[ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.75' (ECDSA) to the list of known hosts. 2020/10/02 19:38:58 fuzzer started 2020/10/02 19:38:58 dialing manager at 10.128.0.26:42291 2020/10/02 19:38:59 syscalls: 1618 2020/10/02 19:38:59 code coverage: enabled 2020/10/02 19:38:59 comparison tracing: enabled 2020/10/02 19:38:59 extra coverage: enabled 2020/10/02 19:38:59 setuid sandbox: enabled 2020/10/02 19:38:59 namespace sandbox: enabled 2020/10/02 19:38:59 Android sandbox: /sys/fs/selinux/policy does not exist 2020/10/02 19:38:59 fault injection: enabled 2020/10/02 19:38:59 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/02 19:38:59 net packet injection: enabled 2020/10/02 19:38:59 net device setup: enabled 2020/10/02 19:38:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/02 19:38:59 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/02 19:38:59 USB emulation: enabled 2020/10/02 19:38:59 hci packet injection: enabled 2020/10/02 19:38:59 wifi device emulation: enabled 19:40:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, 0x0, &(0x7f0000000140)) 19:40:34 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOSETOWN(r0, 0x8901, 0xfffffffffffffffd) 19:40:34 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="4357da2db916", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, @time_exceeded={0x8, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2=0x7f000001}}}}}}, 0x0) 19:40:34 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3a, 0x0, 0x0) 19:40:35 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x35}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xfeff, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe60, 0x10, 0x0, 0xffffff8b}, 0x2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x1d8}, 0x28) 19:40:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@getchain={0x24, 0x66, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) syzkaller login: [ 155.263972][ T6860] IPVS: ftp: loaded support on port[0] = 21 [ 155.425423][ T6860] chnl_net:caif_netlink_parms(): no params data found [ 155.579817][ T6862] IPVS: ftp: loaded support on port[0] = 21 [ 155.639836][ T6860] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.648563][ T6860] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.656527][ T6860] device bridge_slave_0 entered promiscuous mode [ 155.669637][ T6860] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.676723][ T6860] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.725498][ T6860] device bridge_slave_1 entered promiscuous mode [ 155.775968][ T6864] IPVS: ftp: loaded support on port[0] = 21 [ 155.825579][ T6860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.863195][ T6860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.993386][ T6860] team0: Port device team_slave_0 added [ 156.024045][ T6866] IPVS: ftp: loaded support on port[0] = 21 [ 156.040844][ T6860] team0: Port device team_slave_1 added [ 156.048517][ T6862] chnl_net:caif_netlink_parms(): no params data found [ 156.205309][ T6860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.225271][ T6860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.253698][ T6860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.285220][ T6860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.292377][ T6860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.319978][ T6860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.350702][ T6868] IPVS: ftp: loaded support on port[0] = 21 [ 156.403431][ T6860] device hsr_slave_0 entered promiscuous mode [ 156.414940][ T6860] device hsr_slave_1 entered promiscuous mode [ 156.499777][ T6862] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.509728][ T6862] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.536210][ T6862] device bridge_slave_0 entered promiscuous mode [ 156.589091][ T6862] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.590874][ T6876] IPVS: ftp: loaded support on port[0] = 21 [ 156.596183][ T6862] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.612793][ T6862] device bridge_slave_1 entered promiscuous mode [ 156.744449][ T6862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.775413][ T6862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.848838][ T6862] team0: Port device team_slave_0 added [ 156.858558][ T6862] team0: Port device team_slave_1 added [ 156.873016][ T6864] chnl_net:caif_netlink_parms(): no params data found [ 157.001341][ T6862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.016051][ T6862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.044074][ T6862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.063466][ T6866] chnl_net:caif_netlink_parms(): no params data found [ 157.095035][ T6862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.104837][ T6862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.133605][ T6862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.268068][ T7246] Bluetooth: hci0: command 0x0409 tx timeout [ 157.306461][ T6862] device hsr_slave_0 entered promiscuous mode [ 157.313231][ T6862] device hsr_slave_1 entered promiscuous mode [ 157.321217][ T6862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.329738][ T6862] Cannot create hsr debugfs directory [ 157.463770][ T6860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 157.473506][ T6868] chnl_net:caif_netlink_parms(): no params data found [ 157.507094][ T2639] Bluetooth: hci1: command 0x0409 tx timeout [ 157.533941][ T6866] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.542554][ T6866] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.551298][ T6866] device bridge_slave_0 entered promiscuous mode [ 157.559994][ T6860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 157.596506][ T6864] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.604289][ T6864] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.613326][ T6864] device bridge_slave_0 entered promiscuous mode [ 157.621979][ T6866] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.630568][ T6866] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.638848][ T6866] device bridge_slave_1 entered promiscuous mode [ 157.654045][ T6860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 157.695990][ T6864] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.706115][ T6864] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.715236][ T6864] device bridge_slave_1 entered promiscuous mode [ 157.729533][ T6876] chnl_net:caif_netlink_parms(): no params data found [ 157.741970][ T6860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 157.749276][ T7246] Bluetooth: hci2: command 0x0409 tx timeout [ 157.788784][ T6866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.842367][ T6864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.862396][ T6866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.885073][ T6864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.917120][ T7246] Bluetooth: hci3: command 0x0409 tx timeout [ 157.962260][ T6866] team0: Port device team_slave_0 added [ 157.974603][ T6866] team0: Port device team_slave_1 added [ 158.045866][ T6868] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.055481][ T6868] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.066055][ T6868] device bridge_slave_0 entered promiscuous mode [ 158.077754][ T6864] team0: Port device team_slave_0 added [ 158.109071][ T6876] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.116731][ T6876] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.129901][ T6876] device bridge_slave_0 entered promiscuous mode [ 158.140065][ T6866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.148087][ T7876] Bluetooth: hci4: command 0x0409 tx timeout [ 158.154785][ T6866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.182259][ T6866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.194744][ T6868] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.203122][ T6868] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.211670][ T6868] device bridge_slave_1 entered promiscuous mode [ 158.220547][ T6864] team0: Port device team_slave_1 added [ 158.239795][ T6876] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.254394][ T6876] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.263288][ T6876] device bridge_slave_1 entered promiscuous mode [ 158.296509][ T6876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.306699][ T6866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.314472][ T6866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.344073][ T6866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.385428][ T6876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.407370][ T6868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.441229][ T6862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 158.451054][ T6862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 158.461648][ T6864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.468963][ T2639] Bluetooth: hci5: command 0x0409 tx timeout [ 158.475999][ T6864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.503186][ T6864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.518198][ T6868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.542552][ T6876] team0: Port device team_slave_0 added [ 158.558612][ T6876] team0: Port device team_slave_1 added [ 158.564577][ T6862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 158.575279][ T6864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.583104][ T6864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.610523][ T6864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.651191][ T6862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 158.699662][ T6866] device hsr_slave_0 entered promiscuous mode [ 158.710437][ T6866] device hsr_slave_1 entered promiscuous mode [ 158.724250][ T6866] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.732364][ T6866] Cannot create hsr debugfs directory [ 158.754928][ T6876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.762609][ T6876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.790476][ T6876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.816964][ T6868] team0: Port device team_slave_0 added [ 158.823797][ T6876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.831867][ T6876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.859661][ T6876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.885283][ T6864] device hsr_slave_0 entered promiscuous mode [ 158.893262][ T6864] device hsr_slave_1 entered promiscuous mode [ 158.903471][ T6864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.911330][ T6864] Cannot create hsr debugfs directory [ 158.918825][ T6868] team0: Port device team_slave_1 added [ 158.950380][ T6876] device hsr_slave_0 entered promiscuous mode [ 158.960046][ T6876] device hsr_slave_1 entered promiscuous mode [ 158.966938][ T6876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.976388][ T6876] Cannot create hsr debugfs directory [ 159.092052][ T6868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.102962][ T6868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.136707][ T6868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.190399][ T6860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.200882][ T6868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.214551][ T6868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.247158][ T6868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.347413][ T17] Bluetooth: hci0: command 0x041b tx timeout [ 159.412674][ T6868] device hsr_slave_0 entered promiscuous mode [ 159.422029][ T6868] device hsr_slave_1 entered promiscuous mode [ 159.430281][ T6868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.440378][ T6868] Cannot create hsr debugfs directory [ 159.516949][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.526445][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.548405][ T6860] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.598025][ T2639] Bluetooth: hci1: command 0x041b tx timeout [ 159.619322][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.628410][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.636871][ T2639] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.644351][ T2639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.659357][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.700725][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.710446][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.719496][ T7876] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.726967][ T7876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.779298][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.795268][ T6866] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 159.837254][ T17] Bluetooth: hci2: command 0x041b tx timeout [ 159.843823][ T6866] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 159.888817][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.899571][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.908722][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.919148][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.929103][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.938411][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.948225][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.956911][ T6866] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 159.974925][ T6866] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 159.987117][ T7876] Bluetooth: hci3: command 0x041b tx timeout [ 159.995298][ T6862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.007592][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.041157][ T6860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.053038][ T6860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.076259][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.093445][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.132237][ T6862] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.139767][ T6864] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 160.154478][ T6864] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 160.171420][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.179821][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.196642][ T6864] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 160.215755][ T6864] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 160.237825][ T7246] Bluetooth: hci4: command 0x041b tx timeout [ 160.256048][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.266541][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.277347][ T7246] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.284555][ T7246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.320745][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.342096][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.351134][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.359236][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.369877][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.379380][ T7246] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.386753][ T7246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.395204][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.414509][ T6860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.437306][ T6876] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 160.461327][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.505963][ T6876] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 160.521491][ T6876] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 160.545186][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.558088][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.564730][ T5] Bluetooth: hci5: command 0x041b tx timeout [ 160.569759][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 160.597424][ T6876] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 160.631745][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.642249][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.653562][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 160.663389][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 160.672502][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 160.682597][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.744294][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 160.753712][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.764108][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 160.775406][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.787631][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.795609][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.806245][ T6860] device veth0_vlan entered promiscuous mode [ 160.824551][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.843571][ T6868] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 160.872172][ T6868] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 160.882668][ T6868] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 160.904969][ T6866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.931201][ T6860] device veth1_vlan entered promiscuous mode [ 160.945902][ T6868] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 161.000218][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 161.011634][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 161.020830][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.029711][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.037979][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.045866][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.063831][ T6864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.075828][ T6862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.089928][ T6866] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.164575][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.174368][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.184998][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.192286][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.201114][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.209394][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.217509][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.226122][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.235220][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.242585][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.253087][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.291752][ T6864] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.307457][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.316488][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.336953][ T6860] device veth0_macvtap entered promiscuous mode [ 161.381956][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 161.395440][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.406357][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 161.416770][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.427703][ T7246] Bluetooth: hci0: command 0x040f tx timeout [ 161.427818][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.443549][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.452667][ T7876] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.459805][ T7876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.470582][ T6860] device veth1_macvtap entered promiscuous mode [ 161.520727][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 161.529282][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 161.543953][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.552627][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.562370][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.571164][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.578897][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.588859][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.598224][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.612718][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.621272][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.630777][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.665624][ T6862] device veth0_vlan entered promiscuous mode [ 161.672514][ T2639] Bluetooth: hci1: command 0x040f tx timeout [ 161.704242][ T6876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.712195][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.721609][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 161.730477][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.739606][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.749363][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.759618][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.769085][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.779896][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.789391][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.798391][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.806349][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.818937][ T6860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.865041][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 161.875170][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.885703][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.899446][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.918343][ T6860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.927404][ T2639] Bluetooth: hci2: command 0x040f tx timeout [ 161.936135][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.961533][ T6862] device veth1_vlan entered promiscuous mode [ 161.977815][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.992420][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.003015][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.012227][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.021667][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 162.031373][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 162.043280][ T6860] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.056552][ T6860] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.068103][ T8110] Bluetooth: hci3: command 0x040f tx timeout [ 162.074523][ T6860] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.083390][ T6860] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.106703][ T6868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.125111][ T6864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.137969][ T6864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.162051][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.173799][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.182809][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.191189][ T2471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.213914][ T6876] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.282528][ T6868] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.308367][ T2639] Bluetooth: hci4: command 0x040f tx timeout [ 162.320862][ T6864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.329276][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.336700][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.345183][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.353632][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.363177][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.373646][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.382352][ T8110] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.389513][ T8110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.397951][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.405463][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.498564][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.518689][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 162.533841][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.546019][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.565550][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.574736][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.581896][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.599496][ T6862] device veth0_macvtap entered promiscuous mode [ 162.614191][ T6866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.627835][ T7876] Bluetooth: hci5: command 0x040f tx timeout [ 162.662094][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.672995][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 162.690667][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.697945][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.705460][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.728282][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.744042][ T2639] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.751706][ T2639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.759832][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.768812][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.777631][ T2639] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.784955][ T2639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.793730][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.803491][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.813766][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 162.822367][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 162.831469][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 162.851658][ T6862] device veth1_macvtap entered promiscuous mode [ 162.927666][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.937982][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.946754][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.967552][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.976176][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.986444][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.002987][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.011189][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.045216][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.059198][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.071234][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.082705][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.094399][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.105393][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.122572][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.133597][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.156794][ T6868] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 163.171776][ T6868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.189254][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.200328][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.216771][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 163.231097][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.243956][ T6862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.252793][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.263406][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.281207][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.292244][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.304750][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.315456][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.328671][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 163.336665][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.346118][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.364298][ T8183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.381683][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.391126][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.401741][ T8183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.410629][ T8183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.424515][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.446803][ T6866] device veth0_vlan entered promiscuous mode [ 163.470402][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.480388][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.494140][ T6862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 163.506290][ T6862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.507308][ T8110] Bluetooth: hci0: command 0x0419 tx timeout [ 163.519785][ T6862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.549878][ T6864] device veth0_vlan entered promiscuous mode [ 163.565298][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.576654][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.591948][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 163.602210][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 19:40:43 executing program 0: syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @empty, {[@generic={0x94, 0x2}]}}, @timestamp={0x11, 0x11}}}}}, 0x0) [ 163.620583][ T6862] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.632293][ T6862] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.651674][ T6862] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.664795][ T6862] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.696949][ T6864] device veth1_vlan entered promiscuous mode 19:40:43 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x1e, 0x0, 0x0) [ 163.751646][ T8183] Bluetooth: hci1: command 0x0419 tx timeout [ 163.786073][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 163.795498][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.807360][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.816872][ T6866] device veth1_vlan entered promiscuous mode [ 163.856631][ T6868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.875616][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 163.886091][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 19:40:44 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000300)={0x0}, 0x20) [ 163.920847][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.930528][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.953172][ T6876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.988097][ T8110] Bluetooth: hci2: command 0x0419 tx timeout [ 164.037120][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 164.045838][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 19:40:44 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x37) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="342d51a3efdcab935a1805c74cf68ba94ce89cb2693322fde3608e632047fc4d5f668a8b73e4afb10f216f820189cc150ea3be4c03d92d4f13f449a9550011869e62", 0x42, 0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x20) [ 164.087285][ T6864] device veth0_macvtap entered promiscuous mode [ 164.115848][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 164.139190][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 164.165038][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 19:40:44 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000080)=0x2, 0x4) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x2, 0x4) r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r0, &(0x7f0000000900)={0x2c, 0x0, r5}, 0x10) [ 164.195771][ T2639] Bluetooth: hci3: command 0x0419 tx timeout [ 164.217358][ T6866] device veth0_macvtap entered promiscuous mode [ 164.257830][ T6866] device veth1_macvtap entered promiscuous mode [ 164.283904][ T6864] device veth1_macvtap entered promiscuous mode [ 164.328171][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.334155][ T6866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 164.336098][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.371214][ T6866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.382039][ T6866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 164.393721][ T8183] Bluetooth: hci4: command 0x0419 tx timeout [ 164.403370][ T6866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.447783][ T6866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.520271][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 164.530974][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 164.544470][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 164.553485][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 164.561594][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.570901][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.583661][ T6866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 164.595227][ T6866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.605702][ T6866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 164.616280][ T6866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.629222][ T6866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.657524][ T8183] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.659766][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.666230][ T8183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.682119][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.698522][ T6866] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.709740][ T2639] Bluetooth: hci5: command 0x0419 tx timeout 19:40:44 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000080)=0x2, 0x4) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x2, 0x4) r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r2, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r0, &(0x7f0000000900)={0x2c, 0x0, r5}, 0x10) [ 164.715850][ T6866] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.724970][ T6866] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.734619][ T6866] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.789124][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 164.814540][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.830707][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.846327][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.866188][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.895396][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 164.918412][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.929126][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 164.940713][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.952130][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 164.962996][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.976595][ T6864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.028928][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 165.043614][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 165.064451][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 19:40:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_smc={0xfe, 0x5}]}}}}}}}}, 0x0) [ 165.085695][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.098741][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 165.110022][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.120648][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 165.133201][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.149038][ T6864] batman_adv: batadv0: Interface activated: batadv_slave_1 19:40:45 executing program 1: sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@assoc={0x18}], 0x18}], 0x1, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000140)="00b5", &(0x7f0000000040)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000340), &(0x7f0000000400)}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000440)={r0, &(0x7f0000000340), &(0x7f0000000400)}, 0x20) [ 165.209662][ T8246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 165.223086][ T8246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.269087][ T8246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.286875][ T8246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.309877][ T6864] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.331494][ T6864] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.348025][ T6864] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.370103][ T6864] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.397747][ T6876] device veth0_vlan entered promiscuous mode [ 165.423991][ T6868] device veth0_vlan entered promiscuous mode [ 165.456653][ T8246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.465415][ T8246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.478981][ T8246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.488638][ T8246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.498972][ T8246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.511387][ T8246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.557269][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.565205][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.631150][ T6868] device veth1_vlan entered promiscuous mode [ 165.657579][ T8246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 165.665567][ T8246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 165.692427][ T6876] device veth1_vlan entered promiscuous mode [ 165.750252][ T8196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.776373][ T8196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.818926][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 165.847736][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 