last executing test programs: 8.758344796s ago: executing program 2 (id=5111): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) unshare(0x24060400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 8.65124183s ago: executing program 3 (id=5112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x181342, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf25020000000800", @ANYRES32=r7], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x4}]}, 0x1c}}, 0x4000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988cafb", 0xf}, {&(0x7f00000006c0)="9c6a6db8babc7becfcc6349131df99", 0xf}, {&(0x7f0000000200)="4f396a9489c38f0d", 0x61}], 0x3) 8.498004575s ago: executing program 2 (id=5114): socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x4, @void}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r6 = socket(0x1e, 0x4, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r6) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000480)={0x0, 'veth0_to_hsr\x00', {0x2}, 0x51}) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x32) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r10, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) 5.406835415s ago: executing program 1 (id=5121): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) unshare(0x24060400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 5.337118798s ago: executing program 1 (id=5122): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_HELP={0x0, 0x5, 0x0, 0x1, {0x0, 0x1, 'sip-20000\x00'}}, @CTA_STATUS_MASK={0xfffffffffffffe4c, 0x1a, 0x1, 0x0, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="840000000001010400000000141a000002000000240001801400018008000100e0000001080002000a0101000c00028005000100000000003000028014000180080001000000000008000200ac1e00010c00028005000100b558665aa5b4c6000000000c000280050001001100000008000740000000010c00170000000cd8ffff6ab006"], 0x84}}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8b0b, &(0x7f0000000200)={'wlan1\x00', @random="9ffff7070600"}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008004}, 0x24004054) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x14, r4, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x8000) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, 0x0, 0x200000000000000) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x2, 0x3}, 0x10) sendmsg$tipc(r8, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x21600, 0x5, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r9, &(0x7f0000000240), 0x0}, 0x20) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)='9 j', 0x3}], 0x1) 4.717343658s ago: executing program 3 (id=5123): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xfffff0df, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x109d02, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x33, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.709392178s ago: executing program 2 (id=5124): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r5], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r7, r6, r6], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 4.666771549s ago: executing program 1 (id=5125): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) shutdown(0xffffffffffffffff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff2, 0xfff3}, {}, {0x10, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0x1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) 4.383368258s ago: executing program 0 (id=5074): r0 = socket$kcm(0x10, 0x8, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ifreq(r2, 0x8932, &(0x7f0000003380)={'veth0_to_bond\x00', @ifru_names='veth0_to_bridge\x00'}) r3 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r5, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xa0}, 0x2, 0x34005}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32], 0x1c}}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r6, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r8, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, '^}.-'}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '[^'}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, 'GPL\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, 'GPL\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x4084) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$inet6_sctp(0xa, 0x801, 0x84) unshare(0x400) bpf$PROG_LOAD(0x23, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) 3.996037201s ago: executing program 0 (id=5126): socket$packet(0x11, 0x3, 0x300) open(&(0x7f0000000280)='.\x00', 0x80, 0x122) socket$inet_tcp(0x2, 0x1, 0x0) r0 = open$dir(&(0x7f0000000100)='.\x00', 0x18100, 0x0) fcntl$notify(r0, 0x402, 0x80000023) fcntl$notify(0xffffffffffffffff, 0x402, 0x40000008) fcntl$notify(0xffffffffffffffff, 0x402, 0x21) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4180000000000007910920000000000"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xc9, &(0x7f0000000080)=""/201, 0x41000, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000d190000f10000000000000630000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r1 = socket(0x840000000002, 0x3, 0xff) shutdown(r1, 0x1) mq_open(&(0x7f0000000040)='{#*-\x00', 0x40, 0x10, &(0x7f00000000c0)={0x7, 0x4, 0x0, 0x9}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000040)=0x9d5, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) recvmmsg(r2, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/202, 0xca}, 0x6}], 0x1, 0x0, 0x0) 3.868621015s ago: executing program 0 (id=5127): sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x1a, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3c}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0xff}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x4, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.747955929s ago: executing program 3 (id=5128): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000280)=ANY=[], 0x8, 0x2ee, &(0x7f0000000a00)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x9032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) getdents64(r3, 0x0, 0x0) syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x14202) syz_kvm_add_vcpu$x86(r2, 0x0) 3.682867371s ago: executing program 2 (id=5129): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) unshare(0x24060400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.577951995s ago: executing program 2 (id=5130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x181342, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf25020000000800", @ANYRES32=r7], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x4}]}, 0x1c}}, 0x4000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988cafb", 0xf}, {&(0x7f00000006c0)="9c6a6db8babc7becfcc6349131df99", 0xf}, {&(0x7f0000000200)="4f396a9489c38f0d", 0x61}], 0x3) 3.465354488s ago: executing program 0 (id=5131): socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x4, @void}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r6 = socket(0x1e, 0x4, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r6) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000480)={0x0, 'veth0_to_hsr\x00', {0x2}, 0x51}) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x32) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r10, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) 3.427080799s ago: executing program 1 (id=5132): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_HELP={0x0, 0x5, 0x0, 0x1, {0x0, 0x1, 'sip-20000\x00'}}, @CTA_STATUS_MASK={0xfffffffffffffe4c, 0x1a, 0x1, 0x0, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="840000000001010400000000141a000002000000240001801400018008000100e0000001080002000a0101000c00028005000100000000003000028014000180080001000000000008000200ac1e00010c00028005000100b558665aa5b4c6000000000c000280050001001100000008000740000000010c00170000000cd8ffff6ab006"], 0x84}}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8b0b, &(0x7f0000000200)={'wlan1\x00', @random="9ffff7070600"}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008004}, 0x24004054) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x14, r4, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x8000) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, 0x0, 0x200000000000000) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x2, 0x3}, 0x10) sendmsg$tipc(r8, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x21600, 0x5, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r9, &(0x7f0000000240), 0x0}, 0x20) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)='9 j', 0x3}], 0x1) 2.876032827s ago: executing program 3 (id=5133): mkdirat(0xffffffffffffff9c, 0x0, 0x10) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000080)='btrfs\x00', 0xc000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x404c2, 0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000840), 0x0, 0x0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) r0 = memfd_create(0x0, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 2.856327758s ago: executing program 3 (id=5134): r0 = socket$kcm(0x10, 0x8, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ifreq(r2, 0x8932, &(0x7f0000003380)={'veth0_to_bond\x00', @ifru_names='veth0_to_bridge\x00'}) r3 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r5, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xa0}, 0x2, 0x34005}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32], 0x1c}}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r6, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r8, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, '^}.-'}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '[^'}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, 'GPL\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, 'GPL\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x4084) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$inet6_sctp(0xa, 0x801, 0x84) unshare(0x400) bpf$PROG_LOAD(0x23, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) 435.264666ms ago: executing program 3 (id=5135): socket$packet(0x11, 0x3, 0x300) open(&(0x7f0000000280)='.\x00', 0x80, 0x122) socket$inet_tcp(0x2, 0x1, 0x0) open$dir(&(0x7f0000000100)='.\x00', 0x18100, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x40000008) fcntl$notify(0xffffffffffffffff, 0x402, 0x21) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4180000000000007910920000000000"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xc9, &(0x7f0000000080)=""/201, 0x41000, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000d190000f10000000000000630000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r0 = socket(0x840000000002, 0x3, 0xff) shutdown(r0, 0x1) mq_open(&(0x7f0000000040)='{#*-\x00', 0x40, 0x10, &(0x7f00000000c0)={0x7, 0x4, 0x0, 0x9}) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000040)=0x9d5, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) recvmmsg(r1, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/202, 0xca}, 0x6}], 0x1, 0x0, 0x0) 427.055417ms ago: executing program 1 (id=5136): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xfffff0df, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x109d02, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x33, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 406.786167ms ago: executing program 2 (id=5137): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r5], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r7, r6, r6], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 340.187089ms ago: executing program 0 (id=5138): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0000}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) 67.965768ms ago: executing program 0 (id=5139): sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x1a, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3c}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0xff}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x4, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 1 (id=5140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, r1, 0x3, 0x0, 0x0, {{0x2}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x0) kernel console output (not intermixed with test programs): mode [ 911.590203][T18691] syzkaller0: entered allmulticast mode [ 911.653857][T18695] tipc: Enabled bearer , priority 0 [ 911.669209][T18694] tipc: Disabling bearer [ 911.715926][T18698] usb usb1: usbfs: process 18698 (syz.2.3667) did not claim interface 0 before use [ 911.803984][T18700] nbd: nbd2 already in use [ 911.986060][T14515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.271271][T18724] syzkaller0: entered promiscuous mode [ 912.278266][T18724] syzkaller0: entered allmulticast mode [ 912.287080][T18722] tipc: Enabled bearer , priority 0 [ 912.322502][T18721] tipc: Disabling bearer [ 912.593220][T18726] syzkaller0: entered promiscuous mode [ 912.599913][T18726] syzkaller0: entered allmulticast mode [ 915.104761][T14511] net_ratelimit: 10 callbacks suppressed [ 915.104778][T14511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.119023][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.148330][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.156811][T14511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.316074][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.328090][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.337076][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.465642][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.795661][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.004440][T18779] tipc: Enabling of bearer rejected, failed to enable media [ 917.192448][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.402875][T18842] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3704'. [ 918.422412][T18842] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3704'. [ 918.445700][T18842] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3704'. [ 918.457534][T18842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3704'. [ 919.843263][T18835] tipc: Enabling of bearer rejected, failed to enable media [ 920.086828][T18860] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3709'. [ 920.250170][T18871] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3714'. [ 920.259318][T18871] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3714'. [ 920.279724][T18871] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3714'. [ 920.299839][T18871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3714'. [ 920.309440][ T5815] net_ratelimit: 7 callbacks suppressed [ 920.309454][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.323668][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.354407][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.362751][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.075601][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.388693][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.397183][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.488569][T18881] tipc: Enabled bearer , priority 0 [ 922.503281][T18878] tipc: Disabling bearer [ 922.546277][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.735450][T18899] syzkaller0: entered promiscuous mode [ 922.741801][T18899] syzkaller0: entered allmulticast mode [ 922.756240][T18910] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3722'. [ 922.864482][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.930156][T18916] nbd: nbd0 already in use [ 923.428621][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.983586][T18939] vlan2: left promiscuous mode [ 924.996542][T18939] syz_tun: left promiscuous mode [ 925.065013][T18939] team0: left promiscuous mode [ 925.069846][T18939] team0: left allmulticast mode [ 925.459680][T18941] lo speed is unknown, defaulting to 1000 [ 925.505200][T14515] net_ratelimit: 3 callbacks suppressed [ 925.505219][T14515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.519242][T14511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.584943][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.667390][T18968] __nla_validate_parse: 4 callbacks suppressed [ 925.667406][T18968] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3734'. [ 925.687117][T18968] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3734'. [ 925.700236][T18968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3734'. [ 925.711675][T18968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3734'. [ 