last executing test programs: 18.411006099s ago: executing program 3 (id=7814): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 18.296275301s ago: executing program 3 (id=7816): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000040), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @loopback, 0xa}, 0x1c) 18.199744008s ago: executing program 3 (id=7819): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) read(r0, &(0x7f0000000e80)=""/4050, 0xffe9) 18.077432576s ago: executing program 1 (id=7822): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r3, 0x4}, &(0x7f0000000180)=0x8) 17.928357942s ago: executing program 1 (id=7824): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0xffffffff}}}}, @NHA_OIF={0x8, 0x5, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x0) 17.851169628s ago: executing program 1 (id=7825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x800000, 0xffffffffffffffff, 0x5, 0xfffffffb}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 17.707910298s ago: executing program 1 (id=7826): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x62, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x24, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) 17.560370016s ago: executing program 1 (id=7828): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) write$tun(r0, &(0x7f0000002240)=ANY=[@ANYBLOB="0800080000000200b7e71400020045b00fc0006801"], 0xfce) 17.294675821s ago: executing program 3 (id=7832): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5", 0xc2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x1ff, 0x0, 0x9, 0x1, 0x4, 0x2, 0x3, {0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0xfffffffb}}, 0x7fff, 0xc, 0x0, 0x6, 0x2817c26c}}, &(0x7f00000000c0)=0xb0) 17.200679552s ago: executing program 1 (id=7834): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r4 = socket(0x2a, 0x2, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf25030000000c0002000700000000000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="08000100000000001c0007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r4], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20040080) 17.11918127s ago: executing program 3 (id=7835): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00', 0x1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)={0x0, 0x3, 0x1, 'x'}, 0x9) 16.904366327s ago: executing program 3 (id=7840): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x3}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8000) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) 16.788156125s ago: executing program 0 (id=7841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd24, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x80000001, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xf8d5, 0x1ff, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0x7, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0x9, 0x0, 0x20000008, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x10, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x3, 0x8}, {0x4, 0x200000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0xfffffffc, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x8}, {0x3, 0x8, 0x0, 0x8, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x0, 0x401}, {0x4, 0x8, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x1}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x2, 0x2, 0xfffffffa}, {0x0, 0x3, 0x4, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x9}, {0x55f, 0x8, 0x401, 0x5, 0x3, 0x40}, {0x7, 0x6, 0x7, 0x8000, 0x81}, {0x4, 0x9, 0x5, 0x6, 0x3, 0x2}, {0x100, 0x4, 0x7, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0x9, 0x6, 0x1}, {0x7b, 0x74, 0x1, 0xd, 0x8, 0x7fff}, {0x69, 0xcd, 0x7f, 0xd, 0x200006, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x4, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fdf, 0x101, 0x1}, {0x3, 0x392, 0xb19, 0x1, 0x8d, 0x9}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0xfffffff9}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0x99, 0x4}, {0x4, 0x2, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x85, 0x4, 0xd55, 0xff, 0x0, 0x2}, {0x5, 0x2cfd091, 0x8, 0x9, 0x8, 0x3}, {0x0, 0x8, 0x1b89, 0x7, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x3, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0x0, 0x4, 0x10}, {0xffff0000, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7d, 0x5, 0x80000000, 0xfffffffc}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x8000010, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x9, 0x9}, {0x9e2, 0x8, 0x5, 0x1, 0x400, 0x2}, {0x74863fbb, 0x5, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x7f}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0xe8, 0xfffffff8, 0x4}, {0x80000000, 0xb07, 0x1, 0x8, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x2, 0x9, 0xe}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0xb, 0x0, 0x4, 0x33, 0xb, 0x7}, {0x4, 0x1, 0x3, 0x1, 0x8, 0xb49}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x5, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x8}, {0x5, 0x10000, 0x81, 0xb, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x7f, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2b, 0x1, 0x85, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x4, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1000, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x80, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x100, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xc}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61a, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x8000007, 0x4000, 0x100, 0x10000}, {0x57b, 0x2, 0x10e, 0x80, 0x407, 0x5}, {0x9a, 0x5, 0x3, 0x0, 0x3, 0x7fff}, {0x2000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x1, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {}, {0x5}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf8}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x4800) 16.694872141s ago: executing program 4 (id=7844): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x2a, &(0x7f0000000880)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="fa34db48716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 16.678196096s ago: executing program 0 (id=7845): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) shutdown(r1, 0x1) 16.613694256s ago: executing program 4 (id=7846): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 16.544568572s ago: executing program 4 (id=7848): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20008811) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) 16.527166087s ago: executing program 0 (id=7849): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000003080)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x1822b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 16.401396403s ago: executing program 0 (id=7852): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d7000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x11, r1, 0x1000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d6000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r2, 0x0) 16.337229926s ago: executing program 0 (id=7853): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x8) 16.264320386s ago: executing program 0 (id=7855): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 15.738650054s ago: executing program 2 (id=7865): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x17, r2, 0x1, 0x7, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001050000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.71139949s ago: executing program 2 (id=7866): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f00000001c0)={0x27, 0x0, 0xfffffffc, 0x1, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb936aa680b652a88ccf56a1b9ca5386103a5ccbe47b7b9aa6d8d7fca2ba00000000b97800001022f987617c318545790d2200", 0x12}, 0x60) 15.676942652s ago: executing program 2 (id=7867): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000240), &(0x7f0000000400)=0x8) 15.66274555s ago: executing program 4 (id=7868): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 15.60631363s ago: executing program 2 (id=7869): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r1, 0x1, 0x4, 0x6, @local}, 0x14) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r1, 0x17}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000540)="f6185f2a8e4125", 0x7}], 0x1}, 0x4) 15.539375867s ago: executing program 2 (id=7870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) close(0x3) 15.538479278s ago: executing program 4 (id=7871): socket$inet6(0xa, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050) 15.485902657s ago: executing program 2 (id=7872): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) 15.485335371s ago: executing program 4 (id=7873): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000580)={0x41, 0x0, 0x1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1, 0x9, 0x0, 0x1}}}}, 0x30}}, 0x0) 2.068723814s ago: executing program 32 (id=7834): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r4 = socket(0x2a, 0x2, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf25030000000c0002000700000000000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="08000100000000001c0007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r4], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20040080) 1.557032464s ago: executing program 33 (id=7840): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x3}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8000) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) 1.060848938s ago: executing program 34 (id=7855): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 48.306463ms ago: executing program 35 (id=7872): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) 0s ago: executing program 36 (id=7873): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000580)={0x41, 0x0, 0x1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1, 0x9, 0x0, 0x1}}}}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): 4] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4956'. [ 267.173963][T16339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4969'. [ 267.200744][T16339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4969'. [ 267.540669][ T29] audit: type=1804 audit(1776720857.081:4): pid=16362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4976" name="/newroot/1030/cgroup.controllers" dev="tmpfs" ino=5177 res=1 errno=0 [ 267.629817][ T29] audit: type=1800 audit(1776720857.121:5): pid=16362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4976" name="cgroup.controllers" dev="tmpfs" ino=5177 res=0 errno=0 [ 268.665275][T16422] netlink: 'syz.0.5005': attribute type 10 has an invalid length. [ 268.709884][T16422] dummy0: left allmulticast mode [ 268.735608][T16422] dummy0: left promiscuous mode [ 268.753475][T16422] bridge0: port 3(dummy0) entered disabled state [ 268.781857][T16422] team0: Port device dummy0 added [ 268.853059][T16435] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.5012'. [ 270.435115][T16531] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 270.892343][T16555] netlink: 'syz.3.5068': attribute type 1 has an invalid length. [ 270.904333][T16555] netlink: 'syz.3.5068': attribute type 7 has an invalid length. [ 270.922832][T16555] netlink: 'syz.3.5068': attribute type 8 has an invalid length. [ 270.939660][T16555] __nla_validate_parse: 9 callbacks suppressed [ 270.939678][T16555] netlink: 208 bytes leftover after parsing attributes in process `syz.3.5068'. [ 270.975363][T16555] NCSI netlink: No device for ifindex 65584 [ 271.447001][T16584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5084'. [ 271.522698][T16586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5085'. [ 271.574742][T16590] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5087'. [ 271.635830][T16592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5088'. [ 272.067543][T16620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5101'. [ 272.077933][T16619] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5100'. [ 272.261718][T16631] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5105'. [ 272.463076][T16644] netem: incorrect ge model size [ 272.470084][T16644] netem: change failed [ 273.121682][T16683] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.5132'. [ 273.291546][T16692] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5135'. [ 273.650503][T16709] team0: Port device dummy0 removed [ 273.664513][T16709] bridge_slave_0: left allmulticast mode [ 273.671772][T16709] bridge_slave_0: left promiscuous mode [ 273.677629][T16709] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.692833][T16709] bridge_slave_1: left allmulticast mode [ 273.698747][T16709] bridge_slave_1: left promiscuous mode [ 273.706377][T16709] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.737349][T16709] bond0: (slave bond_slave_0): Releasing backup interface [ 273.752365][T16709] bond0: (slave bond_slave_1): Releasing backup interface [ 273.767550][T16709] team0: Port device team_slave_0 removed [ 273.781251][T16709] team0: Port device team_slave_1 removed [ 273.788574][T16709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.796899][T16709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.806886][T16709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.815438][T16709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.825339][T16709] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 274.382956][T16745] netlink: 'syz.2.5160': attribute type 3 has an invalid length. [ 274.413296][T16745] netlink: 'syz.2.5160': attribute type 3 has an invalid length. [ 274.690368][T16760] tap0: tun_chr_ioctl cmd 1074025678 [ 274.710589][T16760] tap0: group set to 0 [ 275.026119][T16780] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 275.040876][T16780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 275.486107][T16807] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 275.704441][T16821] netlink: 'syz.4.5196': attribute type 1 has an invalid length. [ 275.733785][T16821] netlink: 'syz.4.5196': attribute type 1 has an invalid length. [ 275.963527][T16835] __nla_validate_parse: 8 callbacks suppressed [ 275.963545][T16835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5203'. [ 276.705124][T16875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5223'. [ 276.847113][T16883] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5226'. [ 277.224347][T16906] vcan0: tx address claim with dlc 0 [ 277.320357][T16914] sctp: [Deprecated]: syz.4.5242 (pid 16914) Use of struct sctp_assoc_value in delayed_ack socket option. [ 277.320357][T16914] Use struct sctp_sack_info instead [ 277.458920][T16920] h: entered promiscuous mode [ 278.187954][T16966] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5266'. [ 278.724046][T16997] bridge0: port 3(syz_tun) entered blocking state [ 278.746529][T16997] bridge0: port 3(syz_tun) entered disabled state [ 278.771380][T16997] syz_tun: entered allmulticast mode [ 278.805971][T16997] syz_tun: entered promiscuous mode [ 278.827638][T16997] bridge0: port 3(syz_tun) entered blocking state [ 278.835030][T16997] bridge0: port 3(syz_tun) entered forwarding state [ 279.080447][T17021] netlink: 'syz.1.5289': attribute type 2 has an invalid length. [ 279.386909][T17039] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5298'. [ 279.417482][T17039] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5298'. [ 279.460641][T17041] pimreg: left allmulticast mode [ 280.223730][T17087] netem: change failed [ 281.149975][T17138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5345'. [ 281.174727][T17138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5345'. [ 281.202383][T17138] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5345'. [ 281.238380][T17138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5345'. [ 281.269231][T17138] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5345'. [ 281.352857][T17152] ip6gre0: Master is either lo or non-ether device [ 282.507652][T17220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5382'. [ 282.652684][T17226] tipc: New replicast peer: 255.255.255.255 [ 282.668857][T17226] tipc: Enabled bearer , priority 10 [ 283.206932][T17261] veth0: entered promiscuous mode [ 283.240947][T17260] veth0: left promiscuous mode [ 283.601754][T17283] netlink: 'syz.0.5412': attribute type 1 has an invalid length. [ 283.644851][T17283] netlink: 'syz.0.5412': attribute type 3 has an invalid length. [ 283.655910][T17283] netlink: 'syz.0.5412': attribute type 7 has an invalid length. [ 283.664177][T17283] netlink: 'syz.0.5412': attribute type 8 has an invalid length. [ 283.676033][T17283] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5412'. [ 283.688889][T17283] NCSI netlink: No device for ifindex 131092 [ 283.997458][T17305] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5423'. [ 284.033876][T17309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5426'. [ 284.043854][T17309] netlink: 'syz.4.5426': attribute type 1 has an invalid length. [ 284.052050][T17309] netlink: 