last executing test programs: 8.469059922s ago: executing program 1 (id=2863): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="04000004080000000000000000000100"/28], 0x50) socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x120, 0x20}, {0xffffffff80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x800, 0x0, 0xfffffffffffffff1}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 7.123160549s ago: executing program 1 (id=2867): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgrp(0x0) keyctl$clear(0x7, 0xfffffffffffffffb) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r4, 0x5501) 5.572961624s ago: executing program 1 (id=2869): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042022eb"], 0x7a) 4.256970949s ago: executing program 0 (id=2875): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) rmdir(0x0) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) 3.44600601s ago: executing program 0 (id=2876): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) 3.431522051s ago: executing program 3 (id=2877): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) 3.356665217s ago: executing program 2 (id=2878): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ustat(0x801, &(0x7f0000000300)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b0b, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) open_by_handle_at(0xffffffffffffffff, 0x0, 0x204000) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000000c0)=0x14) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0xfffff000}) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000080)=0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0xfffffffd, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008085}, 0x0) 3.268260015s ago: executing program 3 (id=2879): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x7) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 2.964458162s ago: executing program 0 (id=2880): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(r2, 0x1) mremap(&(0x7f000080a000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) semctl$SETALL(0x0, 0x0, 0x11, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) landlock_restrict_self(r4, 0x9) 2.829032333s ago: executing program 3 (id=2881): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, 0x0, 0x40) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.123929355s ago: executing program 2 (id=2882): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r1, 0x400, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x48000}, 0x8004) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socket$tipc(0x1e, 0x5, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000080)) 1.802658933s ago: executing program 2 (id=2883): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="700001"], 0x4) 1.635180388s ago: executing program 1 (id=2884): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000012, 0xffe, 0x0, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_OPERSTATE={0x5, 0x10, 0x6c}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x3c}}, 0x8000) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r6, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8805) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r8, 0x0, 0x6, 0x0, 0x0) setsockopt(r4, 0x1, 0x10000000000009, &(0x7f0000000180), 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES16=r2, @ANYBLOB="000127bd7000fbc9df250400000014000300ff01000000000000000000000000000114000200000000000000000000000000000000011400060069703667726530000000000000000000140002000000000000006d000000000000000000140003002001000000000000000000000000000208000500ffffffff0500010000000000"], 0x88}}, 0x8890) socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x7}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r12 = socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 1.464998282s ago: executing program 0 (id=2885): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xb, 0x5, 0xcac, 0xc}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.445104324s ago: executing program 2 (id=2886): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r4], 0x44}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.381470689s ago: executing program 3 (id=2887): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bbfd75d2fe4f3a47de09a7b1b96400", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 1.231332642s ago: executing program 1 (id=2888): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x22, 0x0, &(0x7f00000002c0)="11ee582e7f01f5951a1d346ae40e62ab9433d8a1a9138c9d83749db966c28ed3fe32", 0x5}, 0x50) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.153082669s ago: executing program 3 (id=2889): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.132585011s ago: executing program 2 (id=2890): socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400000000", @ANYRES32=0x0], 0x80}}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x10, 0x3000}], 0x1, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000387000/0x4000)=nil) 907.71231ms ago: executing program 0 (id=2891): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r1, 0x400, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x48000}, 0x8004) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socket$tipc(0x1e, 0x5, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000080)) 793.07247ms ago: executing program 3 (id=2892): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042022eb"], 0x7a) 156.424776ms ago: executing program 1 (id=2893): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) rmdir(0x0) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) 56.569935ms ago: executing program 0 (id=2894): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="700001"], 0x4) 0s ago: executing program 2 (id=2895): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x40080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): syzkaller0: entered allmulticast mode [ 329.681606][T10056] tipc: Resetting bearer [ 329.792729][T10056] tipc: Disabling bearer [ 330.076320][T10070] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1452'. [ 330.243800][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 330.260725][T10073] bond0: (slave sit0): Error: Device type is different from other slaves [ 330.514198][T10081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1458'. [ 