925.907824][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.916529][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.545435][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.553755][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.542803][T18969] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3733'. [ 927.589160][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.597934][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.722162][T18988] syzkaller0: entered promiscuous mode [ 927.727881][T18988] syzkaller0: entered allmulticast mode [ 927.963954][T19001] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3744'. [ 928.023654][T19003] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3745'. [ 928.034400][T19003] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3745'. [ 928.049565][T19003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3745'. [ 928.058924][T19003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3745'. [ 928.627176][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.471743][T19045] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 930.665676][T19045] team0: Failed to send options change via netlink (err -105) [ 930.704118][T19045] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 930.715138][ T23] net_ratelimit: 5 callbacks suppressed [ 930.715150][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.733115][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.739634][T19045] team0: Port device team_slave_0 removed [ 930.758338][T19065] __nla_validate_parse: 3 callbacks suppressed [ 930.758354][T19065] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3759'. [ 931.123861][T19078] syzkaller0: entered promiscuous mode [ 931.129554][T19078] syzkaller0: entered allmulticast mode [ 931.678209][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.683380][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.692252][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.744655][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.753136][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.974142][T19115] nbd3: detected capacity change from 0 to 63 [ 931.993699][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.311443][ T5779] block nbd3: Receive control failed (result -104) [ 932.324482][T17079] block nbd0: Possible stuck request ffff88805d1f0000: control (read@0,4096B). Runtime 60 seconds [ 932.786380][T14511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.794736][T14515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.826141][T14515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.997045][ T5140] udevd[5140]: worker [17768] /devices/virtual/block/nbd0 is taking a long time [ 935.426861][T19094] syzkaller0: entered promiscuous mode [ 935.432375][T19094] syzkaller0: entered allmulticast mode [ 935.912629][ T23] net_ratelimit: 6 callbacks suppressed [ 935.912645][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.935434][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.944767][ T9223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.954102][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.982388][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.947696][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.035309][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.756271][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.773162][T19125] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3771'. [ 937.985065][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.074901][T14511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.422401][T19173] nbd: nbd2 already in use [ 940.392348][T19181] process 'syz.0.3784' launched './file0' with NULL argv: empty string added [ 940.487945][T19172] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.495448][T19172] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.816580][T19172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 940.849531][T19172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 941.108897][T14515] net_ratelimit: 6 callbacks suppressed [ 941.108914][T14515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.136959][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.191211][T14515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.199650][T19172] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.214446][T19172] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.228141][T19172] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.238351][T19172] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.260844][T19172] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 941.268867][ T9223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.269238][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.278347][T14515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.296946][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.391184][T19191] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3787'. [ 941.621767][T19208] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3792'. [ 941.632002][T19208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3792'. [ 941.634935][T19206] syzkaller0: entered promiscuous mode [ 941.654874][T19206] syzkaller0: entered allmulticast mode [ 941.820237][T19210] syzkaller0: entered promiscuous mode [ 941.837563][T19210] syzkaller0: entered allmulticast mode [ 942.149882][T14515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.372078][T19236] nbd1: detected capacity change from 0 to 63 [ 942.398351][T14515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.778617][ T5779] block nbd1: Receive control failed (result -104) [ 943.190854][T14515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.989182][T19225] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3797'. [ 944.219081][T19260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3803'. [ 944.242592][T19260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3803'. [ 944.623715][T19274] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3808'. [ 945.295245][T19279] syzkaller0: entered promiscuous mode [ 945.301543][T19279] syzkaller0: entered allmulticast mode [ 945.766461][T19303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3816'. [ 945.775914][T19303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3816'. [ 946.306490][ T28] net_ratelimit: 8 callbacks suppressed [ 946.306508][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.547147][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.877327][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.034734][ T3481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.043526][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.069062][T14515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.190768][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.354505][T14515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.747117][T19311] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3818'. [ 948.144673][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.158297][T19330] (null): rxe_set_mtu: Set mtu to 4096 [ 948.164959][T19330] rdma_rxe: rxe_newlink: failed to add lo [ 948.194444][T19332] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3825'. [ 948.203451][T19332] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3825'. [ 948.222412][T19332] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3825'. [ 948.392699][T14515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.470841][T19340] syzkaller0: entered promiscuous mode [ 948.481296][T19340] syzkaller0: entered allmulticast mode [ 950.581456][T19351] __nla_validate_parse: 1 callbacks suppressed [ 950.581471][T19351] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3829'. [ 950.797566][T19370] (null): rxe_set_mtu: Set mtu to 4096 [ 950.813753][T19370] rdma_rxe: rxe_newlink: failed to add lo [ 950.845004][T19374] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3835'. [ 950.854012][T19374] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3835'. [ 950.867732][T19374] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3835'. [ 950.900466][T19374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3835'. [ 950.925576][T19371] kvm: requested 56152 ns i8254 timer period limited to 200000 ns [ 950.942161][T19371] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 950.961168][T19371] kvm: requested 191085 ns i8254 timer period limited to 200000 ns [ 950.975342][T19371] kvm: requested 126552 ns i8254 timer period limited to 200000 ns [ 950.998655][T19371] kvm: requested 44419 ns i8254 timer period limited to 200000 ns [ 951.038246][T19371] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 951.054760][T19371] kvm: requested 113981 ns i8254 timer period limited to 200000 ns [ 951.069189][T19371] kvm: requested 35200 ns i8254 timer period limited to 200000 ns [ 951.078348][T19371] kvm: requested 22628 ns i8254 timer period limited to 200000 ns [ 951.097843][T19371] kvm: requested 48609 ns i8254 timer period limited to 200000 ns [ 951.127367][T19389] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3840'. [ 951.314097][T19394] syzkaller0: entered promiscuous mode [ 951.322279][T19394] syzkaller0: entered allmulticast mode [ 951.681401][ T28] net_ratelimit: 19 callbacks suppressed [ 951.681419][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.733154][T19408] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3846'. [ 951.743049][T19408] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3846'. [ 951.932032][T19408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3846'. [ 952.027444][T19408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3846'. [ 952.318389][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.706846][T14515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.959067][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.274656][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.347971][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.752423][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.297128][T19422] syzkaller0: entered promiscuous mode [ 954.305815][T19422] syzkaller0: entered allmulticast mode [ 954.384487][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.828591][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.833143][T14515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.754718][T19464] syzkaller0: entered promiscuous mode [ 955.760259][T19464] syzkaller0: entered allmulticast mode [ 955.764413][T19468] __nla_validate_parse: 6 callbacks suppressed [ 955.764428][T19468] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3868'. [ 955.797414][T19468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3868'. [ 955.886918][T19475] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3869'. [ 956.410162][T19497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3874'. [ 957.014539][ T28] net_ratelimit: 6 callbacks suppressed [ 957.014557][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.084414][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.168863][T19506] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3878'. [ 957.181473][T19510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3879'. [ 957.224317][T19510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3879'. [ 957.224589][T19509] syzkaller0: entered promiscuous mode [ 957.294519][T19509] syzkaller0: entered allmulticast mode [ 957.462985][T19525] netlink: 'syz.2.3884': attribute type 4 has an invalid length. [ 957.969013][T19550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3892'. [ 957.986771][T19550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3892'. [ 958.146633][T14515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.190376][T19557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3887'. [ 958.674568][T19559] syzkaller0: entered promiscuous mode [ 958.680102][T19559] syzkaller0: entered allmulticast mode [ 958.860886][T19564] nbd: nbd3 already in use [ 959.034553][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.184502][T14515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.677259][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.698637][T19613] nbd: nbd1 already in use [ 960.957690][T19629] __nla_validate_parse: 3 callbacks suppressed [ 960.957711][T19629] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3912'. [ 960.985912][T19629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3912'. [ 961.717004][T19658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3916'. [ 962.171394][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.272881][T19661] syzkaller0: entered promiscuous mode [ 962.282398][T19661] syzkaller0: entered allmulticast mode [ 962.321227][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.385341][ T96] block nbd3: Possible stuck request ffff888022655400: control (read@0,4096B). Runtime 30 seconds [ 962.399917][T17079] block nbd0: Possible stuck request ffff88805d1f0000: control (read@0,4096B). Runtime 90 seconds [ 962.558916][T19667] nbd: nbd2 already in use [ 962.591102][T19673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3924'. [ 962.607934][T19673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3924'. [ 963.018455][T19698] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 963.309361][T19706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3927'. [ 963.782092][T19705] syzkaller0: entered promiscuous mode [ 963.802066][T19705] syzkaller0: entered allmulticast mode [ 963.906173][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.932397][T19711] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3934'. [ 963.941618][T19711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3934'. [ 964.019907][T19715] nbd: nbd2 already in use [ 964.038257][T19716] infiniband syz1: set down [ 964.413991][T19716] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.421509][T19716] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.859888][T19716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 964.892139][T19716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 965.178369][T19716] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.187778][T19716] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.196733][T19716] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.205846][T19716] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.308519][T19716] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.317779][T19716] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.327291][T19716] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.336551][T19716] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.357256][ T23] lo speed is unknown, defaulting to 1000 [ 965.401651][ T23] lo speed is unknown, defaulting to 1000 [ 965.582866][T19749] syzkaller0: entered promiscuous mode [ 965.583623][T19752] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3945'. [ 965.590962][T19749] syzkaller0: entered allmulticast mode [ 965.608791][T19752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3945'. [ 966.662750][T19774] nbd: nbd3 already in use [ 966.859324][T19777] erspan0: left promiscuous mode [ 966.953444][T19786] __nla_validate_parse: 1 callbacks suppressed [ 966.953552][T19786] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3957'. [ 966.972127][T19786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3957'. [ 967.018302][T19777] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.025937][T19777] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.322476][T19777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 967.413068][T19777] tipc: Resetting bearer [ 967.422518][T19777] tipc: Resetting bearer [ 967.783417][T19777] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.797698][T19777] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.807771][T19777] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.821634][T19777] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.069112][T19777] bond2: left promiscuous mode [ 968.076229][T19777] gre1: left promiscuous mode [ 968.259653][T19777] macsec1: left promiscuous mode [ 968.294559][T19777] bond3: left promiscuous mode [ 968.299534][T19777] gre2: left promiscuous mode [ 968.488075][T19800] syzkaller0: entered promiscuous mode [ 968.493618][T19800] syzkaller0: entered allmulticast mode [ 972.173483][T19822] tipc: Enabling of bearer rejected, failed to enable media [ 972.488159][T19841] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3969'. [ 972.498376][T19841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3969'. [ 972.634986][ T96] block nbd1: Possible stuck request ffff88804d694200: control (read@0,1024B). Runtime 30 seconds [ 972.646252][ T96] block nbd1: Possible