165.855977][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 165.868145][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.885712][ T6868] device veth0_macvtap entered promiscuous mode [ 165.909970][ T8196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.910907][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 165.941426][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 165.956556][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 165.964380][ T8196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.976715][ T6868] device veth1_macvtap entered promiscuous mode [ 166.031228][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 166.044080][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 166.105837][ T172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.114442][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.146881][ T172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.158400][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.174860][ T6876] device veth0_macvtap entered promiscuous mode [ 166.198327][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 166.206843][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 166.218226][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 166.229510][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.240134][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 166.251109][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.261353][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 166.277416][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.287655][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 19:40:46 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0xf2f9, 0x0, 0x3, 0x0, 0x1}, 0x40) 19:40:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x48, r1, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}]}]}, 0x48}}, 0x0) [ 166.338635][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.367762][ T6868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.378876][ T6876] device veth1_macvtap entered promiscuous mode [ 166.402553][ T8246] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 166.419179][ T8246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.448302][ T8246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.470785][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 166.483442][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.494789][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 166.506740][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.518018][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 166.537023][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.546846][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 166.577018][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.598481][ T6868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.645939][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 166.655262][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 166.674720][ T6868] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.685266][ T6868] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.701756][ T6868] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.747092][ T6868] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.767656][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 166.784616][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.806003][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 166.826177][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.840937][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 166.854119][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.864013][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 166.875342][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.885374][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 166.895847][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.907744][ T6876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.941994][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.953133][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.966630][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 166.981389][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.993045][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 167.003552][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.013459][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 167.024405][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.035505][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 167.046019][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.055880][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 167.066381][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.078930][ T6876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.091905][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.101419][ T2639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 167.117528][ T6876] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.127204][ T6876] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.135880][ T6876] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.145495][ T6876] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.320102][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.320853][ T8196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.332630][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.350966][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 167.355617][ T8196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.368759][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 167.412465][ T172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.425423][ T172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.458512][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 167.474305][ T8196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.485710][ T8196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.500449][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 167.554381][ T8350] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 19:40:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK_NETNSID={0x8}]}, 0x3c}}, 0x0) 19:40:47 executing program 1: bpf$OBJ_GET_PROG(0x10, &(0x7f0000000040)={0x0, 0x25}, 0x10) 19:40:47 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='ext4_da_update_reserve_space\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000140)={'netpci0'}, 0xa) 19:40:47 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 19:40:47 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 19:40:47 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x1c0, 0x1c0, 0x1c0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@ip={@local, @multicast2, 0x0, 0x0, 'veth1_vlan\x00', 'veth0\x00', {}, {}, 0x0, 0x7}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 19:40:47 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="8dd71a5e1c094da4d019afb33033", 0x0, 0x10000, 0x0, 0x0, 0x4b, &(0x7f0000000000), &(0x7f0000001300)="293e07d15a352b2e14f4767ed316a184956156bbbc705b4804d2c7e2f1481b49c6b49b73ee5b6c9fcb721d42440b448cf6aa22cd129a9269fbc1f7d2f749dba24a79eafffe3978aced77d969c7ea29703f3eb4ac23bff60b5032e17be7d73e513b130a0dbb74b9c2c3f38b4178c045bd7f5ffeb689ec8c9d300051cf98fb67bd0d2ceb021f2fdf2143"}, 0x28) 19:40:47 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) getsockname$netlink(r0, 0x0, &(0x7f0000000100)) 19:40:47 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x18, 0x0, &(0x7f0000000040)) 19:40:48 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x143, 0x0) 19:40:48 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x48}, {0x6}]}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0) 19:40:48 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000007c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000700000095000007000000009500a505000000007751e8ba639a6788a341cc0355fedbe9d8f3b423cdacfa7e32fe0231368b2264f9dc3f45f7ffffffb0e1a98d8665522be18bd10a48b043ccc42646d25dfd73a0e0ca7fc2506a0f68a7d06d7535f7866907dc6751dfb201000000ae669e173a649c1cfd6587d452d64e7cc979d77578f4c35235138d5521f9453559c329890e47b31b755ac9f15da860e8efbc6f2b2a3e31730079979949b4f90c89bf86384032200d2476d846887136a09b31329d24b5ba4e2c1f62173367d6b361366ba12d6ec6de7a0ac53141bf0a30f3fb7d5d06ec0400000082c24504ada2ac2b2a3e8566fa6012e983fdb6caba1c5cfcbe142b4a6e228ac870bd1a0dfd514cfd4d227927fcda2b49d7442ca2fa2586dbea086780a8856765389711d1a2313c0d6d8188fbe2a47e9d12c599608abf7bdb2383f2a126c8279493997ac49c1b83ea23d41064991516f834d3154a163ab30118b171c3de4cc2e689ce2bc99e1b3ae9d3241c8f22633ae3f1ba4680ec3eb1e0239bbdf084d529c58ccacec3ea7e722b43b1e09b3c381c78902d69712fd9ff72a49a4c676e4562a540ad59d5d3e4da634808061993544bcdf938b86c72754cfa54264fd409b3871386e3a2e95e259732c4a8426bfa07424583dc4b04c73052b0c24b14cbab37c963d6929d8c34fbf9fde83cd90c09f4f969e7708e5c7c0d4f5a585ce62f649d761a5827ed9eded6897b64bb0a"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='ext4_da_update_reserve_space\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000140)={'netpci0'}, 0xa) 19:40:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}}, 0x0) 19:40:48 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, &(0x7f00000066c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000001080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x0, 0x0, [], [@enc_lim]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x0, 0x28, [], [@enc_lim, @calipso={0x7, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}]}}}], 0x38}}], 0x2, 0x0) 19:40:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x24, 0x0, &(0x7f0000000040)) 19:40:48 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)=ANY=[@ANYBLOB="900e000030003deb0000000000000000000000007c0e0100780e01000a0001007065646974000000640e0280200e02000000000000002576a6ac0000000000000000000003000000000000000000000000000000000000000000000000000000000000000000001a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c9a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000034a4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400005"], 0xe90}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 19:40:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x8, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x38}}, 0x0) [ 168.126078][ T8388] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 19:40:48 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x100000003, 0x6c0d, 0x1, 0x12}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080), 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) [ 168.180936][ T8392] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 19:40:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}}, 0x0) 19:40:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x9}]}}}]}, 0x38}}, 0x0) 19:40:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6bd, 0x0, &(0x7f0000000140)) [ 168.280927][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 19:40:48 executing program 1: syz_emit_ethernet(0x6a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x7}, @random="7deb01b90100", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @local, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@local}, {@local}, {@multicast1}, {@empty}, {@loopback}]}]}}}}}}}, 0x0) 19:40:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x7b, 0x11, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 168.389067][ T8404] netlink: 'syz-executor.0': attribute type 9 has an invalid length. 