last executing test programs: 17.667547088s ago: executing program 3 (id=8845): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) sendto$unix(r1, &(0x7f00000004c0)="ebb567fa9b", 0x5, 0x4c010, 0x0, 0x0) 17.560184132s ago: executing program 1 (id=8847): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 17.559443782s ago: executing program 3 (id=8848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) 17.508346017s ago: executing program 1 (id=8850): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xffff, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) 17.416839715s ago: executing program 3 (id=8853): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0xfff7, 0x2, 0x4, 0xed02}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 17.401475267s ago: executing program 1 (id=8854): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f00000002c0)=0x5, 0x4) 17.3463926s ago: executing program 3 (id=8856): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x2, 0xff, 0x0, 0x400}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x4, 0x0, 0x4, 0x0, 0x80, 0x30, 0xb9}}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 17.268028728s ago: executing program 1 (id=8859): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x2000084) syz_genetlink_get_family_id$nl80211(0x0, r0) 17.10184365s ago: executing program 3 (id=8863): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x503, 0x0, 0x703, {0x0, 0x0, 0x0, 0x0, 0x40220, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x8001}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 17.01658306s ago: executing program 1 (id=8866): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) 16.620821613s ago: executing program 0 (id=8871): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bac0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="1b", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.536520115s ago: executing program 3 (id=8874): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) 16.532147809s ago: executing program 0 (id=8875): syz_open_procfs$namespace(0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc0000001900010027bd700000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000f18d50001100ac1414aa000000000000000000000000ffffffff000000000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000aa3c040000"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 16.486318917s ago: executing program 1 (id=8876): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5d}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7b9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x8040) 16.450944134s ago: executing program 0 (id=8877): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={r2, 0x49}, &(0x7f0000000580)=0x8) 16.422880835s ago: executing program 2 (id=8878): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000100), 0x4) 16.345715715s ago: executing program 2 (id=8880): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000100)=r2, 0x8) setsockopt$sock_attach_bpf(r1, 0x1, 0x25, &(0x7f0000000100)=r0, 0x4) 16.341799192s ago: executing program 0 (id=8881): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000680)={r1, @in6={{0xa, 0x4e22, 0xa9, @dev={0xfe, 0x80, '\x00', 0x28}, 0x1000}}, [0x3, 0x10000, 0x7ff, 0x0, 0x85b, 0x9, 0x7, 0x7fffffffffffffff, 0x1, 0x5, 0x8, 0xfffb, 0xfffffc0000000000, 0x2, 0xd]}, &(0x7f0000000080)=0x100) 16.277711865s ago: executing program 0 (id=8883): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r2, 0x9}, 0x8) 16.23661299s ago: executing program 2 (id=8885): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ad73364256", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)={0x88, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x58d2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048000) recvmsg$qrtr(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/31, 0x1f}, {&(0x7f0000000500)=""/101, 0x65}], 0x2, 0x0, 0x0, 0x42}, 0x1c, 0x12080) 16.149628489s ago: executing program 2 (id=8887): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c00)="f78d9ca38fff48f3be52163448412ba8ea2945e56c9d0c07b90e0aa06445cf2b74c2278ad7ad8633cd51dd7acf4536bac8c4635ff529b680a56b712e3cb5af7936e279fe07ba2f20334a4fdaec8c909e48d219b0e7e978166e29f691adec0e5526148adbaad390b4bd6b7e1050abf68515280ca2189a069539aacd9840e7c5b133180a836a9c7dc456448eafb217def1d6ca3e62338caebb4ed33a7c9eabec21a6f247d02a244e0cefaaf4386e99396a5afe2c34149995de08a45d3f2177579a01e0a2ea114a7e0e23cc5c260ed375faa4b119b2c8a8942a2f089cf952b6e4b21ba713", 0xe3}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4dbc3ae079f5fee8f28051926aae1efd7e0054a863f425cfe6cb54e7cb51726b360fbb37b4fe035bbb095873048", 0x48}, {&(0x7f0000000d00)="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", 0x1d5}], 0x3, 0x0, 0x0, 0x80}], 0x1, 0x20000801) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 16.125442893s ago: executing program 2 (id=8889): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 16.08148115s ago: executing program 2 (id=8890): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x43, 0x2}, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x1, 0xfffffffc, 0x0, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x6472333b}}}}, 0x30}}, 0x20000040) 15.757630093s ago: executing program 4 (id=8896): socket(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000063010400000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.726283196s ago: executing program 4 (id=8897): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x5e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@assoc={0x18, 0x117, 0x4, 0x7}], 0x18}], 0x1, 0x10000860) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) 15.679993218s ago: executing program 4 (id=8898): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d7ea6b46ac021ac5", 0x8}, {&(0x7f0000000300)="0b7d66c68c9202436eb529699ed22f55f8fc55fc7fa9b2f11542a5416517f972f0d0494a91eb24fc894df2bd0124d9944c6196027842f975e6777d6d5254750327987573e2e18176a62ec5ec9c7048233b313a969d4992b3ec83a8c06d9e4627fe927de60c457f12926b16ab52024cbf50a49aa77c2a8bfdad3b486d7536466d03caa72bc631f50c2506b5d97c352df72efb6c7813e070fe", 0x98}, {&(0x7f0000000440)="fd5221f93e72f0b267711b7f22fcfd316507f6063933309daeb1b1d4a963882a44ce3cba8ea7458d9fb221021da2d44ca1023b0c2991d4f4dbf8303f82085acb71e02eceaf4f9d5bcd1b6e1d58905373d32cda49d68f222ddf9d9e96bcc20138b1ffbf4b11765a011529c3c6c12badf3af8c1d6ce661f62f159a79d0a3a642bd207b20baa09c72c0660fd055b14ed760fa3b8ad3200f1f36da1912af367ca5c6413e6ab83b6b5beb9e86f1d0", 0xac}, {&(0x7f0000000080)="1c5d6e60642cce128e71f1f8fcb7bfcc85f83f764787c03e", 0x18}], 0x4}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000005c0)="6da6ea7deda7fd3530935c3be5c8c4de1f2d27632871bf96262bc38825", 0x1d}], 0x1}}], 0x2, 0x4000000) recvfrom(r0, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0) 15.65052395s ago: executing program 4 (id=8899): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8ce6e3117aaf10cd}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x20040010) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040), 0xc) 15.616019283s ago: executing program 4 (id=8900): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x120) ioctl$SIOCGSTAMP(r0, 0x80108907, &(0x7f0000000000)) 15.582765358s ago: executing program 4 (id=8901): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x2, 0x2000, 0x100002, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x85}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20085}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) 15.390034141s ago: executing program 0 (id=8902): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="61050604030221fe0005"], 0x61) 1.514272752s ago: executing program 32 (id=8874): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) 1.000514591s ago: executing program 33 (id=8876): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5d}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7b9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x8040) 957.339847ms ago: executing program 34 (id=8890): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x43, 0x2}, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x1, 0xfffffffc, 0x0, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x6472333b}}}}, 0x30}}, 0x20000040) 494.770507ms ago: executing program 35 (id=8901): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x2, 0x2000, 0x100002, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x85}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20085}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) 0s ago: executing program 36 (id=8902): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="61050604030221fe0005"], 0x61) kernel console output (not intermixed with test programs): 0][T18026] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5838'. [ 274.966387][T18056] netlink: 'syz.2.5852': attribute type 1 has an invalid length. [ 274.979816][T18055] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5853'. [ 275.034398][T18062] netlink: 'syz.2.5856': attribute type 1 has an invalid length. [ 275.333129][T18084] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5865'. [ 275.465516][T18094] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5871'. [ 275.548363][T18099] netlink: 'syz.1.5874': attribute type 6 has an invalid length. [ 275.589689][T18099] netlink: 'syz.1.5874': attribute type 6 has an invalid length. [ 276.113736][T18141] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5895'. [ 276.144223][T18149] netlink: 'syz.0.5896': attribute type 1 has an invalid length. [ 276.144664][T18141] netlink: 'syz.4.5895': attribute type 9 has an invalid length. [ 276.153982][T18149] net_ratelimit: 134 callbacks suppressed [ 276.154000][T18149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.561479][T18178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.816643][T18198] IPVS: length: 8 != 1152 [ 277.248674][T18224] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 277.444575][T18220] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 277.546374][T18242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5942'. [ 278.244619][T18301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5964'. [ 278.268426][T18301] bridge_slave_0: default FDB implementation only supports local addresses [ 278.568043][T18327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.320860][T18376] Bluetooth: MGMT ver 1.23 [ 279.840969][T18405] netlink: 'syz.4.6009': attribute type 2 has an invalid length. [ 279.862513][T18405] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6009'. [ 280.182708][T18423] netlink: 'syz.3.6017': attribute type 178 has an invalid length. [ 280.935472][T18481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6046'. [ 281.052354][T18488] block nbd1: not configured, cannot reconfigure [ 281.453142][T18520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6065'. [ 281.678866][T18539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6074'. [ 281.989678][T18561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6083'. [ 282.019458][T18561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6083'. [ 282.374714][T18594] team0: Device ip6gre2 is of different type [ 282.700896][ T5838] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 282.747768][T18617] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 282.799695][T18623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6112'. [ 283.171970][T18649] netlink: 'syz.2.6124': attribute type 1 has an invalid length. [ 283.184752][T18651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6127'. [ 283.196697][T18649] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6124'. [ 283.214083][T18649] netlink: 'syz.2.6124': attribute type 1 has an invalid length. [ 283.234279][T18649] netlink: 'syz.2.6124': attribute type 8 has an invalid length. [ 283.245553][T18649] netlink: 606 bytes leftover after parsing attributes in process `syz.2.6124'. [ 283.317984][T18660] netlink: 'syz.4.6130': attribute type 13 has an invalid length. [ 283.357219][T18660] syz_tun: refused to change device tx_queue_len [ 283.382401][T18668] netlink: 'syz.2.6134': attribute type 1 has an invalid length. [ 283.397826][T18668] netlink: 'syz.2.6134': attribute type 1 has an invalid length. [ 283.577490][T18678] bridge0: port 3(syz_tun) entered blocking state [ 283.590300][T18678] bridge0: port 3(syz_tun) entered disabled state [ 283.596956][T18678] syz_tun: entered allmulticast mode [ 283.604955][T18678] syz_tun: entered promiscuous mode [ 283.611461][T18678] bridge0: port 3(syz_tun) entered blocking state [ 283.618310][T18678] bridge0: port 3(syz_tun) entered forwarding state [ 283.969127][T18707] : entered promiscuous mode [ 284.119491][T18717] sctp: [Deprecated]: syz.3.6159 (pid 18717) Use of struct sctp_assoc_value in delayed_ack socket option. [ 284.119491][T18717] Use struct sctp_sack_info instead [ 284.214740][T18723] sctp: [Deprecated]: syz.3.6159 (pid 18723) Use of struct sctp_assoc_value in delayed_ack socket option. [ 284.214740][T18723] Use struct sctp_sack_info instead [ 285.109546][T18785] __nla_validate_parse: 10 callbacks suppressed [ 285.109566][T18785] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6189'. [ 285.157077][T18785] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6189'. [ 285.183258][T18785] netlink: 'syz.4.6189': attribute type 5 has an invalid length. [ 285.199501][T18785] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6189'. [ 285.423746][T18809] netlink: 192 bytes leftover after parsing attributes in process `syz.0.6201'. [ 286.057214][T18846] netlink: 'syz.2.6219': attribute type 11 has an invalid length. [ 286.089464][T18846] netlink: 'syz.2.6219': attribute type 4 has an invalid length. [ 286.106942][T18846] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.6219'. [ 286.251882][T18859] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 286.575976][T18888] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.6240'. [ 286.710273][T18898] netlink: 'syz.2.6244': attribute type 83 has an invalid length. [ 287.025072][T18920] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6255'. [ 287.049920][T18920] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6255'. [ 287.050820][T18923] netlink: 'syz.2.6254': attribute type 33 has an invalid length. [ 287.079542][T18920] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6255'. [ 287.812853][ T5926] IPVS: starting estimator thread 0... [ 287.909541][T18962] IPVS: using max 33 ests per chain, 79200 per kthread [ 287.977811][T18973] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 288.012288][T18977] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6281'. [ 288.100691][T18981] netlink: 'syz.0.6282': attribute type 1 has an invalid length. [ 288.161690][T18980] veth3: entered allmulticast mode [ 288.678949][T19020] sit0: left promiscuous mode [ 288.701524][T19020] bridge0: port 3(syz_tun) entered disabled state [ 288.714870][T19020] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.722683][T19020] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.806734][T19020] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 289.228332][T19061] netlink: 'syz.1.6323': attribute type 10 has an invalid length. [ 289.288298][T19064] xt_l2tp: v2 tid > 0xffff: 1114244 [ 289.654158][T19093] netlink: 'syz.1.6339': attribute type 1 has an invalid length. [ 290.255993][T19142] netlink: 'syz.1.6364': attribute type 3 has an invalid length. [ 290.358310][T19150] nbd: must specify a size in bytes for the device [ 290.828325][T19185] __nla_validate_parse: 9 callbacks suppressed [ 290.828343][T19185] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6380'. [ 290.883423][T19184] delete_channel: no stack [ 291.093767][T19198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6386'. [ 291.231617][T19212] wireguard: wg2: Could not create IPv4 socket [ 291.290006][T19216] netlink: 'syz.2.6393': attribute type 1 has an invalid length. [ 291.298530][T19216] netlink: 'syz.2.6393': attribute type 3 has an invalid length. [ 291.328323][T19216] netlink: 172 bytes leftover after parsing attributes in process `syz.2.6393'. [ 291.369981][T19216] NCSI netlink: No device for ifindex 813332851 [ 291.510878][T19227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6398'. [ 291.569731][T19236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6402'. [ 292.062744][T19272] xt_time: unknown flags 0xf4 [ 292.444703][T19301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6433'. [ 292.465066][T19301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6433'. [ 292.862076][T19331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6447'. [ 292.930577][T19330] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6445'. [ 292.959699][T19330] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6445'. [ 293.138207][ T5838] Bluetooth: hci4: link tx timeout [ 293.144847][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 294.076707][T19426] vxcan1 speed is unknown, defaulting to 1000 [ 294.914488][T19493] netlink: 'syz.0.6525': attribute type 5 has an invalid length. [ 295.179752][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 