last executing test programs: 7m36.716319049s ago: executing program 4 (id=1608): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000100181208000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) 7m36.622907512s ago: executing program 4 (id=1613): syz_emit_ethernet(0x4e, &(0x7f0000000400)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "164508", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) 7m36.505370744s ago: executing program 4 (id=1617): syz_emit_ethernet(0x82, &(0x7f0000000100)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x74, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x16, 0x4, 0x0, 0x2, 0x6, 0x67, 0x4, 0xd7, 0x6c, 0xfffc, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x44, 0xe5, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0xfd, 0x0}}, {@remote, 0x1}, {@empty, 0x6d6c}, {@private=0xa010101, 0x10000004}, {@private=0xa010100, 0xffffff01}, {@loopback, 0x2}, {@loopback, 0x6}, {@empty, 0x80}]}]}}}}}}}, 0x0) 7m36.291340755s ago: executing program 4 (id=1622): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x6) 7m36.170708786s ago: executing program 4 (id=1624): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0xa, 0x7ffffffb, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x2}, 0x50) 7m31.914527332s ago: executing program 4 (id=1712): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffef3, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) 7m31.682118188s ago: executing program 32 (id=1712): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffef3, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) 18.483562873s ago: executing program 3 (id=17431): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000ac0)=ANY=[@ANYRES32=0x0, @ANYBLOB="b000"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000340), 0x8) 18.383096049s ago: executing program 0 (id=17433): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvfrom$unix(r2, &(0x7f0000000480)=""/172, 0xac, 0x10000, 0x0, 0x0) 17.783203752s ago: executing program 5 (id=17445): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000300000000000000000000003d0000000000000095005200"], &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) accept4(r0, 0x0, 0x0, 0x80000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r1], 0x20}}, 0x0) 17.706441533s ago: executing program 5 (id=17446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f00000000c0)={'syzkaller0\x00', @random="00fd00"}) 17.69539497s ago: executing program 2 (id=17447): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000480)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x2, @b={0x7, 0x2, 0x2, 0x1, 0x2, 0x3, 0x65, {0x44, "2c00b38a5357f4712e384c2cf7792324488372a67928406a9fdeed4f45143b7923eaf9b75fd33b392992fc29c9d927ffcbb048f89d8b9edd11b038b0b96b09069f598762"}, 0x2, 0x2f, 0x7, 0xf6, 0x1b, "d76475a5826c9ba44d9891a8bfa19f926f81f0e8071b24de6ea0c1"}}, 0x6f) 17.622620295s ago: executing program 3 (id=17448): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f00000015c0)=""/115, 0x73) 17.545986389s ago: executing program 5 (id=17449): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff2, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xffffffa1, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x800}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 17.50821703s ago: executing program 0 (id=17450): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) 17.42268574s ago: executing program 5 (id=17451): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x30, r2, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {0xa1ffffff, 0x3}, {0x14, 0x19, {0x5, 0x1000, 0x0, 0x7000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x44040) pselect6(0x29, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x6, 0xa, 0x0, 0x800, 0xa}, 0x0, 0x0, 0x0, 0x0) 16.812970595s ago: executing program 2 (id=17453): socket$packet(0x11, 0x3, 0x300) socket(0x1e, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) 16.754975949s ago: executing program 0 (id=17454): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000d40)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0xfffffffffffffe12, 0x3, 0xef}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x0, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x0, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x0, 0x2, 0xfb}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x0, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x8d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x0, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x82}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x0, 0x2, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x0, 0x2, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x0, 0x1, 0x2}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 16.737524629s ago: executing program 3 (id=17455): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) pipe(&(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 16.658107623s ago: executing program 2 (id=17456): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) recvfrom(r0, &(0x7f0000000ac0)=""/4096, 0x1000, 0x1, 0x0, 0x0) 16.602672763s ago: executing program 3 (id=17457): pipe(&(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0xe, 0x10, 0xffffffffffffffff, 0xfffffffd}, 0x50) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(r0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 16.590611422s ago: executing program 5 (id=17458): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) unshare(0x24060400) close(0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) close(0x3) 16.573352799s ago: executing program 2 (id=17459): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'veth0_macvtap\x00', 0x400}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb601288763"], 0xffdd) 16.569405428s ago: executing program 3 (id=17460): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x32, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 16.5458577s ago: executing program 0 (id=17461): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000000)=""/31, 0x1f) 16.430163263s ago: executing program 5 (id=17462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 16.425200239s ago: executing program 2 (id=17463): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000004}) ppoll(&(0x7f0000000180)=[{}, {r0, 0x4}, {r2, 0x1c}], 0x3, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) 16.376762779s ago: executing program 0 (id=17464): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002300)=""/3, 0x3}, {&(0x7f0000002340)=""/252, 0xfc}], 0x2}, 0x7}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 15.995177348s ago: executing program 3 (id=17467): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dedbff, {0x0, 0x0, 0x0, 0x0, 0x56d09, 0x41025}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x14000000}, 0x40040) 15.890050345s ago: executing program 1 (id=17468): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) close(0x3) 15.889877752s ago: executing program 1 (id=17469): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000019c0)=[{&(0x7f0000001a00)="ce", 0x1}], 0x1, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x2, 0xe) close(r3) 15.876022745s ago: executing program 1 (id=17470): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) 15.498429743s ago: executing program 0 (id=17471): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r4, r1, 0x25, 0x2, @val=@iter={0x0}}, 0x20) 15.395222413s ago: executing program 2 (id=17472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x9}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008006411ff20010000000000000000000000000002ff0200000000000000000000000000014f194e20006490"], 0x9e) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) 15.374508088s ago: executing program 1 (id=17473): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x5, 0xa) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) 15.33311288s ago: executing program 1 (id=17474): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000029c0)={r3, @in={{0x2, 0x4e24, @empty}}, 0x7, 0x3, 0xb9, 0x9, 0x80, 0x2, 0x5}, &(0x7f0000000240)=0x9c) 15.304203595s ago: executing program 1 (id=17475): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1.039918494s ago: executing program 33 (id=17462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 541.557365ms ago: executing program 34 (id=17467): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dedbff, {0x0, 0x0, 0x0, 0x0, 0x56d09, 0x41025}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x14000000}, 0x40040) 42.530985ms ago: executing program 35 (id=17471): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r4, r1, 0x25, 0x2, @val=@iter={0x0}}, 0x20) 24.004174ms ago: executing program 36 (id=17475): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 0s ago: executing program 37 (id=17472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x9}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008006411ff20010000000000000000000000000002ff0200000000000000000000000000014f194e20006490"], 0x9e) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) kernel console output (not intermixed with test programs): ibutes in process `syz.2.11565'. [ 328.235414][T30117] netlink: 'syz.0.11566': attribute type 29 has an invalid length. [ 328.244795][T30117] netlink: 'syz.0.11566': attribute type 29 has an invalid length. [ 328.318552][T30127] sctp: [Deprecated]: syz.2.11571 (pid 30127) Use of int in max_burst socket option deprecated. [ 328.318552][T30127] Use struct sctp_assoc_value instead [ 328.319553][T30126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11570'. [ 328.717125][T30170] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11592'. [ 329.056977][ T5626] Bluetooth: hci3: command 0x0406 tx timeout [ 329.539172][T30257] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 330.366581][T30315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11663'. [ 330.378384][T30315] netlink: 'syz.2.11663': attribute type 22 has an invalid length. [ 330.386982][T30315] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11663'. [ 330.531651][T30331] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11670'. [ 330.716419][T30349] syz.0.11678 (30349) used obsolete PPPIOCDETACH ioctl [ 331.134463][ T5626] Bluetooth: hci3: command 0x0406 tx timeout [ 331.589032][T30450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11728'. [ 331.827913][T30475] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 332.992981][T30535] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11769'. [ 333.080728][T30545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11774'. [ 333.100610][T30545] unsupported nla_type 48896 [ 333.227331][T30560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11781'. [ 333.547441][T30586] batman_adv: batadv0: Interface deactivated: wlan0 [ 334.144726][T30645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11812'. [ 334.934853][T30716] netlink: 'syz.0.11836': attribute type 1 has an invalid length. [ 335.987760][T30824] dummy0: entered promiscuous mode [ 336.001722][T30823] dummy0: left promiscuous mode [ 337.158551][T30936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11923'. [ 337.176781][T30936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11923'. [ 337.814783][T31007] netlink: 5 bytes leftover after parsing attributes in process `syz.0.11952'. [ 338.072776][T31036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11964'. [ 338.509610][T31083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.563789][T31086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11985'. [ 339.187053][T31147] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12008'. [ 339.202702][T31150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 339.376901][T31170] sctp: [Deprecated]: syz.0.12017 (pid 31170) Use of struct sctp_assoc_value in delayed_ack socket option. [ 339.376901][T31170] Use struct sctp_sack_info instead [ 339.396300][T31170] sctp: [Deprecated]: syz.0.12017 (pid 31170) Use of struct sctp_assoc_value in delayed_ack socket option. [ 339.396300][T31170] Use struct sctp_sack_info instead [ 340.022510][T31231] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 340.571594][T31279] netlink: 56 bytes leftover after parsing attributes in process `syz.5.12056'. [ 340.838074][T31303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12068'. [ 341.029983][T31325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12076'. [ 341.062592][T31330] netlink: 296 bytes leftover after parsing attributes in process `syz.5.12080'. [ 341.272228][T31355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.634843][T31397] bond7: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 341.647957][T31397] bond7 (unregistering): Released all slaves [ 341.999293][T31438] netlink: 'syz.5.12132': attribute type 1 has an invalid length. [ 342.562785][T31507] __nla_validate_parse: 6 callbacks suppressed [ 342.562803][T31507] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12164'. [ 343.483444][T31576] netlink: 'syz.5.12197': attribute type 15 has an invalid length. [ 343.788451][T31598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12208'. [ 344.189550][T31647] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.12233'. [ 344.235507][T31650] netlink: 165 bytes leftover after parsing attributes in process `syz.5.12234'. [ 344.461742][T31676] netlink: 'syz.0.12245': attribute type 14 has an invalid length. [ 344.777021][T31706] netlink: 192 bytes leftover after parsing attributes in process `syz.2.12259'. [ 345.383813][T31751] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12278'. [ 345.482835][T31753] 8021q: adding VLAN 0 to HW filter on device bond4 [ 345.533025][T31758] sctp: [Deprecated]: syz.3.12281 (pid 31758) Use of int in max_burst socket option. [ 345.533025][T31758] Use struct sctp_assoc_value instead [ 346.089907][T31799] netlink: 'syz.3.12299': attribute type 1 has an invalid length. [ 346.118028][T31799] netlink: 'syz.3.12299': attribute type 7 has an invalid length. [ 346.132976][T31799] netlink: 'syz.3.12299': attribute type 8 has an invalid length. [ 346.144462][T31799] netlink: 208 bytes leftover after parsing attributes in process `syz.3.12299'. [ 346.153773][T31799] NCSI netlink: No device for ifindex 1073545264 [ 346.844466][T31847] netlink: 748 bytes leftover after parsing attributes in process `syz.5.12322'. [ 346.993186][T31864] netlink: 277 bytes leftover after parsing attributes in process `syz.5.12330'. [ 348.071319][T31981] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.12384'. [ 348.407472][T32006] netlink: 80 bytes leftover after parsing attributes in process `syz.5.12395'. [ 348.955712][T32065] bond0: entered promiscuous mode [ 348.960854][T32065] bond_slave_0: entered promiscuous mode [ 348.967378][T32065] bond_slave_1: entered promiscuous mode [ 348.980426][T32065] batadv_slave_0: entered promiscuous mode [ 348.989206][T32065] batadv_slave_0: left promiscuous mode [ 349.004700][T32065] bond0: left promiscuous mode [ 349.009786][T32065] bond_slave_0: left promiscuous mode [ 349.026192][T32065] bond_slave_1: left promiscuous mode [ 349.247340][T32090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12432'. [ 349.256975][T32090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12432'. [ 349.272903][T32090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12432'. [ 349.290679][T32090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12432'. [ 349.317769][T32090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12432'. [ 349.330039][T32090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12432'. [ 349.380958][T32100] xfrm0 speed is unknown, defaulting to 1000 [ 349.532497][T32100] lo speed is unknown, defaulting to 1000 [ 349.700974][T32121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12445'. [ 349.726381][T32121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12445'. [ 349.741985][T32121] netlink: 'syz.3.12445': attribute type 20 has an invalid length. [ 350.333178][T32171] netlink: 'syz.2.12467': attribute type 9 has an invalid length. [ 350.831740][T32209] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 351.116406][T32225] pimreg: entered allmulticast mode [ 351.145743][T32218] pimreg: left allmulticast mode [ 352.797454][T32304] netlink: 'syz.1.12520': attribute type 1 has an invalid length. [ 352.805651][T32304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.148047][T32339] netlink: 'syz.0.12538': attribute type 8 has an invalid length. [ 353.628187][T32382] __nla_validate_parse: 4 callbacks suppressed [ 353.628235][T32382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12557'. [ 353.759946][T32393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12562'. [ 354.178590][T32420] sctp: [Deprecated]: syz.1.12575 (pid 32420) Use of int in maxseg socket option. [ 354.178590][T32420] Use struct sctp_assoc_value instead [ 354.223138][T32431] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 354.435971][T32452] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 354.817628][T32477] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 354.840048][T32479] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12601'. [ 355.200772][T32519] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12621'. [ 355.528857][T32561] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12640'. [ 355.563275][T32565] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12642'. [ 355.573000][T32565] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12642'. [ 355.614140][T32567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12643'. [ 355.641678][T32567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12643'. [ 355.734901][T32577] netlink: 'syz.1.12648': attribute type 30 has an invalid length. [ 356.185729][T32612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12665'. [ 356.215015][T32612] netlink: 'syz.3.12665': attribute type 15 has an invalid length. [ 356.233100][T32612] netlink: 'syz.3.12665': attribute type 25 has an invalid length. [ 356.579055][T32637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 357.207426][T32691] tun0: tun_chr_ioctl cmd 1074812117 [ 357.920907][T32756] sch_fq: defrate 0 ignored. [ 358.542761][ T346] xfrm0 speed is unknown, defaulting to 1000 [ 358.658244][ T360] __nla_validate_parse: 4 callbacks suppressed [ 358.658263][ T360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12762'. [ 358.800065][ T346] lo speed is unknown, defaulting to 1000 [ 359.133965][ T3343] netdevsim netdevsim2 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.147394][ T3343] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.169273][ T3343] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.614411][ T4941] Bluetooth: hci2: command 0x0406 tx timeout [ 359.620697][ T5626] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 359.856452][ T446] tipc: New replicast peer: 255.255.255.255 [ 359.865156][ T446] tipc: Enabled bearer , priority 10 [ 360.161180][ T472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12811'. [ 360.177171][ T472] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12811'. [ 360.267363][ T483] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12818'. [ 360.446398][ T500] Bluetooth: MGMT ver 1.23 [ 360.566069][ T516] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 360.571984][ T516] pim6reg0: persist disabled [ 360.984265][ T5807] tipc: Node number set to 1593835523 [ 361.080023][ T551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12849'. [ 361.090294][ T551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12849'. [ 361.384562][ T568] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 361.397126][ T568] dvmrp1: linktype set to 0 [ 361.947534][ T620] netlink: 72 bytes leftover after parsing attributes in process `syz.5.12882'. [ 363.194513][ T706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12922'. [ 363.217804][ T706] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 363.238765][ T713] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12925'. [ 363.386178][ T729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12928'. [ 363.510985][ T743] netlink: 'syz.1.12939': attribute type 3 has an invalid length. [ 363.521903][ T743] netlink: 'syz.1.12939': attribute type 1 has an invalid length. [ 364.642118][ T813] __nla_validate_parse: 3 callbacks suppressed [ 364.642138][ T813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12969'. [ 367.482729][ T851] tipc: Started in network mode [ 367.488409][ T851] tipc: Node identity ff, cluster identity 4711 [ 367.499166][ T851] tipc: Enabling of bearer rejected, failed to enable media [ 367.584693][ T850] nbd1: detected capacity change from 0 to 127 [ 367.593054][ T5626] block nbd1: Receive control failed (result -32) [ 367.593539][ T5611] block nbd1: Send control failed (result -32) [ 367.626263][ T5611] block nbd1: Request send failed, requeueing [ 367.632796][ T5110] block nbd1: Dead connection, failed to find a fallback [ 367.640212][ T5110] block nbd1: shutting down sockets [ 367.646253][ T5110] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.655712][ T5110] Buffer I/O error on dev nbd1, logical block 0, async page read [ 367.664877][ T5611] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.673994][ T5611] Buffer I/O error on dev nbd1, logical block 1, async page read [ 367.682447][ T5611] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.691887][ T5611] Buffer I/O error on dev nbd1, logical block 2, async page read [ 367.700007][ T5611] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.710048][ T5611] Buffer I/O error on dev nbd1, logical block 3, async page read [ 367.718106][ T5611] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.727399][ T5611] Buffer I/O error on dev nbd1, logical block 0, async page read [ 367.735697][ T5611] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.748283][ T5611] Buffer I/O error on dev nbd1, logical block 1, async page read [ 367.757233][ T5611] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.766870][ T5611] Buffer I/O error on dev nbd1, logical block 2, async page read [ 367.775443][ T5611] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.787174][ T5611] Buffer I/O error on dev nbd1, logical block 3, async page read [ 367.795793][ T5611] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.818679][ T5611] Buffer I/O error on dev nbd1, logical block 0, async page read [ 367.832596][ T5611] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 367.852751][ T5611] Buffer I/O error on dev nbd1, logical block 1, async page read [ 367.873580][ T5611] ldm_validate_partition_table(): Disk read failed. [ 367.891579][ T5611] Dev nbd1: unable to read RDB block 0 [ 367.905403][ T5611] nbd1: unable to read partition table [ 367.923059][ T5611] ldm_validate_partition_table(): Disk read failed. [ 367.955128][ T5611] Dev nbd1: unable to read RDB block 0 [ 367.967294][ T5611] nbd1: unable to read partition