stuck request ffff88804d694400: control (read@1024,1024B). Runtime 30 seconds [ 972.657491][ T96] block nbd1: Possible stuck request ffff88804d694600: control (read@2048,1024B). Runtime 30 seconds [ 972.668969][ T96] block nbd1: Possible stuck request ffff88804d694800: control (read@3072,1024B). Runtime 30 seconds [ 973.095789][T19864] nbd: nbd3 already in use [ 973.357167][T19869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3976'. [ 973.700478][T19871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3979'. [ 973.758030][ T27] kauditd_printk_skb: 66 callbacks suppressed [ 973.758064][ T27] audit: type=1326 audit(1781770322.156:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19870 comm="syz.3.3980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfb39ce59 code=0x7ffc0000 [ 973.885171][T19871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3979'. [ 973.965634][ T27] audit: type=1326 audit(1781770322.266:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19870 comm="syz.3.3980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfb39ce59 code=0x7ffc0000 [ 974.057204][ T27] audit: type=1326 audit(1781770322.266:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19870 comm="syz.3.3980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfb39ce59 code=0x7ffc0000 [ 974.114250][ T27] audit: type=1326 audit(1781770322.266:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19870 comm="syz.3.3980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfb39ce59 code=0x7ffc0000 [ 974.164259][ T27] audit: type=1326 audit(1781770322.266:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19870 comm="syz.3.3980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7facfb39ce59 code=0x7ffc0000 [ 974.216540][ T27] audit: type=1326 audit(1781770322.266:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19870 comm="syz.3.3980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfb39ce59 code=0x7ffc0000 [ 974.249043][ T27] audit: type=1326 audit(1781770322.266:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19870 comm="syz.3.3980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfb39ce59 code=0x7ffc0000 [ 974.278081][T19884] syzkaller0: entered promiscuous mode [ 974.283610][T19884] syzkaller0: entered allmulticast mode [ 974.296062][ T27] audit: type=1326 audit(1781770322.276:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19870 comm="syz.3.3980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfb39ce59 code=0x7ffc0000 [ 974.321257][ T27] audit: type=1326 audit(1781770322.276:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19870 comm="syz.3.3980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7facfb39ce59 code=0x7ffc0000 [ 974.418659][ T27] audit: type=1326 audit(1781770322.276:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19870 comm="syz.3.3980" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfb39ce59 code=0x7ffc0000 [ 974.478061][T19890] nbd: nbd2 already in use [ 974.770558][T19903] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3992'. [ 974.843351][T19903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3992'. [ 975.085214][T19910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3991'. [ 975.853076][T19918] syzkaller0: entered promiscuous mode [ 975.858921][T19918] syzkaller0: entered allmulticast mode [ 975.969341][T19920] nbd: nbd3 already in use [ 976.266106][T19933] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4003'. [ 976.286451][T19933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4003'. [ 976.616628][T19951] nbd: nbd0 already in use [ 977.467760][T19960] syzkaller0: entered promiscuous mode [ 977.481185][T19960] syzkaller0: entered allmulticast mode [ 977.705185][T19974] nbd: nbd1 already in use [ 978.087922][T19988] __nla_validate_parse: 4 callbacks suppressed [ 978.087962][T19988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4021'. [ 978.694985][T19992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4025'. [ 978.718310][T19992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4025'. [ 978.931840][T20002] syzkaller0: entered promiscuous mode [ 978.939891][T20002] syzkaller0: entered allmulticast mode [ 979.021243][T20007] nbd: nbd3 already in use [ 979.097463][T20011] capability: warning: `syz.0.4033' uses deprecated v2 capabilities in a way that may be insecure [ 979.568085][T20026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4036'. [ 979.950393][T20028] xt_hashlimit: size too large, truncated to 1048576 [ 980.227360][T20028] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 980.362439][T20034] syzkaller0: entered promiscuous mode [ 980.368355][T20034] syzkaller0: entered allmulticast mode [ 980.677551][T20036] nbd: nbd2 already in use [ 980.950291][T20053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4047'. [ 981.030605][T20053] 8021q: adding VLAN 0 to HW filter on device bond4 [ 981.047997][T20058] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4048'. [ 981.583919][T20068] xt_TPROXY: Can be used only with -p tcp or -p udp [ 981.745738][T20070] syzkaller0: entered promiscuous mode [ 981.761180][T20070] syzkaller0: entered allmulticast mode [ 982.217184][T20074] nbd: nbd2 already in use [ 982.425684][T20089] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4058'. [ 982.680828][T20100] syzkaller0: entered promiscuous mode [ 982.686558][T20100] syzkaller0: entered allmulticast mode [ 983.036423][T20107] syzkaller0: entered promiscuous mode [ 983.047358][T20107] syzkaller0: entered allmulticast mode [ 983.058144][T20118] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4069'. [ 983.277389][T20130] nbd: nbd3 already in use [ 985.706262][T20163] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4077'. [ 985.718139][T20163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4077'. [ 985.859785][T20175] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4081'. [ 986.367865][T20186] nbd: nbd2 already in use [ 986.392086][T20193] syzkaller0: entered promiscuous mode [ 986.400323][T20193] syzkaller0: entered allmulticast mode [ 986.695808][T20214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4088'. [ 986.723608][T20214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4088'. [ 989.324991][T20220] tipc: Enabling of bearer rejected, failed to enable media [ 989.388503][T20230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4092'. [ 989.658378][T20246] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4099'. [ 989.676623][T20247] syzkaller0: entered promiscuous mode [ 989.682161][T20247] syzkaller0: entered allmulticast mode [ 989.775243][T20249] syzkaller0: entered promiscuous mode [ 989.780772][T20249] syzkaller0: entered allmulticast mode [ 992.138373][T20268] tipc: Enabling of bearer rejected, failed to enable media [ 992.149950][T20280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4108'. [ 992.263435][T20285] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4109'. [ 992.338121][T20287] xt_hashlimit: size too large, truncated to 1048576 [ 992.464768][T17079] block nbd0: Possible stuck request ffff88805d1f0000: control (read@0,4096B). Runtime 120 seconds [ 992.476537][ T96] block nbd3: Possible stuck request ffff888022655400: control (read@0,4096B). Runtime 60 seconds [ 993.108834][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.390562][T20304] syzkaller0: entered promiscuous mode [ 993.400031][T20304] syzkaller0: entered allmulticast mode [ 993.542030][T20312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4119'. [ 993.554904][T20312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4119'. [ 995.623938][T20310] lo speed is unknown, defaulting to 1000 [ 995.759646][T20322] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4121'. [ 995.806655][T20324] tipc: Enabled bearer , priority 0 [ 995.830422][T20321] tipc: Disabling bearer [ 996.835191][T20345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4129'. [ 996.844931][T20345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4129'. [ 996.955782][T20348] syzkaller0: entered promiscuous mode [ 996.961282][T20348] syzkaller0: entered allmulticast mode [ 996.969164][T20353] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4131'. [ 999.161990][T20361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4135'. [ 999.182267][T20364] tipc: Enabling of bearer rejected, failed to enable media [ 999.333829][ T5779] Bluetooth: hci3: link tx timeout [ 999.341278][ T5779] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 999.371214][T20373] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4139'. [ 999.374059][T20375] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4140'. [ 999.381504][T20373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4139'. [ 999.720793][T20385] 9pnet_virtio: no channels available for device syz [ 1000.031302][T20388] syzkaller0: entered promiscuous mode [ 1000.037318][T20388] syzkaller0: entered allmulticast mode [ 1000.511558][T20406] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4150'. [ 1000.521187][T20406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4150'. [ 1001.429379][T20371] Bluetooth: hci3: command 0x0406 tx timeout [ 1002.558547][T20399] tipc: Enabling of bearer rejected, failed to enable media [ 1002.570207][T20407] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4149'. [ 1002.715695][ T96] block nbd1: Possible stuck request ffff88804d694200: control (read@0,1024B). Runtime 60 seconds [ 1002.726668][ T96] block nbd1: Possible stuck request ffff88804d694400: control (read@1024,1024B). Runtime 60 seconds [ 1002.737907][ T96] block nbd1: Possible stuck request ffff88804d694600: control (read@2048,1024B). Runtime 60 seconds [ 1002.748976][ T96] block nbd1: Possible stuck request ffff88804d694800: control (read@3072,1024B). Runtime 60 seconds [ 1002.751722][T20418] syzkaller0: entered promiscuous mode [ 1002.774628][T20418] syzkaller0: entered allmulticast mode [ 1002.781625][T20419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4154'. [ 1003.703671][T20436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4160'. [ 1003.718403][T20436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4160'. [ 1004.022709][T20439] syzkaller0: entered promiscuous mode [ 1004.028477][T20439] syzkaller0: entered allmulticast mode [ 1004.872049][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 1006.611769][T20476] __nla_validate_parse: 1 callbacks suppressed [ 1006.611788][T20476] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4169'. [ 1006.628866][T20476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4169'. [ 1006.889930][T20486] tipc: Enabled bearer , priority 0 [ 1006.901618][T20485] tipc: Disabling bearer [ 1007.053116][T20491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4171'. [ 1007.310095][T20500] syzkaller0: entered promiscuous mode [ 1007.316113][T20500] syzkaller0: entered allmulticast mode [ 1007.577046][T20507] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4179'. [ 1007.590729][T20507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4179'. [ 1010.060470][T20529] tipc: Enabled bearer , priority 0 [ 1010.107314][T20528] tipc: Disabling bearer [ 1010.312588][T20541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4191'. [ 1010.339397][T20541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4191'. [ 1010.422849][T20543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4188'. [ 1010.537847][T20549] syzkaller0: entered promiscuous mode [ 1010.543509][T20549] syzkaller0: entered allmulticast mode [ 1012.214661][T20575] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4201'. [ 1012.224014][T20575] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4201'. [ 1012.817627][T20573] tipc: Enabling of bearer rejected, failed to enable media [ 1012.971767][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1012.971782][ T27] audit: type=1326 audit(1781770361.366:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20584 comm="syz.0.4204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd679ce59 code=0x7ffc0000 [ 1013.068511][ T27] audit: type=1326 audit(1781770361.366:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20584 comm="syz.0.4204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd679ce59 code=0x7ffc0000 [ 1013.190775][ T27] audit: type=1326 audit(1781770361.366:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20584 comm="syz.0.4204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd679ce59 code=0x7ffc0000 [ 1013.231209][ T27] audit: type=1326 audit(1781770361.366:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20584 comm="syz.0.4204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd679ce59 code=0x7ffc0000 [ 1013.261129][ T27] audit: type=1326 audit(1781770361.366:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20584 comm="syz.0.4204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd679ce59 code=0x7ffc0000 [ 1013.287764][T20594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4203'. [ 1013.336086][ T27] audit: type=1326 audit(1781770361.366:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20584 comm="syz.0.4204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9cd679ce59 code=0x7ffc0000 [ 1013.391222][ T27] audit: type=1326 audit(1781770361.366:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20584 comm="syz.0.4204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd679ce59 code=0x7ffc0000 [ 1013.450648][ T27] audit: type=1326 audit(1781770361.366:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20584 comm="syz.0.4204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd679ce59 code=0x7ffc0000 [ 1013.523889][ T27] audit: type=1326 audit(1781770361.366:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20584 comm="syz.0.4204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cd679ce59 code=0x7ffc0000 [ 1013.581490][ T27] audit: type=1326 audit(1781770361.376:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20584 comm="syz.0.4204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9cd679ce59 code=0x7ffc0000 [ 1013.597133][T20612] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4210'. [ 1013.627932][T20612] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4210'. [ 1013.983738][T20615] syzkaller0: entered promiscuous mode [ 1014.001744][T20615] syzkaller0: entered allmulticast mode [ 1016.173553][T20628] tipc: Enabled bearer , priority 0 [ 1016.186432][T20625] tipc: Disabling bearer [ 1016.371775][T20642] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4219'. [ 1016.381369][T20642] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4219'. [ 1016.763086][T20656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4220'. [ 1016.778157][T20659] tipc: Enabling of bearer rejected, failed to enable media [ 1016.835269][T20659] syzkaller0: entered promiscuous mode [ 1016.840807][T20659] syzkaller0: entered allmulticast mode [ 1019.107618][T20671] tipc: Enabling of bearer rejected, failed to enable media [ 1019.137196][T20686] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4229'. [ 1019.147963][T20686] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4229'. [ 1019.707871][T20705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4234'. [ 1019.741286][T20708] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4239'. [ 1019.756498][T20708] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4239'. [ 1019.869440][T20712] tipc: Enabled bearer , priority 0 [ 1019.879046][ T5140] udevd[5140]: worker [17880] /devices/virtual/block/nbd3 is taking a long time [ 1019.889355][ T5140] udevd[5140]: worker [17816] /devices/virtual/block/nbd1 is taking a long time [ 1019.903343][T20711] tipc: Disabling bearer [ 1019.918341][T20714] syzkaller0: entered promiscuous mode [ 1019.923952][T20714] syzkaller0: entered allmulticast mode [ 1020.493899][T20738] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4249'. [ 1020.514291][T20738] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4249'. [ 1020.570723][T20742] tipc: Enabled bearer , priority 0 [ 1020.576593][T20735] create_pit_timer: 16 callbacks suppressed [ 1020.576611][T20735] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 1020.599549][T20741] tipc: Disabling bearer [ 1020.614565][T20735] kvm: requested 166781 ns i8254 timer period limited to 200000 ns [ 1020.623251][T20735] kvm: requested 111466 ns i8254 timer period limited to 200000 ns [ 1020.631923][T20735] kvm: requested 67047 ns i8254 timer period limited to 200000 ns [ 1020.640818][T20735] kvm: requested 31009 ns i8254 timer period limited to 200000 ns [ 