last executing test programs: 14m28.534751548s ago: executing program 1 (id=112): ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x1) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000001c0)=0x1) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14m25.729457964s ago: executing program 1 (id=119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0xc8) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x40080) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7c6}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_io_uring_setup(0x2d64, 0x0, 0x0, &(0x7f0000011000), &(0x7f0000000000)) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) gettid() munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/172, 0xac) getdents64(0xffffffffffffffff, &(0x7f0000000fc0)=""/224, 0xe0) 14m23.567902984s ago: executing program 1 (id=122): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./mnt\x00', 0x2200454, &(0x7f0000000040)={[{@user_xattr}, {@nodelalloc}]}, 0x1, 0x244, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000002080)={0xc, 0x0, &(0x7f0000002040)=[r4, r1]}, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0xfffffc7a) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x7, 0xfff, 0x1000000007}) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) 14m22.049234435s ago: executing program 1 (id=124): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) write(r2, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001140), 0x0, 0x2, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000080)={[{@usebackuproot}, {@nodatasum}, {@ssd_spread}, {@user_subvol_rm}, {@flushoncommit}, {@compress_force}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x44800, 0x0) sendfile(r3, r4, 0x0, 0xfffe82) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ioctl$FITRIM(r5, 0xc4009420, &(0x7f0000000180)={0x5, 0x10000}) syz_usb_connect$uac3(0x5, 0xc2, &(0x7f0000000680)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8212, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb0, 0x3, 0x1, 0x5, 0x90, 0x5, {0x8, 0xb, 0x2, 0x2, 0x1, 0x0, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x23, 0x4}, [@source_unit={0xc, 0x24, 0xb, 0x7, 0x0, 0xfb6, 0xe, 0xffd2}, @feature_unit={0xd, 0x24, 0x7, 0x1, 0x4, [0x5, 0xb]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x1, 0x7, 0x2, "95"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x2, 0x4, 0x5, 0x31, "6d96"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x6, 0xf8, 0x8, {0xa, 0x25, 0x25, 0x80000000, 0x68, 0xfffa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x2, 0x4, 0x6, 0x3, "798848c6"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x0, 0x80, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0x8, 0x8, {0xa, 0x25, 0x25, 0x7, 0x4e, 0xfff}}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x200, 0x40, 0x9, 0xfb, 0x40}, 0x16e, &(0x7f0000000800)=ANY=[]}) openat$uinput(0xffffffffffffff9c, &(0x7f00000029c0), 0x802, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000002) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000540)={0x32957, 0x0, 0x0, 0x68245b64, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) 14m16.459816157s ago: executing program 1 (id=140): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usbip_server_init(0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000280)='2', 0x1, 0x8080c61) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x0) 14m15.443894544s ago: executing program 1 (id=143): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000340)=0x15, 0x4) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 14m14.236673128s ago: executing program 32 (id=143): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000340)=0x15, 0x4) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 8.900603878s ago: executing program 3 (id=4074): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x20040084) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x5, 0x5, 0x9206, 0x5}, 0x3, 0x4}, [{0xe, 0x7, 0x3, 0x8, 0x3, 0x4df}, {0x8, 0x8, 0x40, 0x8, 0x5, 0x1}, {0x7e12f9c5, 0xffffff61, 0x0, 0x6b5, 0x80000000, 0x101}, {0x9, 0xb1f, 0x3, 0x1, 0x1, 0x2}, {0xfffffe01, 0x5, 0xb91, 0x8, 0x6, 0x4}, {0xfffffffe, 0x0, 0x0, 0xe49, 0x4, 0x15}, {0x1, 0xa, 0xc79, 0x5, 0x401, 0xfffffff4}, {0x7, 0x8c0, 0x5, 0xffffffff, 0x2, 0x10001}, {0xfffffffa, 0x1, 0x7, 0xffffffff, 0x1, 0xffffffff}, {0x1, 0x100, 0x0, 0x80000000, 0x7f6b, 0x1}, {0x154, 0x8, 0xb, 0x2, 0x7fffffff, 0xb3e4}, {0x36, 0x7, 0xffff, 0xfffffff7, 0x10, 0xf7bb}, {0x8, 0x7, 0x401, 0x1, 0x400, 0x8565}, {0x5, 0x4, 0x80000000, 0xc50, 0x7, 0xfffffffd}, {0x4, 0x101, 0x2, 0x6, 0x6, 0x2}, {0x1000, 0x800, 0xe, 0x1, 0x7ff, 0xe}, {0x1, 0x9, 0x7, 0x3, 0xfffffff9, 0x4}, {0x1, 0x200, 0x975f, 0x2, 0x400, 0x3dc4}, {0x100, 0x200, 0x98, 0xf9d6, 0xb}, {0x1, 0x83, 0xf9, 0x5, 0x3}, {0x8000, 0x7, 0x1, 0x9, 0xc9d, 0x2}, {0x81, 0x7fffffff, 0x2, 0x7fff, 0x7, 0x5}, {0x80, 0x4, 0x2, 0x1, 0xf403, 0xfffffff1}, {0xffff, 0xedf, 0xc, 0x8, 0x5, 0x1}, {0x0, 0x4, 0x8000, 0xfa8, 0x6, 0x1}, {0xa7d, 0x6, 0x6, 0x80, 0x3f9, 0x9}, {0x2f, 0xdfb, 0x8, 0x4b, 0x7, 0x1}, {0x9, 0x7ff, 0xa, 0x280000, 0x2, 0x1}, {0x138, 0x51d, 0xf, 0x6, 0x4, 0x7}, {0x1ff, 0x6, 0x8, 0x8, 0x4, 0xb}, {0x4, 0x2be2, 0x79f29323, 0x3ff, 0x2, 0x4}, {0xd4, 0x5, 0x5, 0x7, 0xea4c, 0xa4b1}, {0x993, 0x4, 0xfff, 0x23b06916, 0x6, 0xfffffffc}, {0x6, 0x4a6, 0x3, 0x80, 0x7ff, 0xa}, {0x7, 0xfffffffb, 0x0, 0xffffffff, 0x1, 0xfb3}, {0x5, 0xe6, 0xfff, 0x0, 0x1, 0x400}, {0xfffff1a2, 0xa, 0x7, 0xa1, 0x5, 0x4}, {0xbe, 0x2000, 0xffffffff, 0xfffffc00, 0xe06, 0x6}, {0x100, 0x2, 0x8, 0x4, 0x4, 0x9497}, {0xd, 0x8001, 0xf2b, 0xffffffff, 0x3, 0xfffffff3}, {0x2, 0x80000000, 0x5a, 0x1, 0x5, 0x6}, {0x4, 0xc378, 0x8, 0xf, 0x7, 0x8144}, {0x6, 0x81, 0x5, 0x5, 0x3}, {0x9, 0x8001, 0xe10, 0x783, 0x7, 0x3}, {0x7fff, 0x1, 0xe05, 0xffffad2a, 0x4, 0x99c}, {0x99eb, 0x6, 0x5, 0x2, 0x2, 0x1fe0000}, {0x800, 0x9, 0x2a3b, 0x4, 0x7, 0x9}, {0x2, 0x6, 0x0, 0x9, 0xe, 0xe}, {0x65d, 0x8000, 0x6, 0xfffffffe, 0x400, 0x1}, {0xfffffff8, 0x7, 0x6, 0xd4, 0x1000, 0x4}, {0x0, 0xc, 0x5, 0x3, 0xb9, 0x3}, {0x205, 0xfffffffd, 0x9, 0x4, 0x4, 0x6}, {0x1, 0x0, 0x4, 0x100, 0x9, 0xa}, {0x3, 0x2, 0x10, 0x2, 0x5, 0x3}, {0xfffffff8, 0xe, 0xfd0, 0x9, 0x0, 0x7fff}, {0xb, 0x7ff, 0x7, 0xffffff81, 0x9, 0x3}, {0x4, 0xff, 0x10001, 0x0, 0x3, 0x4}, {0x8, 0x8, 0x3ff, 0xbf, 0x7, 0x10}, {0x2f, 0xfffffe00, 0xc6000000, 0x81, 0x6, 0xffffff01}, {0x5, 0x44bd, 0x3, 0x8, 0x0, 0xffffffff}, {0x800000, 0xd, 0x4737, 0xf0000, 0x8405, 0x3}, {0xa4, 0x7, 0x7, 0x7, 0x6, 0xda73}, {0x9, 0x1, 0x7, 0x8971, 0x8, 0x8}, {0x8, 0x1, 0x6, 0x68, 0x7fff, 0x4}, {0x201, 0xf9c3, 0x5, 0x9, 0x0, 0x6c}, {0x5, 0x6, 0x6, 0x1, 0xf, 0x9}, {0x1, 0xf580, 0x3ff, 0x6, 0x6e, 0x6}, {0xad, 0x9, 0x7fff, 0x6, 0x8}, {0x862, 0x0, 0x2800000, 0x2, 0x8, 0x8}, {0x4, 0x90000, 0x2, 0x8d1, 0x1, 0x4}, {0x200, 0xb, 0x40, 0x9, 0xfffffff9, 0x2}, {0x8, 0xdbb, 0x4, 0x3, 0x7, 0xfff}, {0x7, 0x4, 0xce, 0x9, 0x6, 0x4}, {0x5ae2, 0x8, 0x8, 0x8, 0xfffffff0, 0x3ff}, {0x1, 0x5, 0x8, 0x7ff, 0x101, 0xffffffff}, {0x12, 0xa7, 0x6, 0x0, 0xc6, 0x4}, {0x4, 0x9, 0x9, 0xa, 0x9}, {0x84d5, 0xfffffffe, 0x7fffffff, 0x5, 0xf}, {0x5, 0x40, 0x8, 0xa, 0x6, 0x2}, {0x4, 0x100, 0x4d90, 0xf, 0xffffffd7, 0xffffffff}, {0x3, 0x10001, 0x2, 0x8, 0x82dc, 0xffff}, {0x6, 0x1, 0x2, 0xfffff402, 0x2}, {0x4, 0x6, 0xca6, 0x6, 0xb, 0xa}, {0xa, 0x4, 0x9, 0x8ec1, 0x1, 0x10000}, {0x2, 0x2, 0x1ff, 0x171a9022, 0xf4, 0x9000000}, {0x313, 0xfffffff8, 0x1, 0x0, 0x2, 0x1}, {0x5841, 0xfffffffb, 0x3, 0x40004, 0x3ff, 0x9f}, {0x10f, 0xca1c, 0x5, 0x8001, 0xa, 0x4}, {0x766, 0x7, 0x7, 0x7, 0x1, 0x5}, {0x7, 0xba, 0xfffffffd, 0x8001, 0x7ffd}, {0x1, 0x23, 0x3, 0x335, 0x4, 0x5}, {0x2, 0xc, 0x9, 0x0, 0x4, 0x8000}, {0x1, 0x8, 0xb7, 0x3, 0x9, 0x4}, {0x3c, 0x4, 0x1000, 0x2, 0xfff, 0x80000001}, {0x24, 0xffff, 0xd513, 0x748, 0x6eea, 0x4}, {0x57, 0x3, 0x40, 0xb, 0x3080d7c0}, {0x5, 0x7, 0x7, 0x48, 0x9}, {0x5, 0xf01, 0x2, 0x80001d, 0x2, 0x7}, {0x7fff, 0x66019165, 0x88, 0x6, 0x4}, {0x22, 0x0, 0x0, 0x168b, 0x9, 0x5}, {0x4, 0x9, 0x3, 0x3, 0x7fffffff, 0x3}, {0x6, 0x7, 0xfffffff5, 0x4, 0x9, 0x9}, {0x4, 0x8, 0x4, 0x8000, 0x8, 0x4}, {0x16, 0x6, 0x7, 0x5, 0xede, 0x5}, {0x9, 0x4, 0x7fffffff, 0x5, 0x7, 0x6125d06a}, {0xfff, 0x9, 0xda1, 0x521, 0x101, 0xd}, {0xdb2b, 0x1, 0x1, 0x9, 0x5, 0x800}, {0x3, 0x200, 0xfffffffe, 0xff, 0xff, 0x2}, {0x2, 0x5, 0x7, 0x62d, 0x5, 0x3ff}, {0x600, 0x4, 0x3, 0xb42f, 0x5, 0x3}, {0x401, 0x9, 0xc44, 0x3, 0x2, 0x6ea9894}, {0x624, 0xecdb, 0x8000, 0x6, 0x1b, 0x7}, {0x9, 0x2, 0x8, 0xf71, 0xfb0, 0x5}, {0x3, 0x4, 0x5908c254, 0x45c8, 0x2, 0x4}, {0x6, 0xff, 0x20000, 0x2, 0x221, 0x30000}, {0x8, 0x59bc, 0x7, 0x4, 0x0, 0x6}, {0xfffff001, 0x80000000, 0x8, 0x4, 0x644, 0x2}, {0x7, 0x2, 0x6, 0x9, 0xe, 0x3}, {0x2, 0x5, 0x101, 0x9199, 0x694, 0x66c}, {0x4, 0x2, 0x7, 0xc2, 0x69, 0xe5}, {0x8, 0x205a52ca, 0xdc, 0x3, 0x5, 0x4}, {0x2, 0x7, 0x7, 0xf47e, 0x8, 0x8}, {0x787, 0x2, 0x9, 0x3fe, 0x7, 0x5}, {0x0, 0x80000000, 0x5, 0x100, 0x6, 0x400}, {0x7, 0x3f8, 0x4, 0x0, 0x7, 0xfffffff9}, {0x7bce, 0xfffffffc, 0xfffffff8, 0x8001, 0x5, 0xf16}, {0xe, 0x3, 0x34b1, 0xb9a, 0x81, 0x800}, {0x101, 0x7, 0x4, 0x10000, 0x68063168, 0x81}], [{0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x86f1faf2efed1208}, {0x4}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x4}, {0x2}, {0x4}, {0x4}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2}, {0x5}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0xa22732b51f90c34a}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x6, 0x1}, {0x1, 0xa77fa159ed31b0c3}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x2}, {0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x2}, {0x0, 0x1}, {0x4, 0xa845cf6605cfc9f5}, {0x1, 0x222ada2ec63376b7}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4012}], 0x2}, 0x5) 7.907736965s ago: executing program 0 (id=4076): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x2, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x7, 0x9, 0x2d}, {0xffffff89, 0x9d2, 0x2, 0x10000}, {0x9, 0x3, 0x8, 0x8}, {0x0, 0x8, 0x3bb, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x2, 0x1}, {0xffffffff, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafc, {0x0, 0x0, 0x0, r3, {0xa, 0xc}, {0x0, 0xfff1}, {0x1}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4049080) 5.205946869s ago: executing program 4 (id=4080): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x7}, 0x1c) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005cc0)={r2, 0x5, 0x2f, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd03, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000001b14010026bd7000fedb9f2508"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x4, 0x8, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c020000000006000000000000000000000000000000000000ff02000000000000000000000000000100010000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000040000000000000000000000000400000000000000010000000000000a00100001"], 0xc4}}, 0x4c050) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 5.199583719s ago: executing program 0 (id=4081): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) close(0x4) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xa, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getpeername(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x2}, {0x6, 0x6, 0x4}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x58fb) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x800, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x80, 0x1, 0xd2, 0x2, 0x90, 0x7, 0x9, 0xfb, 0x0, 0x16, 0x5, 0x0, 0x2, 0x60}, 0xe) shutdown(r3, 0x1) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x100, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) 5.13993881s ago: executing program 3 (id=4082): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="6d9311000000f8dbdf250100"], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880) syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) 4.762223371s ago: executing program 4 (id=4084): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) readv(r8, &(0x7f0000000900)=[{&(0x7f0000000600)=""/137, 0x89}, {&(0x7f00000006c0)=""/225, 0xe1}, {&(0x7f0000000300)=""/89, 0x59}, {&(0x7f0000000540)=""/117, 0x75}, {&(0x7f00000007c0)=""/142, 0x8e}], 0x5) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@printk={@llx, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r10, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 4.666997433s ago: executing program 3 (id=4085): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000940)=@NCI_GID_PROPRIETARY_RSP={0xf, 0x1, 0x2, 0x0, 0x6, "ba0e194041ea"}, 0x9) write$nci(r0, &(0x7f0000000780)=ANY=[@ANYBLOB='$]\n'], 0x5) read$nci(r0, 0x0, 0x0) 4.567404476s ago: executing program 2 (id=4086): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r0}, 0xc) 4.411918491s ago: executing program 2 (id=4087): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0x4) 4.313723473s ago: executing program 3 (id=4088): socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 4.023744621s ago: executing program 4 (id=4089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafc, {0x0, 0x0, 0x0, r3, {0xa, 0xc}, {0x0, 0xfff1}, {0x1}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4049080) 1.401640472s ago: executing program 0 (id=4090): unshare(0x22020600) r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r0, 0x0, 0x0) 1.343966354s ago: executing program 2 (id=4091): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x92}, 0x1c) 1.321870655s ago: executing program 4 (id=4092): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0xffffffffffffffff, 0x0) 1.213958907s ago: executing program 3 (id=4093): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x7}, 0x1c) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005cc0)={r2, 0x5, 0x2f, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd03, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000001b14010026bd7000fedb9f2508"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x4, 0x8, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write(r5, 0x0, 0x0) shutdown(r5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c020000000006000000000000000000000000000000000000ff02000000000000000000000000000100010000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000040000000000000000000000000400000000000000010000000000000a00100001"], 0xc4}}, 0x4c050) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 1.155567888s ago: executing program 0 (id=4094): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x48, 0xfe, 0x0, 0x46}, {0x6, 0x1, 0xfb, 0x2}]}) write(r0, 0x0, 0x0) 1.09182249s ago: executing program 2 (id=4095): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 996.732503ms ago: executing program 4 (id=4096): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000940)=@NCI_GID_PROPRIETARY_RSP={0xf, 0x1, 0x2, 0x0, 0x6, "ba0e194041ea"}, 0x9) write$nci(r0, &(0x7f0000000780)=ANY=[@ANYBLOB='$]\n'], 0x5) read$nci(r0, 0x0, 0x0) 973.879794ms ago: executing program 2 (id=4097): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) readv(r8, &(0x7f0000000900)=[{&(0x7f0000000600)=""/137, 0x89}, {&(0x7f00000006c0)=""/225, 0xe1}, {&(0x7f0000000300)=""/89, 0x59}, {&(0x7f0000000540)=""/117, 0x75}, {&(0x7f00000007c0)=""/142, 0x8e}], 0x5) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@printk={@llx, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r10, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 649.502112ms ago: executing program 0 (id=4098): recvmmsg(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001b00)=""/171, 0xab}, {0x0}], 0x2}, 0xd3b1}], 0x1, 0x12023, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, 'xfrm0\x00'}}, 0x1e) sendmmsg$sock(r0, &(0x7f0000001dc0), 0x40000a6, 0x48850) 648.753312ms ago: executing program 3 (id=4099): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0x4) 319.605022ms ago: executing program 2 (id=4100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafc, {0x0, 0x0, 0x0, r3, {0xa, 0xc}, {0x0, 0xfff1}, {0x1}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4049080) 115.925887ms ago: executing program 0 (id=4101): socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 0s ago: executing program 4 (id=4102): socket$kcm(0x11, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x35}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000c40)="279beafacf43e0ab49ebe51f9c81310d5223bd7d268d312b99db8444596e2558d38e860803378d661b0afede4abe98d0a0", 0x31}], 0x1}, 0x4) kernel console output (not intermixed with test programs): '. [ 579.565034][T12404] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1544'. [ 579.646204][T12411] syzkaller0: entered promiscuous mode [ 579.652095][T12411] syzkaller0: entered allmulticast mode [ 579.710530][T12412] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1545'. [ 580.003221][T12425] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1548'. [ 580.078242][T12428] syzkaller0: entered promiscuous mode [ 580.084377][T12428] syzkaller0: entered allmulticast mode [ 580.401887][T12441] syzkaller0: entered promiscuous mode [ 580.407512][T12441] syzkaller0: entered allmulticast mode [ 580.851801][T12463] syzkaller0: entered promiscuous mode [ 580.857439][T12463] syzkaller0: entered allmulticast mode [ 581.953286][T12481] syzkaller0: entered promiscuous mode [ 581.958988][T12481] syzkaller0: entered allmulticast mode [ 582.018230][T12485] __nla_validate_parse: 5 callbacks suppressed [ 582.018240][T12485] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1567'. [ 582.515458][T12398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 583.333316][T12518] loop0: detected capacity change from 0 to 4096 [ 584.735734][T12492] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1568'. [ 584.761490][T12522] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1573'. [ 584.957037][T12526] bond2: entered promiscuous mode [ 584.969223][T12526] 8021q: adding VLAN 0 to HW filter on device bond2 [ 585.073343][T12532] syzkaller0: entered promiscuous mode [ 585.085597][T12532] syzkaller0: entered allmulticast mode [ 585.369200][T12549] loop4: detected capacity change from 0 to 4096 [ 