table [ 368.169070][ T906] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13012'. [ 368.309150][ T913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13015'. [ 368.323936][ T913] netlink: 'syz.2.13015': attribute type 30 has an invalid length. [ 368.362118][ T916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13015'. [ 368.392638][ T916] netlink: 'syz.2.13015': attribute type 30 has an invalid length. [ 368.458216][ T921] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13018'. [ 368.591472][ T5626] block nbd2: Receive control failed (result -32) [ 368.603107][ T943] netlink: 104 bytes leftover after parsing attributes in process `syz.5.13025'. [ 368.642628][ T945] tap0: tun_chr_ioctl cmd 2148553947 [ 368.674947][ T951] netlink: 'syz.2.13028': attribute type 1 has an invalid length. [ 368.697479][ T951] netlink: 'syz.2.13028': attribute type 2 has an invalid length. [ 369.301312][ T1024] netlink: 'syz.0.13059': attribute type 5 has an invalid length. [ 369.416627][ T1038] netlink: 'syz.0.13063': attribute type 15 has an invalid length. [ 370.176857][ T1040] batadv_slave_1: entered promiscuous mode [ 370.195733][ T1039] batadv_slave_1: left promiscuous mode [ 370.249187][ T1071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13074'. [ 370.279757][ T1071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13074'. [ 370.443979][ T1097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13085'. [ 370.464145][ T1097] bond0: Unable to set down delay as MII monitoring is disabled [ 370.506181][ T1106] netlink: 136 bytes leftover after parsing attributes in process `syz.3.13089'. [ 370.623509][ T1124] netlink: 616 bytes leftover after parsing attributes in process `syz.5.13092'. [ 370.696299][ T1130] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 370.734385][ T1132] pim6reg: entered allmulticast mode [ 370.747082][ T1131] pim6reg: left allmulticast mode [ 372.272655][ T1224] macsec3: entered promiscuous mode [ 372.283199][ T1224] veth1: entered promiscuous mode [ 372.291734][ T1224] macsec3: entered allmulticast mode [ 372.297294][ T1224] veth1: entered allmulticast mode [ 372.306244][ T1224] veth1: left allmulticast mode [ 372.314185][ T1224] veth1: left promiscuous mode [ 372.853484][ T1259] netlink: 7 bytes leftover after parsing attributes in process `syz.5.13152'. [ 372.877692][ T1255] nbd: device at index 0 is going down [ 372.890302][ T1259] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13152'. [ 372.920871][ T1259] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13152'. [ 373.043503][T30614] udevd[30614]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 373.083507][ T5611] udevd[5611]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 373.377037][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.383381][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.391195][ T1295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13168'. [ 373.409468][ T1298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13170'. [ 373.492475][ T1307] netlink: 'syz.5.13174': attribute type 1 has an invalid length. [ 373.516384][ T1307] netlink: 'syz.5.13174': attribute type 1 has an invalid length. [ 374.773388][ T1380] netlink: 'syz.2.13204': attribute type 2 has an invalid length. [ 375.456164][ T1433] sctp: [Deprecated]: syz.0.13229 (pid 1433) Use of int in maxseg socket option. [ 375.456164][ T1433] Use struct sctp_assoc_value instead [ 375.539334][ T1442] __nla_validate_parse: 7 callbacks suppressed [ 375.539352][ T1442] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13232'. [ 375.555235][ T1442] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13232'. [ 375.556247][ T1443] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 375.565613][ T1442] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13232'. [ 375.757212][ T1450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13237'. [ 376.331892][ T1459] sctp: [Deprecated]: syz.1.13240 (pid 1459) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.331892][ T1459] Use struct sctp_sack_info instead [ 376.466773][ T1465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13243'. [ 376.583320][ T1476] netlink: 256 bytes leftover after parsing attributes in process `syz.0.13248'. [ 376.585547][ T1475] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.935126][ T1507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.953289][ T1507] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.968102][ T1507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.986084][ T1510] netlink: 67 bytes leftover after parsing attributes in process `syz.3.13262'. [ 377.051040][ T1507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.070082][ T1507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.089307][ T1507] veth1_vlan: left promiscuous mode [ 377.097945][ T1507] veth1_vlan: entered promiscuous mode [ 377.107869][ T1507] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 377.124591][ T1507] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 377.137004][ T1507] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 377.147505][ T1507] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 377.157678][ T1507] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 377.168290][ T1507] 8021q: adding VLAN 0 to HW filter on device bond1 [ 377.178014][ T1507] 8021q: adding VLAN 0 to HW filter on device bond2 [ 377.187611][ T1507] 8021q: adding VLAN 0 to HW filter on device bond3 [ 377.206923][ T1507] ip6gretap0: entered promiscuous mode [ 377.213175][ T1507] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 377.232672][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.239871][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.250224][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.257344][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.307366][ T1510] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 377.317386][ T1522] syz1: rxe_newlink: already configured on lo [ 377.333668][ T13] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured! [ 377.420059][ T1528] netlink: 332 bytes leftover after parsing attributes in process `syz.5.13272'. [ 377.429559][ T1528] netlink: 'syz.5.13272': attribute type 9 has an invalid length. [ 377.437868][ T1528] netlink: 108 bytes leftover after parsing attributes in process `syz.5.13272'. [ 377.451588][ T1528] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13272'. [ 377.612548][ T1539] batadv_slave_0: entered promiscuous mode [ 377.625184][ T1538] batadv_slave_0: left promiscuous mode [ 377.668272][ T1543] netlink: 'syz.2.13279': attribute type 6 has an invalid length. [ 377.950908][ T1572] netlink: 'syz.0.13292': attribute type 4 has an invalid length. [ 378.494364][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 378.729086][ T5626] block nbd3: Receive control failed (result -32) [ 379.313844][ T1657] dummy0: left allmulticast mode [ 379.325823][ T1657] dummy0: left promiscuous mode [ 379.337013][ T1657] bridge0: port 3(dummy0) entered disabled state [ 379.354273][ T1657] batman_adv: batadv0: Adding interface: dummy0 [ 379.360550][ T1657] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.389390][ T1657] batman_adv: batadv0: Interface activated: dummy0 [ 379.709024][ T1686] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 379.994783][ T1708] netlink: 'syz.2.13356': attribute type 30 has an invalid length. [ 380.869846][ T1769] __nla_validate_parse: 6 callbacks suppressed [ 380.869859][ T1769] netlink: 196 bytes leftover after parsing attributes in process `syz.0.13384'. [ 380.886361][ T1769] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13384'. [ 381.054251][ C1] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured! [ 381.440229][ T1793] netlink: 209808 bytes leftover after parsing attributes in process `syz.5.13396'. [ 382.009093][ T1824] xt_hashlimit: size too large, truncated to 1048576 [ 382.064964][ T1825] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 382.368063][ T1846] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13417'. [ 382.637683][ T1875] IPVS: Error connecting to the multicast addr [ 382.743788][ T1884] veth1_to_batadv: entered promiscuous mode [ 382.818848][ T1892] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 382.836529][ T1892] syzkaller1: linktype set to 778 [ 383.228940][ T1928] netlink: 'syz.2.13456': attribute type 1 has an invalid length. [ 383.245625][ T1928] netlink: 'syz.2.13456': attribute type 2 has an invalid length. [ 383.258496][ T1918] sctp: [Deprecated]: syz.0.13451 (pid 1918) Use of int in max_burst socket option deprecated. [ 383.258496][ T1918] Use struct sctp_assoc_value instead [ 383.260041][ T1928] netlink: 'syz.2.13456': attribute type 1 has an invalid length. [ 383.300014][ T1928] netlink: 'syz.2.13456': attribute type 2 has an invalid length. [ 383.453759][ T1947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13459'. [ 383.477340][ T1947] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13459'. [ 383.611303][ T1962] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13469'. [ 383.628000][ T1962] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13469'. [ 384.178510][ T2008] netlink: 'syz.3.13492': attribute type 12 has an invalid length. [ 384.681414][ T2057] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13515'. [ 384.915814][ T2083] netlink: 104 bytes leftover after parsing attributes in process `syz.0.13528'. [ 384.961508][ T2089] xt_hashlimit: size too large, truncated to 1048576 [ 385.017769][ T2094] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 385.025057][ T2094] IPv6: NLM_F_CREATE should be set when creating new route [ 385.032303][ T2094] IPv6: NLM_F_CREATE should be set when creating new route [ 385.039550][ T2094] IPv6: NLM_F_CREATE should be set when creating new route [ 385.229224][ T2113] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 385.427463][ T2129] bond0: Device is already in use. [ 385.967126][ T2174] sctp: [Deprecated]: syz.2.13569 (pid 2174) Use of struct sctp_assoc_value in delayed_ack socket option. [ 385.967126][ T2174] Use struct sctp_sack_info instead [ 386.370971][ T2208] bond5 (unregistering): Released all slaves [ 386.883569][ T2260] __nla_validate_parse: 1 callbacks suppressed [ 386.883586][ T2260] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13610'. [ 387.011812][ T2270] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13614'. [ 387.028134][ T2270] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13614'. [ 387.272698][ T2288] sctp: [Deprecated]: syz.3.13624 (pid 2288) Use of struct sctp_assoc_value in delayed_ack socket option. [ 387.272698][ T2288] Use struct sctp_sack_info instead [ 387.299418][ T2290] netlink: 'syz.5.13623': attribute type 29 has an invalid length. [ 387.621792][ T2324] netlink: 27 bytes leftover after parsing attributes in process `syz.2.13639'. [ 388.567958][ T2354] tap0: tun_chr_ioctl cmd 2147767520 [ 388.597008][ T2355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13651'. [ 388.735105][ C1] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured! [ 388.866979][ T2389] C: renamed from veth1_to_team [ 388.881625][ T2389] netlink: 'syz.5.13667': attribute type 1 has an invalid length. [ 388.900127][ T2389] netlink: 116 bytes leftover after parsing attributes in process `syz.5.13667'. [ 388.923865][ T2389] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 388.982718][ T2397] netlink: 'syz.3.13671': attribute type 3 has an invalid length. [ 388.999166][ T2397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13671'. [ 389.401000][ T2443] tipc: New replicast peer: 255.255.255.255 [ 389.407322][ T2443] tipc: Enabled bearer , priority 10 [ 389.517664][ T2457] netlink: 'syz.5.13695': attribute type 1 has an invalid length. [ 389.701531][ T2475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13701'. [ 389.766214][ T4941] block nbd4: Receive control failed (result -32) [ 389.772849][ T5626] block nbd4: Receive control failed (result -32) [ 389.940745][ T2492] gretap0: entered promiscuous mode [ 389.951243][ T2492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13708'. [ 389.970560][ T2492] gretap0: left promiscuous mode [ 390.376993][ T2550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.386449][ T2550] geneve1: entered promiscuous mode [ 390.395650][ T2550] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 390.403371][ T2555] netlink: 67 bytes leftover after parsing attributes in process `syz.5.13730'. [ 390.468961][ T2550] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 390.481805][ T2550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 390.495813][ T2550] veth1_vlan: left promiscuous mode [ 390.513834][ T2550] veth0_vlan: left promiscuous mode [ 390.519954][ T2550] veth0_vlan: entered promiscuous mode [ 390.528066][ T2550] veth1_vlan: entered promiscuous mode [ 390.538407][ T2550] veth1_macvtap: left promiscuous mode [ 390.545841][ T2550] veth1_macvtap: entered promiscuous mode [ 390.555055][ T2550] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 390.562941][ T2550] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 390.571314][ T2550] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 390.585893][ T2550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 390.661123][ T2550] 8021q: adding VLAN 0 to HW filter on device bond2 [ 390.676679][ T2550] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 390.692744][T19492] lo speed is unknown, defaulting to 1000 [ 390.699969][T19492] syz1: Port: 1 Link ACTIVE [ 390.801598][ T2555] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 390.818271][ T35] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.827631][ T35] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.849457][T19479] lo speed is unknown, defaulting to 1000 [ 390.859990][ T35] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.887866][ T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 390.909002][ T35] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.927071][ T13] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 391.751626][ T2607] erspan0: entered promiscuous mode [ 391.795581][ T5626] block nbd5: Receive control failed (result -32) [ 391.842013][ T2614] block nbd6: Unsupported socket: should be TCP or UNIX. [ 391.890033][ T2616] __nla_validate_parse: 2 callbacks suppressed [ 391.890050][ T2616] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13753'. [ 391.893401][ T2618] 8021q: adding VLAN 0 to HW filter on device eth0 [ 391.925625][ T5746] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 391.938067][ T2621] netlink: 67 bytes leftover after parsing attributes in process `syz.0.13754'. [ 391.949704][ T2618] 8021q: adding VLAN 0 to HW filter on device eth1 [ 391.962593][ T2618] 8021q: adding VLAN 0 to HW filter on device eth2 [ 391.974938][ T2618] 8021q: adding VLAN 0 to HW filter on device eth3 [ 392.073369][ T35] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.082267][T19468] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 392.091973][ T35] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.121819][ T35] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.145298][ T35] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.534926][T19468] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 392.830824][ T2713] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 392.973108][ T2734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13796'. [ 393.277877][ T2765] vxcan4: entered allmulticast mode [ 393.326230][ T2773] tun0: tun_chr_ioctl cmd 1074025681 [ 393.395020][ T2778] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13814'. [ 393.404856][ T2778] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13814'. [ 394.416188][ T2887] tipc: Enabling of bearer rejected, already enabled [ 394.429699][ T2887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13849'. [ 394.485999][ T2892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13851'. [ 394.654322][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 395.177815][ T2951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13878'. [ 395.202159][ T2951] nbd: couldn't find a device at index 65546 [ 395.214484][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 395.628278][ T2990] netlink: 'syz.1.13894': attribute type 4 has an invalid length. [ 395.639213][ T2990] netlink: 'syz.1.13894': attribute type 8 has an invalid length. [ 395.648158][ T2990] netlink: 212 bytes leftover after parsing attributes in process `syz.1.13894'. [ 395.774904][ T12] wlan1: Trigger new scan to find an IBSS to join [ 395.910949][ T3008] netlink: 'syz.3.13903': attribute type 1 has an invalid length. [ 396.242530][ T3036] netlink: 'syz.3.13916': attribute type 1 has an invalid length. [ 396.253714][ T3036] netlink: 'syz.3.13916': attribute type 2 has an invalid length. [ 396.440090][ T3050] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 396.460370][ T3050] syzkaller1: linktype set to 769 [ 396.713591][ T3081] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13938'. [ 397.092671][ T3111] __nla_validate_parse: 1 callbacks suppressed [ 397.092689][ T3111] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13953'. [ 397.320212][ T3129] netlink: 'syz.5.13962': attribute type 1 has an invalid length. [ 397.514820][ T3151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13971'. [ 397.525736][ T3151] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13971'. [ 397.878524][ T3181] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.553995][ T3195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.650561][ T3202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13998'. [ 398.666342][ T3202] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13998'. [ 398.690747][ T3202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13998'. [ 398.708314][ T3202] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13998'. [ 398.726636][ T3202] netlink: 'syz.1.13998': attribute type 6 has an invalid length. [ 399.005626][ T3240] xt_hashlimit: size too large, truncated to 1048576 [ 399.141942][ T57] tipc: Subscription rejected, illegal request [ 399.293190][ T3272] netlink: 64 bytes leftover after parsing attributes in process `syz.2.14022'. [ 400.259867][ T3361] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14062'. [ 400.279859][ T3361] ip6gre2: entered promiscuous mode [ 400.285245][ T3361] ip6gre2: entered allmulticast mode [ 400.348651][ T3371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14067'. [ 400.412968][ T3377] C: renamed from veth1_to_team (while UP) [ 400.421289][ T3377] netlink: 'syz.3.14070': attribute type 8 has an invalid length. [ 400.429804][ T3377] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 400.503570][ T3385] netlink: 'syz.0.14074': attribute type 8 has an invalid length. [ 400.523233][ T3385] sch_fq: defrate 0 ignored. [ 402.279885][ T3555] netlink: 'syz.2.14154': attribute type 58 has an invalid length. [ 402.297872][ T3559] __nla_validate_parse: 10 callbacks suppressed [ 402.297888][ T3559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14157'. [ 402.341183][ T3559] hsr_slave_1 (unregistering): left promiscuous mode [ 402.630384][ T3598] tipc: New replicast peer: 255.255.255.255 [ 402.636857][ T3598] tipc: Enabled bearer , priority 10 [ 402.673437][ T3597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14174'. [ 402.814728][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 402.822466][ C1] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured! [ 402.952854][ T3630] netlink: 'syz.5.14183': attribute type 11 has an invalid length. [ 403.275791][ T3648] block nbd6: Unsupported socket: should be TCP or UNIX. [ 403.713348][ T3685] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14205'. [ 403.754663][ T2011] tipc: Node number set to 83886080 [ 403.776552][ T3689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14207'. [ 404.095492][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 404.218914][ T3722] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14221'. [ 404.617849][ T3746] netlink: 'syz.2.14231': attribute type 3 has an invalid length. [ 404.703769][ T3754] batadv_slave_1: entered promiscuous mode [ 404.704012][ T3753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14234'. [ 404.717446][ T3752] batadv_slave_1: left promiscuous mode [ 405.143726][ T3798] netlink: 64 bytes leftover after parsing attributes in process `syz.0.14253'. [ 405.196304][ T3798] nbd6: detected capacity change from 0 to 1 [ 405.203364][ T5611] buffer_io_error: 138 callbacks suppressed [ 405.203456][ T5611] Buffer I/O error on dev nbd6, logical block 0, async page read [ 405.224114][ T5626] block nbd6: Receive control failed (result -32) [ 405.246866][ T5611] Buffer I/O error on dev nbd6, logical block 0, async page read [ 405.255144][ T5611] Buffer I/O error on dev nbd6, logical block 0, async page read [ 405.262989][ T5611] Buffer I/O error on dev nbd6, logical block 0, async page read [ 405.270939][ T5611] Buffer I/O error on dev nbd6, logical block 0, async page read [ 405.279383][ T5611] ldm_validate_partition_table(): Disk read failed. [ 405.286163][ T5611] Buffer I/O error on dev nbd6, logical block 0, async page read [ 405.296365][ T5611] Buffer I/O error on dev nbd6, logical block 0, async page read [ 405.309519][ T5611] Buffer I/O error on dev nbd6, logical block 0, async page read [ 405.318698][ T3806] netlink: 'syz.3.14257': attribute type 4 has an invalid length. [ 405.326709][ T5611] Buffer I/O error on dev nbd6, logical block 0, async page read [ 405.335664][ T5611] Dev nbd6: unable to read RDB block 0 [ 405.345185][ T5611] Buffer I/O error on dev nbd6, logical block 0, async page read [ 405.356678][ T5611] nbd6: unable to read partition table [ 405.370854][ T5611] nbd6: partition table beyond EOD, truncated [ 405.906144][ T3863] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 406.235770][ T3894] pim6reg: left allmulticast mode [ 406.356673][ T3907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.373913][ T3907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.386035][ T3907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.397833][ T3907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.406850][ T3907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.416483][ T3907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.429290][ T3907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.438124][ T3907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.447683][ T3907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.456224][ T3907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.820924][ T3938] syzkaller1: entered promiscuous mode [ 406.836628][ T3938] syzkaller1: entered allmulticast mode [ 407.326506][ T3981] xt_hashlimit: size too large, truncated to 1048576 [ 407.518726][ T3988] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.14337'. [ 407.806682][ T3999] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 