last executing test programs: 2m30.063284127s ago: executing program 3 (id=3540): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2, 0x5, 0x4, 0x854b, 0xd8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xfffd, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xd3bb, 0xcba, 0x10, 0x800001, 0xb, 0xfff, 0xb146, 0x2, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200040d0) socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m29.736201147s ago: executing program 3 (id=3545): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff2, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) 2m29.604915322s ago: executing program 3 (id=3549): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x1, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) write$binfmt_misc(r0, &(0x7f0000000040), 0xffc1) 2m28.704398151s ago: executing program 3 (id=3564): socket$netlink(0x10, 0x3, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x43, &(0x7f0000000140)=0x0) r1 = timerfd_create(0x0, 0x0) io_submit(r0, 0x3, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x801, r1, &(0x7f0000000080)="495d4df857bc1393", 0x8, 0x4}, 0x0, 0x0]) 2m28.361141132s ago: executing program 3 (id=3568): r0 = socket$kcm(0x10, 0x8, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ifreq(r2, 0x8932, &(0x7f0000003380)={'veth0_to_bond\x00', @ifru_names='veth0_to_bridge\x00'}) r3 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r5, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r7, @ANYBLOB="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"], 0xa0}, 0x2, 0x34005}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32], 0x1c}}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r6, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r9, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, '^}.-'}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '[^'}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, 'GPL\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, 'GPL\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x4084) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$inet6_sctp(0xa, 0x801, 0x84) unshare(0x400) bpf$PROG_LOAD(0x23, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) 2m28.213260857s ago: executing program 3 (id=3570): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f00000000c0)='./file1\x00') acct(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sync() 2m13.140373726s ago: executing program 32 (id=3570): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f00000000c0)='./file1\x00') acct(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sync() 15.291990563s ago: executing program 0 (id=4571): capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x4, 0x7, 0x8}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) 15.08477686s ago: executing program 0 (id=4572): sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) mkdir(&(0x7f0000000100)='./file0\x00', 0x1d3) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 4.820094673s ago: executing program 2 (id=4603): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004084) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r1, 0x50) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100000b}, 0x1c) listen(r2, 0xb) openat$snapshot(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 4.511470214s ago: executing program 1 (id=4604): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f00000005c0), 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 4.30490976s ago: executing program 4 (id=4605): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00'}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 3.560045745s ago: executing program 4 (id=4606): select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x7fffffffffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.554505004s ago: executing program 1 (id=4607): r0 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "1f1f758a517ac2afb617707a659039f0aa79253dd2e6ec53cfd8915ab1f2eb2d9eab6a44988b9cca3beaf0b8db297ec526ea0c178c23db4616a845473010137c", 0x12}, 0x48, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f0000000140), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="af", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r2, 0x0) 3.39765394s ago: executing program 1 (id=4608): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) syz_open_procfs$userns(0x0, &(0x7f0000000100)) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$nl_netfilter(r5, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB="7c0100001009010329bd7000fddbdf250300000ab900a0800400198008001e00000000000c004100670e000000000000008867c72f239bc85208a310ec0fcdc24bfdce6cb0723f526c01fc0b5458bae917cd1edec040acb53f6555cbced2e4cfbb29b8bfceab4928309046578a37a9f3433710c1344478ce7b3055fee3de4412644bc424a7a14136b8b675bcde36c0cb113996a72e182746232bdc99f6a2ae9a11f4eb304598668dfba7c62bc81f3db532bc3e8bcd5afb8636c16119d7ab9b698a28571d4dfb41c9754242ccc0000000d672caa0e1d75e66b45ebdb5dac760"], 0x17c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008045) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r7, 0x1, 0x1, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "d683c6e302c92431e16114757e63d3f93a92c296031f31d3d208ebf3"}}]}]}, 0x5c}}, 0x40880) waitid$P_PIDFD(0x3, r5, &(0x7f0000000300), 0x2, &(0x7f0000000380)) socket$key(0xf, 0x3, 0x2) 3.36773457s ago: executing program 0 (id=4582): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000005540)=[{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)="5308fe8e4c59ee609a5ab268afd855a0af46fd165c3e5d9682cbbf6e9668f0e92983a453b2148163ca78a8f3175179259f8a73fb28eecc49ac09149af80a1bc78c06a568003c63b463856b028f246c7796bf6fe12a23de95141e225d7b575139e6ef96648979cdbd1ea3de097a572639", 0x70}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/21, 0x15}, {&(0x7f0000000980)=""/236, 0xec}], 0x2}, 0x80}], 0x1, 0x102, 0x0) 3.172046947s ago: executing program 2 (id=4609): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) unshare(0x24060400) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.032137482s ago: executing program 0 (id=4610): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xfffff0df, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x109d02, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x33, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.031965862s ago: executing program 2 (id=4611): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 1.949117226s ago: executing program 2 (id=4612): sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000080)="260f18a000702636260f381d7f00ba6100ecb800008ed8d95c00d9f6260f093e3e0f01c266b9dd01000066b80098000066ba000000000f30d9ed", 0x3a}], 0x1, 0x3c, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x1a, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3c}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0xff}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x4, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.85019148s ago: executing program 4 (id=4613): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00'}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, 0x0, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 1.740088103s ago: executing program 0 (id=4614): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b702000001040000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80d0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a7"], 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f00000005c0), 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.415382204s ago: executing program 4 (id=4615): r0 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 1.335745977s ago: executing program 0 (id=4616): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r2, &(0x7f0000000340)=ANY=[], 0xcc) close_range(r0, 0xffffffffffffffff, 0x0) 1.184088421s ago: executing program 4 (id=4617): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005a00)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000000340)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x533201, 0x80) creat(&(0x7f0000000140)='./bus\x00', 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) 829.376043ms ago: executing program 1 (id=4618): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000005540)=[{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)="5308fe8e4c59ee609a5ab268afd855a0af46fd165c3e5d9682cbbf6e9668f0e92983a453b2148163ca78a8f3175179259f8a73fb28eecc49ac09149af80a1bc78c06a568003c63b463856b028f246c7796bf6fe12a23de95141e225d7b575139e6ef96648979cdbd1ea3de097a572639", 0x70}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/21, 0x15}, {&(0x7f0000000980)=""/236, 0xec}], 0x2}, 0x80}], 0x1, 0x102, 0x0) 649.604359ms ago: executing program 2 (id=4619): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x20}}, 0x0) 600.024521ms ago: executing program 1 (id=4620): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) unshare(0x24060400) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 484.822464ms ago: executing program 1 (id=4621): select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x7fffffffffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 462.952965ms ago: executing program 2 (id=4622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r2, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 0s ago: executing program 4 (id=4623): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_HELP={0x0, 0x5, 0x0, 0x1, {0x0, 0x1, 'sip-20000\x00'}}, @CTA_STATUS_MASK={0xfffffffffffffe4c, 0x1a, 0x1, 0x0, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="840000000001010400000000141a000002000000240001801400018008000100e0000001080002000a0101000c00028005000100000000003000028014000180080001000000000008000200ac1e00010c00028005000100b558665aa5b4c6000000000c000280050001001100000008000740000000010c00170000000cd8ffff6ab006"], 0x84}}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8b0b, &(0x7f0000000200)={'wlan1\x00', @random="9ffff7070600"}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008004}, 0x24004054) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x8000) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x200000000000000) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x2, 0x3}, 0x10) sendmsg$tipc(r8, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x21600, 0x5, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r9, &(0x7f0000000240), 0x0}, 0x20) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)='9 j', 0x3}], 0x1) kernel console output (not intermixed with test programs): T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.561493][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.007334][T15134] syzkaller0: entered promiscuous mode [ 808.012885][T15134] syzkaller0: entered allmulticast mode [ 808.841039][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.860586][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.815573][T14910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 809.911594][T14910] veth0_vlan: entered promiscuous mode [ 809.941101][T14910] veth1_vlan: entered promiscuous mode [ 809.993677][T14910] veth0_macvtap: entered promiscuous mode [ 810.012113][T14910] veth1_macvtap: entered promiscuous mode [ 810.050649][T14910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.066376][T14910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.079533][T14910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.098961][T14910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.112231][T14910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.130899][T14910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.146116][T14910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.163094][T14910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.184818][T14910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.204625][T14910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.217435][T14910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.228049][T14910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.239610][T14910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.251460][T14910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.268473][T14910] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.281209][T14910] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.291380][T14910] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.300524][T14910] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.560120][T15119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 810.577868][T15159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2566'. [ 810.697892][T13045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.715874][T13045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.784941][T13045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.795227][T13045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.848843][T15163] syzkaller0: entered promiscuous mode [ 810.866675][T15163] syzkaller0: entered allmulticast mode [ 811.103905][T15174] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2571'. [ 811.130876][T15174] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2571'. [ 811.154061][T15177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2571'. [ 811.181050][T15177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2571'. [ 813.520115][T15211] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2581'. [ 813.529749][T15211] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2581'. [ 813.541202][T15211] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2581'. [ 813.551097][T15211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2581'. [ 816.826331][T15259] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2593'. [ 816.836527][T15259] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2593'. [ 816.847724][T15259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2593'. [ 816.856953][T15259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2593'. [ 817.497784][T15247] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 817.733408][T15263] syzkaller0: entered promiscuous mode [ 817.740538][T15263] syzkaller0: entered allmulticast mode [ 817.768289][T15272] syzkaller0: entered promiscuous mode [ 817.774389][T15272] syzkaller0: entered allmulticast mode [ 818.544481][T15303] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2604'. [ 818.554492][T15303] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2604'. [ 818.566692][T15303] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2604'. [ 818.580128][T15303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2604'. [ 820.256729][T15299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2602'. [ 820.269179][T15299] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 821.057444][T15344] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2618'. [ 823.334975][T15371] nbd: couldn't find a device at index 0 [ 823.344080][T15371] netlink: 'syz.3.2626': attribute type 13 has an invalid length. [ 823.532687][T15382] __nla_validate_parse: 3 callbacks suppressed [ 823.532704][T15382] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2630'. [ 823.554407][T15382] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2630'. [ 823.576232][T15382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2630'. [ 823.585854][T15382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2630'. [ 823.601902][T15373] syzkaller0: entered promiscuous mode [ 823.617687][T15373] syzkaller0: entered allmulticast mode [ 826.482976][T15429] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2641'. [ 826.493071][T15429] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2641'. [ 826.508474][T15429] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2641'. [ 826.521191][T15429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2641'. [ 826.604390][T15431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2642'. [ 826.708454][T15445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2646'. [ 829.877510][T15476] __nla_validate_parse: 4 callbacks suppressed [ 829.877535][T15476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2656'. [ 829.893002][T15483] lo: Caught tx_queue_len zero misconfig [ 829.924875][T15485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2659'. [ 830.216062][T11108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.533950][T15508] nbd3: detected capacity change from 0 to 63 [ 830.558798][T15515] nbd: couldn't find device at index 2 [ 830.577100][ T5785] block nbd3: Receive control failed (result -104) [ 830.843378][T15528] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2671'. [ 831.139582][T15544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2675'. [ 831.162090][T15546] netlink: 632 bytes leftover after parsing attributes in process `syz.1.2676'. [ 831.236644][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.396452][T12034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.492241][T15551] syzkaller0: entered promiscuous mode [ 831.504865][T15551] syzkaller0: entered allmulticast mode [ 832.259866][T15559] block nbd1: NBD_DISCONNECT [ 832.275190][T11108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.445838][T15558] nbd0: detected capacity change from 0 to 63 [ 832.468180][ T5785] block nbd0: Receive control failed (result -104) [ 832.479051][T15567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2684'. [ 832.514987][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.027450][T15586] syzkaller0: entered promiscuous mode [ 833.051168][T15586] syzkaller0: entered allmulticast mode [ 833.158625][T12034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.206264][T15594] block nbd1: NBD_DISCONNECT [ 833.310063][T15597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2697'. [ 833.334762][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.392080][T15601] nbd: nbd3 already in use [ 833.725790][T15614] nbd: nbd3 already in use [ 833.741128][T15614] block nbd3: NBD_DISCONNECT [ 833.752995][T15614] block nbd3: Send disconnect failed -32 [ 833.763334][T15614] block nbd3: shutting down sockets [ 833.784854][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 833.794430][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 833.811014][ C1] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 833.820238][ C1] Buffer I/O error on dev nbd3, logical block 1, async page read [ 833.829229][ C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 833.838449][ C1] Buffer I/O error on dev nbd3, logical block 2, async page read [ 833.846332][ C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 833.855464][ C1] Buffer I/O error on dev nbd3, logical block 3, async page read [ 833.867090][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 833.878368][ T96] Buffer I/O error on dev nbd3, logical block 0, async page read [ 833.886652][ T96] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 833.896597][ T96] Buffer I/O error on dev nbd3, logical block 1, async page read [ 833.905013][ T96] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 833.914343][ T96] Buffer I/O error on dev nbd3, logical block 2, async page read [ 833.922315][ T96] Buffer I/O error on dev nbd3, logical block 3, async page read [ 833.934342][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 833.943687][ T96] Buffer I/O error on dev nbd3, logical block 0, async page read [ 833.952340][ T96] Buffer I/O error on dev nbd3, logical block 1, async page read [ 833.963705][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 833.973453][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 833.989237][T14750] ldm_validate_partition_table(): Disk read failed. [ 833.999051][T14750] Dev nbd3: unable to read RDB block 0 [ 834.006864][T14750] nbd3: unable to read partition table [ 834.022392][T14750] ldm_validate_partition_table(): Disk read failed. [ 834.031133][T14750] Dev nbd3: unable to read RDB block 0 [ 834.039320][T14750] nbd3: unable to read partition table [ 834.307405][T15630] nbd3: detected capacity change from 0 to 63 [ 834.320997][ T5785] block nbd3: Receive control failed (result -32) [ 834.328025][ T96] block nbd3: Send control failed (result -32) [ 834.341193][ T96] block nbd3: Request send failed, requeueing [ 834.351546][ T96] block nbd3: Dead connection, failed to find a fallback [ 834.360036][ T96] block nbd3: shutting down sockets [ 834.367444][T11108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.383429][T14750] ldm_validate_partition_table(): Disk read failed. [ 834.417062][T14750] Dev nbd3: unable to read RDB block 0 [ 834.445859][T14750] nbd3: unable to read partition table [ 834.486433][T15635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2710'. [ 834.524967][T14750] ldm_validate_partition_table(): Disk read failed. [ 834.542371][T14750] Dev nbd3: unable to read RDB block 0 [ 834.555855][T14750] nbd3: unable to read partition table [ 834.901415][T15655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2716'. [ 835.067647][T15664] nbd: nbd3 already in use [ 835.293362][T15673] tipc: Started in network mode [ 835.302620][T15673] tipc: Node identity 9a475bfdcb2e, cluster identity 4711 [ 835.316792][T15673] tipc: Enabled bearer , priority 0 [ 835.325452][T15677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2723'. [ 835.394997][T11108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.481995][T15673] syzkaller0: entered promiscuous mode [ 835.494647][T15673] syzkaller0: entered allmulticast mode [ 835.501703][T15673] tipc: Resetting bearer [ 835.571693][T12034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.601901][T15672] tipc: Resetting bearer [ 836.437473][T11427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.486430][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.757430][T15672] tipc: Disabling bearer [ 837.789327][T11108] tipc: Node number set to 1365859325 [ 837.944087][T15719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2734'. [ 837.964171][T15720] netlink: 632 bytes leftover after parsing attributes in process `syz.3.2733'. [ 838.514887][T11427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.547530][T15744] tipc: Enabled bearer , priority 0 [ 838.645149][T12035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.725798][T15744] syzkaller0: entered promiscuous mode [ 838.744680][T15744] syzkaller0: entered allmulticast mode [ 838.765278][T15744] tipc: Resetting bearer [ 838.925829][T12034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.975783][T15755] nbd: nbd3 already in use [ 839.010703][T13043] tipc: Resetting bearer [ 839.019612][T15743] tipc: Resetting bearer [ 839.116143][T15768] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2750'. [ 839.566867][T11427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.206046][T11431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.609799][T11427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.917968][T15743] tipc: Disabling bearer [ 840.929165][T15762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2748'. [ 841.164840][T15779] netlink: 'syz.1.2754': attribute type 29 has an invalid length. [ 841.188650][T15779] netlink: 'syz.1.2754': attribute type 1 has an invalid length. [ 841.485682][T12035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.509507][T15795] tipc: Started in network mode [ 841.514452][T15795] tipc: Node identity 1e3fabdf63c1, cluster identity 4711 [ 841.523505][T15795] tipc: Enabled bearer , priority 0 [ 841.536874][T15798] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2762'. [ 841.636204][T15795] syzkaller0: entered promiscuous mode [ 841.637996][T11427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.642068][T15795] syzkaller0: entered allmulticast mode [ 841.656518][T15795] tipc: Resetting bearer [ 841.734903][T15794] tipc: Resetting bearer [ 841.786630][T15806] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2763'. [ 841.958625][T12034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.679111][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.400443][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.724922][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.960279][T15794] tipc: Disabling bearer [ 843.997272][T12034] tipc: Node number set to 2113842143 [ 844.116250][T15836] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2772'. [ 844.405466][T15851] syz_tun: entered allmulticast mode [ 844.419461][T15851] dvmrp6: entered allmulticast mode [ 844.434000][T15849] syz_tun: left allmulticast mode [ 844.504343][T15856] tipc: Enabled bearer , priority 0 [ 844.572299][T15856] syzkaller0: entered promiscuous mode [ 844.578927][T15856] syzkaller0: entered allmulticast mode [ 844.585225][T15856] tipc: Resetting bearer [ 844.647250][T15854] tipc: Resetting bearer [ 844.765066][T11108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.998923][T12034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.805099][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.702377][T15854] tipc: Disabling bearer [ 846.713149][T15879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2786'. [ 846.854087][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.367303][T15911] netlink: 'syz.2.2799': attribute type 1 has an invalid length. [ 847.426939][T15911] 8021q: adding VLAN 0 to HW filter on device bond3 [ 847.443668][T15915] bond3: (slave dummy0): making interface the new active one [ 847.459492][T15915] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 847.876631][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.048341][T12034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.104738][T15942] netlink: 'syz.0.2812': attribute type 1 has an invalid length. [ 848.161629][T15942] 8021q: adding VLAN 0 to HW filter on device bond1 [ 848.173773][T15946] bond1: (slave dummy0): making interface the new active one [ 848.203804][T15946] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 848.883709][T15975] netlink: 'syz.2.2823': attribute type 24 has an invalid length. [ 848.914929][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.156499][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.636342][T15997] netlink: 'syz.2.2833': attribute type 1 has an invalid length. [ 849.715441][T15997] 8021q: adding VLAN 0 to HW filter on device bond4 [ 849.811880][T16001] bond3: (slave dummy0): Releasing active interface [ 849.855965][T16001] bond4: (slave dummy0): making interface the new active one [ 849.875938][T16001] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 849.944219][T16009] block nbd3: NBD_DISCONNECT [ 849.952022][T16009] block nbd3: Send disconnect failed -32 [ 849.958183][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.577457][T16032] nbd3: detected capacity change from 0 to 63 [ 850.605021][ T5785] block nbd3: Receive control failed (result -104) [ 850.810015][T16042] nbd: couldn't find device at index 2 [ 850.995184][T11108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.091510][T12034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.899802][T16056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 852.043410][T11427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.084836][T16087] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2866'. [ 852.196532][T12035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.571183][T16107] block nbd3: NBD_DISCONNECT [ 852.585706][T16107] block nbd3: Send disconnect failed -32 [ 852.597519][T16107] block nbd3: shutting down sockets [ 852.613161][ C0] blk_print_req_error: 256 callbacks suppressed [ 852.613179][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 852.628725][ C0] buffer_io_error: 286 callbacks suppressed [ 852.628738][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 852.646923][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 852.656112][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 852.663951][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 852.673107][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 852.680955][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 852.690106][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 852.725127][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 852.734682][ T96] Buffer I/O error on dev nbd3, logical block 0, async page read [ 852.742469][ T96] Buffer I/O error on dev nbd3, logical block 1, async page read [ 852.751219][ T96] Buffer I/O error on dev nbd3, logical block 2, async page read [ 852.759574][ T96] Buffer I/O error on dev nbd3, logical block 3, async page read [ 852.767991][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 852.777618][ T96] Buffer I/O error on dev nbd3, logical block 0, async page read [ 852.785780][ T96] Buffer I/O error on dev nbd3, logical block 1, async page read [ 852.793868][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 852.803382][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 852.813098][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 852.822612][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 852.832311][T14750] ldm_validate_partition_table(): Disk read failed. [ 852.840476][T14750] Dev nbd3: unable to read RDB block 0 [ 852.847273][T14750] nbd3: unable to read partition table [ 852.884936][T16114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.894241][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.905984][T14750] ldm_validate_partition_table(): Disk read failed. [ 852.914734][T14750] Dev nbd3: unable to read RDB block 0 [ 852.925423][T14750] nbd3: unable to read partition table [ 852.945987][T16114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.966690][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.994294][T16115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.082972][T11427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.621717][T16130] nbd3: detected capacity change from 0 to 63 [ 853.947688][ T5785] block nbd3: Receive control failed (result -104) [ 855.168392][T16134] syzkaller0: entered promiscuous mode [ 855.174056][T16134] syzkaller0: entered allmulticast mode [ 856.200538][ T5783] net_ratelimit: 3 callbacks suppressed [ 856.200558][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.205432][T16146] netlink: 'syz.1.2884': attribute type 1 has an invalid length. [ 857.213705][T16146] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 857.234922][T11108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.524082][T16166] syzkaller0: entered promiscuous mode [ 857.531615][T16166] syzkaller0: entered allmulticast mode [ 858.277595][T12034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.285824][T12034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.327101][T11108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.652891][T16188] syzkaller0: entered promiscuous mode [ 859.668400][T16188] syzkaller0: entered allmulticast mode [ 859.840251][T16203] (null): rxe_set_mtu: Set mtu to 4096 [ 860.357676][T11108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.675235][T12035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.320412][T12034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.405613][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.552337][T16197] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2898'. [ 861.575801][T16203] lo speed is unknown, defaulting to 1000 [ 861.671667][T16203] lo speed is unknown, defaulting to 1000 [ 861.688708][T16203] lo speed is unknown, defaulting to 1000 [ 861.758784][T16213] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2905'. [ 862.037847][T16203] infiniband syz1: set active [ 862.047083][T16203] infiniband syz1: added lo [ 862.058310][T16203] syz1: rxe_create_cq: returned err = -12 [ 862.065096][T16203] infiniband syz1: Couldn't create ib_mad CQ [ 862.071431][T12034] lo speed is unknown, defaulting to 1000 [ 862.086822][T16203] infiniband syz1: Couldn't open port 1 [ 862.163989][T16203] RDS/IB: syz1: added [ 862.184194][T16203] smc: adding ib device syz1 with port count 1 [ 862.214098][T16203] smc: ib device syz1 port 1 has pnetid [ 862.227958][T12034] lo speed is unknown, defaulting to 1000 [ 862.260025][T16203] lo speed is unknown, defaulting to 1000 [ 862.436213][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.591562][T16237] syzkaller0: entered promiscuous mode [ 862.599829][ T96] block nbd0: Possible stuck request ffff8880485c0000: control (read@0,1024B). Runtime 30 seconds [ 862.611165][ T96] block nbd0: Possible stuck request ffff8880485c0200: control (read@1024,1024B). Runtime 30 seconds [ 862.613606][T16237] syzkaller0: entered allmulticast mode [ 862.624885][ T96] block nbd0: Possible stuck request ffff8880485c0400: control (read@2048,1024B). Runtime 30 seconds [ 862.639065][ T96] block nbd0: Possible stuck request ffff8880485c0600: control (read@3072,1024B). Runtime 30 seconds [ 862.657986][T16203] lo speed is unknown, defaulting to 1000 [ 863.478996][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.357655][T11431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.519872][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.026822][T16203] lo speed is unknown, defaulting to 1000 [ 865.173472][T16272] syzkaller0: entered promiscuous mode [ 865.184966][T16272] syzkaller0: entered allmulticast mode [ 865.385041][T16203] lo speed is unknown, defaulting to 1000 [ 865.565099][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.730726][T16290] nbd: must specify an index to disconnect [ 865.805477][T16293] tipc: Enabled bearer , priority 0 [ 865.833619][T16292] tipc: Disabling bearer [ 865.875842][T16295] syzkaller0: entered promiscuous mode [ 865.881397][T16295] syzkaller0: entered allmulticast mode [ 866.595111][T11108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.145570][T16329] nbd: must