585.386887][T12554] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1582'. [ 585.716969][T12564] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1583'. [ 587.874784][T12568] syzkaller0: entered promiscuous mode [ 587.880449][T12568] syzkaller0: entered allmulticast mode [ 588.023716][T12572] dvmrp0: entered allmulticast mode [ 588.064619][T12537] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 588.182565][T12576] syzkaller0: entered promiscuous mode [ 588.188262][T12576] syzkaller0: entered allmulticast mode [ 588.441698][T12587] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1591'. [ 588.573401][T12586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1592'. [ 588.633129][T12592] syzkaller0: entered promiscuous mode [ 588.689523][T12592] syzkaller0: entered allmulticast mode [ 589.457587][T12615] loop3: detected capacity change from 0 to 4096 [ 589.486885][T12585] loop0: detected capacity change from 0 to 131072 [ 589.494363][T12585] XFS: ikeep mount option is deprecated. [ 589.531919][T12585] XFS (loop0): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 589.691226][T12585] XFS (loop0): Starting recovery (logdev: internal) [ 589.770186][T12585] XFS (loop0): Ending recovery (logdev: internal) [ 590.607959][ T5771] XFS (loop0): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 590.989527][T12636] syzkaller0: entered promiscuous mode [ 590.995017][T12636] syzkaller0: entered allmulticast mode [ 591.140868][T12638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1603'. [ 591.248484][T12642] syzkaller0: entered promiscuous mode [ 591.254383][T12642] syzkaller0: entered allmulticast mode [ 591.370294][T12644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1606'. [ 592.236611][T12606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 592.387729][T12653] loop0: detected capacity change from 0 to 131072 [ 592.395266][T12653] XFS: ikeep mount option is deprecated. [ 592.474729][T12653] XFS (loop0): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 592.500528][T12660] syzkaller0: entered promiscuous mode [ 592.509342][T12660] syzkaller0: entered allmulticast mode [ 592.619966][T12653] XFS (loop0): Starting recovery (logdev: internal) [ 592.648124][T12665] bond1: entered promiscuous mode [ 592.667809][T12653] XFS (loop0): Ending recovery (logdev: internal) [ 592.682516][T12665] 8021q: adding VLAN 0 to HW filter on device bond1 [ 593.225166][T12672] syzkaller0: entered promiscuous mode [ 593.243822][T12672] syzkaller0: entered allmulticast mode [ 593.491341][ T5771] XFS (loop0): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 593.784332][T12682] loop4: detected capacity change from 0 to 4096 [ 593.821516][T12689] syzkaller0: entered promiscuous mode [ 593.827048][T12689] syzkaller0: entered allmulticast mode [ 594.353123][T12698] bond2: entered promiscuous mode [ 594.358376][T12698] 8021q: adding VLAN 0 to HW filter on device bond2 [ 594.839944][T12711] syzkaller0: entered promiscuous mode [ 594.855407][T12711] syzkaller0: entered allmulticast mode [ 595.365309][T12704] loop2: detected capacity change from 0 to 131072 [ 595.372712][T12704] XFS: ikeep mount option is deprecated. [ 595.390301][T12704] XFS (loop2): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 595.404549][T12722] xt_hashlimit: size too large, truncated to 1048576 [ 595.453063][T12726] –: renamed from vxcan1 (while UP) [ 595.496419][T12726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1630'. [ 595.508172][T12704] XFS (loop2): Starting recovery (logdev: internal) [ 595.536186][T12726] vxcan1: entered allmulticast mode [ 595.579813][T12704] XFS (loop2): Ending recovery (logdev: internal) [ 596.301984][ T5769] XFS (loop2): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 596.668052][T12684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 596.899161][T12732] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1632'. [ 597.413378][T12740] loop2: detected capacity change from 0 to 4096 [ 597.438992][T12744] syzkaller0: entered promiscuous mode [ 597.450762][T12744] syzkaller0: entered allmulticast mode [ 598.321138][T12773] loop0: detected capacity change from 0 to 4096 [ 598.948620][ T96] block nbd0: Possible stuck request ffff888022140000: control (read@0,1024B). Runtime 450 seconds [ 598.960972][ T96] block nbd0: Possible stuck request ffff888022140200: control (read@1024,1024B). Runtime 450 seconds [ 598.973494][ T96] block nbd0: Possible stuck request ffff888022140400: control (read@2048,1024B). Runtime 450 seconds [ 598.984558][ T96] block nbd0: Possible stuck request ffff888022140600: control (read@3072,1024B). Runtime 450 seconds [ 599.613417][T12785] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1649'. [ 600.784995][T12750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 601.242401][T12806] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1657'. [ 602.377260][T12856] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1677'. [ 603.915965][T12878] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1686'. [ 604.425553][T12815] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 604.784277][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1694'. [ 607.901618][T12907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 609.925220][T13022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1735'. [ 611.456589][T12996] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 611.871752][T13048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1744'. [ 612.566272][ T3004] nci: nci_rsp_packet: unknown rsp opcode 0x6 [ 612.727042][T13074] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1752'. [ 614.869510][T13097] loop2: detected capacity change from 0 to 131072 [ 614.877895][T13097] XFS: ikeep mount option is deprecated. [ 614.896855][T13097] XFS (loop2): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 614.947023][T13097] XFS (loop2): Starting recovery (logdev: internal) [ 614.979081][T13097] XFS (loop2): Ending recovery (logdev: internal) [ 615.228130][T13108] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1762'. [ 615.280295][ T5769] XFS (loop2): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 615.509029][T13062] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 616.597959][ T9558] nci: nci_rsp_packet: unknown rsp opcode 0x6 [ 617.039204][T13131] loop0: detected capacity change from 0 to 131072 [ 617.046613][T13131] XFS: ikeep mount option is deprecated. [ 617.087015][T13131] XFS (loop0): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 617.202756][T13131] XFS (loop0): Starting recovery (logdev: internal) [ 617.242155][T13131] XFS (loop0): Ending recovery (logdev: internal) [ 617.352761][T13165] syzkaller0: entered promiscuous mode [ 617.358280][T13165] syzkaller0: entered allmulticast mode [ 617.530440][ T5771] XFS (loop0): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 619.518521][T13142] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 619.811795][T13193] syzkaller0: entered promiscuous mode [ 619.817323][T13193] syzkaller0: entered allmulticast mode [ 620.176338][T13191] loop3: detected capacity change from 0 to 131072 [ 620.184571][T13191] XFS: ikeep mount option is deprecated. [ 620.221669][T13191] XFS (loop3): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 620.352622][T13191] XFS (loop3): Starting recovery (logdev: internal) [ 620.420358][T13191] XFS (loop3): Ending recovery (logdev: internal) [ 620.757297][ T5772] XFS (loop3): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 621.144902][T13234] syzkaller0: entered promiscuous mode [ 621.168528][T13234] syzkaller0: entered allmulticast mode [ 621.433233][ T2933] nci: nci_rsp_packet: unknown rsp opcode 0x6 [ 622.373741][T13256] loop2: detected capacity change from 0 to 131072 [ 622.381592][T13256] XFS: ikeep mount option is deprecated. [ 622.407402][T13256] XFS (loop2): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 622.462612][T13256] XFS (loop2): Starting recovery (logdev: internal) [ 622.493135][T13256] XFS (loop2): Ending recovery (logdev: internal) [ 622.966823][ T5769] XFS (loop2): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 624.341288][T13237] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 624.513252][T13286] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 624.532440][T13285] syzkaller0: entered promiscuous mode [ 624.539249][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.545615][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.576294][T13285] syzkaller0: entered allmulticast mode [ 626.383859][T13299] loop4: detected capacity change from 0 to 131072 [ 626.391415][T13299] XFS: ikeep mount option is deprecated. [ 626.427086][T13299] XFS (loop4): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 626.589737][T13299] XFS (loop4): Starting recovery (logdev: internal) [ 626.650713][T13299] XFS (loop4): Ending recovery (logdev: internal) [ 627.349943][ T6554] XFS (loop4): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 627.383487][T13338] bond2: entered promiscuous mode [ 627.389072][T13338] 8021q: adding VLAN 0 to HW filter on device bond2 [ 627.776240][T13346] loop0: detected capacity change from 0 to 4096 [ 628.462319][T13346] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1827'. [ 628.528668][T13320] Bluetooth: hci0: command 0x0c1a tx timeout [ 629.275136][T13371] syzkaller0: entered promiscuous mode [ 629.288649][T13371] syzkaller0: entered allmulticast mode [ 629.906562][T13367] loop3: detected capacity change from 0 to 131072 [ 629.914049][T13367] XFS: ikeep mount option is deprecated. [ 629.920421][ T96] block nbd0: Possible stuck request ffff888022140000: control (read@0,1024B). Runtime 480 seconds [ 629.933337][ T96] block nbd0: Possible stuck request ffff888022140200: control (read@1024,1024B). Runtime 480 seconds [ 629.955234][ T96] block nbd0: Possible stuck request ffff888022140400: control (read@2048,1024B). Runtime 480 seconds [ 629.974317][ T96] block nbd0: Possible stuck request ffff888022140600: control (read@3072,1024B). Runtime 480 seconds [ 630.052874][T13367] XFS (loop3): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 630.291697][T13367] XFS (loop3): Starting recovery (logdev: internal) [ 630.354868][T13367] XFS (loop3): Ending recovery (logdev: internal) [ 630.726842][T13410] loop2: detected capacity change from 0 to 4096 [ 630.836264][T13417] syzkaller0: entered promiscuous mode [ 630.871850][T13417] syzkaller0: entered allmulticast mode [ 631.030279][ T5772] XFS (loop3): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 631.045027][T13410] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1840'. [ 631.188532][ T5776] Bluetooth: hci0: command 0x0c1a tx timeout [ 632.494444][T13453] loop2: detected capacity change from 0 to 16 [ 632.505045][T13453] erofs: Unknown parameter 'ãé' [ 632.702384][T13455] syzkaller0: entered promiscuous mode [ 632.707960][T13455] syzkaller0: entered allmulticast mode [ 633.259281][T13320] Bluetooth: hci0: command 0x0c1a tx timeout [ 633.790298][T13489] syzkaller0: entered promiscuous mode [ 633.795908][T13489] syzkaller0: entered allmulticast mode [ 634.554141][T13493] syzkaller0: entered promiscuous mode [ 634.574738][T13493] syzkaller0: entered allmulticast mode [ 635.183510][T13516] syzkaller0: entered promiscuous mode [ 635.199941][T13516] syzkaller0: entered allmulticast mode [ 635.478211][T13520] syzkaller0: entered promiscuous mode [ 635.538654][T13520] syzkaller0: entered allmulticast mode [ 635.681842][T13532] syzkaller0: entered promiscuous mode [ 635.687380][T13532] syzkaller0: entered allmulticast mode [ 635.803779][T13539] loop0: detected capacity change from 0 to 4096 [ 635.914431][T13539] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1877'. [ 636.977006][T13553] syzkaller0: entered promiscuous mode [ 636.991699][T13553] syzkaller0: entered allmulticast mode [ 637.298965][T13567] veth0_to_batadv: entered allmulticast mode [ 637.590608][T13578] syzkaller0: entered promiscuous mode [ 637.596205][T13578] syzkaller0: entered allmulticast mode [ 637.676485][T13573] loop4: detected capacity change from 0 to 4096 [ 637.709955][T13573] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1892'. [ 638.451321][T13604] syzkaller0: entered promiscuous mode [ 638.480911][T13604] syzkaller0: entered allmulticast mode [ 639.917426][T13642] syzkaller0: entered promiscuous mode [ 639.924128][T13642] syzkaller0: entered allmulticast mode [ 641.533179][T13678] loop0: detected capacity change from 0 to 4096 [ 641.626026][T13678] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1928'. [ 642.049258][ T5776] Bluetooth: hci0: command 0x0c1a tx timeout [ 642.466754][T13714] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1940'. [ 643.745712][T13738] loop0: detected capacity change from 0 to 4096 [ 643.798020][T13738] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1945'. [ 644.448519][T13320] Bluetooth: hci0: command 0x0c1a tx timeout [ 644.675175][T13759] xt_hashlimit: size too large, truncated to 1048576 [ 644.726868][T13761] –: renamed from vxcan1 (while UP) [ 644.737951][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1957'. [ 644.756463][T13761] vxcan1: entered allmulticast mode [ 645.073825][T13765] syzkaller0: entered promiscuous mode [ 645.080584][T13765] syzkaller0: entered allmulticast mode [ 646.203348][T13777] loop4: detected capacity change from 0 to 4096 [ 646.261247][T13777] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1962'. [ 646.528525][ T5776] Bluetooth: hci0: command 0x0c1a tx timeout [ 646.829910][T13788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1968'. [ 646.921737][T13788] 8021q: adding VLAN 0 to HW filter on device bond3 [ 646.950182][T13793] syzkaller0: entered promiscuous mode [ 646.959565][T13793] syzkaller0: entered allmulticast mode [ 647.385756][T13802] loop3: detected capacity change from 0 to 4096 [ 647.443148][T13802] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1973'. [ 648.878813][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1978'. [ 649.099593][T13821] syzkaller0: entered promiscuous mode [ 649.105177][T13821] syzkaller0: entered allmulticast mode [ 649.711097][T13839] syzkaller0: entered promiscuous mode [ 649.716611][T13839] syzkaller0: entered allmulticast mode [ 650.364306][T13848] Cannot find set identified by id 0 to match [ 650.639036][T13852] syzkaller0: entered promiscuous mode [ 650.658196][T13852] syzkaller0: entered allmulticast mode [ 650.897818][T13843] loop4: detected capacity change from 0 to 131072 [ 650.905264][T13843] XFS: ikeep mount option is deprecated. [ 650.927852][T13843] XFS (loop4): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 650.937579][T13859] netlink: 'syz.2.1995': attribute type 16 has an invalid length. [ 650.951575][T13859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1995'. [ 651.024922][T13843] XFS (loop4): Starting recovery (logdev: internal) [ 651.062341][T13843] XFS (loop4): Ending recovery (logdev: internal) [ 651.285051][T13871] xt_hashlimit: size too large, truncated to 1048576 [ 651.336685][T13874] –: renamed from vxcan1 [ 651.344103][T13874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1996'. [ 651.364188][T13874] vxcan1: entered allmulticast mode [ 651.589986][ T6554] XFS (loop4): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 653.552536][T13891] loop3: detected capacity change from 0 to 131072 [ 653.559975][T13891] XFS: ikeep mount option is deprecated. [ 653.605835][T13891] XFS (loop3): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 653.684435][T13891] XFS (loop3): Starting recovery (logdev: internal) [ 653.721837][T13891] XFS (loop3): Ending recovery (logdev: internal) [ 654.043503][T13911] tipc: Started in network mode [ 654.052949][T13911] tipc: Node identity 2213ce248c8, cluster identity 4711 [ 654.068740][T13911] tipc: Enabled bearer , priority 0 [ 654.130859][T13910] tipc: Disabling bearer [ 654.187445][ T5772] XFS (loop3): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 655.067675][T13933] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 656.196372][T13967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2026'. [ 656.219376][T13967] syzkaller0: entered promiscuous mode [ 656.224872][T13967] syzkaller0: entered allmulticast mode [ 656.276720][T13969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2028'. [ 656.591692][T13977] syzkaller0: entered promiscuous mode [ 656.625098][T13977] syzkaller0: entered allmulticast mode [ 656.969046][T13989] IPv6: addrconf: prefix option has invalid lifetime [ 657.559625][T14006] syzkaller0: entered promiscuous mode [ 657.568518][T14006] syzkaller0: entered allmulticast mode [ 657.784530][T14014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2047'. [ 657.797515][T14014] vxcan2: entered allmulticast mode [ 658.376657][T14036] syzkaller0: entered promiscuous mode [ 658.387259][T14036] syzkaller0: entered allmulticast mode [ 658.466542][T14032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2055'. [ 658.512657][T14039] bridge_slave_1: left allmulticast mode [ 658.526832][T14039] bridge_slave_1: left promiscuous mode [ 658.533960][T14039] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.553452][T14039] bridge_slave_0: left allmulticast mode [ 658.563592][T14039] bridge_slave_0: left promiscuous mode [ 658.579964][T14039] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.695875][T14041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'. [ 658.707743][T14041] vxcan1: entered allmulticast mode [ 658.954659][ T5777] IPVS: starting estimator thread 0... [ 659.051354][T14058] IPVS: using max 20 ests per chain, 48000 per kthread [ 659.072118][T14060] loop0: detected capacity change from 0 to 4096 [ 659.133772][T14062] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2065'. [ 659.166473][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2062'. [ 659.384180][T14071] syzkaller0: entered promiscuous mode [ 659.390565][T14071] syzkaller0: entered allmulticast mode [ 659.472672][T14075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2071'. [ 