330.790358][T10093] delete_channel: no stack [ 330.920724][T10095] tipc: Enabling of bearer rejected, failed to enable media [ 330.941282][T10095] syzkaller0: entered promiscuous mode [ 330.948166][T10095] syzkaller0: entered allmulticast mode [ 330.963034][T10095] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 331.283973][T10104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1467'. [ 331.339626][T10101] bond0: (slave sit0): Error: Device type is different from other slaves [ 331.544367][T10113] netlink: 'syz.1.1470': attribute type 1 has an invalid length. [ 331.594530][T10113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 331.633109][T10115] syzkaller1: entered promiscuous mode [ 331.639008][T10115] syzkaller1: entered allmulticast mode [ 331.804584][T10113] vlan2: entered promiscuous mode [ 331.828300][T10113] bond1: entered promiscuous mode [ 331.841236][T10113] vlan2: entered allmulticast mode [ 331.886040][T10113] bond1: entered allmulticast mode [ 332.059292][T10113] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 332.160268][T10123] bond1: (slave bridge3): making interface the new active one [ 332.191277][T10123] bridge3: entered promiscuous mode [ 332.204016][T10123] bridge3: entered allmulticast mode [ 332.227376][T10123] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 332.347981][T10135] bond0: (slave sit0): Error: Device type is different from other slaves [ 332.653815][T10141] __nla_validate_parse: 1 callbacks suppressed [ 332.653834][T10141] netlink: 592 bytes leftover after parsing attributes in process `syz.1.1483'. [ 332.806562][T10144] syzkaller1: entered promiscuous mode [ 332.813184][T10144] syzkaller1: entered allmulticast mode [ 333.075945][T10150] tipc: Enabling of bearer rejected, failed to enable media [ 333.094742][T10150] syzkaller0: entered promiscuous mode [ 333.110529][T10150] syzkaller0: entered allmulticast mode [ 333.125407][ T1173] block nbd3: Possible stuck request ffff888022460000: control (read@0,1024B). Runtime 90 seconds [ 333.131863][T10150] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 333.136366][ T1173] block nbd3: Possible stuck request ffff888022460200: control (read@1024,1024B). Runtime 90 seconds [ 333.156124][ T1173] block nbd3: Possible stuck request ffff888022460400: control (read@2048,1024B). Runtime 90 seconds [ 333.167824][ T1173] block nbd3: Possible stuck request ffff888022460600: control (read@3072,1024B). Runtime 90 seconds [ 333.584159][T10161] syzkaller0: entered promiscuous mode [ 333.589857][T10161] syzkaller0: entered allmulticast mode [ 333.725622][T10163] bond0: (slave sit0): Error: Device type is different from other slaves [ 334.218385][T10178] tipc: Enabled bearer , priority 0 [ 334.234095][T10178] tipc: Resetting bearer [ 334.403873][T10177] tipc: Disabling bearer [ 334.459354][T10182] tipc: Enabled bearer , priority 0 [ 334.585334][T10189] tipc: Enabled bearer , priority 0 [ 334.632247][T10187] tipc: Disabling bearer [ 334.667153][T10181] tipc: Disabling bearer [ 334.701329][T10192] syzkaller0: entered promiscuous mode [ 334.710410][T10192] syzkaller0: entered allmulticast mode [ 334.927394][T10194] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1504'. [ 335.030969][T10194] bond0: (slave sit0): Error: Device type is different from other slaves [ 335.482524][T10209] nbd: nbd0 already in use [ 335.565607][T10212] tipc: Enabled bearer , priority 0 [ 335.588659][T10212] tipc: Resetting bearer [ 335.644540][T10211] tipc: Disabling bearer [ 335.654644][T10216] delete_channel: no stack [ 335.705426][T10215] tipc: Enabled bearer , priority 0 [ 335.833958][T10214] tipc: Disabling bearer [ 335.895419][T10218] syzkaller0: entered promiscuous mode [ 335.901315][T10218] syzkaller0: entered allmulticast mode [ 336.153976][T10226] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1518'. [ 336.181435][T10226] bond0: (slave sit0): Error: Device type is different from other slaves [ 336.387927][T10234] bond0: (slave sit0): Error: Device type is different from other slaves [ 336.855932][T10246] syzkaller0: entered promiscuous mode [ 336.877183][T10246] syzkaller0: entered allmulticast mode [ 337.022566][T10248] tipc: Enabled bearer , priority 0 [ 337.032337][T10248] syzkaller0: entered promiscuous mode [ 337.047062][T10248] syzkaller0: entered allmulticast mode [ 337.074919][T10248] tipc: Resetting bearer [ 337.094976][T10247] tipc: Resetting bearer [ 337.180650][T10247] tipc: Disabling bearer [ 337.328474][T10255] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1530'. [ 337.384055][T10255] bond0: (slave sit0): Error: Device type is different from other slaves [ 337.464451][T10261] delete_channel: no stack [ 337.709458][T10267] syzkaller0: entered promiscuous mode [ 337.715591][T10267] syzkaller0: entered allmulticast mode [ 337.939217][ T787] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 337.975279][T10269] tipc: Enabling of bearer rejected, failed to enable media [ 337.989875][T10269] syzkaller0: entered promiscuous mode [ 337.997192][T10269] syzkaller0: entered allmulticast mode [ 338.012834][T10269] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 338.153779][ T787] usb 1-1: Using ep0 maxpacket: 32 [ 338.169418][ T787] usb 1-1: config 0 has no interfaces? [ 338.195318][ T787] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 338.211268][T10272] syzkaller0: entered promiscuous mode [ 338.217609][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.226164][T10272] syzkaller0: entered allmulticast mode [ 338.233447][ T787] usb 1-1: Product: syz [ 338.245641][ T787] usb 1-1: Manufacturer: syz [ 338.263664][ T787] usb 1-1: SerialNumber: syz [ 338.284817][ T787] usb 1-1: config 0 descriptor?? [ 338.526163][T10283] bond0: (slave sit0): Error: Device type is different from other slaves [ 339.353337][T10301] syzkaller0: entered promiscuous mode [ 339.374497][T10301] syzkaller0: entered allmulticast mode [ 339.867000][T10310] bond0: (slave sit0): Error: Device type is different from other slaves [ 339.966107][T10312] syzkaller0: entered promiscuous mode [ 339.972057][T10312] syzkaller0: entered allmulticast mode [ 340.603030][T10329] vlan0: entered promiscuous mode [ 340.712261][T10331] delete_channel: no stack [ 