specify an index to disconnect [ 867.397341][T12034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.635278][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.232923][T16336] tipc: Started in network mode [ 868.254612][T16336] tipc: Node identity , cluster identity 4711 [ 868.260785][T16336] tipc: Failed to obtain node identity [ 868.275845][T16336] tipc: Enabling of bearer rejected, failed to enable media [ 868.448042][T16349] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2945'. [ 868.591633][T16351] syzkaller0: entered promiscuous mode [ 868.601255][T16351] syzkaller0: entered allmulticast mode [ 868.674896][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.689230][T16356] nbd: must specify an index to disconnect [ 869.158345][T16367] nbd: nbd0 already in use [ 869.725843][T11427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.281531][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.283662][T12034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.300694][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.435081][T12034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.766566][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.006120][T16379] syzkaller0: entered promiscuous mode [ 871.011690][T16379] syzkaller0: entered allmulticast mode [ 871.798912][T11427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.835714][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.843875][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.329284][T16409] tipc: Enabled bearer , priority 0 [ 873.351082][T16408] tipc: Disabling bearer [ 873.545702][T16425] syzkaller0: entered promiscuous mode [ 873.562031][T16425] syzkaller0: entered allmulticast mode [ 873.884971][T11427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.927151][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.405363][T12035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.874996][T11431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.943864][T16461] tipc: Enabled bearer , priority 0 [ 875.955952][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.133506][T16461] syzkaller0: entered promiscuous mode [ 876.140263][T16461] syzkaller0: entered allmulticast mode [ 876.149564][T16461] tipc: Resetting bearer [ 876.157938][T16475] netlink: 'syz.0.2975': attribute type 1 has an invalid length. [ 876.193618][T16475] bond2: entered promiscuous mode [ 876.218786][T16475] 8021q: adding VLAN 0 to HW filter on device bond2 [ 876.249560][T16479] 8021q: adding VLAN 0 to HW filter on device bond2 [ 876.267778][T16479] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 876.284827][T16479] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 876.307649][T16479] bond2: (slave gre1): making interface the new active one [ 876.328897][T16479] gre1: entered promiscuous mode [ 876.342960][T16479] bond2: (slave gre1): Enslaving as an active interface with an up link [ 876.352577][T16460] tipc: Resetting bearer [ 876.665997][T16493] nbd1: detected capacity change from 0 to 63 [ 877.005062][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.163829][ T5785] block nbd1: Receive control failed (result -104) [ 877.328182][T12034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.037103][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.280848][T16460] tipc: Disabling bearer [ 878.296849][T16482] bridge0: entered promiscuous mode [ 878.302684][T16482] macsec1: entered promiscuous mode [ 878.440592][T16483] syzkaller0: entered promiscuous mode [ 878.453799][T16483] syzkaller0: entered allmulticast mode [ 878.594996][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.916827][T11431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.076444][T11427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.126347][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.975370][T16536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.984161][T16536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.001958][T16536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.208076][ T5874] net_ratelimit: 42 callbacks suppressed [ 882.208097][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.807524][T16545] netlink: 'syz.3.2987': attribute type 1 has an invalid length. [ 882.825379][T16545] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 882.934175][T16549] tipc: Enabled bearer , priority 0 [ 883.068534][T16549] syzkaller0: entered promiscuous mode [ 883.074137][T16549] syzkaller0: entered allmulticast mode [ 883.084789][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.093688][T16549] tipc: Resetting bearer [ 883.109432][T16559] netlink: 'syz.1.2990': attribute type 1 has an invalid length. [ 883.172884][T16559] 8021q: adding VLAN 0 to HW filter on device bond1 [ 883.183214][T16548] tipc: Resetting bearer [ 883.235189][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.717377][ T96] block nbd3: Possible stuck request ffff888021fba600: control (read@0,1024B). Runtime 30 seconds [ 883.728163][ T96] block nbd3: Possible stuck request ffff888021fba800: control (read@1024,1024B). Runtime 30 seconds [ 883.739298][ T96] block nbd3: Possible stuck request ffff888021fbaa00: control (read@2048,1024B). Runtime 30 seconds [ 883.750265][ T96] block nbd3: Possible stuck request ffff888021fbac00: control (read@3072,1024B). Runtime 30 seconds [ 884.288445][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.067413][T16548] tipc: Disabling bearer [ 885.097080][T16561] bond1: (slave veth3): Enslaving as an active interface with a down link [ 885.183618][T16565] syzkaller0: entered promiscuous mode [ 885.199069][T16565] syzkaller0: entered allmulticast mode [ 885.315038][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.577275][T16591] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2996'. [ 886.114918][T12035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.366141][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.917703][T11431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.410191][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.589100][T16587] lo speed is unknown, defaulting to 1000 [ 887.720878][T16603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.733468][T16606] netlink: 'syz.0.3001': attribute type 1 has an invalid length. [ 887.746036][T16603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.756082][T16603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.775160][T16603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.783818][T16603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.803129][T16606] 8021q: adding VLAN 0 to HW filter on device bond3 [ 887.812253][T16603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.844499][T16610] bond3: (slave veth3): Enslaving as an active interface with a down link [ 887.877398][T16608] infiniband syz1: set down [ 888.282493][T16608] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.290342][T16608] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.743261][T16608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 888.804747][T16608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 889.250666][T16608] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.260460][T16608] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.272496][T16608] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.282362][T16608] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.420902][ T5874] lo speed is unknown, defaulting to 1000 [ 889.481471][ T5874] lo speed is unknown, defaulting to 1000 [ 889.886149][T16637] syzkaller0: entered promiscuous mode [ 889.893516][T16637] syzkaller0: entered allmulticast mode [ 889.915952][T16645] lo speed is unknown, defaulting to 1000 [ 891.800643][T16658] netlink: 'syz.3.3012': attribute type 1 has an invalid length. [ 891.812829][T16658] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 891.869593][T16659] syzkaller0: entered promiscuous mode [ 891.889274][T16659] syzkaller0: entered allmulticast mode [ 892.691152][ T96] block nbd0: Possible stuck request ffff8880485c0000: control (read@0,1024B). Runtime 60 seconds [ 892.702113][ T96] block nbd0: Possible stuck request ffff8880485c0200: control (read@1024,1024B). Runtime 60 seconds [ 892.715677][ T96] block nbd0: Possible stuck request ffff8880485c0400: control (read@2048,1024B). Runtime 60 seconds [ 892.726665][ T96] block nbd0: Possible stuck request ffff8880485c0600: control (read@3072,1024B). Runtime 60 seconds [ 894.103052][T16666] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3014'. [ 894.461873][T16701] syzkaller0: entered promiscuous mode [ 894.468240][T16701] syzkaller0: entered allmulticast mode [ 894.485007][T16709] netlink: 'syz.2.3023': attribute type 1 has an invalid length. [ 894.533606][T16709] 8021q: adding VLAN 0 to HW filter on device bond5 [ 894.570923][T16715] bond5: (slave veth13): Enslaving as an active interface with a down link [ 896.909375][T16747] syzkaller0: entered promiscuous mode [ 896.925186][T16747] syzkaller0: entered allmulticast mode [ 896.948213][T16756] netlink: 'syz.2.3034': attribute type 1 has an invalid length. [ 897.006302][T16756] 8021q: adding VLAN 0 to HW filter on device bond6 [ 897.092416][T16759] bond6: (slave veth15): Enslaving as an active interface with a down link [ 897.959957][T10972] Bluetooth: hci3: command 0x0406 tx timeout [ 899.285258][T16764] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.292835][T16764] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.728140][T16764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 899.787501][T16764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 900.234025][T16764] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.243373][T16764] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.254373][T16764] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.267518][T16764] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.716430][T16780] nbd: nbd0 already in use [ 900.779982][T16786] netlink: 'syz.2.3044': attribute type 1 has an invalid length. [ 900.799776][ T5785] Bluetooth: hci2: link tx timeout [ 900.808813][ T5785] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 900.831828][T16786] 8021q: adding VLAN 0 to HW filter on device bond7 [ 900.860252][T16791] bond7: (slave veth17): Enslaving as an active interface with a down link [ 901.041062][T16799] syzkaller0: entered promiscuous mode [ 901.046989][T16799] syzkaller0: entered allmulticast mode [ 901.766353][T16808] netlink: 'syz.1.3052': attribute type 1 has an invalid length. [ 901.819718][T16808] bond2: entered promiscuous mode [ 901.825316][T16808] 8021q: adding VLAN 0 to HW filter on device bond2 [ 901.947535][T16814] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3054'. [ 901.971571][T16814] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3054'. [ 901.980745][T16816] netlink: 'syz.1.3055': attribute type 1 has an invalid length. [ 901.997756][T16814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3054'. [ 902.010377][T16814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3054'. [ 902.037574][T16816] 8021q: adding VLAN 0 to HW filter on device bond3 [ 902.069505][T16820] bond3: (slave veth5): Enslaving as an active interface with a down link [ 902.092072][T16819] nbd: nbd3 already in use [ 902.299806][T16831] syzkaller0: entered promiscuous mode [ 902.306129][T16831] syzkaller0: entered allmulticast mode [ 902.546998][T16836] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3062'. [ 902.845486][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 903.153416][T16844] netlink: 'syz.2.3065': attribute type 1 has an invalid length. [ 903.186577][T16844] 8021q: adding VLAN 0 to HW filter on device bond8 [ 903.217579][T16844] bond8: (slave veth19): Enslaving as an active interface with a down link [ 903.288485][T16847] netlink: 'syz.2.3067': attribute type 1 has an invalid length. [ 903.316270][T16847] bond9: entered promiscuous mode [ 903.321925][T16847] 8021q: adding VLAN 0 to HW filter on device bond9 [ 903.420031][T16850] nbd: nbd3 already in use [ 903.632282][T16858] lo speed is unknown, defaulting to 1000 [ 903.739393][T16864] netlink: 'syz.2.3075': attribute type 1 has an invalid length. [ 903.772180][T16864] 8021q: adding VLAN 0 to HW filter on device bond10 [ 903.806664][T16864] bond10: (slave veth21): Enslaving as an active interface with a down link [ 903.818732][T16867] syzkaller0: entered promiscuous mode [ 903.824422][T16867] syzkaller0: entered allmulticast mode [ 904.039660][T16872] netlink: 'syz.3.3078': attribute type 1 has an invalid length. [ 904.103310][T16872] bond1: entered promiscuous mode [ 904.133414][T16872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 904.481807][T16883] nbd2: detected capacity change from 0 to 63 [ 904.493666][T10972] block nbd2: Receive control failed (result -32) [ 904.493731][ T24] block nbd2: Send control failed (result -32) [ 904.493780][ T24] block nbd2: Request send failed, requeueing [ 904.493885][ T24] block nbd2: Dead connection, failed to find a fallback [ 904.522780][ T24] block nbd2: shutting down sockets [ 904.529121][ T96] blk_print_req_error: 61 callbacks suppressed [ 904.529136][ T96] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 904.535430][ T24] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 904.550721][ T96] buffer_io_error: 138 callbacks suppressed [ 904.550752][ T96] Buffer I/O error on dev nbd2, logical block 1, async page read [ 904.558339][ T24] Buffer I/O error on dev nbd2, logical block 0, async page read [ 904.561748][ T96] Buffer I/O error on dev nbd2, logical block 2, async page read [ 904.583413][ T96] Buffer I/O error on dev nbd2, logical block 3, async page read [ 904.591586][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 904.600816][ T96] Buffer I/O error on dev nbd2, logical block 0, async page read [ 904.608809][ T96] Buffer I/O error on dev nbd2, logical block 1, async page read [ 904.617204][ T96] Buffer I/O error on dev nbd2, logical block 2, async page read [ 904.625013][ T96] Buffer I/O error on dev nbd2, logical block 3, async page read [ 904.633036][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 904.642459][ T96] Buffer I/O error on dev nbd2, logical block 0, async page read [ 904.650555][ T96] Buffer I/O error on dev nbd2, logical block 1, async page read [ 904.658698][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 904.667999][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 904.677977][ T96] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 904.687422][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 904.704812][ T96] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 904.714130][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 904.724116][T16889] ldm_validate_partition_table(): Disk read failed. [ 904.732571][T16889] Dev nbd2: unable to read RDB block 0 [ 904.741245][T16889] nbd2: unable to read partition table [ 904.755053][T16889] ldm_validate_partition_table(): Disk read failed. [ 904.763323][T16889] Dev nbd2: unable to read RDB block 0 [ 904.770855][T16889] nbd2: unable to read partition table [ 904.795793][T16557] ldm_validate_partition_table(): Disk read failed. [ 904.804362][T16557] Dev nbd2: unable to read RDB block 0 [ 904.812156][T16557] nbd2: unable to read partition table [ 904.827262][T16557] ldm_validate_partition_table(): Disk read failed. [ 904.836088][T16557] Dev nbd2: unable to read RDB block 0 [ 904.845170][T16557] nbd2: unable to read partition table [ 904.962796][T16894] netlink: 'syz.1.3085': attribute type 1 has an invalid length. [ 905.045858][T16894] 8021q: adding VLAN 0 to HW filter on device bond4 [ 905.066382][T16896] lo speed is unknown, defaulting to 1000 [ 905.144073][T16897] bond4: (slave veth7): Enslaving as an active interface with a down link [ 905.549877][T16925] syzkaller0: entered promiscuous mode [ 905.573117][T16925] syzkaller0: entered allmulticast mode [ 905.783979][T16938] lo speed is unknown, defaulting to 1000 [ 906.400082][T16968] lo speed is unknown, defaulting to 1000 [ 906.778133][ T24] block nbd1: Possible stuck request ffff88805bbe8000: control (read@0,1024B). Runtime 30 seconds [ 906.789603][ T24] block nbd1: Possible stuck request ffff88805bbe8200: control (read@1024,1024B). Runtime 30 seconds [ 906.801883][ T24] block nbd1: Possible stuck request ffff88805bbe8400: control (read@2048,1024B). Runtime 30 seconds [ 906.813747][ T24] block nbd1: Possible stuck request ffff88805bbe8600: control (read@3072,1024B). Runtime 30 seconds [ 907.091852][T17003] lo speed is unknown, defaulting to 1000 [ 907.754137][T17031] overlayfs: failed to resolve './file0': -2 [ 907.973003][T17038] tipc: Enabling of bearer rejected, failed to enable media [ 908.410425][ T5141] udevd[5141]: worker [14588] /devices/virtual/block/nbd0 is taking a long time [ 