last executing test programs: 4.323716976s ago: executing program 2 (id=20056): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000440)="ac", 0x1}], 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, 0x0, &(0x7f0000000040)) 3.306919219s ago: executing program 4 (id=20064): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r1, 0x2000) 3.129441247s ago: executing program 4 (id=20066): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) unshare(0x22020400) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x1, 'vlan0\x00', {}, 0x8000}) 3.067455894s ago: executing program 2 (id=20068): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x430881, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x1000) 2.91954132s ago: executing program 2 (id=20069): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400, 0x6e6bc0, 0x0, 0x1}}, 0xb8}}, 0x4c050) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x38, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x0, 0x6, "aabc2b", 0x2, 0x84, 0x1, @local, @private2}}}}}}, 0x6e) 2.897067565s ago: executing program 4 (id=20070): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) close(0x3) 2.693202713s ago: executing program 4 (id=20073): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 2.636247395s ago: executing program 3 (id=20074): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) write$cgroup_type(r1, &(0x7f0000000280), 0x9) 2.553709897s ago: executing program 3 (id=20076): socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) 2.526379983s ago: executing program 2 (id=20077): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge_slave_0\x00', 0x3}, 0x18) 2.404301081s ago: executing program 2 (id=20079): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f0000000bc0), &(0x7f0000000c00)=@udp6=r1}, 0x20) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2.195012597s ago: executing program 2 (id=20081): socket$nl_route(0x10, 0x3, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc01093359186c98c}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.035747349s ago: executing program 4 (id=20083): sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="8144dba5455de117de85315c67b2a60dacd1dc91c978883223eef5f4fed702384994eff836ba0390327fe7395310f08381b773159e67478d", 0x38, 0x20040000, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.805402589s ago: executing program 4 (id=20086): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000100)) 1.601695878s ago: executing program 0 (id=20088): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd04, 0x24dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r2, 0x209, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x38}}, 0x0) 1.575229089s ago: executing program 3 (id=20089): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@delchain={0xb0, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x80, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x64, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0xfffffffffffffd2d, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfffe}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xc0}]}]}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x5}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0xfb}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) 1.506807315s ago: executing program 0 (id=20090): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0x4a}], 0x1}, 0x10012) 1.31377882s ago: executing program 3 (id=20092): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, 0xffffffffffffffff, 0x0) 1.247228976s ago: executing program 1 (id=20093): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=ANY=[], 0x43c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) recvmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/217, 0xe088}, {&(0x7f00000020c0)=""/16, 0x10}], 0x2}, 0x3b83}], 0x1, 0x20001000, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 1.023586826s ago: executing program 1 (id=20094): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r2}, &(0x7f0000000940), &(0x7f0000000980)=r0}, 0x20) 802.007501ms ago: executing program 1 (id=20095): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x30, 0x8, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x2000000026fe, 0x0, 0x1}}, 0x40) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendfile(r1, r2, 0x0, 0x4) close(r2) 609.02507ms ago: executing program 1 (id=20096): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x475c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080), 0x0, 0xd3, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x80, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) 529.459424ms ago: executing program 0 (id=20097): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4040001}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={r2}, &(0x7f0000000280)=0x8) 411.467723ms ago: executing program 1 (id=20098): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000250007002cbd7000000000007e"], 0x14}, 0x1, 0x0, 0x0, 0x24048851}, 0xc000) 371.182669ms ago: executing program 0 (id=20099): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000002c0)=0x6b, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}, 0xcf}], 0x1, 0x45833af92e4b39ff, 0x0) 277.065652ms ago: executing program 3 (id=20100): socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x13, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) 199.706761ms ago: executing program 0 (id=20101): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 163.592871ms ago: executing program 0 (id=20102): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4800) socket(0xa, 0x3, 0x87) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001400b59500000000fcff00000a400000", @ANYRES32=r2, @ANYBLOB="1400020000000000000000000000e5"], 0x40}}, 0x0) 113.71553ms ago: executing program 1 (id=20103): socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$caif_stream(0x25, 0x1, 0x4) unshare(0x26020480) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089"], 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a40, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x8000, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 0s ago: executing program 3 (id=20104): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000800)={@local, @random="1f64de6100fa", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x14, 0x6, 0x1, @local, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000840)=ANY=[], 0x10b9) kernel console output (not intermixed with test programs): [ T5274] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14747'. [ 774.547002][ T5284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14753'. [ 774.899684][ T5304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14760'. [ 775.111716][ T5314] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14765'. [ 776.798600][ T5405] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14805'. [ 776.838500][ T5405] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14805'. [ 776.872738][ T5405] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14805'. [ 776.895554][ T5405] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14805'. [ 776.916129][ T5405] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14805'. [ 776.946516][ T5405] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14805'. [ 778.518603][ T5482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14841'. [ 778.541721][ T5482] erspan0: entered promiscuous mode [ 778.671468][ T5493] sctp: [Deprecated]: syz.1.14843 (pid 5493) Use of int in maxseg socket option. [ 778.671468][ T5493] Use struct sctp_assoc_value instead [ 780.362588][ T5571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14877'. [ 780.392625][ T5571] veth1: Caught tx_queue_len zero misconfig [ 780.954526][ T5598] vxcan0: entered allmulticast mode [ 782.231417][ T5667] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14917'. [ 782.364834][ T5667] bond6: entered promiscuous mode [ 782.384977][ T5667] 8021q: adding VLAN 0 to HW filter on device bond6 [ 782.436161][ T5667] bond6 (unregistering): Released all slaves [ 782.548355][ T5685] tap0: tun_chr_ioctl cmd 2147767521 [ 783.773404][ T5753] bond6: entered promiscuous mode [ 783.793268][ T5753] 8021q: adding VLAN 0 to HW filter on device bond6 [ 783.806269][ T5753] bridge0: port 2(bond6) entered blocking state [ 783.812795][ T5753] bridge0: port 2(bond6) entered disabled state [ 783.820658][ T5753] bond6: entered allmulticast mode [ 783.831167][ T5753] bridge0: port 2(bond6) entered blocking state [ 783.840421][ T5753] bridge0: port 2(bond6) entered forwarding state [ 783.859378][ T1021] bridge0: port 2(bond6) entered disabled state [ 784.018744][ T5766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14959'. [ 784.135920][ T5772] netlink: 128 bytes leftover after parsing attributes in process `syz.0.14972'. [ 784.226494][ T5776] vxcan1: entered allmulticast mode [ 784.519999][ T5792] tap0: tun_chr_ioctl cmd 2147767520 [ 784.572671][ T5796] geneve0: Caught tx_queue_len zero misconfig [ 784.745742][ T5808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14978'. [ 784.837468][ T5817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14981'. [ 787.471072][ T6017] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.15048'. [ 787.705276][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15051'. [ 787.724325][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15051'. [ 787.744212][ T6027] netlink: 'syz.3.15051': attribute type 20 has an invalid length. [ 787.978513][ T6032] netlink: 'syz.3.15054': attribute type 2 has an invalid length. [ 788.037791][ T6033] netlink: 'syz.3.15054': attribute type 2 has an invalid length. [ 788.083260][ T6032] !: entered promiscuous mode [ 788.501631][ T6057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15063'. [ 788.527903][ T6057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15063'. [ 789.052379][ T6081] netlink: 27 bytes leftover after parsing attributes in process `syz.1.15078'. [ 790.677440][ T6158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15111'. [ 790.855828][ T6165] netlink: 64 bytes leftover after parsing attributes in process `syz.1.15115'. [ 790.977171][ T6169] netlink: 'syz.1.15126': attribute type 3 has an invalid length. [ 791.005247][ T6169] netlink: 'syz.1.15126': attribute type 3 has an invalid length. [ 791.104802][ T6169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15126'. [ 791.227001][ T6177] netlink: 'syz.3.15119': attribute type 1 has an invalid length. [ 791.268972][ T6177] netlink: 'syz.3.15119': attribute type 2 has an invalid length. [ 791.698296][ T6206] sctp: [Deprecated]: syz.0.15133 (pid 6206) Use of int in max_burst socket option. [ 791.698296][ T6206] Use struct sctp_assoc_value instead [ 792.080479][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15143'. [ 792.649657][ T6257] tipc: Disabling bearer [ 792.843909][ T6267] __nla_validate_parse: 2 callbacks suppressed [ 792.843930][ T6267] netlink: 84 bytes leftover after parsing attributes in process `syz.3.15163'. [ 792.857374][ T6266] bridge0: port 3(wlan0) entered blocking state [ 792.869428][ T6266] bridge0: port 3(wlan0) entered disabled state [ 792.877555][ T6266] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 792.901600][ T6266] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 795.080329][ T6355] netlink: 44 bytes leftover after parsing attributes in process `syz.4.15201'. [ 796.403955][ T6426] netlink: 72 bytes leftover after parsing attributes in process `syz.3.15230'. [ 796.776838][ T6441] netlink: 'syz.0.15239': attribute type 8 has an invalid length. [ 797.147248][ T6449] nbd8: detected capacity change from 0 to 63 [ 797.165479][ T50] block nbd8: Receive control failed (result -104) [ 797.176640][ T6457] netlink: 'syz.2.15247': attribute type 83 has an invalid length. [ 797.180029][ T1196] block nbd8: Dead connection, failed to find a fallback [ 797.204258][ T1196] block nbd8: shutting down sockets [ 797.214184][ T1196] blk_print_req_error: 138 callbacks suppressed [ 797.214209][ T1196] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 797.237291][ T1196] buffer_io_error: 138 callbacks suppressed [ 797.237310][ T1196] Buffer I/O error on dev nbd8, logical block 3, async page read [ 797.765498][ T6485] xt_hashlimit: size too large, truncated to 1048576 [ 798.421003][ T6517] dummy0: Caught tx_queue_len zero misconfig [ 798.731656][ T6522] bond9: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 798.763430][ T6522] bond9 (unregistering): Released all slaves [ 798.829735][ T6526] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 799.496626][ T6567] netlink: 'syz.3.15298': attribute type 8 has an invalid length. [ 799.624149][ T6571] block nbd9: Unsupported socket: should be TCP or UNIX. [ 800.212635][ T6604] netlink: 'syz.4.15312': attribute type 8 has an invalid length. [ 800.472172][ T29] audit: type=1804 audit(1776897012.530:12): pid=6615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.15318" name="/newroot/3033/cgroup.controllers" dev="tmpfs" ino=15219 res=1 errno=0 [ 800.504531][ T29] audit: type=1800 audit(1776897012.530:13): pid=6615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.15318" name="cgroup.controllers" dev="tmpfs" ino=15219 res=0 errno=0 [ 801.223115][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15334'. [ 801.488489][ T6662] bond2: left promiscuous mode [ 801.499579][ T6662] macsec1: left promiscuous mode [ 801.525757][ T6664] sctp: [Deprecated]: syz.2.15340 (pid 6664) Use of int in max_burst socket option. [ 801.525757][ T6664] Use struct sctp_assoc_value instead [ 802.111474][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15346'. [ 802.160131][ T6681] vlan3: entered allmulticast mode [ 802.169803][ T6681] macvtap0: entered allmulticast mode [ 802.545869][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15353'. [ 802.586902][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15353'. [ 802.749158][ T6706] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15357'. [ 802.901003][ T6706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15357'. [ 802.946911][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15360'. [ 802.971477][ T1471] block nbd64: NBD_DISCONNECT [ 803.296147][T30607] udevd[30607]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 803.306154][ T6729] vxcan3: entered promiscuous mode [ 803.429601][ T6737] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 803.450615][ T6737] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 803.989588][ T6759] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 804.043596][ T6768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15385'. [ 804.048915][ T6759] bond7 (unregistering): Released all slaves [ 804.215640][ T6764] vlan6: entered allmulticast mode [ 804.235510][ T6764] vlan0: entered allmulticast mode [ 804.252474][ T6764] veth0_vlan: entered allmulticast mode [ 804.265545][ T6770] netlink: 128 bytes leftover after parsing attributes in process `syz.4.15386'. [ 804.441642][ T6780] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15390'. [ 805.017408][T30607] udevd[30607]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 805.573807][ T6830] team_slave_1: Caught tx_queue_len zero misconfig [ 806.275545][ T6864] __nla_validate_parse: 4 callbacks suppressed [ 806.275566][ T6864] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.15428'. [ 806.846000][ T6896] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15440'. [ 807.075941][ T6911] netlink: 'syz.4.15449': attribute type 3 has an invalid length. [ 807.317937][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15453'. [ 807.336331][ T6920] tap0: tun_chr_ioctl cmd 21731 [ 807.369905][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15453'. [ 807.871579][ T6952] netlink: 'syz.1.15466': attribute type 1 has an invalid length. [ 807.917845][ T6952] netlink: 92 bytes leftover after parsing attributes in process `syz.1.15466'. [ 807.937215][ T6952] netlink: 'syz.1.15466': attribute type 1 has an invalid length. [ 807.956405][ T6952] netlink: 634 bytes leftover after parsing attributes in process `syz.1.15466'. [ 808.014589][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15471'. [ 808.498360][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15482'. [ 808.535173][ T6982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15482'. [ 808.992939][ T7007] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 809.016429][ T7007] syzkaller1: linktype set to 270 [ 809.041955][ T7009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15495'. [ 809.065749][ T7009] nbd: couldn't find a device at index 65546 [ 