1020.650950][T20735] kvm: requested 22628 ns i8254 timer period limited to 200000 ns [ 1020.662931][T20735] kvm: requested 174323 ns i8254 timer period limited to 200000 ns [ 1020.666996][T20745] syzkaller0: entered promiscuous mode [ 1020.677015][T20745] syzkaller0: entered allmulticast mode [ 1020.694861][T20735] kvm: requested 182704 ns i8254 timer period limited to 200000 ns [ 1020.704909][T20735] kvm: requested 86323 ns i8254 timer period limited to 200000 ns [ 1020.728815][T20735] kvm: requested 167619 ns i8254 timer period limited to 200000 ns [ 1020.993394][T20756] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4255'. [ 1021.832535][T20773] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4259'. [ 1021.852716][T20773] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4259'. [ 1021.983495][T20779] syzkaller0: entered promiscuous mode [ 1021.990463][T20779] syzkaller0: entered allmulticast mode [ 1021.999701][T20777] tipc: Enabled bearer , priority 0 [ 1022.012955][T20776] tipc: Disabling bearer [ 1022.554373][ T96] block nbd3: Possible stuck request ffff888022655400: control (read@0,4096B). Runtime 90 seconds [ 1022.554424][T17079] block nbd0: Possible stuck request ffff88805d1f0000: control (read@0,4096B). Runtime 150 seconds [ 1022.746343][T20815] nbd: nbd2 already in use [ 1023.684982][T20823] tipc: Enabled bearer , priority 0 [ 1023.729517][T20822] tipc: Disabling bearer [ 1024.155074][T20844] nbd: nbd3 already in use [ 1024.729169][T20857] tipc: Enabled bearer , priority 0 [ 1024.757540][T20856] tipc: Disabling bearer [ 1025.534979][T20869] nbd: nbd3 already in use [ 1025.866889][T20879] tipc: Enabled bearer , priority 0 [ 1025.911772][T20877] tipc: Disabling bearer [ 1026.987027][T20896] nbd: nbd3 already in use [ 1027.393719][T20912] __nla_validate_parse: 4 callbacks suppressed [ 1027.393736][T20912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4309'. [ 1028.215542][T20929] nbd: nbd1 already in use [ 1028.924534][T20941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4321'. [ 1030.068096][T20956] tipc: Enabled bearer , priority 0 [ 1030.200452][T20955] tipc: Disabling bearer [ 1030.234262][T20960] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1030.575622][T20970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4333'. [ 1030.924304][ T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1031.146079][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1031.164292][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1031.174093][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1031.208629][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1031.222131][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.241623][ T8] usb 2-1: config 0 descriptor?? [ 1031.458046][T20989] tipc: Enabled bearer , priority 0 [ 1031.500288][T20988] tipc: Disabling bearer [ 1031.700654][ T8] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 1031.723385][ T8] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 1031.767401][ T8] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1032.488302][ T8] usb 2-1: USB disconnect, device number 13 [ 1032.636292][T21003] fido_id[21003]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1032.689370][T21007] syzkaller0: entered promiscuous mode [ 1032.695393][T21007] syzkaller0: entered allmulticast mode [ 1032.784741][ T96] block nbd1: Possible stuck request ffff88804d694200: control (read@0,1024B). Runtime 90 seconds [ 1032.796603][ T96] block nbd1: Possible stuck request ffff88804d694400: control (read@1024,1024B). Runtime 90 seconds [ 1032.807907][ T96] block nbd1: Possible stuck request ffff88804d694600: control (read@2048,1024B). Runtime 90 seconds [ 1032.819136][ T96] block nbd1: Possible stuck request ffff88804d694800: control (read@3072,1024B). Runtime 90 seconds [ 1033.112113][T21022] tipc: Enabled bearer , priority 0 [ 1033.132577][T21021] tipc: Disabling bearer [ 1033.948446][T21044] syzkaller0: entered promiscuous mode [ 1033.953975][T21044] syzkaller0: entered allmulticast mode [ 1034.508332][T21050] tipc: Enabled bearer , priority 0 [ 1034.521692][T21049] tipc: Disabling bearer [ 1035.919283][T21069] syzkaller0: entered promiscuous mode [ 1035.936508][T21069] syzkaller0: entered allmulticast mode [ 1036.280703][T21079] tipc: Enabled bearer , priority 0 [ 1036.291168][T21083] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4376'. [ 1036.332768][T21076] tipc: Disabling bearer [ 1036.533652][T21094] syzkaller0: entered promiscuous mode [ 1036.543778][T21094] syzkaller0: entered allmulticast mode [ 1037.547901][T21114] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4387'. [ 1037.829287][T21128] syzkaller0: entered promiscuous mode [ 1037.838526][T21128] syzkaller0: entered allmulticast mode [ 1038.163008][T21140] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4398'. [ 1038.232447][T21146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4401'. [ 1038.590130][T21164] syzkaller0: entered promiscuous mode [ 1038.598592][T21164] syzkaller0: entered allmulticast mode [ 1038.898077][T21169] overlayfs: failed to resolve './file0': -2 [ 1038.964578][T21171] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4410'. [ 1039.038267][T21175] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4412'. [ 1039.228512][T21187] syzkaller0: entered promiscuous mode [ 1039.234072][T21187] syzkaller0: entered allmulticast mode [ 1040.036261][ T5779] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 1040.254613][T21197] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4420'. [ 1040.263655][T21197] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4420'. [ 1040.275638][T21197] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4420'. [ 1040.285305][T21197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4420'. [ 1040.460651][T21202] nbd: nbd3 already in use [ 1040.856284][T21208] syzkaller0: entered promiscuous mode [ 1040.861823][T21208] syzkaller0: entered allmulticast mode [ 1040.962958][T21213] tipc: Enabled bearer , priority 0 [ 1040.978811][T21212] tipc: Disabling bearer [ 1041.346176][T21225] __nla_validate_parse: 6 callbacks suppressed [ 1041.346191][T21225] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4430'. [ 1041.475731][T21227] nbd: nbd0 already in use [ 1042.616188][T21240] tipc: Enabled bearer , priority 0 [ 1042.679729][T21239] tipc: Disabling bearer [ 1042.708489][T21248] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4438'. [ 1042.716160][T21242] syzkaller0: entered promiscuous mode [ 1042.720722][T21248] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4438'. [ 1042.723097][T21242] syzkaller0: entered allmulticast mode [ 1042.740095][T21248] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4438'. [ 1042.749658][T21248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4438'. [ 1042.851753][T21251] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4439'. [ 1042.993832][T21255] nbd: nbd3 already in use [ 1044.886507][T21281] tipc: Enabled bearer , priority 0 [ 1044.897481][T21280] tipc: Disabling bearer [ 1044.979059][T21283] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4449'. [ 1044.988472][T21283] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4449'. [ 1045.007435][T21283] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4449'. [ 1045.018990][T21283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4449'. [ 1045.133974][T21288] syzkaller0: entered promiscuous mode [ 1045.140107][T21288] syzkaller0: entered allmulticast mode [ 1045.185788][T21290] nbd: nbd0 already in use [ 1046.413393][T21307] __nla_validate_parse: 2 callbacks suppressed [ 1046.413410][T21307] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4460'. [ 1046.462337][T21310] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4458'. [ 1046.484098][T21310] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4458'. [ 1046.494973][T21310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4458'. [ 1046.504064][T21310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4458'. [ 1046.714568][T21320] syzkaller0: entered promiscuous mode [ 1046.720116][T21320] syzkaller0: entered allmulticast mode [ 1046.865984][T21327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4461'. [ 1047.928933][T21340] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4469'. [ 1048.018887][T21342] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4470'. [ 1048.031429][T21342] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4470'. [ 1048.048878][T21342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4470'. [ 1048.469407][T21359] syzkaller0: entered promiscuous mode [ 1048.475121][T21359] syzkaller0: entered allmulticast mode [ 1049.649517][T21385] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1049.795344][T21394] syzkaller0: entered promiscuous mode [ 1049.801283][T21394] syzkaller0: entered allmulticast mode [ 1052.027295][T21450] __nla_validate_parse: 14 callbacks suppressed [ 1052.027315][T21450] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4498'. [ 1052.046741][T21451] xt_hashlimit: size too large, truncated to 1048576 [ 1052.048513][T21452] fuse: Bad value for 'fd' [ 1052.264791][T21465] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4503'. [ 1052.304363][T21465] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4503'. [ 1052.345613][T21465] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4503'. [ 1052.394350][T21465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4503'. [ 1052.405858][T21454] bridge_slave_0 (unregistering): left allmulticast mode [ 1052.412946][T21454] bridge_slave_0 (unregistering): left promiscuous mode [ 1052.493473][T21454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.634666][T17079] block nbd0: Possible stuck request ffff88805d1f0000: control (read@0,4096B). Runtime 180 seconds [ 1052.726941][ T96] block nbd3: Possible stuck request ffff888022655400: control (read@0,4096B). Runtime 120 seconds [ 1052.840971][T21484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4502'. [ 1054.635571][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1057.846737][T21520] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4510'. [ 1057.912409][ T5140] udevd[5140]: worker [17768] /devices/virtual/block/nbd0 timeout; kill it [ 1057.964422][ T5140] udevd[5140]: seq 18557 '/devices/virtual/block/nbd0' killed [ 1058.041249][T21527] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4512'. [ 1058.051057][T21527] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4512'. [ 1058.067226][T21527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4512'. [ 1058.080010][T21527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4512'. [ 1058.934389][T21536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4513'. [ 1059.961275][T21553] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4520'. [ 1060.032039][T21553] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4520'. [ 1060.053536][T21556] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4521'. [ 1060.285253][T21004] udevd[21004]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1060.313357][T21565] syzkaller0: entered promiscuous mode [ 1060.327206][T21567] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4524'. [ 1060.340212][T21565] syzkaller0: entered allmulticast mode [ 1060.553033][T21547] overlayfs: conflicting lowerdir path [ 1061.395428][T21583] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1063.073846][ T96] block nbd1: Possible stuck request ffff88804d694200: control (read@0,1024B). Runtime 120 seconds [ 1063.084930][ T96] block nbd1: Possible stuck request ffff88804d694400: control (read@1024,1024B). Runtime 120 seconds [ 1063.096627][ T96] block nbd1: Possible stuck request ffff88804d694600: control (read@2048,1024B). Runtime 120 seconds [ 1063.108464][ T96] block nbd1: Possible stuck request ffff88804d694800: control (read@3072,1024B). Runtime 120 seconds [ 1063.130772][T21610] __nla_validate_parse: 4 callbacks suppressed [ 1063.130789][T21610] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4535'. [ 1063.146613][T21610] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4535'. [ 1063.162381][T21610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4535'. [ 1063.177391][T21612] syzkaller0: entered promiscuous mode [ 1063.182939][T21612] syzkaller0: entered allmulticast mode [ 1063.188945][T21610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4535'. [ 1063.250921][T21616] Error parsing options; rc = [-22] [ 1063.485841][T21626] syzkaller0: entered promiscuous mode [ 1063.491622][T21626] syzkaller0: entered allmulticast mode [ 1063.520171][T21628] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4540'. [ 1063.613479][T21628] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4540'. [ 1063.821696][T21005] udevd[21005]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1063.832077][T21636] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4541'. [ 1063.854906][T21004] udevd[21004]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1064.037987][T20371] Bluetooth: hci4: unexpected event for opcode 0x0c58 [ 1064.140741][T21644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4542'. [ 1064.775190][T21646] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4546'. [ 1064.798759][T21646] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4546'. [ 1064.887492][T21655] syzkaller0: entered promiscuous mode [ 1064.893121][T21655] syzkaller0: entered allmulticast mode [ 1066.858411][T21690] syzkaller0: entered promiscuous mode [ 1066.883607][T21690] syzkaller0: entered allmulticast mode [ 1068.143088][T21727] __nla_validate_parse: 10 callbacks suppressed [ 1068.143105][T21727] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4572'. [ 1068.165134][T21727] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4572'. [ 1068.179774][T21728] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4573'. [ 1068.189383][T21727] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4572'. [ 1068.202599][T21727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4572'. [ 1068.274693][T11764] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1068.330732][T21732] syzkaller0: entered promiscuous mode [ 1068.351118][T21732] syzkaller0: entered allmulticast mode [ 1069.190748][T11764] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1069.201412][T11764] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.215824][T11764] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1069.227463][T11764] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1069.241186][T11764] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1069.272220][T11764] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1069.297363][T11764] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1069.319232][T11764] usb 3-1: string descriptor 0 read error: -22 [ 1069.343946][T11764] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1069.355378][T11764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.453441][T21762] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4582'. [ 1070.540304][T21765] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4583'. [ 1070.549586][T21765] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4583'. [ 1070.561310][T21765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4583'. [ 1070.573226][T21765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4583'. [ 1070.966191][T11764] usb 3-1: 2:0: failed to get current value for ch 1 (-71) [ 1070.983315][T21776] syzkaller0: entered promiscuous mode [ 1070.998112][T11764] usb 3-1: Warning! Unlikely big volume range (=2724), cval->res is probably wrong. [ 1071.014336][T21776] syzkaller0: entered allmulticast mode [ 1071.020048][T11764] usb 3-1: [2] FU [Speaker Playback Volume] ch = 1, val = -2724/0/1 [ 1071.291001][T11764] usb 3-1: USB disconnect, device number 10 [ 1073.302752][T21813] __nla_validate_parse: 5 callbacks suppressed [ 1073.302767][T21813] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4600'. [ 1073.501925][T21815] syzkaller0: entered promiscuous mode [ 1073.534244][T21815] syzkaller0: entered allmulticast mode [ 1074.539554][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1074.550995][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1074.564755][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1074.574036][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1074.582870][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1075.083734][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1075.145588][T21827] lo speed is