ 950.586072][ C0] kthread+0x711/0x8a0 [ 950.586096][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 950.586115][ C0] ? __pfx_kthread+0x10/0x10 [ 950.586135][ C0] ? rt_spin_unlock+0x150/0x200 [ 950.586156][ C0] ? rt_spin_unlock+0x161/0x200 [ 950.586173][ C0] ? __pfx_kthread+0x10/0x10 [ 950.586196][ C0] ret_from_fork+0x4bc/0x870 [ 950.586215][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 950.586237][ C0] ? __switch_to_asm+0x39/0x70 [ 950.586258][ C0] ? __switch_to_asm+0x33/0x70 [ 950.586273][ C0] ? __pfx_kthread+0x10/0x10 [ 950.586295][ C0] ret_from_fork_asm+0x1a/0x30 [ 950.586320][ C0]