809.811964][ T7045] syzkaller1: tun_chr_ioctl cmd 35111 [ 810.803508][ T7096] tap0: tun_chr_ioctl cmd 1074025681 [ 811.238168][ T7108] veth0: Caught tx_queue_len zero misconfig [ 811.912071][ T7138] netlink: 'syz.0.15552': attribute type 1 has an invalid length. [ 813.116084][ T7202] netlink: 'syz.1.15578': attribute type 12 has an invalid length. [ 813.129864][ T7202] netlink: 'syz.1.15578': attribute type 29 has an invalid length. [ 813.145173][ T7202] __nla_validate_parse: 1 callbacks suppressed [ 813.145191][ T7202] netlink: 148 bytes leftover after parsing attributes in process `syz.1.15578'. [ 813.163353][ T7202] netlink: 'syz.1.15578': attribute type 1 has an invalid length. [ 813.171790][ T7202] netlink: 47 bytes leftover after parsing attributes in process `syz.1.15578'. [ 813.259404][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15582'. [ 813.277340][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15582'. [ 813.399263][ T7214] blkio.reset_stats is deprecated [ 813.560528][ T7224] batadv_slave_0: entered promiscuous mode [ 813.587506][ T7222] batadv_slave_0: left promiscuous mode [ 814.257559][ T7266] IPv6: NLM_F_CREATE should be specified when creating new route [ 814.266703][ T7266] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 814.274056][ T7266] IPv6: NLM_F_CREATE should be set when creating new route [ 814.281420][ T7266] IPv6: NLM_F_CREATE should be set when creating new route [ 814.288734][ T7266] IPv6: NLM_F_CREATE should be set when creating new route [ 814.298784][ T7266] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 815.103880][ T7308] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.15629'. [ 815.124946][ T7308] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 815.193328][ T7314] netlink: 32 bytes leftover after parsing attributes in process `syz.4.15630'. [ 815.558971][ T7335] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.15642'. [ 815.818616][ T7350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15647'. [ 815.843431][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15647'. [ 816.023590][ T7363] batadv_slave_0: Caught tx_queue_len zero misconfig [ 816.066785][ T7365] netlink: 27 bytes leftover after parsing attributes in process `syz.0.15654'. [ 816.802243][ T7401] netlink: 'syz.1.15670': attribute type 9 has an invalid length. [ 816.816582][ T7396] 8021q: adding VLAN 0 to HW filter on device bond6 [ 819.052985][ T7493] sctp: [Deprecated]: syz.2.15714 (pid 7493) Use of int in max_burst socket option deprecated. [ 819.052985][ T7493] Use struct sctp_assoc_value instead [ 819.721791][ T7517] __nla_validate_parse: 3 callbacks suppressed [ 819.721812][ T7517] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.15724'. [ 820.202954][ T7533] syzkaller1: entered promiscuous mode [ 820.219497][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15733'. [ 820.237949][ T7533] syzkaller1: entered allmulticast mode [ 820.302437][ T7540] sctp: [Deprecated]: syz.1.15735 (pid 7540) Use of int in max_burst socket option. [ 820.302437][ T7540] Use struct sctp_assoc_value instead [ 820.638434][ T7548] syzkaller1: entered promiscuous mode [ 820.645874][ T7548] syzkaller1: entered allmulticast mode [ 821.035364][ T7573] syzkaller1: entered promiscuous mode [ 821.041097][ T7573] syzkaller1: entered allmulticast mode [ 821.645135][ T7602] netlink: 176 bytes leftover after parsing attributes in process `syz.4.15762'. [ 823.029701][ T7652] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15784'. [ 823.595445][ T7679] netlink: 364 bytes leftover after parsing attributes in process `syz.4.15796'. [ 823.615619][ T7679] netlink: 82 bytes leftover after parsing attributes in process `syz.4.15796'. [ 824.228773][ T7712] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15812'. [ 824.250573][ T7712] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15812'. [ 824.592137][ T7723] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.15817'. [ 825.920912][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15849'. [ 827.330958][ T1697] block nbd8: Possible stuck request ffff888027710000: control (read@0,1024B). Runtime 30 seconds [ 827.332628][ T7853] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.15866'. [ 827.352190][ T1697] block nbd8: Possible stuck request ffff8880277101c0: control (read@1024,1024B). Runtime 30 seconds [ 827.352330][ T1697] block nbd8: Possible stuck request ffff888027710380: control (read@2048,1024B). Runtime 30 seconds [ 827.919714][ T7869] netlink: 428 bytes leftover after parsing attributes in process `syz.4.15871'. [ 827.943743][ T7869] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15871'. [ 828.807923][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15885'. [ 829.541347][ T7939] netlink: 68 bytes leftover after parsing attributes in process `syz.0.15900'. [ 829.552727][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15901'. [ 829.571174][ T7941] netlink: 'syz.2.15901': attribute type 1 has an invalid length. [ 829.585008][ T7941] netlink: 'syz.2.15901': attribute type 2 has an invalid length. [ 829.819935][ T7956] sctp: [Deprecated]: syz.4.15906 (pid 7956) Use of struct sctp_assoc_value in delayed_ack socket option. [ 829.819935][ T7956] Use struct sctp_sack_info instead [ 830.178286][ T7948] lo speed is unknown, defaulting to 1000 [ 831.071460][ T7994] netlink: 'syz.4.15920': attribute type 9 has an invalid length. [ 831.104408][ T7994] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.15920'. [ 831.712469][ T8022] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15930'. [ 831.745373][ T8022] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15930'. [ 831.778935][ T8022] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15930'. [ 831.808460][ T8022] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15930'. [ 832.349750][ T8045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15939'. [ 832.364756][ T8045] netlink: 196 bytes leftover after parsing attributes in process `syz.2.15939'. [ 832.378208][ T8045] netlink: 68 bytes leftover after parsing attributes in process `syz.2.15939'. [ 832.395538][ T8045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15939'. [ 832.732430][ T8059] netlink: 64 bytes leftover after parsing attributes in process `syz.1.15945'. [ 833.696605][ T8084] team_slave_0: Caught tx_queue_len zero misconfig [ 836.502475][ T8177] __nla_validate_parse: 5 callbacks suppressed [ 836.502496][ T8177] netlink: 212916 bytes leftover after parsing attributes in process `syz.0.15989'. [ 836.623366][ T29] audit: type=1800 audit(1776897048.680:14): pid=8181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.15991" name="memory.events" dev="tmpfs" ino=16319 res=0 errno=0 [ 837.396881][ T8218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16001'. [ 838.269707][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16013'. [ 838.639288][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16017'. [ 839.174407][ T8285] netlink: 83 bytes leftover after parsing attributes in process `syz.4.16021'. [ 839.467922][ T8295] trusted_key: syz.3.16025 sent an empty control message without MSG_MORE. [ 840.028141][ T8319] team_slave_1: Caught tx_queue_len zero misconfig [ 840.090163][ T8324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 840.097554][ T8324] IPv6: NLM_F_CREATE should be set when creating new route [ 840.105018][ T8324] IPv6: NLM_F_CREATE should be set when creating new route [ 840.112388][ T8324] IPv6: NLM_F_CREATE should be set when creating new route [ 840.162535][ T8324] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.16034'. [ 840.308534][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16036'. [ 840.341275][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16036'. [ 841.027857][ T8362] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 841.121309][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057c22800: rx timeout, send abort [ 841.562858][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16046'. [ 841.599982][ T8373] netlink: 108 bytes leftover after parsing attributes in process `syz.1.16046'. [ 841.610242][ T8364] lo speed is unknown, defaulting to 1000 [ 841.630915][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057c22800: abort rx timeout. Force session deactivation [ 842.348365][ T8405] netlink: 'syz.3.16059': attribute type 11 has an invalid length. [ 842.561127][ T8410] pim6reg1: entered promiscuous mode [ 842.579695][ T8410] pim6reg1: entered allmulticast mode [ 843.111828][ T8431] veth1_to_bond: entered allmulticast mode [ 843.122134][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16068'. [ 843.142237][ T8431] veth1_to_bond (unregistering): left allmulticast mode [ 843.273539][ T8403] lo speed is unknown, defaulting to 1000 [ 843.593688][ T8425] syzkaller0 speed is unknown, defaulting to 1000 [ 843.638551][ T8425] syzkaller0 speed is unknown, defaulting to 1000 [ 843.661828][ T8425] syzkaller0 speed is unknown, defaulting to 1000 [ 843.733850][ T8425] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 843.882426][ T8436] sctp: [Deprecated]: syz.4.16069 (pid 8436) Use of struct sctp_assoc_value in delayed_ack socket option. [ 843.882426][ T8436] Use struct sctp_sack_info instead [ 844.098500][ T8439] netlink: 212320 bytes leftover after parsing attributes in process `syz.1.16070'. [ 844.285587][ T8425] syzkaller0 speed is unknown, defaulting to 1000 [ 844.325763][ T8425] syzkaller0 speed is unknown, defaulting to 1000 [ 844.401462][ T8425] syzkaller0 speed is unknown, defaulting to 1000 [ 844.449434][ T8425] syzkaller0 speed is unknown, defaulting to 1000 [ 844.489954][ T29] audit: type=1804 audit(1776897056.550:15): pid=8448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.16074" name="/newroot/3212/memory.events" dev="tmpfs" ino=16139 res=1 errno=0 [ 844.521819][ T8425] syzkaller0 speed is unknown, defaulting to 1000 [ 844.568139][ T8425] syzkaller0 speed is unknown, defaulting to 1000 [ 844.584165][ T29] audit: type=1800 audit(1776897056.550:16): pid=8448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.16074" name="memory.events" dev="tmpfs" ino=16139 res=0 errno=0 [ 844.647832][ T29] audit: type=1804 audit(1776897056.560:17): pid=8448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.16074" name="/newroot/3212/memory.events" dev="tmpfs" ino=16139 res=1 errno=0 [ 844.851064][ T8452] netlink: 212924 bytes leftover after parsing attributes in process `syz.2.16076'. [ 844.919532][ T8454] netlink: 7 bytes leftover after parsing attributes in process `syz.1.16077'. [ 844.951217][ T8454] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16077'. [ 844.987101][ T8454] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16077'. [ 845.395591][ T8462] syzkaller1: entered promiscuous mode [ 845.411388][ T8462] syzkaller1: entered allmulticast mode [ 845.794598][ T8474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16085'. [ 845.836369][ T8474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16085'. [ 846.536575][ T8494] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 847.071637][ T8512] netlink: 256 bytes leftover after parsing attributes in process `syz.3.16100'. [ 847.762278][ T8507] lo speed is unknown, defaulting to 1000 [ 847.804956][ T8508] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16099'. [ 847.883145][ T8544] syzkaller1: entered promiscuous mode [ 847.890417][ T8544] syzkaller1: entered allmulticast mode [ 848.098267][ T8551] netlink: 256 bytes leftover after parsing attributes in process `syz.2.16117'. [ 848.141333][ T8507] syzkaller0 speed is unknown, defaulting to 1000 [ 848.168204][ T8555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 848.574556][T15029] IPVS: starting estimator thread 0... [ 848.675043][ T8574] IPVS: using max 25 ests per chain, 60000 per kthread [ 849.435464][ T8591] netlink: 256 bytes leftover after parsing attributes in process `syz.4.16131'. [ 849.753344][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16135'. [ 849.776193][ T8603] IPVS: Scheduler module ip_vs_ not found [ 850.143908][ T8621] gretap0: entered promiscuous mode [ 850.221580][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16141'. [ 850.231034][ T8625] netlink: 'syz.0.16141': attribute type 30 has an invalid length. [ 850.425454][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16141'. [ 850.438723][ T8625] netlink: 'syz.0.16141': attribute type 30 has an invalid length. [ 851.588145][ T8679] batadv_slave_0: entered promiscuous mode [ 851.606271][ T8677] batadv_slave_0: left promiscuous mode [ 852.377438][ T8707] batadv_slave_1: entered promiscuous mode [ 852.385824][ T8706] batadv_slave_1: left promiscuous mode [ 853.122479][ T8746] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 853.827185][ T8770] IPVS: Scheduler module ip_vs_sip not found [ 853.961205][ T8782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.268357][ T8797] netlink: 27 bytes leftover after parsing attributes in process `syz.2.16218'. [ 854.326787][ T8799] syzkaller1: entered promiscuous mode [ 854.332467][ T8799] syzkaller1: entered allmulticast mode [ 855.516441][ T8848] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16242'. [ 855.711680][ T8860] netlink: 566 bytes leftover after parsing attributes in process `syz.4.16247'. [ 855.739681][ T8861] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16246'. [ 855.762076][ T8861] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16246'. [ 855.832350][ T8866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.877081][ T8866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.904298][ T8866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.928749][ T8866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.947569][ T8866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.963537][ T8866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.992226][ T8866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.000971][ T8866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.012664][ T8866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.409113][ T1697] block nbd8: Possible stuck request ffff888027710000: control (read@0,1024B). Runtime 60 seconds [ 857.420064][ T1697] block nbd8: Possible stuck request ffff8880277101c0: control (read@1024,1024B). Runtime 60 seconds [ 857.431631][ T1697] block nbd8: Possible stuck request ffff888027710380: control (read@2048,1024B). Runtime 60 seconds [ 858.483640][ T8987] netlink: 'syz.0.16293': attribute type 9 has an invalid length. [ 858.495944][ T8987] netlink: 'syz.0.16293': attribute type 11 has an invalid length. [ 858.504740][ T8987] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.16293'. [ 859.507480][ T9010] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.16304'. [ 859.622715][ T9017] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 859.749434][ T9021] batadv_slave_1: entered promiscuous mode [ 859.783054][ T9020] batadv_slave_1: left promiscuous mode [ 859.958921][ T9033] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.16314'. [ 860.399888][ T9058] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16326'. [ 860.753129][ T9072] syzkaller1: entered promiscuous mode [ 860.770858][ T9072] syzkaller1: entered allmulticast mode [ 861.116671][ T9091] netlink: 'syz.3.16338': attribute type 39 has an invalid length. [ 861.736803][ T9118] netlink: 256 bytes leftover after parsing attributes in process `syz.2.16344'. [ 861.759322][ T9118] netlink: 256 bytes leftover after parsing attributes in process `syz.2.16344'. [ 862.152469][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16353'. [ 862.658641][ T9159] xt_hashlimit: size too large, truncated to 1048576 [ 864.589923][ T9239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16399'. [ 864.864333][ T9249] netlink: 7 bytes leftover after parsing attributes in process `syz.1.16403'. [ 865.159653][ T9261] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.16408'. [ 866.276426][ T9245] lo speed is unknown, defaulting to 1000 [ 866.732286][ T9311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16430'. [ 866.752057][ T9311] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16430'. [ 866.773811][ T9311] vlan3: entered promiscuous mode [ 866.781887][ T9311] vlan3: entered allmulticast mode [ 866.788234][ T9311] erspan0: entered allmulticast mode [ 866.909247][ T9245] syzkaller0 speed is unknown, defaulting to 1000 [ 867.206072][ T9329] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.16435'. [ 867.577088][ T9346] netlink: 'syz.4.16443': attribute type 2 has an invalid length. [ 867.585569][ T9346] netlink: 'syz.4.16443': attribute type 2 