unknown, defaulting to 1000 [ 1075.342790][T21839] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4606'. [ 1075.379555][T21839] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4606'. [ 1075.411120][T21839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4606'. [ 1075.448404][T21839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4606'. [ 1075.560261][T21845] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4609'. [ 1076.724558][T21857] use of bytesused == 0 is deprecated and will be removed in the future, [ 1076.733547][T21857] use the actual size instead. [ 1077.214951][ T5779] Bluetooth: hci2: command tx timeout [ 1077.308926][T21827] chnl_net:caif_netlink_parms(): no params data found [ 1077.568591][T21827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.575995][T21827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.583437][T21827] bridge_slave_0: entered allmulticast mode [ 1077.806245][T21827] bridge_slave_0: entered promiscuous mode [ 1077.949522][T21827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.044675][T21827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.142177][T21827] bridge_slave_1: entered allmulticast mode [ 1078.215920][T21827] bridge_slave_1: entered promiscuous mode [ 1078.327527][T21874] fuse: Bad value for 'group_id' [ 1078.341737][T21827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1078.374287][T21827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1078.443802][T21827] team0: Port device team_slave_0 added [ 1078.467149][T21827] team0: Port device team_slave_1 added [ 1078.547532][T21827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1078.560790][T21827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1078.593154][T21878] overlayfs: failed to clone lowerpath [ 1078.612061][T21827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1078.626732][T21881] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4617'. [ 1078.638493][T21827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1078.644349][T21881] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4617'. [ 1078.650779][T21827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1078.674775][T21881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4617'. [ 1078.699939][T21881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4617'. [ 1078.724203][T21827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1078.788916][T21827] hsr_slave_0: entered promiscuous mode [ 1078.805732][T21827] hsr_slave_1: entered promiscuous mode [ 1078.812165][T21827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1078.824371][T21827] Cannot create hsr debugfs directory [ 1078.966050][T21884] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4618'. [ 1079.194310][T21886] netlink: 'syz.1.4619': attribute type 1 has an invalid length. [ 1079.264254][ T5779] Bluetooth: hci2: command tx timeout [ 1079.283741][T21886] bond1: entered promiscuous mode [ 1079.289907][T21886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1079.925711][T21904] fuse: Bad value for 'fd' [ 1080.661955][T21827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1080.710546][T21827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1080.750709][T21827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1080.780678][T21827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1080.813149][T21911] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4626'. [ 1080.840882][T21913] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4625'. [ 1080.860615][T21913] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4625'. [ 1080.903147][T21913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4625'. [ 1080.970300][T21913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4625'. [ 1081.010719][T21827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.053305][T21827] 8021q: adding VLAN 0 to HW filter on device team0 [ 1081.093962][ T9227] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.101230][ T9227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.167401][ T9227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.174610][ T9227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.404385][ T5779] Bluetooth: hci2: command tx timeout [ 1082.249860][T21827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1082.385807][T21941] fuse: Bad value for 'group_id' [ 1082.395028][T21827] veth0_vlan: entered promiscuous mode [ 1082.427164][T21827] veth1_vlan: entered promiscuous mode [ 1082.487462][T21827] veth0_macvtap: entered promiscuous mode [ 1082.510034][T21827] veth1_macvtap: entered promiscuous mode [ 1082.565189][T21827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1082.586185][T21827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1082.610144][T21827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.634292][T21827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.643121][T21827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.660020][T21827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.714586][T17079] block nbd0: Possible stuck request ffff88805d1f0000: control (read@0,4096B). Runtime 210 seconds [ 1082.835648][ T9227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.875553][ T9227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.977082][ T9231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.985836][ T9231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.357302][ T96] block nbd3: Possible stuck request ffff888022655400: control (read@0,4096B). Runtime 150 seconds [ 1083.424430][ T5779] Bluetooth: hci2: command tx timeout [ 1083.600520][T21977] netlink: 'syz.0.4645': attribute type 9 has an invalid length. [ 1083.642951][T21978] __nla_validate_parse: 6 callbacks suppressed [ 1083.642970][T21978] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4644'. [ 1083.867568][T21984] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4648'. [ 1083.881024][T21984] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4648'. [ 1083.897540][T21984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4648'. [ 1083.912193][T21984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4648'. [ 1084.129895][T21992] tipc: Started in network mode [ 1084.135062][T21992] tipc: Node identity 8e82118e04d6, cluster identity 4711 [ 1084.144812][T21992] tipc: Enabled bearer , priority 0 [ 1084.153248][T21992] syzkaller0: entered promiscuous mode [ 1084.168135][T21992] syzkaller0: entered allmulticast mode [ 1084.180141][T21960] syz.2.4639 (21960): drop_caches: 0 [ 1084.223137][T21992] tipc: Resetting bearer [ 1084.245211][T21991] tipc: Resetting bearer [ 1084.299260][T21991] tipc: Disabling bearer [ 1084.470851][T22003] tipc: Enabled bearer , priority 0 [ 1084.482535][T22002] tipc: Disabling bearer [ 1084.754056][T22007] netlink: 'syz.3.4654': attribute type 9 has an invalid length. [ 1084.807580][T22007] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4654'. [ 1085.695150][T22020] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4658'. [ 1085.732015][T22020] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4658'. [ 1085.745077][T22020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4658'. [ 1085.767366][T22020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4658'. [ 1085.875334][T22032] tipc: Enabled bearer , priority 0 [ 1085.901684][T22031] tipc: Disabling bearer [ 1086.015617][T22039] netlink: 'syz.2.4664': attribute type 9 has an invalid length. [ 1086.115734][T22042] nbd: nbd2 already in use [ 1086.737873][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 1086.737924][ T27] audit: type=1326 audit(1781770435.116:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22066 comm="syz.3.4674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f0f9ce59 code=0x7ffc0000 [ 1087.056386][ T27] audit: type=1326 audit(1781770435.116:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22066 comm="syz.3.4674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f0f9ce59 code=0x7ffc0000 [ 1087.311285][ T27] audit: type=1326 audit(1781770435.126:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22066 comm="syz.3.4674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f0f9ce59 code=0x7ffc0000 [ 1087.503149][ T27] audit: type=1326 audit(1781770435.126:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22066 comm="syz.3.4674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f0f9ce59 code=0x7ffc0000 [ 1087.644734][ T27] audit: type=1326 audit(1781770435.126:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22066 comm="syz.3.4674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7ff7f0f9ce59 code=0x7ffc0000 [ 1087.707805][ T27] audit: type=1326 audit(1781770435.176:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22066 comm="syz.3.4674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff7f0f5d68e code=0x7ffc0000 [ 1087.754607][ T27] audit: type=1326 audit(1781770435.186:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22066 comm="syz.3.4674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff7f0f5d68e code=0x7ffc0000 [ 1087.779767][ T27] audit: type=1326 audit(1781770435.196:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22066 comm="syz.3.4674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff7f0f5d68e code=0x7ffc0000 [ 1087.806519][ T27] audit: type=1326 audit(1781770435.196:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22066 comm="syz.3.4674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff7f0f5d68e code=0x7ffc0000 [ 1087.843660][ T27] audit: type=1326 audit(1781770435.206:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22066 comm="syz.3.4674" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff7f0f5d68e code=0x7ffc0000 [ 1088.174378][ T788] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1088.374564][ T788] usb 4-1: Using ep0 maxpacket: 8 [ 1088.381512][ T788] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.392574][ T788] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1088.401734][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.411890][ T788] usb 4-1: config 0 descriptor?? [ 1088.420690][ T788] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1089.630331][ T788] gspca_vc032x: reg_w err -71 [ 1089.639750][ T788] vc032x: probe of 4-1:0.0 failed with error -71 [ 1089.648239][ T788] usb 4-1: USB disconnect, device number 7 [ 1089.663787][T22063] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1090.979144][T22111] nbd: nbd2 already in use [ 1091.805186][T22117] tipc: Enabled bearer , priority 0 [ 1091.838557][T22116] tipc: Disabling bearer [ 1092.140094][T22135] nbd: nbd3 already in use [ 1094.241210][ T96] block nbd1: Possible stuck request ffff88804d694200: control (read@0,1024B). Runtime 150 seconds [ 1094.252903][ T96] block nbd1: Possible stuck request ffff88804d694400: control (read@1024,1024B). Runtime 150 seconds [ 1094.267846][ T96] block nbd1: Possible stuck request ffff88804d694600: control (read@2048,1024B). Runtime 150 seconds [ 1094.279374][ T96] block nbd1: Possible stuck request ffff88804d694800: control (read@3072,1024B). Runtime 150 seconds [ 1094.421044][T22167] nbd: nbd2 already in use [ 1095.284625][T22188] tipc: Enabled bearer , priority 0 [ 1095.303384][T22187] tipc: Disabling bearer [ 1095.366714][T22185] kvm: emulating exchange as write [ 1095.489466][T22195] __nla_validate_parse: 9 callbacks suppressed [ 1095.489485][T22195] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4717'. [ 1095.514011][T22195] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4717'. [ 1095.564969][T22195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4717'. [ 1095.604364][T22195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4717'. [ 1095.802633][T22203] nbd: nbd0 already in use [ 1097.006479][T22229] nbd: nbd1 already in use [ 1098.273154][T22247] fuse: Unknown parameter 'grou00000000000000000000' [ 1098.360369][T22246] nbd: nbd2 already in use [ 1098.751141][T20371] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1098.761970][T20371] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1098.773460][T20371] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1098.788682][T20371] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1098.803473][T20371] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1098.811056][T20371] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1098.857571][T22254] lo speed is unknown, defaulting to 1000 [ 1099.267881][T22254] chnl_net:caif_netlink_parms(): no params data found [ 1099.411828][T22272] fuse: Unknown parameter 'grou00000000000000000000' [ 1099.462745][T22254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.470988][T22254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.478856][T22254] bridge_slave_0: entered allmulticast mode [ 1099.486653][T22254] bridge_slave_0: entered promiscuous mode [ 1099.496553][T22254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.509037][T22254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.516431][T22254] bridge_slave_1: entered allmulticast mode [ 1099.524126][T22254] bridge_slave_1: entered promiscuous mode [ 1099.560385][T22254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1099.579364][T22254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1099.631856][T22254] team0: Port device team_slave_0 added [ 1099.658540][T22254] team0: Port device team_slave_1 added [ 1099.666353][T22276] nbd: nbd0 already in use [ 1099.697207][T22254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1099.705522][T22254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1099.731651][T22254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1099.754942][T22254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1099.761942][T22254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1099.789730][T22254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1099.931114][T22254] hsr_slave_0: entered promiscuous mode [ 1099.937825][T22254] hsr_slave_1: entered promiscuous mode [ 1099.953135][T22254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1099.960964][T22254] Cannot create hsr debugfs directory [ 1100.936050][ T5779] Bluetooth: hci1: command tx timeout [ 1101.867521][T22295] fuse: Unknown parameter 'grou00000000000000000000' [ 1102.068265][T22254] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1102.096036][T22254] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1102.117416][T22254] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1102.155207][T22254] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1102.238985][T22300] nbd: nbd2 already in use [ 1102.336670][T22254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1102.387759][T22254] 8021q: adding VLAN 0 to HW filter on device team0 [ 1102.416871][ T9231] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.424087][ T9231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1102.519586][ T3481] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.526854][ T3481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1102.946121][ T5779] Bluetooth: hci1: command tx timeout [ 1103.561875][T22320] fuse: Unknown parameter 'group_i00000000000000000000' [ 1103.631284][T22254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1103.675083][T22254] veth0_vlan: entered promiscuous mode [ 1103.688826][T22254] veth1_vlan: entered promiscuous mode [ 1103.793835][T22254] veth0_macvtap: entered promiscuous mode [ 1103.812786][T22254] veth1_macvtap: entered promiscuous mode [ 1104.123124][T22254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1104.174435][T22254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.216169][T22254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1104.269873][T22254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1104.304627][T22254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.333681][T22254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1104.378509][T22254] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.397309][T22254] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.406527][T22254] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.415381][T22254] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.487255][T22329] nbd: nbd2 already in use [ 1104.578024][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1104.596808][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1104.650712][ T9231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1104.670871][ T9231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1104.720847][T22333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4770'. [ 1105.025491][ T5779] Bluetooth: hci1: command tx timeout [ 1105.275255][T22348] fuse: Unknown parameter 'group_i00000000000000000000' [ 1105.471434][T22354] nbd: nbd0 already in use [ 1106.766455][T22386] fuse: Unknown parameter 'group_i00000000000000000000' [ 1106.920408][ T28] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1107.104352][ T5779] Bluetooth: hci1: command tx timeout [ 1107.124902][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1107.139955][ T28] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1107.165965][ T28] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1107.175947][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.196929][ T28] usb 3-1: config 0 descriptor?? [ 1107.206766][ T28] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1107.248257][T22399] nbd: nbd0 already in use [ 1109.637234][ T9] usb 3-1: USB disconnect, device number 11 [ 1110.102024][T22427] fuse: Unknown parameter 'group_id00000000000000000000' [ 1111.269885][T22441] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4801'. [ 1111.298905][T22441] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4801'. [ 1111.327978][T22441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4801'. [ 1111.357787][T22441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4801'. [ 1111.414474][T22445] nbd: nbd1 already in use [ 1111.552300][T22452] fuse: Unknown parameter 'group_id00000000000000000000' [ 1112.266757][T22474] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4812'. [ 1112.279407][T22474] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4812'. [ 1112.290287][T22474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4812'. [ 1112.299830][T22474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4812'. [ 1112.391219][T22477] nbd: nbd1 already in use [ 1112.872349][T17079] block nbd0: Possible stuck request ffff88805d1f0000: control (read@0,4096B). Runtime 240 seconds [ 1113.674390][T22487] fuse: Unknown parameter 'group_id00000000000000000000' [ 1114.251411][ T96] block nbd3: Possible stuck request ffff888022655400: control (read@0,4096B). Runtime 180 seconds [ 1114.404077][T22500] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4821'. [ 1114.420895][T22500] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4821'. [ 1114.589541][T22506] nbd: nbd0 already in use [ 1115.105012][T22521] tipc: Enabled bearer , priority 10 [ 1115.140093][ T788] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1115.375964][ T788] usb 2-1: device descriptor read/64, error -71 [ 1116.235051][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.554504][ T788] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1116.724397][ T788] usb 2-1: device descriptor read/64, error -71 [ 1116.864651][ T788] usb usb2-port1: attempt power cycle [ 1116.903562][T22530] fuse: Bad value for 'user_id' [ 1117.314440][ T788] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1117.805063][T22537] __nla_validate_parse: 2 callbacks suppressed [ 1117.805081][T22537] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4831'. [ 1117.819910][ T788] usb 2-1: device descriptor read/8, error -71 [ 1117.822303][T22537] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4831'. [ 1117.850074][T22537] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4831'. [ 1117.875439][T22537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4831'. [ 1117.974949][T22541] nbd: nbd3 already in use [ 1118.359950][T22557] fuse: Bad value for 'user_id' [ 1120.674681][ T5814] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1121.179214][T22577] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4843'. [ 1121.194710][ T5814] usb 3-1: device descriptor read/64, error -71 [ 1121.214269][T22577] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4843'. [ 1121.241744][T22577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4843'. [ 1121.257253][T22577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4843'. [ 1121.452966][T22582] nbd: nbd0 already in use [ 1121.474458][ T5814] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1121.620018][ T27] kauditd_printk_skb: 60 callbacks suppressed [ 1121.620033][ T27] audit: type=1326 audit(1781770470.016:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22592 comm="syz.2.4848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fb39ce59 code=0x7ffc0000 [ 1121.634371][ T5814] usb 3-1: device descriptor read/64, error -71 [ 1121.668954][T22595] fuse: Bad value for 'user_id' [ 1121.702624][ T27] audit: type=1326 audit(1781770470.016:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22592 comm="syz.2.4848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fb39ce59 code=0x7ffc0000 [ 1121.729588][ T27] audit: type=1326 audit(1781770470.056:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22592 comm="syz.2.4848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fb39ce59 code=0x7ffc0000 [ 1121.790690][ T27] audit: type=1326 audit(1781770470.056:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22592 comm="syz.2.4848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fb2fb39ce59 code=0x7ffc0000 [ 1121.815548][ C0] vkms_vblank_simulate: vblank timer overrun [ 1121.825995][ T27] audit: type=1326 audit(1781770470.056:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22592 comm="syz.2.4848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fb39ce59 code=0x7ffc0000 [ 1121.850348][ C0] vkms_vblank_simulate: vblank timer overrun [ 1121.867870][ T5814] usb usb3-port1: attempt power cycle [ 1121.921052][ T27] audit: type=1326 audit(1781770470.056:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22592 comm="syz.2.4848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fb39ce59 code=0x7ffc0000 [ 1121.945211][ C0] vkms_vblank_simulate: vblank timer overrun [ 1121.952335][ T27] audit: type=1326 audit(1781770470.056:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22592 comm="syz.2.4848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2fb39ce59 code=0x7ffc0000 [ 1121.983319][ T27] audit: type=1326 audit(1781770470.056:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22592 comm="syz.2.4848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb2fb39ce59 code=0x7ffc0000 [ 1122.081803][ T27] audit: type=1326 audit(1781770470.056:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22592 comm="syz.2.4848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb2fb39ce59 code=0x7ffc0000 [ 1123.622969][T22598] random: crng reseeded on system resumption [ 1123.714399][T14515] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1123.874470][T14515] usb 2-1: device descriptor read/64, error -71 [ 1124.174569][T14515] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1124.314277][ T96] block nbd1: Possible stuck request ffff88804d694200: control (read@0,1024B). Runtime 180 seconds [ 1124.325214][ T96] block nbd1: Possible stuck request ffff88804d694400: control (read@1024,1024B). Runtime 180 seconds [ 1124.336841][ T96] block nbd1: Possible stuck request ffff88804d694600: control (read@2048,1024B). Runtime 180 seconds [ 1124.349986][ T96] block nbd1: Possible stuck request ffff88804d694800: control (read@3072,1024B). Runtime 180 seconds [ 1124.374305][T14515] usb 2-1: device descriptor read/64, error -71 [ 1124.389206][T22633] tipc: Enabled bearer , priority 0 [ 1124.494456][T14515] usb usb2-port1: attempt power cycle [ 1124.559189][T22633] syzkaller0: entered promiscuous mode [ 1124.567972][T22633] syzkaller0: entered allmulticast mode [ 1124.575219][T22633] tipc: Resetting bearer [ 1124.638204][T22632] tipc: Resetting bearer [ 1124.938497][T14515] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1124.981967][T14515] usb 2-1: device descriptor read/8, error -71 [ 1125.168321][T22665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4865'. [ 1125.255295][T14515] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1125.305132][T14515] usb 2-1: device descriptor read/8, error -71 [ 1125.548312][T14515] usb usb2-port1: unable to enumerate USB device [ 1127.856213][T22632] tipc: Disabling bearer [ 1128.978645][T14515] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1129.050635][T22723] tipc: Started in network mode [ 1129.055778][T22723] tipc: Node identity 022d99c03d13, cluster identity 4711 [ 1129.063682][T22723] tipc: Enabled bearer , priority 0 [ 1129.125446][T22723] syzkaller0: entered promiscuous mode [ 1129.130971][T22723] syzkaller0: entered allmulticast mode [ 1129.136777][T14515] usb 3-1: device descriptor read/64, error -71 [ 1129.144447][T22723] tipc: Resetting bearer [ 1129.196817][T22722] tipc: Resetting bearer [ 1129.425485][T14515] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1129.604625][T14515] usb 3-1: device descriptor read/64, error -71 [ 1129.731001][T14515] usb usb3-port1: attempt power cycle [ 1130.171513][T14515] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1130.213338][T14515] usb 3-1: device descriptor read/8, error -71 [ 1130.491330][T14515] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1130.548053][T14515] usb 3-1: device descriptor read/8, error -71 [ 1130.676081][T14515] usb usb3-port1: unable to enumerate USB device [ 1132.402094][T22722] tipc: Disabling bearer [ 1132.414128][T22730] geneve2: entered promiscuous mode [ 1132.419680][T22730] geneve2: entered allmulticast mode [ 1132.437466][ T23] tipc: Node number set to 1061067200 [ 1132.909001][T22772] tipc: Enabled bearer , priority 10 [ 1135.303817][T22792] syzkaller0: entered promiscuous mode [ 1135.313697][T22792] syzkaller0: entered allmulticast mode [ 1135.466797][T22801] syzkaller0: entered promiscuous mode [ 1135.472309][T22801] syzkaller0: entered allmulticast mode [ 1135.801148][T22768] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1138.062746][T22819] fuse: Bad value for 'fd' [ 1138.512516][T22826] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4899'. [ 1138.521748][T22826] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4899'. [ 1138.535205][T22826] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4899'. [ 1138.544326][T22826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4899'. [ 1141.279148][T22855] nbd: nbd3 already in use [ 1141.831915][T22858] fuse: Bad value for 'fd' [ 1143.021892][T22883] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4913'. [ 1143.040689][T22883] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4913'. [ 1143.056233][T22884] tipc: Enabled bearer , priority 0 [ 1143.066591][T22883] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4913'. [ 1143.075896][T22883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4913'. [ 1143.205706][T22884] syzkaller0: entered promiscuous mode [ 1143.211416][T22884] syzkaller0: entered allmulticast mode [ 1143.217729][T22884] tipc: Resetting bearer [ 1143.225927][T22897] nbd: nbd3 already in use [ 1143.305802][T22881] tipc: Resetting bearer [ 1143.512238][T17079] block nbd0: Possible stuck request ffff88805d1f0000: control (read@0,4096B). Runtime 270 seconds [ 1144.789765][ T96] block nbd3: Possible stuck request ffff888022655400: control (read@0,4096B). Runtime 210 seconds [ 1145.749077][T22881] tipc: Disabling bearer [ 1145.761470][T22896] syzkaller0: entered promiscuous mode [ 1145.769613][T22896] syzkaller0: entered allmulticast mode [ 1146.100190][T22926] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4925'. [ 1146.109707][T22926] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4925'. [ 1146.120651][T22926] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4925'. [ 1146.138472][T22926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4925'. [ 1146.172002][T22928] nbd: nbd0 already in use [ 1146.293365][T22935] tipc: Enabled bearer , priority 0 [ 1146.357448][T22935] syzkaller0: entered promiscuous mode [ 1146.362977][T22935] syzkaller0: entered allmulticast mode [ 1146.371024][T22935] tipc: Resetting bearer [ 1146.403842][T22934] tipc: Resetting bearer [ 1149.920121][ T5140] udevd[5140]: worker [17880] /devices/virtual/block/nbd3 timeout; kill it [ 1149.930622][ T5140] udevd[5140]: seq 19564 '/devices/virtual/block/nbd3' killed [ 1149.938548][ T5140] udevd[5140]: worker [17816] /devices/virtual/block/nbd1 timeout; kill it [ 1149.949323][ T5140] udevd[5140]: seq 19644 '/devices/virtual/block/nbd1' killed [ 1150.268860][T22934] tipc: Disabling bearer [ 1150.289484][ T5814] tipc: Node number set to 2320765326 [ 1150.412649][T22968] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4935'. [ 1150.461003][T22968] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4935'. [ 1150.465456][T22972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4935'. [ 1150.512214][T22972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4935'. [ 1150.852582][T22991] tipc: Enabled bearer , priority 0 [ 1150.912649][T22991] syzkaller0: entered promiscuous mode [ 1150.919880][T22991] syzkaller0: entered allmulticast mode [ 1150.941718][T22991] tipc: Resetting bearer [ 1150.989698][T22990] tipc: Resetting bearer [ 1151.128919][T23008] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4948'. [ 1151.139570][T23008] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4948'. [ 1151.158648][T23008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4948'. [ 1151.168056][T23008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4948'. [ 1153.527451][T22990] tipc: Disabling bearer [ 1153.538137][T23002] syzkaller0: entered promiscuous mode [ 1153.543847][T23002] syzkaller0: entered allmulticast mode [ 1154.098622][T23041] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4959'. [ 1154.114378][T23041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4959'. [ 1154.134428][T23041] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4959'. [ 1154.136284][T23043] tipc: Enabled bearer , priority 0 [ 1154.149450][T23041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4959'. [ 1154.315559][T23043] syzkaller0: entered promiscuous mode [ 1154.321285][T23043] syzkaller0: entered allmulticast mode [ 1154.334537][T23043] tipc: Resetting bearer [ 1154.379230][T23042] tipc: Resetting bearer [ 1154.399400][ T96] block nbd1: Possible stuck request ffff88804d694200: control (read@0,1024B). Runtime 210 seconds [ 1154.410290][ T96] block nbd1: Possible stuck request ffff88804d694400: control (read@1024,1024B). Runtime 210 seconds [ 1154.421467][ T96] block nbd1: Possible stuck request ffff88804d694600: control (read@2048,1024B). Runtime 210 seconds [ 1154.433332][ T96] block nbd1: Possible stuck request ffff88804d694800: control (read@3072,1024B). Runtime 210 seconds [ 1154.782791][T20371] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1154.798037][T20371] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1154.816835][T20371] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1154.861894][T20371] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1154.876681][T20371] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1154.893169][T20371] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1156.948774][ T5779] Bluetooth: hci4: command tx timeout [ 1157.641345][T23042] tipc: Disabling bearer [ 1157.758761][T23056] lo speed is unknown, defaulting to 1000 [ 1157.904990][T23084] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4969'. [ 1157.932345][T23084] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4969'. [ 1157.971629][T23084] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4969'. [ 1158.016758][T23084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4969'. [ 1158.899636][T23056] chnl_net:caif_netlink_parms(): no params data found [ 1159.024526][ T5779] Bluetooth: hci4: command tx timeout [ 1159.051829][T23056] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.079556][T23056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.094468][T23056] bridge_slave_0: entered allmulticast mode [ 1159.117305][T23056] bridge_slave_0: entered promiscuous mode [ 1159.145790][T23056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.152959][T23056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.183625][T23056] bridge_slave_1: entered allmulticast mode [ 1159.213846][T23056] bridge_slave_1: entered promiscuous mode [ 1159.282270][T23116] tipc: Enabled bearer , priority 0 [ 1159.303816][T23056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1159.339755][T23056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1159.389072][T23116] syzkaller0: entered promiscuous mode [ 1159.394839][T23116] syzkaller0: entered allmulticast mode [ 1159.401750][T23116] tipc: Resetting bearer [ 1159.487446][T23113] tipc: Resetting