19:40:48 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x15, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0x17, 0x0, 0x0, 0x84010000}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) 19:40:48 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003f00)=@newqdisc={0x154, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x128, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14}, @TCA_RED_FLAGS={0xc}]}}]}, 0x154}}, 0x0) 19:40:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000000)='\t', 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, 0x0, 0x0, 0x10701, 0x0, 0x0) 19:40:48 executing program 2: r0 = socket(0xa, 0x3, 0x7) getpeername$packet(r0, 0x0, 0x0) 19:40:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @empty}]}, 0x2c}}, 0x0) 19:40:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) shutdown(r0, 0x0) 19:40:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) 19:40:48 executing program 4: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="7000000000011905030000000000000002000000240001001400010008000100ffffffff08000200ac1e00010c0002000500010000000000240002000c00020005000100000000001400010008000100e000010208000200ff00000008000700000000000c0005"], 0x70}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) [ 168.649664][ T8417] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 19:40:48 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000002c00)={'ip6tnl0\x00', 0x0}) 19:40:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0xf, 0x0, "0c9e089c1b4a01860b479037f43d22e57a07f7bd417eb48821996aff1e7154e746be4d7686455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x2f, 0x0, "a1c1dd75a68473b03e10951cd4d3c485bcc21470e44122564285f85f2f31e015f79363aed40040000000000000010000400000000000000000a9b8fb2500"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, 0x0, 0x0, 0x12, 0x0, "0c9e089c1b4a01860b4704000000bd417eb48a21020000007554e746be4db786455261c425a7519c063ed04e620dabd307a2c4fa3838bf399ad5bd35f219c7d88d13000000000000000200"}, 0xd8) [ 168.792265][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 19:40:49 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="2b206d8c4843b3977b7ea49da2aa", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 19:40:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x9) syz_emit_ethernet(0xb6, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x2}, @local, {[@rr={0x6, 0x3}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x400000000000033e, 0x2, 0x0, 0x0, 0x0, {[@generic={0x50, 0x3, "b7"}, @mss={0x2, 0x4}, @fastopen={0x22, 0x8, "2c326560060e"}, @fastopen={0xb5, 0xa, "cc75182e5bb785"}, @mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0x7, "985f1dc2bf"}, @mptcp=@mp_join={0x1e, 0x3}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}, 0x0) [ 168.835492][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 19:40:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000000024000b0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000c000100696e6772657373"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0xc}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8}]}}]}, 0x38}}, 0x0) 19:40:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0)='ethtool\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x38, r1, 0x57270af2cdb81989, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x38}}, 0x0) 19:40:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x101}, 0x14}}, 0x0) 19:40:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000240)={0x18, 0x6d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) [ 169.017280][ T8445] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 19:40:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 19:40:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000006c00050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006c6f00000000000000000000000000001800348014003500776730b9a2e03978a6c1b999ac7d7fba"], 0x4c}}, 0x0) [ 169.106050][ T8448] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 19:40:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000480)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 19:40:49 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5f00fe01b2a4a280930206030000000001000000003900090035004068060000001900154002000000000022dc1338d54400009b84136ef75afb83de44110016", 0x47}], 0x1}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0x4240a2a0) socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 19:40:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000000024000b0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000c000100696e6772657373"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0xc}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8}]}}]}, 0x38}}, 0x0) 19:40:49 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{&(0x7f0000000040)={0xa, 0x4e1e, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @dev}}}}], 0x28}}], 0x2, 0x0) [ 169.421291][ T8467] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 169.476141][ T8470] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.3'. 19:40:49 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="2b206d8c4843b3977b7ea49da2aa", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 19:40:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bond_slave_1\x00', &(0x7f0000000100)=@ethtool_gstrings={0x1b, 0x1}}) 19:40:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/158, &(0x7f0000000100)=0x9e) 19:40:49 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="000000000000000004000e000c0001007463696e6465780044000200400006003c00010001"], 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 19:40:49 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x0, 0x0, 0x2, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd06, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 19:40:50 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x3, 0x5, 0x5}, 0x40) bpf$MAP_UPDATE_ELEM(0x16, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) [ 169.845523][ T8484] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:40:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {0x2}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0) 19:40:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @mcast2}}) 19:40:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x0, 0x2000}, 0x40) 19:40:50 executing program 3: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a8200040090f7c10f4b31901b77481e35fd008a0009"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 19:40:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x5450, 0x0) 19:40:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x60000840) 19:40:50 executing program 1: clock_gettime(0x0, &(0x7f0000000040)={0x0}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x19, &(0x7f0000000180)={r0}, 0x10) 19:40:51 executing program 1: r0 = socket(0xa, 0x3, 0x20) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x1c) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 19:40:51 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) [ 277.826534][ T2639] Bluetooth: hci0: command 0x0406 tx timeout [ 277.832578][ T2639] Bluetooth: hci2: command 0x0406 tx timeout [ 277.846415][ T2639] Bluetooth: hci1: command 0x0406 tx timeout [ 282.946377][ T12] Bluetooth: hci4: command 0x0406 tx timeout [ 282.946398][ T46] Bluetooth: hci3: command 0x0406 tx timeout [ 282.966350][ T46] Bluetooth: hci5: command 0x0406 tx timeout [ 329.506169][ T1172] INFO: task kworker/u4:0:7 blocked for more than 143 seconds. [ 329.513774][ T1172] Not tainted 5.9.0-rc6-syzkaller #0 [ 329.522919][ T1172] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 329.544799][ T1172] task:kworker/u4:0 state:D stack:26528 pid: 7 ppid: 2 flags:0x00004000 [ 329.564327][ T1172] Workqueue: tc_filter_workqueue tcindex_partial_destroy_work [ 329.574244][ T1172] Call Trace: [ 329.587442][ T1172] __schedule+0xec9/0x2280 [ 329.591882][ T1172] ? io_schedule_timeout+0x140/0x140 [ 329.610272][ T1172] schedule+0xd0/0x2a0 [ 329.614373][ T1172] schedule_preempt_disabled+0xf/0x20 [ 329.625150][ T1172] __mutex_lock+0x3e2/0x10e0 [ 329.642148][ T1172] ? lock_downgrade+0x830/0x830 [ 329.651174][ T1172] ? tcindex_partial_destroy_work+0x13/0x50 [ 329.666841][ T1172] ? mutex_lock_io_nested+0xf60/0xf60 [ 329.672246][ T1172] ? process_one_work+0x85f/0x1670 [ 329.688340][ T1172] ? lock_release+0x8f0/0x8f0 [ 329.693051][ T1172] ? _raw_spin_unlock_irq+0x1f/0x80 [ 329.709033][ T1172] tcindex_partial_destroy_work+0x13/0x50 [ 329.714785][ T1172] process_one_work+0x94c/0x1670 [ 329.731744][ T1172] ? lock_release+0x8f0/0x8f0 [ 329.743482][ T1172] ? pwq_dec_nr_in_flight+0x320/0x320 [ 329.766997][ T1172] ? rwlock_bug.part.0+0x90/0x90 [ 329.772020][ T1172] ? lockdep_hardirqs_off+0x96/0xd0 [ 329.786100][ T1172] worker_thread+0x64c/0x1120 [ 329.790809][ T1172] ? process_one_work+0x1670/0x1670 [ 329.796008][ T1172] kthread+0x3b5/0x4a0 [ 329.816115][ T1172] ? __kthread_bind_mask+0xc0/0xc0 [ 329.821261][ T1172] ret_from_fork+0x1f/0x30 [ 329.825821][ T1172] INFO: task syz-executor.4:8484 blocked for more than 143 seconds. [ 329.846072][ T1172] Not tainted 5.9.0-rc6-syzkaller #0 [ 329.851885][ T1172] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 329.886103][ T1172] task:syz-executor.4 state:D stack:27160 pid: 8484 ppid: 6868 flags:0x00000004 [ 329.895333][ T1172] Call Trace: [ 329.916239][ T1172] __schedule+0xec9/0x2280 [ 329.920712][ T1172] ? io_schedule_timeout+0x140/0x140 [ 329.926009][ T1172] schedule+0xd0/0x2a0 [ 329.937120][ T1172] schedule_preempt_disabled+0xf/0x20 [ 329.944430][ T1172] __mutex_lock+0x3e2/0x10e0 [ 329.955870][ T1172] ? rtnetlink_rcv_msg+0x3f9/0xad0 [ 329.962422][ T1172] ? mutex_lock_io_nested+0xf60/0xf60 [ 329.974285][ T1172] ? rtnetlink_rcv_msg+0x3c3/0xad0 [ 329.984628][ T1172] ? lock_is_held_type+0xbb/0xf0 [ 330.002391][ T1172] rtnetlink_rcv_msg+0x3f9/0xad0 [ 330.010278][ T1172] ? rtnetlink_put_metrics+0x510/0x510 [ 330.015819][ T1172] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 330.029284][ T1172] ? lock_is_held_type+0xbb/0xf0 [ 330.034294][ T1172] netlink_rcv_skb+0x15a/0x430 [ 330.051349][ T1172] ? rtnetlink_put_metrics+0x510/0x510 [ 330.059655][ T1172] ? netlink_ack+0xa10/0xa10 [ 330.064274][ T1172] netlink_unicast+0x533/0x7d0 [ 330.074904][ T1172] ? netlink_attachskb+0x810/0x810 [ 330.083116][ T1172] ? __phys_addr_symbol+0x2c/0x70 [ 330.095829][ T1172] ? __check_object_size+0x171/0x3e4 [ 330.112143][ T1172] netlink_sendmsg+0x856/0xd90 [ 330.121731][ T1172] ? netlink_unicast+0x7d0/0x7d0 [ 330.134844][ T1172] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 330.155775][ T1172] ? netlink_unicast+0x7d0/0x7d0 [ 330.163500][ T1172] sock_sendmsg+0xcf/0x120 [ 330.178031][ T1172] ____sys_sendmsg+0x6e8/0x810 [ 330.182825][ T1172] ? kernel_sendmsg+0x50/0x50 [ 330.195064][ T1172] ? do_recvmmsg+0x6d0/0x6d0 [ 330.204532][ T1172] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 330.222496][ T1172] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 330.236160][ T1172] ___sys_sendmsg+0xf3/0x170 [ 330.240776][ T1172] ? sendmsg_copy_msghdr+0x160/0x160 [ 330.256020][ T1172] ? __fget_files+0x272/0x400 [ 330.262219][ T1172] ? lock_downgrade+0x830/0x830 [ 330.275675][ T1172] ? find_held_lock+0x2d/0x110 [ 330.280966][ T1172] ? __fget_files+0x294/0x400 [ 330.285665][ T1172] ? __fget_light+0xea/0x280 [ 330.299163][ T1172] __sys_sendmsg+0xe5/0x1b0 [ 330.303682][ T1172] ? __sys_sendmsg_sock+0xb0/0xb0 [ 330.313358][ T1172] ? check_preemption_disabled+0x50/0x130 [ 330.323583][ T1172] ? syscall_enter_from_user_mode+0x1d/0x60 [ 330.334941][ T1172] do_syscall_64+0x2d/0x70 [ 330.343922][ T1172] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 330.351077][ T1172] RIP: 0033:0x45dd99 [ 330.354997][ T1172] Code: Bad RIP value. [ 330.359461][ T1172] RSP: 002b:00007fbe941e5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.368320][ T1172] RAX: ffffffffffffffda RBX: 000000000002e5c0 RCX: 000000000045dd99 [ 330.376646][ T1172] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 330.384630][ T1172] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 330.394450][ T1172] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 330.403156][ T1172] R13: 00007ffdb9570b2f R14: 00007fbe941e69c0 R15: 000000000118bf2c [ 330.411627][ T1172] INFO: task syz-executor.4:8509 blocked for more than 144 seconds. [ 330.420256][ T1172] Not tainted 5.9.0-rc6-syzkaller #0 [ 330.426495][ T1172] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 330.435171][ T1172] task:syz-executor.4 state:D stack:28320 pid: 8509 ppid: 6868 flags:0x00000004 [ 330.445950][ T1172] Call Trace: [ 330.449697][ T1172] __schedule+0xec9/0x2280 [ 330.455305][ T1172] ? io_schedule_timeout+0x140/0x140 [ 330.461754][ T1172] schedule+0xd0/0x2a0 [ 330.465835][ T1172] schedule_preempt_disabled+0xf/0x20 [ 330.480757][ T1172] __mutex_lock+0x3e2/0x10e0 [ 330.485374][ T1172] ? rtnetlink_rcv_msg+0x3f9/0xad0 [ 330.490885][ T1172] ? mutex_lock_io_nested+0xf60/0xf60 [ 330.496719][ T1172] ? rtnetlink_rcv_msg+0x3c3/0xad0 [ 330.501864][ T1172] ? lock_is_held_type+0xbb/0xf0 [ 330.507314][ T1172] rtnetlink_rcv_msg+0x3f9/0xad0 [ 330.512275][ T1172] ? rtnetlink_put_metrics+0x510/0x510 [ 330.519475][ T1172] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 330.524776][ T1172] ? lock_is_held_type+0xbb/0xf0 [ 330.530114][ T1172] netlink_rcv_skb+0x15a/0x430 [ 330.534951][ T1172] ? rtnetlink_put_metrics+0x510/0x510 [ 330.540996][ T1172] ? netlink_ack+0xa10/0xa10 [ 330.545617][ T1172] netlink_unicast+0x533/0x7d0 [ 330.551720][ T1172] ? netlink_attachskb+0x810/0x810 [ 330.558838][ T1172] ? __phys_addr_symbol+0x2c/0x70 [ 330.563892][ T1172] ? __check_object_size+0x171/0x3e4 [ 330.578018][ T1172] netlink_sendmsg+0x856/0xd90 [ 330.582801][ T1172] ? netlink_unicast+0x7d0/0x7d0 [ 330.593856][ T1172] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 330.602304][ T1172] ? netlink_unicast+0x7d0/0x7d0 [ 330.613068][ T1172] sock_sendmsg+0xcf/0x120 [ 330.620701][ T1172] ____sys_sendmsg+0x331/0x810 [ 330.625480][ T1172] ? kernel_sendmsg+0x50/0x50 [ 330.642023][ T1172] ? do_recvmmsg+0x6d0/0x6d0 [ 330.648172][ T1172] ? __lock_acquire+0x164a/0x5780 [ 330.653215][ T1172] ___sys_sendmsg+0xf3/0x170 [ 330.668065][ T1172] ? sendmsg_copy_msghdr+0x160/0x160 [ 330.673367][ T1172] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 330.685193][ T1172] ? __fget_files+0x272/0x400 [ 330.692993][ T1172] ? lock_is_held_type+0xbb/0xf0 [ 330.703850][ T1172] ? find_held_lock+0x2d/0x110 [ 330.713145][ T1172] ? __might_fault+0x11f/0x1d0 [ 330.723936][ T1172] ? lock_downgrade+0x830/0x830 [ 330.731969][ T1172] ? lock_is_held_type+0xbb/0xf0 [ 330.743046][ T1172] __sys_sendmmsg+0x195/0x480 [ 330.750822][ T1172] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 330.755884][ T1172] ? check_preemption_disabled+0x50/0x130 [ 330.762850][ T1172] ? _copy_to_user+0x126/0x160 [ 330.769028][ T1172] ? put_timespec64+0xcb/0x120 [ 330.773793][ T1172] ? ns_to_timespec64+0xc0/0xc0 [ 330.780151][ T1172] ? lock_is_held_type+0xbb/0xf0 [ 330.785101][ T1172] ? syscall_enter_from_user_mode+0x1d/0x60 [ 330.791706][ T1172] __x64_sys_sendmmsg+0x99/0x100 [ 330.797242][ T1172] ? syscall_enter_from_user_mode+0x1d/0x60 [ 330.803145][ T1172] do_syscall_64+0x2d/0x70 [ 330.807917][ T1172] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 330.813809][ T1172] RIP: 0033:0x45dd99 [ 330.818970][ T1172] Code: Bad RIP value. [ 330.823041][ T1172] RSP: 002b:00007fbe94182c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 330.832719][ T1172] RAX: ffffffffffffffda RBX: 0000000000027f40 RCX: 000000000045dd99 [ 330.841529][ T1172] RDX: 010efe10675dec16 RSI: 0000000020000200 RDI: 0000000000000003 [ 330.851096][ T1172] RBP: 000000000118c160 R08: 0000000000000000 R09: 0000000000000000 [ 330.859942][ T1172] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118c124 [ 330.869799][ T1172] R13: 00007ffdb9570b2f R14: 00007fbe941839c0 R15: 000000000118c124 [ 330.879553][ T1172] INFO: task syz-executor.5:8491 blocked for more than 144 seconds. [ 330.888385][ T1172] Not tainted 5.9.0-rc6-syzkaller #0 [ 330.894196][ T1172] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 330.905496][ T1172] task:syz-executor.5 state:D stack:28136 pid: 8491 ppid: 6876 flags:0x00000004 [ 330.916803][ T1172] Call Trace: [ 330.920109][ T1172] __schedule+0xec9/0x2280 [ 330.924550][ T1172] ? io_schedule_timeout+0x140/0x140 [ 330.931548][ T1172] schedule+0xd0/0x2a0 [ 330.935657][ T1172] schedule_preempt_disabled+0xf/0x20 [ 330.942232][ T1172] __mutex_lock+0x3e2/0x10e0 [ 330.947860][ T1172] ? ethnl_default_doit+0x2c6/0x9d0 [ 330.953079][ T1172] ? mutex_lock_io_nested+0xf60/0xf60 [ 330.966132][ T1172] ? kfree+0x221/0x2b0 [ 330.970214][ T1172] ? check_preemption_disabled+0x50/0x130 [ 330.975925][ T1172] ? kfree+0x221/0x2b0 [ 330.997011][ T1172] ? ethnl_default_parse+0x22b/0x300 [ 331.002341][ T1172] ethnl_default_doit+0x2c6/0x9d0 [ 331.010697][ T1172] ? ethnl_reply_init+0x1f0/0x1f0 [ 331.015798][ T1172] ? __radix_tree_lookup+0x1f3/0x290 [ 331.032944][ T1172] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 331.044011][ T1172] genl_rcv_msg+0x61d/0x980 [ 331.052841][ T1172] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 331.064000][ T1172] ? lock_release+0x8f0/0x8f0 [ 331.074367][ T1172] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 331.084027][ T1172] netlink_rcv_skb+0x15a/0x430 [ 331.093883][ T1172] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 331.105101][ T1172] ? netlink_ack+0xa10/0xa10 [ 331.114134][ T1172] genl_rcv+0x24/0x40 [ 331.125925][ T1172] netlink_unicast+0x533/0x7d0 [ 331.134991][ T1172] ? netlink_attachskb+0x810/0x810 [ 331.144290][ T1172] ? __phys_addr_symbol+0x2c/0x70 [ 331.153641][ T1172] ? __check_object_size+0x171/0x3e4 [ 331.163289][ T1172] netlink_sendmsg+0x856/0xd90 [ 331.173191][ T1172] ? netlink_unicast+0x7d0/0x7d0 [ 331.182489][ T1172] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 331.192106][ T1172] ? netlink_unicast+0x7d0/0x7d0 [ 331.202194][ T1172] sock_sendmsg+0xcf/0x120 [ 331.211053][ T1172] ____sys_sendmsg+0x6e8/0x810 [ 331.215837][ T1172] ? kernel_sendmsg+0x50/0x50 [ 331.224782][ T1172] ? do_recvmmsg+0x6d0/0x6d0 [ 331.241358][ T1172] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 331.251523][ T1172] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 331.261706][ T1172] ___sys_sendmsg+0xf3/0x170 [ 331.272094][ T1172] ? sendmsg_copy_msghdr+0x160/0x160 [ 331.286257][ T1172] ? __fget_files+0x272/0x400 [ 331.290982][ T1172] ? lock_downgrade+0x830/0x830 [ 331.295844][ T1172] ? find_held_lock+0x2d/0x110 [ 331.309024][ T1172] ? __fget_files+0x294/0x400 [ 331.313723][ T1172] ? __fget_light+0xea/0x280 [ 331.323842][ T1172] __sys_sendmsg+0xe5/0x1b0 [ 331.331212][ T1172] ? __sys_sendmsg_sock+0xb0/0xb0 [ 331.343595][ T1172] ? check_preemption_disabled+0x50/0x130 [ 331.353993][ T1172] ? syscall_enter_from_user_mode+0x1d/0x60 [ 331.365532][ T1172] do_syscall_64+0x2d/0x70 [ 331.374100][ T1172] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 331.385772][ T1172] RIP: 0033:0x45dd99 [ 331.392521][ T1172] Code: Bad RIP value. [ 331.402291][ T1172] RSP: 002b:00007f744f2aac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.413576][ T1172] RAX: ffffffffffffffda RBX: 0000000000029140 RCX: 000000000045dd99 [ 331.436204][ T1172] RDX: 0000000000000000 RSI: 0000000020000ac0 RDI: 0000000000000003 [ 331.444211][ T1172] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 331.463684][ T1172] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 331.473202][ T1172] R13: 00007ffe331a3c9f R14: 00007f744f2ab9c0 R15: 000000000118bf2c [ 331.483000][ T1172] INFO: task syz-executor.5:8514 blocked for more than 145 seconds. [ 331.492082][ T1172] Not tainted 5.9.0-rc6-syzkaller #0 [ 331.498552][ T1172] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.508002][ T1172] task:syz-executor.5 state:D stack:28408 pid: 8514 ppid: 6876 flags:0x00000004 [ 331.517601][ T1172] Call Trace: [ 331.520910][ T1172] __schedule+0xec9/0x2280 [ 331.525349][ T1172] ? io_schedule_timeout+0x140/0x140 [ 331.531145][ T1172] schedule+0xd0/0x2a0 [ 331.535238][ T1172] schedule_preempt_disabled+0xf/0x20 [ 331.542009][ T1172] __mutex_lock+0x3e2/0x10e0 [ 331.547820][ T1172] ? ethnl_default_doit+0x2c6/0x9d0 [ 331.553040][ T1172] ? mutex_lock_io_nested+0xf60/0xf60 [ 331.560551][ T1172] ? kfree+0x221/0x2b0 [ 331.564637][ T1172] ? check_preemption_disabled+0x50/0x130 [ 331.573529][ T1172] ? kfree+0x221/0x2b0 [ 331.579644][ T1172] ? ethnl_default_parse+0x22b/0x300 [ 331.584947][ T1172] ethnl_default_doit+0x2c6/0x9d0 [ 331.591499][ T1172] ? ethnl_reply_init+0x1f0/0x1f0 [ 331.597419][ T1172] ? __radix_tree_lookup+0x1f3/0x290 [ 331.602715][ T1172] ? genl_family_rcv_msg_attrs_parse.isra.0+0x8d/0x250 [ 331.610895][ T1172] genl_rcv_msg+0x61d/0x980 [ 331.615417][ T1172] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 331.623720][ T1172] ? lock_release+0x8f0/0x8f0 [ 331.631911][ T1172] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 331.643680][ T1172] netlink_rcv_skb+0x15a/0x430 [ 331.652913][ T1172] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 331.674566][ T1172] ? netlink_ack+0xa10/0xa10 [ 331.682667][ T1172] genl_rcv+0x24/0x40 [ 331.695610][ T1172] netlink_unicast+0x533/0x7d0 [ 331.701272][ T1172] ? netlink_attachskb+0x810/0x810 [ 331.715422][ T1172] ? __phys_addr_symbol+0x2c/0x70 [ 331.721327][ T1172] ? __check_object_size+0x171/0x3e4 [ 331.735711][ T1172] netlink_sendmsg+0x856/0xd90 [ 331.741313][ T1172] ? netlink_unicast+0x7d0/0x7d0 [ 331.755295][ T1172] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 331.763615][ T1172] ? netlink_unicast+0x7d0/0x7d0 [ 331.778016][ T1172] sock_sendmsg+0xcf/0x120 [ 331.782990][ T1172] ____sys_sendmsg+0x6e8/0x810 [ 331.799884][ T1172] ? kernel_sendmsg+0x50/0x50 [ 331.804590][ T1172] ? do_recvmmsg+0x6d0/0x6d0 [ 331.814704][ T1172] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 331.825856][ T1172] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 331.845421][ T1172] ___sys_sendmsg+0xf3/0x170 [ 331.851241][ T1172] ? sendmsg_copy_msghdr+0x160/0x160 [ 331.865735][ T1172] ? __fget_files+0x272/0x400 [ 331.872200][ T1172] ? lock_downgrade+0x830/0x830 [ 331.886012][ T1172] ? find_held_lock+0x2d/0x110 [ 331.894134][ T1172] ? __fget_files+0x294/0x400 [ 331.901465][ T1172] ? __fget_light+0xea/0x280 [ 331.906994][ T1172] __sys_sendmsg+0xe5/0x1b0 [ 331.911602][ T1172] ? __sys_sendmsg_sock+0xb0/0xb0 [ 331.917872][ T1172] ? check_preemption_disabled+0x50/0x130 [ 331.923602][ T1172] ? syscall_enter_from_user_mode+0x1d/0x60 [ 331.930693][ T1172] do_syscall_64+0x2d/0x70 [ 331.935568][ T1172] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 331.942782][ T1172] RIP: 0033:0x45dd99 [ 331.947598][ T1172] Code: Bad RIP value. [ 331.951667][ T1172] RSP: 002b:00007f744f268c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.961336][ T1172] RAX: ffffffffffffffda RBX: 0000000000029140 RCX: 000000000045dd99 [ 331.970181][ T1172] RDX: 0000000000000000 RSI: 0000000020000ac0 RDI: 0000000000000003 [ 331.979883][ T1172] RBP: 000000000118c0b0 R08: 0000000000000000 R09: 0000000000000000 [ 331.990549][ T1172] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118c07c [ 332.001180][ T1172] R13: 00007ffe331a3c9f R14: 00007f744f2699c0 R15: 000000000118c07c [ 332.012511][ T1172] INFO: task syz-executor.0:8496 blocked for more than 145 seconds. [ 332.021409][ T1172] Not tainted 5.9.0-rc6-syzkaller #0 [ 332.029159][ T1172] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 332.038723][ T1172] task:syz-executor.0 state:D stack:28816 pid: 8496 ppid: 6860 flags:0x00004004 [ 332.048793][ T1172] Call Trace: [ 332.052098][ T1172] __schedule+0xec9/0x2280 [ 332.057862][ T1172] ? io_schedule_timeout+0x140/0x140 [ 332.063170][ T1172] schedule+0xd0/0x2a0 [ 332.068846][ T1172] schedule_preempt_disabled+0xf/0x20 [ 332.074257][ T1172] __mutex_lock+0x3e2/0x10e0 [ 332.080260][ T1172] ? dev_ioctl+0x271/0xc40 [ 332.084694][ T1172] ? mutex_lock_io_nested+0xf60/0xf60 [ 332.101252][ T1172] ? dev_load+0xab/0x200 [ 332.105516][ T1172] ? lock_downgrade+0x830/0x830 [ 332.117314][ T1172] ? lock_downgrade+0x830/0x830 [ 332.122195][ T1172] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 332.141696][ T1172] dev_ioctl+0x271/0xc40 [ 332.145973][ T1172] ? _copy_from_user+0x138/0x190 [ 332.161976][ T1172] sock_ioctl+0x57b/0x730 [ 332.168724][ T1172] ? dlci_ioctl_set+0x30/0x30 [ 332.173440][ T1172] ? bpf_lsm_file_ioctl+0x5/0x10 [ 332.186179][ T1172] ? dlci_ioctl_set+0x30/0x30 [ 332.190871][ T1172] __x64_sys_ioctl+0x193/0x200 [ 332.206087][ T1172] do_syscall_64+0x2d/0x70 [ 332.210516][ T1172] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 332.217649][ T1172] RIP: 0033:0x45dd99 [ 332.221544][ T1172] Code: Bad RIP value. [ 332.225604][ T1172] RSP: 002b:00007f085011ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 332.234575][ T1172] RAX: ffffffffffffffda RBX: 000000000001f400 RCX: 000000000045dd99 [ 332.243097][ T1172] RDX: 0000000020000080 RSI: 00000000000089f0 RDI: 0000000000000003 [ 332.253413][ T1172] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 332.261762][ T1172] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 332.270075][ T1172] R13: 00007fffde787c8f R14: 00007f085011b9c0 R15: 000000000118bf2c [ 332.278454][ T1172] INFO: task syz-executor.3:8503 blocked for more than 146 seconds. [ 332.287117][ T1172] Not tainted 5.9.0-rc6-syzkaller #0 [ 332.292923][ T1172] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 332.302676][ T1172] task:syz-executor.3 state:D stack:29336 pid: 8503 ppid: 6866 flags:0x00004004 [ 332.313079][ T1172] Call Trace: [ 332.316766][ T1172] __schedule+0xec9/0x2280 [ 332.321199][ T1172] ? io_schedule_timeout+0x140/0x140 [ 332.326925][ T1172] schedule+0xd0/0x2a0 [ 332.331012][ T1172] schedule_preempt_disabled+0xf/0x20 [ 332.346078][ T1172] __mutex_lock+0x3e2/0x10e0 [ 332.350691][ T1172] ? pipe_write+0x5bd/0x16c0 [ 332.355276][ T1172] ? mutex_lock_io_nested+0xf60/0xf60 [ 332.361884][ T1172] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 332.368248][ T1172] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 332.374071][ T1172] ? lockdep_hardirqs_on+0x53/0x100 [ 332.380889][ T1172] ? _raw_spin_unlock_irqrestore+0x5c/0x90 [ 332.387047][ T1172] ? prepare_to_wait+0x2a0/0x2a0 [ 332.392004][ T1172] pipe_write+0x5bd/0x16c0 [ 332.397563][ T1172] ? anon_pipe_buf_try_steal+0x2a0/0x2a0 [ 332.403402][ T1172] ? add_wait_queue_exclusive+0x180/0x180 [ 332.409642][ T1172] ? aa_path_link+0x2f0/0x2f0 [ 332.414350][ T1172] new_sync_write+0x422/0x650 [ 332.419492][ T1172] ? new_sync_read+0x6e0/0x6e0 [ 332.424277][ T1172] ? lock_downgrade+0x830/0x830 [ 332.429563][ T1172] ? apparmor_file_permission+0x26e/0x4e0 [ 332.435323][ T1172] vfs_write+0x5ad/0x730 [ 332.439992][ T1172] ksys_write+0x1ee/0x250 [ 332.444365][ T1172] ? __ia32_sys_read+0xb0/0xb0 [ 332.449681][ T1172] ? syscall_enter_from_user_mode+0x1d/0x60 [ 332.455590][ T1172] ? check_preemption_disabled+0x50/0x130 [ 332.461733][ T1172] ? syscall_enter_from_user_mode+0x1d/0x60 [ 332.476086][ T1172] do_syscall_64+0x2d/0x70 [ 332.480519][ T1172] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 332.496071][ T1172] RIP: 0033:0x45dd99 [ 332.500337][ T1172] Code: Bad RIP value. [ 332.504421][ T1172] RSP: 002b:00007f95973f4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 332.524109][ T1172] RAX: ffffffffffffffda RBX: 000000000003a880 RCX: 000000000045dd99 [ 332.532817][ T1172] RDX: 000000004240a2a0 RSI: 0000000020000140 RDI: 0000000000000004 [ 332.551223][ T1172] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 332.579591][ T1172] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 332.595292][ T1172] R13: 00007ffef6eaad4f R14: 00007f95973f59c0 R15: 000000000118bf2c [ 332.614194][ T1172] INFO: task syz-executor.3:8505 blocked for more than 146 seconds. [ 332.623617][ T1172] Not tainted 5.9.0-rc6-syzkaller #0 [ 332.636135][ T1172] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 332.644807][ T1172] task:syz-executor.3 state:D stack:28176 pid: 8505 ppid: 6866 flags:0x00000004 [ 332.665354][ T1172] Call Trace: [ 332.672771][ T1172] __schedule+0xec9/0x2280 [ 332.686115][ T1172] ? io_schedule_timeout+0x140/0x140 [ 332.691437][ T1172] schedule+0xd0/0x2a0 [ 332.695511][ T1172] schedule_preempt_disabled+0xf/0x20 [ 332.714726][ T1172] __mutex_lock+0x3e2/0x10e0 [ 332.721394][ T1172] ? rtnetlink_rcv_msg+0x3f9/0xad0 [ 332.734113][ T1172] ? mutex_lock_io_nested+0xf60/0xf60 [ 332.741633][ T1172] ? rtnetlink_rcv_msg+0x3c3/0xad0 [ 332.754257][ T1172] ? lock_is_held_type+0xbb/0xf0 [ 332.762049][ T1172] rtnetlink_rcv_msg+0x3f9/0xad0 [ 332.775383][ T1172] ? rtnetlink_put_metrics+0x510/0x510 [ 332.794785][ T1172] ? lock_is_held_type+0xbb/0xf0 [ 332.800463][ T1172] ? __kmalloc_node_track_caller+0x38/0x60 [ 332.826091][ T1172] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 332.831410][ T1172] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 332.846099][ T1172] ? kmem_cache_alloc_node_trace+0x39d/0x430 [ 332.852186][ T1172] netlink_rcv_skb+0x15a/0x430 [ 332.857503][ T1172] ? rtnetlink_put_metrics+0x510/0x510 [ 332.862979][ T1172] ? netlink_ack+0xa10/0xa10 [ 332.868150][ T1172] netlink_unicast+0x533/0x7d0 [ 332.872933][ T1172] ? netlink_attachskb+0x810/0x810 [ 332.879424][ T1172] ? __phys_addr_symbol+0x2c/0x70 [ 332.884457][ T1172] ? __check_object_size+0x171/0x3e4 [ 332.890188][ T1172] netlink_sendmsg+0x856/0xd90 [ 332.894974][ T1172] ? netlink_unicast+0x7d0/0x7d0 [ 332.900412][ T1172] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 332.905720][ T1172] ? netlink_unicast+0x7d0/0x7d0 [ 332.912455][ T1172] sock_sendmsg+0xcf/0x120 [ 332.919191][ T1172] sock_no_sendpage+0xee/0x130 [ 332.924494][ T1172] ? sk_page_frag_refill+0x1d0/0x1d0 [ 332.930311][ T1172] ? pipe_lock+0x5a/0x70 [ 332.934595][ T1172] ? lock_is_held_type+0xbb/0xf0 [ 332.940022][ T1172] ? sk_page_frag_refill+0x1d0/0x1d0 [ 332.945328][ T1172] sock_sendpage+0xe5/0x140 [ 332.951570][ T1172] ? __sock_recv_ts_and_drops+0x430/0x430 [ 332.966079][ T1172] pipe_to_sendpage+0x2ad/0x380 [ 332.970959][ T1172] ? propagate_umount+0x1c20/0x1c20 [ 332.986078][ T1172] ? mutex_lock_io_nested+0xf60/0xf60 [ 332.991552][ T1172] ? splice_from_pipe_next.part.0+0x2fe/0x3c0 [ 332.998097][ T1172] __splice_from_pipe+0x3dc/0x830 [ 333.003136][ T1172] ? propagate_umount+0x1c20/0x1c20 [ 333.008723][ T1172] generic_splice_sendpage+0xd4/0x140 [ 333.015636][ T1172] ? __splice_from_pipe+0x830/0x830 [ 333.021461][ T1172] ? security_file_permission+0x248/0x560 [ 333.028593][ T1172] ? __splice_from_pipe+0x830/0x830 [ 333.033800][ T1172] do_splice+0xbcd/0x1820 [ 333.039611][ T1172] ? lock_downgrade+0x830/0x830 [ 333.044473][ T1172] ? __might_fault+0x190/0x1d0 [ 333.054093][ T1172] ? splice_from_pipe+0x140/0x140 [ 333.060002][ T1172] ? __fget_files+0x294/0x400 [ 333.064699][ T1172] __x64_sys_splice+0x198/0x250 [ 333.070825][ T1172] do_syscall_64+0x2d/0x70 [ 333.075250][ T1172] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 333.082559][ T1172] RIP: 0033:0x45dd99 [ 333.087224][ T1172] Code: Bad RIP value. [ 333.091295][ T1172] RSP: 002b:00007f95973d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 333.102063][ T1172] RAX: ffffffffffffffda RBX: 00000000000350c0 RCX: 000000000045dd99 [ 333.111244][ T1172] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 333.121607][ T1172] RBP: 000000000118c020 R08: 000000000004ffe0 R09: 0000000000000000 [ 333.130544][ T1172] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bfd4 [ 333.140266][ T1172] R13: 00007ffef6eaad4f R14: 00007f95973d49c0 R15: 000000000118bfd4 [ 333.149130][ T1172] INFO: task syz-executor.3:8524 blocked for more than 147 seconds. [ 333.158028][ T1172] Not tainted 5.9.0-rc6-syzkaller #0 [ 333.163833][ T1172] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.173820][ T1172] task:syz-executor.3 state:D stack:29832 pid: 8524 ppid: 6866 flags:0x00004004 [ 333.185918][ T1172] Call Trace: [ 333.190551][ T1172] __schedule+0xec9/0x2280 [ 333.194986][ T1172] ? io_schedule_timeout+0x140/0x140 [ 333.201736][ T1172] schedule+0xd0/0x2a0 [ 333.205816][ T1172] schedule_preempt_disabled+0xf/0x20 [ 333.212438][ T1172] __mutex_lock+0x3e2/0x10e0 [ 333.218635][ T1172] ? pipe_write+0x5bd/0x16c0 [ 333.223264][ T1172] ? mutex_lock_io_nested+0xf60/0xf60 [ 333.231404][ T1172] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 333.238235][ T1172] ? _raw_spin_unlock_irqrestore+0x6f/0x90 [ 333.244055][ T1172] ? lockdep_hardirqs_on+0x53/0x100 [ 333.251526][ T1172] ? _raw_spin_unlock_irqrestore+0x5c/0x90 [ 333.258269][ T1172] ? prepare_to_wait+0x2a0/0x2a0 [ 333.263230][ T1172] pipe_write+0x5bd/0x16c0 [ 333.268974][ T1172] ? anon_pipe_buf_try_steal+0x2a0/0x2a0 [ 333.274620][ T1172] ? add_wait_queue_exclusive+0x180/0x180 [ 333.281648][ T1172] ? aa_path_link+0x2f0/0x2f0 [ 333.287307][ T1172] new_sync_write+0x422/0x650 [ 333.291994][ T1172] ? new_sync_read+0x6e0/0x6e0 [ 333.298139][ T1172] ? lock_downgrade+0x830/0x830 [ 333.303005][ T1172] ? apparmor_file_permission+0x26e/0x4e0 [ 333.311100][ T1172] vfs_write+0x5ad/0x730 [ 333.315358][ T1172] ksys_write+0x1ee/0x250 [ 333.322129][ T1172] ? __ia32_sys_read+0xb0/0xb0 [ 333.334689][ T1172] ? syscall_enter_from_user_mode+0x1d/0x60 [ 333.342918][ T1172] ? check_preemption_disabled+0x50/0x130 [ 333.366115][ T1172] ? syscall_enter_from_user_mode+0x1d/0x60 [ 333.372040][ T1172] do_syscall_64+0x2d/0x70 [ 333.396124][ T1172] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 333.402046][ T1172] RIP: 0033:0x45dd99 [ 333.405960][ T1172] Code: Bad RIP value. [ 333.421883][ T1172] RSP: 002b:00007f95973b2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 333.436954][ T1172] RAX: ffffffffffffffda RBX: 000000000003a880 RCX: 000000000045dd99 [ 333.444946][ T1172] RDX: 000000004240a2a0 RSI: 0000000020000140 RDI: 0000000000000004 [ 333.455682][ T1172] RBP: 000000000118c0b0 R08: 0000000000000000 R09: 0000000000000000 [ 333.464105][ T1172] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118c07c [ 333.472512][ T1172] R13: 00007ffef6eaad4f R14: 00007f95973b39c0 R15: 000000000118c07c [ 333.480914][ T1172] INFO: task syz-executor.3:8525 blocked for more than 147 seconds. [ 333.490562][ T1172] Not tainted 5.9.0-rc6-syzkaller #0 [ 333.496780][ T1172] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.505468][ T1172] task:syz-executor.3 state:D stack:28048 pid: 8525 ppid: 6866 flags:0x00000004 [ 333.515222][ T1172] Call Trace: [ 333.519175][ T1172] __schedule+0xec9/0x2280 [ 333.524109][ T1172] ? io_schedule_timeout+0x140/0x140 [ 333.537063][ T1172] schedule+0xd0/0x2a0 [ 333.541159][ T1172] schedule_preempt_disabled+0xf/0x20 [ 333.558804][ T1172] __mutex_lock+0x3e2/0x10e0 [ 333.563425][ T1172] ? rtnetlink_rcv_msg+0x3f9/0xad0 [ 333.576131][ T1172] ? mutex_lock_io_nested+0xf60/0xf60 [ 333.581545][ T1172] ? rtnetlink_rcv_msg+0x3c3/0xad0 [ 333.587668][ T1172] ? lock_is_held_type+0xbb/0xf0 [ 333.593113][ T1172] rtnetlink_rcv_msg+0x3f9/0xad0 [ 333.598690][ T1172] ? rtnetlink_put_metrics+0x510/0x510 [ 333.604168][ T1172] ? lock_is_held_type+0xbb/0xf0 [ 333.618340][ T1172] ? __kmalloc_node_track_caller+0x38/0x60 [ 333.624169][ T1172] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 333.631608][ T1172] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 333.637611][ T1172] ? kmem_cache_alloc_node_trace+0x39d/0x430 [ 333.643634][ T1172] netlink_rcv_skb+0x15a/0x430 [ 333.649717][ T1172] ? rtnetlink_put_metrics+0x510/0x510 [ 333.655183][ T1172] ? netlink_ack+0xa10/0xa10 [ 333.661166][ T1172] netlink_unicast+0x533/0x7d0 [ 333.665948][ T1172] ? netlink_attachskb+0x810/0x810 [ 333.675267][ T1172] ? __phys_addr_symbol+0x2c/0x70 [ 333.680784][ T1172] ? __check_object_size+0x171/0x3e4 [ 333.686501][ T1172] netlink_sendmsg+0x856/0xd90 [ 333.691284][ T1172] ? netlink_unicast+0x7d0/0x7d0 [ 333.696660][ T1172] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 333.701964][ T1172] ? netlink_unicast+0x7d0/0x7d0 [ 333.707292][ T1172] sock_sendmsg+0xcf/0x120 [ 333.711724][ T1172] sock_no_sendpage+0xee/0x130 [ 333.716922][ T1172] ? sk_page_frag_refill+0x1d0/0x1d0 [ 333.722211][ T1172] ? pipe_lock+0x5a/0x70 [ 333.726852][ T1172] ? lock_is_held_type+0xbb/0xf0 [ 333.732319][ T1172] ? sk_page_frag_refill+0x1d0/0x1d0 [ 333.738043][ T1172] sock_sendpage+0xe5/0x140 [ 333.742565][ T1172] ? __sock_recv_ts_and_drops+0x430/0x430 [ 333.748766][ T1172] pipe_to_sendpage+0x2ad/0x380 [ 333.753634][ T1172] ? propagate_umount+0x1c20/0x1c20 [ 333.760148][ T1172] ? mutex_lock_io_nested+0xf60/0xf60 [ 333.765527][ T1172] ? splice_from_pipe_next.part.0+0x2fe/0x3c0 [ 333.772936][ T1172] __splice_from_pipe+0x3dc/0x830 [ 333.781071][ T1172] ? propagate_umount+0x1c20/0x1c20 [ 333.786649][ T1172] generic_splice_sendpage+0xd4/0x140 [ 333.792033][ T1172] ? __splice_from_pipe+0x830/0x830 [ 333.797681][ T1172] ? security_file_permission+0x248/0x560 [ 333.803423][ T1172] ? __splice_from_pipe+0x830/0x830 [ 333.809017][ T1172] do_splice+0xbcd/0x1820 [ 333.813374][ T1172] ? lock_downgrade+0x830/0x830 [ 333.818745][ T1172] ? __might_fault+0x190/0x1d0 [ 333.823522][ T1172] ? splice_from_pipe+0x140/0x140 [ 333.829011][ T1172] ? __fget_files+0x294/0x400 [ 333.834793][ T1172] __x64_sys_splice+0x198/0x250 [ 333.856186][ T1172] do_syscall_64+0x2d/0x70 [ 333.860628][ T1172] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 333.867527][ T1172] RIP: 0033:0x45dd99 [ 333.871423][ T1172] Code: Bad RIP value. [ 333.875472][ T1172] RSP: 002b:00007f9597391c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 333.885193][ T1172] RAX: ffffffffffffffda RBX: 00000000000350c0 RCX: 000000000045dd99 [ 333.903403][ T1172] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 333.912544][ T1172] RBP: 000000000118c170 R08: 000000000004ffe0 R09: 0000000000000000 [ 333.922440][ T1172] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118c124 [ 333.931325][ T1172] R13: 00007ffef6eaad4f R14: 00007f95973929c0 R15: 000000000118c124 [ 333.941484][ T1172] [ 333.941484][ T1172] Showing all locks held in the system: [ 333.950940][ T1172] 3 locks held by kworker/u4:0/7: [ 333.955971][ T1172] #0: ffff88821ae42138 ((wq_completion)tc_filter_workqueue){+.