'syz.4.5426': attribute type 2 has an invalid length. [ 284.362317][T17327] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5434'. [ 284.827588][T17349] tipc: New replicast peer: 255.255.255.255 [ 284.840858][T17349] tipc: Enabled bearer , priority 10 [ 284.847889][T17351] netlink: 'syz.4.5445': attribute type 4 has an invalid length. [ 285.277596][T17371] syz.4.5455: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 285.333596][T17371] CPU: 0 UID: 0 PID: 17371 Comm: syz.4.5455 Not tainted syzkaller #0 PREEMPT(full) [ 285.333623][T17371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 285.333643][T17371] Call Trace: [ 285.333652][T17371] [ 285.333660][T17371] dump_stack_lvl+0xe8/0x150 [ 285.333695][T17371] warn_alloc+0x249/0x340 [ 285.333726][T17371] ? stack_trace_save+0xa9/0x100 [ 285.333752][T17371] ? __pfx_warn_alloc+0x10/0x10 [ 285.333789][T17371] ? kasan_save_track+0x4f/0x80 [ 285.333814][T17371] ? kasan_save_track+0x3e/0x80 [ 285.333838][T17371] ? __kasan_kmalloc+0x93/0xb0 [ 285.333851][T17371] ? __kmalloc_cache_noprof+0x31c/0x660 [ 285.333874][T17371] ? xskq_create+0x56/0x170 [ 285.333893][T17371] ? xsk_setsockopt+0x54c/0x990 [ 285.333908][T17371] ? do_sock_setsockopt+0x17c/0x1b0 [ 285.333935][T17371] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 285.333961][T17371] ? do_syscall_64+0x15f/0xf80 [ 285.333988][T17371] __vmalloc_node_range_noprof+0x132/0x1730 [ 285.334046][T17371] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 285.334081][T17371] ? __kasan_kmalloc+0x93/0xb0 [ 285.334104][T17371] vmalloc_user_noprof+0xad/0xe0 [ 285.334131][T17371] ? xskq_create+0xbf/0x170 [ 285.334152][T17371] xskq_create+0xbf/0x170 [ 285.334175][T17371] xsk_init_queue+0x8a/0xe0 [ 285.334198][T17371] xsk_setsockopt+0x54c/0x990 [ 285.334221][T17371] ? __pfx_xsk_setsockopt+0x10/0x10 [ 285.334240][T17371] ? __pfx_aa_sk_perm+0x10/0x10 [ 285.334279][T17371] ? aa_sock_opt_perm+0xff/0x1a0 [ 285.334309][T17371] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 285.334339][T17371] ? __pfx_xsk_setsockopt+0x10/0x10 [ 285.334361][T17371] do_sock_setsockopt+0x17c/0x1b0 [ 285.334395][T17371] __x64_sys_setsockopt+0x13d/0x1b0 [ 285.334425][T17371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.334447][T17371] do_syscall_64+0x15f/0xf80 [ 285.334470][T17371] ? trace_irq_disable+0x3b/0x140 [ 285.334491][T17371] ? clear_bhb_loop+0x40/0x90 [ 285.334514][T17371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.334533][T17371] RIP: 0033:0x7f49d319c819 [ 285.334558][T17371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.334575][T17371] RSP: 002b:00007f49d3f87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 285.334596][T17371] RAX: ffffffffffffffda RBX: 00007f49d3415fa0 RCX: 00007f49d319c819 [ 285.334611][T17371] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 285.334623][T17371] RBP: 00007f49d3232c91 R08: 0000000000000004 R09: 0000000000000000 [ 285.334636][T17371] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.334652][T17371] R13: 00007f49d3416038 R14: 00007f49d3415fa0 R15: 00007ffffde77758 [ 285.334682][T17371] [ 285.334706][T17371] Mem-Info: [ 285.627952][T17371] active_anon:6051 inactive_anon:0 isolated_anon:0 [ 285.627952][T17371] active_file:3208 inactive_file:40013 isolated_file:0 [ 285.627952][T17371] unevictable:768 dirty:173 writeback:0 [ 285.627952][T17371] slab_reclaimable:10782 slab_unreclaimable:101451 [ 285.627952][T17371] mapped:29270 shmem:1356 pagetables:1241 [ 285.627952][T17371] sec_pagetables:0 bounce:0 [ 285.627952][T17371] kernel_misc_reclaimable:0 [ 285.627952][T17371] free:1327437 free_pcp:9361 free_cma:0 [ 285.747345][T17371] Node 0 active_anon:23904kB inactive_anon:0kB active_file:12832kB inactive_file:159840kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117180kB dirty:688kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12676kB pagetables:4620kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 285.846676][T17371] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 285.859514][T17393] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 285.890662][T17371] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 285.925548][T17371] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 285.954797][T17371] Node 0 DMA32 free:1351912kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24204kB inactive_anon:0kB active_file:12832kB inactive_file:159840kB unevictable:1536kB writepending:724kB zspages:0kB present:3129332kB managed:2551528kB mlocked:0kB bounce:0kB free_pcp:38044kB local_pcp:20860kB free_cma:0kB [ 286.033918][T17371] lowmem_reserve[]: 0 0 0 0 0 [ 286.054089][T17371] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:612kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 286.156704][T17371] lowmem_reserve[]: 0 0 0 0 0 [ 286.184811][T17371] Node 1 Normal free:3942336kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 286.244826][T17412] __nla_validate_parse: 1 callbacks suppressed [ 286.244845][T17412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5469'. [ 286.263707][T17371] lowmem_reserve[]: 0 0 0 0 0 [ 286.277210][T17371] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 286.294404][T17371] Node 0 DMA32: 3040*4kB (UME) 2177*8kB (UME) 1228*16kB (UME) 110*32kB (UME) 48*64kB (UM) 73*128kB (UME) 52*256kB (UME) 29*512kB (U) 17*1024kB (UM) 12*2048kB (UM) 297*4096kB (UM) = 1351816kB [ 286.352358][T17371] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 286.387864][T17371] Node 1 Normal: 4*4kB (U) 8*8kB (UM) 13*16kB (UM) 13*32kB (UM) 6*64kB (UM) 3*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 961*4096kB (UM) = 3942336kB [ 286.428135][T17371] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 286.446935][T17371] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 286.494495][T17371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 286.533714][T17371] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 286.553927][T17426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5474'. [ 286.556370][T17371] 44574 total pagecache pages [ 286.580076][T17428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5475'. [ 286.581042][T17371] 0 pages in swap cache [ 286.598550][T17429] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5474'. [ 286.615441][T17371] Free swap = 124996kB [ 286.625901][T17371] Total swap = 124996kB [ 286.636026][T17371] 2097051 pages RAM [ 286.643992][T17371] 0 pages HighMem/MovableOnly [ 286.665616][T17371] 427401 pages reserved [ 286.683569][T17371] 0 pages cma reserved [ 286.877361][T17434] IPVS: persistence engine module ip_vs_pe_À not found [ 286.997711][T17450] netlink: 'syz.0.5483': attribute type 9 has an invalid length. [ 287.010199][T17451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5484'. [ 287.624091][T17475] macvtap1: entered allmulticast mode [ 287.647459][T17475] veth0_macvtap: entered allmulticast mode [ 287.951015][T17500] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5504'. [ 288.722046][T17543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5520'. [ 288.957284][T17548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.002381][T17548] bond0: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 289.025549][T17548] bond0: (slave ip6tnl1): Error -95 calling set_mac_address [ 289.154068][T17561] sctp: [Deprecated]: syz.4.5530 (pid 17561) Use of int in max_burst socket option deprecated. [ 289.154068][T17561] Use struct sctp_assoc_value instead [ 289.525147][T17585] netlink: 'syz.0.5539': attribute type 8 has an invalid length. [ 289.537055][T17585] sch_fq: defrate 0 ignored. [ 289.748180][T17600] veth0: entered promiscuous mode [ 289.761679][T17600] veth0: left promiscuous mode [ 291.264009][T17664] syz.3.5573 (17664) used greatest stack depth: 17560 bytes left [ 291.351068][T17659] syz.3.5573 (17659) used greatest stack depth: 17216 bytes left [ 291.474505][T17691] netlink: 'syz.2.5587': attribute type 4 has an invalid length. [ 291.910221][T17721] netlink: 'syz.3.5596': attribute type 1 has an invalid length. [ 291.925231][T17722] tipc: Enabling of bearer rejected, already enabled [ 291.944497][T17721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5596'. [ 292.157165][T17732] tipc: Enabling of bearer rejected, already enabled [ 292.413649][ T5490] veth1_macvtap: left promiscuous mode [ 292.666659][T17763] netlink: 'syz.4.5615': attribute type 4 has an invalid length. [ 292.830457][T17771] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5618'. [ 292.875544][T17775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5619'. [ 292.925205][T17778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5621'. [ 292.938118][T17779] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 292.957838][T17778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5621'. [ 293.246186][T17799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5627'. [ 293.803715][T17826] veth0: entered promiscuous mode [ 293.820772][T17826] veth0: left promiscuous mode [ 294.043905][ T1753] block nbd0: Possible stuck request ffff88805051e000: control (read@0,1024B). Runtime 30 seconds [ 294.921754][T17891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5669'. [ 295.417515][ T5827] Bluetooth: hci4: link tx timeout [ 295.423072][ T5827] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 296.310211][T17957] netlink: 236 bytes leftover after parsing attributes in process `syz.3.5698'. [ 296.346453][T17957] netlink: 236 bytes leftover after parsing attributes in process `syz.3.5698'. [ 296.556011][T17966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5702'. [ 296.656327][T17966] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 297.336389][T18007] netlink: 'syz.2.5722': attribute type 21 has an invalid length. [ 297.365099][ T5828] Bluetooth: hci4: link tx timeout [ 297.373206][ T5828] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 297.380024][T18007] __nla_validate_parse: 1 callbacks suppressed [ 297.380040][T18007] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5722'. [ 297.434462][T18013] netlink: 'syz.2.5722': attribute type 21 has an invalid length. [ 297.454198][T18007] netlink: 'syz.2.5722': attribute type 4 has an invalid length. [ 297.462406][T18007] netlink: 'syz.2.5722': attribute type 5 has an invalid length. [ 297.471562][T18007] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5722'. [ 297.480700][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 297.498312][T18013] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5722'. [ 297.646179][T18013] netlink: 'syz.2.5722': attribute type 4 has an invalid length. [ 297.666939][T18013] netlink: 'syz.2.5722': attribute type 5 has an invalid length. [ 297.680113][T18013] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5722'. [ 297.906778][T18032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5730'. [ 300.613787][T18159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5774'. [ 301.298694][T18187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5785'. [ 301.306084][T18189] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5786'. [ 302.348083][T18232] netlink: 'syz.4.5799': attribute type 4 has an invalid length. [ 302.705822][T18240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5802'. [ 302.737676][T18240] hsr_slave_0: left promiscuous mode [ 302.808287][T18240] 0·: left promiscuous mode [ 303.837661][ T5827] block nbd1: Receive control failed (result -32) [ 304.097605][T18289] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5818'. [ 305.077588][T18050] Set syz1 is full, maxelem 65536 reached [ 305.287179][T18343] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5838'. [ 305.685457][T18359] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5844'. [ 305.916990][T18375] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5853'. [ 306.181543][T18394] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5860'. [ 306.472273][T18409] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5867'. [ 306.581064][T18414] netlink: 'syz.2.5871': attribute type 2 has an invalid length. [ 307.078451][T18441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5884'. [ 307.162832][T18441] macvtap1: entered promiscuous mode [ 307.169184][T18441] vlan0: entered promiscuous mode [ 307.177680][T18441] macvtap1: entered allmulticast mode [ 307.189142][T18441] vlan0: entered allmulticast mode [ 307.195850][T18441] veth0_vlan: entered allmulticast mode [ 307.216188][T18446] netlink: 'syz.4.5886': attribute type 5 has an invalid length. [ 308.216483][T18504] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5909'. [ 308.684495][T18530] veth0: entered promiscuous mode [ 308.703126][T18527] veth0: left promiscuous mode [ 308.808007][T18539] netlink: 'syz.2.5922': attribute type 1 has an invalid length. [ 308.816175][T18539] netlink: 'syz.2.5922': attribute type 2 has an invalid length. [ 308.828798][T18539] netlink: 'syz.2.5922': attribute type 1 has an invalid length. [ 308.837038][T18539] netlink: 'syz.2.5922': attribute type 3 has an invalid length. [ 308.845159][T18539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5922'. [ 309.117904][T18554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5930'. [ 310.366017][T18624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5957'. [ 310.747362][T18648] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5968'. [ 311.015985][T18666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5977'. [ 311.146086][T18674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5981'. [ 311.536107][T18698] bridge0: port 3(syz_tun) entered disabled state [ 311.543903][T18698] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.552803][T18698] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.755365][T18709] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5997'. [ 311.969212][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 312.053200][T18724] xt_hashlimit: size too large, truncated to 1048576 [ 312.116996][T18730] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6005'. [ 312.157825][T18730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6005'. [ 312.352917][T18736] gtp0: entered promiscuous mode [ 312.383949][T18736] gtp0: entered allmulticast mode [ 313.483699][T18797] __nla_validate_parse: 1 callbacks suppressed [ 313.483717][T18797] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6038'. [ 313.851379][ T5827] block nbd2: Receive control failed (result -32) [ 313.934317][T18823] netlink: 'syz.4.6052': attribute type 1 has an invalid length. [ 313.945158][T18823] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6052'. [ 314.067479][T18830] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6053'. [ 314.138268][T18833] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.6056'. [ 314.297786][T18843] netlink: 'syz.2.6060': attribute type 29 has an invalid length. [ 314.316940][T18843] netlink: 'syz.2.6060': attribute type 29 has an invalid length. [ 314.327928][T18843] netlink: 'syz.2.6060': attribute type 29 has an invalid length. [ 314.340782][T18847] netlink: 272 bytes leftover after parsing attributes in process `syz.1.6061'. [ 314.352418][T18843] netlink: 'syz.2.6060': attribute type 29 has an invalid length. [ 314.370366][T18843] netlink: 'syz.2.6060': attribute type 29 has an invalid length. [ 314.384827][T18843] netlink: 'syz.2.6060': attribute type 29 has an invalid length. [ 314.402565][T18843] netlink: 'syz.2.6060': attribute type 29 has an invalid length. [ 315.613467][T18913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6095'. [ 315.649225][T18913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6095'. [ 315.729593][T18917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6097'. [ 315.759361][T18917] bridge_slave_1: left allmulticast mode [ 315.783704][T18917] bridge_slave_1: left promiscuous mode [ 315.806728][T18917] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.828233][T18922] sctp: [Deprecated]: syz.2.6099 (pid 18922) Use of int in maxseg socket option. [ 315.828233][T18922] Use struct sctp_assoc_value instead [ 315.910434][T18925] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6101'. [ 316.608706][T18967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6115'. [ 317.088983][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.664540][T19024] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 317.913500][T19037] IPv6: NLM_F_CREATE should be specified when creating new route [ 317.916044][T19039] IPv6: Can't replace route, no match found [ 317.956235][T19039] IPv6: Can't replace route, no match found [ 318.131877][T19049] netlink: 'syz.3.6153': attribute type 83 has an invalid length. [ 318.391623][T19066] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 319.222789][T19111] netlink: 'syz.3.6181': attribute type 83 has an invalid length. [ 319.558751][T19131] __nla_validate_parse: 7 callbacks suppressed [ 319.558770][T19131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6190'. [ 319.591014][T19131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6190'. [ 319.745389][T19141] netlink: 'syz.4.6196': attribute type 2 has an invalid length. [ 