bearer [ 1159.591398][T23128] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4978'. [ 1159.611266][T23128] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4978'. [ 1159.634137][T23128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4978'. [ 1159.654289][T23128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4978'. [ 1161.109879][ T5779] Bluetooth: hci4: command tx timeout [ 1162.772152][T23113] tipc: Disabling bearer [ 1162.789623][T23056] team0: Port device team_slave_0 added [ 1162.804114][T23056] team0: Port device team_slave_1 added [ 1162.870771][T23056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1162.916209][T23056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1162.971150][T23056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1162.993172][T23056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1163.000693][T23056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1163.027877][T23056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1163.199951][ T5779] Bluetooth: hci4: command tx timeout [ 1163.229985][T23056] hsr_slave_0: entered promiscuous mode [ 1163.238123][T23056] hsr_slave_1: entered promiscuous mode [ 1163.246488][T23056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1163.254737][T23056] Cannot create hsr debugfs directory [ 1164.139482][T23175] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4992'. [ 1164.169254][T23175] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4992'. [ 1164.194671][T23176] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4992'. [ 1164.204010][T23176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4992'. [ 1164.477762][T23185] tipc: Enabled bearer , priority 0 [ 1164.579394][T23185] syzkaller0: entered promiscuous mode [ 1164.585209][T23185] syzkaller0: entered allmulticast mode [ 1164.593306][T23185] tipc: Resetting bearer [ 1164.632033][T23184] tipc: Resetting bearer [ 1166.952477][T23184] tipc: Disabling bearer [ 1167.023012][T23056] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1167.046970][T23056] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1167.069358][T23056] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1167.117546][T23056] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1167.796589][T23056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1167.838110][T23214] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5000'. [ 1167.957535][T23214] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5000'. [ 1167.991897][T23056] 8021q: adding VLAN 0 to HW filter on device team0 [ 1168.014513][T23215] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5000'. [ 1168.041132][ T9218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.048293][ T9218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1168.075814][T23215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5000'. [ 1168.101601][ T9231] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.108864][ T9231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1168.190428][T23056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1168.391758][T23232] tipc: Enabled bearer , priority 0 [ 1168.467006][T23232] syzkaller0: entered promiscuous mode [ 1168.472665][T23232] syzkaller0: entered allmulticast mode [ 1168.480611][T23232] tipc: Resetting bearer [ 1168.525116][T23231] tipc: Resetting bearer [ 1171.062509][T23231] tipc: Disabling bearer [ 1171.124878][T23056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1171.228569][T23056] veth0_vlan: entered promiscuous mode [ 1171.268041][T23056] veth1_vlan: entered promiscuous mode [ 1171.338015][T23056] veth0_macvtap: entered promiscuous mode [ 1171.367352][T23056] veth1_macvtap: entered promiscuous mode [ 1171.456069][T23270] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5010'. [ 1171.479537][T23270] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5010'. [ 1171.499984][T23270] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5010'. [ 1171.514002][T23270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5010'. [ 1171.558964][T23056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1171.614669][T23056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1171.670850][T23056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1171.834273][T23056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.030158][T23056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1172.250635][T23056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1172.325406][T23056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.341746][T23056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1172.362030][T23056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.393402][T23056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1172.422239][T23284] tipc: Enabled bearer , priority 0 [ 1172.441871][T23056] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.460672][T23056] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.470168][T23056] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.480308][T23056] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.536474][T23284] syzkaller0: entered promiscuous mode [ 1172.542012][T23284] syzkaller0: entered allmulticast mode [ 1172.552533][T23284] tipc: Resetting bearer [ 1172.593424][T23283] tipc: Resetting bearer [ 1173.586622][T17079] block nbd0: Possible stuck request ffff88805d1f0000: control (read@0,4096B). Runtime 300 seconds [ 1174.886930][ T96] block nbd3: Possible stuck request ffff888022655400: control (read@0,4096B). Runtime 240 seconds [ 1175.112218][T23283] tipc: Disabling bearer [ 1175.245152][ T9231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.253645][ T9231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1175.344815][ T9235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.352876][ T9235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1175.491419][T23305] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5019'. [ 1175.529542][T23305] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5019'. [ 1175.539220][T23310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5019'. [ 1175.552772][T23308] syzkaller0: entered promiscuous mode [ 1175.553459][T23310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5019'. [ 1175.559370][T23308] syzkaller0: entered allmulticast mode [ 1176.661853][T23328] tipc: Enabled bearer , priority 0 [ 1176.727057][T23328] syzkaller0: entered promiscuous mode [ 1176.733595][T23328] syzkaller0: entered allmulticast mode [ 1176.743161][T23328] tipc: Resetting bearer [ 1176.767928][T23327] tipc: Resetting bearer [ 1177.438666][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.305778][T23362] nbd: must specify at least one socket [ 1178.651764][T23364] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5031'. [ 1178.661381][T23364] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5031'. [ 1178.672663][T23364] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5031'. [ 1178.681767][T23364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5031'. [ 1180.547809][T23327] tipc: Disabling bearer [ 1180.872467][T23376] syzkaller0: entered promiscuous mode [ 1180.881131][T23376] syzkaller0: entered allmulticast mode [ 1182.771516][T23395] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5041'. [ 1182.790821][T23395] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5041'. [ 1182.810594][T23395] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5041'. [ 1182.820990][T23395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5041'. [ 1183.010126][T23405] tipc: Enabled bearer , priority 0 [ 1184.653064][ T96] block nbd1: Possible stuck request ffff88804d694200: control (read@0,1024B). Runtime 240 seconds [ 1185.024645][ T96] block nbd1: Possible stuck request ffff88804d694400: control (read@1024,1024B). Runtime 240 seconds [ 1185.035760][ T96] block nbd1: Possible stuck request ffff88804d694600: control (read@2048,1024B). Runtime 240 seconds [ 1185.046840][ T96] block nbd1: Possible stuck request ffff88804d694800: control (read@3072,1024B). Runtime 240 seconds [ 1185.073940][T23405] syzkaller0: entered promiscuous mode [ 1185.089880][T23405] syzkaller0: entered allmulticast mode [ 1185.097092][T23405] tipc: Resetting bearer [ 1185.495494][T23427] nbd: must specify at least one socket [ 1185.589293][T19615] tipc: Resetting bearer [ 1185.619594][T23404] tipc: Resetting bearer [ 1189.311389][T23404] tipc: Disabling bearer [ 1189.356421][T23436] syzkaller0: entered promiscuous mode [ 1189.361958][T23436] syzkaller0: entered allmulticast mode [ 1189.464484][T23463] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5052'. [ 1189.473559][T23463] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5052'. [ 1189.494611][T23463] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5052'. [ 1189.508146][T23463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5052'. [ 1189.999253][T23482] tipc: Enabled bearer , priority 0 [ 1190.079987][T23482] syzkaller0: entered promiscuous mode [ 1190.088316][T23482] syzkaller0: entered allmulticast mode [ 1190.096501][T23482] tipc: Resetting bearer [ 1190.141019][T23481] tipc: Resetting bearer [ 1191.220169][T23506] nbd: must specify at least one socket [ 1193.643748][T23512] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5065'. [ 1193.659597][T23512] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5065'. [ 1193.670385][T23512] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5065'. [ 1193.686908][T23512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5065'. [ 1194.329059][T23481] tipc: Disabling bearer [ 1194.485895][T23519] syzkaller0: entered promiscuous mode [ 1194.504466][T23519] syzkaller0: entered allmulticast mode [ 1195.666095][T23539] atomic_op ffff888068991198 conn xmit_atomic 0000000000000000 [ 1195.704968][T23540] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5076'. [ 1195.717282][T23540] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5076'. [ 1195.759306][T23540] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5076'. [ 1195.774644][T23540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5076'. [ 1195.796005][T20371] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1195.807636][T20371] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1195.816705][T20371] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1195.825465][T20371] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1195.833140][T20371] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1195.840777][T20371] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1195.959441][T23541] lo speed is unknown, defaulting to 1000 [ 1196.029533][T23547] tipc: Started in network mode [ 1196.044083][T23547] tipc: Node identity 96f9dedafe8c, cluster identity 4711 [ 1196.054571][T23547] tipc: Enabled bearer , priority 0 [ 1196.222388][T23547] syzkaller0: entered promiscuous mode [ 1196.242768][T23547] syzkaller0: entered allmulticast mode [ 1196.275271][T23547] tipc: Resetting bearer [ 1196.367671][T23546] tipc: Resetting bearer [ 1196.461116][T23556] nbd: must specify a size in bytes for the device [ 1197.907930][ T5779] Bluetooth: hci0: command tx timeout [ 1198.995959][T23546] tipc: Disabling bearer [ 1199.057509][ T5814] tipc: Node number set to 1752555226 [ 1199.373194][T23541] chnl_net:caif_netlink_parms(): no params data found [ 1199.425924][T23587] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5085'. [ 1199.457928][T23587] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5085'. [ 1199.473864][T23587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5085'. [ 1199.483262][T23587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5085'. [ 1199.560032][T23541] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.569213][T23541] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.577137][T23541] bridge_slave_0: entered allmulticast mode [ 1199.592727][T23541] bridge_slave_0: entered promiscuous mode [ 1199.602372][T23541] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.610170][T23541] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.619005][T23541] bridge_slave_1: entered allmulticast mode [ 1199.627465][T23541] bridge_slave_1: entered promiscuous mode [ 1199.742211][T23541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1199.793407][T23541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1199.882093][T23541] team0: Port device team_slave_0 added [ 1199.891475][T23541] team0: Port device team_slave_1 added [ 1199.911625][T23601] tipc: Enabled bearer , priority 0 [ 1199.935039][T23541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1199.943663][T23541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1199.970506][ C0] vkms_vblank_simulate: vblank timer overrun [ 1199.982859][T23541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1199.984414][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 1200.001107][ T5779] Bluetooth: hci0: command tx timeout [ 1200.049266][T23601] syzkaller0: entered promiscuous mode [ 1200.054953][T23601] syzkaller0: entered allmulticast mode [ 1200.061232][T23601] tipc: Resetting bearer [ 1200.070414][T23541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1200.084046][T23541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1200.121889][T23541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1200.307939][ T9231] tipc: Resetting bearer [ 1200.323619][T23599] tipc: Resetting bearer [ 1200.570481][T23611] Can't find a SQUASHFS superblock on nullb0 [ 1201.787714][T23631] nbd: must specify a size in bytes for the device [ 1202.065777][T20371] Bluetooth: hci0: command tx timeout [ 1203.668093][T17079] block nbd0: Possible stuck request ffff88805d1f0000: control (read@0,4096B). Runtime 330 seconds [ 1203.741775][T23599] tipc: Disabling bearer [ 1203.800956][T23541] hsr_slave_0: entered promiscuous mode [ 1203.808817][T23541] hsr_slave_1: entered promiscuous mode [ 1203.816860][T23541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1203.821029][T23610] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1203.834396][T23541] Cannot create hsr debugfs directory [ 1203.874317][T23610] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1203.882890][T23610] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1204.075759][T23638] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5095'. [ 1204.115382][T23638] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5095'. [ 1204.125739][T23639] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5095'. [ 1204.147551][T20371] Bluetooth: hci0: command tx timeout [ 1204.161303][T23639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5095'. [ 1205.311404][ T96] block nbd3: Possible stuck request ffff888022655400: control (read@0,4096B). Runtime 270 seconds [ 1205.512572][T23541] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1205.891440][T23657] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1206.008064][T23541] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1206.023455][T23541] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1206.044009][T23660] tipc: Enabled bearer , priority 0 [ 1206.082370][T23541] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1206.241195][T23654] syzkaller0: entered promiscuous mode [ 1206.259645][T23654] syzkaller0: entered allmulticast mode [ 1206.266004][T23654] tipc: Resetting bearer [ 1206.457132][ T9223] tipc: Resetting bearer [ 1206.484958][T23653] tipc: Resetting bearer [ 1206.491481][T23679] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5104'. [ 1206.500776][T23679] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5104'. [ 1206.512943][T23679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5104'. [ 1206.530417][T23679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5104'. [ 1209.081388][T23653] tipc: Disabling bearer [ 1209.306852][T23541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1209.345232][T23541] 8021q: adding VLAN 0 to HW filter on device team0 [ 1209.373129][ T9218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.380360][ T9218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1209.417670][ T9218] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.425012][ T9218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1209.853995][T23541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1209.949763][T23541] veth0_vlan: entered promiscuous mode [ 1209.967251][T23541] veth1_vlan: entered promiscuous mode [ 1211.345202][T23541] veth0_macvtap: entered promiscuous mode [ 1211.369356][T23541] veth1_macvtap: entered promiscuous mode [ 