409.207089][ T4103] netlink: 'syz.3.14378': attribute type 1 has an invalid length. [ 409.249435][ T4106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14379'. [ 409.433698][ T4122] netlink: 'syz.0.14382': attribute type 2 has an invalid length. [ 409.481587][ T4122] netlink: 'syz.0.14382': attribute type 2 has an invalid length. [ 409.601707][ T4139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14389'. [ 409.620910][ T4139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14389'. [ 409.695516][ T4152] netlink: 'syz.5.14394': attribute type 1 has an invalid length. [ 409.703471][ T4151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14395'. [ 409.714551][ T4152] netlink: 84 bytes leftover after parsing attributes in process `syz.5.14394'. [ 409.743744][ T4152] netlink: 1 bytes leftover after parsing attributes in process `syz.5.14394'. [ 409.767079][ T4152] netlink: 'syz.5.14394': attribute type 1 has an invalid length. [ 409.785691][ T4152] netlink: 634 bytes leftover after parsing attributes in process `syz.5.14394'. [ 410.033702][ T4171] syzkaller1: entered promiscuous mode [ 410.052785][ T4171] syzkaller1: entered allmulticast mode [ 410.206791][ T4183] sctp: [Deprecated]: syz.1.14412 (pid 4183) Use of struct sctp_assoc_value in delayed_ack socket option. [ 410.206791][ T4183] Use struct sctp_sack_info instead [ 410.258728][ T4190] syzkaller1: entered promiscuous mode [ 410.270879][ T4190] syzkaller1: entered allmulticast mode [ 410.303548][ T4194] syzkaller1: entered promiscuous mode [ 410.325598][ T4194] syzkaller1: entered allmulticast mode [ 410.340766][ T4198] netlink: 'syz.1.14418': attribute type 1 has an invalid length. [ 410.434549][ T4210] netlink: 'syz.1.14424': attribute type 29 has an invalid length. [ 410.469553][ T4210] netlink: 'syz.1.14424': attribute type 29 has an invalid length. [ 410.478867][ T4212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14425'. [ 410.600094][ T4212] bond7: option ad_actor_sys_prio: invalid value (0) [ 410.611159][ T4212] bond7: option ad_actor_sys_prio: allowed values 1 - 65535 [ 410.681445][ T4212] bond7 (unregistering): Released all slaves [ 411.551528][ T4289] net_ratelimit: 1017 callbacks suppressed [ 411.551616][ T4289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.579854][ T4289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.616224][ T4289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.641975][ T4289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.662197][ T4289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.688592][ T4299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.722396][ T4299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.738496][ T4299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.774516][ T3318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.018506][ T4315] netlink: 'syz.3.14468': attribute type 1 has an invalid length. [ 412.147158][ T4323] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.14473'. [ 412.466732][ T4346] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 412.593371][ T4355] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14487'. [ 412.672845][ T4360] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14490'. [ 412.818221][ T4376] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14496'. [ 412.884704][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.961532][ T4390] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 412.984749][ T4390] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 413.027180][ T4390] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 413.066198][ T4390] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 413.121770][ T3343] smbdirect: ib_dev[syz2] removed [ 413.184814][ T4405] bond0: (slave vlan3): Enslaving as an active interface with an up link [ 413.193506][ T2011] dummy0: entered promiscuous mode [ 413.409323][ T4428] gtp3: entered promiscuous mode [ 413.414554][ T4428] gtp3: entered allmulticast mode [ 413.422077][ T4428] team0: Port device gtp3 added [ 413.609158][ T4444] netlink: 750 bytes leftover after parsing attributes in process `syz.5.14528'. [ 413.916961][ T4474] netlink: 'syz.0.14541': attribute type 4 has an invalid length. [ 414.307215][ T4515] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.14558'. [ 414.818064][ T4558] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.14576'. [ 414.973637][ T4572] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14583'. [ 415.839889][ T4643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14616'. [ 415.869328][ T4643] block nbd7: Unsupported socket: should be TCP or UNIX. [ 416.182557][ T4660] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14623'. [ 416.468739][ T4680] IPVS: Scheduler module ip_vs_sip not found [ 416.660513][ T4698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14641'. [ 416.851650][ T4715] net_ratelimit: 2 callbacks suppressed [ 416.851667][ T4715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.866200][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.894783][ T3343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.384967][ T4762] validate_nla: 1 callbacks suppressed [ 417.385011][ T4762] netlink: 'syz.3.14671': attribute type 2 has an invalid length. [ 417.459598][ T4766] batman_adv: batadv0: Adding interface: vlan3 [ 417.477948][ T4766] batman_adv: batadv0: The MTU of interface vlan3 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.524934][ T4766] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 417.544508][ T3318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.174562][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 418.218274][ T4798] __nla_validate_parse: 3 callbacks suppressed [ 418.218292][ T4798] netlink: 236 bytes leftover after parsing attributes in process `syz.5.14687'. [ 418.234878][ T4798] netlink: 236 bytes leftover after parsing attributes in process `syz.5.14687'. [ 418.814877][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.629023][ T4859] syzkaller1: entered promiscuous mode [ 419.635706][ T4859] syzkaller1: entered allmulticast mode [ 419.646604][ T4860] xt_hashlimit: size too large, truncated to 1048576 [ 419.760335][ T4873] syzkaller1: entered promiscuous mode [ 419.780781][ T4873] syzkaller1: entered allmulticast mode [ 419.906438][ T4886] netlink: 212336 bytes leftover after parsing attributes in process `syz.5.14722'. [ 419.956258][ T4890] tipc: Enabled bearer , priority 10 [ 419.967592][ T4892] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 420.045454][ T4900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14729'. [ 420.054957][ T4900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14729'. [ 420.153967][ T4913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14736'. [ 420.470289][ T4934] netlink: 40 bytes leftover after parsing attributes in process `syz.5.14744'. [ 420.489493][ T4934] nbd: couldn't find a device at index 0 [ 420.687595][ T4948] netlink: 'syz.1.14748': attribute type 3 has an invalid length. [ 420.707171][ T4940] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14745'. [ 420.736876][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.773261][ T4954] netlink: 'syz.1.14750': attribute type 2 has an invalid length. [ 421.104779][ T2011] tipc: Node number set to 4269801488 [ 421.276775][ T4989] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14760'. [ 421.307452][ T4989] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14760'. [ 421.372033][ T5000] syzkaller1: entered promiscuous mode [ 421.379310][ T5000] syzkaller1: entered allmulticast mode [ 421.417515][ T5007] lo: entered allmulticast mode [ 421.422778][ T5007] lo: left allmulticast mode [ 421.819522][ T5032] syzkaller1: entered promiscuous mode [ 421.835785][ T5032] syzkaller1: entered allmulticast mode [ 422.014953][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 422.184113][ T5059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.263579][ T5059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.319195][ T5059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.340570][ T5059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.349416][ T5059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.360627][ T5064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.369133][ T5064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.419878][ T5057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.654693][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.663068][ T3318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.576938][ T5147] netlink: 'syz.0.14830': attribute type 11 has an invalid length. [ 424.295943][ T5207] netlink: 'syz.0.14858': attribute type 8 has an invalid length. [ 424.370130][ T5211] xfrm0 speed is unknown, defaulting to 1000 [ 424.389167][ T5213] netlink: 'syz.0.14861': attribute type 2 has an invalid length. [ 424.410356][ T5213] netlink: 'syz.0.14861': attribute type 3 has an invalid length. [ 424.581018][ T5211] lo speed is unknown, defaulting to 1000 [ 424.686527][ T5234] netlink: 'syz.5.14870': attribute type 2 has an invalid length. [ 425.343968][ T5273] __nla_validate_parse: 5 callbacks suppressed [ 425.343982][ T5273] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.14888'. [ 425.476456][ T5281] bridge0: port 3(vlan4) entered blocking state [ 425.483264][ T5281] bridge0: port 3(vlan4) entered disabled state [ 425.486471][ T5279] xt_hashlimit: size too large, truncated to 1048576 [ 425.490457][ T5281] vlan4: entered allmulticast mode [ 425.502054][ T5281] bridge0: entered allmulticast mode [ 425.511968][ T5281] vlan4: left allmulticast mode [ 425.523398][ T5281] bridge0: left allmulticast mode [ 425.869203][ T5305] IPVS: Scheduler module ip_vs_sip not found [ 425.991097][ T5320] syzkaller1: entered promiscuous mode [ 426.003024][ T5322] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14908'. [ 426.015363][ T5320] syzkaller1: entered allmulticast mode [ 426.491569][ T5373] xt_hashlimit: size too large, truncated to 1048576 [ 426.545911][ T5381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14931'. [ 426.708189][ T5393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14937'. [ 426.716325][ T5395] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14938'. [ 426.727767][ T5395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14938'. [ 427.767780][ T5452] xfrm0 speed is unknown, defaulting to 1000 [ 427.774591][ T13] net_ratelimit: 1 callbacks suppressed [ 427.774607][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.810302][ T5455] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14961'. [ 427.992212][ T5452] lo speed is unknown, defaulting to 1000 [ 428.414460][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.459882][ T5464] netlink: 'syz.3.14966': attribute type 1 has an invalid length. [ 428.919972][ T5497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14979'. [ 428.952311][ T5497] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14979'. [ 429.069084][ T5504] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14983'. [ 429.491146][ T5545] netlink: 'syz.3.15000': attribute type 2 has an invalid length. [ 429.655532][ T5563] batadv_slave_1: entered promiscuous mode [ 429.663195][ T5561] batadv_slave_1: left promiscuous mode [ 430.010436][ T5597] xfrm0 speed is unknown, defaulting to 1000 [ 430.109867][ T5597] lo speed is unknown, defaulting to 1000 [ 430.332695][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888028f01c00: rx timeout, send abort [ 430.341580][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888028f01c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 430.447036][ T5643] __nla_validate_parse: 3 callbacks suppressed [ 430.447053][ T5643] netlink: 14 bytes leftover after parsing attributes in process `syz.5.15038'. [ 430.481181][ T5645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15037'. [ 430.490899][ T5645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15037'. [ 430.714604][ T5659] syzkaller1: entered promiscuous mode [ 430.728288][ T5659] syzkaller1: entered allmulticast mode [ 431.290651][ T5741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15069'. [ 431.307679][ T5745] netlink: 11 bytes leftover after parsing attributes in process `syz.2.15071'. [ 431.333356][ T5741] netlink: 'syz.3.15069': attribute type 7 has an invalid length. [ 431.349363][ T5741] netlink: 'syz.3.15069': attribute type 8 has an invalid length. [ 431.363625][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15069'. [ 431.396304][ T5741] gretap0: entered promiscuous mode [ 431.418548][ T5741] gretap0: left promiscuous mode [ 431.614213][ C1] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured! [ 431.699592][ T5782] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15085'. [ 432.188313][ T5811] smc: net device lo applied user defined pnetid SYZ2 [ 432.211536][ T5811] smc: net device lo erased user defined pnetid SYZ2 [ 432.300030][ T5814] netlink: 'syz.0.15098': attribute type 1 has an invalid length. [ 432.417950][ T5820] syzkaller1: entered promiscuous mode [ 432.427589][ T5820] syzkaller1: entered allmulticast mode [ 432.629799][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.731432][ T5841] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.15108'. [ 432.852775][ T5843] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.15109'. [ 433.393487][ T5878] veth1_to_bond: entered allmulticast mode [ 433.401097][ T5878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15126'. [ 433.416645][ T5878] veth1_to_bond (unregistering): left allmulticast mode [ 433.428008][ T5878] bond0: (slave bond_slave_1): Releasing backup interface [ 433.437128][ T5878] bond_slave_1 (unregistering): left allmulticast mode [ 433.471078][ T5882] nbd: device at index 64 is going down [ 433.553662][ T5611] udevd[5611]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 433.859117][ T29] audit: type=1800 audit(1781740355.233:8): pid=5915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.15141" name=CB dev="tmpfs" ino=15245 res=0 errno=0 [ 434.131082][ T5946] netlink: 'syz.1.15154': attribute type 21 has an invalid length. [ 434.386601][ T5968] netlink: 'syz.0.15165': attribute type 20 has an invalid length. [ 434.395037][ T5968] netlink: 'syz.0.15165': attribute type 21 has an invalid length. [ 434.805576][ T6011] netlink: 'syz.2.15185': attribute type 1 has an invalid length. [ 434.815865][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.822193][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.847886][ T6011] netlink: 'syz.2.15185': attribute type 2 has an invalid length. [ 435.199703][ T6047] netlink: 'syz.1.15201': attribute type 22 has an invalid length. [ 435.233370][ T6047] netlink: 'syz.1.15201': attribute type 22 has an invalid length. [ 435.414479][ T6055] team0 (unregistering): Port device team_slave_0 removed [ 435.440025][ T6055] team0 (unregistering): Port device team_slave_1 removed [ 435.469953][ T6055] team0 (unregistering): Port device netdevsim1 removed [ 435.495972][ T6055] team0 (unregistering): Port device geneve1 removed [ 438.833893][ T6112] veth0: entered promiscuous mode [ 438.855150][ T6116] veth0: left promiscuous mode [ 438.940371][ T6124] syzkaller1: entered promiscuous mode [ 438.951400][ T6124] syzkaller1: entered allmulticast mode [ 438.982468][ T6132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.990810][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.003985][ T6132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.014338][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.052402][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.060943][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.143444][ T6146] __nla_validate_parse: 9 callbacks suppressed [ 439.143461][ T6146] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.15242'. [ 439.282622][ T6162] netlink: 'syz.1.15252': attribute type 1 has an invalid length. [ 439.291083][ T6162] netlink: 76 bytes leftover after parsing attributes in process `syz.1.15252'. [ 439.328475][ T6158] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 439.345419][ T2011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.358862][ T2011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.443544][ T6171] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 439.539093][ T6178] netlink: 'syz.3.15259': attribute type 1 has an invalid length. [ 439.556600][ T6178] bond6: entered promiscuous mode [ 439.561924][ T6178] 8021q: adding VLAN 0 to HW filter on device bond6 [ 439.587496][ T6178] 8021q: adding VLAN 0 to HW filter on device bond7 [ 439.595644][ T6178] bond6: (slave bond7): making interface the new active one [ 439.602965][ T6178] bond7: entered promiscuous mode [ 439.608861][ T6178] bond6: (slave bond7): Enslaving as an active interface with an up link [ 439.624870][T19468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.749909][ T6190] x_tables: duplicate entry at hook 1 [ 440.123408][ T6213] bridge9: entered promiscuous mode [ 440.128937][ T6213] bridge9: entered allmulticast mode [ 440.443205][ T6233] xfrm0 speed is unknown, defaulting to 1000 [ 440.633583][ T6233] lo speed is unknown, defaulting to 1000 [ 440.761220][ T6247] xt_hashlimit: max too large, truncated to 1048576 [ 440.774838][ T6247] xt_hashlimit: overflow, try lower: 2/0 [ 440.927241][ T6260] veth0: entered promiscuous mode [ 440.976671][ T6259] veth0: left promiscuous mode [ 441.040153][ T6265] netlink: 'syz.5.15294': attribute type 6 has an invalid length. [ 441.496832][ T6292] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15306'. [ 441.596362][ T6299] netlink: 27 bytes leftover after parsing attributes in process `syz.3.15310'. [ 441.631588][ T6301] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.15311'. [ 441.680343][ T6307] netlink: 256 bytes leftover after parsing attributes in process `syz.0.15313'. [ 441.702955][ T6307] netlink: 256 bytes leftover after parsing attributes in process `syz.0.15313'. [ 442.048692][ T6340] syzkaller1: entered promiscuous mode [ 442.064641][ T6340] syzkaller1: entered allmulticast mode [ 442.317160][ T6364] netlink: 'syz.1.15340': attribute type 11 has an invalid length. [ 442.699090][ T6406] netlink: 8752 bytes leftover after parsing attributes in process `syz.5.15358'. [ 442.751564][ T6408] xfrm0 speed is unknown, defaulting to 1000 [ 442.761683][ T6411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15362'. [ 442.889855][ T6425] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15368'. [ 442.909614][ T6408] lo speed is unknown, defaulting to 1000 [ 444.547443][ T6482] net_ratelimit: 8 callbacks suppressed [ 444.547460][ T6482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.586244][ T6482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.608768][ T6482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.630953][ T6482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.649155][ T6482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.677452][ T6482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.699074][ T6482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.721154][ T6482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.744235][ T6482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.757039][ T6482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.107745][ T6513] syzkaller1: entered promiscuous mode [ 445.123843][ T6513] syzkaller1: entered allmulticast mode [ 445.877018][ T6572] __nla_validate_parse: 5 callbacks suppressed [ 445.877035][ T6572] netlink: 180 bytes leftover after parsing attributes in process `syz.5.15433'. [ 446.025020][ T6586] netlink: 64 bytes leftover after parsing attributes in process `syz.5.15441'. [ 446.442571][ T6619] netlink: 'syz.3.15456': attribute type 6 has an invalid length. [ 446.496027][ T6625] netlink: 'syz.3.15460': attribute type 1 has an invalid length. [ 446.504002][ T6625] netlink: 88 bytes leftover after parsing attributes in process `syz.3.15460'. [ 446.525890][ T6627] netlink: 27 bytes leftover after parsing attributes in process `syz.2.15461'. [ 446.529567][ T6625] netlink: 'syz.3.15460': attribute type 1 has an invalid length. [ 446.553744][ T6625] netlink: 634 bytes leftover after parsing attributes in process `syz.3.15460'. [ 446.790330][ T6651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15472'. [ 446.969603][ T6666] veth5: entered allmulticast mode [ 447.033013][ T6675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15483'. [ 447.168047][ T6685] geneve3: entered promiscuous mode [ 447.177399][ T3318] netdevsim netdevsim2 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.192869][ T3318] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.217226][ T3318] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.302277][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15497'. [ 447.312601][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15497'. [ 447.381481][ T6713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15500'. [ 448.238016][ T6788] netlink: 'syz.5.15526': attribute type 2 has an invalid length. [ 449.238531][ T6895] netlink: 'syz.5.15570': attribute type 62 has an invalid length. [ 450.174553][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 450.983928][ T29] audit: type=1800 audit(1781740372.353:9): pid=7031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.15617" name=20 dev="tmpfs" ino=13905 res=0 errno=0 [ 451.396712][ T7074] __nla_validate_parse: 5 callbacks suppressed [ 451.396731][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15636'. [ 451.413240][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15636'. [ 451.714838][ T7097] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15646'. [ 452.748331][ T7187] IPv6: NLM_F_CREATE should be specified when creating new route [ 452.902872][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15698'. [ 452.926287][ T7207] bond4: Unable to set up delay as MII monitoring is disabled [ 452.935152][ T7207] bond4 (unregistering): Released all slaves [ 453.185385][ T7231] netlink: 52 bytes leftover after parsing attributes in process `syz.2.15709'. [ 453.375485][ C1] net_ratelimit: 1017 callbacks suppressed [ 453.375503][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.440777][ T7254] xfrm0 speed is unknown, defaulting to 1000 [ 453.551347][ T7254] lo speed is unknown, defaulting to 1000 [ 453.572638][ T7262] syzkaller1: entered promiscuous mode [ 453.581152][ T7262] syzkaller1: entered allmulticast mode [ 454.763523][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15744'. [ 454.804602][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15744'. [ 454.835192][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15744'. [ 454.857395][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15744'. [ 455.549596][ T7356] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 455.563906][ T7356] syzkaller1: Refused to change device type [ 