295.968295][T19570] __nla_validate_parse: 4 callbacks suppressed [ 295.968314][T19570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6564'. [ 296.207166][T19589] macsec0: entered promiscuous mode [ 296.218062][T19589] macsec0: entered allmulticast mode [ 296.237112][T19589] veth1_macvtap: entered allmulticast mode [ 296.249156][T19589] macsec0: left promiscuous mode [ 296.260638][T19589] macsec0: left allmulticast mode [ 296.278467][T19589] veth1_macvtap: left allmulticast mode [ 296.362974][T19599] netlink: 'syz.3.6579': attribute type 2 has an invalid length. [ 296.610559][T19619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.261849][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 297.971748][T19719] vxcan1 speed is unknown, defaulting to 1000 [ 298.210443][T19729] netlink: 'syz.1.6638': attribute type 11 has an invalid length. [ 298.225852][T19729] netlink: 199788 bytes leftover after parsing attributes in process `syz.1.6638'. [ 298.324145][T19719] lo speed is unknown, defaulting to 1000 [ 298.713072][T19752] netlink: 'syz.0.6649': attribute type 142 has an invalid length. [ 299.189891][T19781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.327347][T19786] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 299.686032][T19804] netlink: 'syz.0.6671': attribute type 1 has an invalid length. [ 299.968066][T19809] netlink: 'syz.0.6674': attribute type 13 has an invalid length. [ 299.978620][T19809] macvtap0: entered allmulticast mode [ 299.986431][T19809] macvtap0: refused to change device tx_queue_len [ 300.456605][T19825] netlink: 'syz.0.6681': attribute type 3 has an invalid length. [ 300.661129][T19841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6690'. [ 300.856539][T19857] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6697'. [ 300.928257][T19865] netlink: 'syz.4.6700': attribute type 58 has an invalid length. [ 300.949489][T19865] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6700'. [ 301.041500][T19875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6704'. [ 301.053695][T19875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6704'. [ 301.897762][T19940] netlink: 'syz.2.6736': attribute type 1 has an invalid length. [ 302.150418][T19957] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6745'. [ 302.762533][T20005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6768'. [ 302.863585][T20015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6774'. [ 302.890728][T20017] netlink: 'syz.1.6773': attribute type 11 has an invalid length. [ 302.980860][T20025] netlink: 'syz.2.6778': attribute type 29 has an invalid length. [ 303.677870][T20077] netlink: 'syz.4.6804': attribute type 3 has an invalid length. [ 304.599247][T20147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.688818][T20154] sctp: [Deprecated]: syz.0.6841 (pid 20154) Use of int in maxseg socket option. [ 304.688818][T20154] Use struct sctp_assoc_value instead [ 304.884991][T20159] IPVS: Scheduler module ip_vs_sip not found [ 305.008374][T20175] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 305.335090][ T30] audit: type=1107 audit(1770345098.738:3): pid=20199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 305.512848][T20212] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.6869'. [ 305.529151][T20210] nbd: must specify an index to disconnect [ 305.634744][T20218] netlink: 'syz.3.6872': attribute type 1 has an invalid length. [ 305.660042][T20218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6872'. [ 305.676832][T20218] netlink: 658 bytes leftover after parsing attributes in process `syz.3.6872'. [ 305.689415][T20218] netlink: 'syz.3.6872': attribute type 1 has an invalid length. [ 305.728268][T20226] team0: Device gtp0 is up. Set it down before adding it as a team port [ 306.152230][T20253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6890'. [ 306.461600][T20278] netlink: 284 bytes leftover after parsing attributes in process `syz.0.6902'. [ 306.666389][T20293] sctp: [Deprecated]: syz.4.6909 (pid 20293) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.666389][T20293] Use struct sctp_sack_info instead [ 307.168559][T20335] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 307.410285][T20349] sctp: [Deprecated]: syz.1.6934 (pid 20349) Use of int in max_burst socket option deprecated. [ 307.410285][T20349] Use struct sctp_assoc_value instead [ 307.637134][T20367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6941'. [ 307.655278][T20367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6941'. [ 307.785653][T20378] netlink: 27 bytes leftover after parsing attributes in process `syz.0.6946'. [ 307.885874][T20384] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6949'. [ 308.118574][T20402] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6959'. [ 308.322075][T20415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6963'. [ 308.465473][T20423] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6968'. [ 308.497644][T20428] tipc: Started in network mode [ 308.515783][T20428] tipc: Node identity ac14140f, cluster identity 4711 [ 308.534594][T20428] tipc: New replicast peer: 255.255.255.255 [ 308.551481][T20428] tipc: Enabled bearer , priority 10 [ 308.680375][T20443] xt_hashlimit: size too large, truncated to 1048576 [ 308.750262][T20448] : renamed from vxcan1 [ 308.810214][T20451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6981'. [ 309.345473][T20489] sctp: [Deprecated]: syz.3.6995 (pid 20489) Use of int in max_burst socket option deprecated. [ 309.345473][T20489] Use struct sctp_assoc_value instead [ 309.395851][T20494] netlink: 'syz.1.6996': attribute type 2 has an invalid length. [ 309.669511][ T5890] tipc: Node number set to 2886997007 [ 309.735989][T20517] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 310.308424][T20553] tipc: Started in network mode [ 310.313508][T20553] tipc: Node identity ac14140f, cluster identity 4711 [ 310.329772][T20553] tipc: New replicast peer: 255.255.255.255 [ 310.337085][T20553] tipc: Enabled bearer , priority 10 [ 310.762626][T20592] netlink: 'syz.0.7043': attribute type 10 has an invalid length. [ 310.810448][T20592] team0: Port device dummy0 added [ 310.881645][T20598] netlink: 'syz.4.7047': attribute type 83 has an invalid length. [ 311.126396][T20612] erspan0: entered promiscuous mode [ 311.413650][T20618] netlink: 'syz.1.7054': attribute type 1 has an invalid length. [ 311.432315][T20618] netlink: 'syz.1.7054': attribute type 7 has an invalid length. [ 311.451600][T20618] netlink: 'syz.1.7054': attribute type 8 has an invalid length. [ 311.459836][ T5926] tipc: Node number set to 2886997007 [ 311.479462][T20618] __nla_validate_parse: 8 callbacks suppressed [ 311.479482][T20618] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7054'. [ 312.000281][T20632] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7062'. [ 312.018226][T20636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7063'. [ 312.313679][T20653] block nbd3: not configured, cannot reconfigure [ 312.617577][T20675] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7082'. [ 312.752419][T20687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7088'. [ 312.772309][T20687] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7088'. [ 314.094586][T20785] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7135'. [ 314.620234][T20819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7152'. [ 314.789772][T20835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7157'. [ 315.633419][T20895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7187'. [ 316.712746][T20954] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7217'. [ 317.104980][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.111415][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.159810][T20988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7231'. [ 317.568485][T21014] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7241'. [ 317.643160][T21019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7245'. [ 317.939757][T21038] nbd0: detected capacity change from 0 to 127 [ 317.962471][ T5838] block nbd0: Receive control failed (result -104) [ 319.425924][T21124] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7290'. [ 319.520273][T21128] netlink: 'syz.0.7294': attribute type 3 has an invalid length. [ 319.793728][T21151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7305'. [ 320.010671][T21167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7312'. [ 321.181603][T21245] nbd1: detected capacity change from 0 to 127 [ 321.196700][ T5838] block nbd1: Receive control failed (result -104) [ 321.353474][T21263] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 321.707319][T21288] sctp: [Deprecated]: syz.0.7370 (pid 21288) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.707319][T21288] Use struct sctp_sack_info instead [ 321.733712][T21290] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 321.830558][T21296] macsec1: entered promiscuous mode [ 322.070448][T21313] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7381'. [ 322.087682][T21313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7381'. [ 322.120532][T21319] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.7384'. [ 323.177398][T21396] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7419'. [ 323.289627][T21406] IPv6: NLM_F_CREATE should be specified when creating new route [ 323.609582][T21424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7433'. [ 323.852198][T21444] netlink: 232 bytes leftover after parsing attributes in process `syz.3.7443'. [ 323.908203][T21450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7445'. [ 323.998663][T21454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7448'. [ 324.335565][T21480] tipc: Started in network mode [ 324.353263][T21480] tipc: Node identity ac14140f, cluster identity 4711 [ 324.362240][T21480] tipc: New replicast peer: 255.255.255.255 [ 324.368890][T21480] tipc: Enabled bearer , priority 10 [ 324.583538][T21491] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.671426][T21504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7470'. [ 325.474949][T21565] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7496'. [ 325.502169][ T5890] tipc: Node number set to 2886997007 [ 326.598873][T21625] netlink: 'syz.4.7525': attribute type 1 has an invalid length. [ 326.606916][T21625] netlink: 'syz.4.7525': attribute type 7 has an invalid length. [ 326.632951][T21625] netlink: 'syz.4.7525': attribute type 8 has an invalid length. [ 326.648925][T21625] NCSI netlink: No device for ifindex 65584 [ 327.194273][T21670] blkio.reset_stats is deprecated [ 327.714849][T21697] netlink: 'syz.0.7560': attribute type 14 has an invalid length. [ 327.865733][T21706] __nla_validate_parse: 3 callbacks suppressed [ 327.865753][T21706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7564'. [ 327.929477][T21706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7564'. [ 327.929905][T21709] netlink: 'syz.4.7565': attribute type 12 has an invalid length. [ 327.978625][T21709] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.7565'. [ 328.102164][T21720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7570'. [ 328.633217][T21759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7590'. [ 328.888925][T21776] netem: incorrect ge model size [ 328.918580][T21779] netlink: 'syz.3.7598': attribute type 83 has an invalid length. [ 328.970475][T21783] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7599'. [ 329.084088][T21783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7599'. [ 329.221976][ T30] audit: type=1804 audit(1770345122.628:4): pid=21801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7607" name="/newroot/1502/cgroup.controllers" dev="tmpfs" ino=7547 res=1 errno=0 [ 329.255291][ T30] audit: type=1800 audit(1770345122.628:5): pid=21801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7607" name="cgroup.controllers" dev="tmpfs" ino=7547 res=0 errno=0 [ 329.733013][T21836] netem: incorrect gi model size [ 329.738304][T21836] netem: change failed [ 329.989116][T21864] bridge0: entered allmulticast mode [ 330.624927][T21910] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 330.945651][T21929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7668'. [ 330.961001][T21929] xfrm1: entered promiscuous mode [ 330.966272][T21929] xfrm1: entered allmulticast mode [ 331.002029][T21935] netlink: 'syz.0.7670': attribute type 3 has an invalid length. [ 331.010295][T21935] netlink: 'syz.0.7670': attribute type 1 has an invalid length. [ 331.018151][T21935] netlink: 212 bytes leftover after parsing attributes in process `syz.0.7670'. [ 331.019802][T21929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7668'. [ 331.028425][T21935] NCSI netlink: No device for ifindex 813332851 [ 331.125655][T21939] vcan0: tx address claim with dlc 0 [ 331.398755][T21961] netlink: 'syz.2.7681': attribute type 9 has an invalid length. [ 331.598897][T21974] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 331.866920][T21994] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 333.002870][T22072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7735'. [ 333.593181][T22094] netlink: 'syz.0.7744': attribute type 1 has an invalid length. [ 333.626500][T22094] netlink: 'syz.0.7744': attribute type 2 has an invalid length. [ 333.655072][T22094] netlink: 'syz.0.7744': attribute type 1 has an invalid length. [ 333.695441][T22094] netlink: 'syz.0.7744': attribute type 3 has an invalid length. [ 333.718244][T22094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7744'. [ 333.815861][T22103] bond1: ARP target 1.0.0.0 is already present [ 333.836033][T22103] bond1: option arp_ip_target: invalid value (1) [ 333.845970][T22103] bond1 (unregistering): Released all slaves [ 333.958943][T22116] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7754'. [ 334.156557][T22129] vxlan0: entered promiscuous mode [ 334.170505][T22129] vxlan0: entered allmulticast mode [ 334.179229][T22131] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7761'. [ 334.193389][ T60] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.210363][ T60] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.244016][ T60] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.275284][ T60] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.353191][T22143] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7768'. [ 334.918124][T22186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7787'. [ 335.378189][T22221] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.385486][T22221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.395581][T22221] bridge0: entered allmulticast mode [ 335.716420][T22243] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.795124][T22243] netlink: 'syz.2.7813': attribute type 16 has an invalid length. [ 335.803455][T22243] netlink: 'syz.2.7813': attribute type 17 has an invalid length. [ 335.895198][T22243] bridge0: port 3(syz_tun) entered blocking state [ 335.901897][T22243] bridge0: port 3(syz_tun) entered forwarding state [ 335.916529][T22243] bridge0: left allmulticast mode [ 335.926593][T22243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.936501][T22243] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.952850][T22243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.983466][T22243] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.990701][T22243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.009706][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 336.024139][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 336.067293][T22243] xfrm1: left allmulticast mode [ 336.085654][T22260] netlink: 'syz.3.7822': attribute type 9 has an invalid length. [ 336.089188][T22243] geneve2: left promiscuous mode [ 336.101810][T22243] geneve2: left allmulticast mode [ 336.122600][T22243] sit1: left promiscuous mode [ 336.127300][T22243] sit1: left allmulticast mode [ 336.136957][T22243] batadv0: entered promiscuous mode [ 336.155517][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.162756][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.249338][ T50] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 336.268984][ T50] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 336.277241][ T5824] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 336.299911][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 336.540863][T22284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7832'. [ 336.906951][T22311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7845'. [ 337.100164][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 337.113517][ T5824] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 337.270132][ T5824] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 337.366603][T22343] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7860'. [ 337.632192][T22361] veth0_to_bridge: entered promiscuous mode [ 337.664805][T22360] veth0_to_bridge: left promiscuous mode [ 337.750544][T22369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7874'. [ 337.786829][T22369] vlan2: entered allmulticast mode [ 337.800209][T22369] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 338.139761][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 338.370662][T22414] netlink: 'syz.1.7895': attribute type 1 has an invalid length. [ 338.393623][T22414] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7895'. [ 338.410839][T22414] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7895'. [ 338.427408][T22414] netlink: 'syz.1.7895': attribute type 1 has an invalid length. [ 338.437713][T22414] netlink: 'syz.1.7895': attribute type 8 has an invalid length. [ 338.448347][T22414] netlink: 582 bytes leftover after parsing attributes in process `syz.1.7895'. [ 338.871212][T22449] tipc: Enabling of bearer rejected, already enabled [ 338.883011][T22449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7912'. [ 338.887312][T22451] netlink: 564 bytes leftover after parsing attributes in process `syz.3.7913'. [ 339.618706][T22500] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7938'. [ 340.194285][T22539] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.7954'. [ 340.228221][T22541] netlink: 'syz.2.7956': attribute type 5 has an invalid length. [ 340.379617][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 340.415555][T22552] netlink: 54 bytes leftover after parsing attributes in process `syz.2.7963'. [ 340.440533][T22555] netlink: 'syz.4.7964': attribute type 1 has an invalid length. [ 340.448632][T22552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7963'. [ 340.785873][T22580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7974'. [ 341.265301][T22609] netlink: 'syz.1.7987': attribute type 4 has an invalid length. [ 341.422574][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 341.880253][T22649] sch_fq: defrate 0 ignored. [ 342.236596][T22673] IPVS: persistence engine module ip_vs_pe_ not found [ 342.460314][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 342.597931][T22702] netlink: 'syz.3.8028': attribute type 10 has an invalid length. [ 342.622533][T22706] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 342.657516][T22702] team0: Device dummy0 failed to register rx_handler [ 343.114071][T22740] xt_CT: You must specify a L4 protocol and not use inversions on it [ 343.380949][T22761] netlink: 'syz.4.8056': attribute type 11 has an invalid length. [ 343.500388][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 343.759057][T22782] __nla_validate_parse: 14 callbacks suppressed [ 343.759081][T22782] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8065'. [ 344.064684][T22806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8074'. [ 344.232285][T22816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8080'. [ 344.834494][T22845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8093'. [ 344.868785][T22845] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8093'. [ 345.143780][T22857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 345.151208][T22857] IPv6: NLM_F_CREATE should be set when creating new route [ 345.158451][T22857] IPv6: NLM_F_CREATE should be set when creating new route [ 345.192871][T22857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 345.378993][T22874] Bluetooth: hci1: too big key_count value 32778 [ 345.642579][T22895] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8117'. [ 345.822356][T22912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8123'. [ 346.128323][T22926] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 346.283825][T22926] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 346.361293][T22945] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8137'. [ 346.461658][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 347.500212][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 347.642624][T23021] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8165'. [ 347.814097][T23031] tap0: tun_chr_ioctl cmd 2148553947 [ 348.188396][T23059] team0: Cannot enslave team device to itself [ 348.459863][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 348.469962][ T11] block nbd0: Possible stuck request ffff888025c40000: control (read@0,1024B). Runtime 30 seconds [ 348.483113][ T11] block nbd0: Possible stuck request ffff888025c40200: control (read@1024,1024B). Runtime 30 seconds [ 348.494321][ T11] block nbd0: Possible stuck request ffff888025c40400: control (read@2048,1024B). Runtime 30 seconds [ 348.505665][ T11] block nbd0: Possible stuck request ffff888025c40600: control (read@3072,1024B). Runtime 30 seconds [ 348.540076][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 348.761318][T23092] netlink: 'syz.3.8191': attribute type 21 has an invalid length. [ 348.770726][T23092] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8191'. [ 348.787614][T23092] netlink: 'syz.3.8191': attribute type 4 has an invalid length. [ 348.830524][T23092] netlink: 'syz.3.8191': attribute type 5 has an invalid length. [ 348.838299][T23092] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8191'. [ 348.880363][T23097] netlink: 'syz.3.8191': attribute type 21 has an invalid length. [ 348.899240][T23102] netlink: 'syz.1.8196': attribute type 6 has an invalid length. [ 348.911825][T23097] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8191'. [ 348.942809][T23102] netlink: 'syz.1.8196': attribute type 6 has an invalid length. [ 348.963899][T23097] netlink: 'syz.3.8191': attribute type 4 has an invalid length. [ 349.010357][T23097] netlink: 'syz.3.8191': attribute type 5 has an invalid length. [ 349.019093][T23097] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8191'. [ 350.022785][T23175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8231'. [ 350.031943][T23175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8231'. [ 350.081180][T23185] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8232'. [ 350.134233][T23188] netlink: 27 bytes leftover after parsing attributes in process `syz.0.8235'. [ 350.341263][T23201] syzkaller1: entered promiscuous mode [ 350.346781][T23201] syzkaller1: entered allmulticast mode [ 350.733802][T23227] netlink: 'syz.0.8253': attribute type 4 has an invalid length. [ 350.835804][T23234] syzkaller1: entered promiscuous mode [ 350.842710][T23234] syzkaller1: entered allmulticast mode [ 351.384151][T23272] erspan0: entered promiscuous mode [ 351.404332][T23272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8274'. [ 351.666235][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 351.684407][ T95] block nbd1: Possible stuck request ffff888025c88000: control (read@0,1024B). Runtime 30 seconds [ 351.688270][T23295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8286'. [ 351.695105][ T95] block nbd1: Possible stuck request ffff888025c88200: control (read@1024,1024B). Runtime 30 seconds [ 351.718786][ T95] block nbd1: Possible stuck request ffff888025c88400: control (read@2048,1024B). Runtime 30 seconds [ 351.730693][ T95] block nbd1: Possible stuck request ffff888025c88600: control (read@3072,1024B). Runtime 30 seconds [ 352.575587][T23350] netlink: 'syz.1.8311': attribute type 10 has an invalid length. [ 352.612159][ T5926] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x1 [ 352.635170][T23350] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.637631][ T5926] hid-generic 0005:0C49:1012.0001: ignoring exceeding usage max [ 352.651855][ T5926] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x4 [ 352.659286][ T5926] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x5 [ 352.664326][T23350] bridge_slave_1: left allmulticast mode [ 352.667040][ T5926] hid-generic 0005:0C49:1012.0001: reserved main item tag 0xd [ 352.680702][ T5926] hid-generic 0005:0C49:1012.0001: item fetching failed at offset 31/106 [ 352.694328][ T5926] hid-generic 0005:0C49:1012.0001: probe with driver hid-generic failed with error -22 [ 352.704667][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 352.716737][T23350] bridge_slave_1: left promiscuous mode [ 352.740593][T23350] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.793530][T23350] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 352.938564][T23369] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.974328][T23369] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.161937][T23385] sock: sock_set_timeout: `syz.2.8328' (pid 23385) tries to set negative timeout [ 353.298944][T23387] syzkaller1: entered promiscuous mode [ 353.306683][T23387] syzkaller1: entered allmulticast mode [ 353.354555][T23387] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 353.740008][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 353.818864][T23423] dvmrp6: entered allmulticast mode [ 353.831105][T23425] __nla_validate_parse: 3 callbacks suppressed [ 353.831123][T23425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8347'. [ 353.938525][T23431] netlink: 'syz.0.8349': attribute type 17 has an invalid length. [ 353.948039][T23431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8349'. [ 353.957196][T23431] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8349'. [ 353.982270][T23431] gretap0: entered promiscuous mode [ 354.019445][T23431] gretap0: left promiscuous mode [ 354.190977][T23450] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.8358'. [ 354.815925][T23489] syzkaller1: entered promiscuous mode [ 354.832167][T23489] syzkaller1: entered allmulticast mode [ 355.046410][T23509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8385'. [ 355.232628][T23522] veth0: entered promiscuous mode [ 355.239071][T23520] veth0: left promiscuous mode [ 355.355316][T23531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8396'. [ 355.376539][T23533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8397'. [ 355.386742][T23533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.395724][T23534] sctp: [Deprecated]: syz.4.8395 (pid 23534) Use of int in max_burst socket option deprecated. [ 355.395724][T23534] Use struct sctp_assoc_value instead [ 355.455152][T23533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.390900][T23594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8425'. [ 356.758459][T23609] syzkaller1: entered promiscuous mode [ 356.768495][T23609] syzkaller1: entered allmulticast mode [ 357.003378][T23623] vlan4: entered allmulticast mode [ 357.020233][T23623] geneve1: entered allmulticast mode [ 357.420241][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 358.038532][T23677] syzkaller1: entered promiscuous mode [ 358.054488][T23677] syzkaller1: entered allmulticast mode [ 358.089713][T23686] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 1647 [ 358.118320][T23688] netlink: 'syz.2.8469': attribute type 3 has an invalid length. [ 358.177567][T23691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8470'. [ 358.298613][T23690] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.341832][T23701] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8475'. [ 358.406064][T23704] netlink: 'syz.0.8476': attribute type 1 has an invalid length. [ 358.459620][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 358.488811][T23690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.602264][T23690] vlan2: left promiscuous mode [ 358.607223][T23690] geneve1: left promiscuous mode [ 358.613594][T23690] vlan3: left promiscuous mode [ 358.618534][T23690] bridge0: left promiscuous mode [ 358.629538][T23690] xfrm1: left promiscuous mode [ 358.641415][ T5989] vxcan1 speed is unknown, defaulting to 1000 [ 358.658850][ T5989] syz2: Port: 1 Link DOWN [ 358.661445][T23710] team0: Port device dummy0 removed [ 358.689636][T23710] batman_adv: batadv0: Adding interface: dummy0 [ 358.701805][T23710] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 358.732314][T23710] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 358.754961][ T50] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.780313][ T60] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.801370][ T5890] vxcan1 speed is unknown, defaulting to 1000 [ 358.807849][ T60] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.825602][ T60] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.897475][T23720] __nla_validate_parse: 1 callbacks suppressed [ 358.897495][T23720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8484'. [ 358.924726][T23720] gtp1: entered promiscuous mode [ 358.941148][T23720] gtp1: entered allmulticast mode [ 359.054930][T23730] syzkaller1: entered promiscuous mode [ 359.063393][T23730] syzkaller1: entered allmulticast mode [ 359.259354][T23740] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 359.280007][ T107] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 359.359873][ T107] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 359.499761][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 359.520656][T23757] syzkaller1: entered promiscuous mode [ 359.526363][T23757] syzkaller1: entered allmulticast mode [ 360.091284][T23800] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 360.391719][T23827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8533'. [ 360.492765][T23830] block nbd2: server does not support multiple connections per device. [ 360.520041][T23830] block nbd2: shutting down sockets [ 360.938093][T23860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8548'. [ 360.954762][T23862] sctp: [Deprecated]: syz.4.8547 (pid 23862) Use of struct sctp_assoc_value in delayed_ack socket option. [ 360.954762][T23862] Use struct sctp_sack_info instead [ 361.568632][T23905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8568'. [ 361.685331][T23916] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8572'. [ 362.165260][T23943] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.218603][T23953] veth0: entered promiscuous mode [ 362.226055][T23952] veth0: left promiscuous mode [ 362.255575][T23943] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.303867][T23955] nbd: nbd0 already in use [ 362.309227][T23955] block nbd0: NBD_DISCONNECT [ 362.318548][T23955] block nbd0: Send disconnect failed -32 [ 362.332467][T23955] block nbd0: shutting down sockets [ 362.336361][T23943] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.346923][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 362.357912][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 362.367897][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 362.377573][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 362.387496][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 362.397167][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 362.405026][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 362.414545][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 362.441710][T21047] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 362.455839][T21047] Buffer I/O error on dev nbd0, logical block 0, async page read [ 362.484029][T21047] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 362.497257][T21047] Buffer I/O error on dev nbd0, logical block 1, async page read [ 362.505614][T21047] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 362.515965][T21047] Buffer I/O error on dev nbd0, logical block 2, async page read [ 362.530073][T21047] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 362.579600][T21047] Buffer I/O error on dev nbd0, logical block 3, async page read [ 362.604986][T21047] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 362.631473][T21047] Buffer I/O error on dev nbd0, logical block 0, async page read [ 362.643871][T21047] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 362.660902][T21047] Buffer I/O error on dev nbd0, logical block 1, async page read [ 362.680369][T21047] ldm_validate_partition_table(): Disk read failed. [ 362.691314][T21047] Dev nbd0: unable to read RDB block 0 [ 362.701517][ T60] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.703056][T21047] nbd0: unable to read partition table [ 362.741656][T21047] ldm_validate_partition_table(): Disk read failed. [ 362.751190][ T60] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.752445][T21047] Dev nbd0: unable to read RDB block 0 [ 362.781381][ T60] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.783664][T21047] nbd0: unable to read partition table [ 362.819044][ T50] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.969072][T23977] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8600'. [ 363.141560][T23983] netlink: 'syz.3.8602': attribute type 1 has an invalid length. [ 363.173541][T23983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8602'. [ 363.181651][T23989] tipc: Enabled bearer , priority 26 [ 363.184801][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 363.386636][T23999] netlink: 6 bytes leftover after parsing attributes in process `syz.0.8611'. [ 363.499708][ C1] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 363.578974][T24019] sctp: [Deprecated]: syz.3.8619 (pid 24019) Use of struct sctp_assoc_value in delayed_ack socket option. [ 363.578974][T24019] Use struct sctp_sack_info instead [ 363.664596][T24021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8620'. [ 363.677019][T24021] netlink: 'syz.3.8620': attribute type 7 has an