659.486597][T14075] vxcan1: entered allmulticast mode [ 659.686450][T14083] xt_hashlimit: size too large, truncated to 1048576 [ 659.921281][T14091] syzkaller0: entered promiscuous mode [ 659.926885][T14091] syzkaller0: entered allmulticast mode [ 660.251762][T14096] syzkaller0: entered promiscuous mode [ 660.257279][T14096] syzkaller0: entered allmulticast mode [ 660.370065][ T96] block nbd0: Possible stuck request ffff888022140000: control (read@0,1024B). Runtime 510 seconds [ 660.381499][ T96] block nbd0: Possible stuck request ffff888022140200: control (read@1024,1024B). Runtime 510 seconds [ 660.393045][ T96] block nbd0: Possible stuck request ffff888022140400: control (read@2048,1024B). Runtime 510 seconds [ 660.397204][T14100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2082'. [ 660.404279][ T96] block nbd0: Possible stuck request ffff888022140600: control (read@3072,1024B). Runtime 510 seconds [ 660.451830][T14100] 8021q: adding VLAN 0 to HW filter on device bond3 [ 660.613965][T14107] syzkaller0: entered promiscuous mode [ 660.619921][T14107] syzkaller0: entered allmulticast mode [ 660.669963][T14108] xt_hashlimit: size too large, truncated to 1048576 [ 660.739146][T14109] –: renamed from vxcan1 (while UP) [ 660.853907][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2083'. [ 660.902111][T14109] vxcan1: entered allmulticast mode [ 661.155164][T14120] syzkaller0: entered promiscuous mode [ 661.168580][T14120] syzkaller0: entered allmulticast mode [ 661.603265][T14124] syzkaller0: entered promiscuous mode [ 661.618564][T14124] syzkaller0: entered allmulticast mode [ 661.801555][T14126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2092'. [ 661.949986][T14126] 8021q: adding VLAN 0 to HW filter on device bond4 [ 662.122182][T14136] syzkaller0: entered promiscuous mode [ 662.127802][T14136] syzkaller0: entered allmulticast mode [ 662.589293][T14145] syzkaller0: entered promiscuous mode [ 662.596386][T14145] syzkaller0: entered allmulticast mode [ 662.707145][T14148] syzkaller0: entered promiscuous mode [ 662.713457][T14148] syzkaller0: entered allmulticast mode [ 662.734776][T14142] tc action pedit offset must be on 32 bit boundaries [ 662.911765][T14153] syzkaller0: entered promiscuous mode [ 662.917271][T14153] syzkaller0: entered allmulticast mode [ 663.045863][T14157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2103'. [ 663.081793][T14157] 8021q: adding VLAN 0 to HW filter on device bond5 [ 663.488152][T14164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2106'. [ 664.016262][T14174] syzkaller0: entered promiscuous mode [ 664.036049][T14174] syzkaller0: entered allmulticast mode [ 664.320736][T14179] syzkaller0: entered promiscuous mode [ 664.326392][T14179] syzkaller0: entered allmulticast mode [ 664.444196][T14183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2113'. [ 664.522201][T14183] 8021q: adding VLAN 0 to HW filter on device bond2 [ 664.991424][T14195] syzkaller0: entered promiscuous mode [ 664.996930][T14195] syzkaller0: entered allmulticast mode [ 665.094060][T14198] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2118'. [ 665.331214][T14208] syzkaller0: entered promiscuous mode [ 665.336715][T14208] syzkaller0: entered allmulticast mode [ 665.752825][T14216] loop4: detected capacity change from 0 to 4096 [ 666.837818][T14170] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 667.080982][T14222] syzkaller0: entered promiscuous mode [ 667.086495][T14222] syzkaller0: entered allmulticast mode [ 667.111260][T14225] xt_hashlimit: size too large, truncated to 1048576 [ 667.251135][T14232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2128'. [ 667.307242][T14232] vxcan1: entered allmulticast mode [ 667.427834][T14237] syzkaller0: entered promiscuous mode [ 667.451898][T14237] syzkaller0: entered allmulticast mode [ 668.326402][T14245] loop2: detected capacity change from 0 to 4096 [ 668.694670][T14241] loop4: detected capacity change from 0 to 131072 [ 668.702266][T14241] XFS: ikeep mount option is deprecated. [ 668.763657][T14241] XFS (loop4): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 668.842470][T14241] XFS (loop4): Starting recovery (logdev: internal) [ 668.874168][T14241] XFS (loop4): Ending recovery (logdev: internal) [ 668.908345][T14262] syzkaller0: entered promiscuous mode [ 668.919266][T14262] syzkaller0: entered allmulticast mode [ 669.785552][ T6554] XFS (loop4): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 669.877699][T14274] syzkaller0: entered promiscuous mode [ 669.891939][T14274] syzkaller0: entered allmulticast mode [ 670.431258][T14288] syzkaller0: entered promiscuous mode [ 670.445695][T14288] syzkaller0: entered allmulticast mode [ 671.008288][T14297] loop3: detected capacity change from 0 to 4096 [ 673.733071][T14305] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2151'. [ 673.865639][T14309] syzkaller0: entered promiscuous mode [ 673.878193][T14309] syzkaller0: entered allmulticast mode [ 674.327309][T14336] loop2: detected capacity change from 0 to 4096 [ 674.470981][T14343] syzkaller0: entered promiscuous mode [ 674.476511][T14343] syzkaller0: entered allmulticast mode [ 677.353407][T14387] loop3: detected capacity change from 0 to 4096 [ 677.488946][T14398] syzkaller0: entered promiscuous mode [ 677.494454][T14398] syzkaller0: entered allmulticast mode [ 679.738620][T14418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2181'. [ 679.794831][T14418] 8021q: adding VLAN 0 to HW filter on device bond4 [ 680.059483][T14433] syzkaller0: entered promiscuous mode [ 680.065005][T14433] syzkaller0: entered allmulticast mode [ 680.654428][T14451] netlink: 51 bytes leftover after parsing attributes in process `syz.0.2190'. [ 680.857271][T14453] syzkaller0: entered promiscuous mode [ 680.865431][T14453] syzkaller0: entered allmulticast mode [ 680.878413][T14455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2192'. [ 680.932758][T14455] 8021q: adding VLAN 0 to HW filter on device bond5 [ 683.562874][T14490] syzkaller0: entered promiscuous mode [ 683.572667][T14490] syzkaller0: entered allmulticast mode [ 683.704243][T14494] syzkaller0: entered promiscuous mode [ 683.709778][T14494] syzkaller0: entered allmulticast mode [ 683.892388][T14510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2207'. [ 683.915166][T14510] 8021q: adding VLAN 0 to HW filter on device bond3 [ 684.590757][T14535] syzkaller0: entered promiscuous mode [ 684.596285][T14535] syzkaller0: entered allmulticast mode [ 684.905246][T14553] xt_hashlimit: size too large, truncated to 1048576 [ 685.098741][T14556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2220'. [ 685.143306][T14556] vxcan1: entered allmulticast mode [ 685.974684][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.981362][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.529879][T14607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2237'. [ 686.681403][T14610] loop3: detected capacity change from 0 to 4096 [ 689.166719][T14648] loop3: detected capacity change from 0 to 4096 [ 689.555219][T14667] syzkaller0: entered promiscuous mode [ 689.565373][T14667] syzkaller0: entered allmulticast mode [ 689.968660][T13320] Bluetooth: hci0: command 0x0c1a tx timeout [ 690.334572][T14687] xt_hashlimit: size too large, truncated to 1048576 [ 690.458565][ T96] block nbd0: Possible stuck request ffff888022140000: control (read@0,1024B). Runtime 540 seconds [ 690.469413][ T96] block nbd0: Possible stuck request ffff888022140200: control (read@1024,1024B). Runtime 540 seconds [ 690.480939][ T96] block nbd0: Possible stuck request ffff888022140400: control (read@2048,1024B). Runtime 540 seconds [ 690.492804][ T96] block nbd0: Possible stuck request ffff888022140600: control (read@3072,1024B). Runtime 540 seconds [ 690.509697][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2265'. [ 690.523412][T14695] vxcan1: entered allmulticast mode [ 690.721108][T14703] syzkaller0: entered promiscuous mode [ 690.744169][T14703] syzkaller0: entered allmulticast mode [ 692.059569][T14723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2277'. [ 692.126920][T14723] 8021q: adding VLAN 0 to HW filter on device bond6 [ 692.158003][T14727] netlink: 'syz.4.2279': attribute type 1 has an invalid length. [ 692.202639][T14727] netlink: 'syz.4.2279': attribute type 4 has an invalid length. [ 692.239017][T14727] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2279'. [ 692.267421][T14729] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2280'. [ 692.398399][T14731] syzkaller0: entered promiscuous mode [ 692.414847][T14731] syzkaller0: entered allmulticast mode [ 692.834760][T14749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2288'. [ 692.957017][T14749] 8021q: adding VLAN 0 to HW filter on device bond4 [ 693.498617][T14761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2290'. [ 693.595002][T14761] 8021q: adding VLAN 0 to HW filter on device bond3 [ 693.712643][T14762] bond3: (slave veth3): Enslaving as an active interface with an up link [ 693.727229][T14763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2290'. [ 693.766195][T14763] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 693.867827][T14770] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2293'. [ 694.195501][T14779] syzkaller0: entered promiscuous mode [ 694.216117][T14779] syzkaller0: entered allmulticast mode [ 694.434173][T14788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2299'. [ 694.464974][T14788] 8021q: adding VLAN 0 to HW filter on device bond4 [ 694.960039][T14801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2304'. [ 695.589223][T14820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2309'. [ 695.638869][T14820] 8021q: adding VLAN 0 to HW filter on device bond5 [ 695.895470][T14835] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2316'. [ 696.061644][T14845] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2318'. [ 696.884632][T14864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2324'. [ 697.075519][T14864] 8021q: adding VLAN 0 to HW filter on device bond7 [ 697.091993][T14870] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2326'. [ 697.244333][T14880] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2330'. [ 698.019011][T14901] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2338'. [ 698.142872][T14905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2339'. [ 698.227312][T14905] 8021q: adding VLAN 0 to HW filter on device bond6 [ 698.532428][T14917] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2344'. [ 698.588099][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 698.599775][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 698.608657][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 698.620897][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 698.637142][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 698.654256][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 698.877036][T14927] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2346'. [ 699.535958][T14918] chnl_net:caif_netlink_parms(): no params data found [ 699.601566][T14918] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.612119][T14918] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.621140][T14918] bridge_slave_0: entered allmulticast mode [ 699.627811][T14918] bridge_slave_0: entered promiscuous mode [ 699.638633][T14918] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.645743][T14918] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.653081][T14918] bridge_slave_1: entered allmulticast mode [ 699.662894][T14918] bridge_slave_1: entered promiscuous mode [ 699.685470][T14918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.699171][T14918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.729506][T14918] team0: Port device team_slave_0 added [ 699.738834][T14918] team0: Port device team_slave_1 added [ 699.759336][T14918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.766304][T14918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.792385][T14918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.805227][T14918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.812592][T14918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.843355][T14918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.879021][T14918] hsr_slave_0: entered promiscuous mode [ 699.885298][T14918] hsr_slave_1: entered promiscuous mode [ 699.891776][T14918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 699.899805][T14918] Cannot create hsr debugfs directory [ 700.226574][T14942] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 700.773918][T13320] Bluetooth: hci1: command tx timeout [ 700.976601][T14918] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 701.004209][T14918] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 701.032580][T14918] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 701.052002][T14918] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 701.199620][T14993] __nla_validate_parse: 2 callbacks suppressed [ 701.199636][T14993] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2365'. [ 701.226002][T14918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.244816][T14918] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.260386][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.267607][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.285486][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.292592][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.461000][T15000] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 701.951184][T14918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.045660][T14918] veth0_vlan: entered promiscuous mode [ 702.079958][T14918] veth1_vlan: entered promiscuous mode [ 702.103570][T15017] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2373'. [ 702.142547][T14918] veth0_macvtap: entered promiscuous mode [ 702.178271][T14918] veth1_macvtap: entered promiscuous mode [ 702.220534][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 702.238945][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.254251][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 702.284159][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.302764][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 702.313540][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.518060][T14918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.556331][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.573818][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.584130][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.613072][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.623368][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.638121][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.660521][T14918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.673520][T15026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2375'. [ 702.682666][T15026] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 702.697396][T14918] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.712915][T14918] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.724882][T14918] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.737828][T14918] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.849171][T13320] Bluetooth: hci1: command tx timeout [ 702.924371][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.958361][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.002499][ T1082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.012269][ T1082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.633284][T15060] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2387'. [ 703.941058][ T5776] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 703.953181][ T5776] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 703.962701][ T5776] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 703.980897][ T5776] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 703.990978][ T5776] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 703.999014][ T5776] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 704.634848][T15068] chnl_net:caif_netlink_parms(): no params data found [ 704.906355][T15068] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.914000][T15068] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.922350][T15068] bridge_slave_0: entered allmulticast mode [ 704.930349][T15068] bridge_slave_0: entered promiscuous mode [ 704.939176][ T5776] Bluetooth: hci1: command tx timeout [ 704.966967][T15068] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.984393][T15068] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.992060][T15068] bridge_slave_1: entered allmulticast mode [ 704.999294][T15068] bridge_slave_1: entered promiscuous mode [ 705.030726][T15068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.043162][T15068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.074146][T15068] team0: Port device team_slave_0 added [ 705.083307][T15068] team0: Port device team_slave_1 added [ 705.112688][T15068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.120119][T15068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.146332][T15068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.195360][ T1082] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.212375][T15068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.220384][T15068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.247674][T15068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.302708][ T1082] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.319678][T15068] hsr_slave_0: entered promiscuous mode [ 705.326478][T15068] hsr_slave_1: entered promiscuous mode [ 705.333235][T15068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 705.341866][T15068] Cannot create hsr debugfs directory [ 705.377968][ T1082] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.460194][ T1082] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.599761][ T1082] tipc: Left network mode [ 706.058915][ T5776] Bluetooth: hci4: command tx timeout [ 706.148344][T15046] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 706.629818][ T1082] dvmrp0 (unregistering): left allmulticast mode [ 707.020230][ T5776] Bluetooth: hci1: command tx timeout [ 707.398934][ T1082] hsr_slave_0: left promiscuous mode [ 707.454410][ T1082] hsr_slave_1: left promiscuous mode [ 707.466777][ T1082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.478801][ T1082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.490472][ T1082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.497970][ T1082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.527837][ T1082] veth1_macvtap: left promiscuous mode [ 707.533627][ T1082] veth0_macvtap: left promiscuous mode [ 707.540413][ T1082] veth1_vlan: left promiscuous mode [ 707.545718][ T1082] veth0_vlan: left promiscuous mode [ 707.814546][ T1082] bond6 (unregistering): Released all slaves [ 707.971418][ T1082] bond5 (unregistering): Released all slaves [ 708.122002][ T1082] bond4 (unregistering): Released all slaves [ 708.128941][ T5776] Bluetooth: hci4: command tx timeout [ 708.288272][ T1082] bond3 (unregistering): Released all slaves [ 708.562875][ T1082] bond2 (unregistering): Released all slaves [ 708.576428][ T1082] bond1 (unregistering): (slave lo): Releasing backup interface [ 708.586030][ T1082] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 708.597396][ T1082] bond1 (unregistering): Released all slaves [ 709.142666][ T1082] team0 (unregistering): Port device team_slave_1 removed [ 709.193698][ T1082] team0 (unregistering): Port device team_slave_0 removed [ 709.244170][ T1082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.296420][ T1082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.783460][ T1082] bond0 (unregistering): Released all slaves [ 709.882189][T15068] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 709.921596][T15068] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 709.981488][T15068] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 710.019076][T15068] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 710.224185][ T5776] Bluetooth: hci4: command tx timeout [ 710.286121][T15068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.320175][T15068] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.350833][ T9558] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.359200][ T9558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.429930][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.437136][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.494418][ T1082] IPVS: stop unused estimator thread 0... [ 710.853760][T15068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.895520][T15068] veth0_vlan: entered promiscuous mode [ 710.911389][T15068] veth1_vlan: entered promiscuous mode [ 710.961425][T15068] veth0_macvtap: entered promiscuous mode [ 710.974076][T15068] veth1_macvtap: entered promiscuous mode [ 711.005855][T15068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.042293][T15068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.071421][T15068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.083006][T15068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.094759][T15068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.106495][T15068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.121733][T15068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.132940][T15068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.143831][T15068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.153696][T15068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.165764][T15068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.175996][T15068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.186581][T15068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.197650][T15068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.231056][T15068] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.242240][T15068] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.251634][T15068] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.260409][T15068] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.396712][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.414971][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.487773][ T3004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.508862][ T3004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.016166][T15240] syzkaller0: entered promiscuous mode [ 712.043197][T15240] syzkaller0: entered allmulticast mode [ 712.288885][ T5776] Bluetooth: hci4: command tx timeout [ 712.425440][T13320] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 712.442249][T13320] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 712.450615][T13320] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 712.460316][T13320] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 712.469883][T13320] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 712.477273][T13320] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 712.936943][T15247] chnl_net:caif_netlink_parms(): no params data found [ 712.995478][T15247] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.002709][T15247] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.016017][T15247] bridge_slave_0: entered allmulticast mode [ 713.023048][T15247] bridge_slave_0: entered promiscuous mode [ 713.034155][T15247] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.041399][T15247] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.048930][T15247] bridge_slave_1: entered allmulticast mode [ 713.055985][T15247] bridge_slave_1: entered promiscuous mode [ 713.081903][T15247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.093662][T15247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.126908][T15247] team0: Port device team_slave_0 added [ 713.137056][T15247] team0: Port device team_slave_1 added [ 713.160100][T15247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.167055][T15247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.193425][T15247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.207935][T15247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.215856][T15247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.242040][T15247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.284356][T15247] hsr_slave_0: entered promiscuous mode [ 713.290597][T15247] hsr_slave_1: entered promiscuous mode [ 713.296657][T15247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 713.304664][T15247] Cannot create hsr debugfs directory [ 713.466679][T15247] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.478027][T15247] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.587344][T15247] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.597758][T15247] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.674316][T15247] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.684731][T15247] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.763862][T15247] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.775542][T15247] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.528809][T13320] Bluetooth: hci3: command tx timeout [ 715.726517][T15260] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 715.761518][T15247] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 715.849997][T15247] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 715.894755][T15281] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2446'. [ 715.904850][T15247] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 715.932872][T15247] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 716.157171][T15247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.210825][T15247] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.225657][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.232765][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.259399][T15296] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2453'. [ 716.270469][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.277593][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.570181][T15247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.609380][T13320] Bluetooth: hci3: command tx timeout [ 716.634234][T15310] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2457'. [ 716.641664][T15247] veth0_vlan: entered promiscuous mode [ 716.672133][T15247] veth1_vlan: entered promiscuous mode [ 716.723436][T15247] veth0_macvtap: entered promiscuous mode [ 716.736051][T15247] veth1_macvtap: entered promiscuous mode [ 716.769277][T15247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.779994][T15247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.790555][T15247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.802058][T15247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.812055][T15247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.823950][T15247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.834004][T15247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.844640][T15247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.857567][T15247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.871849][T15247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.882401][T15247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.892387][T15247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.917091][T15247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.927108][T15247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.958539][T15247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.982904][T15247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.003453][T15247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.026349][T15247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.087459][T15247] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.117035][T15247] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.140168][T15247] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.165908][T15247] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.190661][T15320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2461'. [ 717.364488][T15326] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2465'. [ 717.418079][ T3468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.445545][ T3468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.513106][ T1082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.522451][ T1082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.686837][T15339] ip6gre1: entered promiscuous mode [ 717.692573][T15339] ip6gre1: entered allmulticast mode [ 717.908671][T15347] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2473'. [ 718.044338][T15351] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2475'. [ 718.663639][T15373] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2486'. [ 718.699638][T13320] Bluetooth: hci3: command tx timeout [ 718.994223][ T1082] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 719.315012][T15398] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.323395][T15398] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.674202][T15398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 719.716085][T15398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.748764][T15387] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 720.433217][T15398] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.446692][T15398] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.456229][T15398] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.465296][T15398] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.533012][ T96] block nbd0: Possible stuck request ffff888022140000: control (read@0,1024B). Runtime 570 seconds [ 720.543947][ T96] block nbd0: Possible stuck request ffff888022140200: control (read@1024,1024B). Runtime 570 seconds [ 720.554996][ T96] block nbd0: Possible stuck request ffff888022140400: control (read@2048,1024B). Runtime 570 seconds [ 720.566312][ T96] block nbd0: Possible stuck request ffff888022140600: control (read@3072,1024B). Runtime 570 seconds [ 720.594371][T15399] netlink: 'syz.3.2495': attribute type 13 has an invalid length. [ 720.605459][T15399] netlink: 'syz.3.2495': attribute type 17 has an invalid length. [ 720.778680][T13320] Bluetooth: hci3: command tx timeout [ 720.866324][T15399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.876980][T15399] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.886660][T15399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 721.132566][T15435] syzkaller0: entered promiscuous mode [ 721.139321][T15435] syzkaller0: entered allmulticast mode [ 721.263308][T15441] syzkaller0: entered promiscuous mode [ 721.269559][T15441] syzkaller0: entered allmulticast mode [ 722.218889][T15461] syzkaller0: entered promiscuous mode [ 722.235553][T15461] syzkaller0: entered allmulticast mode [ 722.677092][T15481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2517'. [ 723.258842][T13320] Bluetooth: hci0: command 0x0c1a tx timeout [ 725.128564][T15502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2526'. [ 725.266122][T15504] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2528'. [ 725.323695][T15508] syzkaller0: entered promiscuous mode [ 725.358376][T15508] syzkaller0: entered allmulticast mode [ 725.724863][T15531] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2538'. [ 726.543354][T15554] syzkaller0: entered promiscuous mode [ 726.570320][T15554] syzkaller0: entered allmulticast mode [ 726.847266][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 726.861301][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 726.869701][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 726.877774][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 726.885848][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 726.895122][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 727.270353][T15579] syzkaller0: entered promiscuous mode [ 727.275972][T15579] syzkaller0: entered allmulticast mode [ 727.510350][T15587] syzkaller0: entered promiscuous mode [ 727.515873][T15587] syzkaller0: entered allmulticast mode [ 727.577808][T15565] chnl_net:caif_netlink_parms(): no params data found [ 727.707511][T15565] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.730179][T15565] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.737433][T15565] bridge_slave_0: entered allmulticast mode [ 727.784696][T15565] bridge_slave_0: entered promiscuous mode [ 727.796032][T15596] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2562'. [ 727.805509][T15565] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.813296][T15565] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.821035][T15565] bridge_slave_1: entered allmulticast mode [ 727.828413][T15565] bridge_slave_1: entered promiscuous mode [ 727.904121][T15565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.938082][T15565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.977345][T15565] team0: Port device team_slave_0 added [ 727.988292][T15565] team0: Port device team_slave_1 added [ 728.172878][T15565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.186362][T15565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.254697][T15565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.297874][T15565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.306113][T15565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.334165][T15565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.366962][T15606] syzkaller0: entered promiscuous mode [ 728.378549][T15606] syzkaller0: entered allmulticast mode [ 728.606712][T15565] hsr_slave_0: entered promiscuous mode [ 728.618203][T15565] hsr_slave_1: entered promiscuous mode [ 728.626937][T15565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 728.658775][T15565] Cannot create hsr debugfs directory [ 728.926712][T15565] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.019054][ T5776] Bluetooth: hci0: command tx timeout [ 729.019387][T15565] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.110310][T15565] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.193573][T15565] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.350326][T15565] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 729.360586][T15565] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 729.372101][T15565] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 729.381552][T15565] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 729.540607][T15565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.586475][T15565] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.608583][ T9558] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.615761][ T9558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.680106][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.687299][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.168197][T15565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.566162][T15565] veth0_vlan: entered promiscuous mode [ 730.584662][T15565] veth1_vlan: entered promiscuous mode [ 730.633889][T15565] veth0_macvtap: entered promiscuous mode [ 730.646872][T15565] veth1_macvtap: entered promiscuous mode [ 730.679214][T15565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.718340][T15565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.749890][T15565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.767330][T15565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.779361][T15565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.790347][T15565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.800236][T15565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.811272][T15565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.827505][T15565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.850440][T15565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.861381][T15565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.871327][T15565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.882345][T15565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.892679][T15565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.918502][T15565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.938570][T15565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.958790][T15565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.970598][T15676] loop2: detected capacity change from 0 to 4096 [ 730.979848][T15565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.011297][T15565] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.025296][T15565] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.044961][T15565] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.078401][T15565] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.096248][ T5776] Bluetooth: hci0: command tx timeout [ 731.290645][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.304325][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.349126][ T3004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.356977][ T3004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.669079][T15688] Illegal XDP return value 4294967274 on prog (id 168) dev syz_tun, expect packet loss! [ 731.855115][T15697] xt_hashlimit: size too large, truncated to 1048576 [ 732.000347][T15699] –: renamed from vxcan1 (while UP) [ 732.535717][ T3468] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 733.168805][ T5776] Bluetooth: hci0: command tx timeout [ 735.249787][ T5776] Bluetooth: hci0: command tx timeout [ 735.397680][T15708] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 735.428539][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c048c00: rx timeout, send abort [ 735.785125][T15756] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2622'. [ 735.827020][T15757] xt_hashlimit: size too large, truncated to 1048576 [ 735.883967][T15758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2621'. [ 735.916284][T15758] vxcan2: entered allmulticast mode [ 735.938700][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c048c00: abort rx timeout. Force session deactivation [ 737.032119][T15768] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 738.037523][T15819] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2644'. [ 738.064698][T15819] syzkaller0: entered promiscuous mode [ 738.075847][T15819] syzkaller0: entered allmulticast mode [ 738.091386][T15822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2645'. [ 738.327178][T15826] syzkaller0: entered promiscuous mode [ 738.340719][T15826] syzkaller0: entered allmulticast mode [ 738.577002][T10599] IPVS: starting estimator thread 0... [ 738.668552][T15834] IPVS: using max 21 ests per chain, 50400 per kthread [ 738.761046][T15814] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 739.278604][T15850] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2653'. [ 739.451387][T15855] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2655'. [ 739.486345][T15855] syzkaller0: entered promiscuous mode [ 739.501139][T15855] syzkaller0: entered allmulticast mode [ 739.627261][T15858] syzkaller0: entered promiscuous mode [ 739.634846][T15858] syzkaller0: entered allmulticast mode [ 740.332019][T15878] syzkaller0: entered promiscuous mode [ 740.360847][T15878] syzkaller0: entered allmulticast mode [ 740.565008][T15885] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2666'. [ 740.576619][T15885] syzkaller0: entered promiscuous mode [ 740.584093][T15885] syzkaller0: entered allmulticast mode [ 740.600800][T15883] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2665'. [ 740.747022][T15888] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2667'. [ 741.420861][T15910] syzkaller0: entered promiscuous mode [ 741.447766][T15910] syzkaller0: entered allmulticast mode [ 741.536845][T15912] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2676'. [ 741.549531][T15914] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2678'. [ 741.566113][T15912] syzkaller0: entered promiscuous mode [ 741.589511][T15912] syzkaller0: entered allmulticast mode [ 741.990009][T15937] xt_hashlimit: size too large, truncated to 1048576 [ 742.067478][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2683'. [ 742.117027][T15942] vxcan1: entered allmulticast mode [ 742.515362][T15959] syzkaller0: entered promiscuous mode [ 742.524378][T15959] syzkaller0: entered allmulticast mode [ 742.717059][T15966] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2693'. [ 742.858978][T15974] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2692'. [ 743.056886][T15965] syzkaller0: entered promiscuous mode [ 743.064993][T15965] syzkaller0: entered allmulticast mode [ 746.799498][T15995] syzkaller0: entered promiscuous mode [ 746.807692][T15995] syzkaller0: entered allmulticast mode [ 747.423514][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.430210][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.489373][T16021] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2703'. [ 749.693254][T16029] syzkaller0: entered promiscuous mode [ 749.713532][T16029] syzkaller0: entered allmulticast mode [ 750.614169][ T96] block nbd0: Possible stuck request ffff888022140000: control (read@0,1024B). Runtime 600 seconds [ 750.625085][ T96] block nbd0: Possible stuck request ffff888022140200: control (read@1024,1024B). Runtime 600 seconds [ 750.636129][ T96] block nbd0: Possible stuck request ffff888022140400: control (read@2048,1024B). Runtime 600 seconds [ 750.647188][ T96] block nbd0: Possible stuck request ffff888022140600: control (read@3072,1024B). Runtime 600 seconds [ 753.590050][T16086] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2715'. [ 754.150577][T16109] syzkaller0: entered promiscuous mode [ 754.156106][T16109] syzkaller0: entered allmulticast mode [ 754.614397][T16130] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2728'. [ 754.738201][T16134] (null): rxe_set_mtu: Set mtu to 4096 [ 754.748110][T16134] lo speed is unknown, defaulting to 1000 [ 754.766718][T16134] lo speed is unknown, defaulting to 1000 [ 754.798974][T16134] lo speed is unknown, defaulting to 1000 [ 754.816851][T16136] syzkaller0: entered promiscuous mode [ 754.841497][T16136] syzkaller0: entered allmulticast mode [ 755.094742][T16141] syzkaller0: entered promiscuous mode [ 755.108736][T16141] syzkaller0: entered allmulticast mode [ 755.280729][T16134] infiniband sqz0: set active [ 755.288403][T16134] infiniband sqz0: added lo [ 755.303225][ T9] lo speed is unknown, defaulting to 1000 [ 755.346072][T16134] RDS/IB: sqz0: added [ 755.353066][T16134] smc: adding ib device sqz0 with port count 1 [ 755.361320][T16134] smc: ib device sqz0 port 1 has pnetid [ 755.396620][ T9] lo speed is unknown, defaulting to 1000 [ 755.408652][T16134] lo speed is unknown, defaulting to 1000 [ 755.486400][T16157] team0: entered promiscuous mode [ 755.510975][T16157] team_slave_0: entered promiscuous mode [ 755.525049][T16157] team_slave_1: entered promiscuous mode [ 755.531675][T16157] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 755.947146][T16134] lo speed is unknown, defaulting to 1000 [ 756.017651][T16173] loop3: detected capacity change from 0 to 4096 [ 756.092619][T16181] syzkaller0: entered promiscuous mode [ 756.100513][T16181] syzkaller0: entered allmulticast mode [ 756.249052][T16134] lo speed is unknown, defaulting to 1000 [ 756.367561][T16134] lo speed is unknown, defaulting to 1000 [ 756.483587][T16134] lo speed is unknown, defaulting to 1000 [ 756.599273][T16134] lo speed is unknown, defaulting to 1000 [ 756.787022][T16134] lo speed is unknown, defaulting to 1000 [ 757.573920][T16203] loop2: detected capacity change from 0 to 4096 [ 758.912015][T16175] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 759.286868][T16231] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2766'. [ 759.607106][T16247] loop2: detected capacity change from 0 to 4096 [ 760.042448][T16252] syzkaller0: entered promiscuous mode [ 760.048057][T16252] syzkaller0: entered allmulticast mode [ 760.403338][T16260] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2778'. [ 760.564416][T16268] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2782'. [ 760.931703][T16282] xt_hashlimit: size too large, truncated to 1048576 [ 760.997731][T16283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2788'. [ 761.019288][T16283] vxcan2: entered allmulticast mode [ 762.484638][T16239] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 762.928863][ T5776] Bluetooth: hci0: command 0x0405 tx timeout [ 764.309756][T16331] loop2: detected capacity change from 0 to 4096 [ 765.568395][T16376] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2826'. [ 765.719451][T16375] loop2: detected capacity change from 0 to 4096 [ 765.726881][T16380] syzkaller0: entered promiscuous mode [ 765.737813][T16380] syzkaller0: entered allmulticast mode [ 766.204261][T16396] syzkaller0: entered promiscuous mode [ 766.210281][T16396] syzkaller0: entered allmulticast mode [ 766.392070][T16401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2836'. [ 766.638760][T16409] syzkaller0: entered promiscuous mode [ 766.645175][T16409] syzkaller0: entered allmulticast mode [ 766.659665][T16403] tc action pedit offset must be on 32 bit boundaries [ 767.019135][ T5811] IPVS: starting estimator thread 0... [ 767.119907][T16428] IPVS: using max 22 ests per chain, 52800 per kthread [ 767.206243][T16437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2847'. [ 767.352533][T16438] loop4: detected capacity change from 0 to 4096 [ 768.014136][T16467] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2857'. [ 768.137419][T16469] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2860'. [ 768.213804][T16471] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2858'. [ 768.822527][T16495] loop0: detected capacity change from 0 to 4096 [ 769.436281][T16514] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2872'. [ 769.792445][T16530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2879'. [ 769.874008][T16535] xt_hashlimit: size too large, truncated to 1048576 [ 769.950099][T16538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2878'. [ 770.036265][T16538] vxcan1: entered allmulticast mode [ 770.256615][T16547] netlink: 712 bytes leftover after parsing attributes in process `syz.2.2883'. [ 770.632276][T16555] __nla_validate_parse: 1 callbacks suppressed [ 770.632293][T16555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2887'. [ 770.662334][T16555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 770.799681][T16555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.630833][T16578] netlink: 712 bytes leftover after parsing attributes in process `syz.3.2893'. [ 771.891842][T16584] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2896'. [ 771.974596][T16587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2898'. [ 772.814173][T16606] syzkaller0: entered promiscuous mode [ 772.826655][T16606] syzkaller0: entered allmulticast mode [ 776.857118][T16642] loop4: detected capacity change from 0 to 4096 [ 777.102264][T16652] xt_hashlimit: size too large, truncated to 1048576 [ 777.156623][T16655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2920'. [ 777.193151][T16655] vxcan2: entered allmulticast mode [ 777.763380][T16665] syzkaller0: entered promiscuous mode [ 777.780024][T16665] syzkaller0: entered allmulticast mode [ 780.700295][ T96] block nbd0: Possible stuck request ffff888022140000: control (read@0,1024B). Runtime 630 seconds [ 780.711294][ T96] block nbd0: Possible stuck request ffff888022140200: control (read@1024,1024B). Runtime 630 seconds [ 780.722764][ T96] block nbd0: Possible stuck request ffff888022140400: control (read@2048,1024B). Runtime 630 seconds [ 780.734177][ T96] block nbd0: Possible stuck request ffff888022140600: control (read@3072,1024B). Runtime 630 seconds [ 781.770876][T16713] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2940'. [ 781.847476][T16716] syzkaller0: entered promiscuous mode [ 781.853070][T16716] syzkaller0: entered allmulticast mode [ 784.554176][T16701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 785.010102][T13320] Bluetooth: hci0: command 0x0405 tx timeout [ 785.044605][T16764] (null): rxe_set_mtu: Set mtu to 4096 [ 785.051257][T16764] rdma_rxe: rxe_newlink: failed to add lo [ 787.088893][ T5776] Bluetooth: hci0: command 0x0405 tx timeout [ 787.115896][T16810] loop4: detected capacity change from 0 to 4096 [ 788.001091][T16814] syzkaller0: entered promiscuous mode [ 788.006612][T16814] syzkaller0: entered allmulticast mode [ 788.119029][T16770] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 788.416664][T16820] syzkaller0: entered promiscuous mode [ 788.436698][T16820] syzkaller0: entered allmulticast mode [ 788.469245][T16824] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2982'. [ 789.103157][T16843] loop2: detected capacity change from 0 to 4096 [ 789.168638][ T5776] Bluetooth: hci0: command 0x0405 tx timeout [ 789.756848][T16862] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2994'. [ 790.233670][T16880] xt_hashlimit: size too large, truncated to 1048576 [ 790.289621][T16882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3000'. [ 790.314720][T16882] vxcan2: entered allmulticast mode [ 791.365226][T16900] loop3: detected capacity change from 0 to 4096 [ 791.386901][T16902] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3007'. [ 792.873086][T16935] sqz0: rxe_newlink: already configured on lo [ 792.929130][T16935] infiniband sqz0: set active [ 792.952233][ T787] lo speed is unknown, defaulting to 1000 [ 793.176145][T16940] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3020'. [ 793.373105][T16937] lo speed is unknown, defaulting to 1000 [ 793.812389][T16946] loop2: detected capacity change from 0 to 4096 [ 794.580982][T16961] sqz0: rxe_newlink: already configured on lo [ 794.592226][T16961] infiniband sqz0: set active [ 794.652558][ T5810] lo speed is unknown, defaulting to 1000 [ 794.685979][T16959] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3029'. [ 794.994087][T16968] syzkaller0: entered promiscuous mode [ 795.011906][T16968] syzkaller0: entered allmulticast mode [ 795.035019][T16968] 0: reclassify loop, rule prio 0, protocol 800 [ 795.816013][T16981] loop2: detected capacity change from 0 to 4096 [ 796.020778][T16986] (null): rxe_set_mtu: Set mtu to 4096 [ 796.028893][T16986] rdma_rxe: rxe_newlink: failed to add lo [ 796.507317][T16999] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3041'. [ 797.194620][T17014] sqz0: rxe_newlink: already configured on lo [ 797.221598][T17014] infiniband sqz0: set active [ 797.239197][ T5811] lo speed is unknown, defaulting to 1000 [ 798.086108][T17033] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3055'. [ 798.128784][T17036] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3056'. [ 798.423921][T17045] ip6gre2: entered promiscuous mode [ 798.438895][T17045] ip6gre2: entered allmulticast mode [ 798.887544][T17061] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3066'. [ 799.084977][T17068] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3070'. [ 799.483794][T17083] ip6gre1: entered promiscuous mode [ 799.507409][T17083] ip6gre1: entered allmulticast mode [ 799.646606][T17089] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3079'. [ 799.877393][T17101] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3084'. [ 799.986754][T17104] syzkaller0: entered promiscuous mode [ 800.002566][T17104] syzkaller0: entered allmulticast mode [ 800.280618][T17114] netlink: 712 bytes leftover after parsing attributes in process `syz.0.3088'. [ 800.579505][T17118] syzkaller0: entered promiscuous mode [ 800.592031][T17118] syzkaller0: entered allmulticast mode [ 800.843806][T17130] syzkaller0: entered promiscuous mode [ 800.849590][T17130] syzkaller0: entered allmulticast mode [ 801.357460][T17138] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3096'. [ 801.506785][T17142] syzkaller0: entered promiscuous mode [ 801.518545][T17142] syzkaller0: entered allmulticast mode [ 801.562999][T17149] netlink: 712 bytes leftover after parsing attributes in process `syz.0.3097'. [ 803.156625][T17108] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 804.323404][T17164] tipc: Started in network mode [ 804.328305][T17164] tipc: Node identity 4a19992f317d, cluster identity 4711 [ 804.339370][T17164] tipc: Enabled bearer , priority 0 [ 804.369887][T17165] syzkaller0: entered promiscuous mode [ 804.375394][T17165] syzkaller0: entered allmulticast mode [ 804.440785][T17172] tipc: Resetting bearer [ 804.469111][T17162] tipc: Resetting bearer [ 804.552558][T17162] tipc: Disabling bearer [ 804.608669][T17185] netlink: 712 bytes leftover after parsing attributes in process `syz.4.3106'. [ 804.919187][T17197] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3111'. [ 804.943458][T17197] syzkaller0: entered promiscuous mode [ 804.958547][T17197] syzkaller0: entered allmulticast mode [ 805.120449][T17201] syzkaller0: entered promiscuous mode [ 805.131580][T17201] syzkaller0: entered allmulticast mode [ 805.167394][T17201] tipc: Enabled bearer , priority 0 [ 805.202663][T17200] tipc: Resetting bearer [ 805.288634][T17200] tipc: Disabling bearer [ 805.528006][T17211] netlink: 712 bytes leftover after parsing attributes in process `syz.3.3118'. [ 805.751642][T17222] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3122'. [ 805.763183][T17222] syzkaller0: entered promiscuous mode [ 805.769530][T17222] syzkaller0: entered allmulticast mode [ 806.225440][T17233] syzkaller0: entered promiscuous mode [ 806.231400][T17233] syzkaller0: entered allmulticast mode [ 806.242690][T17233] tipc: Started in network mode [ 806.251693][T17233] tipc: Node identity 0e32cbf83ce1, cluster identity 4711 [ 806.259648][T17233] tipc: Enabled bearer , priority 0 [ 806.268235][T17232] tipc: Resetting bearer [ 806.347229][T17232] tipc: Disabling bearer [ 806.462107][T17237] netlink: 712 bytes