has an invalid length. [ 868.079889][ T9328] lo speed is unknown, defaulting to 1000 [ 868.210060][ T9333] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16436'. [ 868.789218][ T9328] syzkaller0 speed is unknown, defaulting to 1000 [ 869.356706][ T9357] lo speed is unknown, defaulting to 1000 [ 869.782951][ T9357] syzkaller0 speed is unknown, defaulting to 1000 [ 870.673857][ T9442] net_ratelimit: 1015 callbacks suppressed [ 870.673881][ T9442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 870.920528][ T9457] netlink: 48 bytes leftover after parsing attributes in process `syz.4.16488'. [ 871.416820][ T9479] sctp: [Deprecated]: syz.4.16500 (pid 9479) Use of struct sctp_assoc_value in delayed_ack socket option. [ 871.416820][ T9479] Use struct sctp_sack_info instead [ 871.445801][ T9479] sctp: [Deprecated]: syz.4.16500 (pid 9479) Use of struct sctp_assoc_value in delayed_ack socket option. [ 871.445801][ T9479] Use struct sctp_sack_info instead [ 871.612505][ T9488] netlink: 'syz.1.16504': attribute type 4 has an invalid length. [ 872.994336][ T9540] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.16527'. [ 873.005580][ T9540] netlink: ct family unspecified [ 873.667404][ T9583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16543'. [ 873.870759][ T9585] bond7 (unregistering): Released all slaves [ 874.015337][ T9583] bond7: entered promiscuous mode [ 874.021684][ T9583] 8021q: adding VLAN 0 to HW filter on device bond7 [ 874.029582][ T9598] batadv_slave_1: entered promiscuous mode [ 874.050972][ T9592] batadv_slave_1: left promiscuous mode [ 874.057767][ T9597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16549'. [ 874.349496][ T9609] dvmrp6: entered allmulticast mode [ 874.507618][ T9615] batadv_slave_0: entered promiscuous mode [ 874.523167][ T9614] batadv_slave_0: left promiscuous mode [ 875.652116][ T9656] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.16575'. [ 875.793154][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16577'. [ 877.165878][ T9708] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.16596'. [ 877.736605][ T5193] udevd[5193]: worker [1196] /devices/virtual/block/nbd8 is taking a long time [ 877.855324][ T9740] netlink: 248 bytes leftover after parsing attributes in process `syz.3.16611'. [ 877.884592][ T9740] netlink: 248 bytes leftover after parsing attributes in process `syz.3.16611'. [ 878.788684][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16634'. [ 879.054230][ T9799] batadv_slave_1: entered promiscuous mode [ 879.061154][ T9797] batadv_slave_1: left promiscuous mode [ 880.144262][ T9857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 880.554533][ T9872] team0 (unregistering): Port device C removed [ 880.611289][ T9872] team0 (unregistering): Port device team_slave_1 removed [ 880.659968][ T9848] lo speed is unknown, defaulting to 1000 [ 880.951459][ T9894] netlink: 240 bytes leftover after parsing attributes in process `syz.1.16676'. [ 881.118279][ T9900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.119362][ T9901] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16682'. [ 881.196430][ T9901] bond7: option primary_reselect: invalid value (133) [ 881.220917][ T9901] bond7 (unregistering): Released all slaves [ 881.264532][ T9848] syzkaller0 speed is unknown, defaulting to 1000 [ 881.673759][ T9920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16689'. [ 882.261609][ T9941] netlink: 'syz.2.16699': attribute type 6 has an invalid length. [ 882.285403][ T9943] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16700'. [ 882.314164][ T9943] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16700'. [ 882.641158][ T9957] netlink: 'syz.4.16707': attribute type 1 has an invalid length. [ 882.659403][ T9957] netlink: 88 bytes leftover after parsing attributes in process `syz.4.16707'. [ 882.670951][ T9957] netlink: 1 bytes leftover after parsing attributes in process `syz.4.16707'. [ 882.681442][ T9957] netlink: 'syz.4.16707': attribute type 1 has an invalid length. [ 882.704534][ T9957] netlink: 634 bytes leftover after parsing attributes in process `syz.4.16707'. [ 883.603667][T10004] syzkaller1: entered promiscuous mode [ 883.610565][T10004] syzkaller1: entered allmulticast mode [ 883.680353][T10006] veth0: entered promiscuous mode [ 883.692914][T10006] veth0: left promiscuous mode [ 883.841697][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16734'. [ 883.881294][T10013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16734'. [ 884.020502][T10025] netem: change failed [ 884.215015][T10035] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16742'. [ 884.270903][T10035] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16742'. [ 884.282287][T10035] nbd: device at index 64 is going down [ 884.497173][T30607] udevd[30607]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 884.513126][T30607] udevd[30607]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 884.736438][T10050] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.16748'. [ 885.278172][T10069] sock: sock_set_timeout: `syz.4.16757' (pid 10069) tries to set negative timeout [ 887.491637][ T1697] block nbd8: Possible stuck request ffff888027710000: control (read@0,1024B). Runtime 90 seconds [ 887.503059][ T1697] block nbd8: Possible stuck request ffff8880277101c0: control (read@1024,1024B). Runtime 90 seconds [ 887.515273][ T1697] block nbd8: Possible stuck request ffff888027710380: control (read@2048,1024B). Runtime 90 seconds [ 887.610997][T10155] __nla_validate_parse: 3 callbacks suppressed [ 887.611017][T10155] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16797'. [ 888.033279][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16808'. [ 888.236123][T10191] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16813'. [ 889.468033][T10248] netlink: 'syz.3.16836': attribute type 1 has an invalid length. [ 889.484722][T10248] netlink: 76 bytes leftover after parsing attributes in process `syz.3.16836'. [ 889.787602][T10259] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 889.827492][T10259] ip6tnl6: left allmulticast mode [ 889.834698][T10259] vlan2: left promiscuous mode [ 889.868305][T10259] vlan3: left promiscuous mode [ 889.882908][T10259] vlan4: left promiscuous mode [ 889.889792][T10259] geneve1: left promiscuous mode [ 889.895513][T10259] vlan4: left allmulticast mode [ 889.907470][T10259] geneve1: left allmulticast mode [ 889.919693][T10259] ip6tnl7: left allmulticast mode [ 889.943845][T10259] virt_wifi0: left promiscuous mode [ 889.964872][T10259] macsec1: left promiscuous mode [ 889.978291][T10259] vlan6: left allmulticast mode [ 889.983667][T10259] vlan0: left allmulticast mode [ 889.989758][T10259] veth0_vlan: left allmulticast mode [ 890.009857][ T376] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.034200][T10274] batadv_slave_1: entered promiscuous mode [ 890.051308][ T376] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.075274][ T376] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.100022][T10273] batadv_slave_1: left promiscuous mode [ 890.438990][T10290] pim6reg1: entered allmulticast mode [ 890.565330][T10294] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16855'. [ 890.638194][T10296] xfrm0: entered promiscuous mode [ 890.653603][T10296] xfrm0: entered allmulticast mode [ 890.713917][T10254] lo speed is unknown, defaulting to 1000 [ 890.979712][T10311] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.16863'. [ 891.188473][T10254] syzkaller0 speed is unknown, defaulting to 1000 [ 892.372812][T10371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16886'. [ 892.537062][T10378] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 892.627837][T10378] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 892.645418][T10382] netlink: 32 bytes leftover after parsing attributes in process `syz.4.16893'. [ 892.670053][T10382] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16893'. [ 893.949428][T10443] netlink: 68 bytes leftover after parsing attributes in process `syz.1.16916'. [ 894.360805][T10465] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16920'. [ 895.187803][T10501] batadv_slave_0: entered promiscuous mode [ 895.231203][T10500] batadv_slave_0: left promiscuous mode [ 895.272939][T10503] netlink: 'syz.3.16929': attribute type 6 has an invalid length. [ 895.303596][T10503] netlink: 104 bytes leftover after parsing attributes in process `syz.3.16929'. [ 895.452919][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16932'. [ 895.589982][T10526] netlink: 'syz.1.16938': attribute type 2 has an invalid length. [ 896.600405][T10572] netlink: 104 bytes leftover after parsing attributes in process `syz.3.16960'. [ 896.752510][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16964'. [ 896.786630][T10583] netlink: 'syz.2.16966': attribute type 4 has an invalid length. [ 897.468012][T10621] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 898.225806][T10661] netlink: 'syz.4.16998': attribute type 1 has an invalid length. [ 898.234140][T10661] netlink: 'syz.4.16998': attribute type 1 has an invalid length. [ 898.242210][T10661] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16998'. [ 898.252949][T10661] netlink: 1 bytes leftover after parsing attributes in process `syz.4.16998'. [ 898.485157][T10670] syzkaller1: entered promiscuous mode [ 898.494438][T10670] syzkaller1: entered allmulticast mode [ 898.680609][T10679] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17007'. [ 898.710627][T10679] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17007'. [ 898.724127][T10679] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17007'. [ 898.830561][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17010'. [ 898.843897][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17010'. [ 899.491734][T10716] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.17025'. [ 899.844143][T10733] tun0: tun_chr_ioctl cmd 1074025675 [ 899.857514][T10733] tun0: persist enabled [ 899.870712][T10733] tun0: tun_chr_ioctl cmd 1074025675 [ 899.886592][T10733] tun0: persist disabled [ 900.016730][T10739] sctp: [Deprecated]: syz.3.17036 (pid 10739) Use of struct sctp_assoc_value in delayed_ack socket option. [ 900.016730][T10739] Use struct sctp_sack_info instead [ 900.068363][T10739] sctp: [Deprecated]: syz.3.17036 (pid 10739) Use of struct sctp_assoc_value in delayed_ack socket option. [ 900.068363][T10739] Use struct sctp_sack_info instead [ 900.324654][T10750] pim6reg1: entered promiscuous mode [ 900.336755][T10750] pim6reg1: entered allmulticast mode [ 900.344597][T10753] ±ÿ: Caught tx_queue_len zero misconfig [ 900.473467][T10757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17046'. [ 900.526437][T10757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17046'. [ 900.825150][T10776] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 901.211803][T10789] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 901.446660][ T29] audit: type=1800 audit(1776897113.510:18): pid=10803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.17067" name=CB dev="tmpfs" ino=17026 res=0 errno=0 [ 901.954592][T10835] netlink: 'syz.1.17082': attribute type 3 has an invalid length. [ 901.968394][T10835] netlink: 'syz.1.17082': attribute type 3 has an invalid length. [ 902.340951][T10856] netlink: 'syz.2.17090': attribute type 1 has an invalid length. [ 902.353756][T10856] netlink: 'syz.2.17090': attribute type 2 has an invalid length. [ 902.363279][T10856] netlink: 'syz.2.17090': attribute type 1 has an invalid length. [ 902.381032][T10856] netlink: 'syz.2.17090': attribute type 3 has an invalid length. [ 902.672582][T10870] sctp: [Deprecated]: syz.0.17095 (pid 10870) Use of struct sctp_assoc_value in delayed_ack socket option. [ 902.672582][T10870] Use struct sctp_sack_info instead [ 903.526106][T10922] __nla_validate_parse: 7 callbacks suppressed [ 903.526128][T10922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17111'. [ 905.028965][T10988] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17140'. [ 905.060579][T10988] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17140'. [ 905.422732][T11012] nbd: must specify a size in bytes for the device [ 905.430377][T11012] nbd: couldn't find device at index 1 [ 905.587925][T11009] lo speed is unknown, defaulting to 1000 [ 905.748668][T11009] syzkaller0 speed is unknown, defaulting to 1000 [ 907.020933][T11070] netlink: 'syz.3.17175': attribute type 1 has an invalid length. [ 907.135563][T11074] netlink: 14 bytes leftover after parsing attributes in process `syz.0.17177'. [ 907.407330][T11086] netlink: 'syz.0.17183': attribute type 29 has an invalid length. [ 907.436463][T11086] netlink: 'syz.0.17183': attribute type 29 has an invalid length. [ 907.447260][T11086] netlink: 500 bytes leftover after parsing attributes in process `syz.0.17183'. [ 907.466482][T11086] unsupported nla_type 58 [ 907.839673][T11109] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.17192'. [ 908.490502][T11135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 908.508956][T11136] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 908.602138][T11116] lo speed is unknown, defaulting to 1000 [ 908.898910][T11150] sctp: [Deprecated]: syz.2.17211 (pid 11150) Use of int in max_burst socket option deprecated. [ 908.898910][T11150] Use struct sctp_assoc_value instead [ 909.041185][T11158] syzkaller1: entered promiscuous mode [ 909.047082][T11158] syzkaller1: entered allmulticast mode [ 909.848357][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17216'. [ 909.864324][T11116] syzkaller0 speed is unknown, defaulting to 1000 [ 910.297779][T11179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17225'. [ 910.386146][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17224'. [ 911.676443][T11226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17241'. [ 912.611167][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17253'. [ 912.698858][T11259] syzkaller1: entered promiscuous mode [ 912.705000][T11259] syzkaller1: entered allmulticast mode [ 913.555886][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17272'. [ 913.574693][T11298] netlink: 'syz.0.17272': attribute type 5 has an invalid length. [ 913.595628][T11298] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17272'. [ 913.637430][T11298] geneve4: entered promiscuous mode [ 913.646495][T11298] geneve4: entered allmulticast mode [ 913.661458][T23809] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 913.682478][T23809] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 913.708853][T23809] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 913.740046][T23809] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 914.012372][T11319] syzkaller1: entered promiscuous mode [ 914.027040][T11319] syzkaller1: entered allmulticast mode [ 914.271709][T11325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.901921][T11361] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17302'. [ 914.919478][T11361] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17302'. [ 914.956434][T11361] netlink: 72 bytes leftover after parsing attributes in process `syz.3.17302'. [ 915.358760][ T29] audit: type=1804 audit(1776897127.420:19): pid=11386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.17313" name="/newroot/3456/memory.events" dev="tmpfs" ino=17374 res=1 errno=0 [ 915.443180][T11391] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.17315'. [ 915.520945][T11393] vlan7: entered allmulticast mode [ 915.527250][T11393] bond0: entered allmulticast mode [ 915.538291][T11393] netlink: 14 bytes leftover after parsing attributes in process `syz.3.17316'. [ 915.579918][T11393] bond0 (unregistering): Released all slaves [ 915.650008][T11400] syzkaller1: entered promiscuous mode [ 915.664462][T11400] syzkaller1: entered allmulticast mode [ 916.018798][T11414] netlink: 'syz.3.17325': attribute type 11 has an invalid length. [ 916.085260][T11420] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.17327'. [ 916.613388][T11455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17343'. [ 917.523293][T11493] syzkaller1: entered promiscuous mode [ 917.532158][T11493] syzkaller1: entered allmulticast mode [ 917.564707][ T1697] block nbd8: Possible stuck request ffff888027710000: control (read@0,1024B). Runtime 120 seconds [ 917.576071][ T1697] block nbd8: Possible stuck request ffff8880277101c0: control (read@1024,1024B). Runtime 120 seconds [ 917.587248][ T1697] block nbd8: Possible stuck request ffff888027710380: control (read@2048,1024B). Runtime 120 seconds [ 918.022745][T11520] netlink: 'syz.0.17372': attribute type 1 has an