455.807254][ T7373] syzkaller1: entered promiscuous mode [ 455.826457][ T7373] syzkaller1: entered allmulticast mode [ 455.876289][ T29] audit: type=1800 audit(1781740377.253:10): pid=7376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.15765" name="r" dev="tmpfs" ino=14081 res=0 errno=0 [ 456.062199][ T29] audit: type=1800 audit(1781740377.433:11): pid=7392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.15772" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=16288 res=0 errno=0 [ 456.280768][ T7397] syzkaller1: entered promiscuous mode [ 456.291900][ T7397] syzkaller1: entered allmulticast mode [ 456.367995][ T7408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.376319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.076050][ T7423] 8021q: adding VLAN 0 to HW filter on device bond4 [ 457.110336][ T7423] bridge0: port 3(bond4) entered blocking state [ 457.134350][ T7423] bridge0: port 3(bond4) entered disabled state [ 457.140812][ T7423] bond4: entered allmulticast mode [ 457.147946][ T7423] bond4: entered promiscuous mode [ 457.153402][ T7423] bridge0: port 3(bond4) entered blocking state [ 457.159808][ T7423] bridge0: port 3(bond4) entered forwarding state [ 457.212896][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15789'. [ 457.222314][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15789'. [ 457.295060][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15790'. [ 457.368146][ T7451] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.15794'. [ 457.488983][ T7461] netlink: 'syz.3.15799': attribute type 2 has an invalid length. [ 457.508132][ T7461] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15799'. [ 457.854298][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 457.886784][ T7502] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 457.902982][ T7502] bond5 (unregistering): Released all slaves [ 457.919243][ T7509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15821'. [ 457.938206][ T13] bridge0: port 3(bond4) entered disabled state [ 458.145531][ T7523] netlink: 'syz.2.15826': attribute type 15 has an invalid length. [ 459.001357][ T7563] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15843'. [ 459.058734][ T7569] netlink: 'syz.2.15846': attribute type 1 has an invalid length. [ 459.066869][ T7569] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.15846'. [ 459.189894][ T7578] netlink: 52 bytes leftover after parsing attributes in process `syz.5.15850'. [ 459.218749][ T7580] netlink: 'syz.0.15851': attribute type 13 has an invalid length. [ 459.269503][ T7580] netlink: 'syz.0.15851': attribute type 13 has an invalid length. [ 459.312090][ T7591] netlink: 27 bytes leftover after parsing attributes in process `syz.1.15856'. [ 459.464404][ T7601] xfrm0 speed is unknown, defaulting to 1000 [ 459.596500][ T7616] netlink: 'syz.1.15866': attribute type 7 has an invalid length. [ 459.677520][ T7616] netlink: 'syz.1.15866': attribute type 7 has an invalid length. [ 459.842901][ T7618] hsr_slave_1 (unregistering): left promiscuous mode [ 459.879271][ T7625] netlink: 'syz.3.15870': attribute type 3 has an invalid length. [ 459.899544][ T7625] netlink: 'syz.3.15870': attribute type 1 has an invalid length. [ 459.909254][ T7601] lo speed is unknown, defaulting to 1000 [ 459.913426][ T7625] NCSI netlink: No device for ifindex 0 [ 460.208781][T19479] hsr0: entered promiscuous mode [ 460.585536][ T7679] netlink: 'syz.3.15891': attribute type 1 has an invalid length. [ 460.776584][ T7679] 8021q: adding VLAN 0 to HW filter on device bond8 [ 461.379137][ T7742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.644629][ T7763] sctp: [Deprecated]: syz.1.15923 (pid 7763) Use of struct sctp_assoc_value in delayed_ack socket option. [ 461.644629][ T7763] Use struct sctp_sack_info instead [ 461.698227][ T7764] xfrm0 speed is unknown, defaulting to 1000 [ 461.940840][ T7764] lo speed is unknown, defaulting to 1000 [ 462.071670][ T7787] bridge0: entered allmulticast mode [ 462.280155][ T7804] __nla_validate_parse: 10 callbacks suppressed [ 462.280170][ T7804] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15943'. [ 462.283712][ T7806] 8021q: adding VLAN 0 to HW filter on device bond4 [ 462.319686][ T7806] bond4: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 462.335800][ T7806] bond4: option resend_igmp: invalid value (5800) [ 462.350866][ T7806] bond4: option resend_igmp: allowed values 0 - 255 [ 462.629187][ T7832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15955'. [ 462.961732][ T7868] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.15968'. [ 463.095965][ T7879] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15974'. [ 463.195721][ T7890] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.15977'. [ 463.251365][ T7894] validate_nla: 7 callbacks suppressed [ 463.251383][ T7894] netlink: 'syz.0.15981': attribute type 13 has an invalid length. [ 463.455528][T19492] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 463.536597][T19479] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 463.630541][ T7922] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 463.662570][ T7922] bond6 (unregistering): Released all slaves [ 464.200257][ T7963] netlink: 'syz.3.16011': attribute type 4 has an invalid length. [ 464.244266][ T7963] netlink: 'syz.3.16011': attribute type 4 has an invalid length. [ 464.355160][ T7978] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 464.392736][ T7978] tipc: Enabled bearer , priority 16 [ 464.591283][ T7993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16022'. [ 464.627108][ T7990] xfrm0 speed is unknown, defaulting to 1000 [ 464.826257][ T7990] lo speed is unknown, defaulting to 1000 [ 464.835121][ T7995] xfrm0 speed is unknown, defaulting to 1000 [ 464.992263][ T29] audit: type=1800 audit(1781740386.363:12): pid=8005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.16026" name="memory.events" dev="tmpfs" ino=16124 res=0 errno=0 [ 465.096914][ T8012] netlink: 'syz.1.16029': attribute type 3 has an invalid length. [ 465.190341][ T7995] lo speed is unknown, defaulting to 1000 [ 465.588271][ T8037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.596591][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.974744][ T8061] netlink: 'syz.1.16049': attribute type 9 has an invalid length. [ 465.993805][ T8061] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.16049'. [ 466.221866][ T8082] sctp: [Deprecated]: syz.5.16055 (pid 8082) Use of int in maxseg socket option. [ 466.221866][ T8082] Use struct sctp_assoc_value instead [ 466.613272][ T8101] netlink: 'syz.5.16063': attribute type 2 has an invalid length. [ 466.697513][ T8106] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.16065'. [ 466.709355][ T8106] netlink: Conntrack attr has 3 unknown bytes [ 467.095640][ T8127] netlink: 'syz.1.16075': attribute type 7 has an invalid length. [ 467.127742][ T8127] netlink: 'syz.1.16075': attribute type 7 has an invalid length. [ 467.186345][ T8129] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 467.223637][ T8129] bond5 (unregistering): Released all slaves [ 468.671725][ T8208] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 468.688113][ T8208] bond6: (slave lo): Enslaving as an active interface with an up link [ 468.699758][ T8208] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 468.819545][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16118'. [ 468.830637][ T8227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16118'. [ 468.842582][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16118'. [ 468.852449][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16118'. [ 468.861573][ T8227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16118'. [ 468.870788][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16118'. [ 469.281492][ T8268] xt_hashlimit: size too large, truncated to 1048576 [ 469.454913][ T8279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16141'. [ 469.499089][ T8279] 8021q: adding VLAN 0 to HW filter on device bond7 [ 469.533315][ T8279] bond7: (slave batadv2): Opening slave failed [ 469.812723][ T8300] atomic_op ffff8880691c5198 conn xmit_atomic 0000000000000000 [ 469.993963][ T8324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16159'. [ 470.008731][ T8324] xfrm1: entered promiscuous mode [ 470.013800][ T8324] xfrm1: entered allmulticast mode [ 470.021890][ T8324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16159'. [ 470.039971][ T8326] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.16160'. [ 470.323901][ T8135] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 470.495768][ T8378] netlink: 'syz.5.16184': attribute type 18 has an invalid length. [ 470.505277][ T8373] bond5: entered promiscuous mode [ 470.511424][ T8373] 8021q: adding VLAN 0 to HW filter on device bond5 [ 470.519497][ T8378] netlink: 'syz.5.16184': attribute type 18 has an invalid length. [ 470.605796][ T8373] 8021q: adding VLAN 0 to HW filter on device bond5 [ 470.621095][ T8373] bond5: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 470.636067][ T8373] bond5: (slave ip6gre3): Error -95 calling set_mac_address [ 470.875678][ T8413] netlink: 'syz.3.16199': attribute type 13 has an invalid length. [ 471.143395][ T3318] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x23 [ 471.688775][ T8487] Bluetooth: hci1: too big key_count value 29096 [ 471.727292][ T8492] 8021q: adding VLAN 0 to HW filter on device bond7 [ 471.745841][ T8492] bond7: option ad_select: unable to set because the bond device is up [ 471.873629][ T8501] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 472.166997][ T8540] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 472.870875][ T8580] xfrm0 speed is unknown, defaulting to 1000 [ 472.998484][ T8580] lo speed is unknown, defaulting to 1000 [ 474.760452][ T8498] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 474.833162][ T8633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.857137][ T8633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.875088][ T8633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.883935][ T8637] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 474.899858][ T8633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.919555][ T8633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.935490][ T8633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.952025][ T8639] bond8: option ad_select: invalid value (34) [ 474.960492][ T8633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.971050][ T8639] bond8 (unregistering): Released all slaves [ 474.979279][ T8646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.999950][ T8646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.036169][ T8649] __nla_validate_parse: 8 callbacks suppressed [ 475.036186][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16295'. [ 475.092986][ T8649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16295'. [ 475.120078][ T8649] netlink: 'syz.2.16295': attribute type 12 has an invalid length. [ 475.154856][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16295'. [ 475.175773][ T8649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16295'. [ 475.204167][ T8649] netlink: 'syz.2.16295': attribute type 12 has an invalid length. [ 475.293113][ T8669] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 475.404523][ T8684] xt_hashlimit: size too large, truncated to 1048576 [ 475.433375][ T8686] netlink: 'syz.2.16312': attribute type 7 has an invalid length. [ 475.444289][ T8686] netlink: 'syz.2.16312': attribute type 8 has an invalid length. [ 475.452213][ T8686] netlink: 'syz.2.16312': attribute type 8 has an invalid length. [ 475.469838][ T8686] netlink: 'syz.2.16312': attribute type 4 has an invalid length. [ 475.479668][ T8686] netlink: 'syz.2.16312': attribute type 7 has an invalid length. [ 475.488635][ T8686] netlink: 207236 bytes leftover after parsing attributes in process `syz.2.16312'. [ 475.778179][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16325'. [ 476.320901][ T8762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16342'. [ 476.848797][ T8799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16360'. [ 476.940876][ T8807] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16363'. [ 476.967269][ T8807] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16363'. [ 477.271383][ T8830] netlink: 'syz.1.16372': attribute type 1 has an invalid length. [ 477.286172][ T8830] netlink: 'syz.1.16372': attribute type 3 has an invalid length. [ 477.711329][ T8862] lo: Caught tx_queue_len zero misconfig [ 479.193475][ T8919] netlink: 'syz.3.16402': attribute type 7 has an invalid length. [ 479.216219][ T8919] netlink: 'syz.3.16402': attribute type 7 has an invalid length. [ 480.058349][ T8978] netlink: 'syz.3.16424': attribute type 1 has an invalid length. [ 480.330626][ T8978] bond9: entered promiscuous mode [ 480.347102][ T8978] bond9: entered allmulticast mode [ 480.361876][ T8978] 8021q: adding VLAN 0 to HW filter on device bond9 [ 480.421096][ T8999] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 480.880725][ T9019] trusted_key: syz.5.16441 sent an empty control message without MSG_MORE. [ 481.194446][ T9037] pim6reg1: entered promiscuous mode [ 481.209965][ T9037] pim6reg1: entered allmulticast mode [ 481.302069][ T9043] ip6gre3: entered promiscuous mode [ 481.307474][ T9043] ip6gre3: entered allmulticast mode [ 481.319836][ T13] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 481.333814][ T13] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 481.343883][ T9043] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 481.351819][T19479] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 481.418453][ T9049] netlink: 'syz.3.16456': attribute type 1 has an invalid length. [ 481.442341][ T9049] 8021q: adding VLAN 0 to HW filter on device bond10 [ 481.474466][T19479] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 481.497815][ T9049] bond10: (slave gretap1): making interface the new active one [ 481.508926][ T9049] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 481.623286][ T9064] syzkaller1: entered promiscuous mode [ 481.631360][ T9064] syzkaller1: entered allmulticast mode [ 481.915157][T19479] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 482.118937][ T9099] netlink: 'syz.3.16475': attribute type 1 has an invalid length. [ 482.188772][ T9099] 8021q: adding VLAN 0 to HW filter on device bond11 [ 482.231086][ T9107] bond11: (slave geneve4): making interface the new active one [ 482.260085][ T9107] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 482.387516][ T9118] __nla_validate_parse: 15 callbacks suppressed [ 482.387534][ T9118] netlink: 10 bytes leftover after parsing attributes in process `syz.5.16483'. [ 482.541485][ T9130] syzkaller1: entered promiscuous mode [ 482.564359][ T9130] syzkaller1: entered allmulticast mode [ 483.001805][ T9175] netlink: 'syz.3.16510': attribute type 13 has an invalid length. [ 483.127316][ T9175] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 483.169585][ T9184] netlink: 'syz.2.16513': attribute type 11 has an invalid length. [ 483.258957][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16515'. [ 483.302221][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16515'. [ 483.313105][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16515'. [ 483.326892][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16515'. [ 483.477512][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16520'. [ 483.486811][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16520'. [ 483.495965][ T9202] netlink: 'syz.1.16520': attribute type 6 has an invalid length. [ 483.503927][ T9202] netlink: 'syz.1.16520': attribute type 5 has an invalid length. [ 483.512429][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16520'. [ 483.528025][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16520'. [ 483.541258][ T9202] netlink: 'syz.1.16520': attribute type 6 has an invalid length. [ 483.549660][ T9202] netlink: 'syz.1.16520': attribute type 5 has an invalid length. [ 483.805972][ T9230] netlink: 204 bytes leftover after parsing attributes in process `syz.5.16532'. [ 483.876611][ T9234] netlink: 'syz.5.16533': attribute type 9 has an invalid length. [ 483.934219][ C1] net_ratelimit: 229 callbacks suppressed [ 483.934237][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.948304][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.956594][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.964899][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.973136][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.981424][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.989701][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.997957][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.006210][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.014464][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.130981][ T9322] netlink: 'syz.1.16571': attribute type 30 has an invalid length. [ 485.182070][ T9327] netlink: 'syz.1.16571': attribute type 30 has an invalid length. [ 485.534199][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 485.982555][ T9350] netlink: 'syz.2.16581': attribute type 10 has an invalid length. [ 486.949038][ T9362] 8021q: adding VLAN 0 to HW filter on device bond8 [ 487.038047][ T9371] syzkaller1: entered promiscuous mode [ 487.043592][ T9371] syzkaller1: entered allmulticast mode [ 487.847723][ T9294] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 487.928747][ T9388] __nla_validate_parse: 11 callbacks suppressed [ 487.928765][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16597'. [ 489.255636][ T9506] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16636'. [ 489.292144][ T9508] syzkaller1: entered promiscuous mode [ 489.298484][ T9508] syzkaller1: entered allmulticast mode [ 489.381025][ T9515] netlink: 'syz.5.16640': attribute type 1 has an invalid length. [ 489.403156][ T9515] bond5: entered promiscuous mode [ 489.409593][ T9515] 8021q: adding VLAN 0 to HW filter on device bond5 [ 489.439062][ T9515] 8021q: adding VLAN 0 to HW filter on device bond5 [ 489.450609][ T9515] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 489.460939][ T9515] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 489.474111][ T9515] bond5: (slave vti0): making interface the new active one [ 489.481849][ T9515] vti0: entered promiscuous mode [ 489.488343][ T9515] bond5: (slave vti0): Enslaving as an active interface with an up link [ 489.649829][ T9526] netlink: 'syz.5.16644': attribute type 3 has an invalid length. [ 489.657774][ T9526] netlink: 132 bytes leftover after parsing attributes in process `syz.5.16644'. [ 489.707435][ T9528] netlink: 24 bytes leftover after parsing attributes in process `syz.5.16645'. [ 491.134141][ C1] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured! [ 491.309783][ T9426] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 491.446529][ T9578] netlink: 'syz.3.16667': attribute type 1 has an invalid length. [ 491.470084][ T9578] 8021q: adding VLAN 0 to HW filter on device bond12 [ 491.965935][ T9604] netlink: 'syz.0.16677': attribute type 4 has an invalid length. [ 492.027192][ T9604] netlink: 'syz.0.16677': attribute type 4 has an invalid length. [ 492.274795][ T9618] net_ratelimit: 6 callbacks suppressed [ 492.274811][ T9618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.290817][ T9618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.299144][ T9618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.335204][ T9619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.352771][ T9619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.362161][ T9619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.371933][ T9619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.400597][ T9618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.408961][ T9618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.421105][ T9618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.599239][ T9635] netlink: 148 bytes leftover after parsing attributes in process `syz.0.16686'. [ 492.830263][ T9652] netlink: 68 bytes leftover after parsing attributes in process `syz.2.16696'. [ 493.012070][ T9659] netlink: 'syz.3.16700': attribute type 1 has an invalid length. [ 493.056511][ T9659] gretap3: entered allmulticast mode [ 493.064622][ T9659] bond13: (slave gretap3): making interface the new active one [ 493.073285][ T9659] bond13: (slave gretap3): Enslaving as an active interface with an up link [ 493.321775][ T9695] sctp: [Deprecated]: syz.3.16709 (pid 9695) Use of int in maxseg socket option. [ 493.321775][ T9695] Use struct sctp_assoc_value instead [ 493.466997][ T9701] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.16712'. [ 493.694137][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 493.755140][ T9717] syzkaller1: entered promiscuous mode [ 493.760778][ T9717] syzkaller1: entered allmulticast mode [ 493.826905][ T9720] bond6: entered promiscuous mode [ 493.832285][ T9720] 8021q: adding VLAN 0 to HW filter on device bond6 [ 493.889417][ T9728] netlink: 'syz.5.16724': attribute type 12 has an invalid length. [ 493.899928][ T9728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16724'. [ 493.922808][ T9728] netlink: 'syz.5.16724': attribute type 12 has an invalid length. [ 493.927531][ T9730] syzkaller1: entered promiscuous mode [ 493.940211][ T9730] syzkaller1: entered allmulticast mode [ 493.941253][ T9728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16724'. [ 494.063858][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16730'. [ 494.144618][ T9750] batadv_slave_1: entered promiscuous mode [ 494.162843][ T9749] batadv_slave_1: left promiscuous mode [ 494.460502][ T9777] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 494.567255][ T9786] netlink: 'syz.2.16746': attribute type 4 has an invalid length. [ 494.633572][ T9786] netlink: 'syz.2.16746': attribute type 4 has an invalid length. [ 494.650803][ T9790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16749'. [ 494.957555][ T9791] geneve1: left promiscuous mode [ 495.487475][T19468] lo speed is unknown, defaulting to 1000 [ 495.500123][ T9801] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16753'. [ 495.509234][T19468] syz1: Port: 1 Link DOWN [ 495.531097][ T12] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.562083][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.604619][ T9810] lo speed is unknown, defaulting to 1000 [ 495.626215][ T12] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.673803][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.698345][ T12] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.724503][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.748831][ T12] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.771771][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.803849][ T9836] sctp: [Deprecated]: syz.5.16759 (pid 9836) Use of int in maxseg socket option. [ 495.803849][ T9836] Use struct sctp_assoc_value instead [ 496.261519][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.270264][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.376177][ T9870] netlink: 192 bytes leftover after parsing attributes in process `syz.0.16770'. [ 496.407258][ T9870] netlink: 192 bytes leftover after parsing attributes in process `syz.0.16770'. [ 496.635517][ T9898] netlink: 'syz.2.16776': attribute type 4 has an invalid length. [ 496.678977][ T9898] netlink: 'syz.2.16776': attribute type 4 has an invalid length. [ 497.052553][ T9933] : entered promiscuous mode [ 497.703563][ T9970] xfrm0 speed is unknown, defaulting to 1000 [ 497.885268][ T9970] lo speed is unknown, defaulting to 1000 [ 498.001694][ T9990] pim6reg1: entered promiscuous mode [ 498.014202][ T9990] pim6reg1: entered allmulticast mode [ 498.431523][ T9995] xfrm0 speed is unknown, defaulting to 1000 [ 498.598185][ T9995] lo speed is unknown, defaulting to 1000 [ 498.598735][T10003] xfrm0 speed is unknown, defaulting to 1000 [ 498.839503][T10003] lo speed is unknown, defaulting to 1000 [ 498.899979][T10024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16811'. [ 498.945114][T10024] 8021q: adding VLAN 0 to HW filter on device bond6 [ 499.018739][T10031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16811'. [ 499.046345][T10024] 8021q: adding VLAN 0 to HW filter on device bond7 [ 499.070296][T10024] bond6: (slave bond7): Enslaving as an active interface with an up link [ 499.147882][T10031] bond6 (unregistering): (slave bond7): Releasing backup interface [ 499.158585][T10031] bond6 (unregistering): Released all slaves [ 499.465984][T10063] netlink: 'syz.3.16825': attribute type 1 has an invalid length. [ 499.555332][T10063] bond14: (slave geneve5): making interface the new active one [ 499.567196][T10063] bond14: (slave geneve5): Enslaving as an active interface with an up link [ 499.661411][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 499.704164][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 499.746928][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 499.791272][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 500.567280][T10131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16853'. [ 500.657501][T10140] netlink: 'syz.2.16852': attribute type 1 has an invalid length. [ 500.666086][T10140] netlink: 'syz.2.16852': attribute type 1 has an invalid length. [ 500.948637][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16865'. [ 500.967675][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16865'. [ 501.957343][T10210] netlink: 'syz.0.16885': attribute type 9 has an invalid length. [ 501.992814][T10212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16886'. [ 502.117217][T10219] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16889'. [ 502.533218][T10251] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.16900'. [ 502.566000][T10251] net_ratelimit: 179 callbacks suppressed [ 502.566017][T10251] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 503.060469][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16915'. [ 503.420727][T10315] netlink: 'syz.0.16926': attribute type 1 has an invalid length. [ 503.491265][T10315] bond6: (slave bridge6): making interface the new active one [ 503.500291][T10315] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 503.834676][T10342] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16932'. [ 504.696632][T10357] gretap2: entered promiscuous mode [ 505.226909][T10393] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.269425][T10393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.281260][T10393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.303585][T10393] tipc: Resetting bearer [ 505.421936][ T3017] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.433663][T10237] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 505.442584][ T3017] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.462836][ T3017] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 505.497387][ T3017] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.508367][ T3017] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.517537][ T3017] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 505.527365][ T3017] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.546545][ T3017] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.565759][ T3017] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 505.584166][ T3343] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.599346][ T3343] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.616111][ T3343] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 505.694713][T10413] netlink: 'syz.2.16965': attribute type 20 has an invalid length. [ 505.745961][T10413] netlink: 'syz.2.16965': attribute type 20 has an invalid length. [ 505.952628][T10433] syzkaller1: entered promiscuous mode [ 505.958464][T10433] syzkaller1: entered allmulticast mode [ 506.025213][T10430] xfrm0 speed is unknown, defaulting to 1000 [ 506.031773][T10435] netlink: 192 bytes leftover after parsing attributes in process `syz.2.16973'. [ 506.270274][T10430] lo speed is unknown, defaulting to 1000 [ 506.300039][T10444] xfrm0 speed is unknown, defaulting to 1000 [ 506.399414][T10456] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 506.534289][T10463] netlink: 24 bytes leftover after parsing attributes in process `syz.5.16986'. [ 506.571798][T10461] gre0: entered promiscuous mode [ 506.582362][T10461] gre0: entered allmulticast mode [ 506.601827][T10444] lo speed is unknown, defaulting to 1000 [ 506.717377][T10466] netlink: 'syz.3.16987': attribute type 1 has an invalid length. [ 506.787656][T10466] gretap4: entered allmulticast mode [ 506.798866][T10466] bond15: (slave gretap4): making interface the new active one [ 506.816723][T10472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16989'. [ 506.837371][T10466] bond15: (slave gretap4): Enslaving as an active interface with an up link [ 507.050834][T10484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16994'. [ 507.108629][T10484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16994'. [ 507.361408][T10503] vlan1: entered allmulticast mode [ 507.380944][T10496] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.394164][T10503] netlink: 14 bytes leftover after parsing attributes in process `syz.0.17003'. [ 507.394171][T10496] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.478800][T10503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.493260][T10503] bond_slave_0: left allmulticast mode [ 507.516770][T10503] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 507.536456][T10503] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.543833][T10503] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.570858][T10503] bond0 (unregistering): Released all slaves [ 507.583980][T10496] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.595859][T10496] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.631360][T10529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17009'. [ 507.732888][T10496] netdevsim netdevsim2 €Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.743659][T10496] netdevsim netdevsim2 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.770999][T10534] bond16: (slave gre2): The slave device specified does not support setting the MAC address [ 507.792175][T10536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17010'. [ 507.795205][T10534] bond16: (slave gre2): Error -95 calling set_mac_address [ 507.819049][T10536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17010'. [ 507.830265][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.838735][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.886716][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.914116][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.959266][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.976741][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.042271][ T3318] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.050767][ T3318] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.068107][T10544] macvlan3: entered allmulticast mode [ 508.111887][T10549] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17016'. [ 508.127788][T10549] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 508.135051][T10549] IPv6: NLM_F_CREATE should be set when creating new route [ 508.162629][T10551] hsr_slave_0: left promiscuous mode [ 508.175842][T10551] hsr_slave_1: left promiscuous mode [ 508.195411][T10555] netlink: 'syz.0.17019': attribute type 4 has an invalid length. [ 508.702148][T10589] sctp: [Deprecated]: syz.1.17033 (pid 10589) Use of int in max_burst socket option. [ 508.702148][T10589] Use struct sctp_assoc_value instead [ 509.088065][T10605] bridge4: entered promiscuous mode [ 509.097127][T10605] bridge4: entered allmulticast mode [ 509.500056][T10620] syzkaller0: entered promiscuous mode [ 509.510771][T10620] syzkaller0: entered allmulticast mode [ 509.547211][T10622] 8021q: adding VLAN 0 to HW filter on device bond7 [ 509.558237][T10628] bond7: option mode: unable to set because the bond device is up [ 509.805274][T10638] netlink: 'syz.5.17053': attribute type 1 has an invalid length. [ 509.844211][T10638] bond8: entered promiscuous mode [ 509.849722][T10638] 8021q: adding VLAN 0 to HW filter on device bond8 [ 509.911857][T10638] 8021q: adding VLAN 0 to HW filter on device bond8 [ 509.921525][T10638] bond8: (slave gre4): The slave device specified does not support setting the MAC address [ 509.931702][T10638] bond8: (slave gre4): Setting fail_over_mac to active for active-backup mode [ 509.943978][T10638] bond8: (slave gre4): making interface the new active one [ 509.951687][T10638] gre4: entered promiscuous mode [ 509.958625][T10638] bond8: (slave gre4): Enslaving as an active interface with an up link [ 510.016336][T10657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.047572][T10652] syzkaller1: entered promiscuous mode [ 510.064248][T10652] syzkaller1: entered allmulticast mode [ 510.337935][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 510.922158][T10717] netlink: 'syz.5.17086': attribute type 1 has an invalid length. [ 510.943037][T10717] bond9: entered promiscuous mode [ 510.953658][T10717] 8021q: adding VLAN 0 to HW filter on device bond9 [ 511.439473][T10751] syzkaller1: entered promiscuous mode [ 511.445311][T10751] syzkaller1: entered allmulticast mode [ 511.614321][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 511.853696][T10779] sctp: [Deprecated]: syz.2.17114 (pid 10779) Use of int in max_burst socket option deprecated. [ 511.853696][T10779] Use struct sctp_assoc_value instead [ 512.037097][T10798] __nla_validate_parse: 5 callbacks suppressed [ 512.037113][T10798] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.17121'. [ 512.130920][T10804] GUP no longer grows the stack in syz.0.17122 (10804): 200000003000-20000000a000 (200000001000) [ 512.131958][T10805] nbd: nbd3 already in use [ 512.150151][T10804] CPU: 0 UID: 0 PID: 10804 Comm: syz.0.17122 Not tainted syzkaller #0 PREEMPT(full) [ 512.150174][T10804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 512.150192][T10804] Call Trace: [ 512.150223][T10804] [ 512.150286][T10804] dump_stack_lvl+0xe8/0x150 [ 512.150442][T10804] __get_user_pages+0x238c/0x2720 [ 512.150490][T10804] ? __gup_longterm_locked+0xc3b/0x15c0 [ 512.150538][T10804] ? rcu_is_watching+0x15/0xb0 [ 512.150586][T10804] ? rcu_is_watching+0x15/0xb0 [ 512.150606][T10804] __gup_longterm_locked+0xd52/0x15c0 [ 512.150625][T10804] ? gup_fast_fallback+0xbc4/0x20d0 [ 512.150644][T10804] ? rcu_is_watching+0x15/0xb0 [ 512.150661][T10804] ? rcu_is_watching+0x15/0xb0 [ 512.150678][T10804] gup_fast_fallback+0x1d82/0x20d0 [ 512.150708][T10804] ? __pfx_gup_fast_fallback+0x10/0x10 [ 512.150726][T10804] ? __fget_files+0x2a/0x420 [ 512.150753][T10804] ? is_valid_gup_args+0x11f/0x200 [ 512.150771][T10804] ? get_user_pages_fast+0x4d/0xb0 [ 512.150789][T10804] __iov_iter_get_pages_alloc+0x378/0xa40 [ 512.150910][T10804] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 512.150944][T10804] iov_iter_get_pages2+0x5e/0xa0 [ 512.150967][T10804] __se_sys_vmsplice+0x7b5/0x1660 [ 512.150995][T10804] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 512.151016][T10804] ? __pfx_futex_wake+0x10/0x10 [ 512.151050][T10804] ? rcu_is_watching+0x15/0xb0 [ 512.151087][T10804] ? rcu_is_watching+0x15/0xb0 [ 512.151105][T10804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.151136][T10804] do_syscall_64+0x174/0x580 [ 512.151254][T10804] ? trace_irq_disable+0x3b/0x140 [ 512.151282][T10804] ? clear_bhb_loop+0x40/0x90 [ 512.151300][T10804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.151316][T10804] RIP: 0033:0x7f643139ce59 [ 512.151361][T10804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.151405][T10804] RSP: 002b:00007f642f5ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 512.151451][T10804] RAX: ffffffffffffffda RBX: 00007f6431615fa0 RCX: 00007f643139ce59 [ 512.151463][T10804] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 512.151474][T10804] RBP: 00007f6431432d6f R08: 0000000000000000 R09: 0000000000000000 [ 512.151484][T10804] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 512.151494][T10804] R13: 00007f6431616038 R14: 00007f6431615fa0 R15: 00007fff2a388ff8 [ 512.151513][T10804] [ 512.405276][T10805] block nbd3: NBD_DISCONNECT [ 512.409923][T10805] block nbd3: Send disconnect failed -32 [ 512.416117][T10805] block nbd3: shutting down sockets [ 512.892455][T10854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17144'. [ 513.038749][T10877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17153'. [ 513.623006][T10900] ip6gre2: entered promiscuous mode [ 513.628564][T10900] ip6gre2: entered allmulticast mode [ 514.722321][T10921] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 514.729582][T10921] IPv6: NLM_F_CREATE should be set when creating new route [ 514.919578][T10926] netlink: 'syz.3.17172': attribute type 3 has an invalid length. [ 515.921722][T10858] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 516.028148][T10939] syzkaller1: entered promiscuous mode [ 516.033789][T10939] syzkaller1: entered allmulticast mode [ 516.578190][T10965] syzkaller1: entered promiscuous mode [ 516.583873][T10965] syzkaller1: entered allmulticast mode [ 517.133092][T11006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17200'. [ 517.299685][T11012] veth0_to_bond: Caught tx_queue_len zero misconfig [ 517.841652][T11038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17213'. [ 517.875039][T11038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17213'. [ 517.907985][T11042] netlink: 20 bytes leftover after parsing attributes in process `syz.5.17216'. [ 520.389415][T11017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 520.471747][T11085] netlink: 'syz.2.17232': attribute type 4 has an invalid length. [ 520.500255][T11085] netlink: 'syz.2.17232': attribute type 4 has an invalid length. [ 520.566588][T11096] netlink: 181256 bytes leftover after parsing attributes in process `syz.3.17237'. [ 521.243277][T11142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17256'. [ 521.384198][T11154] block nbd3: server does not support multiple connections per device. [ 521.409487][T11154] block nbd3: shutting down sockets [ 521.413039][T11159] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17263'. [ 521.460048][T11159] 8021q: adding VLAN 0 to HW filter on device bond10 [ 522.870575][T11204] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 523.242857][T11282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17296'. [ 523.379035][T11297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17299'. [ 523.401082][T11297] netlink: 'syz.2.17299': attribute type 1 has an invalid length. [ 523.865449][T11326] syzkaller1: entered promiscuous mode [ 523.882586][T11326] syzkaller1: entered allmulticast mode [ 524.539578][T11353] syzkaller1: entered promiscuous mode [ 524.557301][T11353] syzkaller1: entered allmulticast mode [ 524.681182][T11361] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17314'. [ 527.329488][T11384] tipc: Failed to remove unknown binding: 66,1,1/1593835523:4069896845/4069896847 [ 527.412183][T11394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17326'. [ 527.425540][T11396] netlink: 'syz.3.17327': attribute type 1 has an invalid length. [ 527.433496][T11396] netlink: 'syz.3.17327': attribute type 4 has an invalid length. [ 527.443605][T11396] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.17327'. [ 527.458902][T11394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17326'. [ 527.578857][T11406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17329'. [ 527.775383][T11413] IPVS: Error connecting to the multicast addr [ 527.803290][T11415] veth0: entered promiscuous mode [ 527.846866][T11415] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 527.945511][T11414] veth0: left promiscuous mode [ 528.049906][T11426] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17337'. [ 528.057421][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17338'. [ 528.082604][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17336'. [ 528.209028][T11433] macvtap0: entered promiscuous mode [ 528.219641][T11433] erspan0: entered promiscuous mode [ 528.239470][T11433] macvtap0: entered allmulticast mode [ 528.274579][T11433] erspan0: entered allmulticast mode [ 528.303952][T11436] erspan0: left allmulticast mode [ 528.322332][T11436] erspan0: left promiscuous mode [ 529.244642][T11436] macvtap0: left promiscuous mode [ 529.251059][T11436] macvtap0: left allmulticast mode [ 529.312983][T11458] __nla_validate_parse: 1 callbacks suppressed [ 529.313001][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17346'. [ 529.379795][T11459] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17346'. [ 529.599229][T11469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17348'. [ 531.301518][T11442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 531.467622][T11483] geneve3: entered promiscuous mode [ 531.492491][T11487] netlink: 'syz.3.17355': attribute type 1 has an invalid length. [ 531.521394][T11487] 8021q: adding VLAN 0 to HW filter on device bond17 [ 531.612008][T11498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17359'. [ 531.730529][T11487] bond17: (slave veth5): Enslaving as an active interface with a down link [ 531.766665][T11499] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 531.773716][T11499] bond17: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 532.463537][T11520] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 532.616232][T11545] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17378'. [ 532.687797][T11553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17381'. [ 532.701507][T11553] batman_adv: batadv0: Removing interface: wlan0 [ 532.961436][T11570] netlink: 'syz.1.17387': attribute type 1 has an invalid length. [ 532.970099][T11570] netlink: 'syz.1.17387': attribute type 4 has an invalid length. [ 532.979695][T11570] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.17387'. [ 533.032967][T11570] netlink: 'syz.1.17387': attribute type 1 has an invalid length. [ 533.090259][T11570] netlink: 'syz.1.17387': attribute type 4 has an invalid length. [ 533.099439][T11570] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.17387'. [ 533.201259][T11580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17389'. [ 533.261410][T11590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17394'. [ 533.273260][T11586] : entered promiscuous mode [ 533.406450][T11607] netlink: 'syz.0.17398': attribute type 1 has an invalid length. [ 533.433152][T11607] netlink: 'syz.0.17398': attribute type 4 has an invalid length. [ 533.453687][T11607] netlink: 'syz.0.17398': attribute type 1 has an invalid length. [ 533.461898][T11607] netlink: 'syz.0.17398': attribute type 4 has an invalid length. [ 533.501523][T11615] netlink: 'syz.0.17401': attribute type 30 has an invalid length. [ 533.528820][T11614] syzkaller1: entered promiscuous mode [ 533.542292][T11614] syzkaller1: entered allmulticast mode [ 533.560471][T11615] netlink: 'syz.0.17401': attribute type 30 has an invalid length. [ 533.936866][T11634] bond0: entered promiscuous mode [ 533.944367][T11634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.007814][T11634] bond0: (slave bridge7): making interface the new active one [ 534.016265][T11634] bridge7: entered promiscuous mode [ 534.022291][T11634] bond0: (slave bridge7): Enslaving as an active interface with an up link [ 534.455433][T11664] 8021q: adding VLAN 0 to HW filter on device bond9 [ 534.485438][T11664] bond9: (slave veth9): Enslaving as an active interface with a down link [ 534.510643][T11664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.519686][T11664] bond9: (slave batadv0): making interface the new active one [ 534.529799][T11664] batadv0: entered promiscuous mode [ 534.535714][T11664] bond9: (slave batadv0): Enslaving as an active interface with an up link [ 535.325597][T11700] syzkaller0: entered promiscuous mode [ 535.331130][T11700] syzkaller0: entered allmulticast mode [ 535.482298][T11707] IPv6: Can't replace route, no match found [ 535.488452][T11707] IPv6: Can't replace route, no match found [ 535.541387][T11712] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 535.594558][T11712] tipc: Enabling of bearer rejected, failed to enable media [ 535.767619][T11723] xfrm0 speed is unknown, defaulting to 1000 [ 535.829417][T11723] lo speed is unknown, defaulting to 1000 [ 536.123832][T11746] __nla_validate_parse: 6 callbacks suppressed [ 536.123859][T11746] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17449'. [ 536.167166][T11746] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17449'. [ 536.621060][T11759] xfrm0 speed is unknown, defaulting to 1000 [ 536.790140][T11759] lo speed is unknown, defaulting to 1000 [ 536.810513][T11735] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 536.956803][T11763] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17454'. [ 537.231422][T11782] netlink: 'syz.5.17462': attribute type 11 has an invalid length. [ 537.286911][T11782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.104862][T11806] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17470'. [ 538.116418][T11806] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17470'. [ 538.191984][T11809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17471'. [ 543.614145][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 552.660909][ T4941] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 552.669900][ T4941] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 552.677203][ T4941] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 552.685036][ T4941] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 552.692377][ T4941] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 553.157389][ T4941] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 553.165276][ T4941] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 553.172448][ T4941] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 553.180267][ T4941] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 553.188132][ T4941] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 553.718789][ T5626] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 553.728286][ T5626] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 553.746887][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 553.754059][T11848] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 553.754581][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 553.768542][T11848] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 553.769195][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 553.783283][ T50] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 553.793275][ T50] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 553.799348][ T4941] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 553.808119][ T50] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 553.808813][ T4941] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 553.822938][ T4941] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 553.831943][ T50] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 553.841117][ T50] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 554.734075][ T50] Bluetooth: hci5: command tx timeout [ 555.214544][ T50] Bluetooth: hci6: command tx timeout [ 555.854111][T11848] Bluetooth: hci7: command tx timeout [ 555.854126][ T50] Bluetooth: hci8: command tx timeout [ 555.934595][T11848] Bluetooth: hci9: command tx timeout [ 556.814138][T11848] Bluetooth: hci5: command tx timeout [ 557.294125][T11848] Bluetooth: hci6: command tx timeout [ 557.695146][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.701456][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.934146][T11848] Bluetooth: hci7: command tx timeout [ 557.934634][ T50] Bluetooth: hci8: command tx timeout [ 558.014074][ T50] Bluetooth: hci9: command tx timeout [ 558.894692][ T50] Bluetooth: hci5: command tx timeout [ 559.374111][ T50] Bluetooth: hci6: command tx timeout [ 560.014089][ T50] Bluetooth: hci7: command tx timeout [ 560.024082][ T50] Bluetooth: hci8: command tx timeout [ 560.094055][ T50] Bluetooth: hci9: command tx timeout [ 560.974079][ T50] Bluetooth: hci5: command tx timeout [ 561.454576][ T50] Bluetooth: hci6: command tx timeout [ 562.094400][ T50] Bluetooth: hci8: command tx timeout [ 562.094411][T11848] Bluetooth: hci7: command tx timeout [ 562.174346][ T50] Bluetooth: hci9: command tx timeout [ 612.719323][T11848] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 612.726714][T11848] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 612.734582][T11848] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 612.742277][T11848] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 612.750067][T11848] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 613.220425][T11848] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 613.227885][T11848] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 613.235556][T11848] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 613.243165][T11848] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 613.250662][T11848] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 613.761290][T11848] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 613.769856][T11848] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 613.777335][T11848] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 613.785698][T11848] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 613.793209][T11848] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 613.811945][T11848] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 613.821158][T11848] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 613.828493][T11848] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 613.836349][T11848] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 613.843794][T11848] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 613.865911][ T50] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 613.873212][ T50] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 613.881536][ T50] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 613.891771][ T50] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 613.899298][ T50] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 614.014240][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 614.814290][T11848] Bluetooth: hci10: command tx timeout [ 615.294116][T11848] Bluetooth: hci11: command tx timeout [ 615.854248][T11848] Bluetooth: hci12: command tx timeout [ 615.934095][T11848] Bluetooth: hci14: command tx timeout [ 615.934489][ T50] Bluetooth: hci13: command tx timeout [ 616.894298][ T50] Bluetooth: hci10: command tx timeout [ 617.374054][ T50] Bluetooth: hci11: command tx timeout [ 617.934182][ T50] Bluetooth: hci12: command tx timeout [ 618.014064][ T50] Bluetooth: hci13: command tx timeout [ 618.014075][T11848] Bluetooth: hci14: command tx timeout [ 618.974072][ T50] Bluetooth: hci10: command tx timeout [ 619.135103][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 619.141440][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.454053][ T50] Bluetooth: hci11: command tx timeout [ 620.014065][ T50] Bluetooth: hci12: command tx timeout [ 620.094054][ T50] Bluetooth: hci13: command tx timeout [ 620.094102][T11848] Bluetooth: hci14: command tx timeout [ 621.054038][T11848] Bluetooth: hci10: command tx timeout [ 621.534068][T11848] Bluetooth: hci11: command tx timeout [ 622.094025][T11848] Bluetooth: hci12: command tx timeout [ 622.174139][T11848] Bluetooth: hci14: command tx timeout [ 622.175217][ T50] Bluetooth: hci13: command tx timeout [ 672.783742][T11848] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 672.791061][T11848] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 672.798587][T11848] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 672.806520][T11848] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 672.813987][T11848] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 673.285954][T11848] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 673.293234][T11848] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 673.300673][T11848] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 673.309103][T11848] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 673.316883][T11848] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 673.827005][ T50] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 673.836486][ T50] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 673.843767][ T50] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 673.864677][ T50] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 673.872170][ T50] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 673.896619][ T50] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 673.904267][ T50] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 673.911535][ T50] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 673.919356][ T50] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 673.928414][ T50] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 673.934004][ T5626] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 673.947384][T11848] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 673.954968][T11848] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 673.962617][T11848] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 673.970799][T11848] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 674.894065][T11848] Bluetooth: hci15: command tx timeout [ 675.374083][T11848] Bluetooth: hci16: command tx timeout [ 675.934079][T11927] Bluetooth: hci17: command tx timeout [ 676.014181][T11927] Bluetooth: hci19: command tx timeout [ 676.014273][T11926] Bluetooth: hci18: command tx timeout [ 676.974108][T11926] Bluetooth: hci15: command tx timeout [ 677.454492][T11926] Bluetooth: hci16: command tx timeout [ 677.534159][T11926] Bluetooth: hci6: command 0x0406 tx timeout [ 677.534696][T11927] Bluetooth: hci7: command 0x0406 tx timeout [ 677.540286][T11926] Bluetooth: hci9: command 0x0406 tx timeout [ 677.546683][ T50] Bluetooth: hci8: command 0x0406 tx timeout [ 677.552406][T11926] Bluetooth: hci5: command 0x0406 tx timeout [ 678.014119][T11848] Bluetooth: hci17: command tx timeout [ 678.094031][T11848] Bluetooth: hci19: command tx timeout [ 678.094848][ T4941] Bluetooth: hci18: command tx timeout [ 679.054097][ T4941] Bluetooth: hci15: command tx timeout [ 679.534034][ T4941] Bluetooth: hci16: command tx timeout [ 680.094191][ T4941] Bluetooth: hci17: command tx timeout [ 680.175046][ T4941] Bluetooth: hci19: command tx timeout [ 680.175077][T11848] Bluetooth: hci18: command tx timeout [ 680.574727][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.581046][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 681.134046][T11848] Bluetooth: hci15: command tx timeout [ 681.614027][T11848] Bluetooth: hci16: command tx timeout [ 682.174119][T11848] Bluetooth: hci17: command tx timeout [ 682.254403][T11848] Bluetooth: hci19: command tx timeout [ 682.254452][ T4941] Bluetooth: hci18: command tx timeout [ 686.974056][ T30] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 686.981554][ T30] Not tainted syzkaller #0 [ 686.986919][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 686.995728][ T30] task:kworker/0:0 state:D stack:24952 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 687.007761][ T30] Workqueue: events netdev_rx_mode_work [ 687.013422][ T30] Call Trace: [ 687.017045][ T30] [ 687.019971][ T30] __schedule+0x17d9/0x56c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 687.024539][ T30] ? kasan_save_track+0x4f/0x80 [ 687.029687][ T30] ? kasan_save_track+0x3e/0x80 [ 687.034582][ T30] ? kasan_save_free_info+0x40/0x50 [ 687.039964][ T30] ? __kasan_slab_free+0x5c/0x80 [ 687.045406][ T30] ? kfree+0x1c5/0x640 [ 687.049487][ T30] ? iterate_cleanup_work+0x110/0x180 [ 687.055085][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 687.060143][ T30] ? __pfx___schedule+0x10/0x10 [ 687.065095][ T30] ? rcu_is_watching+0x15/0xb0 [ 687.070007][ T30] ? rcu_is_watching+0x15/0xb0 [ 687.075663][ T30] ? lock_release+0x4b/0x3c0 [ 687.080285][ T30] ? rcu_is_watching+0x15/0xb0 [ 687.085260][ T30] ? schedule+0x90/0x360 [ 687.089523][ T30] ? trace_irq_enable+0x3b/0x140 [ 687.094707][ T30] schedule+0x164/0x360 [ 687.098886][ T30] schedule_preempt_disabled+0x13/0x30 [ 687.105069][ T30] __mutex_lock+0x7bf/0x1550 [ 687.109755][ T30] ? __mutex_lock+0x5d4/0x1550 [ 687.114766][ T30] ? netdev_rx_mode_work+0x18/0x3c0 [ 687.119994][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 687.125261][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 687.130659][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 687.137309][ T30] ? rcu_is_watching+0x15/0xb0 [ 687.142101][ T30] ? lock_acquire+0x5f/0x350 [ 687.160820][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 687.177548][ T30] netdev_rx_mode_work+0x18/0x3c0 [ 687.182612][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 687.189449][ T30] process_scheduled_works+0xa8e/0x14e0 [ 687.195138][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 687.201129][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 687.206316][ T30] ? assign_work+0x3cf/0x5d0 [ 687.210921][ T30] worker_thread+0xa47/0xfb0 [ 687.215895][ T30] kthread+0x388/0x470 [ 687.219970][ T30] ? __pfx_worker_thread+0x10/0x10 [ 687.225390][ T30] ? __pfx_kthread+0x10/0x10 [ 687.229966][ T30] ret_from_fork+0x514/0xb70 [ 687.234596][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 687.239700][ T30] ? __switch_to+0xc89/0x1420 [ 687.244394][ T30] ? __pfx_kthread+0x10/0x10 [ 687.248977][ T30] ret_from_fork_asm+0x1a/0x30 [ 687.253727][ T30] [ 687.257094][ T30] INFO: task kworker/u8:0:12 blocked for more than 143 seconds. [ 687.264769][ T30] Not tainted syzkaller #0 [ 687.269696][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 687.278386][ T30] task:kworker/u8:0 state:D stack:22200 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 687.290654][ T30] Workqueue: events_unbound linkwatch_event [ 687.296632][ T30] Call Trace: [ 687.299918][ T30] [ 687.302844][ T30] __schedule+0x17d9/0x56c0 [ 687.307417][ T30] ? trace_pelt_se_tp+0x3b/0x150 [ 687.312370][ T30] ? __pfx___schedule+0x10/0x10 [ 687.317566][ T30] ? rcu_is_watching+0x15/0xb0 [ 687.322321][ T30] ? rcu_is_watching+0x15/0xb0 [ 687.327096][ T30] ? lock_release+0x4b/0x3c0 [ 687.331687][ T30] ? wq_worker_sleeping+0x66/0x250 [ 687.336812][ T30] schedule+0x164/0x360 [ 687.340966][ T30] schedule_preempt_disabled+0x13/0x30 [ 687.346735][ T30] __mutex_lock+0x7bf/0x1550 [ 687.351318][ T30] ? __mutex_lock+0x5d4/0x1550 [ 687.356094][ T30] ? linkwatch_event+0xe/0x60 [ 687.360769][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 687.365822][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 687.371540][ T30] ? rcu_is_watching+0x15/0xb0 [ 687.376705][ T30] ? rcu_is_watching+0x15/0xb0 [ 687.381470][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 687.387231][ T30] linkwatch_event+0xe/0x60 [ 687.391729][ T30] process_scheduled_works+0xa8e/0x14e0 [ 687.397301][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 687.403276][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 687.408616][ T30] ? assign_work+0x3cf/0x5d0 [ 687.413191][ T30] worker_thread+0xa47/0xfb0 [ 687.417810][ T30] kthread+0x388/0x470 [ 687.421876][ T30] ? __pfx_worker_thread+0x10/0x10 [ 687.427029][ T30] ? __pfx_kthread+0x10/0x10 [ 687.431618][ T30] ret_from_fork+0x514/0xb70 [ 687.436536][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 687.441634][ T30] ? __switch_to+0xc89/0x1420 [ 687.446335][ T30] ? __pfx_kthread+0x10/0x10 [ 687.450915][ T30] ret_from_fork_asm+0x1a/0x30 [ 687.455789][ T30] [ 687.458892][ T30] INFO: task kworker/u8:10:3318 blocked for more than 143 seconds. [ 687.467328][ T30] Not tainted syzkaller #0 [ 687.472260][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 687.480938][ T30] task:kworker/u8:10 state:D stack:22648 pid:3318 tgid:3318 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 687.492943][ T30] Workqueue: netns cleanup_net [ 687.498125][ T30] Call Trace: [ 687.501396][ T30] [ 687.504349][ T30] __schedule+0x17d9/0x56c0 [ 687.508859][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 687.513867][ T30] ? rcu_is_watching+0x15/0xb0 [ 687.518645][ T30] ? __pfx___schedule+0x10/0x10 [ 687.523490][ T30] ? rcu_is_watching+0x15/0xb0 [ 687.528572][ T30] ? rcu_is_watching+0x15/0xb0 [ 687.533340][ T30] ? lock_release+0x4b/0x3c0 [ 687.538044][ T30] ? wq_worker_sleeping+0x66/0x250 [ 687.543180][ T30] schedule+0x164/0x360 [ 687.547374][ T30] schedule_preempt_disabled+0x13/0x30 [ 687.552835][ T30] __mutex_lock+0x7bf/0x1550 [ 687.557782][ T30] ? __mutex_lock+0x5d4/0x1550 [ 687.562537][ T30] ? ops_undo_list+0x28e/0x8d0 [ 687.567306][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 687.572333][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 687.577479][ T30] ? _raw_spin_unlock+0x28/0x50 [ 687.582326][ T30] ? iput+0xb84/0xf00 [ 687.586668][ T30] ? netns_bpf_run_array_detach+0x88/0x190 [ 687.592483][ T30] ? bpf_prog_array_free+0x31/0x40 [ 687.597604][ T30] ops_undo_list+0x28e/0x8d0 [ 687.602193][ T30] ? __pfx_ops_undo_list+0x10/0x10 [ 687.607323][ T30] ? idr_destroy+0x218/0x290 [ 687.611969][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 687.617741][ T30] cleanup_net+0x572/0x810 [ 687.622163][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 687.627130][ T30] ? lock_acquire+0x5f/0x350 [ 687.631729][ T30] ? rcu_is_watching+0x15/0xb0 [ 687.636527][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 687.642249][ T30] process_scheduled_works+0xa8e/0x14e0 [ 687.648128][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 687.654143][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 687.659169][ T30] ? assign_work+0x3cf/0x5d0 [ 687.663741][ T30] worker_thread+0xa47/0xfb0 [ 687.668361][ T30] kthread+0x388/0x470 [ 687.672429][ T30] ? __pfx_worker_thread+0x10/0x10 [ 687.677923][ T30] ? __pfx_kthread+0x10/0x10 [ 687.682504][ T30] ret_from_fork+0x514/0xb70 [ 687.687099][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 687.692204][ T30] ? __switch_to+0xc89/0x1420 [ 687.696953][ T30] ? __pfx_kthread+0x10/0x10 [ 687.701540][ T30] ret_from_fork_asm+0x1a/0x30 [ 687.706628][ T30] [ 687.709641][ T30] INFO: task kworker/u8:11:3343 blocked for more than 144 seconds. [ 687.719417][ T30] Not tainted syzkaller #0 [ 687.724385][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 687.733044][ T30] task:kworker/u8:11 state:D stack:22648 pid:3343 tgid:3343 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 687.745358][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 687.751419][ T30] Call Trace: [ 687.754716][ T30] [ 687.757645][ T30] __schedule+0x17d9/0x56c0 [ 687.762133][ T30] ? deref_stack_reg+0x18e/0x220 [ 687.767104][ T30] ? unwind_next_frame+0x8f/0x2550 [ 687.772215][ T30] ? unwind_next_frame+0x1baf/0x2550 [ 687.778105][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 687.783058][ T30] ? unwind_next_frame+0x8f/0x2550 [ 687.788186][ T30] ? arch_stack_walk+0x11b/0x150 [ 687.793126][ T30] ? __pfx___schedule+0x10/0x10 [ 687.798010][ T30] ? rcu_is_watching+0x15/0xb0 [ 687.802773][ T30] ? rcu_is_watching+0x15/0xb0 [ 687.807902][ T30] ? lock_release+0x4b/0x3c0 [ 687.812487][ T30] ? wq_worker_sleeping+0x66/0x250 [ 687.817625][ T30] schedule+0x164/0x360 [ 687.821779][ T30] schedule_preempt_disabled+0x13/0x30 [ 687.827266][ T30] __mutex_lock+0x7bf/0x1550 [ 687.831857][ T30] ? __mutex_lock+0x5d4/0x1550 [ 687.836934][ T30] ? addrconf_dad_work+0x116/0x15c0 [ 687.842123][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 687.847171][ T30] addrconf_dad_work+0x116/0x15c0 [ 687.852218][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 687.857782][ T30] ? rcu_is_watching+0x15/0xb0 [ 687.862563][ T30] ? lock_acquire+0x5f/0x350 [ 687.867476][ T30] ? rcu_is_watching+0x15/0xb0 [ 687.872228][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 687.877951][ T30] process_scheduled_works+0xa8e/0x14e0 [ 687.883501][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 687.889503][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 687.894779][ T30] ? assign_work+0x3cf/0x5d0 [ 687.899357][ T30] worker_thread+0xa47/0xfb0 [ 687.903973][ T30] ? __kthread_parkme+0x71/0x1f0 [ 687.908908][ T30] kthread+0x388/0x470 [ 687.912954][ T30] ? __pfx_worker_thread+0x10/0x10 [ 687.918096][ T30] ? __pfx_kthread+0x10/0x10 [ 687.922683][ T30] ret_from_fork+0x514/0xb70 [ 687.927653][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 687.932752][ T30] ? __switch_to+0xc89/0x1420 [ 687.937448][ T30] ? __pfx_kthread+0x10/0x10 [ 687.942033][ T30] ret_from_fork_asm+0x1a/0x30 [ 687.946836][ T30] [ 687.949906][ T30] INFO: task kworker/1:15:19479 blocked for more than 144 seconds. [ 687.958110][ T30] Not tainted syzkaller #0 [ 687.963057][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 687.971737][ T30] task:kworker/1:15 state:D stack:21512 pid:19479 tgid:19479 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 687.983748][ T30] Workqueue: events cfg80211_destroy_iface_wk [ 687.990210][ T30] Call Trace: [ 687.993476][ T30] [ 687.996420][ T30] __schedule+0x17d9/0x56c0 [ 688.000924][ T30] ? __kasan_slab_free+0x5c/0x80 [ 688.005878][ T30] ? process_scheduled_works+0xa8e/0x14e0 [ 688.011598][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 688.016934][ T30] ? __pfx___schedule+0x10/0x10 [ 688.021772][ T30] ? rcu_is_watching+0x15/0xb0 [ 688.026551][ T30] ? rcu_is_watching+0x15/0xb0 [ 688.031320][ T30] ? lock_release+0x4b/0x3c0 [ 688.035932][ T30] ? rcu_is_watching+0x15/0xb0 [ 688.040696][ T30] ? schedule+0x90/0x360 [ 688.045361][ T30] ? trace_irq_enable+0x3b/0x140 [ 688.050300][ T30] schedule+0x164/0x360 [ 688.054483][ T30] schedule_preempt_disabled+0x13/0x30 [ 688.059946][ T30] __mutex_lock+0x7bf/0x1550 [ 688.064562][ T30] ? __mutex_lock+0x5d4/0x1550 [ 688.069445][ T30] ? cfg80211_destroy_iface_wk+0x19/0x30 [ 688.075410][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 688.080430][ T30] ? lock_acquire+0x5f/0x350 [ 688.085048][ T30] ? rcu_is_watching+0x15/0xb0 [ 688.089808][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 688.095618][ T30] cfg80211_destroy_iface_wk+0x19/0x30 [ 688.101088][ T30] process_scheduled_works+0xa8e/0x14e0 [ 688.106956][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 688.112921][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 688.117965][ T30] ? assign_work+0x3cf/0x5d0 [ 688.122556][ T30] worker_thread+0xa47/0xfb0 [ 688.127172][ T30] ? __kthread_parkme+0x71/0x1f0 [ 688.132113][ T30] kthread+0x388/0x470 [ 688.136488][ T30] ? __pfx_worker_thread+0x10/0x10 [ 688.141586][ T30] ? __pfx_kthread+0x10/0x10 [ 688.146182][ T30] ret_from_fork+0x514/0xb70 [ 688.150768][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 688.155908][ T30] ? __switch_to+0xc89/0x1420 [ 688.160590][ T30] ? __pfx_kthread+0x10/0x10 [ 688.165679][ T30] ret_from_fork_asm+0x1a/0x30 [ 688.170460][ T30] [ 688.173517][ T30] INFO: task kworker/0:16:9811 blocked for more than 144 seconds. [ 688.181568][ T30] Not tainted syzkaller #0 [ 688.186601][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 688.195376][ T30] task:kworker/0:16 state:D stack:24848 pid:9811 tgid:9811 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 688.207717][ T30] Workqueue: infiniband ib_cache_event_task [ 688.213689][ T30] Call Trace: [ 688.216983][ T30] [ 688.219911][ T30] __schedule+0x17d9/0x56c0 [ 688.224437][ T30] ? lock_release+0x4b/0x3c0 [ 688.229026][ T30] ? unwind_next_frame+0x1baf/0x2550 [ 688.234658][ T30] ? deref_stack_reg+0x18e/0x220 [ 688.239607][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 688.244646][ T30] ? __pfx___schedule+0x10/0x10 [ 688.249492][ T30] ? rcu_is_watching+0x15/0xb0 [ 688.254451][ T30] ? rcu_is_watching+0x15/0xb0 [ 688.259250][ T30] ? lock_release+0x4b/0x3c0 [ 688.263835][ T30] ? rcu_is_watching+0x15/0xb0 [ 688.268944][ T30] ? schedule+0x90/0x360 [ 688.273177][ T30] ? trace_irq_enable+0x3b/0x140 [ 688.278140][ T30] schedule+0x164/0x360 [ 688.282302][ T30] schedule_preempt_disabled+0x13/0x30 [ 688.287816][ T30] __mutex_lock+0x7bf/0x1550 [ 688.292412][ T30] ? __mutex_lock+0x5d4/0x1550 [ 688.297511][ T30] ? ib_get_eth_speed+0x173/0x7f0 [ 688.302614][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 688.307650][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 688.312763][ T30] ? _raw_spin_unlock+0x28/0x50 [ 688.317630][ T30] ? ib_device_get_netdev+0x220/0x2f0 [ 688.323002][ T30] ib_get_eth_speed+0x173/0x7f0 [ 688.328168][ T30] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 688.333530][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 