908.772917][T17073] tipc: Enabling of bearer rejected, failed to enable media [ 908.936799][T17081] syzkaller0: entered promiscuous mode [ 908.942429][T17081] syzkaller0: entered allmulticast mode [ 909.375095][T17094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3156'. [ 909.433416][T17094] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 909.925156][T17106] tipc: Enabled bearer , priority 0 [ 909.937705][T17108] syzkaller0: entered promiscuous mode [ 909.948126][T17108] syzkaller0: entered allmulticast mode [ 909.962680][T17105] tipc: Disabling bearer [ 910.624868][T17121] nbd: nbd2 already in use [ 910.959903][T17130] tipc: Enabled bearer , priority 0 [ 910.995497][T17129] tipc: Disabling bearer [ 911.309044][T17144] lo speed is unknown, defaulting to 1000 [ 912.182329][T17179] nbd: nbd1 already in use [ 912.553372][T17157] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.561206][T17157] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.783933][T17157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 912.801079][T17157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 913.201600][T17157] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.210824][T17157] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.220233][T17157] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.229492][T17157] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.317627][ T5785] Bluetooth: hci4: command 0x0406 tx timeout [ 913.406244][T17157] bond2: left promiscuous mode [ 913.411067][T17157] gre1: left promiscuous mode [ 913.467785][T17157] macsec1: left promiscuous mode [ 913.521704][T17157] syz.0.3180 (17157) used greatest stack depth: 19952 bytes left [ 913.556163][T17186] tipc: Enabling of bearer rejected, failed to enable media [ 913.784448][T17201] lo speed is unknown, defaulting to 1000 [ 913.795017][ T96] block nbd3: Possible stuck request ffff888021fba600: control (read@0,1024B). Runtime 60 seconds [ 913.805969][ T96] block nbd3: Possible stuck request ffff888021fba800: control (read@1024,1024B). Runtime 60 seconds [ 913.817188][ T96] block nbd3: Possible stuck request ffff888021fbaa00: control (read@2048,1024B). Runtime 60 seconds [ 913.828280][ T96] block nbd3: Possible stuck request ffff888021fbac00: control (read@3072,1024B). Runtime 60 seconds [ 913.843950][T17203] syzkaller0: entered promiscuous mode [ 913.850126][T17203] syzkaller0: entered allmulticast mode [ 914.099353][T17214] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3192'. [ 914.170079][T17216] tipc: Enabling of bearer rejected, failed to enable media [ 914.422404][T17230] nbd: nbd1 already in use [ 914.428610][T17231] bond1: left promiscuous mode [ 914.787314][T17246] lo speed is unknown, defaulting to 1000 [ 914.983724][T17255] netlink: 'syz.1.3204': attribute type 1 has an invalid length. [ 915.018573][T17255] 8021q: adding VLAN 0 to HW filter on device bond5 [ 915.051261][T17255] bond5: (slave veth9): Enslaving as an active interface with a down link [ 915.062774][T17258] tipc: Enabling of bearer rejected, failed to enable media [ 915.146647][T17264] netlink: 'syz.0.3214': attribute type 1 has an invalid length. [ 915.238285][T17264] 8021q: adding VLAN 0 to HW filter on device bond4 [ 915.286109][T17270] bond4: (slave veth5): Enslaving as an active interface with a down link [ 915.429143][T17276] nbd: nbd2 already in use [ 915.723201][T17289] (null): rxe_set_mtu: Set mtu to 4096 [ 915.731547][T17289] rdma_rxe: rxe_newlink: failed to add lo [ 915.911979][T17297] tipc: Enabled bearer , priority 0 [ 915.969473][T17296] tipc: Disabling bearer [ 916.049507][T17308] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3221'. [ 916.049514][T17306] netlink: 'syz.0.3220': attribute type 1 has an invalid length. [ 916.084724][T17308] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3221'. [ 916.104172][T17306] 8021q: adding VLAN 0 to HW filter on device bond5 [ 916.144818][T17310] bond5: (slave veth7): Enslaving as an active interface with a down link [ 916.434130][T17323] (null): rxe_set_mtu: Set mtu to 4096 [ 916.446132][T17323] rdma_rxe: rxe_newlink: failed to add lo [ 916.571737][T17329] tipc: Enabled bearer , priority 0 [ 916.677680][T17339] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3232'. [ 916.689575][T17328] tipc: Disabling bearer [ 916.695745][T17339] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3232'. [ 917.041258][T17357] (null): rxe_set_mtu: Set mtu to 4096 [ 917.065534][T17357] rdma_rxe: rxe_newlink: failed to add lo [ 917.268930][T17369] tipc: Enabling of bearer rejected, failed to enable media [ 917.359734][T17373] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3245'. [ 917.371049][T17373] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3245'. [ 917.393869][T17374] process 'syz.3.3243' launched './file0' with NULL argv: empty string added [ 917.795862][T17384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3246'. [ 918.811355][T17404] syzkaller0: entered promiscuous mode [ 918.817852][T17404] syzkaller0: entered allmulticast mode [ 918.852060][T17411] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3255'. [ 918.861311][T17411] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3255'. [ 921.661362][T17429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3259'. [ 921.895737][T17436] fuse: Bad value for 'fd' [ 922.130660][T17450] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3268'. [ 922.141980][T17450] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3268'. [ 922.715061][T17471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3271'. [ 922.756951][ T96] block nbd0: Possible stuck request ffff8880485c0000: control (read@0,1024B). Runtime 90 seconds [ 922.768267][ T96] block nbd0: Possible stuck request ffff8880485c0200: control (read@1024,1024B). Runtime 90 seconds [ 922.782027][ T96] block nbd0: Possible stuck request ffff8880485c0400: control (read@2048,1024B). Runtime 90 seconds [ 922.794850][ T96] block nbd0: Possible stuck request ffff8880485c0600: control (read@3072,1024B). Runtime 90 seconds [ 923.630908][T17484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3282'. [ 923.642813][T17484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3282'. [ 924.043760][T17508] ip6gre1: entered allmulticast mode [ 924.169889][T17514] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3294'. [ 924.179099][T17514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3294'. [ 924.383778][T17524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3298'. [ 924.428707][T17524] team1: entered promiscuous mode [ 924.434018][T17524] team1: entered allmulticast mode [ 924.447343][T17524] 8021q: adding VLAN 0 to HW filter on device team1 [ 924.460034][T17527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3298'. [ 924.488972][T17527] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 924.520844][T17527] team2: entered promiscuous mode [ 924.526462][T17527] team2: entered allmulticast mode [ 924.532176][T17527] 8021q: adding VLAN 0 to HW filter on device team2 [ 925.084251][T17547] syzkaller0: entered promiscuous mode [ 925.106246][T17547] syzkaller0: entered allmulticast mode [ 925.450111][T17564] sctp: [Deprecated]: syz.3.3314 (pid 17564) Use of struct sctp_assoc_value in delayed_ack socket option. [ 925.450111][T17564] Use struct sctp_sack_info instead [ 926.135595][T17588] syzkaller0: entered promiscuous mode [ 926.141305][T17588] syzkaller0: entered allmulticast mode [ 927.308973][T17618] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.316874][T17618] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.897415][T17618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 927.955305][T17618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 928.421284][T17618] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.430345][T17618] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.439433][T17618] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.448415][T17618] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.593938][T17618] bond2: left promiscuous mode [ 928.698068][T17644] vlan1: entered promiscuous mode [ 928.703366][T17644] vlan1: entered allmulticast mode [ 928.714782][T17644] veth0_vlan: entered allmulticast mode [ 931.049051][T17663] netlink: 'syz.3.3347': attribute type 1 has an invalid length. [ 931.057558][T17663] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 931.356398][T17691] __nla_validate_parse: 2 callbacks suppressed [ 931.356418][T17691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3354'. [ 931.507549][T17691] bond11 (unregistering): Released all slaves [ 931.720114][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.726668][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.843223][ T5141] udevd[5141]: worker [14750] /devices/virtual/block/nbd3 is taking a long time [ 932.077199][T17712] syzkaller0: entered promiscuous mode [ 932.082844][T17712] syzkaller0: entered allmulticast mode [ 932.413363][T17721] netlink: 'syz.0.3362': attribute type 1 has an invalid length. [ 932.453225][T17721] bond6: entered promiscuous mode [ 932.458711][T17721] 8021q: adding VLAN 0 to HW filter on device bond6 [ 934.779126][T17736] syzkaller0: entered promiscuous mode [ 934.790319][T17736] syzkaller0: entered allmulticast mode [ 936.849983][T17768] netlink: 'syz.1.3373': attribute type 1 has an invalid length. [ 936.859049][ T24] block nbd1: Possible stuck request ffff88805bbe8000: control (read@0,1024B). Runtime 60 seconds [ 936.870064][ T24] block nbd1: Possible stuck request ffff88805bbe8200: control (read@1024,1024B). Runtime 60 seconds [ 936.881277][ T24] block nbd1: Possible stuck request ffff88805bbe8400: control (read@2048,1024B). Runtime 60 seconds [ 936.892534][ T24] block nbd1: Possible stuck request ffff88805bbe8600: control (read@3072,1024B). Runtime 60 seconds [ 936.907927][T17768] bond6: entered promiscuous mode [ 936.915242][T17768] 8021q: adding VLAN 0 to HW filter on device bond6 [ 936.923372][T17775] netlink: 'syz.2.3376': attribute type 4 has an invalid length. [ 937.109948][T17787] tipc: Enabled bearer , priority 0 [ 937.163482][T17786] tipc: Disabling bearer [ 937.303330][T17796] nbd: nbd2 already in use [ 937.790119][T17827] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3391'. [ 937.856000][T17829] kvm: requested 56152 ns i8254 timer period limited to 200000 ns [ 937.881955][T17829] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 937.908649][T17829] kvm: requested 191085 ns i8254 timer period limited to 200000 ns [ 937.930347][T17829] kvm: requested 126552 ns i8254 timer period limited to 200000 ns [ 937.951444][T17829] kvm: requested 44419 ns i8254 timer period limited to 200000 ns [ 937.972351][T17829] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 937.982083][T17829] kvm: requested 113981 ns i8254 timer period limited to 200000 ns [ 937.990727][T17829] kvm: requested 35200 ns i8254 timer period limited to 200000 ns [ 938.003987][T17829] kvm: requested 22628 ns i8254 timer period limited to 200000 ns [ 938.012863][T17829] kvm: requested 48609 ns i8254 timer period limited to 200000 ns [ 938.037784][T17840] tipc: Enabled bearer , priority 0 [ 938.060766][T17838] tipc: Disabling bearer [ 938.371192][T17855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.381213][T17855] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.398197][T17855] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 938.912647][T17881] tipc: Enabled bearer , priority 0 [ 938.939770][T17880] tipc: Disabling bearer [ 939.488265][T17910] syzkaller0: entered promiscuous mode [ 939.494060][T17910] syzkaller0: entered allmulticast mode [ 939.650550][T17914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3418'. [ 939.682861][T17916] tipc: Enabled bearer , priority 0 [ 939.724100][T17915] tipc: Disabling bearer [ 939.850752][T17923] syzkaller0: entered promiscuous mode [ 939.859788][T17923] syzkaller0: entered allmulticast mode [ 940.457964][T17937] nbd: nbd3 already in use [ 942.359220][T17967] tipc: Enabling of bearer rejected, failed to enable media [ 942.489189][T17976] fuse: Bad value for 'fd' [ 942.759888][T17991] tipc: Enabling of bearer rejected, failed to enable media [ 942.832879][T17993] syzkaller0: entered promiscuous mode [ 942.842272][T17993] syzkaller0: entered allmulticast mode [ 943.883054][ T96] block nbd3: Possible stuck request ffff888021fba600: control (read@0,1024B). Runtime 90 seconds [ 943.893915][ T96] block nbd3: Possible stuck request ffff888021fba800: control (read@1024,1024B). Runtime 90 seconds [ 943.905976][ T96] block nbd3: Possible stuck request ffff888021fbaa00: control (read@2048,1024B). Runtime 90 seconds [ 943.917282][ T96] block nbd3: Possible stuck request ffff888021fbac00: control (read@3072,1024B). Runtime 90 seconds [ 945.148860][T18016] netlink: 'syz.1.3449': attribute type 4 has an invalid length. [ 945.159607][T18031] tipc: Enabling of bearer rejected, failed to enable media [ 945.930204][T18053] syzkaller0: entered promiscuous mode [ 945.950327][T18053] syzkaller0: entered allmulticast mode [ 948.106546][T18058] tipc: Enabling of bearer rejected, failed to enable media [ 948.481699][T18086] syzkaller0: entered promiscuous mode [ 948.487617][T18086] syzkaller0: entered allmulticast mode [ 948.573540][T18091] tipc: Enabling of bearer rejected, failed to enable media [ 948.635245][T18092] syzkaller0: entered promiscuous mode [ 948.650937][T18092] syzkaller0: entered allmulticast mode [ 950.769012][T18117] tipc: Enabled bearer , priority 0 [ 950.824239][T18115] tipc: Disabling bearer [ 951.482537][T18156] tipc: Enabled bearer , priority 0 [ 951.498464][T18155] tipc: Disabling bearer [ 951.550003][T18159] netlink: 996 bytes leftover after parsing attributes in process `syz.2.3502'. [ 951.722227][T18166] syzkaller0: entered promiscuous mode [ 951.728119][T18166] syzkaller0: entered allmulticast mode [ 952.132686][T18181] syzkaller0: entered promiscuous mode [ 952.139208][T18181] syzkaller0: entered allmulticast mode [ 952.579736][T18205] nbd: nbd2 already in use [ 952.836540][ T96] block nbd0: Possible stuck request ffff8880485c0000: control (read@0,1024B). Runtime 120 seconds [ 952.847663][ T96] block nbd0: Possible stuck request ffff8880485c0200: control (read@1024,1024B). Runtime 120 seconds [ 952.859113][ T96] block nbd0: Possible stuck request ffff8880485c0400: control (read@2048,1024B). Runtime 120 seconds [ 952.870350][ T96] block nbd0: Possible stuck request ffff8880485c0600: control (read@3072,1024B). Runtime 120 seconds [ 954.366080][T18212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3519'. [ 954.427735][T18214] syzkaller0: entered promiscuous mode [ 954.433396][T18214] syzkaller0: entered allmulticast mode [ 954.868032][T18235] syzkaller0: entered promiscuous mode [ 954.873670][T18235] syzkaller0: entered allmulticast mode [ 954.947767][T18239] overlayfs: failed to clone upperpath [ 955.047267][ T5141] udevd[5141]: worker [14590] /devices/virtual/block/nbd1 is taking a long time [ 955.315842][T18255] nbd: nbd2 already in use [ 957.417477][ T28] audit: type=1326 audit(1781770576.918:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18287 comm="syz.2.3534" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec7f99ce59 code=0x0 [ 957.729147][T18299] syzkaller0: entered promiscuous mode [ 957.739748][T18299] syzkaller0: entered allmulticast mode [ 957.801045][T18303] tipc: Enabling of bearer rejected, failed to enable media [ 957.820322][T18305] syzkaller0: entered promiscuous mode [ 957.826093][T18305] syzkaller0: entered allmulticast mode [ 958.287318][T18329] tipc: Enabled bearer , priority 0 [ 958.307833][T18328] tipc: Disabling bearer [ 958.779656][ T28] audit: type=1326 audit(1781770578.278:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18354 comm="syz.0.3560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ed79ce59 code=0x7ffc0000 [ 958.849619][ T28] audit: type=1326 audit(1781770578.278:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18354 comm="syz.0.3560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ed79ce59 code=0x7ffc0000 [ 958.888394][ T28] audit: type=1326 audit(1781770578.278:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18354 comm="syz.0.3560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fe9ed79ce59 code=0x7ffc0000 [ 958.915729][ T28] audit: type=1326 audit(1781770578.278:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18354 comm="syz.0.3560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ed79ce59 code=0x7ffc0000 [ 958.975541][ T28] audit: type=1326 audit(1781770578.278:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18354 comm="syz.0.3560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fe9ed79ce59 code=0x7ffc0000 [ 959.032819][ T28] audit: type=1326 audit(1781770578.308:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18354 