319.757320][T19141] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6196'. [ 320.147664][T19162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6205'. [ 320.188414][T19162] hsr0: entered promiscuous mode [ 320.201826][T19167] netlink: 'syz.4.6209': attribute type 10 has an invalid length. [ 320.211183][T19162] macvlan2: entered allmulticast mode [ 320.217345][T19162] hsr0: entered allmulticast mode [ 320.226164][T19162] hsr_slave_0: entered allmulticast mode [ 320.244440][T19162] hsr_slave_1: entered allmulticast mode [ 320.312093][T19167] veth0_vlan: left promiscuous mode [ 320.336145][T19167] veth0_vlan: entered promiscuous mode [ 320.371566][T19167] team0: Device veth0_vlan failed to register rx_handler [ 320.419963][T19173] Bluetooth: MGMT ver 1.23 [ 320.436420][T19173] Bluetooth: hci1: too big key_count value 32778 [ 320.555346][T19182] netlink: 'syz.3.6216': attribute type 4 has an invalid length. [ 321.217610][T19216] netlink: 81 bytes leftover after parsing attributes in process `syz.3.6230'. [ 321.384092][T19223] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 321.416854][T19229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6236'. [ 321.425485][T19223] syzkaller1: linktype set to 823 [ 321.434241][T19229] netlink: 'syz.1.6236': attribute type 30 has an invalid length. [ 321.448699][T19229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6236'. [ 321.643027][T19237] syzkaller1: entered promiscuous mode [ 321.658777][T19237] syzkaller1: entered allmulticast mode [ 322.225758][T19272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6255'. [ 322.235251][T19272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6255'. [ 322.310104][T19274] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.6256'. [ 323.282022][T19321] netlink: 'syz.2.6279': attribute type 30 has an invalid length. [ 323.322834][ T1145] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.324422][T19321] netlink: 'syz.2.6279': attribute type 30 has an invalid length. [ 323.352974][ T1145] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.414566][ T1145] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.460062][ T1145] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.886100][T19351] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 323.916175][T19356] netlink: 'syz.2.6291': attribute type 1 has an invalid length. [ 323.924820][T19356] netlink: 'syz.2.6291': attribute type 1 has an invalid length. [ 324.095361][T19364] netlink: 'syz.2.6297': attribute type 4 has an invalid length. [ 324.125901][ T1753] block nbd0: Possible stuck request ffff88805051e000: control (read@0,1024B). Runtime 60 seconds [ 324.337715][T19378] Bluetooth: MGMT ver 1.23 [ 324.705700][T19395] __nla_validate_parse: 10 callbacks suppressed [ 324.705720][T19395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6311'. [ 324.736282][T19397] netlink: 'syz.2.6312': attribute type 1 has an invalid length. [ 324.747795][T19397] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6312'. [ 324.750118][T19399] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.6313'. [ 324.757402][T19397] netlink: 'syz.2.6312': attribute type 1 has an invalid length. [ 324.775951][T19397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6312'. [ 326.328085][T19485] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.6354'. [ 326.359152][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 326.359669][ T5827] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 326.369140][T19488] netlink: 'syz.4.6356': attribute type 11 has an invalid length. [ 326.593424][T19501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6363'. [ 327.057932][T19522] syzkaller1: entered promiscuous mode [ 327.074295][T19522] syzkaller1: entered allmulticast mode [ 327.166987][T19526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6375'. [ 327.573644][T19546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 328.117605][T19572] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6396'. [ 328.677219][T19600] geneve2: entered promiscuous mode [ 328.692708][ T1101] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 43998 - 0 [ 328.709745][ T1101] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 43998 - 0 [ 328.728970][ T1101] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 43998 - 0 [ 328.774099][ T1101] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 43998 - 0 [ 329.100901][T19617] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6418'. [ 329.535011][T19622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.826067][T19638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6427'. [ 329.880251][T19641] sctp: [Deprecated]: syz.1.6428 (pid 19641) Use of struct sctp_assoc_value in delayed_ack socket option. [ 329.880251][T19641] Use struct sctp_sack_info instead [ 330.257492][T19663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6438'. [ 330.534506][T19671] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6440'. [ 330.751587][T19691] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6450'. [ 330.889672][T19697] sock: sock_set_timeout: `syz.4.6452' (pid 19697) tries to set negative timeout [ 331.702363][T19744] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6471'. [ 331.783363][T19749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6475'. [ 331.801490][T19749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6475'. [ 331.815711][T19749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6475'. [ 331.833135][T19749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6475'. [ 331.997116][T19758] tipc: Resetting bearer [ 332.004654][T19758] tipc: Resetting bearer [ 332.016437][T19758] tipc: Resetting bearer [ 332.672168][T19795] netlink: 'syz.4.6495': attribute type 11 has an invalid length. [ 333.286008][T19827] xt_hashlimit: size too large, truncated to 1048576 [ 333.502502][T19838] netlink: 'syz.1.6516': attribute type 16 has an invalid length. [ 333.515037][T19840] veth0: entered promiscuous mode [ 333.523260][T19839] veth0: left promiscuous mode [ 333.528366][T19838] netlink: 'syz.1.6516': attribute type 17 has an invalid length. [ 333.616539][T19838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 333.954683][ T29] audit: type=1800 audit(1776720923.501:6): pid=19856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6525" name="memory.events" dev="tmpfs" ino=6473 res=0 errno=0 [ 334.274786][T19874] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6533'. [ 334.396257][T19880] netlink: 'syz.1.6534': attribute type 4 has an invalid length. [ 334.435057][T19883] syzkaller1: entered promiscuous mode [ 334.451496][T19883] syzkaller1: entered allmulticast mode [ 334.561750][T19887] syzkaller1: entered promiscuous mode [ 334.567395][T19887] syzkaller1: entered allmulticast mode [ 334.761958][T19902] netlink: 'syz.4.6544': attribute type 17 has an invalid length. [ 334.789846][T19902] gretap0: entered promiscuous mode [ 334.811671][T19902] gretap0: left promiscuous mode [ 334.845585][T19906] netlink: 'syz.3.6545': attribute type 3 has an invalid length. [ 335.000234][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.292919][T19935] __nla_validate_parse: 3 callbacks suppressed [ 335.292937][T19935] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.6557'. [ 335.357660][T19937] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 335.446311][T19940] team0: Port device gretap3 added [ 335.549496][T19947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6562'. [ 335.609588][T19947] gtp1: entered promiscuous mode [ 335.628955][T19947] gtp1: entered allmulticast mode [ 335.640026][ T195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.650588][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.652451][T19949] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 335.672434][T13995] IPVS: starting estimator thread 0... [ 335.780804][T19958] block nbd3: server does not support multiple connections per device. [ 335.790111][T19955] IPVS: using max 31 ests per chain, 74400 per kthread [ 335.816155][T19958] block nbd3: shutting down sockets [ 335.916811][T19964] syzkaller1: entered promiscuous mode [ 335.939633][T19964] syzkaller1: entered allmulticast mode [ 336.101654][T19976] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6576'. [ 336.583484][T20005] netlink: 'syz.0.6590': attribute type 1 has an invalid length. [ 336.986854][T20022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6600'. [ 337.002980][T20026] netlink: 'syz.4.6598': attribute type 1 has an invalid length. [ 337.028517][T20019] team0 (unregistering): Port device team_slave_0 removed [ 337.058580][T20019] team0 (unregistering): Port device team_slave_1 removed [ 337.260639][T20037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6604'. [ 337.285866][T20037] block nbd3: Unsupported socket: should be TCP or UNIX. [ 337.567676][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.753236][T20064] netlink: 'syz.3.6619': attribute type 1 has an invalid length. [ 337.771795][T20064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6619'. [ 337.807465][T20070] netlink: 'syz.1.6622': attribute type 1 has an invalid length. [ 338.143916][T20091] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6631'. [ 338.290997][T20100] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.6635'. [ 338.306290][T20101] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6636'. [ 338.840310][ T1145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.851673][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.861570][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.173718][T20146] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6657'. [ 339.655709][T20173] netlink: ct family unspecified [ 339.814569][T20179] syzkaller1: entered promiscuous mode [ 339.826502][T20179] syzkaller1: entered allmulticast mode [ 339.842089][T20183] syzkaller1: entered promiscuous mode [ 339.849690][T20183] syzkaller1: entered allmulticast mode [ 339.879662][T20183] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 340.002532][T20191] netlink: 'syz.1.6676': attribute type 7 has an invalid length. [ 340.037017][T20191] netlink: 'syz.1.6676': attribute type 8 has an invalid length. [ 340.046527][T20193] netlink: 'syz.4.6678': attribute type 29 has an invalid length. [ 340.062851][T20193] netlink: 'syz.4.6678': attribute type 29 has an invalid length. [ 340.081682][T20193] unsupported nla_type 58 [ 340.645988][T20221] syzkaller1: entered promiscuous mode [ 340.668100][T20221] syzkaller1: entered allmulticast mode [ 340.760619][ T1145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.769809][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.783725][ T1101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.391852][T20263] __nla_validate_parse: 6 callbacks suppressed [ 341.391865][T20263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6710'. [ 341.417229][T20257] syzkaller1: entered promiscuous mode [ 341.423101][T20257] syzkaller1: entered allmulticast mode [ 342.646262][T20319] netlink: 'syz.0.6729': attribute type 10 has an invalid length. [ 342.662062][T20321] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6727'. [ 342.687198][ T1145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.743232][T20319] bridge_slave_1: left allmulticast mode [ 342.770814][T20319] bridge_slave_1: left promiscuous mode [ 342.784513][T20319] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.842255][T20327] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.6731'. [ 342.869390][T20319] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 343.112458][T20295] dvmrp8: entered allmulticast mode [ 343.222529][ T195] dvmrp8: left allmulticast mode [ 343.646270][T20364] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6743'. [ 343.673550][T20364] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6743'. [ 343.683894][T20364] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6743'. [ 343.761488][T20364] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6743'. [ 343.791383][T20364] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6743'. [ 343.823693][T20364] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6743'. [ 344.530765][T20409] macvtap2: entered promiscuous mode [ 344.553066][T20409] macvtap2: entered allmulticast mode [ 344.580173][T20409] veth1_vlan: entered allmulticast mode [ 344.605096][ T1101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.613599][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.622425][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.641644][T20410] macvtap3: entered promiscuous mode [ 344.667583][T20410] macvtap3: entered allmulticast mode [ 345.493309][T20452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6777'. [ 345.586768][T20459] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 346.521156][ T1145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.531826][ T1101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.540226][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.844846][T20525] __nla_validate_parse: 4 callbacks suppressed [ 346.844863][T20525] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6807'. [ 346.916575][T20529] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6807'. [ 346.931219][T20529] nbd: device at index 64 is going down [ 347.085795][ T5833] udevd[5833]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 347.145618][ T5833] udevd[5833]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 347.230639][T20543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6816'. [ 347.326762][T20543] bond0: ARP target 8.4.0.0 is already present [ 347.344290][T20543] bond0: option arp_ip_target: invalid value (1032) [ 347.483868][T20551] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.6822'. [ 347.717229][T20565] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.825535][T20569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6829'. [ 347.839179][T20569] netlink: 'syz.2.6829': attribute type 7 has an invalid length. [ 347.852277][T20569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6829'. [ 348.230051][T20596] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6837'. [ 348.439589][ T1101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.506033][T20611] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6846'. [ 348.600708][T20617] syzkaller1: entered promiscuous mode [ 348.614586][T20617] syzkaller1: entered allmulticast mode [ 348.822015][T20629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.831737][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.871447][T20632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6856'. [ 348.931642][T20636] sctp: [Deprecated]: syz.4.6859 (pid 20636) Use of struct sctp_assoc_value in delayed_ack socket option. [ 348.931642][T20636] Use struct sctp_sack_info instead [ 348.964177][T20638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6858'. [ 348.995387][T20638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.075436][T20638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.123817][T20640] netlink: 'syz.3.6860': attribute type 12 has an invalid length. [ 349.147255][T20640] netlink: 'syz.3.6860': attribute type 29 has an invalid length. [ 349.173916][T20640] netlink: 'syz.3.6860': attribute type 1 has an invalid length. [ 349.265029][T20648] netlink: 'syz.2.6864': attribute type 1 has an invalid length. [ 349.722280][ T48] net_ratelimit: 2 callbacks suppressed [ 349.722296][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.360264][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.370453][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.746551][T20796] netlink: 'syz.4.6932': attribute type 39 has an invalid length. [ 352.073275][T20812] __nla_validate_parse: 7 callbacks suppressed [ 352.073293][T20812] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6940'. [ 352.186143][T20817] IPv6: NLM_F_CREATE should be specified when creating new route [ 352.252932][T20822] sctp: [Deprecated]: syz.3.6942 (pid 20822) Use of int in max_burst socket option deprecated. [ 352.252932][T20822] Use struct sctp_assoc_value instead [ 352.286297][ T1101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.294797][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.308711][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.373180][T20826] syzkaller1: entered promiscuous mode [ 352.385881][T20826] syzkaller1: entered allmulticast mode [ 352.439494][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.504250][T20832] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 353.955903][T20916] netlink: 'syz.4.6987': attribute type 4 has an invalid length. [ 353.993462][T20916] netlink: 'syz.4.6987': attribute type 4 has an invalid length. [ 354.201240][ T1753] block nbd0: Possible stuck request ffff88805051e000: control (read@0,1024B). Runtime 90 seconds [ 354.203196][ T1145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.432766][T20945] veth0: entered promiscuous mode [ 354.456406][T20944] veth0: left promiscuous mode [ 354.595349][T20953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7003'. [ 