leftover after parsing attributes in process `syz.2.3128'. [ 806.716688][T17243] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3132'. [ 806.779669][T17243] syzkaller0: entered promiscuous mode [ 806.788106][T17243] syzkaller0: entered allmulticast mode [ 807.102579][T17260] syzkaller0: entered promiscuous mode [ 807.128715][T17260] syzkaller0: entered allmulticast mode [ 807.172540][T17262] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3139'. [ 807.196410][T17260] tipc: Enabled bearer , priority 0 [ 807.215577][T17259] tipc: Resetting bearer [ 807.286802][T17259] tipc: Disabling bearer [ 807.513373][T17279] veth0_to_batadv: entered allmulticast mode [ 807.537035][T17279] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 807.601977][T17283] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3147'. [ 807.649199][T17283] syzkaller0: entered promiscuous mode [ 807.668687][T17283] syzkaller0: entered allmulticast mode [ 807.938951][T17297] syzkaller0: entered promiscuous mode [ 807.960308][T17297] syzkaller0: entered allmulticast mode [ 807.984926][T17297] tipc: Enabled bearer , priority 0 [ 808.003070][T17296] tipc: Resetting bearer [ 808.082565][T17296] tipc: Disabling bearer [ 808.537617][T17325] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3163'. [ 808.582482][T17329] ip6gre1: entered promiscuous mode [ 808.587794][T17329] ip6gre1: entered allmulticast mode [ 808.598211][T17325] syzkaller0: entered promiscuous mode [ 808.604484][T17325] syzkaller0: entered allmulticast mode [ 808.860926][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.867382][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.608994][T17366] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3177'. [ 809.633537][T17366] syzkaller0: entered promiscuous mode [ 809.646319][T17366] syzkaller0: entered allmulticast mode [ 809.995523][T10599] IPVS: starting estimator thread 0... [ 810.119484][T17389] IPVS: using max 19 ests per chain, 45600 per kthread [ 810.177186][T17398] netlink: 384 bytes leftover after parsing attributes in process `syz.2.3189'. [ 810.576592][T17409] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3194'. [ 810.611955][T17409] syzkaller0: entered promiscuous mode [ 810.636629][T17409] syzkaller0: entered allmulticast mode [ 810.761088][T17412] ip6gre1: entered promiscuous mode [ 810.766418][T17412] ip6gre1: entered allmulticast mode [ 810.773050][ T96] block nbd0: Possible stuck request ffff888022140000: control (read@0,1024B). Runtime 660 seconds [ 810.784203][ T96] block nbd0: Possible stuck request ffff888022140200: control (read@1024,1024B). Runtime 660 seconds [ 810.795369][ T96] block nbd0: Possible stuck request ffff888022140400: control (read@2048,1024B). Runtime 660 seconds [ 810.807088][ T96] block nbd0: Possible stuck request ffff888022140600: control (read@3072,1024B). Runtime 660 seconds [ 811.054826][T17426] netlink: 384 bytes leftover after parsing attributes in process `syz.2.3200'. [ 811.326268][T17437] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3207'. [ 811.396475][T17435] loop2: detected capacity change from 0 to 4096 [ 811.454850][T17439] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3208'. [ 811.473303][T17439] syzkaller0: entered promiscuous mode [ 811.496777][T17439] syzkaller0: entered allmulticast mode [ 811.660588][T17444] tipc: Started in network mode [ 811.695448][T17444] tipc: Node identity e64579960aba, cluster identity 4711 [ 811.704082][T17444] tipc: Enabled bearer , priority 0 [ 811.721291][T17443] tipc: Disabling bearer [ 811.897610][T17452] syzkaller0: entered promiscuous mode [ 811.905267][T17452] syzkaller0: entered allmulticast mode [ 811.918860][T17456] netlink: 384 bytes leftover after parsing attributes in process `syz.4.3214'. [ 814.745492][T17488] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3221'. [ 814.770062][T17488] syzkaller0: entered promiscuous mode [ 814.775573][T17488] syzkaller0: entered allmulticast mode [ 814.917717][T17490] tipc: Enabled bearer , priority 0 [ 814.986367][T17489] tipc: Disabling bearer [ 815.044551][T17498] netlink: 384 bytes leftover after parsing attributes in process `syz.2.3225'. [ 815.259926][T17503] loop4: detected capacity change from 0 to 4096 [ 815.430039][T17509] syzkaller0: entered promiscuous mode [ 815.449029][T17509] syzkaller0: entered allmulticast mode [ 818.194746][T17528] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3235'. [ 818.305911][T17541] tipc: Enabled bearer , priority 0 [ 818.357815][T17540] tipc: Disabling bearer [ 818.389856][T17543] netlink: 384 bytes leftover after parsing attributes in process `syz.2.3237'. [ 818.739645][T17557] loop4: detected capacity change from 0 to 4096 [ 821.171951][ T5776] Bluetooth: hci1: command 0x0406 tx timeout [ 823.287854][T17566] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3245'. [ 823.437150][T17565] syzkaller0: entered promiscuous mode [ 823.444076][T17565] syzkaller0: entered allmulticast mode [ 824.045363][T17596] loop2: detected capacity change from 0 to 4096 [ 824.956785][T17603] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3256'. [ 826.306139][ T5776] Bluetooth: hci4: command 0x0406 tx timeout [ 826.740837][T17620] tipc: Enabled bearer , priority 0 [ 826.837475][T17619] tipc: Disabling bearer [ 826.951111][T17631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3265'. [ 827.256295][T17637] syzkaller0: entered promiscuous mode [ 827.270758][T17637] syzkaller0: entered allmulticast mode [ 827.757304][T17661] xt_hashlimit: size too large, truncated to 1048576 [ 830.572983][ T5141] udevd[5141]: worker [6264] /devices/virtual/block/nbd0 timeout; kill it [ 830.586189][ T5141] udevd[5141]: seq 11004 '/devices/virtual/block/nbd0' killed [ 830.963911][T17664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3278'. [ 831.017000][T17664] vxcan2: entered allmulticast mode [ 831.034605][T17662] tipc: Enabling of bearer rejected, failed to enable media [ 831.463337][T17688] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3284'. [ 831.749745][T17694] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3287'. [ 831.868042][T17696] syzkaller0: entered promiscuous mode [ 831.874016][T17696] syzkaller0: entered allmulticast mode [ 834.465233][T17712] tipc: Enabling of bearer rejected, failed to enable media [ 834.658359][T17733] xt_hashlimit: size too large, truncated to 1048576 [ 834.717627][T17734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3297'. [ 834.733854][T17734] vxcan1: entered allmulticast mode [ 836.528773][ T5776] Bluetooth: hci3: command 0x0406 tx timeout [ 836.702921][T17744] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3300'. [ 836.717040][T17744] syzkaller0: entered promiscuous mode [ 836.723361][T17744] syzkaller0: entered allmulticast mode [ 836.828408][T17746] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3301'. [ 837.609016][T17726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 837.838401][T17757] tipc: Enabled bearer , priority 0 [ 837.894409][T17756] tipc: Disabling bearer [ 838.002424][T17763] syzkaller0: entered promiscuous mode [ 838.022286][T17763] syzkaller0: entered allmulticast mode [ 838.513011][T17777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3312'. [ 840.536486][T17771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3309'. [ 840.549132][T17771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3309'. [ 840.558324][T17771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3309'. [ 840.576818][T17771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3309'. [ 840.586081][T17771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3309'. [ 840.596887][T17771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3309'. [ 840.606449][T17771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3309'. [ 840.636564][T17771] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 840.798040][T17785] tipc: Enabled bearer , priority 0 [ 840.848006][T17784] tipc: Disabling bearer [ 840.858691][ T96] block nbd0: Possible stuck request ffff888022140000: control (read@0,1024B). Runtime 690 seconds [ 840.869796][ T96] block nbd0: Possible stuck request ffff888022140200: control (read@1024,1024B). Runtime 690 seconds [ 840.881461][ T96] block nbd0: Possible stuck request ffff888022140400: control (read@2048,1024B). Runtime 690 seconds [ 840.894016][ T96] block nbd0: Possible stuck request ffff888022140600: control (read@3072,1024B). Runtime 690 seconds [ 841.048859][T17795] netlink: 'syz.0.3319': attribute type 3 has an invalid length. [ 841.163656][T17803] tipc: Enabling of bearer rejected, failed to enable media [ 841.820677][T17826] veth0_to_batadv: entered allmulticast mode [ 842.025251][T17834] tipc: Enabling of bearer rejected, failed to enable media [ 842.266913][T17840] __nla_validate_parse: 15 callbacks suppressed [ 842.266930][T17840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3334'. [ 842.771491][T17856] xt_hashlimit: size too large, truncated to 1048576 [ 842.850045][T17862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3342'. [ 842.904802][T17862] vxcan1: entered allmulticast mode [ 843.035209][T17858] tipc: Enabling of bearer rejected, failed to enable media [ 843.279568][T17876] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3345'. [ 843.597008][T17890] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3350'. [ 843.696384][T17892] veth0_to_batadv: entered allmulticast mode [ 844.021010][T17896] tipc: Enabling of bearer rejected, failed to enable media [ 844.126788][T17912] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3356'. [ 845.064790][T17939] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3367'. [ 845.240637][T17936] tipc: Enabling of bearer rejected, failed to enable media [ 845.746961][T17962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3374'. [ 846.004140][T17971] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3377'. [ 846.037073][T17971] syzkaller0: entered promiscuous mode [ 846.061738][T17971] syzkaller0: entered allmulticast mode [ 846.326185][T17985] tipc: Enabling of bearer rejected, failed to enable media [ 846.949680][T17996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3385'. [ 847.313987][T18011] ip6gre2: entered promiscuous mode [ 847.330282][T18011] ip6gre2: entered allmulticast mode [ 847.342228][ T3540] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 847.390603][ T5811] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 847.398845][ T3540] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 847.527760][T18009] tipc: Enabling of bearer rejected, failed to enable media [ 847.632914][T18025] IPv6: addrconf: prefix option has invalid lifetime [ 847.888827][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 848.048809][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 848.191561][T18035] syzkaller0: entered promiscuous mode [ 848.197255][T18035] syzkaller0: entered allmulticast mode [ 850.749208][T18041] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3401'. [ 850.758917][T18047] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3404'. [ 851.081393][T18049] tipc: Enabling of bearer rejected, failed to enable media [ 851.389603][T18076] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3414'. [ 851.456861][T18079] veth0_to_batadv: entered allmulticast mode [ 851.563691][T18080] syzkaller0: entered promiscuous mode [ 851.611442][T18080] syzkaller0: entered allmulticast mode [ 851.648803][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 854.292654][T18112] tipc: Enabling of bearer rejected, failed to enable media [ 854.305617][T18114] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3426'. [ 854.922365][T18131] tipc: Enabling of bearer rejected, failed to enable media [ 855.061410][T18141] syzkaller0: entered promiscuous mode [ 855.069780][T18141] syzkaller0: entered allmulticast mode [ 855.076892][T18143] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3436'. [ 857.548765][T18153] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3439'. [ 857.801428][T18169] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 857.827305][T18170] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3447'. [ 858.070468][T18179] tipc: Enabling of bearer rejected, failed to enable media [ 858.295558][T18192] syzkaller0: entered promiscuous mode [ 858.317754][T18192] syzkaller0: entered allmulticast mode [ 858.472434][T18203] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3458'. [ 858.980698][T18231] tipc: Enabling of bearer rejected, failed to enable media [ 859.040129][T18226] syzkaller0: entered promiscuous mode [ 859.045688][T18226] syzkaller0: entered allmulticast mode [ 859.075259][T18233] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3468'. [ 859.367221][T18248] SET target dimension over the limit! [ 859.899511][T18275] (null): rxe_set_mtu: Set mtu to 4096 [ 860.053285][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 860.154424][T18272] tipc: Enabling of bearer rejected, failed to enable media [ 860.255442][T18260] lo speed is unknown, defaulting to 1000 [ 860.601379][T18275] rdma_rxe: rxe_newlink: failed to add lo [ 860.990313][T18305] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3491'. [ 861.074513][T18311] tipc: Started in network mode [ 861.080644][T18311] tipc: Node identity e21a27109691, cluster identity 4711 [ 861.096621][T18311] tipc: Enabled bearer , priority 0 [ 861.132568][T18308] tipc: Disabling bearer [ 861.152095][T18317] syzkaller0: entered promiscuous mode [ 861.157687][T18317] syzkaller0: entered allmulticast mode [ 861.267254][T18323] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3496'. [ 861.654086][T18339] syzkaller0: entered promiscuous mode [ 861.671969][T18339] syzkaller0: entered allmulticast mode [ 861.857553][T18343] syzkaller0: entered promiscuous mode [ 861.873098][T18343] syzkaller0: entered allmulticast mode [ 861.908225][T18341] tipc: Enabled bearer , priority 0 [ 861.929863][T18343] tc action pedit offset must be on 32 bit boundaries [ 862.041432][T18340] tipc: Disabling bearer [ 862.135214][T18350] syz_tun: entered allmulticast mode [ 862.171737][T18348] dvmrp8: entered allmulticast mode [ 862.207554][T18353] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3510'. [ 862.321470][T18355] syzkaller0: entered promiscuous mode [ 862.327126][T18355] syzkaller0: entered allmulticast mode [ 862.475264][T18364] syzkaller0: entered promiscuous mode [ 862.481058][T18364] syzkaller0: entered allmulticast mode [ 862.693966][T18374] tipc: Enabled bearer , priority 0 [ 862.736836][T18373] tipc: Disabling bearer [ 862.837279][T18344] syz_tun: left allmulticast mode [ 862.966791][T18386] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3520'. [ 863.032593][T18382] loop4: detected capacity change from 0 to 4096 [ 863.152245][T18390] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3523'. [ 863.338845][T18392] syzkaller0: entered promiscuous mode [ 863.344373][T18392] syzkaller0: entered allmulticast mode [ 863.425302][T18396] syzkaller0: entered promiscuous mode [ 863.432546][T18396] syzkaller0: entered allmulticast mode [ 863.497350][T18399] syzkaller0: entered promiscuous mode [ 863.528621][T18399] syzkaller0: entered allmulticast mode [ 863.583110][T18399] tipc: Enabled bearer , priority 0 [ 863.658868][T18397] tipc: Resetting bearer [ 863.776324][T18397] tipc: Disabling bearer [ 863.845606][T18409] netlink: 'syz.0.3529': attribute type 1 has an invalid length. [ 864.020048][T18422] (null): rxe_set_mtu: Set mtu to 256 [ 864.039518][T18422] rdma_rxe: rxe_newlink: failed to add lo [ 864.071381][T18426] netlink: 'syz.4.3534': attribute type 3 has an invalid length. [ 864.098581][T18426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3534'. [ 864.186993][T18430] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3535'. [ 864.412608][T18443] syzkaller0: entered promiscuous mode [ 864.427249][T18443] syzkaller0: entered allmulticast mode [ 864.598965][T18450] syzkaller0: entered promiscuous mode [ 864.618607][T18450] syzkaller0: entered allmulticast mode [ 864.677150][T18456] tipc: Enabled bearer , priority 0 [ 864.711637][T18448] tipc: Resetting bearer [ 864.752012][T18448] tipc: Disabling bearer [ 865.064476][T18473] syzkaller0: entered promiscuous mode [ 865.075621][T18473] syzkaller0: entered allmulticast mode [ 865.098719][T18477] (null): rxe_set_mtu: Set mtu to 256 [ 865.104503][T18477] rdma_rxe: rxe_newlink: failed to add lo [ 867.548149][T18449] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 867.847376][T18496] syzkaller0: entered promiscuous mode [ 867.863210][T18496] syzkaller0: entered allmulticast mode [ 867.886457][T18496] tipc: Enabled bearer , priority 0 [ 867.911764][T18492] tipc: Resetting bearer [ 867.962024][T18492] tipc: Disabling bearer [ 867.980680][T18506] syzkaller0: entered promiscuous mode [ 868.005404][T18506] syzkaller0: entered allmulticast mode [ 868.186599][T18510] syzkaller0: entered promiscuous mode [ 868.229402][T18510] syzkaller0: entered allmulticast mode [ 868.461836][T18527] netlink: 'syz.3.3559': attribute type 3 has an invalid length. [ 868.486088][T18527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3559'. [ 870.295794][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.305735][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.934391][ T96] block nbd0: Possible stuck request ffff888022140000: control (read@0,1024B). Runtime 720 seconds [ 870.945406][ T96] block nbd0: Possible stuck request ffff888022140200: control (read@1024,1024B). Runtime 720 seconds [ 870.956851][ T96] block nbd0: Possible stuck request ffff888022140400: control (read@2048,1024B). Runtime 720 seconds [ 870.967914][ T96] block nbd0: Possible stuck request ffff888022140600: control (read@3072,1024B). Runtime 720 seconds [ 871.159595][T18548] syzkaller0: entered promiscuous mode [ 871.175387][T18548] syzkaller0: entered allmulticast mode [ 871.224716][T18548] tipc: Enabled bearer , priority 0 [ 871.244635][T18550] syzkaller0: entered promiscuous