invalid length. [ 918.051702][T11520] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17372'. [ 918.167872][T11525] macsec1: entered promiscuous mode [ 918.184482][T11525] virt_wifi0: entered promiscuous mode [ 918.333382][T11531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17378'. [ 918.749581][T11553] batman_adv: batadv0: Adding interface: gretap3 [ 918.771791][T11553] batman_adv: batadv0: The MTU of interface gretap3 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.809760][T11553] batman_adv: batadv0: Interface activated: gretap3 [ 918.961610][T11559] netlink: 248 bytes leftover after parsing attributes in process `syz.4.17390'. [ 919.000850][T11561] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 919.296145][T11579] vlan3: entered allmulticast mode [ 919.309043][T11579] bond0: entered allmulticast mode [ 919.314873][T11579] bond_slave_0: entered allmulticast mode [ 919.321765][T11579] bond_slave_1: entered allmulticast mode [ 919.489672][T11582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 919.505267][T11582] bond_slave_0: left allmulticast mode [ 919.516246][T11582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.528041][T11582] bond_slave_1: left allmulticast mode [ 919.534657][T11582] bond0 (unregistering): Released all slaves [ 920.186905][T11623] __nla_validate_parse: 8 callbacks suppressed [ 920.186926][T11623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17417'. [ 920.380285][T11631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.624617][T11640] lo: left allmulticast mode [ 920.652363][ T9612] lo speed is unknown, defaulting to 1000 [ 920.679139][ T9612] sqz0: Port: 1 Link DOWN [ 920.751551][ T9612] lo speed is unknown, defaulting to 1000 [ 921.184452][T11602] lo speed is unknown, defaulting to 1000 [ 921.703465][T11691] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 921.765335][T11602] syzkaller0 speed is unknown, defaulting to 1000 [ 922.624983][T11721] netlink: 'syz.3.17455': attribute type 5 has an invalid length. [ 923.100385][T11735] bridge10: entered promiscuous mode [ 923.119594][T11735] bridge10: entered allmulticast mode [ 923.665963][T11753] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.17468'. [ 923.861064][T11762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17473'. [ 923.926996][T11766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17474'. [ 924.592726][T11797] netlink: 277 bytes leftover after parsing attributes in process `syz.1.17487'. [ 924.685300][T11802] netlink: 'syz.1.17490': attribute type 22 has an invalid length. [ 924.705738][T11802] bond0: option ad_select: unable to set because the bond device is up [ 925.167493][T11822] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.17498'. [ 925.376199][T11835] openvswitch: netlink: Message has 496 unknown bytes. [ 925.393502][T11835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 925.677877][T11857] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20003 [ 925.839671][T11865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17514'. [ 925.961408][T11865] bond7: Invalid ad_actor_system MAC address. [ 925.983603][T11865] bond7: option ad_actor_system: invalid value (7) [ 926.007297][T11865] bond7 (unregistering): Released all slaves [ 926.061217][T11873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17517'. [ 926.586710][T11892] syzkaller1: entered promiscuous mode [ 926.601997][T11892] syzkaller1: entered allmulticast mode [ 927.020235][T11920] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 927.786956][T11965] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.17555'. [ 928.093277][T11980] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.17563'. [ 928.440346][T12001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17570'. [ 928.455085][T12003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17571'. [ 928.755291][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17577'. [ 929.063894][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17585'. [ 929.073355][T12036] netlink: 'syz.1.17585': attribute type 2 has an invalid length. [ 929.778730][T12073] dvmrp6: left allmulticast mode [ 930.016222][T12082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17601'. [ 930.060692][T12082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17601'. [ 930.418388][T12103] pim6reg: entered allmulticast mode [ 930.445409][T12103] pim6reg: left allmulticast mode [ 933.599197][T12222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 934.063067][T12215] lo speed is unknown, defaulting to 1000 [ 934.193037][T12234] __nla_validate_parse: 1 callbacks suppressed [ 934.193059][T12234] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17666'. [ 934.235888][T12233] delete_channel: no stack [ 934.402595][T12240] netlink: 'syz.0.17669': attribute type 1 has an invalid length. [ 934.492363][T12240] bond8: entered promiscuous mode [ 934.512317][T12240] 8021q: adding VLAN 0 to HW filter on device bond8 [ 934.596523][T12243] 8021q: adding VLAN 0 to HW filter on device bond9 [ 934.607408][T12243] bond8: (slave bond9): making interface the new active one [ 934.615020][T12243] bond9: entered promiscuous mode [ 934.621491][T12243] bond8: (slave bond9): Enslaving as an active interface with an up link [ 934.642656][T12215] syzkaller0 speed is unknown, defaulting to 1000 [ 935.266856][T12266] netlink: 'syz.0.17678': attribute type 3 has an invalid length. [ 935.285759][T12266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17678'. [ 936.161109][T12296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17691'. [ 936.190492][T12296] netlink: 'syz.2.17691': attribute type 9 has an invalid length. [ 936.525135][T12311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17698'. [ 937.565374][T12370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17724'. [ 939.482375][T12428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17747'. [ 939.521029][T12428] netlink: 60 bytes leftover after parsing attributes in process `syz.3.17747'. [ 939.557317][T12428] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17747'. [ 940.232023][T12459] syzkaller1: entered promiscuous mode [ 940.244129][T12459] syzkaller1: entered allmulticast mode [ 940.601116][T12467] syzkaller1: entered promiscuous mode [ 940.618614][T12467] syzkaller1: entered allmulticast mode [ 940.890549][T12478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17770'. [ 940.972603][T12445] lo speed is unknown, defaulting to 1000 [ 941.606307][T12445] syzkaller0 speed is unknown, defaulting to 1000 [ 942.272124][T12527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17787'. [ 942.311109][T12527] netlink: 104 bytes leftover after parsing attributes in process `syz.3.17787'. [ 943.307040][T12557] dvmrp6: entered allmulticast mode [ 943.492326][T12560] erspan0: entered promiscuous mode [ 943.642388][T12560] 8021q: adding VLAN 0 to HW filter on device .` [ 943.657358][T12560] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 944.273120][T12609] netlink: 'syz.1.17824': attribute type 9 has an invalid length. [ 944.301256][T12609] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.17824'. [ 944.553626][T12628] netlink: 165 bytes leftover after parsing attributes in process `syz.4.17832'. [ 944.678330][T12634] ip6tnl10: entered promiscuous mode [ 945.087760][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17844'. [ 945.120288][T12635] lo speed is unknown, defaulting to 1000 [ 945.131092][T12657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17844'. [ 945.572115][T12681] netlink: 'syz.3.17855': attribute type 4 has an invalid length. [ 945.606328][T12635] syzkaller0 speed is unknown, defaulting to 1000 [ 945.615021][T12681] netlink: 'syz.3.17855': attribute type 4 has an invalid length. [ 945.794384][T12691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17856'. [ 945.846375][T12696] netlink: 33 bytes leftover after parsing attributes in process `syz.3.17858'. [ 945.866457][T12696] netlink: 140 bytes leftover after parsing attributes in process `syz.3.17858'. [ 946.079356][T12707] netlink: 'syz.1.17865': attribute type 1 has an invalid length. [ 946.899972][T12747] netlink: 'syz.1.17879': attribute type 5 has an invalid length. [ 947.103010][T12754] netlink: 6 bytes leftover after parsing attributes in process `syz.1.17884'. [ 947.129115][T12755] xt_hashlimit: size too large, truncated to 1048576 [ 947.506340][T12764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17887'. [ 947.526269][T12764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17887'. [ 947.550149][T12764] netlink: 'syz.1.17887': attribute type 7 has an invalid length. [ 947.656814][ T1697] block nbd8: Possible stuck request ffff888027710000: control (read@0,1024B). Runtime 150 seconds [ 947.668247][ T1697] block nbd8: Possible stuck request ffff8880277101c0: control (read@1024,1024B). Runtime 150 seconds [ 947.680424][ T1697] block nbd8: Possible stuck request ffff888027710380: control (read@2048,1024B). Runtime 150 seconds [ 948.034583][T12764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17887'. [ 948.057751][T12764] netlink: 'syz.1.17887': attribute type 7 has an invalid length. [ 951.498644][T12808] netlink: 'syz.0.17906': attribute type 4 has an invalid length. [ 951.508236][T12800] __nla_validate_parse: 6 callbacks suppressed [ 951.508251][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17902'. [ 951.527264][T12811] netlink: 'syz.0.17906': attribute type 4 has an invalid length. [ 951.528539][T12800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17902'. [ 951.889435][T12840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17919'. [ 951.900329][T12840] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17919'. [ 952.476944][T12870] sock: sock_set_timeout: `syz.4.17933' (pid 12870) tries to set negative timeout [ 953.342255][ T29] audit: type=1800 audit(1776897165.400:20): pid=12910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.17950" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=17808 res=0 errno=0 [ 953.485105][T11274] page_pool_release_retry() stalled pool shutdown: id 185, 1 inflight 60 sec [ 953.563676][T12914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17953'. [ 953.575241][T12914] chnl_net:caif_netlink_parms(): no params data found [ 953.731729][T12927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17959'. [ 953.774488][T12927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17959'. [ 954.252893][T12953] xt_hashlimit: size too large, truncated to 1048576 [ 954.705079][T12970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17976'. [ 954.754762][T12967] IPVS: Scheduler module ip_vs_ not found [ 954.842780][T12974] netlink: 7 bytes leftover after parsing attributes in process `syz.4.17977'. [ 955.469784][T13005] lo speed is unknown, defaulting to 1000 [ 955.630777][T13005] syzkaller0 speed is unknown, defaulting to 1000 [ 955.893353][T13011] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17993'. [ 956.232761][T13033] netlink: 'syz.0.17999': attribute type 21 has an invalid length. [ 956.270868][T13033] netlink: 'syz.0.17999': attribute type 22 has an invalid length. [ 956.294923][T13033] netlink: 'syz.0.17999': attribute type 23 has an invalid length. [ 956.334851][T13033] netlink: 'syz.0.17999': attribute type 25 has an invalid length. [ 956.365589][T13033] netlink: 'syz.0.17999': attribute type 26 has an invalid length. [ 956.682515][T13051] netlink: 'syz.2.18008': attribute type 1 has an invalid length. [ 956.847528][T13057] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 956.854887][T13057] IPv6: NLM_F_CREATE should be set when creating new route [ 956.862226][T13057] IPv6: NLM_F_CREATE should be set when creating new route [ 956.869561][T13057] IPv6: NLM_F_CREATE should be set when creating new route [ 956.888322][T13057] __nla_validate_parse: 6 callbacks suppressed [ 956.888343][T13057] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.18010'. [ 957.113850][T13064] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18014'. [ 957.203065][T13073] netlink: 'syz.0.18018': attribute type 8 has an invalid length. [ 957.229620][T13073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18018'. [ 957.289869][T13073] netlink: 'syz.0.18018': attribute type 8 has an invalid length. [ 957.332275][T13073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18018'. [ 957.398636][T13079] netlink: 'syz.4.18022': attribute type 1 has an invalid length. [ 957.432760][T13079] netlink: 'syz.4.18022': attribute type 4 has an invalid length. [ 957.444726][T13079] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.18022'. [ 958.010369][T13110] netlink: 'syz.4.18034': attribute type 13 has an invalid length. [ 958.029013][ T376] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 958.038098][T13110] netlink: 'syz.4.18034': attribute type 13 has an invalid length. [ 958.051586][ T376] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 958.074850][ T376] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 958.100483][ T376] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 958.173538][T13116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18036'. [ 958.192276][T13116] xfrm0: entered promiscuous mode [ 958.198127][T13116] xfrm0: entered allmulticast mode [ 958.203684][T13116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18036'. [ 958.262379][T13120] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 958.311091][T13123] netlink: 176 bytes leftover after parsing attributes in process `syz.4.18035'. [ 958.588130][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18044'. [ 958.931606][T13151] netlink: 52 bytes leftover after parsing attributes in process `syz.3.18051'. [ 959.785378][ T376] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 959.809752][ T376] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 959.832728][ T376] bond0: (slave netdevsim0): link status definitely down, disabling slave [ 959.867501][ T376] bond0: now running without any active interface! [ 959.965837][T13198] netlink: 'syz.4.18073': attribute type 1 has an invalid length. [ 960.032219][T13198] 8021q: adding VLAN 0 to HW filter on device bond10 [ 960.041152][T13159] lo speed is unknown, defaulting to 1000 [ 960.073425][T13203] bond10: (slave geneve3): making interface the new active one [ 960.085573][T13203] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 960.103886][ T1021] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 960.137860][ T1021] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 960.151742][ T1021] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 960.169735][ T1021] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 960.263520][T13209] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 960.601527][T13159] syzkaller0 speed is unknown, defaulting to 1000 [ 961.314259][T13231] lo speed is unknown, defaulting to 1000 [ 961.553267][T13255] netlink: 'syz.2.18097': attribute type 32 has an invalid length. [ 961.775477][T13231] syzkaller0 speed is unknown, defaulting to 1000 [ 961.829684][T13269] Bluetooth: hci1: too big key_count value 29096 [ 962.629141][T13289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 962.686608][T13289] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 962.756645][T15029] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 962.985065][T15029] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 963.085977][ T1021] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 963.153102][T13309] netlink: 'syz.4.18120': attribute type 9 has an invalid length. [ 963.169177][T13309] __nla_validate_parse: 3 callbacks suppressed [ 963.169196][T13309] netlink: 186364 bytes leftover after parsing attributes in process `syz.4.18120'. [ 963.608295][T13327] pim6reg1: entered promiscuous mode [ 963.613969][T13327] pim6reg1: entered allmulticast mode [ 964.069238][T13351] netlink: 'syz.0.18138': attribute type 9 has an invalid length. [ 964.078171][T13351] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.18138'. [ 964.125044][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 964.140728][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 964.715475][T15029] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 964.722116][T13369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18146'. [ 964.829968][T13369] 8021q: adding VLAN 0 to HW filter on device bond10 [ 964.917112][T13373] bond10: (slave batadv1): Opening slave failed [ 965.986150][T13425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18167'. [ 966.022061][T13425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18167'. [ 966.243020][T13434] bond0: (slave 