354.606909][T20953] bridge_slave_0: entered promiscuous mode [ 354.617162][T20951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7001'. [ 354.646515][T20953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7003'. [ 354.677977][T20955] syzkaller1: entered promiscuous mode [ 354.697780][T20955] syzkaller1: entered allmulticast mode [ 354.814938][T20959] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 354.839552][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.850228][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.978445][T20971] netlink: 'syz.0.7011': attribute type 1 has an invalid length. [ 354.994554][T20971] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7011'. [ 355.021004][T20971] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7011'. [ 355.182402][T20985] netlink: 'syz.4.7016': attribute type 7 has an invalid length. [ 355.198933][ T195] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.198967][T20985] netlink: 'syz.4.7016': attribute type 7 has an invalid length. [ 355.213428][T20986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7015'. [ 355.322188][ T195] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.373672][ T195] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.411461][ T195] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.480247][ T195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.488676][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.497780][ T1101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.060798][T21024] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.7033'. [ 356.143881][T21029] xt_hashlimit: size too large, truncated to 1048576 [ 356.179978][T21031] netlink: 'syz.0.7036': attribute type 21 has an invalid length. [ 356.213168][T21031] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7036'. [ 356.237185][T21031] netlink: 'syz.0.7036': attribute type 5 has an invalid length. [ 356.271554][T21031] netlink: 'syz.0.7036': attribute type 6 has an invalid length. [ 356.299699][T21031] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7036'. [ 356.608112][T21053] netlink: 'syz.4.7045': attribute type 9 has an invalid length. [ 356.633883][T21053] netlink: 'syz.4.7045': attribute type 9 has an invalid length. [ 356.983988][T21074] veth0: entered promiscuous mode [ 357.327980][T21090] __nla_validate_parse: 6 callbacks suppressed [ 357.327998][T21090] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7061'. [ 357.378389][T21087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7060'. [ 357.396974][T21092] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.7062'. [ 357.408070][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.416439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.618671][T21101] syzkaller1: entered promiscuous mode [ 357.625038][T21101] syzkaller1: entered allmulticast mode [ 357.906472][T21110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7069'. [ 357.932226][T21110] chnl_net:caif_netlink_parms(): no params data found [ 357.991021][T21111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.040303][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.054244][ T1101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.400075][T21138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7083'. [ 358.423641][ T1101] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.439603][T21138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7083'. [ 358.450207][ T1101] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.463211][ T1101] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.478598][ T1101] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.605539][T21143] xt_hashlimit: size too large, truncated to 1048576 [ 358.896447][T21163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7093'. [ 358.931653][T21163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7093'. [ 358.944390][T21165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7094'. [ 358.979838][T21167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7095'. [ 359.323657][T21181] 8021q: adding VLAN 0 to HW filter on device bond2 [ 359.418933][T21192] validate_nla: 4 callbacks suppressed [ 359.418951][T21192] netlink: 'syz.1.7106': attribute type 1 has an invalid length. [ 359.433309][T21193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.515404][T21192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.573322][T21197] bond0: (slave geneve2): making interface the new active one [ 359.583079][T21197] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 359.747559][T21210] gretap2: entered promiscuous mode [ 359.760631][T21210] batman_adv: batadv0: Adding interface: gretap2 [ 359.774981][T21210] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 359.814094][T21210] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 359.850291][ T12] net_ratelimit: 4 callbacks suppressed [ 359.850308][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.961449][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.009385][T13997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.106069][T21227] veth1_vlan (unregistering): left allmulticast mode [ 360.227324][T21234] netlink: 'syz.2.7122': attribute type 15 has an invalid length. [ 360.524607][T21234] netlink: 'syz.2.7122': attribute type 15 has an invalid length. [ 360.524653][ T35] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 360.524785][T21251] netlink: 'syz.3.7128': attribute type 20 has an invalid length. [ 360.560408][ T35] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 360.592551][ T35] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 360.601741][ T1101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.612382][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.654894][ T35] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 360.654965][T21251] netlink: 'syz.3.7128': attribute type 20 has an invalid length. [ 360.666095][ T35] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.681837][ T35] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.683093][T21253] netlink: 'syz.2.7129': attribute type 1 has an invalid length. [ 360.694123][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.705649][ T1101] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.741793][ T1101] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.823258][T21253] 8021q: adding VLAN 0 to HW filter on device bond3 [ 360.841532][T21255] bond3: (slave geneve3): making interface the new active one [ 360.862424][T21255] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 360.924204][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.976779][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.137362][T21262] syzkaller1: entered promiscuous mode [ 361.155504][T21262] syzkaller1: entered allmulticast mode [ 361.241451][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.458530][T21289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.504625][T21287] vlan3: entered allmulticast mode [ 361.526519][T21287] bond0: entered allmulticast mode [ 361.538759][T21287] bond_slave_0: entered allmulticast mode [ 361.550304][T21287] bond_slave_1: entered allmulticast mode [ 361.556176][T21287] bridge_slave_1: entered allmulticast mode [ 361.619175][T21290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.644938][T21290] bond_slave_0: left allmulticast mode [ 361.654992][T21290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.665572][T21290] bond_slave_1: left allmulticast mode [ 361.676084][T21290] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 361.701665][T21290] bridge_slave_1: left allmulticast mode [ 361.732278][T21290] bond0 (unregistering): Released all slaves [ 361.782355][T21294] vxcan1 speed is unknown, defaulting to 1000 [ 361.799647][T21294] vxcan1 speed is unknown, defaulting to 1000 [ 361.823509][T21294] vxcan1 speed is unknown, defaulting to 1000 [ 362.218681][ T795] vxcan1 speed is unknown, defaulting to 1000 [ 362.229625][T21294] infiniband syz2: set active [ 362.236499][T21294] infiniband syz2: added vxcan1 [ 362.288577][T21294] RDS/IB: syz2: added [ 362.294102][T21294] smc: adding ib device syz2 with port count 1 [ 362.304971][T21294] smc: ib device syz2 port 1 has no pnetid [ 362.321785][ T795] vxcan1 speed is unknown, defaulting to 1000 [ 362.338072][T21294] vxcan1 speed is unknown, defaulting to 1000 [ 362.867618][T21294] vxcan1 speed is unknown, defaulting to 1000 [ 362.917092][T21346] bridge_slave_0: invalid flags given to default FDB implementation [ 363.442660][T21370] syzkaller1: entered promiscuous mode [ 363.471298][T21370] syzkaller1: entered allmulticast mode [ 363.689560][T21294] vxcan1 speed is unknown, defaulting to 1000 [ 363.716886][T21378] __nla_validate_parse: 12 callbacks suppressed [ 363.716905][T21378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7177'. [ 363.761716][T21378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7177'. [ 364.306905][T21294] vxcan1 speed is unknown, defaulting to 1000 [ 364.680386][T21403] bond2: (slave 26±ÿÿÿÿa–ïD): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 364.745878][T21403] bond2: (slave 26±ÿÿÿÿa–ïD): Enslaving as an active interface with an up link [ 364.977859][T21294] vxcan1 speed is unknown, defaulting to 1000 [ 365.000175][ T48] net_ratelimit: 46 callbacks suppressed [ 365.000191][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.194138][T21426] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7196'. [ 365.207137][ T1145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.846642][T21461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 365.867446][T21461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.896040][T21464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.905850][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.361309][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.369916][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.379671][ T1101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.400617][T21497] veth0: entered promiscuous mode [ 366.417828][T21496] veth0: left promiscuous mode [ 366.449707][T21499] netlink: 'syz.3.7230': attribute type 22 has an invalid length. [ 366.458021][T21499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7230'. [ 366.468739][T21499] netlink: 'syz.3.7230': attribute type 22 has an invalid length. [ 366.479814][T21499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7230'. [ 366.999952][ T1101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.212197][T21509] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.219608][T21509] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.435640][T21543] atomic_op ffff88802a617198 conn xmit_atomic 0000000000000000 [ 367.491133][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.684624][T21509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.718365][T21509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.744823][T21509] tipc: Resetting bearer [ 368.100471][T21509] veth0_macvtap: left allmulticast mode [ 368.183452][T21549] netlink: 'syz.1.7250': attribute type 13 has an invalid length. [ 368.184258][ T12] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.219425][T21549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7250'. [ 368.238684][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.259952][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 43998 - 0 [ 368.285402][ T12] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.319868][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.345321][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 43998 - 0 [ 368.371217][ T12] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.396377][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.428884][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 43998 - 0 [ 368.514715][T21549] netlink: 'syz.1.7250': attribute type 13 has an invalid length. [ 368.515350][ T12] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.539358][T21549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7250'. [ 368.547246][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.577018][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 43998 - 0 [ 368.599460][T21570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7255'. [ 368.639754][T21570] netlink: 'syz.0.7255': attribute type 18 has an invalid length. [ 368.674951][T21570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7255'. [ 368.714579][T21570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7255'. [ 368.750935][T21570] netlink: 'syz.0.7255': attribute type 18 has an invalid length. [ 368.784824][T21570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7255'. [ 368.951959][T21582] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 368.963603][T21582] syzkaller1: Refused to change device type [ 369.356134][T21604] netlink: 'syz.1.7267': attribute type 21 has an invalid length. [ 369.384398][T21604] netlink: 'syz.1.7267': attribute type 22 has an invalid length. [ 369.406989][T21604] netlink: 'syz.1.7267': attribute type 23 has an invalid length. [ 369.416603][T21604] netlink: 'syz.1.7267': attribute type 25 has an invalid length. [ 369.426388][T21604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7267'. [ 369.587136][T21618] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 369.619693][T21618] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 370.200808][ T1145] net_ratelimit: 5 callbacks suppressed [ 370.200829][ T1145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.339665][T21619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.841905][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.049383][T21667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.103461][T21667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.133549][T21671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.149374][T21671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.479856][ T195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.488338][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.541096][T21685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7292'. [ 371.993990][ T1145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.219204][T21718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7298'. [ 373.288834][T21743] syzkaller1: entered promiscuous mode [ 373.312175][T21743] syzkaller1: entered allmulticast mode [ 374.297715][T21793] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.7332'. [ 374.738946][T21806] validate_nla: 1 callbacks suppressed [ 374.738964][T21806] netlink: 'syz.4.7338': attribute type 12 has an invalid length. [ 374.767797][T21806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7338'. [ 374.781910][T21806] netlink: 'syz.4.7338': attribute type 12 has an invalid length. [ 374.790241][T21806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7338'. [ 374.926971][T21812] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7341'. [ 374.979229][T21816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7343'. [ 375.673077][T21845] netlink: 'syz.1.7356': attribute type 51 has an invalid length. [ 375.755770][T21847] IPVS: Scheduler module ip_vs_sip not found [ 377.110340][T21875] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7365'. [ 377.456533][T21845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.464045][T21845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.473014][T21845] batman_adv: batadv0: Removing interface: gretap2 [ 377.886165][T21895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7375'. [ 378.053411][T21903] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.7378'. [ 378.094862][T21904] netlink: 'syz.1.7377': attribute type 1 has an invalid length. [ 378.179376][T21904] 8021q: adding VLAN 0 to HW filter on device bond2 [ 378.495697][T21925] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7386'. [ 378.509466][T21925] netlink: 320 bytes leftover after parsing attributes in process `syz.4.7386'. [ 378.544487][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.553316][T21923] pim6reg1: entered promiscuous mode [ 378.561375][T21923] pim6reg1: entered allmulticast mode [ 379.681276][T21972] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7405'. [ 379.838087][T21975] veth0: entered promiscuous mode [ 379.869550][T21975] veth0: left promiscuous mode [ 380.059703][T21983] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.7410'. [ 380.080095][T21983] net_ratelimit: 8 callbacks suppressed [ 380.080113][T21983] netlink: Conntrack attr has 4 unknown bytes [ 380.775663][T22004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7420'. [ 380.990583][T22012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7424'. [ 381.011646][T22012] netlink: 'syz.3.7424': attribute type 1 has an invalid length. [ 381.029185][T22012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7424'. [ 381.052477][T22012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7424'. [ 381.072790][T22012] netlink: 'syz.3.7424': attribute type 1 has an invalid length. [ 381.091565][T22012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7424'. [ 381.105060][T22018] trusted_key: syz.2.7427 sent an empty control message without MSG_MORE. [ 381.420357][T22030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7431'. [ 381.583754][T22034] pim6reg1: entered promiscuous mode [ 381.592269][T22034] pim6reg1: entered allmulticast mode [ 381.773259][T22038] ip6erspan1: entered allmulticast mode [ 381.895799][T22043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7438'. [ 381.907940][T22040] nbd3: detected capacity change from 0 to 63 [ 381.925334][T22041] block nbd3: NBD_DISCONNECT [ 381.947128][T22041] block nbd3: Disconnected due to user request. [ 381.979499][T22041] block nbd3: shutting down sockets [ 382.006559][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.015754][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 382.023602][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.032683][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 382.040515][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.049599][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 382.057392][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.066469][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 382.077303][ T5833] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.086410][ T5833] Buffer I/O error on dev nbd3, logical block 0, async page read [ 382.094948][ T5833] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.104888][ T5833] Buffer I/O error on dev nbd3, logical block 1, async page read [ 382.113996][ T5833] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.123572][ T5833] Buffer I/O error on dev nbd3, logical block 2, async page read [ 382.141139][ T5833] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.154165][ T5833] Buffer I/O error on dev nbd3, logical block 3, async page read [ 382.176126][ T5833] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.205482][ T5833] Buffer I/O error on dev nbd3, logical block 0, async page read [ 382.233169][ T5833] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.269315][ T5833] Buffer I/O error on dev nbd3, logical block 1, async page read [ 382.292825][T22048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7440'. [ 382.307485][ T5833] ldm_validate_partition_table(): Disk read failed. [ 382.328222][ T5833] Dev nbd3: unable to read RDB block 0 [ 382.348187][ T5833] nbd3: unable to read partition table [ 382.414182][ T5833] ldm_validate_partition_table(): Disk read failed. [ 382.441236][ T5833] Dev nbd3: unable to read RDB block 0 [ 382.472098][ T5833] nbd3: unable to read partition table [ 382.750997][T22058] : (slave bond_slave_0): Releasing backup interface [ 382.772362][T22058] bond_slave_0: left allmulticast mode [ 382.816845][T22058] : (slave bond_slave_1): Releasing backup interface [ 382.853359][T22058] bond_slave_1: left allmulticast mode [ 382.946055][T22058] team0: Port device team_slave_0 removed [ 383.007276][T22058] team0: Port device 26±ÿ removed [ 383.032010][T22058] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 384.282607][ T1753] block nbd0: Possible stuck request ffff88805051e000: control (read@0,1024B). Runtime 120 seconds [ 385.080379][T22143] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 385.092164][T22145] __nla_validate_parse: 2 callbacks suppressed [ 385.092198][T22145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7481'. [ 385.487790][T22161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7487'. [ 385.758067][T22172] netlink: 'syz.0.7491': attribute type 4 has an invalid length. [ 385.837687][T22176] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.7494'. [ 386.087370][T22184] netlink: 320 bytes leftover after parsing attributes in process `syz.3.7497'. [ 386.266283][T22196] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7502'. [ 386.311641][T22196] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7502'. [ 386.388471][T22200] netlink: 'syz.1.7504': attribute type 1 has an invalid length. [ 386.552957][T22203] bond3: (slave bridge3): making interface the new active one [ 386.563133][T22203] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 386.916678][T22221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7511'. [ 386.932525][T22221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7511'. [ 387.302599][T22241] netlink: 'syz.3.7520': attribute type 1 has an invalid length. [ 387.386304][T22244] sctp: [Deprecated]: syz.4.7522 (pid 22244) Use of int in maxseg socket option. [ 387.386304][T22244] Use struct sctp_assoc_value instead [ 387.523619][T22246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7523'. [ 387.562503][T22246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7523'. [ 388.204915][T22269] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 388.296438][T22272] bridge0: port 1(vlan3) entered blocking state [ 388.314346][T22272] bridge0: port 1(vlan3) entered disabled state [ 388.321893][T22272] vlan3: entered allmulticast mode [ 388.329984][T22272] geneve0: entered allmulticast mode [ 388.664514][T22285] syzkaller1: entered promiscuous mode [ 388.670540][T22285] syzkaller1: entered allmulticast mode [ 388.876612][T22288] syzkaller0: entered promiscuous mode [ 388.905785][T22288] syzkaller0: entered allmulticast mode [ 390.205251][T22318] netlink: 'syz.2.7551': attribute type 4 has an invalid length. [ 390.258170][T22319] netlink: 'syz.2.7551': attribute type 4 has an invalid length. [ 391.776182][T22328] syzkaller1: entered promiscuous mode [ 391.808982][T22328] syzkaller1: entered allmulticast mode [ 392.446806][T22349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7562'. [ 392.485768][T22349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7562'. [ 393.582954][T22349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7562'. [ 393.608278][T22349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7562'. [ 394.256867][T22389] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 394.296014][T22393] netlink: 'syz.0.7571': attribute type 10 has an invalid length. [ 394.322455][T22393] netlink: 16154 bytes leftover after parsing attributes in process `syz.0.7571'. [ 394.674173][T22407] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7577'. [ 396.620824][T22482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7601'. [ 396.657019][T22486] veth1_to_bond: entered allmulticast mode [ 396.691542][T22486] veth1_to_bond: left allmulticast mode [ 397.052245][T22503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7610'. [ 397.394893][T22519] netlink: 'syz.2.7617': attribute type 1 has an invalid length. [ 397.563067][T22524] bond4: (slave gretap1): making interface the new active one [ 397.582893][T22524] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 397.802969][T22540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7620'. [ 397.875674][T22540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7620'. [ 398.080710][T22542] policy can only be matched on NF_INET_PRE_ROUTING [ 398.080776][T22542] unable to load match [ 398.370821][T22560] netlink: 'syz.4.7626': attribute type 16 has an invalid length. [ 398.412201][T22560] netlink: 'syz.4.7626': attribute type 17 has an invalid length. [ 398.476739][T22560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.486853][T22560] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.505160][T22560] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 398.774531][T22572] "syz.1.7632" (22572) uses obsolete ecb(arc4) skcipher [ 399.266333][T22591] netlink: 'syz.0.7640': attribute type 2 has an invalid length. [ 399.343743][T22594] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7642'. [ 399.517933][T22600] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7645'. [ 399.536748][T22600] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7645'. [ 399.813994][T22610] netlink: 'syz.4.7650': attribute type 1 has an invalid length. [ 399.822976][T22610] netlink: 'syz.4.7650': attribute type 4 has an invalid length. [ 399.832415][T22610] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.7650'. [ 400.042797][T22617] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7653'. [ 400.244558][T22620] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 401.050731][T22650] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7668'. [ 401.260256][T22661] netlink: 'syz.0.7673': attribute type 1 has an invalid length. [ 401.332103][T22556] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 401.378328][T22661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.471386][T22664] bond0: (slave gretap4): making interface the new active one [ 401.513497][T22664] bond0: (slave gretap4): Enslaving as an active interface with an up link [ 401.690809][T22675] syzkaller1: entered promiscuous mode [ 401.696461][T22675] syzkaller1: entered allmulticast mode [ 402.466582][T22701] syzkaller0: entered promiscuous mode [ 402.481630][T22701] syzkaller0: entered allmulticast mode [ 405.531018][T22745] syzkaller1: entered promiscuous mode [ 405.546050][T22745] syzkaller1: entered allmulticast mode [ 406.993821][T22751] tipc: Resetting bearer [ 407.232080][T22751] vlan0: left allmulticast mode [ 407.239474][T22751] veth0_vlan: left allmulticast mode [ 407.244955][T22751] vlan0: left promiscuous mode [ 407.256185][T22751] hsr0: left allmulticast mode [ 407.270735][T22751] hsr_slave_0: left allmulticast mode [ 407.276162][T22751] hsr_slave_1: left allmulticast mode [ 407.584827][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.618920][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.641753][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.655810][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.701557][ T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.722820][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.742202][ T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.765807][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.875858][T22789] netlink: 'syz.4.7717': attribute type 1 has an invalid length. [ 408.293282][T22821] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7729'. [ 408.413544][T22829] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7733'. [ 408.433490][T22831] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.7734'. [ 408.445392][T22829] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7733'. [ 408.579554][T22840] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7738'. [ 408.728903][T22849] syzkaller1: entered promiscuous mode [ 408.734758][T22849] syzkaller1: entered allmulticast mode [ 410.048314][T22920] netlink: 'syz.1.7768': attribute type 1 has an invalid length. [ 410.101553][T22920] bond4: entered promiscuous mode [ 410.108975][T22920] 8021q: adding VLAN 0 to HW filter on device bond4 [ 410.160622][T22920] 8021q: adding VLAN 0 to HW filter on device bond4 [ 410.178134][T22920] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 410.190145][T22920] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 410.208704][T22920] bond4: (slave ip6gre1): making interface the new active one [ 410.217217][T22920] ip6gre1: entered promiscuous mode [ 410.226617][T22920] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 410.276022][T22927] netlink: 'syz.2.7770': attribute type 1 has an invalid length. [ 410.302881][T22894] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 410.320512][T22927] netlink: 'syz.2.7770': attribute type 1 has an invalid length. [ 411.061768][T22958] gretap0: entered promiscuous mode [ 411.075688][T22960] syzkaller1: entered promiscuous mode [ 411.093003][T22960] syzkaller1: entered allmulticast mode [ 411.440803][T22975] netlink: 'syz.1.7792': attribute type 1 has an invalid length. [ 411.487241][T22979] netlink: 'syz.2.7794': attribute type 1 has an invalid length. [ 411.674407][T22977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.705028][T22977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.835182][T22981] bond5: (slave geneve3): making interface the new active one [ 411.843955][T22981] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 411.971807][T22982] bond5: (slave gretap2): making interface the new active one [ 411.991696][T22982] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 412.055791][ T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.091385][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.132281][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 412.151286][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 2] type 2 family 0 port 19999 - 0 [ 412.188194][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.210151][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.228468][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 412.238675][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 2] type 2 family 0 port 19999 - 0 [ 412.432939][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.464112][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.492842][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 412.502366][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 2] type 2 family 0 port 19999 - 0 [ 412.535015][ T12] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.561339][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.586339][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 412.602536][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 2] type 2 family 0 port 19999 - 0 [ 412.623053][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 412.710822][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 412.733953][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 412.746354][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 412.948438][T23035] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.7811'. [ 413.770250][T23079] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7826'. [ 413.879299][T23045] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 414.115413][T23093] netlink: 'syz.2.7830': attribute type 1 has an invalid length. [ 414.251598][T23101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7834'. [ 414.362743][ T1753] block nbd0: Possible stuck request ffff88805051e000: control (read@0,1024B). Runtime 150 seconds [ 414.665447][T23121] batman_adv: batadv0: Adding interface: dummy0 [ 414.674353][T23121] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.705516][T23121] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 414.837373][T23131] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.7847'. [ 415.229202][T23153] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.7856'. [ 415.498356][T23163] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.7861'. [ 415.508181][T23163] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 415.849835][T23181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7870'. [ 418.178799][ T5194] udevd[5194]: worker [5826] /devices/virtual/block/nbd0 is taking a long time [ 429.405325][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 429.415674][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 429.423474][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 429.432772][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 429.440486][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 429.478126][T23195] vxcan1 speed is unknown, defaulting to 1000 [ 429.674230][T23195] chnl_net:caif_netlink_parms(): no params data found [ 429.735749][T23195] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.743112][T23195] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.750539][T23195] bridge_slave_0: entered allmulticast mode [ 429.757492][T23195] bridge_slave_0: entered promiscuous mode [ 429.765398][T23195] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.772923][T23195] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.780263][T23195] bridge_slave_1: entered allmulticast mode [ 429.787164][T23195] bridge_slave_1: entered promiscuous mode [ 429.811668][T23195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.824503][T23195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.863089][T23195] team0: Port device team_slave_0 added [ 429.872175][T23195] team0: Port device team_slave_1 added [ 429.907326][T23195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.914460][T23195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.941167][T23195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.953797][T23195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.961386][T23195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.990870][T23195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.004776][ T5828] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 430.023871][ T5828] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 430.033765][ T5828] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 430.042354][ T5828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 430.046460][T23195] hsr_slave_0: entered promiscuous mode [ 430.050199][ T5828] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 430.056096][T23195] hsr_slave_1: entered promiscuous mode [ 430.068479][T23195] debugfs: 'hsr0' already exists in 'hsr' [ 430.077607][T23195] Cannot create hsr debugfs directory [ 