1211.428759][T23541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1211.470415][T23541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.502581][T23541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1211.564738][T23541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.604695][T23541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1211.644349][T23541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.685600][T23541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1211.686972][T23711] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5113'. [ 1211.717800][T23541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1211.722905][T23711] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5113'. [ 1211.740943][T23541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.756652][T23714] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5113'. [ 1211.763331][T23541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1211.778295][T23714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5113'. [ 1211.792038][T23541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.803845][T23541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1211.823920][T23541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.836379][T23541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1211.862935][T23541] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.872545][T23541] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.882883][T23541] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.893034][T23541] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.911192][T23713] tipc: Enabled bearer , priority 0 [ 1212.001655][T23713] syzkaller0: entered promiscuous mode [ 1212.005261][T23716] nbd9: detected capacity change from 0 to 63 [ 1212.010039][T23713] syzkaller0: entered allmulticast mode [ 1212.020144][T23713] tipc: Resetting bearer [ 1212.040953][T20371] block nbd9: Receive control failed (result -32) [ 1212.090230][T17079] block nbd9: Dead connection, failed to find a fallback [ 1212.097641][T17079] block nbd9: shutting down sockets [ 1212.103344][T17079] blk_print_req_error: 119 callbacks suppressed [ 1212.103359][T17079] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1212.121448][T17079] buffer_io_error: 138 callbacks suppressed [ 1212.121461][T17079] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1212.142346][T17079] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1212.153679][T17079] Buffer I/O error on dev nbd9, logical block 1, async page read [ 1212.161564][T17079] Buffer I/O error on dev nbd9, logical block 2, async page read [ 1212.169592][T17079] Buffer I/O error on dev nbd9, logical block 3, async page read [ 1212.180512][T23712] tipc: Resetting bearer [ 1212.200296][ T96] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1212.211265][ T96] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1212.219565][ T96] Buffer I/O error on dev nbd9, logical block 1, async page read [ 1212.227914][ T96] Buffer I/O error on dev nbd9, logical block 2, async page read [ 1212.235983][ T96] Buffer I/O error on dev nbd9, logical block 3, async page read [ 1212.244528][ T96] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1212.253609][ T96] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1212.262198][ T96] Buffer I/O error on dev nbd9, logical block 1, async page read [ 1212.270572][ T96] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1212.280384][ T96] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1212.290017][ T96] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1212.300004][ T96] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1212.310403][ T96] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1212.319714][T21005] ldm_validate_partition_table(): Disk read failed. [ 1212.327297][ T96] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1212.339457][T21005] Dev nbd9: unable to read RDB block 0 [ 1212.347145][T21005] nbd9: unable to read partition table [ 1212.360099][T21005] ldm_validate_partition_table(): Disk read failed. [ 1212.369816][T21005] Dev nbd9: unable to read RDB block 0 [ 1212.385380][T21005] nbd9: unable to read partition table [ 1214.968406][T23742] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5122'. [ 1214.978425][T23742] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5122'. [ 1214.992355][T23742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5122'. [ 1215.002473][T23742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5122'. [ 1215.201254][ T96] block nbd1: Possible stuck request ffff88804d694200: control (read@0,1024B). Runtime 270 seconds [ 1215.212303][ T96] block nbd1: Possible stuck request ffff88804d694400: control (read@1024,1024B). Runtime 270 seconds [ 1215.230918][ T96] block nbd1: Possible stuck request ffff88804d694600: control (read@2048,1024B). Runtime 270 seconds [ 1215.243889][ T96] block nbd1: Possible stuck request ffff88804d694800: control (read@3072,1024B). Runtime 270 seconds [ 1215.401630][T23712] tipc: Disabling bearer [ 1215.488817][ T9223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1215.524389][ T9223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1215.629960][ T9231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1215.663547][ T9231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.777053][T23776] tipc: Enabled bearer , priority 0 [ 1216.800339][T23776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5130'. [ 1216.915740][T23784] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5132'. [ 1216.920797][T23776] syzkaller0: entered promiscuous mode [ 1216.931557][T23776] syzkaller0: entered allmulticast mode [ 1216.938029][T23776] tipc: Resetting bearer [ 1216.964580][T23784] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5132'. [ 1217.000617][T23784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5132'. [ 1217.014649][T23784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5132'. [ 1217.045403][T23775] tipc: Resetting bearer [ 1217.155556][T23782] nbd10: detected capacity change from 0 to 63 [ 1217.186912][T20371] block nbd10: Receive control failed (result -104) [ 1219.753071][T23775] tipc: Disabling bearer [ 1220.318930][ T29] INFO: task udevd:17768 blocked for more than 143 seconds. [ 1220.348158][ T29] Not tainted syzkaller #0 [ 1220.369123][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1220.398808][ T29] task:udevd state:D stack:25160 pid:17768 ppid:5140 flags:0x00004006 [ 1220.433243][ T29] Call Trace: [ 1220.449165][ T29] [ 1220.459946][ T29] __schedule+0x1553/0x45a0 [ 1220.475211][ T29] ? asan.module_dtor+0x20/0x20 [ 1220.488646][ T29] ? mark_lock+0x94/0x320 [ 1220.503084][ T29] ? lock_chain_count+0x20/0x20 [ 1220.508566][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1220.513700][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1220.519672][ T29] schedule+0xbd/0x170 [ 1220.523818][ T29] io_schedule+0x80/0xd0 [ 1220.528437][ T29] folio_wait_bit_common+0x714/0xfa0 [ 1220.533964][ T29] ? folio_wait_bit+0x30/0x30 [ 1220.538829][ T29] ? _compound_head+0x120/0x120 [ 1220.543781][ T29] ? filemap_add_folio+0x192/0x3c0 [ 1220.550081][ T29] ? __filemap_get_folio+0x704/0xbb0 [ 1220.555708][ T29] ? blkdev_writepage+0x30/0x30 [ 1220.560700][ T29] do_read_cache_folio+0x1c0/0x7d0 [ 1220.567811][ T29] ? blkdev_writepage+0x30/0x30 [ 1220.572740][ T29] read_part_sector+0xd2/0x340 [ 1220.577700][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 1220.583154][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 1220.588681][ T29] ? put_partition+0x370/0x370 [ 1220.593638][ T29] ? alloc_pages+0x4dc/0x740 [ 1220.598473][ T29] bdev_disk_changed+0x740/0x1420 [ 1220.603587][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 1220.610306][ T29] ? iput+0x343/0x920 [ 1220.614454][ T29] blkdev_get_whole+0x30d/0x390 [ 1220.619421][ T29] blkdev_get_by_dev+0x279/0x600 [ 1220.624740][ T29] blkdev_open+0x152/0x360 [ 1220.629254][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 1220.634142][ T29] do_dentry_open+0x8c6/0x1500 [ 1220.639249][ T29] path_openat+0x27f1/0x3230 [ 1220.643928][ T29] ? do_sys_openat2+0xda/0x1d0 [ 1220.648961][ T29] ? verify_lock_unused+0x140/0x140 [ 1220.654373][ T29] ? do_filp_open+0x430/0x430 [ 1220.659170][ T29] ? __virt_addr_valid+0x18c/0x540 [ 1220.664653][ T29] do_filp_open+0x1f5/0x430 [ 1220.669270][ T29] ? vfs_tmpfile+0x490/0x490 [ 1220.673926][ T29] ? _raw_spin_unlock+0x28/0x40 [ 1220.679000][ T29] ? alloc_fd+0x58f/0x630 [ 1220.683438][ T29] do_sys_openat2+0x134/0x1d0 [ 1220.692365][ T29] ? do_sys_open+0xe0/0xe0 [ 1220.696949][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1220.703017][ T29] ? lock_chain_count+0x20/0x20 [ 1220.709502][ T29] __x64_sys_openat+0x139/0x160 [ 1220.714553][ T29] do_syscall_64+0x55/0xb0 [ 1220.719186][ T29] ? clear_bhb_loop+0x40/0x90 [ 1220.724014][ T29] ? clear_bhb_loop+0x40/0x90 [ 1220.729093][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1220.735404][ T29] RIP: 0033:0x7f1f042a7407 [ 1220.739901][ T29] RSP: 002b:00007fff228c1f70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1220.748846][ T29] RAX: ffffffffffffffda RBX: 00007f1f04a9a880 RCX: 00007f1f042a7407 [ 1220.756995][ T29] RDX: 00000000000a0800 RSI: 000055fa1dbb8a50 RDI: ffffffffffffff9c [ 1220.768566][ T29] RBP: 000055fa1db9f910 R08: 0000000000000000 R09: 0000000000000000 [ 1220.783541][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055fa1dbc7e60 [ 1220.791861][ T29] R13: 000055fa1dbb7410 R14: 0000000000000000 R15: 000055fa1dbc7e60 [ 1220.800096][ T29] [ 1220.804131][ T29] [ 1220.804131][ T29] Showing all locks held in the system: [ 1220.812923][ T29] 1 lock held by khungtaskd/29: [ 1220.817847][ T29] #0: ffffffff8d132160 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1220.828017][ T29] 2 locks held by getty/5541: [ 1220.832710][ T29] #0: ffff88802d0d50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1220.848330][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 1220.861111][ T29] 1 lock held by udevd/17768: [ 1220.873808][ T29] #0: ffff88807853c4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1220.894244][ T29] 1 lock held by udevd/17816: [ 1220.899003][ T29] #0: ffff88807c8c44c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1220.909290][ T29] 1 lock held by udevd/17880: [ 1220.914952][ T29] #0: ffff8880793d24c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1220.925664][ T29] 1 lock held by udevd/21004: [ 1220.930376][ T29] #0: ffff8880225934c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1220.940639][ T29] 2 locks held by syz.3.5135/23800: [ 1220.946210][ T29] #0: ffff88805bbd5c20 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 1220.956790][ T29] #1: ffffffff8d137b38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 1220.968244][ T29] 1 lock held by syz.0.5139/23809: [ 1220.973815][ T29] #0: ffffffff8d137a00 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x580 [ 1221.002973][ T29] [ 1221.021345][ T29] ============================================= [ 1221.021345][ T29] [ 1221.045724][ T29] NMI backtrace for cpu 0 [ 1221.050126][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1221.057370][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1221.067441][ T29] Call Trace: [ 1221.070725][ T29] [ 1221.073669][ T29] dump_stack_lvl+0x18c/0x250 [ 1221.078353][ T29] ? show_regs_print_info+0x20/0x20 [ 1221.083581][ T29] ? load_image+0x420/0x420 [ 1221.088206][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 1221.093280][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1221.099521][ T29] ? _printk+0xde/0x130 [ 1221.103707][ T29] ? load_image+0x420/0x420 [ 1221.108234][ T29] ? load_image+0x420/0x420 [ 1221.112766][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1221.118885][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1221.124884][ T29] watchdog+0xf3d/0xf80 [ 1221.129106][ T29] ? watchdog+0x1e1/0xf80 [ 1221.133441][ T29] kthread+0x2fa/0x390 [ 1221.137528][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1221.142551][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1221.147140][ T29] ret_from_fork+0x48/0x80 [ 1221.151560][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1221.156160][ T29] ret_from_fork_asm+0x11/0x20 [ 1221.160970][ T29] [ 1221.165342][ T29] Sending NMI from CPU 0 to CPUs 1: [ 1221.170590][ C1] NMI backtrace for cpu 1 [ 1221.170600][ C1] CPU: 1 PID: 9235 Comm: kworker/u4:22 Not tainted syzkaller #0 [ 1221.170615][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1221.170624][ C1] Workqueue: bat_events batadv_nc_worker [ 1221.170727][ C1] RIP: 0010:__lock_acquire+0x1be0/0x7d40 [ 1221.170748][ C1] Code: 09 45 31 f6 49 b8 00 00 00 00 00 fc ff df 48 c7 84 24 20 01 00 00 0e 36 e0 45 48 8b 84 24 d0 00 00 00 4a c7 04 00 00 00 00 00 <4a> c7 44 00 08 00 00 00 00 4a c7 44 00 10 00 00 00 00 42 c7 44 00 [ 1221.170759][ C1] RSP: 0018:ffffc90010577700 EFLAGS: 00000097 [ 1221.170771][ C1] RAX: 1ffff920020aef04 RBX: ffff88802832c6d8 RCX: ffffffff81684800 [ 1221.170781][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff911cd5d8 [ 1221.170790][ C1] RBP: ffffc90010577948 R08: dffffc0000000000 R09: 1ffffffff2239abb [ 1221.170800][ C1] R10: dffffc0000000000 R11: fffffbfff2239abc R12: 535453609bb437d4 [ 1221.170810][ C1] R13: ffff88802832bc00 R14: 0000000000000001 R15: ffff88802832c750 [ 1221.170820][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1221.170832][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1221.170842][ C1] CR2: 00007f25be9ea2f8 CR3: 000000001f3b9000 CR4: 00000000003506e0 [ 1221.170854][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1221.170862][ C1] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1221.170871][ C1] Call Trace: [ 1221.170877][ C1] [ 1221.170883][ C1] ? look_up_lock_class+0x75/0x140 [ 1221.170912][ C1] ? verify_lock_unused+0x140/0x140 [ 1221.170931][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1221.170949][ C1] ? mark_lock+0x94/0x320 [ 1221.170965][ C1] lock_acquire+0x19e/0x420 [ 1221.170979][ C1] ? batadv_nc_purge_paths+0xe7/0x3a0 [ 1221.170995][ C1] ? lock_chain_count+0x20/0x20 [ 1221.171012][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1221.171027][ C1] ? __local_bh_disable_ip+0x115/0x1a0 [ 1221.171041][ C1] ? __bpf_trace_tasklet+0x160/0x160 [ 1221.171053][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1221.171067][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1221.171082][ C1] ? batadv_nc_purge_paths+0xe7/0x3a0 [ 1221.171098][ C1] _raw_spin_lock_bh+0x36/0x50 [ 1221.171123][ C1] ? batadv_nc_purge_paths+0xe7/0x3a0 [ 1221.171138][ C1] ? batadv_nc_purge_paths+0x3a0/0x3a0 [ 1221.171154][ C1] batadv_nc_purge_paths+0xe7/0x3a0 [ 1221.171175][ C1] batadv_nc_worker+0x328/0x610 [ 1221.171193][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 1221.171210][ C1] process_scheduled_works+0xa5d/0x15d0 [ 1221.171237][ C1] ? worker_attach_to_pool+0x380/0x380 [ 1221.171255][ C1] ? assign_work+0x3d2/0x5d0 [ 1221.171273][ C1] worker_thread+0xa55/0xfc0 [ 1221.171298][ C1] kthread+0x2fa/0x390 [ 1221.171310][ C1] ? pr_cont_work+0x560/0x560 [ 1221.171326][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1221.171339][ C1] ret_from_fork+0x48/0x80 [ 1221.171355][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1221.171368][ C1] ret_from_fork_asm+0x11/0x20 [ 1221.171390][ C1] [ 1221.171915][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1221.471572][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1221.478760][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1221.489065][ T29] Call Trace: [ 1221.492337][ T29] [ 1221.495264][ T29] dump_stack_lvl+0x18c/0x250 [ 1221.499944][ T29] ? show_regs_print_info+0x20/0x20 [ 1221.505139][ T29] ? load_image+0x420/0x420 [ 1221.509641][ T29] panic+0x2dc/0x730 [ 1221.513533][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 1221.519178][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 1221.523699][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 1221.529291][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1221.535457][ T29] watchdog+0xf7c/0xf80 [ 1221.539634][ T29] ? watchdog+0x1e1/0xf80 [ 1221.544245][ T29] kthread+0x2fa/0x390 [ 1221.548326][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1221.553362][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1221.558068][ T29] ret_from_fork+0x48/0x80 [ 1221.562504][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1221.567097][ T29] ret_from_fork_asm+0x11/0x20 [ 1221.571868][ T29] [ 1221.575013][ T29] Kernel Offset: disabled [ 1221.579338][ T29] Rebooting in 86400 seconds..