26±ÿ): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 966.271383][T13434] bond0: (slave 26±ÿ): Enslaving as an active interface with an up link [ 966.310163][T13434] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 966.808066][T13459] can: request_module (can-proto-4) failed. [ 967.496027][T13492] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.18197'. [ 967.778826][T13507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18203'. [ 967.803302][T13507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18203'. [ 968.136496][T13528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18211'. [ 968.210718][T13533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18212'. [ 968.284164][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 969.999733][T13594] lo speed is unknown, defaulting to 1000 [ 970.670579][T13594] syzkaller0 speed is unknown, defaulting to 1000 [ 972.363551][T13678] netlink: 'syz.0.18273': attribute type 1 has an invalid length. [ 972.488761][T13678] 8021q: adding VLAN 0 to HW filter on device bond11 [ 973.362266][T13720] netlink: 51 bytes leftover after parsing attributes in process `syz.3.18293'. [ 973.741992][T13731] pim6reg1: entered promiscuous mode [ 973.754277][T13731] pim6reg1: entered allmulticast mode [ 974.787645][T13792] gretap0: left promiscuous mode [ 974.797955][T13792] erspan0: left promiscuous mode [ 974.815879][T13792] bridge0: left promiscuous mode [ 974.826202][T13792] bridge0: entered promiscuous mode [ 974.837283][T13792] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 974.952455][T13798] netlink: 'syz.0.18326': attribute type 1 has an invalid length. [ 975.005301][T13798] 8021q: adding VLAN 0 to HW filter on device bond12 [ 975.305472][T13819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18336'. [ 975.332175][T13819] netlink: 'syz.0.18336': attribute type 32 has an invalid length. [ 975.357273][T13819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18336'. [ 975.386496][T13819] netlink: 'syz.0.18336': attribute type 32 has an invalid length. [ 975.409814][T13821] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.18337'. [ 976.415710][T13861] netlink: 'syz.2.18349': attribute type 2 has an invalid length. [ 977.084147][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 977.726691][ T1697] block nbd8: Possible stuck request ffff888027710000: control (read@0,1024B). Runtime 180 seconds [ 977.737808][ T1697] block nbd8: Possible stuck request ffff8880277101c0: control (read@1024,1024B). Runtime 180 seconds [ 977.749443][ T1697] block nbd8: Possible stuck request ffff888027710380: control (read@2048,1024B). Runtime 180 seconds [ 977.777853][T13893] netlink: 'syz.0.18364': attribute type 1 has an invalid length. [ 977.873493][T13893] 8021q: adding VLAN 0 to HW filter on device bond13 [ 977.947150][T13901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18365'. [ 977.957649][T13901] netlink: 'syz.3.18365': attribute type 30 has an invalid length. [ 977.980334][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 977.985434][T13901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18365'. [ 977.991715][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 978.009862][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 978.033076][T13901] netlink: 'syz.3.18365': attribute type 30 has an invalid length. [ 978.377463][T13909] netlink: 'syz.3.18369': attribute type 22 has an invalid length. [ 978.400595][T13909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18369'. [ 978.485867][T13909] netlink: 'syz.3.18369': attribute type 22 has an invalid length. [ 978.495365][T13909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18369'. [ 978.852507][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18376'. [ 978.867422][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18376'. [ 978.919382][T13921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18374'. [ 978.958343][T13921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18374'. [ 978.989825][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18374'. [ 979.023375][T13921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18374'. [ 979.025242][T13925] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.18377'. [ 979.043584][T13921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18374'. [ 979.926022][ T5193] udevd[5193]: worker [1196] /devices/virtual/block/nbd8 timeout; kill it [ 979.960711][ T5193] udevd[5193]: seq 26035 '/devices/virtual/block/nbd8' killed [ 980.956329][T13987] ip6gre3: entered promiscuous mode [ 980.982220][T13987] ip6gre3: entered allmulticast mode [ 981.007315][ T1021] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 981.042578][ T24] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 981.054432][ T1021] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 981.066857][T13996] syzkaller1: entered promiscuous mode [ 981.072454][T13996] syzkaller1: entered allmulticast mode [ 981.494203][T11274] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 981.606542][T11274] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 982.769385][T14052] netlink: 'syz.4.18434': attribute type 30 has an invalid length. [ 983.683618][T14090] IPVS: length: 132 != 8 [ 983.869494][T14096] __nla_validate_parse: 4 callbacks suppressed [ 983.869515][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18453'. [ 983.919721][T14096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18453'. [ 983.930135][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18453'. [ 984.085061][T14104] bridge0: port 3(syz_tun) entered blocking state [ 984.124660][T14104] bridge0: port 3(syz_tun) entered disabled state [ 984.138238][T14107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18458'. [ 984.152008][T14104] syz_tun: entered allmulticast mode [ 984.173883][T14104] syz_tun: entered promiscuous mode [ 984.215359][T14104] bridge0: port 3(syz_tun) entered blocking state [ 984.223809][T14104] bridge0: port 3(syz_tun) entered forwarding state [ 984.601241][T14122] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 984.626586][T13259] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 985.484123][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 985.485628][T13259] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 986.929961][T14202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18492'. [ 986.962998][T14202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18492'. [ 986.997214][T14202] netlink: 'syz.4.18492': attribute type 6 has an invalid length. [ 987.021262][T14202] netlink: 'syz.4.18492': attribute type 5 has an invalid length. [ 987.047057][T14202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18492'. [ 987.070249][T14202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18492'. [ 987.091475][T14202] netlink: 'syz.4.18492': attribute type 6 has an invalid length. [ 987.116499][T14202] netlink: 'syz.4.18492': attribute type 5 has an invalid length. [ 987.867751][T14218] netlink: 'syz.3.18499': attribute type 19 has an invalid length. [ 987.903684][T14218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18499'. [ 987.923618][T14218] netlink: 'syz.3.18499': attribute type 19 has an invalid length. [ 987.935816][T14218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18499'. [ 989.315824][T14272] netlink: 'syz.3.18522': attribute type 58 has an invalid length. [ 989.329983][T14272] netlink: 'syz.3.18522': attribute type 58 has an invalid length. [ 990.481399][ T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 990.498194][ T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 990.517404][ T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 990.534653][ T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 991.623257][T14369] netlink: 'syz.1.18561': attribute type 20 has an invalid length. [ 991.645068][T14369] __nla_validate_parse: 1 callbacks suppressed [ 991.645091][T14369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18561'. [ 991.708440][T14369] netlink: 'syz.1.18561': attribute type 20 has an invalid length. [ 991.730399][T14369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18561'. [ 992.222477][T14393] netlink: 'syz.2.18565': attribute type 1 has an invalid length. [ 992.231146][T14393] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.18565'. [ 992.457860][T14401] netlink: 'syz.0.18570': attribute type 1 has an invalid length. [ 992.612797][T14416] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.18575'. [ 992.697157][T14409] 8021q: adding VLAN 0 to HW filter on device bond15 [ 992.729910][T14409] bond14: (slave bond15): making interface the new active one [ 992.747760][T14409] bond14: (slave bond15): Enslaving as an active interface with an up link [ 992.766600][T14418] bridge0: port 4(erspan0) entered blocking state [ 992.784382][T14418] bridge0: port 4(erspan0) entered disabled state [ 992.968463][T14426] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.18578'. [ 993.077176][T14431] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18580'. [ 993.115562][T14431] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18580'. [ 993.724481][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 993.861275][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18597'. [ 993.902468][T14468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18597'. [ 993.920968][T14468] netlink: 'syz.4.18597': attribute type 14 has an invalid length. [ 993.929144][T14468] netlink: 'syz.4.18597': attribute type 12 has an invalid length. [ 993.938192][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18597'. [ 993.947727][T14468] netlink: 'syz.4.18597': attribute type 14 has an invalid length. [ 993.958170][T14468] netlink: 'syz.4.18597': attribute type 12 has an invalid length. [ 994.024390][T14472] netlink: 'syz.2.18599': attribute type 1 has an invalid length. [ 994.350303][T14490] netlink: 'syz.0.18604': attribute type 1 has an invalid length. [ 994.364324][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 994.412011][T14490] 8021q: adding VLAN 0 to HW filter on device bond16 [ 995.029962][T14518] netlink: 'syz.0.18618': attribute type 1 has an invalid length. [ 995.073022][T14518] 8021q: adding VLAN 0 to HW filter on device bond17 [ 995.107231][T14524] netlink: 'syz.4.18617': attribute type 13 has an invalid length. [ 995.595384][T14518] bond17: (slave geneve5): making interface the new active one [ 995.607633][T14518] bond17: (slave geneve5): Enslaving as an active interface with an up link [ 995.711631][T14524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 995.740384][T14524] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 995.780222][ T35] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 995.790694][ T35] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 995.806653][T14535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 995.836689][ T35] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 995.855794][ T35] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 995.877806][ T35] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 995.897336][ T35] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 995.944085][ T35] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 995.962058][ T35] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 995.990651][T14549] xt_hashlimit: size too large, truncated to 1048576 [ 996.043431][T14554] –: renamed from dummy0 (while UP) [ 996.605695][T23812] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 996.780974][T14582] __nla_validate_parse: 4 callbacks suppressed [ 996.781501][T14582] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.18638'. [ 997.325827][T14603] validate_nla: 1 callbacks suppressed [ 997.325856][T14603] netlink: 'syz.3.18646': attribute type 1 has an invalid length. [ 997.346115][T14605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18648'. [ 997.407566][T14605] bond0: entered promiscuous mode [ 997.413155][T14605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 997.486161][T14610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 997.528664][T14610] bond0: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 997.548739][T14610] bond0: (slave ip6gre3): Error -95 calling set_mac_address [ 998.004389][T14636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18660'. [ 998.049136][T14636] 8021q: adding VLAN 0 to HW filter on device bond18 [ 998.076868][T14636] bond18: (slave geneve6): Enslaving as an active interface with an up link [ 998.486818][T14659] netlink: 'syz.3.18668': attribute type 4 has an invalid length. [ 999.489753][T14709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18685'. [ 999.522353][T14709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18685'. [ 999.581436][T14714] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18687'. [ 999.798065][T14730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 999.888380][T14733] netlink: 'syz.1.18695': attribute type 1 has an invalid length. [ 999.951691][T14733] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1000.019221][T14742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18699'. [ 1000.277001][T14758] sock: sock_set_timeout: `syz.0.18706' (pid 14758) tries to set negative timeout [ 1000.684133][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1001.712880][T14830] netlink: 'syz.4.18732': attribute type 1 has an invalid length. [ 1001.768406][T14830] bond12: entered promiscuous mode [ 1001.775062][T14830] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1001.926223][T14833] bond12: (slave veth5): making interface the new active one [ 1001.949693][T14833] veth5: entered promiscuous mode [ 1002.001347][T14833] bond12: (slave veth5): Enslaving as an active interface with an up link [ 1002.155522][T14844] delete_channel: no stack [ 1002.207286][T14851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18739'. [ 1002.219303][T14851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18739'. [ 1002.249537][T14851] netlink: 'syz.3.18739': attribute type 5 has an invalid length. [ 1002.261503][T14851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18739'. [ 1002.271194][T14851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18739'. [ 1002.280434][T14851] netlink: 'syz.3.18739': attribute type 5 has an invalid length. [ 1003.340153][T14912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18764'. [ 1003.368773][T14912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18764'. [ 1003.396029][T14912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18764'. [ 1003.421476][T14912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18764'. [ 1003.646123][T14923] pim6reg1: entered promiscuous mode [ 1003.661288][T14923] pim6reg1: entered allmulticast mode [ 1003.792279][T14927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18771'. [ 1003.951231][T14887] lo speed is unknown, defaulting to 1000 [ 1004.637573][T14887] syzkaller0 speed is unknown, defaulting to 1000 [ 1005.959381][T14987] tipc: Resetting bearer [ 1006.003284][T14990] netlink: 'syz.2.18792': attribute type 13 has an invalid length. [ 1006.011762][T14990] netlink: 'syz.2.18792': attribute type 17 has an invalid length. [ 1006.031179][T14987] bridge0: port 3(syz_tun) entered disabled state [ 1006.048073][T14987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.113061][T14987] batman_adv: batadv0: Interface deactivated: gretap3 [ 1006.216057][T14990] ip6gretap0: left promiscuous mode [ 1006.230662][T14990] bridge0: port 3(syz_tun) entered blocking state [ 1006.237546][T14990] bridge0: port 3(syz_tun) entered forwarding state [ 1006.251604][T14990] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1006.270722][ T1340] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1006.290972][ T1340] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.311852][ T1340] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1006.334835][ T1340] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1006.349780][ T1340] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.359775][ T1340] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1006.378187][ T1340] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1006.399801][ T1340] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.410530][ T1340] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1006.434035][ T1340] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1006.454487][ T1340] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.474373][ T1340] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1007.270797][T15040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18813'. [ 1007.287464][T15041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18812'. [ 