430.160270][T23204] vxcan1 speed is unknown, defaulting to 1000 [ 430.474096][ T5827] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 430.486225][ T5827] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 430.495580][ T5827] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 430.503756][ T5827] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 430.511645][ T5827] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 430.532148][T23204] chnl_net:caif_netlink_parms(): no params data found [ 430.634527][T23208] vxcan1 speed is unknown, defaulting to 1000 [ 430.635541][T23204] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.648013][T23204] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.655537][T23204] bridge_slave_0: entered allmulticast mode [ 430.663531][T23204] bridge_slave_0: entered promiscuous mode [ 430.672945][T23204] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.681254][T23204] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.688492][T23204] bridge_slave_1: entered allmulticast mode [ 430.697956][T23204] bridge_slave_1: entered promiscuous mode [ 430.746679][T23204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.761137][T23204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.801191][T23204] team0: Port device team_slave_0 added [ 430.810579][T23204] team0: Port device team_slave_1 added [ 430.857622][T23204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.864819][T23204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.891774][T23204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.904571][T23204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.911621][T23204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.937863][T23204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.013007][T23204] hsr_slave_0: entered promiscuous mode [ 431.019598][T23204] hsr_slave_1: entered promiscuous mode [ 431.025650][T23204] debugfs: 'hsr0' already exists in 'hsr' [ 431.031849][T23204] Cannot create hsr debugfs directory [ 431.178001][T23208] chnl_net:caif_netlink_parms(): no params data found [ 431.300626][T23208] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.307826][T23208] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.315257][T23208] bridge_slave_0: entered allmulticast mode [ 431.323812][T23208] bridge_slave_0: entered promiscuous mode [ 431.333315][T23208] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.340859][T23208] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.348121][T23208] bridge_slave_1: entered allmulticast mode [ 431.371154][T23208] bridge_slave_1: entered promiscuous mode [ 431.479244][ T5828] Bluetooth: hci5: command tx timeout [ 431.485870][T23208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.521769][T23208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.572784][ T5827] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 431.591693][ T5822] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 431.612010][T23208] team0: Port device team_slave_0 added [ 431.612062][ T5827] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 431.621603][T23208] team0: Port device team_slave_1 added [ 431.626274][ T5827] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 431.632666][ T5822] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 431.651280][ T5827] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 431.654924][ T5822] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 431.667882][ T5827] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 431.675361][ T5822] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 431.684766][ T5827] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 431.739790][T23208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.747184][T23208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.773758][T23208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.790737][T23208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.797791][T23208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.824310][T23208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.888117][T23208] hsr_slave_0: entered promiscuous mode [ 431.894892][T23208] hsr_slave_1: entered promiscuous mode [ 431.901430][T23208] debugfs: 'hsr0' already exists in 'hsr' [ 431.907184][T23208] Cannot create hsr debugfs directory [ 431.939672][T23228] vxcan1 speed is unknown, defaulting to 1000 [ 432.119829][ T5828] Bluetooth: hci6: command tx timeout [ 432.152392][T23226] vxcan1 speed is unknown, defaulting to 1000 [ 432.378091][T23228] chnl_net:caif_netlink_parms(): no params data found [ 432.478557][T23228] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.485764][T23228] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.493295][T23228] bridge_slave_0: entered allmulticast mode [ 432.501105][T23228] bridge_slave_0: entered promiscuous mode [ 432.513415][T23228] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.520844][T23228] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.528033][T23228] bridge_slave_1: entered allmulticast mode [ 432.535990][T23228] bridge_slave_1: entered promiscuous mode [ 432.590680][T23228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.599387][ T5828] Bluetooth: hci7: command tx timeout [ 432.604004][T23228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.649555][T23228] team0: Port device team_slave_0 added [ 432.658728][T23228] team0: Port device team_slave_1 added [ 432.700933][T23228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.707896][T23228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.734379][T23228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.745725][T23226] chnl_net:caif_netlink_parms(): no params data found [ 432.756878][T23228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.765115][T23228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.791358][T23228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.876445][T23228] hsr_slave_0: entered promiscuous mode [ 432.882859][T23228] hsr_slave_1: entered promiscuous mode [ 432.888908][T23228] debugfs: 'hsr0' already exists in 'hsr' [ 432.895307][T23228] Cannot create hsr debugfs directory [ 432.921830][T23226] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.928995][T23226] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.936263][T23226] bridge_slave_0: entered allmulticast mode [ 432.943980][T23226] bridge_slave_0: entered promiscuous mode [ 432.961729][T23226] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.968983][T23226] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.976489][T23226] bridge_slave_1: entered allmulticast mode [ 432.983764][T23226] bridge_slave_1: entered promiscuous mode [ 433.031878][T23226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.050859][T23226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.094563][T23226] team0: Port device team_slave_0 added [ 433.108199][T23226] team0: Port device team_slave_1 added [ 433.151922][T23226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.158961][T23226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.185697][T23226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.204649][T23226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.211996][T23226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.238669][T23226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.305683][T23226] hsr_slave_0: entered promiscuous mode [ 433.312393][T23226] hsr_slave_1: entered promiscuous mode [ 433.318469][T23226] debugfs: 'hsr0' already exists in 'hsr' [ 433.324856][T23226] Cannot create hsr debugfs directory [ 433.559399][ T5828] Bluetooth: hci5: command tx timeout [ 433.719324][ T5828] Bluetooth: hci9: command tx timeout [ 433.799262][ T5828] Bluetooth: hci8: command tx timeout [ 434.199233][ T5828] Bluetooth: hci6: command tx timeout [ 434.679175][ T5828] Bluetooth: hci7: command tx timeout [ 435.639174][ T5828] Bluetooth: hci5: command tx timeout [ 435.799301][ T5828] Bluetooth: hci9: command tx timeout [ 435.879920][ T5828] Bluetooth: hci8: command tx timeout [ 436.279327][ T5828] Bluetooth: hci6: command tx timeout [ 436.759836][ T5828] Bluetooth: hci7: command tx timeout [ 437.719215][ T5828] Bluetooth: hci5: command tx timeout [ 437.879265][ T5828] Bluetooth: hci9: command tx timeout [ 437.959182][ T5828] Bluetooth: hci8: command tx timeout [ 438.359584][ T5828] Bluetooth: hci6: command tx timeout [ 438.849163][ T5828] Bluetooth: hci7: command tx timeout [ 439.962186][ T5828] Bluetooth: hci9: command tx timeout [ 439.962389][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.039266][ T5828] Bluetooth: hci8: command tx timeout [ 444.440193][ T1753] block nbd0: Possible stuck request ffff88805051e000: control (read@0,1024B). Runtime 180 seconds [ 445.519178][ T5194] udevd[5194]: worker [5826] /devices/virtual/block/nbd0 timeout; kill it [ 445.527826][ T5194] udevd[5194]: seq 16027 '/devices/virtual/block/nbd0' killed [ 474.520537][ T1753] block nbd0: Possible stuck request ffff88805051e000: control (read@0,1024B). Runtime 210 seconds [ 489.466960][ T5822] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 489.475138][ T5822] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 489.485273][ T5822] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 489.493892][ T5822] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 489.502872][ T5822] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 489.541663][T23245] vxcan1 speed is unknown, defaulting to 1000 [ 489.737843][T23245] chnl_net:caif_netlink_parms(): no params data found [ 489.801227][T23245] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.808420][T23245] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.815782][T23245] bridge_slave_0: entered allmulticast mode [ 489.823112][T23245] bridge_slave_0: entered promiscuous mode [ 489.831372][T23245] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.838600][T23245] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.846200][T23245] bridge_slave_1: entered allmulticast mode [ 489.853634][T23245] bridge_slave_1: entered promiscuous mode [ 489.886910][T23245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.901131][T23245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.942049][T23245] team0: Port device team_slave_0 added [ 489.951475][T23245] team0: Port device team_slave_1 added [ 489.989831][T23245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.996837][T23245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.023783][T23245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.044411][ T5822] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 490.045136][T23245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.061233][T23245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.061602][ T5822] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 490.089286][T23245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.106624][ T5822] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 490.115066][ T5822] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 490.122987][ T5822] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 490.165714][T23245] hsr_slave_0: entered promiscuous mode [ 490.172417][T23245] hsr_slave_1: entered promiscuous mode [ 490.178460][T23245] debugfs: 'hsr0' already exists in 'hsr' [ 490.184874][T23245] Cannot create hsr debugfs directory [ 490.242446][T23254] vxcan1 speed is unknown, defaulting to 1000 [ 490.559939][ T5822] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 490.579474][ T5822] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 490.590720][ T5822] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 490.599904][ T5822] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 490.607612][ T5822] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 490.669847][T23258] vxcan1 speed is unknown, defaulting to 1000 [ 490.711317][T23254] chnl_net:caif_netlink_parms(): no params data found [ 490.901869][T23254] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.909224][T23254] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.916593][T23254] bridge_slave_0: entered allmulticast mode [ 490.925718][T23254] bridge_slave_0: entered promiscuous mode [ 490.947893][T23254] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.955344][T23254] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.962657][T23254] bridge_slave_1: entered allmulticast mode [ 490.970084][T23254] bridge_slave_1: entered promiscuous mode [ 491.040232][T23254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.052867][T23254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.094655][T23254] team0: Port device team_slave_0 added [ 491.102958][T23254] team0: Port device team_slave_1 added [ 491.130128][T23254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.137124][T23254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.164629][T23254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.191446][T23254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.198423][T23254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.224866][T23254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.304074][T23254] hsr_slave_0: entered promiscuous mode [ 491.311150][T23254] hsr_slave_1: entered promiscuous mode [ 491.317210][T23254] debugfs: 'hsr0' already exists in 'hsr' [ 491.324986][T23254] Cannot create hsr debugfs directory [ 491.335496][T23258] chnl_net:caif_netlink_parms(): no params data found [ 491.512796][ T5828] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 491.526047][ T5828] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 491.535950][ T5828] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 491.545697][ T5828] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 491.553869][ T5828] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 491.554123][T23258] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.562207][ T5828] Bluetooth: hci10: command tx timeout [ 491.578814][T23258] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.586169][T23258] bridge_slave_0: entered allmulticast mode [ 491.595963][T23258] bridge_slave_0: entered promiscuous mode [ 491.605390][T23258] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.612611][T23258] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.621033][T23258] bridge_slave_1: entered allmulticast mode [ 491.628562][T23258] bridge_slave_1: entered promiscuous mode [ 491.685136][T23258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.705760][T23258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.764341][T23258] team0: Port device team_slave_0 added [ 491.771550][T23272] vxcan1 speed is unknown, defaulting to 1000 [ 491.800361][T23258] team0: Port device team_slave_1 added [ 491.845870][T23258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.857833][T23258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.899788][T23258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.940473][T23258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.947500][T23258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.974628][T23258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.120641][T23258] hsr_slave_0: entered promiscuous mode [ 492.127269][T23258] hsr_slave_1: entered promiscuous mode [ 492.134523][T23258] debugfs: 'hsr0' already exists in 'hsr' [ 492.143966][T23258] Cannot create hsr debugfs directory [ 492.146149][ T5822] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 492.164268][ T5822] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 492.176613][ T5822] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 492.184929][ T5822] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 492.192862][ T5822] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 492.200205][ T5145] Bluetooth: hci11: command tx timeout [ 492.358779][T23275] vxcan1 speed is unknown, defaulting to 1000 [ 492.646198][T23272] chnl_net:caif_netlink_parms(): no params data found [ 492.679495][ T5828] Bluetooth: hci12: command tx timeout [ 492.770243][T23272] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.777777][T23272] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.786218][T23272] bridge_slave_0: entered allmulticast mode [ 492.793649][T23272] bridge_slave_0: entered promiscuous mode [ 492.812394][T23272] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.820243][T23272] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.827507][T23272] bridge_slave_1: entered allmulticast mode [ 492.835084][T23272] bridge_slave_1: entered promiscuous mode [ 492.893938][T23272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.915579][T23272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.953775][T23272] team0: Port device team_slave_0 added [ 492.971880][T23272] team0: Port device team_slave_1 added [ 493.006784][T23272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.014092][T23272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.040743][T23272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.074376][T23272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.081989][T23272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.108719][T23272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.127236][T23275] chnl_net:caif_netlink_parms(): no