688.338732][ T30] ? rxe_query_port+0x6b/0x3d0 [ 688.343590][ T30] rxe_query_port+0x93/0x3d0 [ 688.348188][ T30] ib_query_port+0x16e/0x830 [ 688.352775][ T30] ib_cache_update+0x1ba/0xc50 [ 688.357847][ T30] ? trace_hrtimer_start+0x82/0x200 [ 688.363056][ T30] ? hrtimer_start_range_ns_common+0x812/0xb90 [ 688.369222][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 688.374270][ T30] ? __pfx_ib_cache_update+0x10/0x10 [ 688.379537][ T30] ? rcu_is_watching+0x15/0xb0 [ 688.384783][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 688.390507][ T30] ? rcu_is_watching+0x15/0xb0 [ 688.395293][ T30] ? lock_acquire+0x5f/0x350 [ 688.399883][ T30] ib_cache_event_task+0xd3/0x1c0 [ 688.404921][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 688.410642][ T30] process_scheduled_works+0xa8e/0x14e0 [ 688.416609][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 688.422591][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 688.427631][ T30] ? assign_work+0x3cf/0x5d0 [ 688.432220][ T30] worker_thread+0xa47/0xfb0 [ 688.436838][ T30] ? __kthread_parkme+0x71/0x1f0 [ 688.441778][ T30] kthread+0x388/0x470 [ 688.446152][ T30] ? __pfx_worker_thread+0x10/0x10 [ 688.451249][ T30] ? __pfx_kthread+0x10/0x10 [ 688.455856][ T30] ret_from_fork+0x514/0xb70 [ 688.460440][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 688.465565][ T30] ? __switch_to+0xc89/0x1420 [ 688.470240][ T30] ? __pfx_kthread+0x10/0x10 [ 688.475135][ T30] ret_from_fork_asm+0x1a/0x30 [ 688.479890][ T30] [ 688.482905][ T30] INFO: task syz.5.17462:11782 blocked for more than 144 seconds. [ 688.490764][ T30] Not tainted syzkaller #0 [ 688.495730][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 688.504724][ T30] task:syz.5.17462 state:D stack:22520 pid:11782 tgid:11781 ppid:9268 task_flags:0x400140 flags:0x00080002 [ 688.516644][ T30] Call Trace: [ 688.519914][ T30] [ 688.522827][ T30] __schedule+0x17d9/0x56c0 [ 688.527370][ T30] ? irqentry_exit+0x218/0x8f0 [ 688.532154][ T30] ? trace_irq_disable+0x3b/0x140 [ 688.537616][ T30] ? __pfx___schedule+0x10/0x10 [ 688.542457][ T30] ? rcu_is_watching+0x15/0xb0 [ 688.547235][ T30] ? rcu_is_watching+0x15/0xb0 [ 688.551991][ T30] ? lock_release+0x4b/0x3c0 [ 688.556601][ T30] ? rcu_is_watching+0x15/0xb0 [ 688.561365][ T30] schedule+0x164/0x360 [ 688.565834][ T30] schedule_preempt_disabled+0x13/0x30 [ 688.571280][ T30] __mutex_lock+0x7bf/0x1550 [ 688.575966][ T30] ? __mutex_lock+0x5d4/0x1550 [ 688.580748][ T30] ? __ethtool_get_link_ksettings+0x109/0x250 [ 688.586915][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 688.591944][ T30] ? igmp_group_added+0x238/0x910 [ 688.597391][ T30] ? igmpv3_del_delrec+0x204/0x710 [ 688.602520][ T30] __ethtool_get_link_ksettings+0x109/0x250 [ 688.608435][ T30] bond_netdev_event+0x643/0xf80 [ 688.613483][ T30] ? __pfx_bond_netdev_event+0x10/0x10 [ 688.618952][ T30] ? __pfx_inetdev_event+0x10/0x10 [ 688.624313][ T30] ? ipmr_device_event+0x1f6/0x220 [ 688.629467][ T30] notifier_call_chain+0x1a5/0x3d0 [ 688.634606][ T30] __dev_notify_flags+0x1aa/0x310 [ 688.639708][ T30] ? __pfx___dev_notify_flags+0x10/0x10 [ 688.645274][ T30] ? __dev_change_flags+0x5f1/0x820 [ 688.650489][ T30] ? __pfx___dev_change_flags+0x10/0x10 [ 688.656740][ T30] netif_change_flags+0xde/0x1b0 [ 688.661688][ T30] dev_change_flags+0x128/0x260 [ 688.666558][ T30] vlan_device_event+0x1b4e/0x1f00 [ 688.671746][ T30] ? packet_notifier+0xf1b/0xf70 [ 688.676777][ T30] ? br_device_event+0x282/0x9c0 [ 688.681763][ T30] ? __pfx_phonet_device_notify+0x10/0x10 [ 688.687833][ T30] ? __pfx_vlan_device_event+0x10/0x10 [ 688.693283][ T30] ? bcm_notifier+0xa9/0x890 [ 688.697942][ T30] ? nlmsg_notify+0x142/0x1a0 [ 688.702692][ T30] ? raw_notifier+0x9d/0x7d0 [ 688.707303][ T30] ? cgw_notifier+0x314/0x380 [ 688.711996][ T30] notifier_call_chain+0x1a5/0x3d0 [ 688.717427][ T30] __dev_notify_flags+0x1aa/0x310 [ 688.722441][ T30] ? __pfx___dev_notify_flags+0x10/0x10 [ 688.727996][ T30] ? __dev_change_flags+0x5f1/0x820 [ 688.733191][ T30] ? __pfx___dev_change_flags+0x10/0x10 [ 688.738770][ T30] ? netif_rx_mode_sync+0x15d/0x1e0 [ 688.744249][ T30] ? trace_irq_enable+0x3b/0x140 [ 688.749173][ T30] netif_change_flags+0xde/0x1b0 [ 688.754137][ T30] do_setlink+0xdd6/0x4670 [ 688.758555][ T30] ? __pfx_do_setlink+0x10/0x10 [ 688.763385][ T30] ? stack_trace_save+0xa9/0x100 [ 688.768347][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 688.773733][ T30] ? __mutex_trylock_common+0x15f/0x270 [ 688.779675][ T30] ? __pfx___mutex_trylock_common+0x10/0x10 [ 688.785593][ T30] ? rcu_is_watching+0x15/0xb0 [ 688.790356][ T30] ? trace_contention_end+0x3d/0x140 [ 688.795689][ T30] ? __mutex_lock+0x30d/0x1550 [ 688.800458][ T30] ? rtnl_newlink+0x8a3/0x1bd0 [ 688.805536][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 688.810552][ T30] ? ns_capable+0x89/0xe0 [ 688.815145][ T30] ? rtnl_link_get_net_capable+0xd3/0x310 [ 688.820880][ T30] rtnl_newlink+0x148e/0x1bd0 [ 688.826108][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 688.831151][ T30] ? kasan_save_track+0x4f/0x80 [ 688.836354][ T30] ? kasan_save_track+0x3e/0x80 [ 688.841193][ T30] ? kasan_save_free_info+0x40/0x50 [ 688.846405][ T30] ? unwind_next_frame+0x8f/0x2550 [ 688.851510][ T30] ? rcu_is_watching+0x15/0xb0 [ 688.856298][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 688.861501][ T30] ? rcu_is_watching+0x15/0xb0 [ 688.866584][ T30] ? unwind_next_frame+0x8f/0x2550 [ 688.871682][ T30] ? rcu_is_watching+0x15/0xb0 [ 688.876454][ T30] ? unwind_next_frame+0x8f/0x2550 [ 688.881561][ T30] ? rcu_is_watching+0x15/0xb0 [ 688.886363][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 688.891565][ T30] ? rcu_is_watching+0x15/0xb0 [ 688.896699][ T30] ? rcu_is_watching+0x15/0xb0 [ 688.901486][ T30] ? lock_release+0x4b/0x3c0 [ 688.906108][ T30] ? lock_release+0x4b/0x3c0 [ 688.910697][ T30] ? is_bpf_text_address+0x292/0x2b0 [ 688.916001][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 688.921198][ T30] ? kernel_text_address+0xa5/0xe0 [ 688.926616][ T30] ? __kernel_text_address+0xd/0x30 [ 688.931802][ T30] ? unwind_get_return_address+0x4d/0x90 [ 688.937449][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 688.943602][ T30] ? arch_stack_walk+0xfb/0x150 [ 688.948464][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 688.953573][ T30] ? rcu_is_watching+0x15/0xb0 [ 688.958663][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 688.963678][ T30] ? rcu_is_watching+0x15/0xb0 [ 688.968450][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 688.973470][ T30] ? lock_release+0x4b/0x3c0 [ 688.978075][ T30] ? bpf_lsm_capable+0x9/0x20 [ 688.982744][ T30] ? security_capable+0x7e/0x2c0 [ 688.988104][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 688.993118][ T30] rtnetlink_rcv_msg+0x802/0xc00 [ 688.998058][ T30] ? kasan_save_track+0x3e/0x80 [ 689.002908][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 689.008044][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 689.013505][ T30] ? __netlink_lookup+0xc6/0x8b0 [ 689.018828][ T30] ? rcu_is_watching+0x15/0xb0 [ 689.023587][ T30] netlink_rcv_skb+0x226/0x4a0 [ 689.028386][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 689.033842][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 689.039160][ T30] ? net_generic+0x1e/0x240 [ 689.043658][ T30] ? net_generic+0x1e/0x240 [ 689.048594][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 689.053794][ T30] netlink_unicast+0x7bb/0x940 [ 689.058582][ T30] netlink_sendmsg+0x813/0xb40 [ 689.063356][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 689.068797][ T30] ? futex_unqueue+0x22/0x240 [ 689.073494][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 689.078761][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 689.084407][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 689.089695][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 689.094578][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 689.099866][ T30] ? lock_release+0x4b/0x3c0 [ 689.104476][ T30] ? import_iovec+0x73/0xa0 [ 689.108979][ T30] ___sys_sendmsg+0x2a5/0x360 [ 689.113644][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 689.119189][ T30] ? futex_wait+0x2a2/0x390 [ 689.123690][ T30] ? __fget_files+0x2a/0x420 [ 689.128307][ T30] ? __fget_files+0x3a2/0x420 [ 689.132994][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 689.137984][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 689.143449][ T30] ? rcu_is_watching+0x15/0xb0 [ 689.148568][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.154682][ T30] do_syscall_64+0x174/0x580 [ 689.159275][ T30] ? clear_bhb_loop+0x40/0x90 [ 689.163977][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.169860][ T30] RIP: 0033:0x7f164f39ce59 [ 689.174584][ T30] RSP: 002b:00007f1650260028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 689.182980][ T30] RAX: ffffffffffffffda RBX: 00007f164f615fa0 RCX: 00007f164f39ce59 [ 689.190968][ T30] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 689.198954][ T30] RBP: 00007f164f432d6f R08: 0000000000000000 R09: 0000000000000000 [ 689.207238][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.215398][ T30] R13: 00007f164f616038 R14: 00007f164f615fa0 R15: 00007ffd464e52e8 [ 689.223402][ T30] [ 689.226460][ T30] INFO: task syz.5.17462:11787 blocked for more than 145 seconds. [ 689.234537][ T30] Not tainted syzkaller #0 [ 689.239453][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 689.248157][ T30] task:syz.5.17462 state:D stack:26648 pid:11787 tgid:11781 ppid:9268 task_flags:0x400140 flags:0x00080002 [ 689.260096][ T30] Call Trace: [ 689.263376][ T30] [ 689.267047][ T30] __schedule+0x17d9/0x56c0 [ 689.271580][ T30] ? trace_irq_enable+0x3b/0x140 [ 689.276579][ T30] ? __nla_validate_parse+0xb0d/0x2d50 [ 689.282151][ T30] ? __pfx___schedule+0x10/0x10 [ 689.287022][ T30] ? rcu_is_watching+0x15/0xb0 [ 689.291780][ T30] ? rcu_is_watching+0x15/0xb0 [ 689.297047][ T30] ? lock_release+0x4b/0x3c0 [ 689.301634][ T30] ? rcu_is_watching+0x15/0xb0 [ 689.306419][ T30] schedule+0x164/0x360 [ 689.310576][ T30] schedule_preempt_disabled+0x13/0x30 [ 689.316056][ T30] __mutex_lock+0x7bf/0x1550 [ 689.320648][ T30] ? __mutex_lock+0x5d4/0x1550 [ 689.325757][ T30] ? rtnl_newlink+0x8a3/0x1bd0 [ 689.330513][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 689.335562][ T30] ? ns_capable+0x89/0xe0 [ 689.339892][ T30] ? rtnl_link_get_net_capable+0xd3/0x310 [ 689.345635][ T30] rtnl_newlink+0x8a3/0x1bd0 [ 689.350224][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 689.355601][ T30] ? unwind_next_frame+0x8f/0x2550 [ 689.360702][ T30] ? rcu_is_watching+0x15/0xb0 [ 689.365507][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 689.370704][ T30] ? rcu_is_watching+0x15/0xb0 [ 689.375499][ T30] ? rcu_is_watching+0x15/0xb0 [ 689.380270][ T30] ? unwind_next_frame+0x8f/0x2550 [ 689.385683][ T30] ? rcu_is_watching+0x15/0xb0 [ 689.390483][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 689.395723][ T30] ? rcu_is_watching+0x15/0xb0 [ 689.400482][ T30] ? rcu_is_watching+0x15/0xb0 [ 689.405282][ T30] ? lock_release+0x4b/0x3c0 [ 689.409879][ T30] ? lock_release+0x4b/0x3c0 [ 689.414788][ T30] ? is_bpf_text_address+0x292/0x2b0 [ 689.420071][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 689.425296][ T30] ? kernel_text_address+0xa5/0xe0 [ 689.430401][ T30] ? __kernel_text_address+0xd/0x30 [ 689.435608][ T30] ? unwind_get_return_address+0x4d/0x90 [ 689.441236][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 689.447703][ T30] ? arch_stack_walk+0xfb/0x150 [ 689.452548][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 689.457803][ T30] ? rcu_is_watching+0x15/0xb0 [ 689.462584][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 689.467625][ T30] ? rcu_is_watching+0x15/0xb0 [ 689.472384][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 689.477730][ T30] ? lock_release+0x4b/0x3c0 [ 689.482312][ T30] ? bpf_lsm_capable+0x9/0x20 [ 689.487003][ T30] ? security_capable+0x7e/0x2c0 [ 689.491941][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 689.497016][ T30] rtnetlink_rcv_msg+0x802/0xc00 [ 689.501977][ T30] ? kasan_save_track+0x3e/0x80 [ 689.507294][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 689.512413][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 689.517897][ T30] ? __netlink_lookup+0xc6/0x8b0 [ 689.522829][ T30] ? rcu_is_watching+0x15/0xb0 [ 689.527621][ T30] netlink_rcv_skb+0x226/0x4a0 [ 689.532422][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 689.538214][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 689.543508][ T30] ? net_generic+0x1e/0x240 [ 689.548025][ T30] ? net_generic+0x1e/0x240 [ 689.552525][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 689.557745][ T30] netlink_unicast+0x7bb/0x940 [ 689.562513][ T30] netlink_sendmsg+0x813/0xb40 [ 689.567601][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 689.572880][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 689.577844][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 689.583126][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 689.588434][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 689.593200][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 689.598851][ T30] ? lock_release+0x4b/0x3c0 [ 689.603435][ T30] ? import_iovec+0x73/0xa0 [ 689.608003][ T30] ___sys_sendmsg+0x2a5/0x360 [ 689.612693][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 689.618001][ T30] ? futex_wake+0x51b/0x5f0 [ 689.622540][ T30] ? __fget_files+0x2a/0x420 [ 689.627530][ T30] ? __fget_files+0x3a2/0x420 [ 689.632220][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 689.637203][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 689.642670][ T30] ? rcu_is_watching+0x15/0xb0 [ 689.647483][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.653547][ T30] do_syscall_64+0x174/0x580 [ 689.658483][ T30] ? trace_irq_disable+0x3b/0x140 [ 689.663503][ T30] ? clear_bhb_loop+0x40/0x90 [ 689.668207][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.674125][ T30] RIP: 0033:0x7f164f39ce59 [ 689.678523][ T30] RSP: 002b:00007f165023f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 689.687298][ T30] RAX: ffffffffffffffda RBX: 00007f164f616090 RCX: 00007f164f39ce59 [ 689.695941][ T30] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000005 [ 689.703945][ T30] RBP: 00007f164f432d6f R08: 0000000000000000 R09: 0000000000000000 [ 689.711915][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.720217][ T30] R13: 00007f164f616128 R14: 00007f164f616090 R15: 00007ffd464e52e8 [ 689.728225][ T30] [ 689.731244][ T30] INFO: task syz.3.17467:11797 blocked for more than 146 seconds. [ 689.739083][ T30] Not tainted syzkaller #0 [ 689.744409][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 689.753059][ T30] task:syz.3.17467 state:D stack:28216 pid:11797 tgid:11796 ppid:5621 task_flags:0x400140 flags:0x00080002 [ 689.764999][ T30] Call Trace: [ 689.768272][ T30] [ 689.771184][ T30] __schedule+0x17d9/0x56c0 [ 689.776142][ T30] ? rcu_is_watching+0x15/0xb0 [ 689.780909][ T30] ? trace_sched_exit_tp+0x3a/0x130 [ 689.786150][ T30] ? __pfx___schedule+0x10/0x10 [ 689.790996][ T30] ? rcu_is_watching+0x15/0xb0 [ 689.795780][ T30] ? rcu_is_watching+0x15/0xb0 [ 689.800541][ T30] ? lock_release+0x4b/0x3c0 [ 689.805472][ T30] ? rcu_is_watching+0x15/0xb0 [ 689.810230][ T30] schedule+0x164/0x360 [ 689.814424][ T30] schedule_preempt_disabled+0x13/0x30 [ 689.819882][ T30] __mutex_lock+0x7bf/0x1550 [ 689.824498][ T30] ? __mutex_lock+0x5d4/0x1550 [ 689.829262][ T30] ? packet_mc_add+0x28/0xb80 [ 689.834319][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 689.839334][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 689.844723][ T30] ? aa_label_sk_perm+0x532/0x6e0 [ 689.849747][ T30] ? __might_fault+0xaf/0x130 [ 689.854609][ T30] ? rcu_is_watching+0x15/0xb0 [ 689.859373][ T30] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 689.865066][ T30] packet_mc_add+0x28/0xb80 [ 689.869561][ T30] ? lock_release+0x4b/0x3c0 [ 689.874167][ T30] ? __might_fault+0xaf/0x130 [ 689.878848][ T30] ? __might_fault+0xcb/0x130 [ 689.883505][ T30] packet_setsockopt+0xd28/0x1510 [ 689.888553][ T30] ? __pfx_packet_setsockopt+0x10/0x10 [ 689.894274][ T30] ? put_user_ifreq+0x7a/0xc0 [ 689.898944][ T30] ? aa_sk_perm+0x6d5/0x900 [ 689.903427][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 689.908284][ T30] ? lock_release+0x4b/0x3c0 [ 689.912884][ T30] ? __se_sys_futex+0x3a8/0x450 [ 689.917744][ T30] ? aa_sock_opt_perm+0xff/0x1a0 [ 689.922676][ T30] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 689.928665][ T30] ? __pfx_packet_setsockopt+0x10/0x10 [ 689.934152][ T30] do_sock_setsockopt+0x17c/0x1b0 [ 689.939164][ T30] __x64_sys_setsockopt+0x13d/0x1b0 [ 689.944375][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.950436][ T30] do_syscall_64+0x174/0x580 [ 689.955355][ T30] ? trace_irq_disable+0x3b/0x140 [ 689.960373][ T30] ? clear_bhb_loop+0x40/0x90 [ 689.965117][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.971007][ T30] RIP: 0033:0x7f7c0ff9ce59 [ 689.975460][ T30] RSP: 002b:00007f7c10ec1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 689.983871][ T30] RAX: ffffffffffffffda RBX: 00007f7c10215fa0 RCX: 00007f7c0ff9ce59 [ 689.992177][ T30] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000005 [ 690.000172][ T30] RBP: 00007f7c10032d6f R08: 0000000000000010 R09: 0000000000000000 [ 690.008167][ T30] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 690.016460][ T30] R13: 00007f7c10216038 R14: 00007f7c10215fa0 R15: 00007fff942580c8 [ 690.024465][ T30] [ 690.027483][ T30] INFO: task syz.3.17467:11801 blocked for more than 146 seconds. [ 690.035398][ T30] Not tainted syzkaller #0 [ 690.040323][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 690.049311][ T30] task:syz.3.17467 state:D stack:29144 pid:11801 tgid:11796 ppid:5621 task_flags:0x400040 flags:0x00080002 [ 690.061247][ T30] Call Trace: [ 690.064549][ T30] [ 690.067587][ T30] __schedule+0x17d9/0x56c0 [ 690.072105][ T30] ? stack_trace_save+0xa9/0x100 [ 690.077441][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 690.082808][ T30] ? __pfx___schedule+0x10/0x10 [ 690.087685][ T30] ? rcu_is_watching+0x15/0xb0 [ 690.092449][ T30] ? rcu_is_watching+0x15/0xb0 [ 690.097255][ T30] ? lock_release+0x4b/0x3c0 [ 690.101858][ T30] ? rcu_is_watching+0x15/0xb0 [ 690.106956][ T30] schedule+0x164/0x360 [ 690.111128][ T30] schedule_preempt_disabled+0x13/0x30 [ 690.116609][ T30] __mutex_lock+0x7bf/0x1550 [ 690.121234][ T30] ? __mutex_lock+0x5d4/0x1550 [ 690.126017][ T30] ? packet_mc_add+0x28/0xb80 [ 690.130689][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 690.136045][ T30] ? aa_label_sk_perm+0x532/0x6e0 [ 690.141065][ T30] ? __might_fault+0xaf/0x130 [ 690.145757][ T30] ? rcu_is_watching+0x15/0xb0 [ 690.150517][ T30] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 690.155916][ T30] packet_mc_add+0x28/0xb80 [ 690.160417][ T30] ? lock_release+0x4b/0x3c0 [ 690.165336][ T30] ? __might_fault+0xaf/0x130 [ 690.170004][ T30] ? __might_fault+0xcb/0x130 [ 690.174714][ T30] packet_setsockopt+0xd28/0x1510 [ 690.179735][ T30] ? __pfx_packet_setsockopt+0x10/0x10 [ 690.185216][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 690.190248][ T30] ? aa_sk_perm+0x6d5/0x900 [ 690.195187][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 690.200047][ T30] ? lock_release+0x4b/0x3c0 [ 690.204658][ T30] ? aa_sock_opt_perm+0xff/0x1a0 [ 690.209599][ T30] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 690.215175][ T30] ? __pfx_packet_setsockopt+0x10/0x10 [ 690.220632][ T30] do_sock_setsockopt+0x17c/0x1b0 [ 690.225995][ T30] __x64_sys_setsockopt+0x13d/0x1b0 [ 690.231192][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.237281][ T30] do_syscall_64+0x174/0x580 [ 690.241872][ T30] ? trace_irq_disable+0x3b/0x140 [ 690.246932][ T30] ? clear_bhb_loop+0x40/0x90 [ 690.251605][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.258030][ T30] RIP: 0033:0x7f7c0ff9ce59 [ 690.262446][ T30] RSP: 002b:00007f7c10ea0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 690.270897][ T30] RAX: ffffffffffffffda RBX: 00007f7c10216090 RCX: 00007f7c0ff9ce59 [ 690.278898][ T30] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000005 [ 690.287199][ T30] RBP: 00007f7c10032d6f R08: 0000000000000010 R09: 0000000000000000 [ 690.295183][ T30] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.303151][ T30] R13: 00007f7c10216128 R14: 00007f7c10216090 R15: 00007fff942580c8 [ 690.311144][ T30] [ 690.314417][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 690.323420][ T30] INFO: task syz.3.17467:11804 blocked for more than 146 seconds. [ 690.331310][ T30] Not tainted syzkaller #0 [ 690.336417][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 690.345495][ T30] task:syz.3.17467 state:D stack:27208 pid:11804 tgid:11796 ppid:5621 task_flags:0x400140 flags:0x00080002 [ 690.357424][ T30] Call Trace: [ 690.360699][ T30] [ 690.363610][ T30] __schedule+0x17d9/0x56c0 [ 690.368164][ T30] ? stack_trace_save+0xa9/0x100 [ 690.373108][ T30] ? stack_depot_save_flags+0x33/0x800 [ 690.378917][ T30] ? __pfx___schedule+0x10/0x10 [ 690.383761][ T30] ? rcu_is_watching+0x15/0xb0 [ 690.388549][ T30] ? rcu_is_watching+0x15/0xb0 [ 690.393304][ T30] ? lock_release+0x4b/0x3c0 [ 690.397914][ T30] ? rcu_is_watching+0x15/0xb0 [ 690.402673][ T30] schedule+0x164/0x360 [ 690.407148][ T30] schedule_preempt_disabled+0x13/0x30 [ 690.412595][ T30] __mutex_lock+0x7bf/0x1550 [ 690.417207][ T30] ? __mutex_lock+0x5d4/0x1550 [ 690.421975][ T30] ? rtnl_newlink+0x8a3/0x1bd0 [ 690.426768][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 690.431793][ T30] ? ns_capable+0x89/0xe0 [ 690.436456][ T30] ? rtnl_link_get_net_capable+0xd3/0x310 [ 690.442169][ T30] rtnl_newlink+0x8a3/0x1bd0 [ 690.446789][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 690.451821][ T30] ? unwind_next_frame+0x8f/0x2550 [ 690.456956][ T30] ? rcu_is_watching+0x15/0xb0 [ 690.461723][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 690.467309][ T30] ? rcu_is_watching+0x15/0xb0 [ 690.472059][ T30] ? rcu_is_watching+0x15/0xb0 [ 690.476852][ T30] ? unwind_next_frame+0x8f/0x2550 [ 690.481964][ T30] ? rcu_is_watching+0x15/0xb0 [ 690.486746][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 690.491946][ T30] ? rcu_is_watching+0x15/0xb0 [ 690.497107][ T30] ? rcu_is_watching+0x15/0xb0 [ 690.501875][ T30] ? lock_release+0x4b/0x3c0 [ 690.506484][ T30] ? lock_release+0x4b/0x3c0 [ 690.511073][ T30] ? is_bpf_text_address+0x292/0x2b0 [ 690.516380][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 690.521577][ T30] ? kernel_text_address+0xa5/0xe0 [ 690.527009][ T30] ? __kernel_text_address+0xd/0x30 [ 690.532192][ T30] ? unwind_get_return_address+0x4d/0x90 [ 690.537832][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 690.544019][ T30] ? arch_stack_walk+0xfb/0x150 [ 690.548867][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 690.553874][ T30] ? lock_release+0x4b/0x3c0 [ 690.558865][ T30] ? bpf_lsm_capable+0x9/0x20 [ 690.563532][ T30] ? security_capable+0x7e/0x2c0 [ 690.568488][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 690.573510][ T30] rtnetlink_rcv_msg+0x802/0xc00 [ 690.578537][ T30] ? kasan_save_track+0x3e/0x80 [ 690.583393][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 690.589009][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 690.594510][ T30] ? __netlink_lookup+0xc6/0x8b0 [ 690.599446][ T30] ? rcu_is_watching+0x15/0xb0 [ 690.604259][ T30] netlink_rcv_skb+0x226/0x4a0 [ 690.609025][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 690.614802][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 690.620078][ T30] ? net_generic+0x1e/0x240 [ 690.624587][ T30] ? net_generic+0x1e/0x240 [ 690.629104][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 690.634340][ T30] netlink_unicast+0x7bb/0x940 [ 690.639111][ T30] netlink_sendmsg+0x813/0xb40 [ 690.643861][ T30] ? format_decode+0xdc/0xe20 [ 690.648909][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 690.654282][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 690.659232][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 690.664553][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 690.669846][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 690.674925][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 690.680205][ T30] ? lock_release+0x4b/0x3c0 [ 690.684812][ T30] ? import_iovec+0x73/0xa0 [ 690.689320][ T30] ___sys_sendmsg+0x2a5/0x360 [ 690.694024][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 690.699224][ T30] ? kfree+0x1c5/0x640 [ 690.703300][ T30] ? tomoyo_path_number_perm+0x219/0x5f0 [ 690.709490][ T30] ? __fget_files+0x2a/0x420 [ 690.714113][ T30] ? __fget_files+0x3a2/0x420 [ 690.718789][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 690.723736][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 690.729223][ T30] ? kfree+0x4d/0x640 [ 690.733213][ T30] ? __pfx_kcov_ioctl+0x10/0x10 [ 690.738715][ T30] ? rcu_is_watching+0x15/0xb0 [ 690.743488][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.749573][ T30] do_syscall_64+0x174/0x580 [ 690.754246][ T30] ? trace_irq_disable+0x3b/0x140 [ 690.759255][ T30] ? clear_bhb_loop+0x40/0x90 [ 690.763938][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.769823][ T30] RIP: 0033:0x7f7c0ff9ce59 [ 690.774578][ T30] RSP: 002b:00007f7c10e7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 690.782997][ T30] RAX: ffffffffffffffda RBX: 00007f7c10216180 RCX: 00007f7c0ff9ce59 [ 690.791014][ T30] RDX: 0000000000040040 RSI: 0000200000000200 RDI: 0000000000000004 [ 690.799004][ T30] RBP: 00007f7c10032d6f R08: 0000000000000000 R09: 0000000000000000 [ 690.807421][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.815975][ T30] R13: 00007f7c10216218 R14: 00007f7c10216180 R15: 00007fff942580c8 [ 690.824162][ T30] [ 690.827339][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 690.836975][ T30] INFO: task syz.0.17471:11809 blocked for more than 147 seconds. [ 690.845210][ T30] Not tainted syzkaller #0 [ 690.850162][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 690.859162][ T30] task:syz.0.17471 state:D stack:25512 pid:11809 tgid:11808 ppid:5622 task_flags:0x400140 flags:0x00080002 [ 690.871542][ T30] Call Trace: [ 690.875119][ T30] [ 690.878064][ T30] __schedule+0x17d9/0x56c0 [ 690.882571][ T30] ? _printk+0xdd/0x130 [ 690.887128][ T30] ? __pfx__printk+0x10/0x10 [ 690.891749][ T30] ? __pfx___schedule+0x10/0x10 [ 690.896948][ T30] ? rcu_is_watching+0x15/0xb0 [ 690.901730][ T30] ? rcu_is_watching+0x15/0xb0 [ 690.906776][ T30] ? lock_release+0x4b/0x3c0 [ 690.911387][ T30] ? rcu_is_watching+0x15/0xb0 [ 690.916233][ T30] schedule+0x164/0x360 [ 690.920402][ T30] schedule_preempt_disabled+0x13/0x30 [ 690.926289][ T30] __mutex_lock+0x7bf/0x1550 [ 690.930889][ T30] ? __mutex_lock+0x5d4/0x1550 [ 690.935700][ T30] ? rtnl_newlink+0x8a3/0x1bd0 [ 690.940486][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 690.945524][ T30] ? ns_capable+0x89/0xe0 [ 690.949854][ T30] ? rtnl_link_get_net_capable+0xd3/0x310 [ 690.955916][ T30] rtnl_newlink+0x8a3/0x1bd0 [ 690.960513][ T30] ? netlink_deliver_tap+0x19c/0x1b0 [ 690.965810][ T30] ? netlink_unicast+0x77f/0x940 [ 690.970745][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 690.975808][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.981879][ T30] ? rcu_is_watching+0x15/0xb0 [ 690.986954][ T30] ? trace_irq_enable+0x3b/0x140 [ 690.991883][ T30] ? nlmon_xmit+0xb0/0x100 [ 690.996376][ T30] ? kmem_cache_free+0x182/0x650 [ 691.001315][ T30] ? dev_hard_start_xmit+0x7c7/0x830 [ 691.006614][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 691.011716][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 691.017132][ T30] ? rcu_is_watching+0x15/0xb0 [ 691.021886][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 691.027014][ T30] ? trace_irq_enable+0x3b/0x140 [ 691.031950][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 691.037092][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 691.042202][ T30] ? __local_bh_enable_ip+0xd0/0x130 [ 691.047860][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 691.052964][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 691.058040][ T30] ? lock_release+0x4b/0x3c0 [ 691.062636][ T30] ? bpf_lsm_capable+0x9/0x20 [ 691.067395][ T30] ? security_capable+0x7e/0x2c0 [ 691.072419][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 691.077773][ T30] rtnetlink_rcv_msg+0x802/0xc00 [ 691.082703][ T30] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 691.087828][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 691.093289][ T30] ? ref_tracker_free+0x689/0x830 [ 691.098344][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 691.103737][ T30] netlink_rcv_skb+0x226/0x4a0 [ 691.108812][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 691.114308][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 691.119594][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 691.124810][ T30] netlink_unicast+0x7bb/0x940 [ 691.129574][ T30] netlink_sendmsg+0x813/0xb40 [ 691.134836][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 691.140128][ T30] ? futex_unqueue+0x22/0x240 [ 691.144834][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 691.149767][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 691.155102][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 691.160398][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 691.165480][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 691.170756][ T30] ? lock_release+0x4b/0x3c0 [ 691.175371][ T30] ? import_iovec+0x73/0xa0 [ 691.179879][ T30] ___sys_sendmsg+0x2a5/0x360 [ 691.184592][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 691.189791][ T30] ? futex_wait+0x2a2/0x390 [ 691.194609][ T30] ? __fget_files+0x2a/0x420 [ 691.199188][ T30] ? __fget_files+0x3a2/0x420 [ 691.203865][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 691.208813][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 691.214303][ T30] ? rcu_is_watching+0x15/0xb0 [ 691.219050][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.225520][ T30] do_syscall_64+0x174/0x580 [ 691.230099][ T30] ? trace_irq_disable+0x3b/0x140 [ 691.235147][ T30] ? clear_bhb_loop+0x40/0x90 [ 691.239821][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.245724][ T30] RIP: 0033:0x7f643139ce59 [ 691.250136][ T30] RSP: 002b:00007f642f5ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 691.258862][ T30] RAX: ffffffffffffffda RBX: 00007f6431615fa0 RCX: 00007f643139ce59 [ 691.266851][ T30] RDX: 0000000000040000 RSI: 0000200000000040 RDI: 0000000000000003 [ 691.274872][ T30] RBP: 00007f6431432d6f R08: 0000000000000000 R09: 0000000000000000 [ 691.282837][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.291244][ T30] R13: 00007f6431616038 R14: 00007f6431615fa0 R15: 00007fff2a388ff8 [ 691.299432][ T30] [ 691.302449][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 691.311490][ T30] INFO: task syz.0.17471:11810 blocked for more than 147 seconds. [ 691.319577][ T30] Not tainted syzkaller #0 [ 691.324525][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 691.333178][ T30] task:syz.0.17471 state:D stack:27256 pid:11810 tgid:11808 ppid:5622 task_flags:0x400140 flags:0x00080002 [ 691.345405][ T30] Call Trace: [ 691.348675][ T30] [ 691.351586][ T30] __schedule+0x17d9/0x56c0 [ 691.356160][ T30] ? rcu_is_watching+0x15/0xb0 [ 691.360918][ T30] ? trace_sched_exit_tp+0x3a/0x130 [ 691.366126][ T30] ? __pfx___schedule+0x10/0x10 [ 691.370980][ T30] ? rcu_is_watching+0x15/0xb0 [ 691.376254][ T30] ? rcu_is_watching+0x15/0xb0 [ 691.381006][ T30] ? lock_release+0x4b/0x3c0 [ 691.385607][ T30] ? rcu_is_watching+0x15/0xb0 [ 691.390368][ T30] schedule+0x164/0x360 [ 691.394540][ T30] schedule_preempt_disabled+0x13/0x30 [ 691.400013][ T30] __mutex_lock+0x7bf/0x1550 [ 691.404982][ T30] ? __mutex_lock+0x5d4/0x1550 [ 691.409741][ T30] ? bpf_xdp_link_attach+0x120/0x990 [ 691.415056][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 691.420110][ T30] ? __futex_wait+0x358/0x400 [ 691.424818][ T30] ? __pfx___futex_wait+0x10/0x10 [ 691.429842][ T30] bpf_xdp_link_attach+0x120/0x990 [ 691.435273][ T30] ? try_to_wake_up+0x8c5/0x14d0 [ 691.440200][ T30] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 691.445848][ T30] ? __fget_files+0x2a/0x420 [ 691.450431][ T30] ? rcu_is_watching+0x15/0xb0 [ 691.455232][ T30] ? rcu_is_watching+0x15/0xb0 [ 691.460007][ T30] ? __fget_files+0x3a2/0x420 [ 691.465220][ T30] ? __fget_files+0x2a/0x420 [ 691.469836][ T30] ? attach_type_to_prog_type+0x298/0x490 [ 691.475584][ T30] ? bpf_prog_attach_check_attach_type+0x39c/0x540 [ 691.482102][ T30] link_create+0x4cb/0x820 [ 691.486555][ T30] __sys_bpf+0x468/0x950 [ 691.490797][ T30] ? __pfx___sys_bpf+0x10/0x10 [ 691.495885][ T30] ? __pfx___se_sys_futex+0x10/0x10 [ 691.501073][ T30] ? rcu_is_watching+0x15/0xb0 [ 691.505857][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.511917][ T30] __x64_sys_bpf+0x7c/0x90 [ 691.516361][ T30] do_syscall_64+0x174/0x580 [ 691.520962][ T30] ? trace_irq_disable+0x3b/0x140 [ 691.526354][ T30] ? clear_bhb_loop+0x40/0x90 [ 691.531017][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.537041][ T30] RIP: 0033:0x7f643139ce59 [ 691.541467][ T30] RSP: 002b:00007f642f5cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 691.549883][ T30] RAX: ffffffffffffffda RBX: 00007f6431616090 RCX: 00007f643139ce59 [ 691.558113][ T30] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 000000000000001c [ 691.566104][ T30] RBP: 00007f6431432d6f R08: 0000000000000000 R09: 0000000000000000 [ 691.574121][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.582089][ T30] R13: 00007f6431616128 R14: 00007f6431616090 R15: 00007fff2a388ff8 [ 691.590424][ T30] [ 691.593432][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 691.602466][ T30] INFO: task syz.2.17472:11812 blocked for more than 147 seconds. [ 691.610286][ T30] Not tainted syzkaller #0 [ 691.615543][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 691.624222][ T30] task:syz.2.17472 state:D stack:28792 pid:11812 tgid:11811 ppid:5635 task_flags:0x400040 flags:0x00080002 [ 691.636173][ T30] Call Trace: [ 691.639448][ T30] [ 691.642374][ T30] __schedule+0x17d9/0x56c0 [ 691.647300][ T30] ? __pfx___schedule+0x10/0x10 [ 691.652139][ T30] ? rcu_is_watching+0x15/0xb0 [ 691.656926][ T30] ? rcu_is_watching+0x15/0xb0 [ 691.661689][ T30] ? lock_release+0x4b/0x3c0 [ 691.666296][ T30] ? rcu_is_watching+0x15/0xb0 [ 691.671055][ T30] schedule+0x164/0x360 [ 691.675546][ T30] schedule_preempt_disabled+0x13/0x30 [ 691.680995][ T30] __mutex_lock+0x7bf/0x1550 [ 691.685609][ T30] ? __mutex_lock+0x5d4/0x1550 [ 691.690370][ T30] ? __tun_chr_ioctl+0x3bc/0x1e10 [ 691.695542][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 691.700621][ T30] ? lock_release+0x4b/0x3c0 [ 691.705557][ T30] ? __might_fault+0xaf/0x130 [ 691.710223][ T30] ? __might_fault+0xcb/0x130 [ 691.714917][ T30] __tun_chr_ioctl+0x3bc/0x1e10 [ 691.719769][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 691.725071][ T30] ? __fget_files+0x2a/0x420 [ 691.729696][ T30] ? __fget_files+0x3a2/0x420 [ 691.734680][ T30] ? __fget_files+0x2a/0x420 [ 691.739261][ T30] ? bpf_lsm_file_ioctl+0x9/0x20 [ 691.744208][ T30] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 691.749320][ T30] __se_sys_ioctl+0xfc/0x170 [ 691.753892][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.759992][ T30] do_syscall_64+0x174/0x580 [ 691.764957][ T30] ? trace_irq_disable+0x3b/0x140 [ 691.769986][ T30] ? clear_bhb_loop+0x40/0x90 [ 691.775084][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.780980][ T30] RIP: 0033:0x7fafb739ce59 [ 691.785415][ T30] RSP: 002b:00007fafb833f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 691.793826][ T30] RAX: ffffffffffffffda RBX: 00007fafb7615fa0 RCX: 00007fafb739ce59 [ 691.802117][ T30] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 0000000000000003 [ 691.810116][ T30] RBP: 00007fafb7432d6f R08: 0000000000000000 R09: 0000000000000000 [ 691.818105][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.826392][ T30] R13: 00007fafb7616038 R14: 00007fafb7615fa0 R15: 00007ffdefdfb148 [ 691.834381][ T30] [ 691.837409][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 691.846449][ T30] INFO: task syz.2.17472:11815 blocked for more than 148 seconds. [ 691.854584][ T30] Not tainted syzkaller #0 [ 691.859501][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 691.868176][ T30] task:syz.2.17472 state:D stack:27128 pid:11815 tgid:11811 ppid:5635 task_flags:0x400140 flags:0x00080002 [ 691.880118][ T30] Call Trace: [ 691.883395][ T30] [ 691.886774][ T30] __schedule+0x17d9/0x56c0 [ 691.891273][ T30] ? trace_irq_enable+0x3b/0x140 [ 691.896232][ T30] ? __pfx___schedule+0x10/0x10 [ 691.901086][ T30] ? rcu_is_watching+0x15/0xb0 [ 691.905881][ T30] ? rcu_is_watching+0x15/0xb0 [ 691.910637][ T30] ? lock_release+0x4b/0x3c0 [ 691.915553][ T30] ? rcu_is_watching+0x15/0xb0 [ 691.920305][ T30] schedule+0x164/0x360 [ 691.924477][ T30] schedule_preempt_disabled+0x13/0x30 [ 691.929929][ T30] __mutex_lock+0x7bf/0x1550 [ 691.934715][ T30] ? __mutex_lock+0x5d4/0x1550 [ 691.939491][ T30] ? devinet_ioctl+0x2fb/0x1c50 [ 691.944683][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 691.949699][ T30] ? bpf_lsm_capable+0x9/0x20 [ 691.954387][ T30] ? security_capable+0x7e/0x2c0 [ 691.959323][ T30] devinet_ioctl+0x2fb/0x1c50 [ 691.964026][ T30] ? lock_release+0x4b/0x3c0 [ 691.968615][ T30] ? __might_fault+0xaf/0x130 [ 691.973273][ T30] ? __pfx_devinet_ioctl+0x10/0x10 [ 691.978741][ T30] ? get_user_ifreq+0x12b/0x180 [ 691.983581][ T30] inet_ioctl+0x42a/0x560 [ 691.987923][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 691.992769][ T30] ? lock_release+0x4b/0x3c0 [ 691.997396][ T30] ? kfree+0x1c5/0x640 [ 692.001470][ T30] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 692.007509][ T30] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 692.012561][ T30] ? packet_ioctl+0x26b/0x350 [ 692.017274][ T30] sock_do_ioctl+0x101/0x320 [ 692.021874][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 692.026993][ T30] ? hook_file_ioctl+0x1f0/0x5c0 [ 692.032006][ T30] sock_ioctl+0x57a/0x7e0 [ 692.036644][ T30] ? lock_release+0x4b/0x3c0 [ 692.041232][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 692.046090][ T30] ? __fget_files+0x2a/0x420 [ 692.050675][ T30] ? __fget_files+0x3a2/0x420 [ 692.055368][ T30] ? __fget_files+0x2a/0x420 [ 692.059952][ T30] ? bpf_lsm_file_ioctl+0x9/0x20 [ 692.065358][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 692.070223][ T30] __se_sys_ioctl+0xfc/0x170 [ 692.074852][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.080910][ T30] do_syscall_64+0x174/0x580 [ 692.085516][ T30] ? trace_irq_disable+0x3b/0x140 [ 692.090536][ T30] ? clear_bhb_loop+0x40/0x90 [ 692.095582][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.101461][ T30] RIP: 0033:0x7fafb739ce59 [ 692.105883][ T30] RSP: 002b:00007fafb831e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 692.114324][ T30] RAX: ffffffffffffffda RBX: 00007fafb7616090 RCX: 00007fafb739ce59 [ 692.122290][ T30] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000005 [ 692.130653][ T30] RBP: 00007fafb7432d6f R08: 0000000000000000 R09: 0000000000000000 [ 692.138671][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 692.146667][ T30] R13: 00007fafb7616128 R14: 00007fafb7616090 R15: 00007ffdefdfb148 [ 692.154963][ T30] [ 692.157970][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 692.167014][ T30] INFO: task syz.1.17475:11821 blocked for more than 148 seconds. [ 692.174891][ T30] Not tainted syzkaller #0 [ 692.179819][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 692.188832][ T30] task:syz.1.17475 state:D stack:27896 pid:11821 tgid:11820 ppid:5628 task_flags:0x400140 flags:0x00080002 [ 692.200754][ T30] Call Trace: [ 692.204046][ T30] [ 692.206969][ T30] __schedule+0x17d9/0x56c0 [ 692.211465][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 692.217228][ T30] ? stack_depot_save_flags+0x33/0x800 [ 692.222676][ T30] ? __pfx___schedule+0x10/0x10 [ 692.227531][ T30] ? rcu_is_watching+0x15/0xb0 [ 692.232299][ T30] ? rcu_is_watching+0x15/0xb0 [ 692.237116][ T30] ? lock_release+0x4b/0x3c0 [ 692.241752][ T30] ? rcu_is_watching+0x15/0xb0 [ 692.246893][ T30] schedule+0x164/0x360 [ 692.251040][ T30] schedule_preempt_disabled+0x13/0x30 [ 692.256523][ T30] __mutex_lock+0x7bf/0x1550 [ 692.261115][ T30] ? __mutex_lock+0x5d4/0x1550 [ 692.265895][ T30] ? register_netdevice_notifier_net+0x1a/0xa0 [ 692.272045][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 692.277389][ T30] ? lock_release+0x4b/0x3c0 [ 692.281968][ T30] ? net_generic+0x1e/0x240 [ 692.286582][ T30] register_netdevice_notifier_net+0x1a/0xa0 [ 692.292563][ T30] ops_init+0x35d/0x5d0 [ 692.296739][ T30] setup_net+0x118/0x350 [ 692.300977][ T30] ? __pfx_setup_net+0x10/0x10 [ 692.306049][ T30] ? preinit_net+0x492/0x7b0 [ 692.310628][ T30] copy_net_ns+0x4f9/0x720 [ 692.315069][ T30] create_new_namespaces+0x3f0/0x6b0 [ 692.320356][ T30] ? security_capable+0x7e/0x2c0 [ 692.325313][ T30] unshare_nsproxy_namespaces+0x149/0x190 [ 692.331027][ T30] ksys_unshare+0x57d/0xa00 [ 692.335971][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 692.341002][ T30] ? rcu_is_watching+0x15/0xb0 [ 692.345779][ T30] ? rcu_is_watching+0x15/0xb0 [ 692.350538][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.356630][ T30] __x64_sys_unshare+0x38/0x50 [ 692.361408][ T30] do_syscall_64+0x174/0x580 [ 692.366401][ T30] ? trace_irq_disable+0x3b/0x140 [ 692.371420][ T30] ? clear_bhb_loop+0x40/0x90 [ 692.376118][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.382009][ T30] RIP: 0033:0x7f607d79ce59 [ 692.386443][ T30] RSP: 002b:00007f607e6f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 692.395112][ T30] RAX: ffffffffffffffda RBX: 00007f607da15fa0 RCX: 00007f607d79ce59 [ 692.403067][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 692.411042][ T30] RBP: 00007f607d832d6f R08: 0000000000000000 R09: 0000000000000000 [ 692.419192][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 692.427597][ T30] R13: 00007f607da16038 R14: 00007f607da15fa0 R15: 00007ffe07ed3df8 [ 692.435599][ T30] [ 692.438612][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 692.447663][ T30] INFO: lockdep is turned off. [ 692.452493][ T30] NMI backtrace for cpu 0 [ 692.452504][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 692.452515][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 692.452520][ T30] Call Trace: [ 692.452524][ T30] [ 692.452528][ T30] dump_stack_lvl+0xe8/0x150 [ 692.452543][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 692.452555][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 692.452584][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 692.452594][ T30] sys_info+0x135/0x170 [ 692.452602][ T30] watchdog+0xfd7/0x1030 [ 692.452616][ T30] ? watchdog+0x1c7/0x1030 [ 692.452629][ T30] kthread+0x388/0x470 [ 692.452637][ T30] ? __pfx_watchdog+0x10/0x10 [ 692.452647][ T30] ? __pfx_kthread+0x10/0x10 [ 692.452656][ T30] ret_from_fork+0x514/0xb70 [ 692.452665][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 692.452673][ T30] ? __switch_to+0xc89/0x1420 [ 692.452686][ T30] ? __pfx_kthread+0x10/0x10 [ 692.452694][ T30] ret_from_fork_asm+0x1a/0x30 [ 692.452708][ T30] [ 692.452712][ T30] Sending NMI from CPU 0 to CPUs 1: [ 692.563032][ C1] NMI backtrace for cpu 1 [ 692.563048][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 692.563066][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 692.563076][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 692.563102][ C1] Code: 0c 80 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 a7 21 00 fb f4 7c 03 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 692.563116][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000246 [ 692.563130][ C1] RAX: ffff88812537c000 RBX: ffffffff819a5170 RCX: 0000000080000001 [ 692.563141][ C1] RDX: 0000000000000001 RSI: ffffffff8c291100 RDI: ffffffff819a5170 [ 692.563152][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 692.563164][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 692.563175][ C1] R13: 1ffff11003b5f000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 692.563187][ C1] FS: 0000000000000000(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 [ 692.563200][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 692.563210][ C1] CR2: 000055723d312ee8 CR3: 000000000e746000 CR4: 00000000003526f0 [ 692.563225][ C1] Call Trace: [ 692.563231][ C1] [ 692.563236][ C1] default_idle+0x9/0x20 [ 692.563258][ C1] default_idle_call+0x72/0xb0 [ 692.563281][ C1] do_idle+0x2e0/0x540 [ 692.563304][ C1] ? __pfx_do_idle+0x10/0x10 [ 692.563330][ C1] cpu_startup_entry+0x43/0x60 [ 692.563351][ C1] start_secondary+0x101/0x110 [ 692.563374][ C1] common_startup_64+0x13e/0x157 [ 692.563400][ C1] [ 692.564025][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 692.564043][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 692.564060][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 692.564069][ T30] Call Trace: [ 692.564076][ T30] [ 692.564083][ T30] vpanic+0x56c/0xa60 [ 692.564104][ T30] ? __pfx_vpanic+0x10/0x10 [ 692.564121][ T30] ? trace_irq_enable+0x3b/0x140 [ 692.564144][ T30] panic+0xc5/0xd0 [ 692.564158][ T30] ? __pfx_panic+0x10/0x10 [ 692.564178][ T30] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 692.564203][ T30] watchdog+0x1030/0x1030 [ 692.564225][ T30] ? watchdog+0x1c7/0x1030 [ 692.564246][ T30] kthread+0x388/0x470 [ 692.564262][ T30] ? __pfx_watchdog+0x10/0x10 [ 692.564279][ T30] ? __pfx_kthread+0x10/0x10 [ 692.564294][ T30] ret_from_fork+0x514/0xb70 [ 692.564311][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 692.564327][ T30] ? __switch_to+0xc89/0x1420 [ 692.564348][ T30] ? __pfx_kthread+0x10/0x10 [ 692.564363][ T30] ret_from_fork_asm+0x1a/0x30 [ 692.564388][ T30] [ 692.830644][ T30] Kernel Offset: disabled [ 692.834943][ T30] Rebooting in 86400 seconds..