1007.298499][T15040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18813'. [ 1007.641845][T15057] netlink: 'syz.2.18820': attribute type 18 has an invalid length. [ 1007.674259][T15057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18820'. [ 1007.693334][T15057] netlink: 'syz.2.18820': attribute type 18 has an invalid length. [ 1007.701765][T15057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18820'. [ 1007.811882][ T1697] block nbd8: Possible stuck request ffff888027710000: control (read@0,1024B). Runtime 210 seconds [ 1007.822955][ T1697] block nbd8: Possible stuck request ffff8880277101c0: control (read@1024,1024B). Runtime 210 seconds [ 1007.834388][ T1697] block nbd8: Possible stuck request ffff888027710380: control (read@2048,1024B). Runtime 210 seconds [ 1007.892006][T15064] syzkaller1: entered promiscuous mode [ 1007.922099][T15064] syzkaller1: entered allmulticast mode [ 1008.259954][T15089] netlink: 428 bytes leftover after parsing attributes in process `syz.3.18833'. [ 1008.281652][T15089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18833'. [ 1008.304955][T15091] netlink: 'syz.4.18834': attribute type 21 has an invalid length. [ 1008.317619][T15091] netlink: 128 bytes leftover after parsing attributes in process `syz.4.18834'. [ 1008.348034][T15091] netlink: 'syz.4.18834': attribute type 5 has an invalid length. [ 1008.374961][T15091] netlink: 'syz.4.18834': attribute type 6 has an invalid length. [ 1008.394405][T15091] netlink: 3 bytes leftover after parsing attributes in process `syz.4.18834'. [ 1008.891883][T15110] IPVS: Scheduler module ip_vs_ not found [ 1009.084135][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1009.238496][T15127] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18850'. [ 1009.585068][T15144] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1009.602874][T15144] bond8 (unregistering): Released all slaves [ 1009.787719][T15157] xt_hashlimit: size too large, truncated to 1048576 [ 1011.644172][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1012.534857][T15240] __nla_validate_parse: 2 callbacks suppressed [ 1012.534880][T15240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18893'. [ 1013.046830][T15259] netlink: 'syz.1.18900': attribute type 4 has an invalid length. [ 1013.087243][T15259] netlink: 'syz.1.18900': attribute type 4 has an invalid length. [ 1014.329653][T15329] pim6reg: entered allmulticast mode [ 1014.361676][T15328] pim6reg: left allmulticast mode [ 1014.402862][T15332] netlink: 'syz.3.18929': attribute type 6 has an invalid length. [ 1014.800671][T15319] lo speed is unknown, defaulting to 1000 [ 1014.818101][T15351] netlink: 'syz.1.18936': attribute type 22 has an invalid length. [ 1014.839279][T15351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18936'. [ 1014.851689][T15351] netlink: 'syz.1.18936': attribute type 22 has an invalid length. [ 1014.860358][T15351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18936'. [ 1015.322857][T15319] syzkaller0 speed is unknown, defaulting to 1000 [ 1016.786512][T15402] netlink: 68 bytes leftover after parsing attributes in process `syz.2.18954'. [ 1016.848285][T15402] netlink: 68 bytes leftover after parsing attributes in process `syz.2.18954'. [ 1017.220852][T15421] netlink: 'syz.2.18962': attribute type 1 has an invalid length. [ 1017.230457][T15421] netlink: 'syz.2.18962': attribute type 4 has an invalid length. [ 1017.244091][T15421] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.18962'. [ 1017.371236][T15415] "syz.4.18960" (15415) uses obsolete ecb(arc4) skcipher [ 1017.520067][T15431] "syz.0.18967" (15431) uses obsolete ecb(arc4) skcipher [ 1017.629355][T15438] netlink: 7 bytes leftover after parsing attributes in process `syz.1.18969'. [ 1018.029786][T15453] netlink: 'syz.2.18972': attribute type 83 has an invalid length. [ 1018.589515][T15474] netlink: 148 bytes leftover after parsing attributes in process `syz.0.18980'. [ 1019.213126][T15502] netlink: 'syz.2.18994': attribute type 1 has an invalid length. [ 1019.273238][T15507] netlink: 'syz.2.18994': attribute type 8 has an invalid length. [ 1019.285659][T15502] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1019.721030][T15530] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.19004'. [ 1019.831828][T15534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19006'. [ 1019.879194][T15534] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1019.900401][T15534] bond8: option mode: unable to set because the bond device is up [ 1020.078797][T15543] netlink: 'syz.0.19009': attribute type 4 has an invalid length. [ 1020.104934][T15543] netlink: 'syz.0.19009': attribute type 4 has an invalid length. [ 1020.327512][T15551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19012'. [ 1020.348989][T15551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19012'. [ 1020.644056][T15566] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1021.097650][T15580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19021'. [ 1021.130072][T15580] gtp2: entered promiscuous mode [ 1021.135361][T15580] gtp2: entered allmulticast mode [ 1021.550950][T15598] ip6gretap0: entered promiscuous mode [ 1021.666374][T15602] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.19031'. [ 1021.677042][T15597] ip6gretap0: left promiscuous mode [ 1022.180829][T15620] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.19039'. [ 1023.390303][T15649] syzkaller1: entered promiscuous mode [ 1023.406810][T15649] syzkaller1: entered allmulticast mode [ 1023.791012][T15668] netlink: 'syz.1.19057': attribute type 1 has an invalid length. [ 1023.978042][T15671] bond8: (slave bridge5): making interface the new active one [ 1024.023402][T15671] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 1024.680381][T15686] netlink: 'syz.1.19063': attribute type 1 has an invalid length. [ 1024.750286][T15686] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1025.609517][T15732] netlink: 'syz.4.19081': attribute type 1 has an invalid length. [ 1025.703727][T15732] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1025.802865][T15736] bond13: (slave syz_tun): Enslaving as a backup interface with an up link [ 1026.014448][T15745] netlink: 'syz.4.19085': attribute type 3 has an invalid length. [ 1026.054275][T15745] netlink: 'syz.4.19085': attribute type 3 has an invalid length. [ 1026.364469][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1028.683873][T15788] netlink: 'syz.2.19102': attribute type 39 has an invalid length. [ 1031.778178][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058db4800: rx timeout, send abort [ 1031.845988][T15833] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19116'. [ 1031.863804][T15833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19116'. [ 1032.279903][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058db6000: rx timeout, send abort [ 1032.288886][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058db4800: abort rx timeout. Force session deactivation [ 1032.516402][ T1340] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1032.550866][ T1340] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1032.579839][ T1340] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1032.673874][T15848] syzkaller1: entered promiscuous mode [ 1032.682680][T15848] syzkaller1: entered allmulticast mode [ 1032.788465][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058db6000: abort rx timeout. Force session deactivation [ 1034.767872][T15920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19150'. [ 1034.796467][T15920] netlink: 'syz.3.19150': attribute type 25 has an invalid length. [ 1034.810373][T15920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19150'. [ 1035.407641][T15944] tipc: Resetting bearer [ 1035.516143][T15944] bridge0: port 3(syz_tun) entered disabled state [ 1036.314779][T15948] lo speed is unknown, defaulting to 1000 [ 1036.596530][T15968] IPVS: set_ctl: invalid protocol: 33 172.30.1.1:20000 [ 1036.817676][T15948] syzkaller0 speed is unknown, defaulting to 1000 [ 1037.086799][T15985] netlink: 'syz.3.19177': attribute type 1 has an invalid length. [ 1037.245827][T15985] bond3: entered promiscuous mode [ 1037.266188][T15985] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1037.379340][T15991] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1037.406006][T15991] bond3: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 1037.439604][T15991] bond3: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode [ 1037.482329][T15991] bond3: (slave ip6gre4): making interface the new active one [ 1037.510797][T15991] ip6gre4: entered promiscuous mode [ 1037.538930][T15991] bond3: (slave ip6gre4): Enslaving as an active interface with an up link [ 1037.824748][T15997] syzkaller1: entered promiscuous mode [ 1037.845550][T15997] syzkaller1: entered allmulticast mode [ 1037.923568][ T1697] block nbd8: Possible stuck request ffff888027710000: control (read@0,1024B). Runtime 240 seconds [ 1037.935265][ T1697] block nbd8: Possible stuck request ffff8880277101c0: control (read@1024,1024B). Runtime 240 seconds [ 1037.946736][ T1697] block nbd8: Possible stuck request ffff888027710380: control (read@2048,1024B). Runtime 240 seconds [ 1038.977408][T16025] netlink: 1327 bytes leftover after parsing attributes in process `syz.4.19189'. [ 1039.076642][T16030] netlink: 48 bytes leftover after parsing attributes in process `syz.0.19191'. [ 1039.418818][T16043] tipc: Failed to remove unknown binding: 66,1,1/4278255617:4257623579/4257623581 [ 1039.454606][T16043] tipc: Failed to remove unknown binding: 66,1,1/4278255617:4257623579/4257623581 [ 1040.604967][T16074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19209'. [ 1040.719117][T16074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19209'. [ 1040.750661][T16074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19209'. [ 1042.077479][T16114] netlink: 76 bytes leftover after parsing attributes in process `syz.0.19227'. [ 1043.002169][T16152] netlink: 'syz.3.19243': attribute type 1 has an invalid length. [ 1043.521961][T16160] netlink: 'syz.0.19246': attribute type 8 has an invalid length. [ 1043.530296][T16160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19246'. [ 1043.687463][T23809] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1043.715338][T23809] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1043.726135][T23809] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1043.770329][T23809] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1043.825432][T16160] veth1_to_team: entered promiscuous mode [ 1043.839079][T16160] hsr1: entered promiscuous mode [ 1044.347759][T16195] netlink: 'syz.1.19259': attribute type 1 has an invalid length. [ 1044.379845][T16195] netlink: 352 bytes leftover after parsing attributes in process `syz.1.19259'. [ 1044.409682][T16195] netlink: 'syz.1.19259': attribute type 1 has an invalid length. [ 1044.426672][T16195] netlink: 352 bytes leftover after parsing attributes in process `syz.1.19259'. [ 1045.134583][T16209] only policy match revision 0 supported [ 1045.134613][T16209] unable to load match [ 1045.914985][T16246] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 1045.922777][T16246] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 1045.930743][T16246] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 1045.938618][T16246] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 1045.946369][T16246] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 1045.954288][T16246] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 1045.962024][T16246] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 1045.969878][T16246] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 1045.977719][T16246] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 1045.985508][T16246] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 1046.414125][T16251] lo speed is unknown, defaulting to 1000 [ 1046.599907][T16270] netlink: 'syz.1.19286': attribute type 1 has an invalid length. [ 1046.702198][T16275] netlink: 'syz.3.19290': attribute type 1 has an invalid length. [ 1046.772580][T16272] gretap3: entered allmulticast mode [ 1046.783594][T16272] bond11: (slave gretap3): making interface the new active one [ 1046.794603][T16272] bond11: (slave gretap3): Enslaving as an active interface with an up link [ 1046.864011][T16275] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1046.920329][T16281] bond4: (slave macvlan1): Enslaving as a backup interface with a down link [ 1047.382388][T16251] syzkaller0 speed is unknown, defaulting to 1000 [ 1047.578729][T16299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19295'. [ 1047.608612][T16299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19295'. [ 1047.617888][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1047.641119][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1047.685073][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1047.704836][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1047.748483][T16305] delete_channel: no stack [ 1048.531542][T16338] syzkaller1: entered promiscuous mode [ 1048.537761][T16338] syzkaller1: entered allmulticast mode [ 1048.806593][T16333] lo speed is unknown, defaulting to 1000 [ 1049.527402][T16336] lo speed is unknown, defaulting to 1000 [ 1049.528625][T16333] syzkaller0 speed is unknown, defaulting to 1000 [ 1049.713026][T16361] netlink: 'syz.1.19315': attribute type 1 has an invalid length. [ 1049.829851][T16361] bond12: entered promiscuous mode [ 1049.856350][T16361] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1050.089086][T16368] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1050.105432][T16368] bond12: (slave gre5): The slave device specified does not support setting the MAC address [ 1050.123058][T16368] bond12: (slave gre5): Setting fail_over_mac to active for active-backup mode [ 1050.161228][T16368] bond12: (slave gre5): making interface the new active one [ 1050.168743][T16368] gre5: entered promiscuous mode [ 1050.176380][T16368] bond12: (slave gre5): Enslaving as an active interface with an up link [ 1050.187465][T16336] syzkaller0 speed is unknown, defaulting to 1000 [ 1051.257938][T16394] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19324'. [ 1051.819945][T16412] syzkaller1: entered promiscuous mode [ 1051.833419][T16412] syzkaller1: entered allmulticast mode [ 1052.568296][T16409] lo speed is unknown, defaulting to 1000 [ 1052.938490][T16446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19344'. [ 1052.954252][T16409] syzkaller0 speed is unknown, defaulting to 1000 [ 1053.566042][T16460] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19350'. [ 1053.596825][T16460] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19350'. [ 1053.668418][T16470] net_ratelimit: 3255 callbacks suppressed [ 1053.668440][T16470] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1053.712177][T16470] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1053.745365][T16470] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1053.778050][T16470] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1053.813271][T16470] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1053.846752][T16470] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1053.881610][T16470] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1053.900468][T16470] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1053.918594][T16470] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1053.952820][T16470] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1054.672752][T16502] netlink: 'syz.0.19364': attribute type 1 has an invalid length. [ 1054.728757][T16502] netlink: 264 bytes leftover after parsing attributes in process `syz.0.19364'. [ 1054.784895][T16502] netlink: 'syz.0.19364': attribute type 1 has an invalid length. [ 1054.822103][T16502] netlink: 264 bytes leftover after parsing attributes in process `syz.0.19364'. [ 1055.797767][T16513] virt_wifi0: left promiscuous mode [ 1056.549887][ T1021] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1056.584231][ T1021] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.614329][ T1021] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 1056.639738][ T1021] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1056.666055][ T1021] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.695135][ T1021] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 1056.742580][ T1021] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1056.769271][ T1021] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.798122][ T1021] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 1056.821429][ T1021] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1056.850973][ T1021] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.870700][ T1021] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 1056.940379][T16551] vxcan0: entered allmulticast mode [ 1057.018580][T16553] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.19376'. [ 1057.039050][T16470] syz.1.19354 (16470) used greatest stack depth: 15848 bytes left [ 1057.251084][T16559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19379'. [ 1057.271487][T16559] netlink: 121 bytes leftover after parsing attributes in process `syz.0.19379'. [ 1057.582763][T16582] bond14: entered promiscuous mode [ 1058.125085][T16565] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1059.644155][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1060.058528][T16678] net_ratelimit: 1015 callbacks suppressed [ 1060.058549][T16678] sock: sock_set_timeout: `syz.4.19427' (pid 16678) tries to set negative timeout [ 1060.276812][T16659] lo speed is unknown, defaulting to 1000 [ 1061.032745][T16659] syzkaller0 speed is unknown, defaulting to 1000 [ 1061.151772][T16725] xt_hashlimit: size too large, truncated to 1048576 [ 1061.431076][T16733] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19446'. [ 1061.443391][T16733] netem: incorrect gi model size [ 1061.465867][T16733] netem: change failed [ 1061.830485][T16741] syzkaller0: entered promiscuous mode [ 1061.847586][T16741] syzkaller0: entered allmulticast mode [ 1061.878581][T16752] netlink: 240 bytes leftover after parsing attributes in process `syz.1.19451'. [ 1062.766360][T16772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19459'. [ 1063.012624][T16780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19462'. [ 1063.025970][T16780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19462'. [ 1064.591374][T16785] syzkaller1: entered promiscuous mode [ 1064.597745][T16785] syzkaller1: entered allmulticast mode [ 1064.719397][T16794] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19465'. [ 1065.152193][T16756] lo speed is unknown, defaulting to 1000 [ 1065.436538][T16756] syzkaller0 speed is unknown, defaulting to 1000 [ 1065.446581][T16791] siw: device registration error -23 [ 1065.535009][T16810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19473'. [ 1065.850647][T16827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19479'. [ 1066.027152][T16831] netlink: 'syz.0.19481': attribute type 4 has an invalid length. [ 1066.615660][T16833] lo speed is unknown, defaulting to 1000 [ 1067.047604][T16833] syzkaller0 speed is unknown, defaulting to 1000 [ 1067.968700][ T1697] block nbd8: Possible stuck request ffff888027710000: control (read@0,1024B). Runtime 270 seconds [ 1067.979802][ T1697] block nbd8: Possible stuck request ffff8880277101c0: control (read@1024,1024B). Runtime 270 seconds [ 1067.991415][ T1697] block nbd8: Possible stuck request ffff888027710380: control (read@2048,1024B). Runtime 270 seconds [ 1070.575284][T17004] netlink: 52 bytes leftover after parsing attributes in process `syz.3.19546'. [ 1070.597849][T17007] netlink: 3 bytes leftover after parsing attributes in process `syz.0.19547'. [ 1070.607354][T17004] netlink: 52 bytes leftover after parsing attributes in process `syz.3.19546'. [ 1071.399601][T17039] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.19562'. [ 1071.584985][T17046] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19566'. [ 1071.604142][T17046] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19566'. [ 1071.622466][T17046] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19566'. [ 1071.649282][T17046] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19566'. [ 1071.915147][T17063] netlink: 'syz.1.19573': attribute type 1 has an invalid length. [ 1071.945294][T17060] netlink: 88 bytes leftover after parsing attributes in process `syz.2.19571'. [ 1072.045297][T17063] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1072.094945][T17071] bond13: (slave gretap4): making interface the new active one [ 1072.118831][T17071] bond13: (slave gretap4): Enslaving as an active interface with an up link [ 1072.624795][T17099] syzkaller1: entered promiscuous mode [ 1072.651980][T17099] syzkaller1: entered allmulticast mode [ 1073.668763][T17138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19603'. [ 1075.259786][T17187] team0: entered promiscuous mode [ 1075.274834][T17187] team0: entered allmulticast mode [ 1075.290346][T17187] 8021q: adding VLAN 0 to HW filter on device team0 [ 1075.392645][T17188] team1: entered promiscuous mode [ 1075.410784][T17188] team1: entered allmulticast mode [ 1075.422800][T17188] 8021q: adding VLAN 0 to HW filter on device team1 [ 1076.136299][T17211] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1076.557799][T17215] lo speed is unknown, defaulting to 1000 [ 1076.894121][T17233] netlink: 'syz.3.19641': attribute type 39 has an invalid length. [ 1077.206254][T17215] syzkaller0 speed is unknown, defaulting to 1000 [ 1077.222001][T17242] __nla_validate_parse: 6 callbacks suppressed [ 1077.222024][T17242] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.19645'. [ 1077.289421][T17216] lo speed is unknown, defaulting to 1000 [ 1077.750502][T17216] syzkaller0 speed is unknown, defaulting to 1000 [ 1079.717502][T17335] syzkaller1: entered promiscuous mode [ 1079.723142][T17335] syzkaller1: entered allmulticast mode [ 1080.097634][T17305] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1080.274099][T17348] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1081.187350][T17391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19707'. [ 1081.479537][T17400] syzkaller1: entered promiscuous mode [ 1081.502813][T17400] syzkaller1: entered allmulticast mode [ 1081.973078][T17394] lo speed is unknown, defaulting to 1000 [ 1082.590773][T17394] syzkaller0 speed is unknown, defaulting to 1000 [ 1082.973853][T17442] syzkaller1: entered promiscuous mode [ 1082.979674][T17442] syzkaller1: entered allmulticast mode [ 1083.468398][T17460] netlink: 'syz.3.19734': attribute type 10 has an invalid length. [ 1083.485103][T17460] netlink: 16154 bytes leftover after parsing attributes in process `syz.3.19734'. [ 1084.059810][T17479] erspan0: left promiscuous mode [ 1084.419699][T17494] sctp: [Deprecated]: syz.0.19744 (pid 17494) Use of int in maxseg socket option. [ 1084.419699][T17494] Use struct sctp_assoc_value instead [ 1084.703793][T17507] lo: Caught tx_queue_len zero misconfig [ 1084.918778][T17515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19753'. [ 1084.943525][T17516] netlink: 'syz.4.19752': attribute type 2 has an invalid length. [ 1085.313735][T17528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19759'. [ 1085.393373][T17530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19760'. [ 1085.672631][T17535] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 1085.688219][T17513] lo speed is unknown, defaulting to 1000 [ 1086.301341][T17513] syzkaller0 speed is unknown, defaulting to 1000 [ 1086.340657][T17538] lo speed is unknown, defaulting to 1000 [ 1086.471379][T17553] syzkaller0: entered promiscuous mode [ 1086.485537][T17553] syzkaller0: entered allmulticast mode [ 1088.760778][T17569] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 1089.465782][T17538] syzkaller0 speed is unknown, defaulting to 1000 [ 1089.609065][T17574] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19776'. [ 1090.213448][T17593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19783'. [ 1090.234517][T17593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19783'. [ 1090.346199][T17599] pim6reg1: entered promiscuous mode [ 1090.357544][T17599] pim6reg1: entered allmulticast mode [ 1090.861846][T17613] af_packet: tpacket_rcv: packet too big, clamped from 18 to 4294967272. macoff=96 [ 1091.243135][T17606] lo speed is unknown, defaulting to 1000 [ 1091.641925][T17606] syzkaller0 speed is unknown, defaulting to 1000 [ 1091.833548][T17638] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19800'. [ 1092.759999][T17660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19809'. [ 1092.987852][T17674] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1092.998528][T17674] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1093.015778][T17674] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1093.036694][T17674] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1093.058907][T17674] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1093.075236][T17674] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1093.087615][T17674] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1093.098355][T17674] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1093.109277][T17674] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1093.765734][T17674] net_ratelimit: 402 callbacks suppressed [ 1093.765774][T17674] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1093.787316][T17674] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1093.797645][T17674] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1093.808217][T17674] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1093.835766][T17674] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1093.845970][T17674] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1093.866463][T17674] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1093.895317][T17674] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1093.905820][T17674] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1093.916318][T17674] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1094.285776][T17682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19817'. [ 1094.826757][T17696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19822'. [ 1095.147031][T17683] lo speed is unknown, defaulting to 1000 [ 1095.284213][T17711] netlink: 'syz.4.19828': attribute type 1 has an invalid length. [ 1095.376883][T17711] bond15: entered promiscuous mode [ 1095.382813][T17711] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1095.518360][T17711] bond15: (slave bridge13): making interface the new active one [ 1095.550165][T17711] bridge13: entered promiscuous mode [ 1095.606989][T17711] bridge13: left promiscuous mode [ 1095.690357][T17683] syzkaller0 speed is unknown, defaulting to 1000 [ 1095.883296][T17728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19833'. [ 1096.307423][T17744] netlink: 'syz.2.19841': attribute type 1 has an invalid length. [ 1096.387031][T17749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19843'. [ 1096.445808][T17744] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1096.511559][T17750] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1096.533437][T17755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19844'. [ 1096.552100][T17750] bond9: (slave vcan0): The slave device specified does not support setting the MAC address [ 1096.570414][T17750] bond9: (slave vcan0): Error -95 calling set_mac_address [ 1097.025316][T17770] syzkaller1: entered promiscuous mode [ 1097.033466][T17770] syzkaller1: entered allmulticast mode [ 1097.251707][T17783] netlink: 'syz.2.19857': attribute type 1 has an invalid length. [ 1097.267125][T17785] netlink: 'syz.1.19856': attribute type 1 has an invalid length. [ 1097.269982][T17783] netlink: 'syz.2.19857': attribute type 4 has an invalid length. [ 1097.301234][T17783] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.19857'. [ 1097.314203][T17785] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1097.351846][T17788] netlink: 'syz.2.19857': attribute type 1 has an invalid length. [ 1097.360201][T17788] netlink: 'syz.2.19857': attribute type 4 has an invalid length. [ 1097.368224][T17788] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.19857'. [ 1097.403754][T17785] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1097.416219][T17785] bond14: (slave vcan1): The slave device specified does not support setting the MAC address [ 1097.431091][T17785] bond14: (slave vcan1): Error -95 calling set_mac_address [ 1097.531893][T17795] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1098.044406][ T1697] block nbd8: Possible stuck request ffff888027710000: control (read@0,1024B). Runtime 300 seconds [ 1098.058270][ T1697] block nbd8: Possible stuck request ffff8880277101c0: control (read@1024,1024B). Runtime 300 seconds [ 1098.069900][ T1697] block nbd8: Possible stuck request ffff888027710380: control (read@2048,1024B). Runtime 300 seconds [ 1098.320371][T17831] netlink: 44 bytes leftover after parsing attributes in process `syz.4.19874'. [ 1098.389791][T17830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19874'. [ 1098.709509][T17807] lo speed is unknown, defaulting to 1000 [ 1098.783790][T17843] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19880'. [ 1098.840394][T17843] ip6gre3: entered promiscuous mode [ 1098.854112][T17843] ip6gre3: entered allmulticast mode [ 1099.347836][T17807] syzkaller0 speed is unknown, defaulting to 1000 [ 1099.706703][T17874] tipc: Enabled bearer , priority 0 [ 1099.738112][T17874] syzkaller0: MTU too low for tipc bearer [ 1099.764275][T17874] tipc: Disabling bearer [ 1099.785609][T17856] lo speed is unknown, defaulting to 1000 [ 1100.353830][T17856] syzkaller0 speed is unknown, defaulting to 1000 [ 1101.308602][T17907] netlink: 3 bytes leftover after parsing attributes in process `syz.3.19904'. [ 1101.393593][T17911] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.19902'. [ 1101.712096][T17926] netlink: 'syz.0.19912': attribute type 1 has an invalid length. [ 1101.761775][T17926] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1101.819681][T17928] bond19: (slave veth11): Enslaving as an active interface with a down link [ 1101.859634][T17926] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1101.871845][T17926] bond19: (slave batadv1): making interface the new active one [ 1101.886280][T17926] batadv1: entered promiscuous mode [ 1101.893478][T17926] bond19: (slave batadv1): Enslaving as an active interface with an up link [ 1102.007806][T17934] netlink: 'syz.0.19915': attribute type 1 has an invalid length. [ 1102.039945][T17934] bond20: entered promiscuous mode [ 1102.045917][T17934] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1102.121122][T17934] bond20: (slave veth13): making interface the new active one [ 1102.129042][T17934] veth13: entered promiscuous mode [ 1102.139013][T17934] bond20: (slave veth13): Enslaving as an active interface with an up link [ 1102.456263][T17950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19919'. [ 1102.558375][T17954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19921'. [ 1102.982774][T17972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19930'. [ 1103.293691][T17887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1103.489970][T17982] netlink: 'syz.1.19934': attribute type 1 has an invalid length. [ 1103.557000][T17982] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1103.831782][T17989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19937'. [ 1103.853363][T17991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19938'. [ 1104.082814][T17998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19938'. [ 1104.212302][T18004] netlink: 'syz.1.19942': attribute type 1 has an invalid length. [ 1104.296972][T18006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19942'. [ 1104.342686][T18004] bond16: entered promiscuous mode [ 1104.363965][T18006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19942'. [ 1104.384452][T18004] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1104.453793][T18014] bond16: (slave bridge7): making interface the new active one [ 1104.468333][T18014] bridge7: entered promiscuous mode [ 1104.487789][T18014] bond16: (slave bridge7): Enslaving as an active interface with an up link [ 1105.159502][T18015] lo speed is unknown, defaulting to 1000 [ 1105.335904][T18043] net_ratelimit: 603 callbacks suppressed [ 1105.335925][T18043] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1105.373170][T18047] netlink: 'syz.0.19957': attribute type 4 has an invalid length. [ 1105.375709][T18043] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1105.407973][T18043] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1105.441148][T18043] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1105.477716][T18043] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1105.515102][T18043] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1105.535492][T18043] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1105.552187][T18043] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1105.585805][T18043] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1105.598574][T18043] ip_tunnel_core: Dead loop on virtual device gre5 (net 75), fix it urgently! [ 1105.826106][T18015] syzkaller0 speed is unknown, defaulting to 1000 [ 1106.575733][T18081] __nla_validate_parse: 4 callbacks suppressed [ 1106.575770][T18081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19968'. [ 1106.788287][T18088] netlink: 'syz.4.19970': attribute type 4 has an invalid length. [ 1106.818377][T18088] netlink: 'syz.4.19970': attribute type 4 has an invalid length. [ 1106.849054][T15030] lo speed is unknown, defaulting to 1000 [ 1106.858478][T15030] sqz0: Port: 1 Link ACTIVE [ 1106.868984][T15030] lo speed is unknown, defaulting to 1000 [ 1106.952513][T18093] netlink: 'syz.4.19972': attribute type 2 has an invalid length. [ 1106.988410][T18093] : entered promiscuous mode [ 1107.058180][T18063] lo speed is unknown, defaulting to 1000 [ 1107.889401][T18063] syzkaller0 speed is unknown, defaulting to 1000 [ 1108.891599][T18113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19979'. [ 1109.631798][T18131] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19984'. [ 1109.873606][T18135] syzkaller0: entered promiscuous mode [ 1109.879858][T18135] syzkaller0: entered allmulticast mode [ 1109.908528][T18141] netlink: 'syz.3.19988': attribute type 4 has an invalid length. [ 1109.928859][T18141] netlink: 'syz.3.19988': attribute type 4 has an invalid length. [ 1109.961528][T18137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19986'. [ 1110.181459][T18154] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19991'. [ 1110.306742][T18152] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1112.890521][T18156] lo speed is unknown, defaulting to 1000 [ 1112.994842][T23809] batadv1: left promiscuous mode [ 1113.417951][T18175] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1113.476674][T18156] syzkaller0 speed is unknown, defaulting to 1000 [ 1113.998308][T18178] lo speed is unknown, defaulting to 1000 [ 1114.356194][T18178] syzkaller0 speed is unknown, defaulting to 1000 [ 1114.478298][T18203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20005'. [ 1114.601833][T18203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20005'. [ 1114.602309][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1114.667235][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1114.677387][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1114.901703][T18200] lo speed is unknown, defaulting to 1000 [ 1115.261980][T18216] .70·: left allmulticast mode [ 1115.274800][T18216] hsr_slave_0: left allmulticast mode [ 1115.285749][T18216] hsr_slave_1: left allmulticast mode [ 1115.293657][T18216] macsec0: left promiscuous mode [ 1115.299999][T18216] macsec0: left allmulticast mode [ 1115.311103][T18216] geneve2: left promiscuous mode [ 1115.317326][T18216] bond1: left promiscuous mode [ 1115.322796][T18216] ip6erspan0: left allmulticast mode [ 1115.330965][T18216] bond3: left promiscuous mode [ 1115.340265][T18216] ip6gretap2: left promiscuous mode [ 1115.346513][T18216] ip6gretap2: left allmulticast mode [ 1115.352716][T18205] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1115.391916][T18216] bridge5: left promiscuous mode [ 1115.404747][T18216] bridge5: left allmulticast mode [ 1115.416041][T18216] bond6: left promiscuous mode [ 1115.421076][T18216] bond6: left allmulticast mode [ 1115.435391][T18216] ip6gretap5: left allmulticast mode [ 1115.452715][T18216] xfrm2: left allmulticast mode [ 1115.460204][T18216] vlan3: left allmulticast mode [ 1115.471781][T18216] macvtap0: left allmulticast mode [ 1115.524083][T18216] bond12: left promiscuous mode [ 1115.540901][T18216] veth5: left promiscuous mode [ 1115.587628][T18216] gtp2: left promiscuous mode [ 1115.610586][T18216] gtp2: left allmulticast mode [ 1115.662155][T18216] bond14: left promiscuous mode [ 1115.703126][T18216] bond15: left promiscuous mode [ 1115.904024][T18200] syzkaller0 speed is unknown, defaulting to 1000 [ 1116.598663][T18246] sctp: [Deprecated]: syz.4.20019 (pid 18246) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1116.598663][T18246] Use struct sctp_sack_info instead [ 1116.932640][T18226] lo speed is unknown, defaulting to 1000 [ 1117.513816][T18277] netlink: 88 bytes leftover after parsing attributes in process `syz.3.20027'. [ 1117.629226][T18226] syzkaller0 speed is unknown, defaulting to 1000 [ 1117.906020][T18288] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20031'. [ 1118.223785][T18296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20033'. [ 1118.871317][T18314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20040'. [ 1119.201462][T18299] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1119.404944][T18335] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20046'. [ 1120.005286][T18358] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1120.036277][T18363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20054'. [ 1120.062438][T18360] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 1120.109688][T18363] bond5 (unregistering): (slave geneve3): Releasing backup interface [ 1120.307661][T18363] bond5 (unregistering): Released all slaves [ 1121.292249][T18402] tipc: Disabling bearer [ 1121.362395][T18406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20067'. [ 1121.494972][T18409] netlink: 'syz.4.20070': attribute type 4 has an invalid length. [ 1121.531634][T14528] lo speed is unknown, defaulting to 1000 [ 1121.550507][T14528] sqz0: Port: 1 Link DOWN [ 1121.569304][T16535] lo speed is unknown, defaulting to 1000 [ 1121.710700][T18415] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 1122.388973][T18446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20084'. [ 1122.427062][T18446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20084'. [ 1122.660687][T18437] lo speed is unknown, defaulting to 1000 [ 1122.879017][T18457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20089'. [ 1122.942480][T18457] netlink: 32 bytes leftover after parsing attributes in process `syz.3.20089'. [ 1123.183156][T18437] syzkaller0 speed is unknown, defaulting to 1000 [ 1123.835554][T18477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20096'. [ 1124.132685][T18485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20101'. [ 1124.249344][T18489] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20102'. [ 1124.289497][ T30] INFO: task udevd:1196 blocked for more than 143 seconds. [ 1124.304482][ T30] Not tainted syzkaller #0 [ 1124.319708][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1124.332253][ T30] task:udevd state:D stack:20096 pid:1196 tgid:1196 ppid:5193 task_flags:0x400140 flags:0x00080002 [ 1124.352708][ T30] Call Trace: [ 1124.356357][ T30] [ 1124.359425][ T30] __schedule+0x17b4/0x5680 [ 1124.365098][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1124.370255][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1124.380084][ T30] ? __pfx___schedule+0x10/0x10 [ 1124.385587][ T30] ? schedule+0x90/0x360 [ 1124.390024][ T30] schedule+0x164/0x360 [ 1124.396271][ T30] io_schedule+0x7f/0xd0 [ 1124.400655][ T30] folio_wait_bit_common+0x6d8/0xbc0 [ 1124.406653][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1124.412697][ T30] ? filemap_read_folio+0x23e/0x3b0 [ 1124.418507][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1124.425058][ T30] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 1124.431176][ T30] do_read_cache_folio+0x1ad/0x590 [ 1124.437192][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1124.442924][ T30] read_part_sector+0xb6/0x2b0 [ 1124.449211][ T30] adfspart_check_POWERTEC+0x9a/0x7a0 [ 1124.455996][ T30] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1124.462528][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1124.471040][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1124.480516][ T30] bdev_disk_changed+0x817/0x1770 [ 1124.486807][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1124.492678][ T30] blkdev_get_whole+0x380/0x510 [ 1124.498818][ T30] bdev_open+0x31e/0xd30 [ 1124.503327][ T30] blkdev_open+0x470/0x610 [ 1124.516216][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 1124.526227][ T30] do_dentry_open+0x785/0x14e0 [ 1124.534488][ T30] vfs_open+0x3b/0x340 [ 1124.538842][ T30] ? path_openat+0x2df0/0x3860 [ 1124.549209][ T30] path_openat+0x2e08/0x3860 [ 1124.555224][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1124.560853][ T30] ? stack_depot_save_flags+0x33/0x810 [ 1124.567040][ T30] ? __pfx_path_openat+0x10/0x10 [ 1124.572274][ T30] ? __x64_sys_openat+0x138/0x170 [ 1124.577887][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1124.583166][ T30] do_file_open+0x23e/0x4a0 [ 1124.588826][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1124.594278][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1124.599387][ T30] ? alloc_fd+0x64b/0x6c0 [ 1124.604876][ T30] do_sys_openat2+0x113/0x200 [ 1124.610333][ T30] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1124.618174][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1124.623630][ T30] ? rcu_is_watching+0x15/0xb0 [ 1124.629079][ T30] __x64_sys_openat+0x138/0x170 [ 1124.634329][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.640572][ T30] do_syscall_64+0x15f/0xf80 [ 1124.646850][ T30] ? clear_bhb_loop+0x40/0x90 [ 1124.651725][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.658081][ T30] RIP: 0033:0x7f79e2aa7407 [ 1124.662680][ T30] RSP: 002b:00007ffe4ee1ea00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1124.671968][ T30] RAX: ffffffffffffffda RBX: 00007f79e324e880 RCX: 00007f79e2aa7407 [ 1124.680541][ T30] RDX: 00000000000a0800 RSI: 0000558e14368aa0 RDI: ffffffffffffff9c [ 1124.701760][ T30] RBP: 0000558e14357910 R08: 0000000000000000 R09: 0000000000000000 [ 1124.710609][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000558e14361840 [ 1124.719183][ T30] R13: 0000558e14365190 R14: 0000000000000000 R15: 0000558e14361840 [ 1124.735658][ T30] [ 1124.772385][ T30] [ 1124.772385][ T30] Showing all locks held in the system: [ 1124.790543][ T30] 1 lock held by pool_workqueue_/3: [ 1124.821567][ T30] 1 lock held by khungtaskd/30: [ 1124.831580][ T30] #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1124.842076][ T30] 2 locks held by getty/5582: [ 1124.855013][ T30] #0: ffff888036b810a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1124.868940][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1124.879746][ T30] 1 lock held by udevd/1196: [ 1124.885642][ T30] #0: ffff8880275b4350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1124.895583][ T30] 2 locks held by syz.2.20081/18437: [ 1124.901016][ T30] #0: ffffffff8fdc01c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1124.911517][ T30] #1: ffffffff8e963328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1124.922984][ T30] 1 lock held by syz.4.20086/18450: [ 1124.932010][ T30] [ 1124.935983][ T30] ============================================= [ 1124.935983][ T30] [ 1124.944940][ T30] NMI backtrace for cpu 1 [ 1124.944958][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1124.944982][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1124.944995][ T30] Call Trace: [ 1124.945004][ T30] [ 1124.945012][ T30] dump_stack_lvl+0xe8/0x150 [ 1124.945048][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1124.945082][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1124.945114][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1124.945149][ T30] sys_info+0x135/0x170 [ 1124.945178][ T30] watchdog+0xfaa/0x1000 [ 1124.945206][ T30] ? watchdog+0x209/0x1000 [ 1124.945237][ T30] kthread+0x388/0x470 [ 1124.945259][ T30] ? __pfx_watchdog+0x10/0x10 [ 1124.945279][ T30] ? __pfx_kthread+0x10/0x10 [ 1124.945302][ T30] ret_from_fork+0x514/0xb70 [ 1124.945334][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1124.945363][ T30] ? __switch_to+0xc79/0x1410 [ 1124.945390][ T30] ? __pfx_kthread+0x10/0x10 [ 1124.945418][ T30] ret_from_fork_asm+0x1a/0x30 [ 1124.945467][ T30] [ 1124.945487][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1125.061593][ C0] NMI backtrace for cpu 0 [ 1125.061611][ C0] CPU: 0 UID: 0 PID: 15030 Comm: kworker/0:10 Not tainted syzkaller #0 PREEMPT(full) [ 1125.061632][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1125.061645][ C0] Workqueue: events free_ipc [ 1125.061672][ C0] RIP: 0010:__lock_acquire+0x1968/0x2cf0 [ 1125.061705][ C0] Code: 89 c1 81 e1 ff 0f 00 00 89 0d d8 f6 a4 14 2b 05 ce f6 a4 14 25 ff 0f 00 00 39 05 8f f6 a3 12 73 06 89 05 87 f6 a3 12 48 8b 02 <48> 89 df 4c 39 e8 0f 84 2c fe ff ff 4c 89 60 30 48 8b 00 4c 39 e8 [ 1125.061721][ C0] RSP: 0018:ffffc90004caf2f8 EFLAGS: 00000002 [ 1125.061735][ C0] RAX: ffffffff96e72d58 RBX: 00000000000003fd RCX: 0000000000000392 [ 1125.061748][ C0] RDX: ffffffff96e72b28 RSI: ffff88802bc38ca8 RDI: 00000000000003fd [ 1125.061761][ C0] RBP: cd8e5a636224f02c R08: ffffc90004caf2c0 R09: 0000000000000020 [ 1125.061773][ C0] R10: dffffc0000000000 R11: ffffffff81a1e3d0 R12: ffffffff96e72b98 [ 1125.061787][ C0] R13: ffffffff93f07ba8 R14: ffff88802bc38000 R15: 0000000000000391 [ 1125.061800][ C0] FS: 0000000000000000(0000) GS:ffff888125245000(0000) knlGS:0000000000000000 [ 1125.061815][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1125.061827][ C0] CR2: 000020000051a030 CR3: 00000000b1720000 CR4: 00000000003526f0 [ 1125.061843][ C0] Call Trace: [ 1125.061850][ C0] [ 1125.061872][ C0] ? debug_object_deactivate+0x6c/0x3a0 [ 1125.061897][ C0] lock_acquire+0x106/0x350 [ 1125.061919][ C0] ? debug_object_deactivate+0x6c/0x3a0 [ 1125.061946][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1125.061969][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 1125.061989][ C0] ? debug_object_deactivate+0x6c/0x3a0 [ 1125.062012][ C0] debug_object_deactivate+0x6c/0x3a0 [ 1125.062040][ C0] hrtimer_try_to_cancel+0x34e/0x670 [ 1125.062072][ C0] update_curr_dl_se+0x32c/0xe80 [ 1125.062093][ C0] ? rcu_read_lock_sched_held+0x33/0x70 [ 1125.062125][ C0] update_curr+0x1fa/0x4e0 [ 1125.062149][ C0] ? rcu_is_watching+0x15/0xb0 [ 1125.062177][ C0] enqueue_task_fair+0x442/0x2aa0 [ 1125.062205][ C0] enqueue_task+0x75/0x410 [ 1125.062233][ C0] ttwu_do_activate+0x1cc/0x660 [ 1125.062257][ C0] try_to_wake_up+0x724/0x1380 [ 1125.062281][ C0] kthread_queue_work+0xff/0x180 [ 1125.062300][ C0] synchronize_rcu_expedited+0x48e/0x770 [ 1125.062329][ C0] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1125.062362][ C0] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1125.062399][ C0] free_ipc+0xb5/0x1d0 [ 1125.062418][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1125.062443][ C0] process_scheduled_works+0xb5d/0x1860 [ 1125.062483][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1125.062510][ C0] ? assign_work+0x3d5/0x5e0 [ 1125.062536][ C0] worker_thread+0xa53/0xfc0 [ 1125.062574][ C0] kthread+0x388/0x470 [ 1125.062591][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1125.062613][ C0] ? __pfx_kthread+0x10/0x10 [ 1125.062631][ C0] ret_from_fork+0x514/0xb70 [ 1125.062658][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1125.062681][ C0] ? __switch_to+0xc79/0x1410 [ 1125.062711][ C0] ? __pfx_kthread+0x10/0x10 [ 1125.062729][ C0] ret_from_fork_asm+0x1a/0x30 [ 1125.062765][ C0] [ 1125.378916][T18491] caif:caif_disconnect_client(): nothing to disconnect [ 1125.442287][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1125.449214][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1125.458383][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1125.468630][ T30] Call Trace: [ 1125.471948][ T30] [ 1125.474913][ T30] vpanic+0x56c/0xa60 [ 1125.478952][ T30] ? __pfx___schedule+0x10/0x10 [ 1125.483841][ T30] ? __pfx_vpanic+0x10/0x10 [ 1125.488392][ T30] ? __pfx_console_unlock+0x10/0x10 [ 1125.493743][ T30] panic+0xc5/0xd0 [ 1125.497532][ T30] ? __pfx_panic+0x10/0x10 [ 1125.502004][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1125.507526][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1125.513740][ T30] watchdog+0xff4/0x1000 [ 1125.518031][ T30] ? watchdog+0x209/0x1000 [ 1125.522509][ T30] kthread+0x388/0x470 [ 1125.526618][ T30] ? __pfx_watchdog+0x10/0x10 [ 1125.531337][ T30] ? __pfx_kthread+0x10/0x10 [ 1125.536086][ T30] ret_from_fork+0x514/0xb70 [ 1125.540817][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1125.545991][ T30] ? __switch_to+0xc79/0x1410 [ 1125.550724][ T30] ? __pfx_kthread+0x10/0x10 [ 1125.555354][ T30] ret_from_fork_asm+0x1a/0x30 [ 1125.560274][ T30] [ 1125.563936][ T30] Kernel Offset: disabled [ 1125.568274][ T30] Rebooting in 86400 seconds..