params data found [ 493.217045][T23272] hsr_slave_0: entered promiscuous mode [ 493.224445][T23272] hsr_slave_1: entered promiscuous mode [ 493.230907][T23272] debugfs: 'hsr0' already exists in 'hsr' [ 493.236674][T23272] Cannot create hsr debugfs directory [ 493.292604][T23275] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.301164][T23275] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.308457][T23275] bridge_slave_0: entered allmulticast mode [ 493.315607][T23275] bridge_slave_0: entered promiscuous mode [ 493.324529][T23275] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.333077][T23275] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.340406][T23275] bridge_slave_1: entered allmulticast mode [ 493.347442][T23275] bridge_slave_1: entered promiscuous mode [ 493.402183][T23275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.418753][T23275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.464572][T23275] team0: Port device team_slave_0 added [ 493.480800][T23275] team0: Port device team_slave_1 added [ 493.523475][T23275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.530505][T23275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.556941][T23275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.569898][T23275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.576846][T23275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.603598][T23275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.639566][ T5828] Bluetooth: hci13: command tx timeout [ 493.639881][ T5822] Bluetooth: hci10: command tx timeout [ 493.678581][T23275] hsr_slave_0: entered promiscuous mode [ 493.684941][T23275] hsr_slave_1: entered promiscuous mode [ 493.691476][T23275] debugfs: 'hsr0' already exists in 'hsr' [ 493.697514][T23275] Cannot create hsr debugfs directory [ 494.280035][ T5828] Bluetooth: hci14: command tx timeout [ 494.280197][ T5822] Bluetooth: hci11: command tx timeout [ 494.759577][ T5822] Bluetooth: hci12: command tx timeout [ 495.719276][ T5822] Bluetooth: hci10: command tx timeout [ 495.720103][ T5828] Bluetooth: hci13: command tx timeout [ 496.360073][ T5828] Bluetooth: hci11: command tx timeout [ 496.360087][ T5822] Bluetooth: hci14: command tx timeout [ 496.839711][ T5822] Bluetooth: hci12: command tx timeout [ 497.799283][ T5822] Bluetooth: hci10: command tx timeout [ 497.800161][ T5828] Bluetooth: hci13: command tx timeout [ 498.439276][ T5828] Bluetooth: hci14: command tx timeout [ 498.439294][ T5822] Bluetooth: hci11: command tx timeout [ 498.919729][ T5828] Bluetooth: hci12: command tx timeout [ 499.879168][ T5828] Bluetooth: hci13: command tx timeout [ 500.519505][ T5828] Bluetooth: hci14: command tx timeout [ 501.401318][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.601237][ T1753] block nbd0: Possible stuck request ffff88805051e000: control (read@0,1024B). Runtime 240 seconds [ 534.681911][ T1753] block nbd0: Possible stuck request ffff88805051e000: control (read@0,1024B). Runtime 270 seconds [ 549.535240][ T5822] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 549.543300][ T5822] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 549.551207][ T5822] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 549.560207][ T5822] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 549.568720][ T5822] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 549.609930][T23296] vxcan1 speed is unknown, defaulting to 1000 [ 549.808715][T23296] chnl_net:caif_netlink_parms(): no params data found [ 549.872109][T23296] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.879931][T23296] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.887271][T23296] bridge_slave_0: entered allmulticast mode [ 549.895005][T23296] bridge_slave_0: entered promiscuous mode [ 549.903192][T23296] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.910684][T23296] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.918140][T23296] bridge_slave_1: entered allmulticast mode [ 549.925760][T23296] bridge_slave_1: entered promiscuous mode [ 549.957530][T23296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.972359][T23296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.014783][T23296] team0: Port device team_slave_0 added [ 550.024342][T23296] team0: Port device team_slave_1 added [ 550.067192][T23296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.074492][T23296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.094588][ T5822] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 550.101305][T23296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.115370][ T5822] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 550.122461][T23296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.127061][ T5822] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 550.133944][T23296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.143500][ T5822] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 550.175476][T23296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.178392][ T5822] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 550.236138][T23296] hsr_slave_0: entered promiscuous mode [ 550.243069][T23296] hsr_slave_1: entered promiscuous mode [ 550.249319][T23296] debugfs: 'hsr0' already exists in 'hsr' [ 550.255082][T23296] Cannot create hsr debugfs directory [ 550.328542][T23305] vxcan1 speed is unknown, defaulting to 1000 [ 550.614931][ T5828] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 550.636672][ T5828] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 550.648460][ T5828] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 550.658300][ T5828] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 550.668676][ T5828] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 550.778708][T23308] vxcan1 speed is unknown, defaulting to 1000 [ 550.824274][T23305] chnl_net:caif_netlink_parms(): no params data found [ 551.025663][T23305] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.033023][T23305] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.041069][T23305] bridge_slave_0: entered allmulticast mode [ 551.048139][T23305] bridge_slave_0: entered promiscuous mode [ 551.063793][T23305] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.071194][T23305] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.078622][T23305] bridge_slave_1: entered allmulticast mode [ 551.086066][T23305] bridge_slave_1: entered promiscuous mode [ 551.124079][T23305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.140970][T23305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.183125][T23305] team0: Port device team_slave_0 added [ 551.194578][T23305] team0: Port device team_slave_1 added [ 551.221066][T23305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.228014][T23305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.255117][T23305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.277285][T23305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.284643][T23305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.311122][T23305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.393182][T23305] hsr_slave_0: entered promiscuous mode [ 551.400532][T23305] hsr_slave_1: entered promiscuous mode [ 551.406985][T23305] debugfs: 'hsr0' already exists in 'hsr' [ 551.413081][T23305] Cannot create hsr debugfs directory [ 551.426565][T23308] chnl_net:caif_netlink_parms(): no params data found [ 551.589371][ T5828] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 551.601623][ T5828] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 551.602204][T23308] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.616678][T23308] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.621528][ T5828] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 551.624629][T23308] bridge_slave_0: entered allmulticast mode [ 551.633280][ T5828] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 551.640662][T23308] bridge_slave_0: entered promiscuous mode [ 551.645571][ T5145] Bluetooth: hci15: command tx timeout [ 551.661401][ T5828] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 551.670393][T23308] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.680624][T23308] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.688161][T23308] bridge_slave_1: entered allmulticast mode [ 551.695637][T23308] bridge_slave_1: entered promiscuous mode [ 551.748698][T23308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.773598][T23308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.837401][T23308] team0: Port device team_slave_0 added [ 551.843250][T23323] vxcan1 speed is unknown, defaulting to 1000 [ 551.846649][T23308] team0: Port device team_slave_1 added [ 551.930286][T23308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.937281][T23308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.966220][T23308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.002931][T23308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.010022][T23308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.037059][T23308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.133003][T23308] hsr_slave_0: entered promiscuous mode [ 552.139952][T23308] hsr_slave_1: entered promiscuous mode [ 552.146027][T23308] debugfs: 'hsr0' already exists in 'hsr' [ 552.152353][T23308] Cannot create hsr debugfs directory [ 552.280022][ T5828] Bluetooth: hci16: command tx timeout [ 552.383856][T23323] chnl_net:caif_netlink_parms(): no params data found [ 552.586998][T23323] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.594859][T23323] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.630226][T23323] bridge_slave_0: entered allmulticast mode [ 552.646408][T23323] bridge_slave_0: entered promiscuous mode [ 552.661120][T23323] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.664303][T23333] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 552.668388][T23323] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.668591][T23323] bridge_slave_1: entered allmulticast mode [ 552.671116][T23323] bridge_slave_1: entered promiscuous mode [ 552.698391][T23333] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 552.707251][T23333] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 552.715686][T23333] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 552.724085][T23333] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 552.759282][T23333] Bluetooth: hci17: command tx timeout [ 552.770181][T23323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.783979][T23323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.821797][T23323] team0: Port device team_slave_0 added [ 552.830505][T23323] team0: Port device team_slave_1 added [ 552.874327][T23323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.882597][T23323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.908616][T23323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.924659][T23335] vxcan1 speed is unknown, defaulting to 1000 [ 552.925391][T23323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.937813][T23323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.966295][T23323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.024957][T23323] hsr_slave_0: entered promiscuous mode [ 553.031968][T23323] hsr_slave_1: entered promiscuous mode [ 553.038411][T23323] debugfs: 'hsr0' already exists in 'hsr' [ 553.044680][T23323] Cannot create hsr debugfs directory [ 553.391901][T23335] chnl_net:caif_netlink_parms(): no params data found [ 553.467681][T23335] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.475605][T23335] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.483105][T23335] bridge_slave_0: entered allmulticast mode [ 553.491365][T23335] bridge_slave_0: entered promiscuous mode [ 553.508353][T23335] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.515999][T23335] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.523665][T23335] bridge_slave_1: entered allmulticast mode [ 553.531456][T23335] bridge_slave_1: entered promiscuous mode [ 553.561198][T23335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.574412][T23335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.618065][T23335] team0: Port device team_slave_0 added [ 553.627798][T23335] team0: Port device team_slave_1 added [ 553.684321][T23335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.691946][T23335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.718440][T23335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.733424][T23333] Bluetooth: hci18: command tx timeout [ 553.738335][T23335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.741307][T23334] Bluetooth: hci15: command tx timeout [ 553.751829][T23335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.780654][T23335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.843151][T23335] hsr_slave_0: entered promiscuous mode [ 553.849831][T23335] hsr_slave_1: entered promiscuous mode [ 553.855916][T23335] debugfs: 'hsr0' already exists in 'hsr' [ 553.862370][T23335] Cannot create hsr debugfs directory [ 554.359772][T23334] Bluetooth: hci16: command tx timeout [ 554.686921][T23334] Bluetooth: hci7: command 0x0406 tx timeout [ 554.694088][T23333] Bluetooth: hci5: command 0x0406 tx timeout [ 554.717198][T23333] Bluetooth: hci9: command 0x0406 tx timeout [ 554.720675][ T5145] Bluetooth: hci6: command 0x0406 tx timeout [ 554.724794][T23334] Bluetooth: hci8: command 0x0406 tx timeout [ 554.770420][T23343] Bluetooth: hci19: command tx timeout [ 554.839408][ T5828] Bluetooth: hci17: command tx timeout [ 555.800756][ T5828] Bluetooth: hci15: command tx timeout [ 555.807025][T23343] Bluetooth: hci18: command tx timeout [ 556.439570][T23343] Bluetooth: hci16: command tx timeout [ 556.839268][T23343] Bluetooth: hci19: command tx timeout [ 556.919498][T23343] Bluetooth: hci17: command tx timeout [ 557.880030][T23343] Bluetooth: hci18: command tx timeout [ 557.886859][ T5828] Bluetooth: hci15: command tx timeout [ 558.359434][ T30] INFO: task syz.1.7834:23101 blocked for more than 143 seconds. [ 558.367201][ T30] Not tainted syzkaller #0 [ 558.372762][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 558.381584][ T30] task:syz.1.7834 state:D stack:26312 pid:23101 tgid:23100 ppid:5820 task_flags:0x480140 flags:0x00080002 [ 558.393846][ T30] Call Trace: [ 558.397155][ T30] [ 558.400913][ T30] __schedule+0x17b4/0x5680 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 558.405509][ T30] ? __pfx___schedule+0x10/0x10 [ 558.410677][ T30] ? schedule+0x90/0x360 [ 558.415363][ T30] schedule+0x164/0x360 [ 558.420255][ T30] blk_mq_freeze_queue_wait+0x101/0x180 [ 558.425853][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 558.432501][ T30] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 558.460732][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 558.479780][ T30] queue_limits_commit_update_frozen+0x55/0xd0 [ 558.489506][ T30] nbd_set_size+0x454/0x680 [ 558.494066][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 558.500149][ T30] ? nla_memcpy+0x5b/0xc0 [ 558.504541][ T30] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 558.512076][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 558.517848][ T30] ? rcu_is_watching+0x15/0xb0 [ 558.528377][ T5828] Bluetooth: hci16: command tx timeout [ 558.529943][ T30] ? trace_kmalloc+0x2a/0xf0 [ 558.538452][ T30] ? __nla_parse+0x40/0x60 [ 558.543275][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 558.549651][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 558.556004][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 558.561605][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 558.567687][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 558.573091][ T30] genl_rcv_msg+0x61c/0x7a0 [ 558.577637][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 558.582725][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 558.588488][ T30] netlink_rcv_skb+0x232/0x4b0 [ 558.593338][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 558.598370][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 558.604369][ T30] ? down_read+0x270/0x2e0 [ 558.608875][ T30] ? genl_rcv+0xd/0x40 [ 558.613056][ T30] genl_rcv+0x28/0x40 [ 558.617072][ T30] netlink_unicast+0x75c/0x8e0 [ 558.622024][ T30] netlink_sendmsg+0x813/0xb40 [ 558.626849][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.632757][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 558.637719][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 558.643073][ T30] ____sys_sendmsg+0x972/0x9f0 [ 558.647989][ T30] ? __might_fault+0xaf/0x130 [ 558.652754][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 558.658079][ T30] ? import_iovec+0x73/0xa0 [ 558.662990][ T30] ___sys_sendmsg+0x2a5/0x360 [ 558.667669][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 558.672646][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 558.677857][ T30] ? futex_wait+0x2a2/0x390 [ 558.682737][ T30] ? __fget_files+0x2a/0x420 [ 558.687364][ T30] ? __fget_files+0x3a0/0x420 [ 558.692462][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 