invalid length. [ 363.685291][T24021] netlink: 'syz.3.8620': attribute type 8 has an invalid length. [ 363.694391][T24021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8620'. [ 363.742765][ T2915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.751281][ T2915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.759506][ T2915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.767718][ T2915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.777244][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.906340][T24031] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8625'. [ 364.219946][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 364.381453][T24044] gre0: entered promiscuous mode [ 364.391239][T24044] gre0: entered allmulticast mode [ 364.806931][T24069] tipc: Resetting bearer [ 365.007425][T24079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8648'. [ 365.019499][T24079] netlink: 'syz.0.8648': attribute type 7 has an invalid length. [ 365.033595][T24079] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8648'. [ 365.100091][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 365.259647][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 365.468000][T24110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8660'. [ 365.715580][T24120] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8664'. [ 365.728616][T24120] netlink: 'syz.4.8664': attribute type 7 has an invalid length. [ 365.737951][T24120] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8664'. [ 365.755268][T24120] gretap0: entered promiscuous mode [ 365.762134][T24120] gretap0: left promiscuous mode [ 366.535945][T24157] macvtap1: entered promiscuous mode [ 366.570184][T24157] macvtap1: entered allmulticast mode [ 366.586988][T24157] veth1_vlan: entered allmulticast mode [ 366.661686][T24158] macvtap2: entered promiscuous mode [ 366.667036][T24158] macvtap2: entered allmulticast mode [ 367.286084][T24208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8702'. [ 367.528756][T24228] syzkaller1: entered promiscuous mode [ 367.534925][T24228] syzkaller1: entered allmulticast mode [ 367.574678][T24232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8712'. [ 367.587449][T24230] smc: net device caif0 applied user defined pnetid SYZ2 [ 367.589259][T24232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8712'. [ 367.616388][T24234] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.8713'. [ 367.940485][ T2915] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.965507][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.986842][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.008218][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.461166][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 368.467408][ T5838] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 368.941062][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 369.580397][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.588799][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.597009][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.605280][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.615141][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.634505][T24372] __nla_validate_parse: 5 callbacks suppressed [ 369.634526][T24372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8776'. [ 369.659846][T24372] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8776'. [ 369.817162][T24389] sctp: [Deprecated]: syz.1.8783 (pid 24389) Use of int in max_burst socket option. [ 369.817162][T24389] Use struct sctp_assoc_value instead [ 369.950307][T24396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8788'. [ 369.972478][T24396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8788'. [ 369.990940][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 370.461836][T24434] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8806'. [ 370.534676][T24439] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8809'. [ 370.894265][T24457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8818'. [ 371.021664][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 371.591541][ T30] audit: type=1800 audit(1770345164.998:6): pid=24507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8839" name="memory.events" dev="tmpfs" ino=8990 res=0 errno=0 [ 371.617590][T24512] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.8842'. [ 372.120164][T24545] netlink: 'syz.3.8856': attribute type 1 has an invalid length. [ 372.140067][T24545] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 372.147306][T24545] IPv6: NLM_F_CREATE should be set when creating new route [ 372.217558][T24552] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8861'. [ 372.257223][T24555] netlink: 'syz.4.8862': attribute type 1 has an invalid length. [ 372.287486][T24555] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8862'. [ 372.318356][T24558] netlink: 'syz.3.8863': attribute type 1 has an invalid length. [ 372.383161][T24558] bond3: entered promiscuous mode [ 372.390767][T24558] 8021q: adding VLAN 0 to HW filter on device bond3 [ 372.594929][T24578] netlink: 'syz.0.8870': attribute type 21 has an invalid length. [ 372.604338][T24578] netlink: 'syz.0.8870': attribute type 22 has an invalid length. [ 372.619995][T24578] netlink: 'syz.0.8870': attribute type 23 has an invalid length. [ 372.628426][T24578] netlink: 'syz.0.8870': attribute type 25 has an invalid length. [ 372.636959][T24578] netlink: 'syz.0.8870': attribute type 26 has an invalid length. [ 372.686880][T24568] bond3: (slave bridge5): making interface the new active one [ 372.694598][T24568] bridge5: entered promiscuous mode [ 372.705120][T24568] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 372.779851][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.788436][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.891007][T24590] nbd: nbd1 already in use [ 373.631065][T24636] trusted_key: syz.4.8897 sent an empty control message without MSG_MORE. [ 374.701179][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 375.259929][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.268720][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.340487][ T2915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.348778][ T2915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.356977][ T2915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.365127][ T2915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.374003][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.740188][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 376.779971][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 378.542834][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.549149][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.470314][ C0] net_ratelimit: 2 callbacks suppressed [ 380.470335][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 381.100243][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.108481][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.116767][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.125292][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.134299][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.499787][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 381.660615][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.749930][ T95] block nbd1: Possible stuck request ffff888025c88000: control (read@0,1024B). Runtime 60 seconds [ 381.760629][ T95] block nbd1: Possible stuck request ffff888025c88200: control (read@1024,1024B). Runtime 60 seconds [ 381.771624][ T95] block nbd1: Possible stuck request ffff888025c88400: control (read@2048,1024B). Runtime 60 seconds [ 381.782846][ T95] block nbd1: Possible stuck request ffff888025c88600: control (read@3072,1024B). Runtime 60 seconds [ 382.299560][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.307894][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.823643][ T5195] udevd[5195]: worker [21250] /devices/virtual/block/nbd1 is taking a long time [ 385.580565][ C1] net_ratelimit: 1 callbacks suppressed [ 385.580580][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 386.620166][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 386.779618][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.787924][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.796386][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.860616][ T2915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.868781][ T2915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.876942][ T2915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.885235][ T2915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.894194][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.897242][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 387.906083][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 387.915627][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 387.924516][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 387.932665][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 387.964238][T24654] vxcan1 speed is unknown, defaulting to 1000 [ 388.066484][T24654] lo speed is unknown, defaulting to 1000 [ 388.258977][T24654] chnl_net:caif_netlink_parms(): no params data found [ 388.342667][T24654] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.363576][T24654] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.378806][T24654] bridge_slave_0: entered allmulticast mode [ 388.401597][T24654] bridge_slave_0: entered promiscuous mode [ 388.415095][T24654] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.422421][T24654] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.433745][T24654] bridge_slave_1: entered allmulticast mode [ 388.441884][T24654] bridge_slave_1: entered promiscuous mode [ 388.482136][T24654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.495844][T24654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.521594][ T5829] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 388.531252][ T5829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 388.545843][ T5829] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 388.556309][ T5829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 388.564360][ T5829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 388.581710][ T5829] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 388.598834][ T5838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 388.610083][ T5838] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 388.621984][T24654] team0: Port device team_slave_0 added [ 388.631525][ T5838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 388.638587][T24654] team0: Port device team_slave_1 added [ 388.639148][ T5838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 388.683502][T24654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.691747][T24654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.718425][T24654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.731549][T24654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.738518][T24654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.765443][T24654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.786636][T24664] vxcan1 speed is unknown, defaulting to 1000 [ 388.907322][T24654] hsr_slave_0: entered promiscuous mode [ 388.930628][T24654] hsr_slave_1: entered promiscuous mode [ 388.937097][T24654] debugfs: 'hsr0' already exists in 'hsr' [ 388.959464][T24654] Cannot create hsr debugfs directory [ 389.110571][ T5838] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 389.120158][ T5838] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 389.128107][ T5838] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 389.135185][T24666] vxcan1 speed is unknown, defaulting to 1000 [ 389.139737][T24664] lo speed is unknown, defaulting to 1000 [ 389.160361][ T5838] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 389.182763][ T5838] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 389.550225][T24669] vxcan1 speed is unknown, defaulting to 1000 [ 389.606220][ T5838] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 389.616146][ T5838] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 389.625313][ T5838] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 389.636169][T24666] lo speed is unknown, defaulting to 1000 [ 389.642291][ T5838] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 389.661253][ T5838] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 389.862278][T24672] vxcan1 speed is unknown, defaulting to 1000 [ 389.950910][T24669] lo speed is unknown, defaulting to 1000 [ 389.979511][ T5836] Bluetooth: hci5: command tx timeout [ 390.018887][T24664] chnl_net:caif_netlink_parms(): no params data found [ 390.284832][T24664] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.292593][T24664] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.300175][T24664] bridge_slave_0: entered allmulticast mode [ 390.307861][T24664] bridge_slave_0: entered promiscuous mode [ 390.317065][T24664] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.325432][T24664] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.333771][T24664] bridge_slave_1: entered allmulticast mode [ 390.341019][T24664] bridge_slave_1: entered promiscuous mode [ 390.348573][T24672] lo speed is unknown, defaulting to 1000 [ 390.414938][T24666] chnl_net:caif_netlink_parms(): no params data found [ 390.436068][T24664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.450695][T24664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.562049][T24664] team0: Port device team_slave_0 added [ 390.588092][T24664] team0: Port device team_slave_1 added [ 390.619829][ T5836] Bluetooth: hci6: command tx timeout [ 390.672012][T24664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.679061][T24664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.706041][T24664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.707586][ T5836] Bluetooth: hci7: command tx timeout [ 390.740547][T24664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.747709][T24664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.774614][T24664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.810957][T24666] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.818142][T24666] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.826418][T24666] bridge_slave_0: entered allmulticast mode [ 390.835371][T24666] bridge_slave_0: entered promiscuous mode [ 390.864569][T24666] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.872019][T24666] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.879243][T24666] bridge_slave_1: entered allmulticast mode [ 390.888867][T24666] bridge_slave_1: entered promiscuous mode [ 390.937801][T24666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.951143][T24666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.966003][T24664] hsr_slave_0: entered promiscuous mode [ 390.972744][T24664] hsr_slave_1: entered promiscuous mode [ 390.978958][T24664] debugfs: 'hsr0' already exists in 'hsr' [ 390.984993][T24664] Cannot create hsr debugfs directory [ 390.991010][T24669] chnl_net:caif_netlink_parms(): no params data found [ 391.045592][T24666] team0: Port device team_slave_0 added [ 391.068705][T24666] team0: Port device team_slave_1 added [ 391.152930][T24666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.160285][T24666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.187843][T24666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.205327][T24666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.212684][T24666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.239226][T24666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.259563][ T5836] Bluetooth: hci8: command tx timeout [ 391.287773][T24669] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.295375][T24669] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.303036][T24669] bridge_slave_0: entered allmulticast mode [ 391.310411][T24669] bridge_slave_0: entered promiscuous mode [ 391.334417][T24669] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.342492][T24669] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.350104][T24669] bridge_slave_1: entered allmulticast mode [ 391.351049][ C1] net_ratelimit: 1 callbacks suppressed [ 391.351065][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 391.357741][T24669] bridge_slave_1: entered promiscuous mode [ 391.454449][T24669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.465727][T24672] chnl_net:caif_netlink_parms(): no params data found [ 391.481939][T24666] hsr_slave_0: entered promiscuous mode [ 391.488250][T24666] hsr_slave_1: entered promiscuous mode [ 391.494960][T24666] debugfs: 'hsr0' already exists in 'hsr' [ 391.501220][T24666] Cannot create hsr debugfs directory [ 391.515459][T24669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.610781][T24669] team0: Port device team_slave_0 added [ 391.634467][T24669] team0: Port device team_slave_1 added [ 391.711374][T24669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.718345][T24669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.744551][ T5836] Bluetooth: hci9: command tx timeout [ 391.751570][T24669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.787596][T24669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.795024][T24669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.823142][T24669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.840246][T24672] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.847446][T24672] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.855525][T24672] bridge_slave_0: entered allmulticast mode [ 391.862757][T24672] bridge_slave_0: entered promiscuous mode [ 391.871028][T24672] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.878271][T24672] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.886053][T24672] bridge_slave_1: entered allmulticast mode [ 391.893281][T24672] bridge_slave_1: entered promiscuous mode [ 391.899603][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.907853][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.985203][T24672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.014070][T24672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.059768][ T5836] Bluetooth: hci5: command tx timeout [ 392.067216][T24669] hsr_slave_0: entered promiscuous mode [ 392.074144][T24669] hsr_slave_1: entered promiscuous mode [ 392.080835][T24669] debugfs: 'hsr0' already exists in 'hsr' [ 392.086695][T24669] Cannot create hsr debugfs directory [ 392.135756][T24672] team0: Port device team_slave_0 added [ 392.145589][T24672] team0: Port device team_slave_1 added [ 392.222606][T24672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.229693][T24672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.256626][T24672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.282014][T24672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.288990][T24672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.316486][T24672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.380106][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 392.421079][T24672] hsr_slave_0: entered promiscuous mode [ 392.427513][T24672] hsr_slave_1: entered promiscuous mode [ 392.434264][T24672] debugfs: 'hsr0' already exists in 'hsr' [ 392.440281][T24672] Cannot create hsr debugfs directory [ 392.620799][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.628961][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.637220][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.645469][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.654721][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.699820][ T5836] Bluetooth: hci6: command tx timeout [ 392.779564][ T5836] Bluetooth: hci7: command tx timeout [ 393.339904][ T5836] Bluetooth: hci8: command tx timeout [ 393.419672][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 393.820035][ T5836] Bluetooth: hci9: command tx timeout [ 394.139527][ T5836] Bluetooth: hci5: command tx timeout [ 394.779570][ T5836] Bluetooth: hci6: command tx timeout [ 394.869581][ T5836] Bluetooth: hci7: command tx timeout [ 395.419582][ T5836] Bluetooth: hci8: command tx timeout [ 395.899971][ T5836] Bluetooth: hci9: command tx timeout [ 396.219871][ T5836] Bluetooth: hci5: command tx timeout [ 396.859753][ T5836] Bluetooth: hci6: command tx timeout [ 396.939796][ T5836] Bluetooth: hci7: command tx timeout [ 397.100369][ C1] net_ratelimit: 2 callbacks suppressed [ 397.100391][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 397.499759][ T5836] Bluetooth: hci8: command tx timeout [ 397.979663][ T5836] Bluetooth: hci9: command tx timeout [ 398.139738][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 398.299689][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.307928][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.379710][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 398.380343][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.395762][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.403996][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.412148][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.421138][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.179708][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 402.779631][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.787980][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.860332][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 403.510562][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.518730][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.527045][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.535239][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.544382][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.900457][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 404.939959][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 408.620495][ C0] net_ratelimit: 4 callbacks suppressed [ 408.620518][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 409.260789][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.268973][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.277147][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.285311][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.294085][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.659780][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 409.819620][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.827893][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.710055][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 411.830569][ T95] block nbd1: Possible stuck request ffff888025c88000: control (read@0,1024B). Runtime 90 seconds [ 411.841883][ T95] block nbd1: Possible stuck request ffff888025c88200: control (read@1024,1024B). Runtime 90 seconds [ 411.852871][ T95] block nbd1: Possible stuck request ffff888025c88400: control (read@2048,1024B). Runtime 90 seconds [ 411.864092][ T95] block nbd1: Possible stuck request ffff888025c88600: control (read@3072,1024B). Runtime 90 seconds [ 414.299785][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.308058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.316501][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.380274][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 415.019851][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.027970][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.036324][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.044454][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.053532][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.419948][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 419.339604][ C0] net_ratelimit: 1 callbacks suppressed [ 419.339626][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.353686][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.140470][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 420.780043][ T2915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.788248][ T2915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.796500][ T2915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.804668][ T2915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.813584][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.180010][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 422.219631][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 425.260575][ C0] net_ratelimit: 3 callbacks suppressed [ 425.260595][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 425.900232][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.908476][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.916643][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.924892][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.933804][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.299706][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 427.339645][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 428.379650][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.387958][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.380090][ C1] net_ratelimit: 1 callbacks suppressed [ 430.380113][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 431.020236][ T3439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.028382][ T3439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.036603][ T3439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.044795][ T3439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.053890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.419662][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 432.459836][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 434.139678][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.147975][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.140312][ C0] net_ratelimit: 1 callbacks suppressed [ 436.140333][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 436.141071][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.166003][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.174246][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.182380][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.191680][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.179932][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 438.220136][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 439.899625][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.907938][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.982778][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.989080][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.260365][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.262055][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 441.268512][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.288479][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.296768][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.305882][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.902960][ T95] block nbd1: Possible stuck request ffff888025c88000: control (read@0,1024B). Runtime 120 seconds [ 441.913916][ T95] block nbd1: Possible stuck request ffff888025c88200: control (read@1024,1024B). Runtime 120 seconds [ 441.925012][ T95] block nbd1: Possible stuck request ffff888025c88400: control (read@2048,1024B). Runtime 120 seconds [ 441.936393][ T95] block nbd1: Possible stuck request ffff888025c88600: control (read@3072,1024B). Runtime 120 seconds [ 442.299910][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 443.340069][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 445.659717][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.668096][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.020064][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.028210][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.036407][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.044544][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.053554][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.958328][ T5838] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 447.966968][ T5838] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 447.975166][ T5838] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 447.985425][ T5838] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 447.994191][ T5838] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 448.026456][T24704] vxcan1 speed is unknown, defaulting to 1000 [ 448.128042][T24704] lo speed is unknown, defaulting to 1000 [ 448.316721][T24704] chnl_net:caif_netlink_parms(): no params data found [ 448.386392][T24704] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.394618][T24704] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.402411][T24704] bridge_slave_0: entered allmulticast mode [ 448.410724][T24704] bridge_slave_0: entered promiscuous mode [ 448.421714][T24704] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.428923][T24704] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.436891][T24704] bridge_slave_1: entered allmulticast mode [ 448.444808][T24704] bridge_slave_1: entered promiscuous mode [ 448.483281][T24704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.496152][T24704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.530209][ T5838] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 448.532713][T24704] team0: Port device team_slave_0 added [ 448.543602][ T5838] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 448.546788][T24704] team0: Port device team_slave_1 added [ 448.552834][ T5838] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 448.565045][ T5838] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 448.573418][ T5838] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 448.585574][T24704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.593161][T24704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.620526][T24704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.633044][T24704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.640130][T24704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.666565][T24704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.716986][T24713] vxcan1 speed is unknown, defaulting to 1000 [ 448.724084][T24704] hsr_slave_0: entered promiscuous mode [ 448.731925][T24704] hsr_slave_1: entered promiscuous mode [ 448.738337][T24704] debugfs: 'hsr0' already exists in 'hsr' [ 448.744365][T24704] Cannot create hsr debugfs directory [ 448.911060][T24713] lo speed is unknown, defaulting to 1000 [ 449.096579][ T5838] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 449.107503][ T5838] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 449.116669][ T5838] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 449.130843][ T5838] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 449.138557][ T5838] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 449.198833][ T5838] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 449.207967][ T5838] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 449.216671][ T5838] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 449.232580][ T5838] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 449.245609][ T5838] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 449.285235][T24717] vxcan1 speed is unknown, defaulting to 1000 [ 449.567608][ T5838] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 449.577216][ T5838] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 449.582583][T24719] vxcan1 speed is unknown, defaulting to 1000 [ 449.590512][T24717] lo speed is unknown, defaulting to 1000 [ 449.599014][ T5838] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 449.619887][ T5838] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 449.634328][ T5838] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 449.742994][T24713] chnl_net:caif_netlink_parms(): no params data found [ 449.906323][T24723] vxcan1 speed is unknown, defaulting to 1000 [ 449.939404][T24719] lo speed is unknown, defaulting to 1000 [ 450.021716][T24713] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.028872][T24713] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.050146][T24713] bridge_slave_0: entered allmulticast mode [ 450.059687][ T5838] Bluetooth: hci10: command tx timeout [ 450.063592][T24713] bridge_slave_0: entered promiscuous mode [ 450.133311][T24713] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.142434][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.142696][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.142887][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.171548][T24713] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.178839][T24713] bridge_slave_1: entered allmulticast mode [ 450.186823][T24713] bridge_slave_1: entered promiscuous mode [ 450.251017][T24723] lo speed is unknown, defaulting to 1000 [ 450.313852][T24713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.344063][T24713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.544371][T24713] team0: Port device team_slave_0 added [ 450.576995][T24713] team0: Port device team_slave_1 added [ 450.629852][ T5838] Bluetooth: hci11: command tx timeout [ 450.676408][T24713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.685175][T24713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.712228][T24713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.735460][T24713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.743304][T24713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.771099][T24713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.833006][T24713] hsr_slave_0: entered promiscuous mode [ 450.840242][T24713] hsr_slave_1: entered promiscuous mode [ 450.846511][T24713] debugfs: 'hsr0' already exists in 'hsr' [ 450.852380][T24713] Cannot create hsr debugfs directory [ 450.858234][T24717] chnl_net:caif_netlink_parms(): no params data found [ 450.866193][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 451.018306][T24719] chnl_net:caif_netlink_parms(): no params data found [ 451.087924][T24717] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.095491][T24717] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.105350][T24717] bridge_slave_0: entered allmulticast mode [ 451.113266][T24717] bridge_slave_0: entered promiscuous mode [ 451.122659][T24717] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.130281][T24717] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.137720][T24717] bridge_slave_1: entered allmulticast mode [ 451.145587][T24717] bridge_slave_1: entered promiscuous mode [ 451.179709][ T5838] Bluetooth: hci12: command tx timeout [ 451.215998][T24723] chnl_net:caif_netlink_parms(): no params data found [ 451.240660][T24717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.277737][T24717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.339780][ T5838] Bluetooth: hci13: command tx timeout [ 451.347199][T24719] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.354699][T24719] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.362032][T24719] bridge_slave_0: entered allmulticast mode [ 451.369105][T24719] bridge_slave_0: entered promiscuous mode [ 451.380622][T24717] team0: Port device team_slave_0 added [ 451.395665][T24719] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.403146][T24719] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.410640][T24719] bridge_slave_1: entered allmulticast mode [ 451.417675][T24719] bridge_slave_1: entered promiscuous mode [ 451.426668][T24717] team0: Port device team_slave_1 added [ 451.521165][T24719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.531214][T24717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.538162][T24717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.565528][T24717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.578533][T24717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.586256][T24717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.613251][T24717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.630673][T24723] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.637761][T24723] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.646299][T24723] bridge_slave_0: entered allmulticast mode [ 451.653548][T24723] bridge_slave_0: entered promiscuous mode [ 451.659824][ T5838] Bluetooth: hci14: command tx timeout [ 451.663847][T24719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.683103][T24723] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.690283][T24723] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.697482][T24723] bridge_slave_1: entered allmulticast mode [ 451.704829][T24723] bridge_slave_1: entered promiscuous mode [ 451.761580][T24719] team0: Port device team_slave_0 added [ 451.778804][T24723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.792607][T24723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.811914][T24719] team0: Port device team_slave_1 added [ 451.853377][T24717] hsr_slave_0: entered promiscuous mode [ 451.860020][T24717] hsr_slave_1: entered promiscuous mode [ 451.866111][T24717] debugfs: 'hsr0' already exists in 'hsr' [ 451.872692][T24717] Cannot create hsr debugfs directory [ 451.896871][T24719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.904416][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 451.909907][T24719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.943457][T24719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.956104][T24719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.963508][T24719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.990658][T24719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.003647][T24723] team0: Port device team_slave_0 added [ 452.018881][T24723] team0: Port device team_slave_1 added [ 452.074570][T24723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.081856][T24723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.108905][T24723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.139816][ T5838] Bluetooth: hci10: command tx timeout [ 452.152688][T24723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.160646][T24723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.188309][T24723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.252670][T24719] hsr_slave_0: entered promiscuous mode [ 452.259017][T24719] hsr_slave_1: entered promiscuous mode [ 452.275265][T24719] debugfs: 'hsr0' already exists in 'hsr' [ 452.281511][T24719] Cannot create hsr debugfs directory [ 452.410022][T24723] hsr_slave_0: entered promiscuous mode [ 452.416571][T24723] hsr_slave_1: entered promiscuous mode [ 452.423273][T24723] debugfs: 'hsr0' already exists in 'hsr' [ 452.429008][T24723] Cannot create hsr debugfs directory [ 452.699564][ T5838] Bluetooth: hci11: command tx timeout [ 452.939737][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 453.259534][ T5838] Bluetooth: hci12: command tx timeout [ 453.420743][ T5838] Bluetooth: hci13: command tx timeout [ 453.749543][ T5838] Bluetooth: hci14: command tx timeout [ 454.220711][ T5838] Bluetooth: hci10: command tx timeout [ 454.779789][ T5838] Bluetooth: hci11: command tx timeout [ 455.259633][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.267925][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.344192][ T5838] Bluetooth: hci12: command tx timeout [ 455.499827][ T5838] Bluetooth: hci13: command tx timeout [ 455.819695][ T5838] Bluetooth: hci14: command tx timeout [ 456.300079][ T5838] Bluetooth: hci10: command tx timeout [ 456.620033][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 456.859592][ T5838] Bluetooth: hci11: command tx timeout [ 457.419936][ T5838] Bluetooth: hci12: command tx timeout [ 457.579556][ T5838] Bluetooth: hci13: command tx timeout [ 457.660071][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 457.899692][ T5838] Bluetooth: hci14: command tx timeout [ 458.459680][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.468055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.699796][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 462.299892][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.308182][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.380875][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 463.419791][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 464.460126][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 465.581253][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 466.139764][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.148017][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.220658][ T2915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.228812][ T2915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.237143][ T2915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.245548][ T2915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.254338][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.140254][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 469.179734][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 470.220117][ C0] net_ratelimit: 2 callbacks suppressed [ 470.220135][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 470.699750][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.707922][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.979990][ T11] block nbd1: Possible stuck request ffff888025c88000: control (read@0,1024B). Runtime 150 seconds [ 471.989810][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.991114][ T11] block nbd1: Possible stuck request ffff888025c88200: control (read@1024,1024B). Runtime 150 seconds [ 471.999224][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.011692][ T11] block nbd1: Possible stuck request ffff888025c88400: control (read@2048,1024B). Runtime 150 seconds [ 472.018506][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.030139][ T11] block nbd1: Possible stuck request ffff888025c88600: control (read@3072,1024B). Runtime 150 seconds [ 472.038168][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.057966][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.819603][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.827948][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.979766][ C0] net_ratelimit: 2 callbacks suppressed [ 475.979785][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 477.659689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.668129][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.740786][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.748946][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.757131][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.765312][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.774433][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.660299][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 480.699671][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 481.739806][ C0] net_ratelimit: 3 callbacks suppressed [ 481.739827][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 483.021656][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 483.500168][ T2915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.508327][ T2915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.516638][ T2915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.524783][ T2915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.533717][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.790466][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 485.819890][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 485.979569][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.987954][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.859719][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 488.620536][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.628696][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.636967][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.645220][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.654121][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.179582][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.187854][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.540278][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 491.580544][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 492.620022][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 493.659615][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.667850][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.381026][ T3439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.389260][ T3439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.397786][ T3439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.406217][ T3439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.415496][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.301096][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 496.859837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.379728][ C1] net_ratelimit: 2 callbacks suppressed [ 498.379744][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 499.500930][ T750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.509090][ T750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.517266][ T750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.525429][ T750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.534617][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.979769][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.988068][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.424786][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.431725][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.060170][ T11] block nbd1: Possible stuck request ffff888025c88000: control (read@0,1024B). Runtime 180 seconds [ 502.070972][ T11] block nbd1: Possible stuck request ffff888025c88200: control (read@1024,1024B). Runtime 180 seconds [ 502.071459][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 502.083703][ T11] block nbd1: Possible stuck request ffff888025c88400: control (read@2048,1024B). Runtime 180 seconds [ 502.105735][ T11] block nbd1: Possible stuck request ffff888025c88600: control (read@3072,1024B). Runtime 180 seconds [ 503.100039][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 504.057399][ T5195] udevd[5195]: worker [21250] /devices/virtual/block/nbd1 timeout; kill it [ 504.066820][ T5195] udevd[5195]: seq 15618 '/devices/virtual/block/nbd1' killed [ 504.139916][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 504.620489][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.628644][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.636819][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.645031][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.654151][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.179635][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.187883][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.820354][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 508.023054][ T5836] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 508.031605][ T5836] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 508.040800][ T5836] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 508.048831][ T5836] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 508.056736][ T5836] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 508.090534][T24754] vxcan1 speed is unknown, defaulting to 1000 [ 508.189886][T24754] lo speed is unknown, defaulting to 1000 [ 508.376841][T24754] chnl_net:caif_netlink_parms(): no params data found [ 508.379558][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.455407][T24754] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.463042][T24754] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.470451][T24754] bridge_slave_0: entered allmulticast mode [ 508.478120][T24754] bridge_slave_0: entered promiscuous mode [ 508.488862][T24754] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.496374][T24754] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.503982][T24754] bridge_slave_1: entered allmulticast mode [ 508.512057][T24754] bridge_slave_1: entered promiscuous mode [ 508.549141][T24754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.562812][T24754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.575991][ T5836] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 508.586385][ T5836] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 508.594868][ T5836] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 508.605139][ T5836] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 508.621019][ T5836] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 508.621806][T24754] team0: Port device team_slave_0 added [ 508.645786][T24754] team0: Port device team_slave_1 added [ 508.675491][T24754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.684054][T24754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.711173][T24754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.728099][T24754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.735352][T24754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.762051][T24754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.773205][T24763] vxcan1 speed is unknown, defaulting to 1000 [ 508.829729][T24754] hsr_slave_0: entered promiscuous mode [ 508.836696][T24754] hsr_slave_1: entered promiscuous mode [ 508.844266][T24754] debugfs: 'hsr0' already exists in 'hsr' [ 508.851059][T24754] Cannot create hsr debugfs directory [ 508.992492][T24763] lo speed is unknown, defaulting to 1000 [ 509.187762][ T5836] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 509.200934][ T5836] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 509.209037][ T5836] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 509.217279][ T5836] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 509.226478][ T5836] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 509.250997][ T5829] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 509.264308][ T5829] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 509.272744][ T5829] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 509.280765][ T5829] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 509.288473][ T5829] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 509.343930][T24767] vxcan1 speed is unknown, defaulting to 1000 [ 509.652012][ T5836] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 509.658316][T24769] vxcan1 speed is unknown, defaulting to 1000 [ 509.661761][ T5836] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 509.666746][T24767] lo speed is unknown, defaulting to 1000 [ 509.674225][ T5836] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 509.687226][ T5836] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 509.695199][ T5836] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 509.773306][T24763] chnl_net:caif_netlink_parms(): no params data found [ 509.899670][ C0] net_ratelimit: 3 callbacks suppressed [ 509.899692][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 509.956605][T24775] vxcan1 speed is unknown, defaulting to 1000 [ 509.986040][T24763] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.010026][T24763] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.017691][T24763] bridge_slave_0: entered allmulticast