340.788092][T10335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1562'. [ 340.823185][ T6423] usb 1-1: USB disconnect, device number 10 [ 340.920319][T10337] tipc: Enabling of bearer rejected, failed to enable media [ 340.951481][T10337] syzkaller0: entered promiscuous mode [ 340.967510][T10337] syzkaller0: entered allmulticast mode [ 341.021919][T10339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1564'. [ 341.055785][T10337] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 341.083806][T10339] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1564'. [ 341.362379][T10350] syzkaller0: entered promiscuous mode [ 341.372929][T10350] syzkaller0: entered allmulticast mode [ 341.401645][T10354] netlink: 'syz.0.1570': attribute type 6 has an invalid length. [ 343.492551][T10354] netlink: 'syz.0.1570': attribute type 6 has an invalid length. [ 343.655066][T10376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1573'. [ 343.793364][T10382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1575'. [ 343.824142][T10382] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1575'. [ 343.835483][T10383] syzkaller0: entered promiscuous mode [ 343.861418][T10383] syzkaller0: entered allmulticast mode [ 344.099583][T10394] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1580'. [ 344.143504][T10394] Bluetooth: MGMT ver 1.22 [ 344.194110][T10396] bond0: (slave sit0): Error: Device type is different from other slaves [ 344.281393][T10398] syzkaller0: entered promiscuous mode [ 344.288881][T10398] syzkaller0: entered allmulticast mode [ 344.542653][T10411] nbd: nbd3 already in use [ 344.580524][T10406] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1585'. [ 344.882343][T10420] syzkaller0: entered promiscuous mode [ 344.884339][T10424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.898473][T10420] syzkaller0: entered allmulticast mode [ 344.970535][T10424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.972220][T10426] syzkaller0: entered promiscuous mode [ 344.991048][T10426] syzkaller0: entered allmulticast mode [ 345.260439][T10437] delete_channel: no stack [ 345.682121][T10445] syzkaller0: entered promiscuous mode [ 345.692275][T10445] syzkaller0: entered allmulticast mode [ 345.760613][T10448] syzkaller0: entered promiscuous mode [ 345.766708][T10448] syzkaller0: entered allmulticast mode [ 345.878652][T10451] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1605'. [ 345.916588][T10451] bond0: (slave sit0): Error: Device type is different from other slaves [ 346.568065][T10480] syzkaller0: entered promiscuous mode [ 346.586548][T10480] syzkaller0: entered allmulticast mode [ 346.604379][ T6428] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 346.654632][T10485] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1618'. [ 346.703158][T10485] bond0: (slave sit0): Error: Device type is different from other slaves [ 346.813807][ T6428] usb 1-1: Using ep0 maxpacket: 32 [ 346.838601][ T6428] usb 1-1: config 0 has no interfaces? [ 346.863752][ T6428] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 346.872874][ T6428] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.882379][ T6428] usb 1-1: Product: syz [ 346.887890][ T6428] usb 1-1: Manufacturer: syz [ 346.892622][ T6428] usb 1-1: SerialNumber: syz [ 346.901506][ T6428] usb 1-1: config 0 descriptor?? [ 347.215039][T10499] syzkaller0: entered promiscuous mode [ 347.228037][T10499] syzkaller0: entered allmulticast mode [ 347.307833][T10491] ip6_vti0 speed is unknown, defaulting to 1000 [ 347.928253][T10509] syzkaller0: entered promiscuous mode [ 347.948642][T10509] syzkaller0: entered allmulticast mode [ 348.557654][T10516] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 348.627614][T10516] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 349.292025][T10515] ip6_vti0 speed is unknown, defaulting to 1000 [ 349.303656][T10519] tipc: Enabled bearer , priority 0 [ 349.326770][T10519] tipc: Resetting bearer [ 349.362633][T10518] tipc: Disabling bearer [ 349.480919][ T787] usb 1-1: USB disconnect, device number 11 [ 349.978976][T10537] syzkaller0: entered promiscuous mode [ 349.991009][T10537] syzkaller0: entered allmulticast mode [ 350.132767][T10538] syzkaller1: entered promiscuous mode [ 350.142824][T10538] syzkaller1: entered allmulticast mode [ 350.297584][T10545] tipc: Enabled bearer , priority 0 [ 350.331177][T10545] syzkaller0: entered promiscuous mode [ 350.341035][T10545] syzkaller0: entered allmulticast mode [ 350.404506][T10545] tipc: Resetting bearer [ 350.432396][T10544] tipc: Resetting bearer [ 350.482420][T10544] tipc: Disabling bearer [ 350.514506][T10550] syzkaller0: entered promiscuous mode [ 350.520097][T10550] syzkaller0: entered allmulticast mode [ 351.550509][T10568] syzkaller0: entered promiscuous mode [ 351.583972][T10568] syzkaller0: entered allmulticast mode [ 351.694489][T10575] syzkaller0: entered promiscuous mode [ 351.700200][T10575] syzkaller0: entered allmulticast mode [ 351.760547][T10575] tipc: Enabled bearer , priority 0 [ 351.815121][T10574] tipc: Resetting bearer [ 351.892263][T10574] tipc: Disabling bearer [ 351.899532][T10582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1650'. [ 351.988040][T10584] tipc: Enabling of bearer rejected, failed to enable media [ 352.020173][T10586] syzkaller0: entered promiscuous mode [ 352.025981][T10586] syzkaller0: entered allmulticast mode [ 352.518547][T10605] syzkaller0: entered promiscuous mode [ 352.528327][T10605] syzkaller0: entered allmulticast mode [ 352.819432][T10618] syzkaller0: entered promiscuous mode [ 352.829124][T10618] syzkaller0: entered allmulticast mode [ 352.843176][T10618] tipc: Enabled bearer , priority 0 [ 352.856043][T10617] block nbd1: not configured, cannot reconfigure [ 352.871613][T10616] tipc: Resetting bearer [ 352.956299][T10616] tipc: Disabling bearer [ 353.063842][T10626] tipc: Enabling of bearer rejected, failed to enable media [ 353.095920][T10625] syzkaller0: entered promiscuous mode [ 353.101738][T10625] syzkaller0: entered allmulticast mode [ 353.668011][T10650] syzkaller0: entered promiscuous mode [ 353.674528][T10650] syzkaller0: entered allmulticast mode [ 353.969660][T10659] syzkaller0: entered promiscuous mode [ 353.975649][T10659] syzkaller0: entered allmulticast mode [ 354.003919][T10659] tipc: Enabled bearer , priority 0 [ 354.032528][T10658] tipc: Resetting bearer [ 354.084981][T10658] tipc: Disabling bearer [ 354.132786][T10669] syzkaller0: entered promiscuous mode [ 354.152190][T10669] syzkaller0: entered allmulticast mode [ 354.498716][T10681] tipc: Enabling of bearer rejected, failed to enable media [ 354.529385][T10687] tipc: Enabling of bearer rejected, failed to enable media [ 354.859735][T10700] tipc: Enabled bearer , priority 0 [ 354.925700][T10697] tipc: Resetting bearer [ 355.019752][T10696] tipc: Disabling bearer [ 355.034771][T10708] block nbd2: not configured, cannot reconfigure [ 355.273225][T10717] syzkaller0: entered promiscuous mode [ 355.279238][T10717] syzkaller0: entered allmulticast mode [ 355.290045][T10713] syzkaller0: entered promiscuous mode [ 355.305973][T10713] syzkaller0: entered allmulticast mode [ 355.349478][T10713] tipc: Enabled bearer , priority 0 [ 355.421194][T10711] tipc: Resetting bearer [ 355.507930][T10711] tipc: Disabling bearer [ 355.557195][T10727] tipc: Enabled bearer , priority 0 [ 355.586755][T10720] tipc: Disabling bearer [ 355.610977][T10733] tipc: Enabling of bearer rejected, failed to enable media [ 356.113952][T10754] tipc: Enabled bearer , priority 0 [ 356.198222][T10756] block nbd1: not configured, cannot reconfigure [ 356.369315][T10753] tipc: Resetting bearer [ 356.424983][T10751] tipc: Disabling bearer [ 356.552276][T10771] syzkaller0: entered promiscuous mode [ 356.569780][T10771] syzkaller0: entered allmulticast mode [ 356.625011][T10773] syzkaller0: entered promiscuous mode [ 356.640087][T10773] syzkaller0: entered allmulticast mode [ 356.713422][T10773] tipc: Enabled bearer , priority 0 [ 356.743963][T10772] tipc: Resetting bearer [ 356.856548][T10772] tipc: Disabling bearer [ 356.922262][T10780] tipc: Enabling of bearer rejected, failed to enable media [ 357.105550][T10796] vlan0: entered promiscuous mode [ 357.197387][T10800] tipc: Enabling of bearer rejected, failed to enable media [ 357.716732][T10821] tipc: Enabled bearer , priority 0 [ 357.909483][T10820] tipc: Resetting bearer [ 357.923427][T10828] syzkaller0: entered promiscuous mode [ 357.931413][T10828] syzkaller0: entered allmulticast mode [ 357.982102][T10819] tipc: Disabling bearer [ 358.014151][T10831] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 358.175913][T10838] syzkaller0: entered promiscuous mode [ 358.182177][T10838] syzkaller0: entered allmulticast mode [ 358.260012][T10833] tipc: Enabling of bearer rejected, failed to enable media [ 358.543407][T10857] tipc: Enabling of bearer rejected, failed to enable media [ 358.926328][T10872] tipc: Enabled bearer , priority 0 [ 358.958894][T10869] tipc: Disabling bearer [ 358.988093][T10874] syzkaller0: entered promiscuous mode [ 358.996343][T10874] syzkaller0: entered allmulticast mode [ 359.049124][T10876] syzkaller0: entered promiscuous mode [ 359.059476][T10876] syzkaller0: entered allmulticast mode [ 359.167015][T10878] syzkaller0: entered promiscuous mode [ 359.172794][T10878] syzkaller0: entered allmulticast mode [ 359.189779][T10881] tipc: Enabled bearer , priority 0 [ 359.202446][T10878] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 359.259998][T10881] tipc: Resetting bearer [ 359.307447][T10880] tipc: Disabling bearer [ 359.492972][T10892] syzkaller0: entered promiscuous mode [ 359.498880][T10892] syzkaller0: entered allmulticast mode [ 359.506266][T10893] tipc: Enabling of bearer rejected, failed to enable media [ 361.942576][T10914] tipc: Enabling of bearer rejected, failed to enable media [ 362.188718][T10929] syzkaller0: entered promiscuous mode [ 362.200189][T10929] syzkaller0: entered allmulticast mode [ 362.216157][T10931] IPv6: NLM_F_CREATE should be specified when creating new route [ 363.204025][ T1173] block nbd3: Possible stuck request ffff888022460000: control (read@0,1024B). Runtime 120 seconds [ 363.215157][ T1173] block nbd3: Possible stuck request ffff888022460200: control (read@1024,1024B). Runtime 120 seconds [ 363.226504][ T1173] block nbd3: Possible stuck request ffff888022460400: control (read@2048,1024B). Runtime 120 seconds [ 363.238032][ T1173] block nbd3: Possible stuck request ffff888022460600: control (read@3072,1024B). Runtime 120 seconds [ 364.701293][T10941] tipc: Enabling of bearer rejected, failed to enable media [ 364.716019][T10948] syzkaller0: entered promiscuous mode [ 364.722137][T10948] syzkaller0: entered allmulticast mode [ 364.920123][T10980] tipc: Enabling of bearer rejected, failed to enable media [ 365.402117][T11001] syzkaller0: entered promiscuous mode [ 365.409296][T11001] syzkaller0: entered allmulticast mode [ 365.612619][T11009] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1755'. [ 367.808366][T11017] tipc: Enabled bearer , priority 0 [ 367.821648][T11026] tipc: Resetting bearer [ 367.830625][T11014] tipc: Disabling bearer [ 367.915782][T11030] tipc: Enabled bearer , priority 0 [ 367.976703][T11030] tipc: Resetting bearer [ 368.035010][T11029] tipc: Disabling bearer [ 368.103473][T11038] tipc: Enabling of bearer rejected, failed to enable media [ 368.462666][T11060] netlink: 'syz.2.1765': attribute type 1 has an invalid length. [ 368.573308][T11060] 8021q: adding VLAN 0 to HW filter on device bond2 [ 368.605460][T11063] vlan2: entered promiscuous mode [ 368.610923][T11063] bond2: entered promiscuous mode [ 368.616652][T11063] vlan2: entered allmulticast mode [ 368.622075][T11063] bond2: entered allmulticast mode [ 368.773305][T11067] syzkaller0: entered promiscuous mode [ 368.780063][T11067] syzkaller0: entered allmulticast mode [ 370.861958][T11072] tipc: Enabled bearer , priority 0 [ 370.889425][T11077] syzkaller0: entered promiscuous mode [ 370.895366][T11077] syzkaller0: entered allmulticast mode [ 370.902934][T11081] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 370.932122][T11084] tipc: Resetting bearer [ 371.040487][T11070] tipc: Disabling bearer [ 371.351734][T11103] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1776'. [ 371.698307][T11114] syzkaller0: entered promiscuous mode [ 371.706757][T11114] syzkaller0: entered allmulticast mode [ 371.713889][T11116] netlink: 'syz.3.1779': attribute type 1 has an invalid length. [ 371.751428][T11116] 8021q: adding VLAN 0 to HW filter on device bond1 [ 371.771302][T11120] vlan2: entered promiscuous mode [ 371.776886][T11120] bond1: entered promiscuous mode [ 371.782859][T11120] vlan2: entered allmulticast mode [ 371.788581][T11120] bond1: entered allmulticast mode [ 374.461757][T11149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.574096][ T5140] udevd[5140]: worker [6167] /devices/virtual/block/nbd3 is taking a long time [ 374.732612][T11161] tipc: Enabling of bearer rejected, failed to enable media [ 375.170822][T11187] delete_channel: no stack [ 375.246475][T11189] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 375.522632][T11199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1797'. [ 375.536952][T11193] syzkaller0: entered promiscuous mode [ 375.564219][T11193] syzkaller0: entered allmulticast mode [ 378.052348][T11222] tipc: Enabling of bearer rejected, failed to enable media [ 378.506653][T11253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1808'. [ 378.718605][T11264] delete_channel: no stack [ 378.735786][T11265] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1813'. [ 378.963861][T11269] syzkaller0: entered promiscuous mode [ 378.969774][T11269] syzkaller0: entered allmulticast mode [ 378.998857][T11274] tipc: Enabled bearer , priority 0 [ 379.218622][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.227422][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.538616][T11295] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1821'. [ 381.269695][T11285] tipc: Resetting bearer [ 381.292640][T11273] tipc: Disabling bearer [ 381.312182][ T6423] tipc: Node number set to 4265668618 [ 381.600665][T11306] syzkaller0: entered promiscuous mode [ 381.623706][T11306] syzkaller0: entered allmulticast mode [ 381.870835][T11319] delete_channel: no stack [ 381.880054][T11320] tipc: Enabled bearer , priority 0 [ 381.941647][T11317] syzkaller0: entered promiscuous mode [ 381.947816][T11317] syzkaller0: entered allmulticast mode [ 381.959196][T11320] tipc: Resetting bearer [ 381.982117][T11318] tipc: Disabling bearer [ 384.745002][T11373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1843'. [ 384.840713][T11375] tipc: Enabled bearer , priority 0 [ 384.858419][T11375] tipc: Resetting bearer [ 384.886618][T11374] tipc: Disabling bearer [ 385.230572][T11398] delete_channel: no stack [ 385.375316][T11402] syzkaller0: entered promiscuous mode [ 385.381165][T11402] syzkaller0: entered allmulticast mode [ 385.455942][T11404] syzkaller0: entered promiscuous mode [ 385.461573][T11404] syzkaller0: entered allmulticast mode [ 385.471700][T11406] syzkaller0: entered promiscuous mode [ 385.493363][T11406] syzkaller0: entered allmulticast mode [ 387.642512][T11408] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1856'. [ 387.673505][T11417] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1858'. [ 388.023333][T11427] syzkaller0: entered promiscuous mode [ 388.029228][T11427] syzkaller0: entered allmulticast mode [ 388.268283][T11437] delete_channel: no stack [ 390.567655][T11436] syzkaller0: entered promiscuous mode [ 390.573409][T11436] syzkaller0: entered allmulticast mode [ 390.616874][T11442] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1868'. [ 390.654241][T11448] tipc: Enabling of bearer rejected, failed to enable media [ 390.692548][T11461] bridge0: entered allmulticast mode [ 390.715707][T11461] bridge0: left allmulticast mode [ 390.760505][T11461] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1869'. [ 390.825321][T11461] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1869'. [ 391.007355][T11470] tipc: Enabling of bearer rejected, failed to enable media [ 391.034652][T11470] syzkaller0: entered promiscuous mode [ 391.040380][T11470] syzkaller0: entered allmulticast mode [ 391.237958][T11485] syzkaller0: entered promiscuous mode [ 391.255068][T11485] syzkaller0: entered allmulticast mode [ 391.266878][T11486] delete_channel: no stack [ 391.421504][T11490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1878'. [ 391.478389][T11489] syzkaller0: entered promiscuous mode [ 391.484381][T11489] syzkaller0: entered allmulticast mode [ 393.284293][ T1173] block nbd3: Possible stuck request ffff888022460000: control (read@0,1024B). Runtime 150 seconds [ 393.295487][ T1173] block nbd3: Possible stuck request ffff888022460200: control (read@1024,1024B). Runtime 150 seconds [ 393.307238][ T1173] block nbd3: Possible stuck request ffff888022460400: control (read@2048,1024B). Runtime 150 seconds [ 393.318758][ T1173] block nbd3: Possible stuck request ffff888022460600: control (read@3072,1024B). Runtime 150 seconds [ 394.193813][T11500] tipc: Enabled bearer , priority 0 [ 394.206328][T11501] syzkaller0: entered promiscuous mode [ 394.212112][T11501] syzkaller0: entered allmulticast mode [ 394.321038][T11517] tipc: Resetting bearer [ 394.385750][T11517] tipc: Disabling bearer [ 394.433269][T11539] syzkaller0: entered promiscuous mode [ 394.473742][T11539] syzkaller0: entered allmulticast mode [ 394.505860][T11545] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1888'. [ 395.220434][T11566] delete_channel: no stack [ 395.603242][T11571] tipc: Enabling of bearer rejected, failed to enable media [ 395.630616][T11571] syzkaller0: entered promiscuous mode [ 395.636902][T11571] syzkaller0: entered allmulticast mode [ 395.700050][T11575] tipc: Enabled bearer , priority 0 [ 395.708949][T11575] syzkaller0: entered promiscuous mode [ 395.716850][T11575] syzkaller0: entered allmulticast mode [ 395.762089][T11575] tipc: Resetting bearer [ 395.780630][T11574] tipc: Resetting bearer [ 395.818123][T11574] tipc: Disabling bearer [ 395.838834][T11577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1898'. [ 395.943077][T11580] syzkaller0: entered promiscuous mode [ 395.965510][T11580] syzkaller0: entered allmulticast mode [ 396.092635][T11587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1900'. [ 396.336216][T11582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1900'. [ 396.428928][T11602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1909'. [ 396.472636][T11604] tipc: Enabling of bearer rejected, failed to enable media [ 396.496179][T11604] syzkaller0: entered promiscuous mode [ 396.501716][T11604] syzkaller0: entered allmulticast mode [ 396.608975][T11606] tipc: Enabled bearer , priority 0 [ 396.621842][T11606] syzkaller0: entered promiscuous mode [ 396.627816][T11606] syzkaller0: entered allmulticast mode [ 396.652756][T11606] tipc: Resetting bearer [ 396.666642][T11605] tipc: Resetting bearer [ 396.695764][T11605] tipc: Disabling bearer [ 396.830214][T11613] delete_channel: no stack [ 396.892749][T11615] syzkaller0: entered promiscuous mode [ 396.903677][T11615] syzkaller0: entered allmulticast mode [ 397.171435][T11625] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1919'. [ 397.174864][T11627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1918'. [ 397.190036][T11625] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1919'. [ 397.302017][T11630] tipc: Enabling of bearer rejected, failed to enable media [ 397.323726][T11633] bridge0: entered allmulticast mode [ 397.332031][T11630] syzkaller0: entered promiscuous mode [ 397.342016][T11630] syzkaller0: entered allmulticast mode [ 397.350760][T11633] bridge0: left allmulticast mode [ 397.471837][T11637] nbd: must specify a device to reconfigure [ 397.821935][T11653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1931'. [ 397.942264][T11654] syzkaller0: entered promiscuous mode [ 397.953799][T11654] syzkaller0: entered allmulticast mode [ 397.959666][T11659] nbd: must specify a device to reconfigure [ 398.122537][T11666] delete_channel: no stack [ 398.254836][T11670] tipc: Enabling of bearer rejected, failed to enable media [ 398.296743][T11671] syzkaller0: entered promiscuous mode [ 398.302577][T11671] syzkaller0: entered allmulticast mode [ 398.813258][T11685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1942'. [ 398.947581][T11689] nbd: must specify a device to reconfigure [ 399.352433][T11708] tipc: Enabling of bearer rejected, failed to enable media [ 399.408614][T11708] syzkaller0: entered promiscuous mode [ 399.423836][T11708] syzkaller0: entered allmulticast mode [ 399.579174][T11718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1953'. [ 399.661316][T11723] delete_channel: no stack [ 399.852334][T11729] syzkaller0: entered promiscuous mode [ 399.859557][T11729] syzkaller0: entered allmulticast mode [ 400.323450][T11742] syzkaller0: entered promiscuous mode [ 400.340541][T11742] syzkaller0: entered allmulticast mode [ 402.608100][T11756] __nla_validate_parse: 5 callbacks suppressed [ 402.608116][T11756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1963'. [ 402.786793][T11768] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1966'. [ 402.827647][T11772] syzkaller0: entered promiscuous mode [ 402.833357][T11772] syzkaller0: entered allmulticast mode [ 403.039646][T11777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1970'. [ 403.059463][T11779] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1970'. [ 403.090002][T11781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.102339][T11782] syzkaller0: entered promiscuous mode [ 403.115399][T11782] syzkaller0: entered allmulticast mode [ 403.191514][T11787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.366636][T11789] syzkaller0: entered promiscuous mode [ 403.372290][T11789] syzkaller0: entered allmulticast mode [ 403.385770][T11791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1976'. [ 403.423894][ T787] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 403.616632][ T787] usb 3-1: Using ep0 maxpacket: 32 [ 403.632729][ T787] usb 3-1: config 0 has no interfaces? [ 403.642003][ T787] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 403.651660][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.660155][ T787] usb 3-1: Product: syz [ 403.664683][ T787] usb 3-1: Manufacturer: syz [ 403.669508][ T787] usb 3-1: SerialNumber: syz [ 403.681493][ T787] usb 3-1: config 0 descriptor?? [ 405.997828][T11796] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1977'. [ 406.303014][ T6426] usb 3-1: USB disconnect, device number 10 [ 406.304551][T11809] syzkaller0: entered promiscuous mode [ 406.329911][T11809] syzkaller0: entered allmulticast mode [ 406.355265][T11811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1982'. [ 406.380413][T11811] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1982'. [ 406.407832][T11809] tipc: Enabled bearer , priority 0 [ 406.462447][T11808] tipc: Resetting bearer [ 406.527888][T11808] tipc: Disabling bearer [ 406.559768][T11817] syzkaller0: entered promiscuous mode [ 406.574197][T11817] syzkaller0: entered allmulticast mode [ 406.600075][T11821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1986'. [ 406.872160][T11826] syzkaller0: entered promiscuous mode [ 406.895026][T11826] syzkaller0: entered allmulticast mode [ 406.934426][T11831] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1988'. [ 407.384256][ T5780] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 407.614683][ T5780] usb 3-1: Using ep0 maxpacket: 32 [ 407.622723][ T5780] usb 3-1: config 0 has no interfaces? [ 407.641192][ T5780] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 407.660101][ T5780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.669258][ T5780] usb 3-1: Product: syz [ 407.674118][ T5780] usb 3-1: Manufacturer: syz [ 407.679126][ T5780] usb 3-1: SerialNumber: syz [ 407.698962][ T5780] usb 3-1: config 0 descriptor?? [ 409.306382][T11850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1993'. [ 409.317508][T11850] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1993'. [ 409.465043][T11854] syzkaller0: entered promiscuous mode [ 409.470572][T11854] syzkaller0: entered allmulticast mode [ 409.480819][T11858] syzkaller0: entered promiscuous mode [ 409.486691][T11858] syzkaller0: entered allmulticast mode [ 409.499852][T11854] tipc: Enabled bearer , priority 0 [ 409.518063][T11853] tipc: Resetting bearer [ 409.550659][T11853] tipc: Disabling bearer [ 409.703277][T11863] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1999'. [ 410.167673][ T787] usb 3-1: USB disconnect, device number 11 [ 410.441390][T11884] tipc: Enabled bearer , priority 0 [ 410.595045][T11883] syzkaller0: entered promiscuous mode [ 410.613319][T11883] syzkaller0: entered allmulticast mode [ 412.751661][T11901] tipc: Resetting bearer [ 412.780498][T11896] syzkaller0: entered promiscuous mode [ 412.786501][T11896] syzkaller0: entered allmulticast mode [ 412.802701][T11880] tipc: Disabling