comm="syz.0.3560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ed79ce59 code=0x7ffc0000 [ 959.063406][ T28] audit: type=1326 audit(1781770578.308:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18354 comm="syz.0.3560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ed79ce59 code=0x7ffc0000 [ 959.622515][T18393] vlan1: left promiscuous mode [ 959.640529][T18393] vlan1: left allmulticast mode [ 959.656577][T18393] veth0_vlan: left allmulticast mode [ 959.855778][T11330] Process accounting resumed [ 960.153360][T18393] bond6: left promiscuous mode [ 961.410846][T18448] syzkaller0: entered promiscuous mode [ 961.416916][T18448] syzkaller0: entered allmulticast mode [ 962.190371][T18466] kvm: pic: non byte write [ 962.659151][T18485] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3606'. [ 963.279103][T18521] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3616'. [ 963.394074][T18523] capability: warning: `syz.2.3617' uses deprecated v2 capabilities in a way that may be insecure [ 963.611728][T18538] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3622'. [ 963.890209][T18548] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3627'. [ 964.046320][T18557] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3631'. [ 964.074838][T18557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3631'. [ 964.383076][T18581] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3638'. [ 964.667519][T18595] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3641'. [ 964.677192][T18595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3641'. [ 965.511064][T18635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3653'. [ 966.918609][ T24] block nbd1: Possible stuck request ffff88805bbe8000: control (read@0,1024B). Runtime 90 seconds [ 966.933444][ T24] block nbd1: Possible stuck request ffff88805bbe8200: control (read@1024,1024B). Runtime 90 seconds [ 966.944856][ T24] block nbd1: Possible stuck request ffff88805bbe8400: control (read@2048,1024B). Runtime 90 seconds [ 966.956238][ T24] block nbd1: Possible stuck request ffff88805bbe8600: control (read@3072,1024B). Runtime 90 seconds [ 967.000050][T18655] bond9: left promiscuous mode [ 967.025910][T18655] ip6gre1: left allmulticast mode [ 967.038969][T18655] team1: left promiscuous mode [ 967.043861][T18655] team1: left allmulticast mode [ 967.059371][T18655] team2: left promiscuous mode [ 967.064335][T18655] team2: left allmulticast mode [ 967.679909][T18694] __nla_validate_parse: 4 callbacks suppressed [ 967.679929][T18694] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3674'. [ 967.700330][T18694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3674'. [ 967.894881][T18699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3675'. [ 967.944026][T18703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3672'. [ 968.795595][T18721] netlink: 'syz.1.3683': attribute type 1 has an invalid length. [ 968.822823][T18721] 8021q: adding VLAN 0 to HW filter on device bond7 [ 968.849186][T18721] vlan2: entered allmulticast mode [ 968.854365][T18721] bond7: entered allmulticast mode [ 968.871277][T18721] bond7: (slave gretap1): making interface the new active one [ 968.879027][T18721] gretap1: entered allmulticast mode [ 968.887138][T18721] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 968.961632][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3684'. [ 969.069308][T18729] syzkaller0: entered promiscuous mode [ 969.075170][T18729] syzkaller0: entered allmulticast mode [ 969.677324][ T28] audit: type=1326 audit(1781770589.098:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18743 comm="syz.0.3692" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ed79ce59 code=0x7ffc0000 [ 969.733902][ T28] audit: type=1326 audit(1781770589.098:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18743 comm="syz.0.3692" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ed79ce59 code=0x7ffc0000 [ 969.772534][ T28] audit: type=1326 audit(1781770589.098:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18743 comm="syz.0.3692" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ed79ce59 code=0x7ffc0000 [ 969.802595][ T28] audit: type=1326 audit(1781770589.098:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18743 comm="syz.0.3692" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ed79ce59 code=0x7ffc0000 [ 969.848128][ T28] audit: type=1326 audit(1781770589.098:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18743 comm="syz.0.3692" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ed79ce59 code=0x7ffc0000 [ 969.899936][ T28] audit: type=1326 audit(1781770589.098:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18743 comm="syz.0.3692" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe9ed79ce59 code=0x7ffc0000 [ 969.922345][T18752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3691'. [ 969.937342][ T28] audit: type=1326 audit(1781770589.098:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18743 comm="syz.0.3692" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ed79ce59 code=0x7ffc0000 [ 970.007326][ T28] audit: type=1326 audit(1781770589.098:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18743 comm="syz.0.3692" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ed79ce59 code=0x7ffc0000 [ 970.038277][ T28] audit: type=1326 audit(1781770589.098:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18743 comm="syz.0.3692" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ed79ce59 code=0x7ffc0000 [ 970.106582][ T28] audit: type=1326 audit(1781770589.098:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18743 comm="syz.0.3692" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fe9ed79ce59 code=0x7ffc0000 [ 971.097647][T18788] bond6: left promiscuous mode [ 971.138511][T18788] vlan2: left allmulticast mode [ 971.143557][T18788] bond7: left allmulticast mode [ 971.150138][T18788] gretap1: left allmulticast mode [ 971.691930][T18803] syzkaller0: entered promiscuous mode [ 971.699146][T18803] syzkaller0: entered allmulticast mode [ 971.794069][T18804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3712'. [ 972.278032][T18815] IPv6: Can't replace route, no match found [ 972.544060][T18824] nbd: nbd2 already in use [ 972.770158][T18831] syzkaller0: entered promiscuous mode [ 972.776040][T18831] syzkaller0: entered allmulticast mode [ 972.971035][T18841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3728'. [ 973.019099][T18841] bond11 (unregistering): Released all slaves [ 973.414664][T18854] nbd: nbd2 already in use [ 974.012826][T18859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3731'. [ 974.134235][ T96] block nbd3: Possible stuck request ffff888021fba600: control (read@0,1024B). Runtime 120 seconds [ 974.145543][ T96] block nbd3: Possible stuck request ffff888021fba800: control (read@1024,1024B). Runtime 120 seconds [ 974.157165][ T96] block nbd3: Possible stuck request ffff888021fbaa00: control (read@2048,1024B). Runtime 120 seconds [ 974.168601][ T96] block nbd3: Possible stuck request ffff888021fbac00: control (read@3072,1024B). Runtime 120 seconds [ 974.701467][T18870] syzkaller0: entered promiscuous mode [ 974.707219][T18870] syzkaller0: entered allmulticast mode [ 975.010335][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 975.019951][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 975.028280][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 975.037421][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 975.045403][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 975.053516][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 975.171506][T18873] lo speed is unknown, defaulting to 1000 [ 975.745175][T18881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3740'. [ 976.153089][T18873] chnl_net:caif_netlink_parms(): no params data found [ 976.415070][T18873] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.422411][T18873] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.430514][T18873] bridge_slave_0: entered allmulticast mode [ 976.438640][T18873] bridge_slave_0: entered promiscuous mode [ 976.448249][T18873] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.455780][T18873] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.463173][T18873] bridge_slave_1: entered allmulticast mode [ 976.471161][T18873] bridge_slave_1: entered promiscuous mode [ 976.509115][T18873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 976.548403][T18873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 976.676795][T18873] team0: Port device team_slave_0 added [ 976.701265][T18873] team0: Port device team_slave_1 added [ 976.798581][T18873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 976.824665][T18873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 976.889506][T18873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 976.913292][T18873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 976.930782][T18873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 976.990786][T18873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 977.139299][T18873] hsr_slave_0: entered promiscuous mode [ 977.164620][T10972] Bluetooth: hci1: command tx timeout [ 977.185898][T18873] hsr_slave_1: entered promiscuous mode [ 977.198687][T18873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 977.206474][T18873] Cannot create hsr debugfs directory [ 977.849221][T18873] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 977.880678][T18873] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 977.904285][T18873] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 977.939635][T18873] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 978.140146][T18873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.198604][T18873] 8021q: adding VLAN 0 to HW filter on device team0 [ 978.248609][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.255925][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 978.448888][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.456152][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 978.531701][T18923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3750'. [ 979.171700][T18873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.236053][T10972] Bluetooth: hci1: command tx timeout [ 979.786555][T18873] veth0_vlan: entered promiscuous mode [ 979.812360][T18873] veth1_vlan: entered promiscuous mode [ 979.888733][T18873] veth0_macvtap: entered promiscuous mode [ 979.924141][T18873] veth1_macvtap: entered promiscuous mode [ 979.988211][T18873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 980.033525][T18873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 980.050566][T18873] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.063041][T18873] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.072433][T18873] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.081665][T18873] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.548414][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.613581][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.799275][ T7591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.850106][ T7591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.989814][T18997] syzkaller0: entered promiscuous mode [ 981.004784][T18997] syzkaller0: entered allmulticast mode [ 981.316092][T10972] Bluetooth: hci1: command tx timeout [ 981.393026][T19013] syzkaller0: entered promiscuous mode [ 981.407961][T19013] syzkaller0: entered allmulticast mode [ 981.732640][T19025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3771'. [ 982.046711][T19030] syzkaller0: entered promiscuous mode [ 982.052916][T19030] syzkaller0: entered allmulticast mode [ 982.484216][T19049] 9pnet_virtio: no channels available for device syz [ 982.916423][ T96] block nbd0: Possible stuck request ffff8880485c0000: control (read@0,1024B). Runtime 150 seconds [ 982.927443][ T96] block nbd0: Possible stuck request ffff8880485c0200: control (read@1024,1024B). Runtime 150 seconds [ 982.939112][ T96] block nbd0: Possible stuck request ffff8880485c0400: control (read@2048,1024B). Runtime 150 seconds [ 982.950902][ T96] block nbd0: Possible stuck request ffff8880485c0600: control (read@3072,1024B). Runtime 150 seconds [ 983.397352][T10972] Bluetooth: hci1: command tx timeout [ 984.318228][T19114] syzkaller0: entered promiscuous mode [ 984.323872][T19114] syzkaller0: entered allmulticast mode [ 984.594999][T19128] overlayfs: failed to clone upperpath [ 984.899755][T19142] syzkaller0: entered promiscuous mode [ 984.909677][T19142] syzkaller0: entered allmulticast mode [ 985.373477][T19156] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 985.696178][T19170] syzkaller0: entered promiscuous mode [ 985.701736][T19170] syzkaller0: entered allmulticast mode [ 986.127910][T19192] ±ÿÿÿòÿÿÿòÿÿ: renamed from lo [ 986.191741][T19194] syzkaller0: entered promiscuous mode [ 986.197668][T19194] syzkaller0: entered allmulticast mode [ 987.880921][T19259] syzkaller0: entered promiscuous mode [ 987.894934][T19259] syzkaller0: entered allmulticast mode [ 988.143161][T19272] tipc: Started in network mode [ 988.154005][T19275] 9pnet_virtio: no channels available for device syz [ 988.158753][T19272] tipc: Node identity , cluster identity 4711 [ 988.185089][T19272] tipc: Failed to obtain node identity [ 988.190668][T19272] tipc: Enabling of bearer rejected, failed to enable media [ 988.328416][T19281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3866'. [ 988.758961][T19305] syzkaller0: entered promiscuous mode [ 988.767435][T19305] syzkaller0: entered allmulticast mode [ 988.843653][T19311] tipc: Enabling of bearer rejected, failed to enable media [ 989.015181][T19316] block device autoloading is deprecated and will be removed. [ 991.307838][T19403] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.315475][T19403] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.821198][T19403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 991.865061][T19403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 992.286784][T19403] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.302898][T19403] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.312174][T19403] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.326784][T19403] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.067322][T19462] syzkaller0: entered promiscuous mode [ 993.073013][T19462] syzkaller0: entered allmulticast mode [ 993.159923][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.166536][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.095278][T19490] syzkaller0: entered promiscuous mode [ 994.100845][T19490] syzkaller0: entered allmulticast mode [ 994.298571][T19499] 9pnet_fd: Insufficient options for proto=fd [ 996.699592][T19508] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 996.775648][T19526] syzkaller0: entered promiscuous mode [ 996.844725][T19526] syzkaller0: entered allmulticast mode [ 997.020275][ T24] block nbd1: Possible stuck request ffff88805bbe8000: control (read@0,1024B). Runtime 120 seconds [ 997.031394][ T24] block nbd1: Possible stuck request ffff88805bbe8200: control (read@1024,1024B). Runtime 120 seconds [ 997.042560][ T24] block nbd1: Possible stuck request ffff88805bbe8400: control (read@2048,1024B). Runtime 120 seconds [ 997.053967][ T24] block nbd1: Possible stuck request ffff88805bbe8600: control (read@3072,1024B). Runtime 120 seconds [ 997.668564][T19578] syzkaller0: entered promiscuous mode [ 997.674203][T19578] syzkaller0: entered allmulticast mode [ 998.255577][T19606] syzkaller0: entered promiscuous mode [ 998.296237][T19606] syzkaller0: entered allmulticast mode [ 998.658760][T19627] bond1: entered promiscuous mode [ 998.664260][T19627] 8021q: adding VLAN 0 to HW filter on device bond1 [ 998.726020][T19627] 8021q: adding VLAN 0 to HW filter on device bond1 [ 998.733063][T19627] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 998.745781][T19627] bond1: (slave gre1): Error -95 calling set_mac_address [ 999.107614][T19646] syzkaller0: entered promiscuous mode [ 999.113328][T19646] syzkaller0: entered allmulticast mode [ 999.449007][T19658] nbd4: detected capacity change from 0 to 63 [ 999.462287][T10972] block nbd4: Receive control failed (result -32) [ 999.474336][ T96] block nbd4: Dead connection, failed to find a fallback [ 999.482937][ T96] block nbd4: shutting down sockets [ 999.490445][ T96] blk_print_req_error: 260 callbacks suppressed [ 999.490726][ T96] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 999.506635][ T96] buffer_io_error: 286 callbacks suppressed [ 999.506650][ T96] Buffer I/O error on dev nbd4, logical block 0, async page read [ 999.525839][ T24] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 999.535297][ T24] Buffer I/O error on dev nbd4, logical