mode [ 510.035314][T24763] bridge_slave_0: entered promiscuous mode [ 510.070031][T24763] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.077283][T24763] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.085318][T24763] bridge_slave_1: entered allmulticast mode [ 510.093669][T24763] bridge_slave_1: entered promiscuous mode [ 510.102111][T24769] lo speed is unknown, defaulting to 1000 [ 510.139856][ T5836] Bluetooth: hci15: command tx timeout [ 510.230243][T24763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.258324][T24763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.338438][T24763] team0: Port device team_slave_0 added [ 510.359524][T24775] lo speed is unknown, defaulting to 1000 [ 510.372469][T24763] team0: Port device team_slave_1 added [ 510.391349][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.399529][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.407656][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.415926][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.424928][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.497310][T24763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.521242][T24763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.555231][T24763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.594708][T24763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.602157][T24763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.629597][T24763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.661593][T24767] chnl_net:caif_netlink_parms(): no params data found [ 510.699730][ T5836] Bluetooth: hci16: command tx timeout [ 510.777950][T24763] hsr_slave_0: entered promiscuous mode [ 510.787316][T24763] hsr_slave_1: entered promiscuous mode [ 510.794088][T24763] debugfs: 'hsr0' already exists in 'hsr' [ 510.799952][T24763] Cannot create hsr debugfs directory [ 510.972743][T24769] chnl_net:caif_netlink_parms(): no params data found [ 510.985097][T24767] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.992433][T24767] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.001610][T24767] bridge_slave_0: entered allmulticast mode [ 511.008606][T24767] bridge_slave_0: entered promiscuous mode [ 511.047398][T24767] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.055063][T24767] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.063187][T24767] bridge_slave_1: entered allmulticast mode [ 511.071245][T24767] bridge_slave_1: entered promiscuous mode [ 511.145575][T24767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.164503][T24767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.181186][T24775] chnl_net:caif_netlink_parms(): no params data found [ 511.270976][T24767] team0: Port device team_slave_0 added [ 511.304324][T24767] team0: Port device team_slave_1 added [ 511.322086][T24769] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.329649][T24769] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.336973][T24769] bridge_slave_0: entered allmulticast mode [ 511.341033][ T5836] Bluetooth: hci18: command tx timeout [ 511.345462][T24769] bridge_slave_0: entered promiscuous mode [ 511.349482][ T5829] Bluetooth: hci17: command tx timeout [ 511.380974][T24769] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.388110][T24769] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.395750][T24769] bridge_slave_1: entered allmulticast mode [ 511.403284][T24769] bridge_slave_1: entered promiscuous mode [ 511.433053][T24767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.440627][T24767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.467526][T24767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.507289][T24767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.514588][T24767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.541017][T24767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.564230][T24769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.578635][T24769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.638669][T24769] team0: Port device team_slave_0 added [ 511.644626][T24775] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.652744][T24775] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.669085][T24775] bridge_slave_0: entered allmulticast mode [ 511.678475][T24775] bridge_slave_0: entered promiscuous mode [ 511.718096][T24769] team0: Port device team_slave_1 added [ 511.726786][T24775] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.736167][T24775] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.750678][T24775] bridge_slave_1: entered allmulticast mode [ 511.758600][T24775] bridge_slave_1: entered promiscuous mode [ 511.819619][T24801] Bluetooth: hci19: command tx timeout [ 511.831537][T24767] hsr_slave_0: entered promiscuous mode [ 511.838444][T24767] hsr_slave_1: entered promiscuous mode [ 511.847803][T24767] debugfs: 'hsr0' already exists in 'hsr' [ 511.854479][T24767] Cannot create hsr debugfs directory [ 511.916502][T24769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.924769][T24769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.952924][T24769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.970867][T24775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.993090][T24769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.004014][T24769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.031180][T24769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.044261][T24775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.136474][T24775] team0: Port device team_slave_0 added [ 512.172708][T24775] team0: Port device team_slave_1 added [ 512.183604][T24769] hsr_slave_0: entered promiscuous mode [ 512.190367][T24769] hsr_slave_1: entered promiscuous mode [ 512.196655][T24769] debugfs: 'hsr0' already exists in 'hsr' [ 512.202995][T24769] Cannot create hsr debugfs directory [ 512.219860][T24801] Bluetooth: hci15: command tx timeout [ 512.263439][T24775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.270772][T24775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.297732][T24775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.312750][T24775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.320273][T24775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.346623][T24775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.476474][T24775] hsr_slave_0: entered promiscuous mode [ 512.483173][T24775] hsr_slave_1: entered promiscuous mode [ 512.490026][T24775] debugfs: 'hsr0' already exists in 'hsr' [ 512.495843][T24775] Cannot create hsr debugfs directory [ 512.789616][T24801] Bluetooth: hci16: command tx timeout [ 512.942348][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 513.419922][T24801] Bluetooth: hci18: command tx timeout [ 513.425785][T24801] Bluetooth: hci17: command tx timeout [ 513.501006][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.509398][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.517719][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.745677][T24802] Bluetooth: hci5: command 0x0406 tx timeout [ 513.746001][T24800] Bluetooth: hci8: command 0x0406 tx timeout [ 513.753053][T24802] Bluetooth: hci7: command 0x0406 tx timeout [ 513.758014][T24800] Bluetooth: hci9: command 0x0406 tx timeout [ 513.764399][T24802] Bluetooth: hci6: command 0x0406 tx timeout [ 513.900618][ T5829] Bluetooth: hci19: command tx timeout [ 514.299569][ T5829] Bluetooth: hci15: command tx timeout [ 514.859704][ T5829] Bluetooth: hci16: command tx timeout [ 515.020195][ C0] net_ratelimit: 1 callbacks suppressed [ 515.020218][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 515.500851][ T5836] Bluetooth: hci18: command tx timeout [ 515.506433][ T5829] Bluetooth: hci17: command tx timeout [ 515.979986][ T5829] Bluetooth: hci19: command tx timeout [ 516.140238][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.148370][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.156557][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.164706][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.173952][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.380148][ T5829] Bluetooth: hci15: command tx timeout [ 516.780449][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 516.949703][ T5829] Bluetooth: hci16: command tx timeout [ 517.579782][ T5829] Bluetooth: hci17: command tx timeout [ 517.585406][ T5829] Bluetooth: hci18: command tx timeout [ 518.059829][ T5829] Bluetooth: hci19: command tx timeout [ 518.059918][ T31] INFO: task syz.3.8874:24589 blocked for more than 143 seconds. [ 518.076042][ T31] Not tainted syzkaller #0 [ 518.081229][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 518.090346][ T31] task:syz.3.8874 state:D stack:27840 pid:24589 tgid:24585 ppid:5823 task_flags:0x400040 flags:0x00080002 [ 518.102860][ T31] Call Trace: [ 518.106146][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 518.109064][ T31] __schedule+0x14ea/0x5050 [ 518.114547][ T31] ? __pfx___schedule+0x10/0x10 [ 518.119725][ T31] ? schedule+0x90/0x360 [ 518.123989][ T31] schedule+0x164/0x360 [ 518.128160][ T31] schedule_preempt_disabled+0x13/0x30 [ 518.135021][ T31] __mutex_lock+0x7fe/0x1300 [ 518.144122][ T31] ? __mutex_lock+0x5ac/0x1300 [ 518.148925][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 518.155369][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 518.161271][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 518.166412][ T31] ? radix_tree_lookup+0x240/0x290 [ 518.172639][ T31] genl_rcv_msg+0x10b/0x7a0 [ 518.177185][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 518.182725][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 518.187866][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 518.194798][ T31] netlink_rcv_skb+0x232/0x4b0 [ 518.200295][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 518.205349][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 518.240035][ T31] ? genl_rcv+0x19/0x40 [ 518.244260][ T31] ? down_read+0x272/0x2e0 [ 518.248687][ T31] ? genl_rcv+0xd/0x40 [ 518.269454][ T31] genl_rcv+0x28/0x40 [ 518.273486][ T31] netlink_unicast+0x80f/0x9b0 [ 518.278291][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 518.284264][ T31] ? __alloc_skb+0x193/0x390 [ 518.288878][ T31] ? netlink_sendmsg+0x650/0xb40 [ 518.294094][ T31] ? skb_put+0x11b/0x210 [ 518.298347][ T31] netlink_sendmsg+0x813/0xb40 [ 518.304396][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.310275][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 518.315419][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 518.321137][ T31] __sys_sendto+0x709/0x7a0 [ 518.325751][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 518.330931][ T31] ? exc_page_fault+0x6a/0xc0 [ 518.335803][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 518.341504][ T31] __x64_sys_sendto+0xde/0x100 [ 518.346265][ T31] do_syscall_64+0xe2/0xf80 [ 518.350829][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.356896][ T31] ? trace_irq_disable+0x37/0x100 [ 518.361990][ T31] ? clear_bhb_loop+0x60/0xb0 [ 518.366759][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.373417][ T31] RIP: 0033:0x7fe21d55b78e [ 518.377841][ T31] RSP: 002b:00007fe21b7f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 518.386451][ T31] RAX: ffffffffffffffda RBX: 00007fe21b7f66c0 RCX: 00007fe21d55b78e [ 518.394497][ T31] RDX: 0000000000000020 RSI: 00007fe21b7f5000 RDI: 0000000000000004 [ 518.402966][ T31] RBP: 0000000000000000 R08: 00007fe21b7f4f04 R09: 000000000000000c [ 518.411030][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 518.419010][ T31] R13: 00007fe21b7f4f58 R14: 00007fe21b7f5000 R15: 0000000000000000 [ 518.427098][ T31] [ 518.430493][ T31] INFO: task syz.1.8876:24590 blocked for more than 143 seconds. [ 518.438311][ T31] Not tainted syzkaller #0 [ 518.443372][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 518.452130][ T31] task:syz.1.8876 state:D stack:26200 pid:24590 tgid:24588 ppid:5822 task_flags:0x480140 flags:0x00080002 [ 518.464648][ T31] Call Trace: [ 518.467951][ T31] [ 518.471018][ T31] __schedule+0x14ea/0x5050 [ 518.475545][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 518.480568][ T31] ? __pfx___schedule+0x10/0x10 [ 518.485459][ T31] ? schedule+0x90/0x360 [ 518.490176][ T31] schedule+0x164/0x360 [ 518.494424][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 518.500064][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 518.506241][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 518.512738][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 518.519085][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 518.525668][ T31] nbd_set_size+0x516/0x6d0 [ 518.530268][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 518.535318][ T31] ? nla_memcpy+0x5b/0xc0 [ 518.540000][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 518.545477][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 518.551617][ T31] ? rcu_is_watching+0x15/0xb0 [ 518.556378][ T31] ? __nla_parse+0x40/0x60 [ 518.560866][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 518.567204][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 518.572926][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 518.579004][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 518.584375][ T31] genl_rcv_msg+0x61c/0x7a0 [ 518.588909][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 518.594026][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 518.599854][ T31] netlink_rcv_skb+0x232/0x4b0 [ 518.604700][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 518.610246][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 518.615528][ T31] ? genl_rcv+0x19/0x40 [ 518.620482][ T31] ? down_read+0x272/0x2e0 [ 518.625012][ T31] ? genl_rcv+0xd/0x40 [ 518.629158][ T31] genl_rcv+0x28/0x40 [ 518.633204][ T31] netlink_unicast+0x80f/0x9b0 [ 518.637982][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 518.643784][ T31] ? __alloc_skb+0x193/0x390 [ 518.648422][ T31] ? netlink_sendmsg+0x650/0xb40 [ 518.653642][ T31] ? skb_put+0x11b/0x210 [ 518.657902][ T31] netlink_sendmsg+0x813/0xb40 [ 518.662786][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.668226][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 518.673716][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 518.679028][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.684414][ T31] ____sys_sendmsg+0xa68/0xad0 [ 518.689197][ T31] ? __might_fault+0xaf/0x130 [ 518.694119][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 518.700216][ T31] ? import_iovec+0x73/0xa0 [ 518.704802][ T31] ___sys_sendmsg+0x2a5/0x360 [ 518.709583][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 518.714549][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 518.720241][ T31] ? futex_wait+0x29a/0x380 [ 518.720939][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 518.724780][ T31] ? __fget_files+0x2a/0x420 [ 518.742420][ T31] ? __fget_files+0x3a0/0x420 [ 518.747238][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 518.752293][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 518.757791][ T31] ? rcu_is_watching+0x15/0xb0 [ 518.763206][ T31] do_syscall_64+0xe2/0xf80 [ 518.767727][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.773865][ T31] ? trace_irq_disable+0x37/0x100 [ 518.778896][ T31] ? clear_bhb_loop+0x60/0xb0 [ 518.783879][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.790398][ T31] RIP: 0033:0x7fe96959aeb9 [ 518.794917][ T31] RSP: 002b:00007fe96a43d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 518.803484][ T31] RAX: ffffffffffffffda RBX: 00007fe969815fa0 RCX: 00007fe96959aeb9 [ 518.811530][ T31] RDX: 0000000000008040 RSI: 0000200000000140 RDI: 0000000000000004 [ 518.819935][ T31] RBP: 00007fe969608c1f R08: 0000000000000000 R09: 0000000000000000 [ 518.827908][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.836020][ T31] R13: 00007fe969816038 R14: 00007fe969815fa0 R15: 00007fff62234b98 [ 518.844083][ T31] [ 518.847206][ T31] INFO: task syz.2.8890:24622 blocked for more than 144 seconds. [ 518.855643][ T31] Not tainted syzkaller #0 [ 518.861116][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 518.870154][ T31] task:syz.2.8890 state:D stack:26616 pid:24622 tgid:24620 ppid:5821 task_flags:0x400040 flags:0x00080002 [ 518.882409][ T31] Call Trace: [ 518.885683][ T31] [ 518.888611][ T31] __schedule+0x14ea/0x5050 [ 518.893215][ T31] ? __pfx___schedule+0x10/0x10 [ 518.898168][ T31] ? schedule+0x90/0x360 [ 518.902496][ T31] schedule+0x164/0x360 [ 518.906667][ T31] schedule_preempt_disabled+0x13/0x30 [ 518.912529][ T31] __mutex_lock+0x7fe/0x1300 [ 518.917114][ T31] ? __mutex_lock+0x5ac/0x1300 [ 518.921926][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 518.926610][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 518.931696][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 518.936812][ T31] ? radix_tree_lookup+0x240/0x290 [ 518.942361][ T31] genl_rcv_msg+0x10b/0x7a0 [ 518.946865][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 518.952127][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 518.957078][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 518.962592][ T31] netlink_rcv_skb+0x232/0x4b0 [ 518.967383][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 518.972842][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 518.978124][ T31] ? genl_rcv+0x19/0x40 [ 518.982493][ T31] ? down_read+0x272/0x2e0 [ 518.987015][ T31] ? genl_rcv+0xd/0x40 [ 518.991278][ T31] genl_rcv+0x28/0x40 [ 518.995280][ T31] netlink_unicast+0x80f/0x9b0 [ 519.000501][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 519.005793][ T31] ? __alloc_skb+0x193/0x390 [ 519.010446][ T31] ? netlink_sendmsg+0x650/0xb40 [ 519.015384][ T31] ? skb_put+0x11b/0x210 [ 519.019900][ T31] netlink_sendmsg+0x813/0xb40 [ 519.024677][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.030451][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 519.035479][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 519.040859][ T31] __sys_sendto+0x709/0x7a0 [ 519.045388][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 519.050532][ T31] ? rcu_is_watching+0x15/0xb0 [ 519.055427][ T31] __x64_sys_sendto+0xde/0x100 [ 519.060626][ T31] do_syscall_64+0xe2/0xf80 [ 519.065179][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.071379][ T31] ? trace_irq_disable+0x37/0x100 [ 519.076410][ T31] ? clear_bhb_loop+0x60/0xb0 [ 519.081172][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.087162][ T31] RIP: 0033:0x7f54b175b78e [ 519.092031][ T31] RSP: 002b:00007f54b262de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 519.100807][ T31] RAX: ffffffffffffffda RBX: 00007f54b262f6c0 RCX: 00007f54b175b78e [ 519.108802][ T31] RDX: 0000000000000020 RSI: 00007f54b262e000 RDI: 0000000000000005 [ 519.117898][ T31] RBP: 0000000000000000 R08: 00007f54b262df04 R09: 000000000000000c [ 519.127061][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 519.135251][ T31] R13: 00007f54b262df58 R14: 00007f54b262e000 R15: 0000000000000000 [ 519.143379][ T31] [ 519.146435][ T31] INFO: task syz.4.8901:24644 blocked for more than 144 seconds. [ 519.158237][ T31] Not tainted syzkaller #0 [ 519.163226][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 519.171965][ T31] task:syz.4.8901 state:D stack:27840 pid:24644 tgid:24643 ppid:5820 task_flags:0x400040 flags:0x00080002 [ 519.184790][ T31] Call Trace: [ 519.188090][ T31] [ 519.191087][ T31] __schedule+0x14ea/0x5050 [ 519.195613][ T31] ? __pfx___schedule+0x10/0x10 [ 519.200658][ T31] ? schedule+0x90/0x360 [ 519.204932][ T31] schedule+0x164/0x360 [ 519.209085][ T31] schedule_preempt_disabled+0x13/0x30 [ 519.215116][ T31] __mutex_lock+0x7fe/0x1300 [ 519.219826][ T31] ? __mutex_lock+0x5ac/0x1300 [ 519.224687][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 519.229433][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 519.234658][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 519.240324][ T31] ? radix_tree_lookup+0x240/0x290 [ 519.245466][ T31] genl_rcv_msg+0x10b/0x7a0 [ 519.250064][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 519.255100][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 519.260458][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 519.265890][ T31] netlink_rcv_skb+0x232/0x4b0 [ 519.269561][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.271262][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 519.278981][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.283808][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 519.297375][ T31] ? genl_rcv+0x19/0x40 [ 519.301993][ T31] ? down_read+0x272/0x2e0 [ 519.306413][ T31] ? genl_rcv+0xd/0x40 [ 519.310603][ T31] genl_rcv+0x28/0x40 [ 519.314683][ T31] netlink_unicast+0x80f/0x9b0 [ 519.319618][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 519.324912][ T31] ? __alloc_skb+0x193/0x390 [ 519.330029][ T31] ? netlink_sendmsg+0x650/0xb40 [ 519.334968][ T31] ? skb_put+0x11b/0x210 [ 519.339227][ T31] netlink_sendmsg+0x813/0xb40 [ 519.344708][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.350098][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 519.355044][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 519.361022][ T31] __sys_sendto+0x709/0x7a0 [ 519.365522][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 519.370651][ T31] ? exc_page_fault+0x6a/0xc0 [ 519.375340][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 519.380784][ T31] __x64_sys_sendto+0xde/0x100 [ 519.385553][ T31] do_syscall_64+0xe2/0xf80 [ 519.390493][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.396551][ T31] ? trace_irq_disable+0x37/0x100 [ 519.401736][ T31] ? clear_bhb_loop+0x60/0xb0 [ 519.406417][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.412407][ T31] RIP: 0033:0x7f503c55b78e [ 519.416819][ T31] RSP: 002b:00007f503d511e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 519.425734][ T31] RAX: ffffffffffffffda RBX: 00007f503d5136c0 RCX: 00007f503c55b78e [ 519.433928][ T31] RDX: 0000000000000020 RSI: 00007f503d512000 RDI: 0000000000000004 [ 519.442061][ T31] RBP: 0000000000000000 R08: 00007f503d511f04 R09: 000000000000000c [ 519.450456][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 519.458691][ T31] R13: 00007f503d511f58 R14: 00007f503d512000 R15: 0000000000000000 [ 519.466937][ T31] [ 519.470067][ T31] INFO: task syz.0.8902:24647 blocked for more than 144 seconds. [ 519.477784][ T31] Not tainted syzkaller #0 [ 519.483236][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 519.491974][ T31] task:syz.0.8902 state:D stack:26448 pid:24647 tgid:24646 ppid:5833 task_flags:0x400140 flags:0x00080002 [ 519.504348][ T31] Call Trace: [ 519.507649][ T31] [ 519.511093][ T31] __schedule+0x14ea/0x5050 [ 519.515605][ T31] ? __pfx___schedule+0x10/0x10 [ 519.520572][ T31] ? schedule+0x90/0x360 [ 519.524819][ T31] schedule+0x164/0x360 [ 519.528962][ T31] schedule_preempt_disabled+0x13/0x30 [ 519.534498][ T31] __mutex_lock+0x7fe/0x1300 [ 519.539093][ T31] ? __mutex_lock+0x5ac/0x1300 [ 519.544373][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 519.549053][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 519.554143][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 519.559090][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 519.564705][ T31] ? radix_tree_lookup+0x240/0x290 [ 519.570365][ T31] genl_rcv_msg+0x10b/0x7a0 [ 519.574889][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 519.580018][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 519.584972][ T31] netlink_rcv_skb+0x232/0x4b0 [ 519.589822][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 519.594856][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 519.600666][ T31] ? genl_rcv+0x19/0x40 [ 519.604924][ T31] ? down_read+0x272/0x2e0 [ 519.609436][ T31] ? genl_rcv+0xd/0x40 [ 519.613529][ T31] genl_rcv+0x28/0x40 [ 519.617522][ T31] netlink_unicast+0x80f/0x9b0 [ 519.622537][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 519.627843][ T31] ? __alloc_skb+0x193/0x390 [ 519.632994][ T31] ? netlink_sendmsg+0x650/0xb40 [ 519.637952][ T31] ? skb_put+0x11b/0x210 [ 519.642461][ T31] netlink_sendmsg+0x813/0xb40 [ 519.647240][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.652649][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 519.657608][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 519.663584][ T31] __sys_sendto+0x709/0x7a0 [ 519.668239][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 519.673532][ T31] ? exc_page_fault+0x6a/0xc0 [ 519.678306][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 519.683653][ T31] __x64_sys_sendto+0xde/0x100 [ 519.688429][ T31] do_syscall_64+0xe2/0xf80 [ 519.693368][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.699495][ T31] ? trace_irq_disable+0x37/0x100 [ 519.704531][ T31] ? clear_bhb_loop+0x60/0xb0 [ 519.709212][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.715175][ T31] RIP: 0033:0x7feedbf5b78e [ 519.719917][ T31] RSP: 002b:00007feedcddce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 519.728327][ T31] RAX: ffffffffffffffda RBX: 00007feedcdde6c0 RCX: 00007feedbf5b78e [ 519.736543][ T31] RDX: 000000000000001c RSI: 00007feedcddd000 RDI: 0000000000000005 [ 519.744761][ T31] RBP: 0000000000000000 R08: 00007feedcddcf04 R09: 000000000000000c [ 519.753202][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 519.761533][ T31] R13: 00007feedcddcf58 R14: 00007feedcddd000 R15: 0000000000000000 [ 519.770013][ T31] [ 519.773203][ T31] [ 519.773203][ T31] Showing all locks held in the system: [ 519.781539][ T31] 1 lock held by khungtaskd/31: [ 519.786379][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 519.796283][ T31] 2 locks held by getty/5585: [ 519.801042][ T31] #0: ffff88803115d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 519.811279][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 519.821562][ T31] 1 lock held by udevd/21250: [ 519.826252][ T31] #0: ffff888141f4e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 519.835722][ T31] 2 locks held by syz.3.8874/24589: [ 519.841272][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 519.849508][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 519.858480][ T31] 6 locks held by syz.1.8876/24590: [ 519.863744][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 519.872570][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 519.881686][ T31] #2: ffff88802576c278 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 519.892111][ T31] #3: ffff888141f3e610 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2ba/0x6d0 [ 519.902159][ T31] #4: ffff888141f3dfb0 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 519.914240][ T31] #5: ffff888141f3dfe8 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 519.926583][ T31] 2 locks held by syz.2.8890/24622: [ 519.932312][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 519.940669][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 519.949857][ T31] 2 locks held by syz.4.8901/24644: [ 519.955035][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 519.963700][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 519.972967][ T31] 2 locks held by syz.0.8902/24647: [ 519.978375][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 519.986665][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 519.996417][ T31] 2 locks held by syz-executor/24654: [ 520.002072][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 520.010679][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 520.020441][ T31] 2 locks held by syz-executor/24664: [ 520.025943][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 520.034199][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 520.043238][ T31] 2 locks held by syz-executor/24666: [ 520.048600][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 520.057253][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 520.066439][ T31] 2 locks held by syz-executor/24669: [ 520.071885][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 520.080648][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 520.089682][ T31] 2 locks held by syz-executor/24672: [ 520.095052][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 520.103489][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 520.112888][ T31] 2 locks held by syz-executor/24704: [ 520.118285][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 520.126628][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 520.135809][ T31] 2 locks held by syz-executor/24713: [ 520.144208][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 520.152666][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 520.161796][ T31] 2 locks held by syz-executor/24717: [ 520.167147][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 520.176049][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 520.185263][ T31] 2 locks held by syz-executor/24719: [ 520.190773][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 520.199036][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 520.208480][ T31] 2 locks held by syz-executor/24723: [ 520.214017][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 520.222398][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 520.231985][ T31] 2 locks held by syz-executor/24754: [ 520.237360][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 520.245714][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 520.254859][ T31] 2 locks held by syz-executor/24763: [ 520.260864][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 520.269110][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 520.278440][ T31] 2 locks held by syz-executor/24767: [ 520.284228][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 520.292974][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 520.302244][ T31] 2 locks held by syz-executor/24769: [ 520.307663][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 520.316000][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 520.325397][ T31] 2 locks held by syz-executor/24775: [ 520.330860][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 520.339090][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 520.348286][ T31] [ 520.351067][ T31] ============================================= [ 520.351067][ T31] [ 520.359559][ T31] NMI backtrace for cpu 1 [ 520.359591][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 520.359612][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 520.359622][ T31] Call Trace: [ 520.359629][ T31] [ 520.359636][ T31] dump_stack_lvl+0xe8/0x150 [ 520.359660][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 520.359684][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 520.359715][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 520.359740][ T31] sys_info+0x135/0x170 [ 520.359759][ T31] watchdog+0xf90/0xfe0 [ 520.359783][ T31] ? watchdog+0x209/0xfe0 [ 520.359808][ T31] kthread+0x726/0x8b0 [ 520.359828][ T31] ? __pfx_watchdog+0x10/0x10 [ 520.359845][ T31] ? __pfx_kthread+0x10/0x10 [ 520.359867][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 520.359883][ T31] ? __pfx_kthread+0x10/0x10 [ 520.359902][ T31] ret_from_fork+0x51b/0xa40 [ 520.359920][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 520.359933][ T31] ? __switch_to+0xc82/0x1410 [ 520.359957][ T31] ? __pfx_kthread+0x10/0x10 [ 520.359975][ T31] ret_from_fork_asm+0x1a/0x30 [ 520.360004][ T31] [ 520.360009][ T31] Sending NMI from CPU 1 to CPUs 0: [ 520.481998][ C0] NMI backtrace for cpu 0 [ 520.482016][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 520.482032][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 520.482042][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 520.482062][ C0] Code: a8 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 59 12 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 520.482075][ C0] RSP: 0018:ffffffff8e207dc0 EFLAGS: 00000246 [ 520.482088][ C0] RAX: 000000000018b19f RBX: ffffffff8199570d RCX: 0000000080000001 [ 520.482099][ C0] RDX: 0000000000000001 RSI: ffffffff8dcc99be RDI: ffffffff8c073a00 [ 520.482109][ C0] RBP: ffffffff8e207eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 520.482120][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8fef1b70 [ 520.482131][ C0] R13: 1ffffffff1c52a78 R14: 0000000000000000 R15: 0000000000000000 [ 520.482140][ C0] FS: 0000000000000000(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000 [ 520.482160][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 520.482170][ C0] CR2: 0000562cfda8aee8 CR3: 000000000e346000 CR4: 00000000003526f0 [ 520.482184][ C0] Call Trace: [ 520.482190][ C0] [ 520.482195][ C0] default_idle+0x9/0x20 [ 520.482212][ C0] default_idle_call+0x72/0xb0 [ 520.482228][ C0] do_idle+0x1bd/0x500 [ 520.482241][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 520.482257][ C0] ? __pfx_do_idle+0x10/0x10 [ 520.482275][ C0] cpu_startup_entry+0x43/0x60 [ 520.482288][ C0] rest_init+0x2de/0x300 [ 520.482305][ C0] start_kernel+0x380/0x3d0 [ 520.482323][ C0] x86_64_start_reservations+0x24/0x30 [ 520.482339][ C0] x86_64_start_kernel+0x143/0x1c0 [ 520.482354][ C0] common_startup_64+0x13e/0x147 [ 520.482377][ C0] [ 520.666614][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 520.673450][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 520.682569][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 520.692615][ T31] Call Trace: [ 520.695893][ T31] [ 520.698900][ T31] vpanic+0x1e0/0x670 [ 520.702931][ T31] panic+0xc5/0xd0 [ 520.706640][ T31] ? __pfx_panic+0x10/0x10 [ 520.711321][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 520.716773][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 520.722924][ T31] watchdog+0xfda/0xfe0 [ 520.727158][ T31] ? watchdog+0x209/0xfe0 [ 520.731475][ T31] kthread+0x726/0x8b0 [ 520.735617][ T31] ? __pfx_watchdog+0x10/0x10 [ 520.740280][ T31] ? __pfx_kthread+0x10/0x10 [ 520.744869][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 520.750073][ T31] ? __pfx_kthread+0x10/0x10 [ 520.754669][ T31] ret_from_fork+0x51b/0xa40 [ 520.759282][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 520.764498][ T31] ? __switch_to+0xc82/0x1410 [ 520.769267][ T31] ? __pfx_kthread+0x10/0x10 [ 520.773873][ T31] ret_from_fork_asm+0x1a/0x30 [ 520.778657][ T31] [ 520.782274][ T31] Kernel Offset: disabled [ 520.786612][ T31] Rebooting in 86400 seconds..