558.697398][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 558.702970][ T30] ? rcu_is_watching+0x15/0xb0 [ 558.707760][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.713917][ T30] do_syscall_64+0x15f/0xf80 [ 558.718510][ T30] ? trace_irq_disable+0x3b/0x140 [ 558.723982][ T30] ? clear_bhb_loop+0x40/0x90 [ 558.728762][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.734797][ T30] RIP: 0033:0x7f241c99c819 [ 558.739403][ T30] RSP: 002b:00007f241d911028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 558.747856][ T30] RAX: ffffffffffffffda RBX: 00007f241cc15fa0 RCX: 00007f241c99c819 [ 558.756357][ T30] RDX: 0000000020040080 RSI: 00002000000003c0 RDI: 0000000000000004 [ 558.764584][ T30] RBP: 00007f241ca32c91 R08: 0000000000000000 R09: 0000000000000000 [ 558.772622][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.781026][ T30] R13: 00007f241cc16038 R14: 00007f241cc15fa0 R15: 00007fff1315a438 [ 558.789066][ T30] [ 558.792105][ T30] INFO: task syz.3.7840:23114 blocked for more than 143 seconds. [ 558.800693][ T30] Not tainted syzkaller #0 [ 558.805622][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 558.814744][ T30] task:syz.3.7840 state:D stack:27224 pid:23114 tgid:23113 ppid:5834 task_flags:0x400140 flags:0x00080002 [ 558.826765][ T30] Call Trace: [ 558.830084][ T30] [ 558.833012][ T30] __schedule+0x17b4/0x5680 [ 558.837510][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 558.843186][ T30] ? __pfx___schedule+0x10/0x10 [ 558.848070][ T30] ? schedule+0x90/0x360 [ 558.852509][ T30] schedule+0x164/0x360 [ 558.856702][ T30] schedule_preempt_disabled+0x13/0x30 [ 558.862275][ T30] __mutex_lock+0x7f5/0x1550 [ 558.866893][ T30] ? kernel_text_address+0xa5/0xe0 [ 558.872494][ T30] ? __mutex_lock+0x606/0x1550 [ 558.877263][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 558.882007][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 558.887040][ T30] ? stack_trace_save+0xa9/0x100 [ 558.892027][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 558.896977][ T30] ? radix_tree_lookup+0x240/0x290 [ 558.902502][ T30] genl_rcv_msg+0x10b/0x7a0 [ 558.907006][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 558.912098][ T30] netlink_rcv_skb+0x232/0x4b0 [ 558.916890][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 558.919395][ T5828] Bluetooth: hci19: command tx timeout [ 558.922291][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 558.932987][ T30] ? down_read+0x270/0x2e0 [ 558.937393][ T30] ? genl_rcv+0xd/0x40 [ 558.941509][ T30] genl_rcv+0x28/0x40 [ 558.945495][ T30] netlink_unicast+0x75c/0x8e0 [ 558.950314][ T30] netlink_sendmsg+0x813/0xb40 [ 558.955109][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.960935][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 558.965885][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 558.971420][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.977003][ T30] __sys_sendto+0x672/0x710 [ 558.981737][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 558.986837][ T30] ? exc_page_fault+0x6a/0xc0 [ 558.992850][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 558.998199][ T30] __x64_sys_sendto+0xde/0x100 [ 559.003263][ T5828] Bluetooth: hci17: command tx timeout [ 559.003491][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.015048][ T30] do_syscall_64+0x15f/0xf80 [ 559.019904][ T30] ? trace_irq_disable+0x3b/0x140 [ 559.024956][ T30] ? clear_bhb_loop+0x40/0x90 [ 559.030284][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.036189][ T30] RIP: 0033:0x7f46fd75d04e [ 559.040658][ T30] RSP: 002b:00007f46fe653e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 559.049144][ T30] RAX: ffffffffffffffda RBX: 00007f46fe6556c0 RCX: 00007f46fd75d04e [ 559.057116][ T30] RDX: 000000000000001c RSI: 00007f46fe654000 RDI: 0000000000000005 [ 559.065564][ T30] RBP: 0000000000000000 R08: 00007f46fe653f04 R09: 000000000000000c [ 559.073691][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 559.081940][ T30] R13: 00007f46fe653f58 R14: 00007f46fe654000 R15: 0000000000000000 [ 559.090343][ T30] [ 559.093455][ T30] INFO: task syz.3.7840:23117 blocked for more than 144 seconds. [ 559.102231][ T30] Not tainted syzkaller #0 [ 559.107193][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 559.115972][ T30] task:syz.3.7840 state:D stack:28696 pid:23117 tgid:23113 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 559.129337][ T30] Call Trace: [ 559.132655][ T30] [ 559.135595][ T30] __schedule+0x17b4/0x5680 [ 559.140426][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 559.145407][ T30] ? __pfx___schedule+0x10/0x10 [ 559.150479][ T30] ? schedule+0x90/0x360 [ 559.154779][ T30] schedule+0x164/0x360 [ 559.160037][ T30] schedule_preempt_disabled+0x13/0x30 [ 559.165546][ T30] __mutex_lock+0x7f5/0x1550 [ 559.170205][ T30] ? kernel_text_address+0xa5/0xe0 [ 559.175350][ T30] ? __mutex_lock+0x606/0x1550 [ 559.180223][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 559.184931][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 559.190480][ T30] ? stack_trace_save+0xa9/0x100 [ 559.195442][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 559.200473][ T30] ? radix_tree_lookup+0x240/0x290 [ 559.205589][ T30] genl_rcv_msg+0x10b/0x7a0 [ 559.210245][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 559.215302][ T30] netlink_rcv_skb+0x232/0x4b0 [ 559.220535][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 559.225574][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 559.230920][ T30] ? down_read+0x270/0x2e0 [ 559.235344][ T30] ? genl_rcv+0xd/0x40 [ 559.239653][ T30] genl_rcv+0x28/0x40 [ 559.243665][ T30] netlink_unicast+0x75c/0x8e0 [ 559.248423][ T30] netlink_sendmsg+0x813/0xb40 [ 559.253663][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.258951][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 559.263953][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 559.269306][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.274615][ T30] __sys_sendto+0x672/0x710 [ 559.280382][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 559.285553][ T30] ? exc_page_fault+0x6a/0xc0 [ 559.290326][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 559.295626][ T30] __x64_sys_sendto+0xde/0x100 [ 559.300578][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.306679][ T30] do_syscall_64+0x15f/0xf80 [ 559.311868][ T30] ? trace_irq_disable+0x3b/0x140 [ 559.316916][ T30] ? clear_bhb_loop+0x40/0x90 [ 559.321822][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.327833][ T30] RIP: 0033:0x7f46fd75d04e [ 559.332317][ T30] RSP: 002b:00007f46fe632e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 559.341202][ T30] RAX: ffffffffffffffda RBX: 00007f46fe6346c0 RCX: 00007f46fd75d04e [ 559.349256][ T30] RDX: 0000000000000024 RSI: 00007f46fe633000 RDI: 0000000000000005 [ 559.357242][ T30] RBP: 0000000000000000 R08: 00007f46fe632f04 R09: 000000000000000c [ 559.365283][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 559.373577][ T30] R13: 00007f46fe632f58 R14: 00007f46fe633000 R15: 0000000000000000 [ 559.381618][ T30] [ 559.384769][ T30] [ 559.384769][ T30] Showing all locks held in the system: [ 559.393661][ T30] 1 lock held by khungtaskd/30: [ 559.398534][ T30] #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 559.408876][ T30] 2 locks held by getty/5581: [ 559.413708][ T30] #0: ffff888032a950a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 559.423548][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 559.434062][ T30] 1 lock held by udevd/5826: [ 559.438654][ T30] #0: ffff88802eb8d350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 559.447961][ T30] 6 locks held by syz.1.7834/23101: [ 559.453219][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.461976][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 559.471003][ T30] #2: ffff88802c605a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 559.481550][ T30] #3: ffff88802ab6d118 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 559.491413][ T30] #4: ffff88802ab6cae0 (&q->q_usage_counter(io)#69){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 559.503496][ T30] #5: ffff88802ab6cb18 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 559.515827][ T30] 2 locks held by syz.3.7840/23114: [ 559.521511][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.529750][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 559.538733][ T30] 2 locks held by syz.3.7840/23117: [ 559.543984][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.552544][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 559.561821][ T30] 2 locks held by syz.0.7855/23150: [ 559.567036][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.575288][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 559.584796][ T30] 2 locks held by syz.2.7872/23185: [ 559.590093][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.598306][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 559.607397][ T30] 2 locks held by syz.2.7872/23188: [ 559.612937][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.621174][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 559.630291][ T30] 2 locks held by syz.4.7873/23187: [ 559.635496][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.644369][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 559.653430][ T30] 2 locks held by syz-executor/23195: [ 559.658806][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.667027][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 559.676326][ T30] 2 locks held by syz-executor/23204: [ 559.681759][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.690026][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 559.699049][ T30] 2 locks held by syz-executor/23208: [ 559.704416][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.713220][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 559.722436][ T30] 2 locks held by syz-executor/23226: [ 559.727822][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.736203][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 559.745564][ T30] 2 locks held by syz-executor/23228: [ 559.750995][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.759246][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 559.768223][ T30] 2 locks held by syz-executor/23245: [ 559.774099][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.782316][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 559.791360][ T30] 2 locks held by syz-executor/23254: [ 559.796711][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.805469][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 559.814492][ T30] 2 locks held by syz-executor/23258: [ 559.819889][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.828322][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 559.839416][ T30] 2 locks held by syz-executor/23272: [ 559.844821][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.853256][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 559.862438][ T30] 2 locks held by syz-executor/23275: [ 559.867881][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.876391][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 559.885875][ T30] 2 locks held by syz-executor/23296: [ 559.891430][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.899891][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 559.908920][ T30] 2 locks held by syz-executor/23305: [ 559.914570][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.922918][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 559.932022][ T30] 2 locks held by syz-executor/23308: [ 559.937396][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.945837][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 559.955090][ T30] 2 locks held by syz-executor/23323: [ 559.960868][ T5828] Bluetooth: hci18: command tx timeout [ 559.966385][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.974696][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 559.983944][ T30] 2 locks held by syz-executor/23335: [ 559.989494][ T30] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.997719][ T30] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 560.006831][ T30] [ 560.009425][ T30] ============================================= [ 560.009425][ T30] [ 560.017853][ T30] NMI backtrace for cpu 1 [ 560.017869][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 560.017880][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 560.017886][ T30] Call Trace: [ 560.017891][ T30] [ 560.017896][ T30] dump_stack_lvl+0xe8/0x150 [ 560.017916][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 560.017932][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 560.017947][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 560.017963][ T30] sys_info+0x135/0x170 [ 560.017975][ T30] watchdog+0xfaa/0x1000 [ 560.017989][ T30] ? watchdog+0x209/0x1000 [ 560.018003][ T30] kthread+0x388/0x470 [ 560.018014][ T30] ? __pfx_watchdog+0x10/0x10 [ 560.018022][ T30] ? __pfx_kthread+0x10/0x10 [ 560.018033][ T30] ret_from_fork+0x514/0xb70 [ 560.018048][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 560.018061][ T30] ? __switch_to+0xc79/0x1410 [ 560.018073][ T30] ? __pfx_kthread+0x10/0x10 [ 560.018083][ T30] ret_from_fork_asm+0x1a/0x30 [ 560.018105][ T30] [ 560.018109][ T30] Sending NMI from CPU 1 to CPUs 0: [ 560.129368][ C0] NMI backtrace for cpu 0 [ 560.129386][ C0] CPU: 0 UID: 0 PID: 21550 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 560.129404][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 560.129414][ C0] Workqueue: bond0 bond_mii_monitor [ 560.129440][ C0] RIP: 0010:__schedule+0x17d/0x5680 [ 560.129459][ C0] Code: 2b 49 8d 5d 20 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 02 3b 7d f6 48 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 30 00 <74> 08 48 89 df e8 e9 3a 7d f6 48 81 3b 9d 6e ac 57 0f 85 b8 1c 00 [ 560.129473][ C0] RSP: 0018:ffffc90003b67840 EFLAGS: 00000246 [ 560.129486][ C0] RAX: 1ffff9200076c000 RBX: ffffc90003b60000 RCX: 0000000000000001 [ 560.129497][ C0] RDX: 0000000000000000 RSI: ffffffff8c27efe0 RDI: ffffffff8c27efa0 [ 560.129508][ C0] RBP: ffffc90003b67a48 R08: ffffffff903215b7 R09: 1ffffffff20642b6 [ 560.129519][ C0] R10: dffffc0000000000 R11: fffffbfff20642b7 R12: 0000000000000001 [ 560.129529][ C0] R13: ffff888052625c40 R14: dffffc0000000000 R15: ffff888125245000 [ 560.129541][ C0] FS: 0000000000000000(0000) GS:ffff888125245000(0000) knlGS:0000000000000000 [ 560.129554][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 560.129564][ C0] CR2: 000055e45bc37398 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 560.129578][ C0] Call Trace: [ 560.129585][ C0] [ 560.129590][ C0] ? trace_sched_set_need_resched_tp+0x3e/0x150 [ 560.129616][ C0] ? __resched_curr+0x1ff/0x3f0 [ 560.129637][ C0] ? __pfx___resched_curr+0x10/0x10 [ 560.129673][ C0] ? __pfx___schedule+0x10/0x10 [ 560.129690][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 560.129708][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 560.129724][ C0] ? try_to_wake_up+0x7f2/0x1380 [ 560.129740][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 560.129758][ C0] preempt_schedule_common+0x82/0xd0 [ 560.129776][ C0] preempt_schedule_thunk+0x16/0x30 [ 560.129796][ C0] _raw_spin_unlock_irq+0x45/0x50 [ 560.129812][ C0] process_scheduled_works+0x953/0x1860 [ 560.129848][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 560.129870][ C0] ? assign_work+0x3d5/0x5e0 [ 560.129891][ C0] worker_thread+0xa53/0xfc0 [ 560.129925][ C0] kthread+0x388/0x470 [ 560.129941][ C0] ? __pfx_worker_thread+0x10/0x10 [ 560.129959][ C0] ? __pfx_kthread+0x10/0x10 [ 560.129974][ C0] ret_from_fork+0x514/0xb70 [ 560.129995][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 560.130014][ C0] ? __switch_to+0xc79/0x1410 [ 560.130034][ C0] ? __pfx_kthread+0x10/0x10 [ 560.130049][ C0] ret_from_fork_asm+0x1a/0x30 [ 560.130078][ C0] [ 560.384171][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 560.391040][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 560.400140][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 560.410183][ T30] Call Trace: [ 560.413454][ T30] [ 560.416384][ T30] vpanic+0x56c/0xa60 [ 560.420371][ T30] ? __pfx___schedule+0x10/0x10 [ 560.425218][ T30] ? __pfx_vpanic+0x10/0x10 [ 560.429712][ T30] ? __pfx_console_unlock+0x10/0x10 [ 560.434910][ T30] panic+0xc5/0xd0 [ 560.438625][ T30] ? __pfx_panic+0x10/0x10 [ 560.443035][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 560.448403][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 560.454565][ T30] watchdog+0xff4/0x1000 [ 560.458801][ T30] ? watchdog+0x209/0x1000 [ 560.463212][ T30] kthread+0x388/0x470 [ 560.467273][ T30] ? __pfx_watchdog+0x10/0x10 [ 560.471936][ T30] ? __pfx_kthread+0x10/0x10 [ 560.476510][ T30] ret_from_fork+0x514/0xb70 [ 560.481096][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 560.486197][ T30] ? __switch_to+0xc79/0x1410 [ 560.490865][ T30] ? __pfx_kthread+0x10/0x10 [ 560.495448][ T30] ret_from_fork_asm+0x1a/0x30 [ 560.500216][ T30] [ 560.503577][ T30] Kernel Offset: disabled [ 560.507890][ T30] Rebooting in 86400 seconds..