block 1, async page read [ 999.543256][ T24] Buffer I/O error on dev nbd4, logical block 2, async page read [ 999.551351][ T24] Buffer I/O error on dev nbd4, logical block 3, async page read [ 999.559659][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 999.568934][ T24] Buffer I/O error on dev nbd4, logical block 0, async page read [ 999.578630][ T24] Buffer I/O error on dev nbd4, logical block 1, async page read [ 999.586909][ T24] Buffer I/O error on dev nbd4, logical block 2, async page read [ 999.594785][ T24] Buffer I/O error on dev nbd4, logical block 3, async page read [ 999.602929][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 999.612121][ T24] Buffer I/O error on dev nbd4, logical block 0, async page read [ 999.619994][ T24] Buffer I/O error on dev nbd4, logical block 1, async page read [ 999.628097][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 999.637733][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 999.647377][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 999.657036][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 999.666476][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 999.675725][T16557] ldm_validate_partition_table(): Disk read failed. [ 999.682518][ T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 999.703618][T16557] Dev nbd4: unable to read RDB block 0 [ 999.711095][T16557] nbd4: unable to read partition table [ 999.727270][T16557] ldm_validate_partition_table(): Disk read failed. [ 999.739515][T16557] Dev nbd4: unable to read RDB block 0 [ 999.747266][T16557] nbd4: unable to read partition table [ 1000.012412][T19680] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3990'. [ 1002.479940][T19705] netlink: 'syz.0.3997': attribute type 1 has an invalid length. [ 1002.488636][T19705] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1002.608578][T19727] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4002'. [ 1003.400191][T19770] netlink: 'syz.2.4011': attribute type 1 has an invalid length. [ 1003.437582][T19770] bond11: entered promiscuous mode [ 1003.443220][T19770] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1003.477839][T19770] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1003.491751][T19770] bond11: (slave gre1): The slave device specified does not support setting the MAC address [ 1003.504424][T19770] bond11: (slave gre1): Error -95 calling set_mac_address [ 1003.686790][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1003.686806][ T28] audit: type=1326 audit(1781770623.188:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19780 comm="syz.0.4016" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ed79ce59 code=0x7ffc0000 [ 1003.769439][ T28] audit: type=1326 audit(1781770623.188:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19780 comm="syz.0.4016" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ed79ce59 code=0x7ffc0000 [ 1003.822175][ T28] audit: type=1326 audit(1781770623.218:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19780 comm="syz.0.4016" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fe9ed79ce59 code=0x7ffc0000 [ 1003.878188][ T28] audit: type=1326 audit(1781770623.218:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19780 comm="syz.0.4016" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ed79ce59 code=0x7ffc0000 [ 1004.675404][ T96] block nbd3: Possible stuck request ffff888021fba600: control (read@0,1024B). Runtime 150 seconds [ 1004.686808][ T96] block nbd3: Possible stuck request ffff888021fba800: control (read@1024,1024B). Runtime 150 seconds [ 1004.698574][ T96] block nbd3: Possible stuck request ffff888021fbaa00: control (read@2048,1024B). Runtime 150 seconds [ 1004.710503][ T96] block nbd3: Possible stuck request ffff888021fbac00: control (read@3072,1024B). Runtime 150 seconds [ 1006.303770][T19854] nbd: nbd4 already in use [ 1007.238226][T19882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4047'. [ 1007.385197][T19891] syzkaller0: entered promiscuous mode [ 1007.390837][T19891] syzkaller0: entered allmulticast mode [ 1007.616905][T19902] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1007.928953][T19920] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4062'. [ 1007.938646][T19920] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4062'. [ 1008.368639][T19939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4071'. [ 1008.378405][T19939] bridge_slave_1: left allmulticast mode [ 1008.384163][T19939] bridge_slave_1: left promiscuous mode [ 1008.390219][T19939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.399965][T19939] bridge_slave_0: left allmulticast mode [ 1008.406301][T19939] bridge_slave_0: left promiscuous mode [ 1008.416603][T19939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.448332][T19943] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4072'. [ 1008.457625][T19943] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4072'. [ 1008.628636][T19948] tipc: Enabling of bearer rejected, failed to enable media [ 1009.039861][T19964] netlink: 'syz.1.4079': attribute type 1 has an invalid length. [ 1009.075031][T19964] bond8: entered promiscuous mode [ 1009.080695][T19964] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1009.119554][T19964] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1009.135222][T19964] bond8: (slave gre1): The slave device specified does not support setting the MAC address [ 1009.159878][T19964] bond8: (slave gre1): Error -95 calling set_mac_address [ 1009.424134][T19976] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4084'. [ 1009.434103][T19976] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4084'. [ 1009.543254][T19981] syzkaller0: entered promiscuous mode [ 1009.554620][T19981] syzkaller0: entered allmulticast mode [ 1009.909307][T19985] create_pit_timer: 3 callbacks suppressed [ 1009.909327][T19985] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 1009.924358][T19985] kvm: requested 166781 ns i8254 timer period limited to 200000 ns [ 1009.938549][T19985] kvm: requested 111466 ns i8254 timer period limited to 200000 ns [ 1009.948656][T19985] kvm: requested 67047 ns i8254 timer period limited to 200000 ns [ 1009.955156][T19991] netlink: 'syz.0.4090': attribute type 1 has an invalid length. [ 1009.964857][T19985] kvm: requested 31009 ns i8254 timer period limited to 200000 ns [ 1009.973848][T19985] kvm: requested 22628 ns i8254 timer period limited to 200000 ns [ 1009.989336][T19985] kvm: requested 174323 ns i8254 timer period limited to 200000 ns [ 1010.004834][T19985] kvm: requested 182704 ns i8254 timer period limited to 200000 ns [ 1010.013208][T19985] kvm: requested 86323 ns i8254 timer period limited to 200000 ns [ 1010.027267][T19985] kvm: requested 167619 ns i8254 timer period limited to 200000 ns [ 1010.040872][T19991] bond7: entered promiscuous mode [ 1010.046709][T19991] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1010.058733][T19994] netlink: 91 bytes leftover after parsing attributes in process `syz.2.4091'. [ 1010.111785][T19997] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1010.146981][T19997] bond7: (slave gre2): The slave device specified does not support setting the MAC address [ 1010.158412][T19997] bond7: (slave gre2): Error -95 calling set_mac_address [ 1010.419496][T20002] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4094'. [ 1011.677067][T20048] tipc: Enabled bearer , priority 0 [ 1011.998458][T20046] tipc: Disabling bearer [ 1012.592010][T20065] __nla_validate_parse: 6 callbacks suppressed [ 1012.592028][T20065] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4116'. [ 1012.633313][T20065] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4116'. [ 1012.903081][T20082] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4122'. [ 1012.996539][ T96] block nbd0: Possible stuck request ffff8880485c0000: control (read@0,1024B). Runtime 180 seconds [ 1013.007537][ T96] block nbd0: Possible stuck request ffff8880485c0200: control (read@1024,1024B). Runtime 180 seconds [ 1013.019239][ T96] block nbd0: Possible stuck request ffff8880485c0400: control (read@2048,1024B). Runtime 180 seconds [ 1013.030727][ T96] block nbd0: Possible stuck request ffff8880485c0600: control (read@3072,1024B). Runtime 180 seconds [ 1013.165871][T20087] tipc: Enabled bearer , priority 0 [ 1013.246440][T20083] tipc: Disabling bearer [ 1013.273693][T20092] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4127'. [ 1013.289079][T20092] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4127'. [ 1013.299668][T20090] fuse: Bad value for 'fd' [ 1013.970986][T20121] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4133'. [ 1014.026674][T20126] fuse: Bad value for 'fd' [ 1014.086310][T20130] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4137'. [ 1014.108675][T20130] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4137'. [ 1014.139144][T20130] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4137'. [ 1014.182600][T20130] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4137'. [ 1015.641809][T20162] fuse: Bad value for 'fd' [ 1015.811194][T20173] syzkaller0: entered promiscuous mode [ 1015.817209][T20173] syzkaller0: entered allmulticast mode [ 1015.929396][T20169] nbd: nbd1 already in use [ 1017.733206][T20206] nbd: nbd4 already in use [ 1018.207487][T20214] __nla_validate_parse: 14 callbacks suppressed [ 1018.207504][T20214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4163'. [ 1019.037659][T20225] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4168'. [ 1019.366633][T20232] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4171'. [ 1019.387279][T20232] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4171'. [ 1019.410534][T20232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4171'. [ 1019.419843][T20232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4171'. [ 1020.064773][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1020.235604][T20255] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4177'. [ 1020.412484][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.423737][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1020.433649][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1020.454678][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1020.463779][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.539618][T20259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4176'. [ 1020.694615][ T9] usb 2-1: config 0 descriptor?? [ 1021.448049][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 1021.534372][ T9] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 1021.665192][T20272] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4182'. [ 1021.674207][T20272] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4182'. [ 1021.684491][ T9] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1022.153504][T11108] usb 2-1: USB disconnect, device number 17 [ 1022.456071][T20297] tipc: Enabling of bearer rejected, failed to enable media [ 1023.523048][T20313] __nla_validate_parse: 3 callbacks suppressed [ 1023.523066][T20313] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4193'. [ 1023.540454][T20313] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4193'. [ 1023.624781][T20313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4193'. [ 1023.667966][T20313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4193'. [ 1024.572188][T20333] tipc: Enabled bearer , priority 0 [ 1024.583787][T20332] tipc: Disabling bearer [ 1026.168333][T20366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4202'. [ 1027.056182][T20372] xt_hashlimit: size too large, truncated to 1048576 [ 1027.083785][ T24] block nbd1: Possible stuck request ffff88805bbe8000: control (read@0,1024B). Runtime 150 seconds [ 1027.125943][ T24] block nbd1: Possible stuck request ffff88805bbe8200: control (read@1024,1024B). Runtime 150 seconds [ 1027.144934][ T24] block nbd1: Possible stuck request ffff88805bbe8400: control (read@2048,1024B). Runtime 150 seconds [ 1027.163114][ T24] block nbd1: Possible stuck request ffff88805bbe8600: control (read@3072,1024B). Runtime 150 seconds [ 1028.471683][T20375] bridge_slave_0 (unregistering): left allmulticast mode [ 1028.513736][T20375] bridge_slave_0 (unregistering): left promiscuous mode [ 1028.547709][T20375] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.622160][T20387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4212'. [ 1029.486075][T20415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4217'. [ 1031.744778][ T5141] udevd[5141]: worker [14588] /devices/virtual/block/nbd0 timeout; kill it [ 1031.807340][ T5141] udevd[5141]: seq 18045 '/devices/virtual/block/nbd0' killed [ 1034.764964][ T96] block nbd3: Possible stuck request ffff888021fba600: control (read@0,1024B). Runtime 180 seconds [ 1034.776961][ T96] block nbd3: Possible stuck request ffff888021fba800: control (read@1024,1024B). Runtime 180 seconds [ 1034.788350][ T96] block nbd3: Possible stuck request ffff888021fbaa00: control (read@2048,1024B). Runtime 180 seconds [ 1034.799824][ T96] block nbd3: Possible stuck request ffff888021fbac00: control (read@3072,1024B). Runtime 180 seconds [ 1034.825848][ T5141] udevd[5141]: worker [14750] /devices/virtual/block/nbd3 timeout; kill it [ 1034.839085][ T5141] udevd[5141]: seq 18589 '/devices/virtual/block/nbd3' killed [ 1038.135661][T20520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4251'. [ 1038.592179][T20528] fuse: Bad value for 'fd' [ 1039.086785][T20536] nbd: nbd4 already in use [ 1039.293410][T20543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4262'. [ 1039.487653][T20547] fuse: Bad value for 'fd' [ 1039.730416][T20556] dns_resolver: Unsupported server list version (0) [ 1040.263711][T20556] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4268'. [ 1040.423862][T20578] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4273'. [ 1040.834582][T11108] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1041.045969][T11108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1041.065973][T11108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1041.097071][T11108] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1041.131651][T11108] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1041.173103][T11108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.223497][T11108] usb 5-1: config 0 descriptor?? [ 1041.674119][T11108] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 1041.698975][T20608] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4283'. [ 1041.708521][T11108] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 1041.732432][T11108] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1041.785410][T20610] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4283'. [ 1041.819053][T20610] nbd: device at index 64 is going down [ 1041.964055][T16889] udevd[16889]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1041.974007][T11108] usb 5-1: USB disconnect, device number 2 [ 1042.027949][T16557] udevd[16557]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1042.422805][T20633] nbd: nbd1 already in use [ 1042.625952][T20642] xt_hashlimit: size too large, truncated to 1048576 [ 1043.025398][T20650] bridge_slave_0 (unregistering): left allmulticast mode [ 1043.032520][T20650] bridge_slave_0 (unregistering): left promiscuous mode [ 1043.074895][ T96] block nbd0: Possible stuck request ffff8880485c0000: control (read@0,1024B). Runtime 210 seconds [ 1043.085871][ T96] block nbd0: Possible stuck request ffff8880485c0200: control (read@1024,1024B). Runtime 210 seconds [ 1043.097331][ T96] block nbd0: Possible stuck request ffff8880485c0400: control (read@2048,1024B). Runtime 210 seconds [ 1043.108757][ T96] block nbd0: Possible stuck request ffff8880485c0600: control (read@3072,1024B). Runtime 210 seconds [ 1043.120301][T20650] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.255906][T11431] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1044.477294][T11431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.498561][T11431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1044.535289][T11431] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1044.572945][T11431] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1044.583570][T11431] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.600074][T11431] usb 2-1: config 0 descriptor?? [ 1045.099164][T20704] overlayfs: failed to clone upperpath [ 1045.823710][T11431] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 1045.846685][T11431] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 1045.876707][T11431] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1045.916507][T11431] usb 2-1: USB disconnect, device number 18 [ 1046.118165][T20712] fido_id[20712]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1046.711152][T20730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4312'. [ 