mode [ 871.278531][T18550] syzkaller0: entered allmulticast mode [ 871.294111][T18547] tipc: Resetting bearer [ 871.392444][T18547] tipc: Disabling bearer [ 871.912819][T18578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 871.921881][T18578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.476077][T18612] syzkaller0: entered promiscuous mode [ 872.488642][T18612] syzkaller0: entered allmulticast mode [ 872.506117][T18615] syzkaller0: entered promiscuous mode [ 872.514639][T18615] syzkaller0: entered allmulticast mode [ 872.622766][T18608] tipc: Enabled bearer , priority 0 [ 872.632399][T18606] tipc: Resetting bearer [ 872.780083][T18606] tipc: Disabling bearer [ 873.214801][T18653] netlink: 'syz.2.3592': attribute type 3 has an invalid length. [ 873.222827][T18653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3592'. [ 873.438143][T18663] syzkaller0: entered promiscuous mode [ 873.459155][T18663] syzkaller0: entered allmulticast mode [ 873.591218][T18671] syzkaller0: entered promiscuous mode [ 873.596742][T18671] syzkaller0: entered allmulticast mode [ 873.606735][T18671] tipc: Enabled bearer , priority 0 [ 873.653903][T18669] tipc: Resetting bearer [ 873.742845][T18669] tipc: Disabling bearer [ 874.515182][T18675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 874.763765][T18718] syzkaller0: entered promiscuous mode [ 874.783883][T18718] syzkaller0: entered allmulticast mode [ 874.825549][T18718] tipc: Enabled bearer , priority 0 [ 874.863244][T18717] tipc: Resetting bearer [ 874.977398][T18717] tipc: Disabling bearer [ 875.220406][T18734] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3616'. [ 875.373182][T18739] netlink: 'syz.3.3618': attribute type 3 has an invalid length. [ 875.409219][T18739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3618'. [ 875.547804][T18751] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 875.556904][T18751] syzkaller1: linktype set to 825 [ 875.570624][T18756] syzkaller0: entered promiscuous mode [ 875.576168][T18756] syzkaller0: entered allmulticast mode [ 875.768108][T18760] syzkaller0: entered promiscuous mode [ 875.773846][T18760] syzkaller0: entered allmulticast mode [ 875.824927][T18764] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3627'. [ 876.260527][T18743] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 876.583206][T18778] syzkaller0: entered promiscuous mode [ 876.591332][T18778] syzkaller0: entered allmulticast mode [ 876.688715][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 876.881123][T18788] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3636'. [ 877.052019][T18801] syzkaller0: entered promiscuous mode [ 877.057645][T18801] syzkaller0: entered allmulticast mode [ 877.659483][T18791] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 878.027137][T18821] syzkaller0: entered promiscuous mode [ 878.036782][T18821] syzkaller0: entered allmulticast mode [ 878.127786][T18825] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3649'. [ 878.226529][T18829] (null): rxe_set_mtu: Set mtu to 256 [ 878.239189][T18829] rdma_rxe: rxe_newlink: failed to add lo [ 878.471544][T18838] syzkaller0: entered promiscuous mode [ 878.488573][T18838] syzkaller0: entered allmulticast mode [ 878.623581][T18844] syzkaller0: entered promiscuous mode [ 878.643894][T18844] syzkaller0: entered allmulticast mode [ 878.668371][T18844] tipc: Enabled bearer , priority 0 [ 878.725962][T18843] tipc: Resetting bearer [ 878.785348][T18843] tipc: Disabling bearer [ 878.817425][T18849] syzkaller0: entered promiscuous mode [ 878.838089][T18849] syzkaller0: entered allmulticast mode [ 878.949454][T18860] (null): rxe_set_mtu: Set mtu to 256 [ 878.955218][T18860] rdma_rxe: rxe_newlink: failed to add lo [ 878.993470][T18861] syzkaller0: entered promiscuous mode [ 879.004344][T18861] syzkaller0: entered allmulticast mode [ 879.267011][T18869] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3664'. [ 879.308673][T18869] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3664'. [ 879.940981][T18866] lo speed is unknown, defaulting to 1000 [ 879.959235][T18895] syzkaller0: entered promiscuous mode [ 879.969218][T18895] syzkaller0: entered allmulticast mode [ 879.987567][T18895] tipc: Enabled bearer , priority 0 [ 880.008749][T18893] tipc: Resetting bearer [ 880.067186][T18893] tipc: Disabling bearer [ 880.219958][T18899] syzkaller0: entered promiscuous mode [ 880.236889][T18899] syzkaller0: entered allmulticast mode [ 880.324216][T18901] syzkaller0: entered promiscuous mode [ 880.334635][T18901] syzkaller0: entered allmulticast mode [ 880.369650][T18903] (null): rxe_set_mtu: Set mtu to 256 [ 880.375351][T18903] rdma_rxe: rxe_newlink: failed to add lo [ 881.019824][T18920] syzkaller0: entered promiscuous mode [ 881.025342][T18920] syzkaller0: entered allmulticast mode [ 881.236123][T18923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.805769][T18944] syzkaller0: entered promiscuous mode [ 881.818990][T18944] syzkaller0: entered allmulticast mode [ 881.974578][T18949] sqz0: rxe_newlink: already configured on lo [ 882.002145][T18949] infiniband sqz0: set active [ 882.016488][ T5810] lo speed is unknown, defaulting to 1000 [ 882.046104][T18951] syzkaller0: entered promiscuous mode [ 882.054711][T18951] syzkaller0: entered allmulticast mode [ 882.226668][T18958] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3689'. [ 882.674522][T18979] syzkaller0: entered promiscuous mode [ 882.708073][T18979] syzkaller0: entered allmulticast mode [ 882.802607][T18985] sqz0: rxe_newlink: already configured on lo [ 882.944138][T18985] infiniband sqz0: set active [ 882.954294][ T5810] lo speed is unknown, defaulting to 1000 [ 882.971842][T18992] syzkaller0: entered promiscuous mode [ 882.987682][T18992] syzkaller0: entered allmulticast mode [ 883.067277][T18997] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3700'. [ 883.347590][T19010] syzkaller0: entered promiscuous mode [ 883.353306][T19010] syzkaller0: entered allmulticast mode [ 886.324597][T19054] (null): rxe_set_mtu: Set mtu to 4096 [ 886.337691][T19054] rdma_rxe: rxe_newlink: failed to add lo [ 886.451317][T19057] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3710'. [ 886.522356][T19061] syzkaller0: entered promiscuous mode [ 886.527967][T19061] syzkaller0: entered allmulticast mode [ 886.826247][T19071] syzkaller0: entered promiscuous mode [ 886.832530][T19071] syzkaller0: entered allmulticast mode [ 889.852148][T19119] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3723'. [ 890.180561][T19135] (null): rxe_set_mtu: Set mtu to 256 [ 890.186249][T19135] rdma_rxe: rxe_newlink: failed to add lo [ 890.266420][T19137] syzkaller0: entered promiscuous mode [ 890.277391][T19137] syzkaller0: entered allmulticast mode [ 890.540584][T19150] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3737'. [ 890.670807][T19152] syzkaller0: entered promiscuous mode [ 890.688855][T19152] syzkaller0: entered allmulticast mode [ 890.752501][T19158] (null): rxe_set_mtu: Set mtu to 256 [ 890.758209][T19158] rdma_rxe: rxe_newlink: failed to add lo [ 891.198679][T19177] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3748'. [ 891.233939][T19167] syzkaller0: entered promiscuous mode [ 891.248586][T19167] syzkaller0: entered allmulticast mode [ 891.372299][T19182] (null): rxe_set_mtu: Set mtu to 256 [ 891.377986][T19182] rdma_rxe: rxe_newlink: failed to add lo [ 893.818225][T19179] syzkaller0: entered promiscuous mode [ 893.828604][T19179] syzkaller0: entered allmulticast mode [ 894.249389][T19217] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3759'. [ 894.484761][T19223] syzkaller0: entered promiscuous mode [ 894.498595][T19223] syzkaller0: entered allmulticast mode [ 894.519831][T19227] syzkaller0: entered promiscuous mode [ 894.525349][T19227] syzkaller0: entered allmulticast mode [ 897.895308][T19246] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3769'. [ 898.093639][T13320] Bluetooth: hci0: link tx timeout [ 898.103530][T13320] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 898.114966][ T5776] Bluetooth: hci0: link tx timeout [ 898.120786][ T5776] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 898.520503][T19267] syzkaller0: entered promiscuous mode [ 898.538594][T19267] syzkaller0: entered allmulticast mode [ 898.730896][T19271] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3780'. [ 898.841416][T19273] syzkaller0: entered promiscuous mode [ 898.847115][T19273] syzkaller0: entered allmulticast mode [ 900.212384][T13320] Bluetooth: hci0: command 0x0405 tx timeout [ 901.020213][ T96] block nbd0: Possible stuck request ffff888022140000: control (read@0,1024B). Runtime 750 seconds [ 901.032268][ T96] block nbd0: Possible stuck request ffff888022140200: control (read@1024,1024B). Runtime 750 seconds [ 901.047636][ T96] block nbd0: Possible stuck request ffff888022140400: control (read@2048,1024B). Runtime 750 seconds [ 901.058775][ T96] block nbd0: Possible stuck request ffff888022140600: control (read@3072,1024B). Runtime 750 seconds [ 901.796187][T19299] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3789'. [ 902.084920][T19314] syz_tun: entered allmulticast mode [ 902.128460][T19315] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3796'. [ 902.153554][T19315] syzkaller0: entered promiscuous mode [ 902.165852][T19315] syzkaller0: entered allmulticast mode [ 902.272813][T19319] syzkaller0: entered promiscuous mode [ 902.278580][T19319] syzkaller0: entered allmulticast mode [ 902.830769][T19321] xt_hashlimit: size too large, truncated to 1048576 [ 906.371287][T19309] syz_tun: left allmulticast mode [ 906.376494][T19322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3799'. [ 906.392440][T19322] vxcan2: entered allmulticast mode [ 906.483277][T19337] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3801'. [ 907.627230][T19359] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3808'. [ 907.733840][T19355] syzkaller0: entered promiscuous mode [ 907.754882][T19355] syzkaller0: entered allmulticast mode [ 907.773769][T19373] xt_hashlimit: size too large, truncated to 1048576 [ 908.688805][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 911.366441][T19375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3811'. [ 911.414417][T19375] vxcan2: entered allmulticast mode [ 911.468270][T19390] syzkaller0: entered promiscuous mode [ 911.474869][T19390] syzkaller0: entered allmulticast mode [ 911.526565][T19392] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3813'. [ 912.017940][T19413] dvmrp8: entered allmulticast mode [ 912.050781][T19414] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3821'. [ 912.062722][T19414] syzkaller0: entered promiscuous mode [ 912.068305][T19414] syzkaller0: entered allmulticast mode [ 912.850692][T19418] xt_hashlimit: size too large, truncated to 1048576 [ 912.909140][T19420] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3824'. [ 912.918219][T19423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3823'. [ 913.018237][T19423] vxcan1: entered allmulticast mode [ 913.237943][T19431] syzkaller0: entered promiscuous mode [ 913.246078][T19431] syzkaller0: entered allmulticast mode [ 913.381212][T19440] TCP: tcp_parse_options: Illegal window scaling value 240 > 14 received [ 913.853505][T19452] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3835'. [ 914.643151][T19462] syzkaller0: entered promiscuous mode [ 914.663121][T19462] syzkaller0: entered allmulticast mode [ 914.712420][T19466] syzkaller0: entered promiscuous mode [ 914.724909][T19466] syzkaller0: entered allmulticast mode [ 914.757197][T19466] tc action pedit offset must be on 32 bit boundaries [ 915.268761][T19475] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3844'. [ 915.645545][T19488] syz_tun: entered allmulticast mode [ 915.689130][T19488] dvmrp8: entered allmulticast mode [ 915.794766][T19490] syzkaller0: entered promiscuous mode [ 915.808110][T19490] syzkaller0: entered allmulticast mode [ 915.830644][T19490] tc action pedit offset must be on 32 bit boundaries [ 915.905708][T19494] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3853'. [ 916.040423][T19496] infiniband sqz0: set active [ 916.051114][T10599] lo speed is unknown, defaulting to 1000 [ 916.707841][T19509] syzkaller0: entered promiscuous mode [ 916.728191][T19509] syzkaller0: entered allmulticast mode [ 916.821733][T19514] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3862'. [ 920.225812][T19542] syz_tun: entered allmulticast mode [ 920.244525][T19543] dvmrp8: entered allmulticast mode [ 920.353611][T19547] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3871'. [ 920.551159][T19553] af_packet: tpacket_rcv: packet too big, clamped from 29 to 4294967272. macoff=96 [ 920.559762][ T5810] IPVS: starting estimator thread 0... [ 920.658627][T19558] IPVS: using max 23 ests per chain, 55200 per kthread [ 920.845464][T19565] syzkaller0: entered promiscuous mode [ 920.873664][T19565] syzkaller0: entered allmulticast mode [ 922.007758][ T59] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 922.698680][T19590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 923.536060][T19575] syzkaller0: entered promiscuous mode [ 923.542218][T19575] syzkaller0: entered allmulticast mode [ 923.797378][T19606] syz_tun: entered allmulticast mode [ 923.822867][T19605] syz_tun: left allmulticast mode [ 923.888735][T19604] syzkaller0: entered promiscuous mode [ 923.895027][T19604] syzkaller0: entered allmulticast mode [ 926.937299][T19651] syzkaller0: entered promiscuous mode [ 926.969842][T19651] syzkaller0: entered allmulticast mode [ 930.270358][T19716] tipc: Enabled bearer , priority 0 [ 930.282238][T19716] syzkaller0: entered promiscuous mode [ 930.287733][T19716] syzkaller0: entered allmulticast mode [ 930.349679][T19716] tipc: Resetting bearer [ 930.355623][T19716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.431163][T19720] syzkaller0: entered promiscuous mode [ 930.441165][T19720] syzkaller0: entered allmulticast mode [ 930.449721][T19714] tipc: Resetting bearer [ 930.482925][T19714] tipc: Disabling bearer [ 931.100307][ T96] block nbd0: Possible stuck request ffff888022140000: control (read@0,1024B). Runtime 780 seconds [ 931.111217][ T96] block nbd0: Possible stuck request ffff888022140200: control (read@1024,1024B). Runtime 780 seconds [ 931.123857][ T96] block nbd0: Possible stuck request ffff888022140400: control (read@2048,1024B). Runtime 780 seconds [ 931.135017][ T96] block nbd0: Possible stuck request ffff888022140600: control (read@3072,1024B). Runtime 780 seconds [ 931.741625][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.756088][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.028887][T19731] syzkaller0: entered promiscuous mode [ 933.034368][T19731] syzkaller0: entered allmulticast mode [ 933.434242][T19761] xt_hashlimit: size too large, truncated to 1048576 [ 933.485694][T19766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3935'. [ 933.538257][T19766] vxcan2: entered allmulticast mode [ 933.679929][T19768] syzkaller0: entered promiscuous mode [ 933.687778][T19768] syzkaller0: entered allmulticast mode [ 933.697500][T19777] syzkaller0: entered promiscuous mode [ 933.708798][T19777] syzkaller0: entered allmulticast mode [ 938.280918][T19831] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3951'. [ 938.400797][T19833] syzkaller0: entered promiscuous mode [ 938.422825][T19833] syzkaller0: entered allmulticast mode [ 941.542969][T19888] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3964'. [ 942.125378][T19906] syzkaller0: entered promiscuous mode [ 942.152136][T19906] syzkaller0: entered allmulticast mode [ 945.468786][T19953] syzkaller0: entered promiscuous mode [ 945.474663][T19953] syzkaller0: entered allmulticast mode [ 945.887070][T19965] syzkaller0: entered promiscuous mode [ 945.897524][T19965] syzkaller0: entered allmulticast mode [ 948.982530][T20014] syzkaller0: entered promiscuous mode [ 949.002728][T20014] syzkaller0: entered allmulticast mode [ 949.516386][T20030] syzkaller0: entered promiscuous mode [ 949.526112][T20030] syzkaller0: entered allmulticast mode [ 951.388248][T20050] xt_hashlimit: size too large, truncated to 1048576 [ 952.790806][T20051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4006'. [ 952.807602][T20051] vxcan2: entered allmulticast mode [ 953.070847][T20059] syzkaller0: entered promiscuous mode [ 953.076369][T20059] syzkaller0: entered allmulticast mode [ 953.797440][T20082] hsr0: entered promiscuous mode [ 953.812211][T20082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4015'. [ 953.918906][T20086] tipc: Enabled bearer , priority 0 [ 954.005364][T20084] syzkaller0: entered promiscuous mode [ 954.012723][T20084] syzkaller0: entered allmulticast mode [ 956.924040][T20082] syzkaller0: entered promiscuous mode [ 956.934621][T20082] syzkaller0: entered allmulticast mode [ 956.943010][T20082] tipc: Resetting bearer [ 956.956277][T20081] tipc: Resetting bearer [ 959.303050][T20081] tipc: Disabling bearer [ 959.333611][T20093] syzkaller0: entered promiscuous mode [ 959.339412][T20093] syzkaller0: entered allmulticast mode [ 959.345876][ T8] tipc: Node number set to 1955276560 [ 961.182388][ T96] block nbd0: Possible stuck request ffff888022140000: control (read@0,1024B). Runtime 810 seconds [ 961.193488][ T96] block nbd0: Possible stuck request ffff888022140200: control (read@1024,1024B). Runtime 810 seconds [ 961.205208][ T96] block nbd0: Possible stuck request ffff888022140400: control (read@2048,1024B). Runtime 810 seconds [ 961.216357][ T96] block nbd0: Possible stuck request ffff888022140600: control (read@3072,1024B). Runtime 810 seconds [ 961.851038][T20127] tipc: Enabled bearer , priority 0 [ 961.875231][T20132] netlink: 'syz.4.4024': attribute type 1 has an invalid length. [ 961.916277][T20132] 8021q: adding VLAN 0 to HW filter on device bond1 [ 961.924083][T20127] syzkaller0: entered promiscuous mode [ 961.947505][T20127] syzkaller0: entered allmulticast mode [ 961.986426][T20132] bond1: (slave veth3): Enslaving as an active interface with a down link [ 962.039055][T20127] tipc: Resetting bearer [ 962.055004][T20132] bond1: (slave dummy0): making interface the new active one [ 962.076946][T20132] dummy0: entered promiscuous mode [ 962.082613][T20132] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 962.108145][T20126] tipc: Resetting bearer [ 962.148835][T20126] tipc: Disabling bearer [ 962.156891][T20132] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4024'. [ 962.192850][T20132] bond1: (slave dummy0): Releasing active interface [ 962.202315][T20132] dummy0 (unregistering): left promiscuous mode [ 962.224265][T20141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4026'. [ 962.251230][T20141] vxcan2: entered allmulticast mode [ 962.471926][T20147] syzkaller0: entered promiscuous mode [ 962.482171][T20147] syzkaller0: entered allmulticast mode [ 965.051155][T20156] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 965.192350][T20176] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4034'. [ 965.237682][T20179] syzkaller0: entered promiscuous mode [ 965.246309][T20179] syzkaller0: entered allmulticast mode [ 965.336941][T20180] tipc: Enabled bearer , priority 0 [ 965.350728][T20180] syzkaller0: entered promiscuous mode [ 965.366482][T20180] syzkaller0: entered allmulticast mode [ 965.576430][T20186] tipc: Resetting bearer [ 965.602491][T20178] tipc: Resetting bearer [ 965.659916][T20178] tipc: Disabling bearer [ 965.685783][T20197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4042'. [ 965.703690][T20197] vxcan1: entered allmulticast mode [ 965.835774][T20201] syzkaller0: entered promiscuous mode [ 965.848582][T20201] syzkaller0: entered allmulticast mode [ 968.771181][T20230] syzkaller0: entered promiscuous mode [ 968.776696][T20230] syzkaller0: entered allmulticast mode [ 968.808357][T20235] tipc: Enabled bearer , priority 0 [ 971.262384][T20235] syzkaller0: entered promiscuous mode [ 971.267877][T20235] syzkaller0: entered allmulticast mode [ 971.278585][T20212] lo speed is unknown, defaulting to 1000 [ 971.301173][T20241] tipc: Resetting bearer [ 971.337136][T20233] tipc: Resetting bearer [ 971.454501][T20233] tipc: Disabling bearer [ 971.485749][ T5810] tipc: Node number set to 3976165782 [ 971.523325][T20245] xt_hashlimit: size too large, truncated to 1048576 [ 971.579209][T20247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4053'. [ 971.599257][T20247] vxcan2: entered allmulticast mode [ 972.785703][T20261] syzkaller0: entered promiscuous mode [ 972.818688][T20261] syzkaller0: entered allmulticast mode [ 976.296878][T20270] syzkaller0: entered promiscuous mode [ 976.302471][T20270] syzkaller0: entered allmulticast mode [ 976.368255][ T3004] tipc: Left network mode [ 976.881398][T20310] tipc: Enabled bearer , priority 0 [ 976.970713][T20301] tipc: Resetting bearer [ 977.098399][T20305] syzkaller0: entered promiscuous mode [ 977.112405][T20305] syzkaller0: entered allmulticast mode [ 977.196289][T20315] syzkaller0: entered promiscuous mode [ 977.202680][T20315] syzkaller0: entered allmulticast mode [ 977.273860][T20300] tipc: Resetting bearer [ 977.340195][T20300] tipc: Disabling bearer [ 980.031526][T20342] syz_tun: entered allmulticast mode [ 980.037368][T20342] syz_tun: left allmulticast mode [ 980.279562][T20360] syzkaller0: entered promiscuous mode [ 980.285146][T20360] syzkaller0: entered allmulticast mode [ 983.991280][T20456] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4082'. [ 985.048078][T20487] syzkaller0: entered promiscuous mode [ 985.062006][T20487] syzkaller0: entered allmulticast mode [ 988.542415][T20548] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 988.741032][T20548] syzkaller0: entered promiscuous mode [ 988.770161][T20548] syzkaller0: entered allmulticast mode [ 989.978828][ T29] INFO: task udevd:6264 blocked for more than 143 seconds. [ 989.987628][ T29] Not tainted syzkaller #0 [ 989.996158][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 990.005178][ T29] task:udevd state:D stack:24008 pid:6264 ppid:5141 flags:0x00004006 [ 990.014610][ T29] Call Trace: [ 990.018052][ T29] [ 990.021096][ T29] __schedule+0x1553/0x45a0 [ 990.025642][ T29] ? asan.module_dtor+0x20/0x20 [ 990.032569][ T29] ? mark_lock+0x94/0x320 [ 990.036957][ T29] ? lock_chain_count+0x20/0x20 [ 990.041912][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 990.047051][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 990.052916][ T29] schedule+0xbd/0x170 [ 990.057010][ T29] io_schedule+0x80/0xd0 [ 990.061414][ T29] folio_wait_bit_common+0x714/0xfa0 [ 990.066723][ T29] ? folio_wait_bit+0x30/0x30 [ 990.071530][ T29] ? _compound_head+0x120/0x120 [ 990.076391][ T29] ? filemap_add_folio+0x192/0x3c0 [ 990.081833][ T29] ? __filemap_get_folio+0x704/0xbb0 [ 990.087124][ T29] ? blkdev_writepage+0x30/0x30 [ 990.092113][ T29] do_read_cache_folio+0x1c0/0x7d0 [ 990.097248][ T29] ? blkdev_writepage+0x30/0x30 [ 990.102362][ T29] read_part_sector+0xd2/0x340 [ 990.107170][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 990.112688][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 990.117998][ T29] ? put_partition+0x370/0x370 [ 990.122885][ T29] ? alloc_pages+0x4dc/0x740 [ 990.127489][ T29] bdev_disk_changed+0x740/0x1420 [ 990.132714][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 990.138047][ T29] ? iput+0x343/0x920 [ 990.142220][ T29] blkdev_get_whole+0x30d/0x390 [ 990.147087][ T29] blkdev_get_by_dev+0x279/0x600 [ 990.152134][ T29] blkdev_open+0x152/0x360 [ 990.156564][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 990.161232][ T29] do_dentry_open+0x8c6/0x1500 [ 990.166020][ T29] path_openat+0x27f1/0x3230 [ 990.170684][ T29] ? do_sys_openat2+0xda/0x1d0 [ 990.175469][ T29] ? verify_lock_unused+0x140/0x140 [ 990.180827][ T29] ? do_filp_open+0x430/0x430 [ 990.185519][ T29] ? __virt_addr_valid+0x18c/0x540 [ 990.190774][ T29] do_filp_open+0x1f5/0x430 [ 990.195318][ T29] ? vfs_tmpfile+0x490/0x490 [ 990.200020][ T29] ? _raw_spin_unlock+0x28/0x40 [ 990.204992][ T29] ? alloc_fd+0x58f/0x630 [ 990.209790][ T29] do_sys_openat2+0x134/0x1d0 [ 990.214494][ T29] ? do_sys_open+0xe0/0xe0 [ 990.219051][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 990.225054][ T29] ? lock_chain_count+0x20/0x20 [ 990.229986][ T29] __x64_sys_openat+0x139/0x160 [ 990.234863][ T29] do_syscall_64+0x55/0xa0 [ 990.239362][ T29] ? clear_bhb_loop+0x40/0x90 [ 990.244050][ T29] ? clear_bhb_loop+0x40/0x90 [ 990.248862][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 990.254779][ T29] RIP: 0033:0x7f15d46a7407 [ 990.259309][ T29] RSP: 002b:00007ffdb38eb510 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 990.267739][ T29] RAX: ffffffffffffffda RBX: 00007f15d4d92880 RCX: 00007f15d46a7407 [ 990.275826][ T29] RDX: 00000000000a0800 RSI: 000055974793fad0 RDI: ffffffffffffff9c [ 990.283854][ T29] RBP: 0000559747925910 R08: 0000000000000000 R09: 0000000000000000 [ 990.291964][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000559747938e20 [ 990.300021][ T29] R13: 000055974793d410 R14: 0000000000000000 R15: 0000559747938e20 [ 990.308087][ T29] [ 990.311255][ T29] [ 990.311255][ T29] Showing all locks held in the system: [ 990.319687][ T29] 2 locks held by kworker/u4:1/12: [ 990.324829][ T29] 1 lock held by khungtaskd/29: [ 990.329806][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 990.339920][ T29] 2 locks held by kworker/u4:4/59: [ 990.345035][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 990.356766][ T29] #1: ffffc900015b7d00 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 990.369995][ T29] 4 locks held by kworker/u4:8/3004: [ 990.375374][ T29] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 990.387148][ T29] #1: ffffc9000c367d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 990.397952][ T29] #2: ffffffff8e3b5a90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 990.407681][ T29] #3: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: cfg802154_pernet_exit+0x19/0xe0 [ 990.417511][ T29] 3 locks held by kworker/u4:9/3468: [ 990.422934][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 990.434898][ T29] #1: ffffc9000d307d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 990.446011][ T29] #2: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 990.455190][ T29] 2 locks held by dhcpcd/5435: [ 990.460141][ T29] #0: ffff8880196d3690 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0xf4/0x810 [ 990.470667][ T29] #1: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: netlink_dump+0x78f/0xe50 [ 990.479910][ T29] 2 locks held by getty/5526: [ 990.484588][ T29] #0: ffff88802d7b50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 990.497795][ T29] #1: ffffc900015d02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 990.508180][ T29] 2 locks held by kworker/0:4/5811: [ 990.514279][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 990.525595][ T29] #1: ffffc9000498fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 990.539001][ T29] 1 lock held by udevd/6264: [ 990.543612][ T29] #0: ffff8880220a84c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 990.553739][ T29] 3 locks held by kworker/u4:3/9558: [ 990.559104][ T29] #0: ffff88802c907938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 990.570805][ T29] #1: ffffc9000436fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 990.583726][ T29] #2: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd4/0x1530 [ 990.593361][ T29] 2 locks held by syz.3.4099/20552: [ 990.598643][ T29] #0: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 990.607646][ T29] #1: ffffffff8d137ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 990.619562][ T29] 1 lock held by syz.2.4100/20555: [ 990.624682][ T29] #0: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x400/0x2000 [ 990.634254][ T29] 1 lock held by syz.2.4100/20560: [ 990.639431][ T29] #0: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 990.648958][ T29] 2 locks held by syz.2.4100/20564: [ 990.654168][ T29] #0: ffff888067d6f690 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0xf4/0x810 [ 990.664564][ T29] #1: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: netlink_dump+0x78f/0xe50 [ 990.673605][ T29] 1 lock held by syz.0.4101/20559: [ 990.678776][ T29] #0: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x400/0x2000 [ 990.688124][ T29] 1 lock held by syz.0.4101/20562: [ 990.693281][ T29] #0: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x30c/0x1c40 [ 990.702588][ T29] 1 lock held by syz.4.4102/20568: [ 990.707709][ T29] #0: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x400/0x2000 [ 990.718221][ T29] 1 lock held by syz.4.4102/20569: [ 990.723965][ T29] #0: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 990.733030][ T29] 1 lock held by syz.4.4102/20570: [ 990.738143][ T29] #0: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140 [ 990.747195][ T29] 1 lock held by syz.4.4102/20572: [ 990.754702][ T29] #0: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 990.764311][ T29] 1 lock held by syz.4.4102/20574: [ 990.769985][ T29] #0: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 990.790145][ T29] [ 990.792513][ T29] ============================================= [ 990.792513][ T29] [ 990.801124][ T29] NMI backtrace for cpu 0 [ 990.805471][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 990.812696][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 990.822745][ T29] Call Trace: [ 990.826018][ T29] [ 990.828941][ T29] dump_stack_lvl+0x18c/0x250 [ 990.833615][ T29] ? preempt_count_add+0x91/0x1a0 [ 990.838649][ T29] ? show_regs_print_info+0x20/0x20 [ 990.843864][ T29] ? load_image+0x420/0x420 [ 990.848375][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 990.853324][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 990.859477][ T29] ? _printk+0xde/0x130 [ 990.863645][ T29] ? load_image+0x420/0x420 [ 990.868157][ T29] ? load_image+0x420/0x420 [ 990.872657][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 990.878726][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 990.884703][ T29] watchdog+0xf3d/0xf80 [ 990.888857][ T29] ? watchdog+0x1e1/0xf80 [ 990.893189][ T29] kthread+0x2fa/0x390 [ 990.897258][ T29] ? hungtask_pm_notify+0x90/0x90 [ 990.902278][ T29] ? kthread_blkcg+0xd0/0xd0 [ 990.906878][ T29] ret_from_fork+0x48/0x80 [ 990.911303][ T29] ? kthread_blkcg+0xd0/0xd0 [ 990.915902][ T29] ret_from_fork_asm+0x11/0x20 [ 990.920686][ T29] [ 990.924774][ T29] Sending NMI from CPU 0 to CPUs 1: [ 990.930170][ C1] NMI backtrace for cpu 1 [ 990.930179][ C1] CPU: 1 PID: 5130 Comm: klogd Not tainted syzkaller #0 [ 990.930195][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 990.930203][ C1] RIP: 0010:kernel_text_address+0x0/0xd0 [ 990.930228][ C1] Code: 89 fb e8 23 00 00 00 48 81 fb 00 70 dd 8f 0f 93 c1 48 81 fb 9b 3c f4 8f 0f 92 c2 20 ca 08 c2 0f b6 c2 5b c3 66 0f 1f 44 00 00 <66> 0f 1f 00 55 41 56 53 48 81 ff 00 00 00 81 0f 93 c0 48 81 ff 00 [ 990.930242][ C1] RSP: 0018:ffffc90003507428 EFLAGS: 00000246 [ 990.930255][ C1] RAX: ffffffff813b3657 RBX: ffffffff88731f36 RCX: 0000000000000000 [ 990.930266][ C1] RDX: ffff88807d4a8000 RSI: 0000000000000001 RDI: ffffffff88731f36 [ 990.930277][ C1] RBP: 0000000000000001 R08: ffff88807d4a8000 R09: 0000000000000003 [ 990.930286][ C1] R10: 0000000000000004 R11: 0000000000000000 R12: ffffffff81c4e272 [ 990.930296][ C1] R13: 0000000000000003 R14: dffffc0000000000 R15: 1ffff920006a0e96 [ 990.930306][ C1] FS: 00007f7f68b33c80(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 990.930320][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 990.930330][ C1] CR2: 0000001b3091aff8 CR3: 0000000024c9a000 CR4: 00000000003506e0 [ 990.930343][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 990.930353][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 990.930363][ C1] Call Trace: [ 990.930367][ C1] [ 990.930372][ C1] __kernel_text_address+0xd/0x30 [ 990.930392][ C1] unwind_get_return_address+0x5d/0xc0 [ 990.930406][ C1] ? stack_trace_save+0x100/0x100 [ 990.930433][ C1] arch_stack_walk+0x11d/0x190 [ 990.930451][ C1] ? kmalloc_reserve+0x116/0x240 [ 990.930467][ C1] stack_trace_save+0xaa/0x100 [ 990.930483][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 990.930500][ C1] ? mark_lock+0x94/0x320 [ 990.930517][ C1] ? kasan_set_track+0x5f/0x70 [ 990.930532][ C1] ? kasan_set_track+0x4e/0x70 [ 990.930548][ C1] kasan_set_track+0x4e/0x70 [ 990.930562][ C1] ? kasan_set_track+0x4e/0x70 [ 990.930576][ C1] ? __kasan_kmalloc+0x8f/0xa0 [ 990.930591][ C1] ? __kmalloc_node_track_caller+0xb2/0x230 [ 990.930632][ C1] ? __kmem_cache_alloc_node+0x13a/0x250 [ 990.930654][ C1] __kasan_kmalloc+0x8f/0xa0 [ 990.930677][ C1] ? __alloc_skb+0x138/0x2c0 [ 990.930690][ C1] __kmalloc_node_track_caller+0xb2/0x230 [ 990.930709][ C1] ? rcu_is_watching+0x15/0xb0 [ 990.930733][ C1] ? __alloc_skb+0x138/0x2c0 [ 990.930745][ C1] kmalloc_reserve+0x116/0x240 [ 990.930761][ C1] __alloc_skb+0x138/0x2c0 [ 990.930776][ C1] alloc_skb_with_frags+0xca/0x7b0 [ 990.930800][ C1] sock_alloc_send_pskb+0x883/0x9a0 [ 990.930828][ C1] ? sock_kzfree_s+0x50/0x50 [ 990.930845][ C1] ? do_raw_spin_lock+0x11f/0x2c0 [ 990.930864][ C1] ? __rwlock_init+0x150/0x150 [ 990.930883][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 990.930903][ C1] unix_dgram_sendmsg+0x5a2/0x16d0 [ 990.930923][ C1] ? aa_sk_perm+0x83c/0x970 [ 990.930948][ C1] ? unix_dgram_poll+0x680/0x680 [ 990.930961][ C1] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 990.930984][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 990.931002][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 990.931020][ C1] ? security_socket_sendmsg+0x80/0xa0 [ 990.931038][ C1] __sys_sendto+0x4a9/0x6b0 [ 990.931053][ C1] ? __ia32_sys_getpeername+0x90/0x90 [ 990.931073][ C1] ? log_buf_vmcoreinfo_setup+0x450/0x450 [ 990.931094][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 990.931112][ C1] ? lock_chain_count+0x20/0x20 [ 990.931130][ C1] __x64_sys_sendto+0xde/0xf0 [ 990.931145][ C1] do_syscall_64+0x55/0xa0 [ 990.931159][ C1] ? clear_bhb_loop+0x40/0x90 [ 990.931176][ C1] ? clear_bhb_loop+0x40/0x90 [ 990.931194][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 990.931211][ C1] RIP: 0033:0x7f7f68c83407 [ 990.931223][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 990.931235][ C1] RSP: 002b:00007ffcc570b260 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 990.931250][ C1] RAX: ffffffffffffffda RBX: 00007f7f68b33c80 RCX: 00007f7f68c83407 [ 990.931261][ C1] RDX: 0000000000000047 RSI: 00007ffcc570b3a0 RDI: 0000000000000003 [ 990.931270][ C1] RBP: 00007ffcc570b7d0 R08: 0000000000000000 R09: 0000000000000000 [ 990.931279][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffcc570b7e8 [ 990.931289][ C1] R13: 00007ffcc570b3a0 R14: 000000000000002c R15: 00007ffcc570b3a0 [ 990.931306][ C1] [ 991.376114][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 991.382984][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 991.390191][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 991.400250][ T29] Call Trace: [ 991.403521][ T29] [ 991.406440][ T29] dump_stack_lvl+0x18c/0x250 [ 991.411120][ T29] ? show_regs_print_info+0x20/0x20 [ 991.416312][ T29] ? load_image+0x420/0x420 [ 991.420817][ T29] panic+0x2dc/0x730 [ 991.424704][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 991.430329][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 991.434824][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 991.440362][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 991.446507][ T29] watchdog+0xf7c/0xf80 [ 991.450662][ T29] ? watchdog+0x1e1/0xf80 [ 991.454992][ T29] kthread+0x2fa/0x390 [ 991.459052][ T29] ? hungtask_pm_notify+0x90/0x90 [ 991.464068][ T29] ? kthread_blkcg+0xd0/0xd0 [ 991.468645][ T29] ret_from_fork+0x48/0x80 [ 991.473057][ T29] ? kthread_blkcg+0xd0/0xd0 [ 991.477634][ T29] ret_from_fork_asm+0x11/0x20 [ 991.482409][ T29] [ 991.485791][ T29] Kernel Offset: disabled [ 991.490102][ T29] Rebooting in 86400 seconds..