+.}-{0:0}, at: process_one_work+0x82b/0x1670 [ 333.983989][ T1172] #1: ffffc90000cdfda8 ((work_completion)(&(rwork)->work)){+.+.}-{0:0}, at: process_one_work+0x85f/0x1670 [ 334.009667][ T1172] #2: ffffffff8b14d548 (rtnl_mutex){+.+.}-{3:3}, at: tcindex_partial_destroy_work+0x13/0x50 [ 334.030165][ T1172] 1 lock held by khungtaskd/1172: [ 334.037117][ T1172] #0: ffffffff8a067f00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 334.047988][ T1172] 3 locks held by kworker/1:2/2639: [ 334.053188][ T1172] #0: ffff88809a3da138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x82b/0x1670 [ 334.065583][ T1172] #1: ffffc90008c6fda8 ((addr_chk_work).work){+.+.}-{0:0}, at: process_one_work+0x85f/0x1670 [ 334.076995][ T1172] #2: ffffffff8b14d548 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xa/0x20 [ 334.087410][ T1172] 2 locks held by kworker/u4:5/2848: [ 334.092729][ T1172] 1 lock held by in:imklog/6550: [ 334.098986][ T1172] #0: ffff88809fbe0170 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 334.110180][ T1172] 1 lock held by syz-executor.4/8484: [ 334.115553][ T1172] #0: ffffffff8b14d548 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3f9/0xad0 [ 334.126549][ T1172] 2 locks held by syz-executor.4/8488: [ 334.132028][ T1172] 1 lock held by syz-executor.4/8509: [ 334.140375][ T1172] #0: ffffffff8b14d548 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3f9/0xad0 [ 334.150881][ T1172] 2 locks held by syz-executor.5/8491: [ 334.157170][ T1172] #0: ffffffff8b1d1bb0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 334.165373][ T1172] #1: ffffffff8b14d548 (rtnl_mutex){+.+.}-{3:3}, at: ethnl_default_doit+0x2c6/0x9d0 [ 334.176493][ T1172] 2 locks held by syz-executor.5/8514: [ 334.181956][ T1172] #0: ffffffff8b1d1bb0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 334.191536][ T1172] #1: ffffffff8b14d548 (rtnl_mutex){+.+.}-{3:3}, at: ethnl_default_doit+0x2c6/0x9d0 [ 334.201904][ T1172] 1 lock held by syz-executor.0/8496: [ 334.208132][ T1172] #0: ffffffff8b14d548 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x271/0xc40 [ 334.236813][ T1172] 1 lock held by syz-executor.3/8503: [ 334.242660][ T1172] #0: ffff8880917bc068 (&pipe->mutex/1){+.+.}-{3:3}, at: pipe_write+0x5bd/0x16c0 [ 334.266107][ T1172] 2 locks held by syz-executor.3/8505: [ 334.271574][ T1172] #0: ffff8880917bc068 (&pipe->mutex/1){+.+.}-{3:3}, at: pipe_lock+0x5a/0x70 [ 334.281102][ T1172] #1: ffffffff8b14d548 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3f9/0xad0 [ 334.299418][ T1172] 1 lock held by syz-executor.3/8524: [ 334.304799][ T1172] #0: ffff8880a84c6468 (&pipe->mutex/1){+.+.}-{3:3}, at: pipe_write+0x5bd/0x16c0 [ 334.331591][ T1172] 2 locks held by syz-executor.3/8525: [ 334.346381][ T1172] #0: ffff8880a84c6468 (&pipe->mutex/1){+.+.}-{3:3}, at: pipe_lock+0x5a/0x70 [ 334.355270][ T1172] #1: ffffffff8b14d548 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3f9/0xad0 [ 334.373089][ T1172] 1 lock held by syz-executor.2/8502: [ 334.378949][ T1172] #0: ffffffff8b14d548 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3a/0x180 [ 334.404530][ T1172] 2 locks held by syz-executor.1/8527: [ 334.410440][ T1172] #0: ffff888084f15210 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: __sock_release+0x86/0x280 [ 334.429987][ T1172] #1: ffffffff8b14d548 (rtnl_mutex){+.+.}-{3:3}, at: ip6mr_sk_done+0xe9/0x370 [ 334.456061][ T1172] 2 locks held by syz-executor.1/8528: [ 334.461524][ T1172] #0: ffff888084f15c90 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: __sock_release+0x86/0x280 [ 334.473856][ T1172] #1: ffffffff8b14d548 (rtnl_mutex){+.+.}-{3:3}, at: ip6mr_sk_done+0xe9/0x370 [ 334.484634][ T1172] [ 334.487799][ T1172] ============================================= [ 334.487799][ T1172] [ 334.498214][ T1172] NMI backtrace for cpu 0 [ 334.502553][ T1172] CPU: 0 PID: 1172 Comm: khungtaskd Not tainted 5.9.0-rc6-syzkaller #0 [ 334.510777][ T1172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.520825][ T1172] Call Trace: [ 334.524183][ T1172] dump_stack+0x198/0x1fd [ 334.528521][ T1172] nmi_cpu_backtrace.cold+0x70/0xb1 [ 334.533722][ T1172] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 334.539357][ T1172] nmi_trigger_cpumask_backtrace+0x1b3/0x223 [ 334.545348][ T1172] watchdog+0xd7d/0x1000 [ 334.549608][ T1172] ? reset_hung_task_detector+0x30/0x30 [ 334.555158][ T1172] kthread+0x3b5/0x4a0 [ 334.559226][ T1172] ? __kthread_bind_mask+0xc0/0xc0 [ 334.564342][ T1172] ret_from_fork+0x1f/0x30 [ 334.569605][ T1172] Sending NMI from CPU 0 to CPUs 1: [ 334.576175][ C1] NMI backtrace for cpu 1 [ 334.576183][ C1] CPU: 1 PID: 8488 Comm: syz-executor.4 Not tainted 5.9.0-rc6-syzkaller #0 [ 334.576189][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.576193][ C1] RIP: 0010:mark_lock+0x8a/0x1660 [ 334.576205][ C1] Code: 20 66 81 e3 ff 1f 0f b7 db be 08 00 00 00 48 89 d8 48 c1 f8 06 48 8d 3c c5 e0 09 0c 8d e8 7e 63 5b 00 48 0f a3 1d 36 8b b0 0b <0f> 83 e3 00 00 00 48 69 db b8 00 00 00 48 81 c3 00 0e 0c 8d 48 8d [ 334.576210][ C1] RSP: 0018:ffffc900055e67f8 EFLAGS: 00000047 [ 334.576219][ C1] RAX: 0000000000000001 RBX: 0000000000000771 RCX: ffffffff815b7ea2 [ 334.576224][ C1] RDX: fffffbfff1a1815a RSI: 0000000000000008 RDI: ffffffff8d0c0ac8 [ 334.576229][ C1] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffffff8d0c0acf [ 334.576235][ C1] R10: fffffbfff1a18159 R11: 0000000000000000 R12: ffff8880a3576cf0 [ 334.576246][ C1] R13: ffff8880a3576cf2 R14: 0000000000000040 R15: ffff8880a3576cd0 [ 334.576252][ C1] FS: 00007fbe941c5700(0000) GS:ffff8880ae500000(0000) knlGS:0000000000000000 [ 334.576257][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 334.576263][ C1] CR2: 00007f5d42e27000 CR3: 00000000a8289000 CR4: 00000000001506e0 [ 334.576268][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 334.576273][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 334.576277][ C1] Call Trace: [ 334.576281][ C1] __lock_acquire+0x8a0/0x5780 [ 334.576285][ C1] ? finish_task_switch+0x1e5/0x790 [ 334.576290][ C1] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 334.576294][ C1] ? __schedule+0xed1/0x2280 [ 334.576298][ C1] lock_acquire+0x1f3/0xaf0 [ 334.576302][ C1] ? tcf_idr_check_alloc+0x78/0x3b0 [ 334.576306][ C1] ? lock_release+0x8f0/0x8f0 [ 334.576311][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 334.576315][ C1] ? lock_is_held_type+0xbb/0xf0 [ 334.576319][ C1] __mutex_lock+0x134/0x10e0 [ 334.576323][ C1] ? tcf_idr_check_alloc+0x78/0x3b0 [ 334.576327][ C1] ? tcf_idr_check_alloc+0x78/0x3b0 [ 334.576332][ C1] ? mutex_lock_io_nested+0xf60/0xf60 [ 334.576336][ C1] ? __mutex_unlock_slowpath+0xe2/0x610 [ 334.576340][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 334.576345][ C1] ? wait_for_completion+0x260/0x260 [ 334.576348][ C1] tcf_idr_check_alloc+0x78/0x3b0 [ 334.576352][ C1] tcf_police_init+0x347/0x13a0 [ 334.576356][ C1] ? tcf_police_cleanup+0x60/0x60 [ 334.576360][ C1] ? find_held_lock+0x2d/0x110 [ 334.576364][ C1] ? tc_lookup_action_n+0xcd/0xf0 [ 334.576368][ C1] tcf_action_init_1+0x1a3/0x990 [ 334.576372][ C1] ? tcf_action_dump_old+0x80/0x80 [ 334.576376][ C1] ? lock_acquire+0x1f3/0xaf0 [ 334.576380][ C1] ? lock_is_held_type+0xbb/0xf0 [ 334.576383][ C1] ? find_held_lock+0x2d/0x110 [ 334.576387][ C1] ? fs_reclaim_release+0x90/0xd0 [ 334.576391][ C1] ? mark_lock+0x82/0x1660 [ 334.576395][ C1] tcf_exts_validate+0x138/0x420 [ 334.576399][ C1] ? tcf_exts_destroy+0xc0/0xc0 [ 334.576403][ C1] ? kmem_cache_alloc_trace+0x18e/0x300 [ 334.576407][ C1] tcindex_set_parms+0x189/0x20d0 [ 334.576411][ C1] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 334.576416][ C1] ? tcindex_alloc_perfect_hash+0x440/0x440 [ 334.576420][ C1] ? __nla_validate_parse+0x2d4/0x2210 [ 334.576424][ C1] ? nla_get_range_signed+0x520/0x520 [ 334.576428][ C1] ? lock_is_held_type+0xbb/0xf0 [ 334.576432][ C1] ? lock_is_held_type+0xbb/0xf0 [ 334.576435][ C1] ? find_held_lock+0x2d/0x110 [ 334.576445][ C1] tcindex_change+0x203/0x2e0 [ 334.576450][ C1] ? tcindex_set_parms+0x20d0/0x20d0 [ 334.576453][ C1] ? tcindex_lookup+0x390/0x390 [ 334.576457][ C1] ? lockdep_rtnl_is_held+0x22/0x30 [ 334.576461][ C1] tc_new_tfilter+0x1398/0x2130 [ 334.576465][ C1] ? tcindex_set_parms+0x20d0/0x20d0 [ 334.576469][ C1] ? tc_del_tfilter+0x15c0/0x15c0 [ 334.576474][ C1] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 334.576478][ C1] ? _raw_spin_unlock_irqrestore+0x5c/0x90 [ 334.576482][ C1] ? lock_is_held_type+0xbb/0xf0 [ 334.576486][ C1] ? security_capable+0x8f/0xc0 [ 334.576489][ C1] ? lock_is_held_type+0xbb/0xf0 [ 334.576493][ C1] ? tc_del_tfilter+0x15c0/0x15c0 [ 334.576497][ C1] rtnetlink_rcv_msg+0x80f/0xad0 [ 334.576501][ C1] ? rtnetlink_put_metrics+0x510/0x510 [ 334.576506][ C1] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 334.576509][ C1] ? lock_is_held_type+0xbb/0xf0 [ 334.576513][ C1] netlink_rcv_skb+0x15a/0x430 [ 334.576517][ C1] ? rtnetlink_put_metrics+0x510/0x510 [ 334.576521][ C1] ? netlink_ack+0xa10/0xa10 [ 334.576525][ C1] netlink_unicast+0x533/0x7d0 [ 334.576529][ C1] ? netlink_attachskb+0x810/0x810 [ 334.576533][ C1] ? __phys_addr_symbol+0x2c/0x70 [ 334.576537][ C1] ? __check_object_size+0x171/0x3e4 [ 334.576541][ C1] netlink_sendmsg+0x856/0xd90 [ 334.576548][ C1] ? netlink_unicast+0x7d0/0x7d0 [ 334.576552][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 334.576556][ C1] ? netlink_unicast+0x7d0/0x7d0 [ 334.576560][ C1] sock_sendmsg+0xcf/0x120 [ 334.576563][ C1] ____sys_sendmsg+0x331/0x810 [ 334.576567][ C1] ? kernel_sendmsg+0x50/0x50 [ 334.576571][ C1] ? do_recvmmsg+0x6d0/0x6d0 [ 334.576575][ C1] ? __lock_acquire+0x164a/0x5780 [ 334.576578][ C1] ___sys_sendmsg+0xf3/0x170 [ 334.576582][ C1] ? sendmsg_copy_msghdr+0x160/0x160 [ 334.576587][ C1] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 334.576591][ C1] ? __fget_files+0x272/0x400 [ 334.576595][ C1] ? lock_is_held_type+0xbb/0xf0 [ 334.576598][ C1] ? find_held_lock+0x2d/0x110 [ 334.576602][ C1] ? __might_fault+0x11f/0x1d0 [ 334.576606][ C1] ? lock_downgrade+0x830/0x830 [ 334.576610][ C1] ? lock_is_held_type+0xbb/0xf0 [ 334.576614][ C1] __sys_sendmmsg+0x195/0x480 [ 334.576618][ C1] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 334.576622][ C1] ? check_preemption_disabled+0x50/0x130 [ 334.576626][ C1] ? _copy_to_user+0x126/0x160 [ 334.576630][ C1] ? put_timespec64+0xcb/0x120 [ 334.576633][ C1] ? ns_to_timespec64+0xc0/0xc0 [ 334.576637][ C1] ? lock_is_held_type+0xbb/0xf0 [ 334.576641][ C1] ? lock_is_held_type+0xbb/0xf0 [ 334.576646][ C1] ? syscall_enter_from_user_mode+0x1d/0x60 [ 334.576650][ C1] __x64_sys_sendmmsg+0x99/0x100 [ 334.576654][ C1] ? syscall_enter_from_user_mode+0x1d/0x60 [ 334.576658][ C1] do_syscall_64+0x2d/0x70 [ 334.576662][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 334.576665][ C1] RIP: 0033:0x45dd99 [ 334.576677][ C1] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 334.576681][ C1] RSP: 002b:00007fbe941c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 334.576691][ C1] RAX: ffffffffffffffda RBX: 0000000000027f40 RCX: 000000000045dd99 [ 334.576696][ C1] RDX: 010efe10675dec16 RSI: 0000000020000200 RDI: 0000000000000003 [ 334.576702][ C1] RBP: 000000000118c010 R08: 0000000000000000 R09: 0000000000000000 [ 334.576707][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bfd4 [ 334.576712][ C1] R13: 00007ffdb9570b2f R14: 00007fbe941c59c0 R15: 000000000118bfd4 [ 334.606066][ T1172] Kernel panic - not syncing: hung_task: blocked tasks [ 335.267358][ T1172] CPU: 0 PID: 1172 Comm: khungtaskd Not tainted 5.9.0-rc6-syzkaller #0 [ 335.275587][ T1172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.285655][ T1172] Call Trace: [ 335.288955][ T1172] dump_stack+0x198/0x1fd [ 335.293308][ T1172] panic+0x382/0x7fb [ 335.297202][ T1172] ? __warn_printk+0xf3/0xf3 [ 335.301793][ T1172] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 335.307421][ T1172] ? preempt_schedule_thunk+0x16/0x18 [ 335.312791][ T1172] ? watchdog.cold+0x5/0x16b [ 335.317377][ T1172] ? watchdog+0xa82/0x1000 [ 335.321795][ T1172] watchdog.cold+0x16/0x16b [ 335.326299][ T1172] ? reset_hung_task_detector+0x30/0x30 [ 335.331841][ T1172] kthread+0x3b5/0x4a0 [ 335.335906][ T1172] ? __kthread_bind_mask+0xc0/0xc0 [ 335.341044][ T1172] ret_from_fork+0x1f/0x30 [ 335.346770][ T1172] Kernel Offset: disabled [ 335.351091][ T1172] Rebooting in 86400 seconds..