1047.591654][T20743] syz.0.4318(20743): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1049.690716][T20783] lo speed is unknown, defaulting to 1000 [ 1050.141388][T20809] nbd: nbd1 already in use [ 1050.462022][T20811] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4336'. [ 1051.451088][T20291] udevd[20291]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1051.467569][T16557] udevd[16557]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1051.582002][T20828] tipc: Enabled bearer , priority 0 [ 1051.603507][T20827] tipc: Disabling bearer [ 1052.336645][T11108] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1052.604045][T11108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.723002][T11108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.850607][T11108] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1053.017597][T11108] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1053.035016][T11108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.082199][T11108] usb 5-1: config 0 descriptor?? [ 1053.172205][T20861] tipc: Enabling of bearer rejected, failed to enable media [ 1053.185014][T20859] overlayfs: failed to resolve './file0': -2 [ 1053.516752][T11108] usbhid 5-1:0.0: can't add hid device: -71 [ 1053.544703][T11108] usbhid: probe of 5-1:0.0 failed with error -71 [ 1053.559353][T11108] usb 5-1: USB disconnect, device number 3 [ 1054.598511][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.614786][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.696055][T20895] tipc: Enabling of bearer rejected, failed to enable media [ 1057.034776][T11108] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1057.252831][T11108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1057.274394][T11108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1057.301676][T11108] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1057.335738][T11108] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1057.361169][T11108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.398403][T11108] usb 5-1: config 0 descriptor?? [ 1057.404864][ T24] block nbd1: Possible stuck request ffff88805bbe8000: control (read@0,1024B). Runtime 180 seconds [ 1057.416197][ T24] block nbd1: Possible stuck request ffff88805bbe8200: control (read@1024,1024B). Runtime 180 seconds [ 1057.428114][ T24] block nbd1: Possible stuck request ffff88805bbe8400: control (read@2048,1024B). Runtime 180 seconds [ 1057.853824][T11108] usbhid 5-1:0.0: can't add hid device: -71 [ 1057.873408][T11108] usbhid: probe of 5-1:0.0 failed with error -71 [ 1057.892920][T11108] usb 5-1: USB disconnect, device number 4 [ 1058.049147][ T24] block nbd1: Possible stuck request ffff88805bbe8600: control (read@3072,1024B). Runtime 180 seconds [ 1060.469962][T21002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4394'. [ 1061.659280][T21025] syzkaller0: entered promiscuous mode [ 1061.714086][T21025] syzkaller0: entered allmulticast mode [ 1063.504802][ T5141] udevd[5141]: worker [14590] /devices/virtual/block/nbd1 timeout; kill it [ 1063.550307][ T5141] udevd[5141]: seq 18869 '/devices/virtual/block/nbd1' killed [ 1064.269514][T21075] tipc: Started in network mode [ 1064.294800][T21075] tipc: Node identity , cluster identity 4711 [ 1064.329291][T21075] tipc: Failed to obtain node identity [ 1064.358200][T21075] tipc: Enabling of bearer rejected, failed to enable media [ 1064.837688][ T96] block nbd3: Possible stuck request ffff888021fba600: control (read@0,1024B). Runtime 210 seconds [ 1064.848566][ T96] block nbd3: Possible stuck request ffff888021fba800: control (read@1024,1024B). Runtime 210 seconds [ 1064.860552][ T96] block nbd3: Possible stuck request ffff888021fbaa00: control (read@2048,1024B). Runtime 210 seconds [ 1064.874847][ T96] block nbd3: Possible stuck request ffff888021fbac00: control (read@3072,1024B). Runtime 210 seconds [ 1065.057244][T21103] overlayfs: overlapping lowerdir path [ 1065.653698][T21110] tipc: Started in network mode [ 1065.675053][T21110] tipc: Node identity , cluster identity 4711 [ 1065.681201][T21110] tipc: Failed to obtain node identity [ 1065.704726][T21110] tipc: Enabling of bearer rejected, failed to enable media [ 1065.799740][T21116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4435'. [ 1066.545488][T11434] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1066.860009][T11434] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.901736][T11434] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1066.942818][T11434] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.967758][T11434] usb 2-1: config 0 descriptor?? [ 1067.017336][T11434] pwc: Askey VC010 type 2 USB webcam detected. [ 1067.381148][T11434] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1067.404198][T11434] pwc: recv_control_msg error -32 req 02 val 2700 [ 1067.433891][T11434] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1067.463420][T11434] pwc: recv_control_msg error -32 req 04 val 1000 [ 1067.483466][T11434] pwc: recv_control_msg error -32 req 04 val 1300 [ 1067.502064][T11434] pwc: recv_control_msg error -32 req 04 val 1400 [ 1067.517999][T11434] pwc: recv_control_msg error -32 req 02 val 2000 [ 1067.736225][T11434] pwc: recv_control_msg error -71 req 04 val 1500 [ 1067.749180][T11434] pwc: recv_control_msg error -71 req 02 val 2500 [ 1067.764611][T11434] pwc: recv_control_msg error -71 req 02 val 2400 [ 1067.771711][T11434] pwc: recv_control_msg error -71 req 02 val 2600 [ 1067.782546][T11434] pwc: recv_control_msg error -71 req 02 val 2900 [ 1067.793250][T11434] pwc: recv_control_msg error -71 req 02 val 2800 [ 1067.804279][T11434] pwc: recv_control_msg error -71 req 04 val 1100 [ 1067.813926][T11434] pwc: recv_control_msg error -71 req 04 val 1200 [ 1067.840910][T11434] pwc: Registered as video103. [ 1067.852006][T11434] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input29 [ 1067.913415][T11434] usb 2-1: USB disconnect, device number 19 [ 1068.228810][T21143] tipc: Enabling of bearer rejected, failed to enable media [ 1069.095200][T21146] overlayfs: overlapping lowerdir path [ 1073.270964][T21188] overlayfs: overlapping lowerdir path [ 1073.354581][ T96] block nbd0: Possible stuck request ffff8880485c0000: control (read@0,1024B). Runtime 240 seconds [ 1073.366248][ T96] block nbd0: Possible stuck request ffff8880485c0200: control (read@1024,1024B). Runtime 240 seconds [ 1073.377890][ T96] block nbd0: Possible stuck request ffff8880485c0400: control (read@2048,1024B). Runtime 240 seconds [ 1073.389256][ T96] block nbd0: Possible stuck request ffff8880485c0600: control (read@3072,1024B). Runtime 240 seconds [ 1076.685504][T21247] netlink: 'syz.4.4481': attribute type 1 has an invalid length. [ 1076.730527][T21247] bond2: entered promiscuous mode [ 1076.738531][T21247] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1077.663504][T21284] tipc: Enabled bearer , priority 0 [ 1077.692464][T21282] tipc: Disabling bearer [ 1077.707772][T21286] netlink: 'syz.2.4493': attribute type 1 has an invalid length. [ 1077.754102][T21286] bond12: entered promiscuous mode [ 1077.759675][T21286] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1078.115663][T21306] kvm: emulating exchange as write [ 1078.297552][T21318] tipc: Enabled bearer , priority 0 [ 1078.309592][T21317] tipc: Disabling bearer [ 1078.407502][T21320] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4507'. [ 1079.254339][T20291] udevd[20291]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1079.296555][T16557] udevd[16557]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1079.432080][T21335] netlink: 'syz.2.4509': attribute type 1 has an invalid length. [ 1079.538001][T21335] bond13: entered promiscuous mode [ 1079.552280][T21335] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1079.814681][T11434] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1080.005088][T11434] usb 5-1: Using ep0 maxpacket: 16 [ 1080.022001][T11434] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 1080.051026][T11434] usb 5-1: config 0 has no interface number 0 [ 1080.064618][T11434] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1080.090299][T11434] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1080.120994][T11434] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1080.140110][T11434] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.156630][T11434] usb 5-1: Product: syz [ 1080.168920][T11434] usb 5-1: Manufacturer: syz [ 1080.190439][T11434] usb 5-1: SerialNumber: syz [ 1080.267911][T11434] usb 5-1: config 0 descriptor?? [ 1080.275465][T21344] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1080.316804][T21344] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1080.751841][T21344] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1080.897465][T21344] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1081.085256][T11434] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1081.106892][T21371] netlink: 'syz.0.4523': attribute type 1 has an invalid length. [ 1081.213643][T21371] bond8: entered promiscuous mode [ 1081.283880][T21371] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1081.900056][T21389] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4530'. [ 1081.913200][T21389] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4530'. [ 1081.931615][T21389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4530'. [ 1081.941216][T21389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4530'. [ 1082.813580][T11434] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1082.915321][T11434] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1083.159238][T11434] asix: probe of 5-1:0.34 failed with error -71 [ 1083.202222][T11434] usb 5-1: USB disconnect, device number 5 [ 1083.348423][ T5785] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1083.386426][ T5785] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1083.400623][ T5785] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1083.410594][ T5785] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1083.424576][ T5785] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1083.432159][ T5785] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1083.516276][T21408] netlink: 'syz.0.4535': attribute type 1 has an invalid length. [ 1083.600021][T21408] bond9: entered promiscuous mode [ 1083.614162][T21408] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1083.681155][T21405] lo speed is unknown, defaulting to 1000 [ 1083.787950][T21421] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1085.575934][T10972] Bluetooth: hci5: command tx timeout [ 1085.976828][T21405] chnl_net:caif_netlink_parms(): no params data found [ 1086.145137][T21405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.152506][T21405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.159913][T21405] bridge_slave_0: entered allmulticast mode [ 1086.167558][T21405] bridge_slave_0: entered promiscuous mode [ 1086.177391][T21405] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.184818][T21405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.192166][T21405] bridge_slave_1: entered allmulticast mode [ 1086.199769][T21405] bridge_slave_1: entered promiscuous mode [ 1086.240863][T21405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1086.254589][T21405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1086.280693][T21446] netlink: 'syz.0.4545': attribute type 1 has an invalid length. [ 1086.311672][T21446] bond10: entered promiscuous mode [ 1086.317189][T21446] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1086.368726][T21405] team0: Port device team_slave_0 added [ 1086.381171][T21405] team0: Port device team_slave_1 added [ 1086.413964][T21405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1086.421113][T21405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.447311][T21405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.460431][T21405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.467513][T21405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.494324][T21405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.606263][T11434] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1086.618189][T21405] hsr_slave_0: entered promiscuous mode [ 1086.790610][T21405] hsr_slave_1: entered promiscuous mode [ 1086.803739][T21405] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1086.820760][T21405] Cannot create hsr debugfs directory [ 1086.831233][T11434] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1086.853301][T11434] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.878352][T11434] usb 2-1: Product: syz [ 1086.888187][T11434] usb 2-1: Manufacturer: syz [ 1086.898251][T11434] usb 2-1: SerialNumber: syz [ 1086.924103][T11434] usb 2-1: config 0 descriptor?? [ 1086.953924][T11434] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1087.161207][T11434] gspca_sunplus: reg_r err -71 [ 1087.193767][T11434] usb 2-1: USB disconnect, device number 20 [ 1087.656366][T10972] Bluetooth: hci5: command tx timeout [ 1088.395327][T21476] netlink: 'syz.1.4554': attribute type 1 has an invalid length. [ 1088.436055][ T24] block nbd1: Possible stuck request ffff88805bbe8000: control (read@0,1024B). Runtime 210 seconds [ 1088.446993][ T24] block nbd1: Possible stuck request ffff88805bbe8200: control (read@1024,1024B). Runtime 210 seconds [ 1088.458157][ T24] block nbd1: Possible stuck request ffff88805bbe8400: control (read@2048,1024B). Runtime 210 seconds [ 1088.487430][ T24] block nbd1: Possible stuck request ffff88805bbe8600: control (read@3072,1024B). Runtime 210 seconds [ 1088.508356][T21476] bond9: entered promiscuous mode [ 1088.513685][T21476] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1089.108197][T21405] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1089.158501][T21405] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1089.232830][T21405] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1089.277675][T21405] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1089.332861][T21487] syzkaller0: entered promiscuous mode [ 1089.338667][T21487] syzkaller0: entered allmulticast mode [ 1089.553875][T21405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1089.598395][T21405] 8021q: adding VLAN 0 to HW filter on device team0 [ 1089.630264][T13043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.637519][T13043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.672346][T13045] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.679587][T13045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1089.716159][T10972] Bluetooth: hci5: command tx timeout [ 1089.858127][T21405] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1090.012262][T21504] netlink: 'syz.1.4564': attribute type 1 has an invalid length. [ 1090.656304][T21504] bond10: entered promiscuous mode [ 1090.661934][T21504] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1091.053579][T21405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1091.685218][T21518] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1091.761755][T21405] veth0_vlan: entered promiscuous mode [ 1091.774686][T21518] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1091.804779][T10972] Bluetooth: hci5: command tx timeout [ 1091.830841][T21405] veth1_vlan: entered promiscuous mode [ 1092.007410][T21405] veth0_macvtap: entered promiscuous mode [ 1092.029421][T21405] veth1_macvtap: entered promiscuous mode [ 1092.072496][T21405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1092.102654][T21405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1092.142095][T21405] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.158342][T21405] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.171038][T21405] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.186772][T21405] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.401936][T13043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.434887][T13043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.489486][T13043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.507338][T13043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.273514][T21554] syzkaller0: entered promiscuous mode [ 1094.281492][T21554] syzkaller0: entered allmulticast mode [ 1094.804413][T21568] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 1094.936407][ T96] block nbd3: Possible stuck request ffff888021fba600: control (read@0,1024B). Runtime 240 seconds [ 1094.949619][ T96] block nbd3: Possible stuck request ffff888021fba800: control (read@1024,1024B). Runtime 240 seconds [ 1094.968459][ T96] block nbd3: Possible stuck request ffff888021fbaa00: control (read@2048,1024B). Runtime 240 seconds [ 1094.981570][ T96] block nbd3: Possible stuck request ffff888021fbac00: control (read@3072,1024B). Runtime 240 seconds [ 1095.714177][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1095.725216][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1095.734166][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1095.742391][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1095.750452][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1095.757920][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1095.852475][T21573] lo speed is unknown, defaulting to 1000 [ 1097.806146][ T5785] Bluetooth: hci0: command tx timeout [ 1097.970125][T21573] chnl_net:caif_netlink_parms(): no params data found [ 1098.189262][T21573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.197249][T21573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.205002][T21573] bridge_slave_0: entered allmulticast mode [ 1098.212654][T21573] bridge_slave_0: entered promiscuous mode [ 1098.222471][T21573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.230077][T21573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.237962][T21573] bridge_slave_1: entered allmulticast mode [ 1098.247428][T21573] bridge_slave_1: entered promiscuous mode [ 1098.285501][T21573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1098.298452][T21573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1098.345414][T21573] team0: Port device team_slave_0 added [ 1098.359405][T21573] team0: Port device team_slave_1 added [ 1098.402211][T21573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1098.409582][T21573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1098.436867][T21573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1098.456190][T21573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1098.463333][T21573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1098.491570][T21573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1098.627552][T21573] hsr_slave_0: entered promiscuous mode [ 1098.662786][T21573] hsr_slave_1: entered promiscuous mode [ 1098.669622][T21573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1098.684799][T21573] Cannot create hsr debugfs directory [ 1099.894840][ T5785] Bluetooth: hci0: command tx timeout [ 1100.931953][T21573] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1100.965564][T21573] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1101.054125][T21573] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1101.093349][T21573] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1101.417844][T21573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1101.482219][T21573] 8021q: adding VLAN 0 to HW filter on device team0 [ 1101.550693][T13045] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.557930][T13045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1101.604943][T13045] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.612178][T13045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1101.791201][T21573] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1101.843198][T21573] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1101.956766][ T5785] Bluetooth: hci0: command tx timeout [ 1102.398984][T21573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1102.563649][T21573] veth0_vlan: entered promiscuous mode [ 1102.622553][T21573] veth1_vlan: entered promiscuous mode [ 1102.671779][T21573] veth0_macvtap: entered promiscuous mode [ 1102.683912][T21573] veth1_macvtap: entered promiscuous mode [ 1103.099983][T21573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1103.154952][T21573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.207190][T21573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1103.271983][T21573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1103.323266][T21573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.335153][T21640] random: crng reseeded on system resumption [ 1103.366228][T21573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1103.412353][T21573] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.432865][T21573] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.451953][T21573] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.464557][T21573] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.876732][ T96] block nbd0: Possible stuck request ffff8880485c0000: control (read@0,1024B). Runtime 270 seconds [ 1103.887600][ T96] block nbd0: Possible stuck request ffff8880485c0200: control (read@1024,1024B). Runtime 270 seconds [ 1103.898694][ T96] block nbd0: Possible stuck request ffff8880485c0400: control (read@2048,1024B). Runtime 270 seconds [ 1103.909733][ T96] block nbd0: Possible stuck request ffff8880485c0600: control (read@3072,1024B). Runtime 270 seconds [ 1104.034896][ T5785] Bluetooth: hci0: command tx timeout [ 1104.076198][T19805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1104.116100][T19805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1104.171724][T13045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1104.183085][T13045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1104.761072][T21675] tipc: Enabled bearer , priority 10 [ 1105.754731][ T9] tipc: Node number set to 2457345126 [ 1106.028648][T21686] syzkaller0: entered promiscuous mode [ 1106.040734][T21686] syzkaller0: entered allmulticast mode [ 1107.686895][T21711] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4623'. [ 1107.696661][T21711] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4623'. [ 1107.708266][T21711] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4623'. [ 1107.717844][T21711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4623'. [ 1107.725828][ T29] INFO: task syz.3.3570:18395 blocked for more than 143 seconds. [ 1107.736615][ T29] Not tainted syzkaller #0 [ 1107.742102][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1107.751363][ T29] task:syz.3.3570 state:D stack:24232 pid:18395 ppid:14910 flags:0x00004006 [ 1107.761113][ T29] Call Trace: [ 1107.764803][ T29] [ 1107.767878][ T29] __schedule+0x1553/0x45a0 [ 1107.772761][ T29] ? asan.module_dtor+0x20/0x20 [ 1107.778294][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 1107.783220][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 1107.790837][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1107.800357][ T29] schedule+0xbd/0x170 [ 1107.805294][ T29] schedule_preempt_disabled+0x13/0x20 [ 1107.811648][ T29] __mutex_lock+0x6a9/0xcc0 [ 1107.816664][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 1107.821748][ T29] ? sync_bdevs+0x1af/0x330 [ 1107.826863][ T29] ? mutex_lock_nested+0x20/0x20 [ 1107.832106][ T29] ? __rwlock_init+0x150/0x150 [ 1107.837410][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 1107.844163][ T29] sync_bdevs+0x1af/0x330 [ 1107.849488][ T29] ksys_sync+0xc6/0x170 [ 1107.853890][ T29] ? sync_filesystem+0x220/0x220 [ 1107.859789][ T29] ? syscall_enter_from_user_mode+0x25/0x80 [ 1107.866408][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 1107.871883][ T29] __ia32_sys_sync+0xe/0x20 [ 1107.877855][ T29] do_syscall_64+0x55/0xb0 [ 1107.882462][ T29] ? clear_bhb_loop+0x40/0x90 [ 1107.888074][ T29] ? clear_bhb_loop+0x40/0x90 [ 1107.892980][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1107.899517][ T29] RIP: 0033:0x7f175279ce59 [ 1107.904832][ T29] RSP: 002b:00007f17535d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1107.913734][ T29] RAX: ffffffffffffffda RBX: 00007f1752a16090 RCX: 00007f175279ce59 [ 1107.922448][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1107.930918][ T29] RBP: 00007f1752a16090 R08: 0000000000000000 R09: 0000000000000000 [ 1107.939314][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1107.948592][ T29] R13: 00007f1752a16128 R14: 00007f1752a16090 R15: 00007ffe73630048 [ 1107.957149][ T29] [ 1107.979118][ T29] [ 1107.979118][ T29] Showing all locks held in the system: [ 1107.987549][ T29] 1 lock held by khungtaskd/29: [ 1107.992563][ T29] #0: ffffffff8d132160 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1108.003163][ T29] 3 locks held by kworker/u4:5/1070: [ 1108.009619][ T29] #0: ffff88802cc1c538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1108.022408][ T29] #1: ffffc900044afd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1108.040577][ T29] #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd4/0x1530 [ 1108.051173][ T29] 2 locks held by getty/5535: [ 1108.062065][ T29] #0: ffff8880317a20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1108.073180][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 1108.090785][ T29] 2 locks held by kworker/1:0/11104: [ 1108.096261][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1108.107691][ T29] #1: ffffc900198ffd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1108.124058][ T29] 3 locks held by kworker/1:8/11108: [ 1108.130640][ T29] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1108.144681][ T29] #1: ffffc9001999fd00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1108.157637][ T29] #2: ffff88806c1f6240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x286/0x31b0 [ 1108.177442][ T29] 1 lock held by udevd/14588: [ 1108.182474][ T29] #0: ffff88805ee974c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1108.198585][ T29] 1 lock held by udevd/14590: [ 1108.203571][ T29] #0: ffff88806899a4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1108.231799][ T29] 1 lock held by udevd/14750: [ 1108.239363][ T29] #0: ffff8881413704c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1108.257948][ T29] 1 lock held by syz.3.3570/18395: [ 1108.263705][ T29] #0: ffff88805ee974c8 (&disk->open_mutex){+.+.}-{3:3}, at: sync_bdevs+0x1af/0x330 [ 1108.285321][ T29] 3 locks held by kworker/u4:0/19805: [ 1108.292056][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1108.314666][ T29] #1: ffffc9000f707d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1108.326517][ T29] #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1108.335867][ T29] 2 locks held by syz.0.4616/21694: [ 1108.341102][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 1108.350235][ T29] #1: ffffffff8d137b38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 1108.362033][ T29] 4 locks held by kvm-nx-lpage-re/21707: [ 1108.367804][ T29] #0: ffffffff8d15bdc8 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_attach_task_all+0x26/0xe0 [ 1108.377930][ T29] #1: ffffffff8cfcd370 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_attach_lock+0x11/0x30 [ 1108.387903][ T29] #2: ffffffff8d15bfb0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_attach_task_all+0x30/0xe0 [ 1108.398954][ T29] #3: ffffffff8d137b38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 1108.410068][ T29] 1 lock held by syz.4.4623/21711: [ 1108.415472][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: wext_ioctl_dispatch+0x115/0x600 [ 1108.428917][ T29] 1 lock held by syz.4.4623/21712: [ 1108.434167][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1108.460582][ T29] [ 1108.463086][ T29] ============================================= [ 1108.463086][ T29] [ 1108.480666][ T29] NMI backtrace for cpu 0 [ 1108.485054][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1108.492271][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1108.502353][ T29] Call Trace: [ 1108.505660][ T29] [ 1108.508630][ T29] dump_stack_lvl+0x18c/0x250 [ 1108.513357][ T29] ? show_regs_print_info+0x20/0x20 [ 1108.518586][ T29] ? load_image+0x420/0x420 [ 1108.523122][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 1108.528119][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1108.534301][ T29] ? _printk+0xde/0x130 [ 1108.538481][ T29] ? load_image+0x420/0x420 [ 1108.543007][ T29] ? load_image+0x420/0x420 [ 1108.547544][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1108.553668][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1108.559680][ T29] watchdog+0xf3d/0xf80 [ 1108.563867][ T29] ? watchdog+0x1e1/0xf80 [ 1108.568230][ T29] kthread+0x2fa/0x390 [ 1108.572315][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1108.577453][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1108.582066][ T29] ret_from_fork+0x48/0x80 [ 1108.586511][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1108.591124][ T29] ret_from_fork_asm+0x11/0x20 [ 1108.595955][ T29] [ 1108.599898][ T29] Sending NMI from CPU 0 to CPUs 1: [ 1108.605408][ C1] NMI backtrace for cpu 1 [ 1108.605418][ C1] CPU: 1 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 1108.605433][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1108.605444][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 1108.605569][ C1] RIP: 0010:__sanitizer_cov_trace_cmp8+0x8/0x80 [ 1108.605594][ C1] Code: 08 04 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 90 88 7c 7e 65 8b 15 91 88 7c 7e 81 e2 00 01 ff 00 74 [ 1108.605606][ C1] RSP: 0018:ffffc900001175d0 EFLAGS: 00000283 [ 1108.605619][ C1] RAX: ffffffff813b3c78 RBX: ffffffff8efcf478 RCX: 0000000000000005 [ 1108.605631][ C1] RDX: dffffc0000000000 RSI: ffffffff89d96694 RDI: ffffffff89d9669d [ 1108.605643][ C1] RBP: ffffffff8efcf464 R08: ffffc90000117770 R09: 0000000000000006 [ 1108.605653][ C1] R10: 0000000000000004 R11: 0000000000000000 R12: ffffffff8efcf464 [ 1108.605663][ C1] R13: ffffffff89d9669d R14: ffffffff89d96694 R15: ffffffff8efcf46c [ 1108.605675][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1108.605688][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1108.605716][ C1] CR2: 000000110c3b33ed CR3: 000000000cf32000 CR4: 00000000003526e0 [ 1108.605731][ C1] Call Trace: [ 1108.605736][ C1] [ 1108.605741][ C1] unwind_next_frame+0x4b8/0x2970 [ 1108.605762][ C1] ? cfg80211_wiphy_work+0x224/0x260 [ 1108.605785][ C1] ? cfg80211_wiphy_work+0x225/0x260 [ 1108.605807][ C1] ? cfg80211_wiphy_work+0x225/0x260 [ 1108.605827][ C1] ? stack_trace_save+0x100/0x100 [ 1108.605848][ C1] arch_stack_walk+0x144/0x190 [ 1108.605868][ C1] ? cfg80211_wiphy_work+0x225/0x260 [ 1108.605891][ C1] stack_trace_save+0xaa/0x100 [ 1108.605911][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1108.605930][ C1] ? ieee80211_iface_work+0x788/0xc70 [ 1108.605973][ C1] ? kthread+0x2fa/0x390 [ 1108.605989][ C1] ? ret_from_fork_asm+0x11/0x20 [ 1108.606014][ C1] kasan_set_track+0x4e/0x70 [ 1108.606034][ C1] ? kasan_set_track+0x4e/0x70 [ 1108.606050][ C1] ? kasan_save_free_info+0x2e/0x50 [ 1108.606071][ C1] ? ____kasan_slab_free+0x126/0x1e0 [ 1108.606089][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 1108.606105][ C1] ? kmem_cache_free+0xf8/0x270 [ 1108.606127][ C1] ? ieee80211_iface_work+0x788/0xc70 [ 1108.606148][ C1] ? cfg80211_wiphy_work+0x225/0x260 [ 1108.606193][ C1] ? kmem_cache_free+0xf8/0x270 [ 1108.606216][ C1] kasan_save_free_info+0x2e/0x50 [ 1108.606238][ C1] ____kasan_slab_free+0x126/0x1e0 [ 1108.606258][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 1108.606278][ C1] ? ieee80211_iface_work+0x788/0xc70 [ 1108.606299][ C1] kmem_cache_free+0xf8/0x270 [ 1108.606325][ C1] ieee80211_iface_work+0x788/0xc70 [ 1108.606348][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1108.606375][ C1] cfg80211_wiphy_work+0x225/0x260 [ 1108.606399][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 1108.606420][ C1] process_scheduled_works+0xa5d/0x15d0 [ 1108.606456][ C1] ? worker_attach_to_pool+0x380/0x380 [ 1108.606480][ C1] ? assign_work+0x3d2/0x5d0 [ 1108.606503][ C1] worker_thread+0xa55/0xfc0 [ 1108.606543][ C1] kthread+0x2fa/0x390 [ 1108.606558][ C1] ? pr_cont_work+0x560/0x560 [ 1108.606577][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1108.606593][ C1] ret_from_fork+0x48/0x80 [ 1108.606612][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1108.606628][ C1] ret_from_fork_asm+0x11/0x20 [ 1108.606657][ C1] [ 1108.641958][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1108.642003][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1108.642059][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1108.642089][ T29] Call Trace: [ 1108.642110][ T29] [ 1108.642130][ T29] dump_stack_lvl+0x18c/0x250 [ 1108.642215][ T29] ? show_regs_print_info+0x20/0x20 [ 1108.642296][ T29] ? load_image+0x420/0x420 [ 1108.642378][ T29] panic+0x2dc/0x730 [ 1108.642450][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 1108.642533][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 1109.006346][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 1109.011925][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1109.018098][ T29] watchdog+0xf7c/0xf80 [ 1109.022272][ T29] ? watchdog+0x1e1/0xf80 [ 1109.026660][ T29] kthread+0x2fa/0x390 [ 1109.030757][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1109.035808][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1109.040421][ T29] ret_from_fork+0x48/0x80 [ 1109.044898][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1109.049528][ T29] ret_from_fork_asm+0x11/0x20 [ 1109.054322][ T29] [ 1109.057972][ T29] Kernel Offset: disabled [ 1109.062309][ T29] Rebooting in 86400 seconds..