bearer [ 415.303826][T11930] syzkaller0: entered promiscuous mode [ 415.324098][ T6426] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 415.324798][T11930] syzkaller0: entered allmulticast mode [ 415.515370][ T6426] usb 2-1: Using ep0 maxpacket: 32 [ 415.531187][T11940] tipc: Enabled bearer , priority 0 [ 415.545015][ T6426] usb 2-1: config 0 has no interfaces? [ 415.553485][ T6426] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 415.561123][T11940] tipc: Resetting bearer [ 415.571856][ T6426] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.587661][ T6426] usb 2-1: Product: syz [ 415.602611][ T6426] usb 2-1: Manufacturer: syz [ 415.608187][ T6426] usb 2-1: SerialNumber: syz [ 415.627328][ T6426] usb 2-1: config 0 descriptor?? [ 415.627433][T11939] tipc: Disabling bearer [ 415.662013][T11943] netlink: 'syz.0.2021': attribute type 1 has an invalid length. [ 415.792398][T11943] bond1: entered promiscuous mode [ 415.811968][T11943] bond1: entered allmulticast mode [ 415.817833][T11943] 8021q: adding VLAN 0 to HW filter on device bond1 [ 415.834319][T11943] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 415.851038][T11947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2022'. [ 415.877113][T11949] bridge5: entered promiscuous mode [ 415.882775][T11949] bridge5: entered allmulticast mode [ 415.888919][T11949] bond1: (slave bridge5): Enslaving as a backup interface with a down link [ 415.899859][T11947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.921401][T11948] tipc: Enabled bearer , priority 0 [ 415.944705][T11948] syzkaller0: entered promiscuous mode [ 415.950247][T11948] syzkaller0: entered allmulticast mode [ 415.999931][T11943] bridge6: entered promiscuous mode [ 416.008987][T11943] bridge6: entered allmulticast mode [ 416.017368][T11943] bond1: (slave bridge6): Enslaving as a backup interface with a down link [ 416.059073][T11948] tipc: Resetting bearer [ 416.109530][T11946] tipc: Resetting bearer [ 416.154191][T11946] tipc: Disabling bearer [ 416.345534][T11962] tipc: Enabled bearer , priority 0 [ 416.371344][T11962] tipc: Resetting bearer [ 416.412042][T11961] tipc: Disabling bearer [ 416.454815][T11967] tipc: Enabling of bearer rejected, failed to enable media [ 416.469109][T11968] syzkaller0: entered promiscuous mode [ 416.476120][T11968] syzkaller0: entered allmulticast mode [ 416.787853][T11980] syzkaller0: entered promiscuous mode [ 416.797219][T11980] syzkaller0: entered allmulticast mode [ 417.137645][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2035'. [ 417.159731][T11992] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2035'. [ 417.179948][T11982] syzkaller0: entered promiscuous mode [ 417.186235][T11982] syzkaller0: entered allmulticast mode [ 417.200390][T11982] tipc: Enabled bearer , priority 0 [ 417.212109][T11981] tipc: Resetting bearer [ 417.260659][T11981] tipc: Disabling bearer [ 417.285202][T11996] tipc: Enabled bearer , priority 0 [ 417.307179][T11996] syzkaller0: entered promiscuous mode [ 417.312781][T11996] syzkaller0: entered allmulticast mode [ 417.363312][T11996] tipc: Resetting bearer [ 417.387870][T11995] tipc: Resetting bearer [ 417.461340][T11995] tipc: Disabling bearer [ 417.625754][T12008] syzkaller0: entered promiscuous mode [ 417.631851][T12008] syzkaller0: entered allmulticast mode [ 417.838711][T12015] tipc: Enabling of bearer rejected, failed to enable media [ 418.001679][T12009] delete_channel: no stack [ 418.112970][ T787] usb 2-1: USB disconnect, device number 13 [ 418.291279][T12032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2045'. [ 418.497145][T12036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2047'. [ 418.827787][T12044] syzkaller0: entered promiscuous mode [ 418.848176][T12044] syzkaller0: entered allmulticast mode [ 418.963796][T12051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2053'. [ 419.037169][T12029] ip6_vti0 speed is unknown, defaulting to 1000 [ 419.140439][T12056] tipc: Enabling of bearer rejected, failed to enable media [ 419.848486][T12082] delete_channel: no stack [ 419.924384][T12084] syzkaller0: entered promiscuous mode [ 419.946114][T12084] syzkaller0: entered allmulticast mode [ 420.037267][T12086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2063'. [ 420.180616][T12088] syzkaller0: entered promiscuous mode [ 420.196017][T12088] syzkaller0: entered allmulticast mode [ 420.960285][T12110] syzkaller0: entered promiscuous mode [ 420.978199][T12110] syzkaller0: entered allmulticast mode [ 421.316942][T12115] bond_slave_0: entered promiscuous mode [ 421.322973][T12115] bond_slave_1: entered promiscuous mode [ 421.512198][T12121] delete_channel: no stack [ 421.855093][T12129] syzkaller0: entered promiscuous mode [ 421.860792][T12129] syzkaller0: entered allmulticast mode [ 422.105525][T12133] syzkaller0: entered promiscuous mode [ 422.111164][T12133] syzkaller0: entered allmulticast mode [ 422.665959][T12153] syzkaller0: entered promiscuous mode [ 422.671722][T12153] syzkaller0: entered allmulticast mode [ 422.682114][T12153] tipc: Enabled bearer , priority 0 [ 422.799238][T12150] tipc: Resetting bearer [ 422.893893][T12150] tipc: Disabling bearer [ 422.925560][T12159] delete_channel: no stack [ 423.131641][T12161] syzkaller0: entered promiscuous mode [ 423.154519][T12161] syzkaller0: entered allmulticast mode [ 423.364074][ T1173] block nbd3: Possible stuck request ffff888022460000: control (read@0,1024B). Runtime 180 seconds [ 423.374922][ T1173] block nbd3: Possible stuck request ffff888022460200: control (read@1024,1024B). Runtime 180 seconds [ 423.386698][ T1173] block nbd3: Possible stuck request ffff888022460400: control (read@2048,1024B). Runtime 180 seconds [ 423.397887][ T1173] block nbd3: Possible stuck request ffff888022460600: control (read@3072,1024B). Runtime 180 seconds [ 423.571489][T12170] syzkaller0: entered promiscuous mode [ 423.583834][T12170] syzkaller0: entered allmulticast mode [ 423.913120][T12184] tipc: Enabled bearer , priority 0 [ 423.932569][T12184] syzkaller0: entered promiscuous mode [ 423.943766][T12184] syzkaller0: entered allmulticast mode [ 423.970647][T12184] tipc: Resetting bearer [ 423.995921][T12182] tipc: Resetting bearer [ 424.045270][T12182] tipc: Disabling bearer [ 424.085649][T12186] syzkaller0: entered promiscuous mode [ 424.091373][T12186] syzkaller0: entered allmulticast mode [ 424.125761][T12186] tipc: Enabled bearer , priority 0 [ 424.180710][T12185] tipc: Resetting bearer [ 424.310429][T12185] tipc: Disabling bearer [ 424.354970][T12178] ip6_vti0 speed is unknown, defaulting to 1000 [ 424.738207][T12207] delete_channel: no stack [ 424.962025][T12210] syzkaller0: entered promiscuous mode [ 424.968555][T12210] syzkaller0: entered allmulticast mode [ 425.334572][T12218] syzkaller0: entered promiscuous mode [ 425.340987][T12218] syzkaller0: entered allmulticast mode [ 425.567966][T12222] tipc: Enabled bearer , priority 0 [ 425.582508][T12222] syzkaller0: entered promiscuous mode [ 425.589317][T12222] syzkaller0: entered allmulticast mode [ 425.647280][T12222] tipc: Resetting bearer [ 425.662781][T12221] tipc: Resetting bearer [ 425.707738][T12221] tipc: Disabling bearer [ 425.793763][T12228] syzkaller0: entered promiscuous mode [ 425.810387][T12228] syzkaller0: entered allmulticast mode [ 425.831241][T12228] tipc: Enabled bearer , priority 0 [ 425.842342][T12227] tipc: Resetting bearer [ 425.934315][T12227] tipc: Disabling bearer [ 426.728083][T12243] syzkaller0: entered promiscuous mode [ 426.737916][T12243] syzkaller0: entered allmulticast mode [ 427.009500][T12253] delete_channel: no stack [ 427.347187][T12255] syzkaller0: entered promiscuous mode [ 427.372614][T12255] syzkaller0: entered allmulticast mode [ 429.777341][T12265] tipc: Enabling of bearer rejected, failed to enable media [ 430.334657][T12306] netlink: 'syz.2.2131': attribute type 1 has an invalid length. [ 430.502000][T12309] bond3: entered promiscuous mode [ 430.529167][T12309] bond3: entered allmulticast mode [ 430.570522][T12309] 8021q: adding VLAN 0 to HW filter on device bond3 [ 430.579260][T12309] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check. [ 430.618232][T12312] syzkaller0: entered promiscuous mode [ 430.636051][T12312] syzkaller0: entered allmulticast mode [ 430.809059][T12291] ip6_vti0 speed is unknown, defaulting to 1000 [ 431.295005][T12324] delete_channel: no stack [ 431.660798][T12328] syzkaller0: entered promiscuous mode [ 431.666492][T12328] syzkaller0: entered allmulticast mode [ 433.008005][ T5140] udevd[5140]: worker [6167] /devices/virtual/block/nbd3 timeout; kill it [ 433.035634][ T5140] udevd[5140]: seq 12304 '/devices/virtual/block/nbd3' killed [ 434.193375][T12339] tipc: Enabling of bearer rejected, failed to enable media [ 434.553934][T12368] netlink: 'syz.2.2142': attribute type 1 has an invalid length. [ 434.657924][T12371] bond4: entered promiscuous mode [ 434.697076][T12371] bond4: entered allmulticast mode [ 434.745959][T12371] 8021q: adding VLAN 0 to HW filter on device bond4 [ 434.788442][T12371] A link change request failed with some changes committed already. Interface bond4 may have been left with an inconsistent configuration, please check. [ 434.955074][T12376] syzkaller0: entered promiscuous mode [ 434.961246][T12376] syzkaller0: entered allmulticast mode [ 435.175195][T12385] delete_channel: no stack [ 437.502979][T12403] tipc: Enabling of bearer rejected, failed to enable media [ 437.640799][T12411] tipc: Enabled bearer , priority 0 [ 437.663391][T12411] syzkaller0: entered promiscuous mode [ 437.672591][T12411] syzkaller0: entered allmulticast mode [ 437.694791][T12411] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 437.734292][T12411] tipc: Resetting bearer [ 437.765853][T12410] tipc: Resetting bearer [ 437.849998][T12410] tipc: Disabling bearer [ 438.054829][T12430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2155'. [ 438.224508][T12438] delete_channel: no stack [ 438.252889][T12437] syzkaller0: entered promiscuous mode [ 438.263811][T12437] syzkaller0: entered allmulticast mode [ 438.286256][T12440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2160'. [ 440.657255][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.663935][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.835908][T12451] tipc: Enabling of bearer rejected, failed to enable media [ 441.030814][T12476] tipc: Enabled bearer , priority 0 [ 441.039117][T12476] syzkaller0: entered promiscuous mode [ 441.048725][T12476] syzkaller0: entered allmulticast mode [ 441.085408][T12476] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 441.112882][T12476] tipc: Resetting bearer [ 441.143055][T12475] tipc: Resetting bearer [ 441.188932][T12475] tipc: Disabling bearer [ 441.208835][T12487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2169'. [ 441.333822][ T5780] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 441.459451][T12496] syzkaller0: entered promiscuous mode [ 441.473797][T12496] syzkaller0: entered allmulticast mode [ 441.505340][T12500] delete_channel: no stack [ 441.554005][ T5780] usb 1-1: Using ep0 maxpacket: 32 [ 441.567369][ T5780] usb 1-1: config 0 has no interfaces? [ 441.585742][ T5780] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 441.598547][ T5780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.619158][ T5780] usb 1-1: Product: syz [ 441.628892][ T5780] usb 1-1: Manufacturer: syz [ 441.633860][ T5780] usb 1-1: SerialNumber: syz [ 441.645345][ T5780] usb 1-1: config 0 descriptor?? [ 444.421418][T12509] tipc: Enabling of bearer rejected, failed to enable media [ 444.450347][ T6423] usb 1-1: USB disconnect, device number 12 [ 444.534386][T12519] tipc: Enabled bearer , priority 0 [ 444.554753][T12519] syzkaller0: entered promiscuous mode [ 444.560503][T12519] syzkaller0: entered allmulticast mode [ 444.657090][T12518] tipc: Resetting bearer [ 444.735964][T12518] tipc: Disabling bearer [ 444.942830][T12541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2184'. [ 445.019141][T12543] syzkaller0: entered promiscuous mode [ 445.025173][T12543] syzkaller0: entered allmulticast mode [ 445.314966][ T6423] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 445.513744][ T6423] usb 1-1: Using ep0 maxpacket: 32 [ 445.522558][ T6423] usb 1-1: config 0 has no interfaces? [ 445.541948][ T6423] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 445.552189][ T6423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.560902][ T6423] usb 1-1: Product: syz [ 445.574391][ T6423] usb 1-1: Manufacturer: syz [ 445.579205][ T6423] usb 1-1: SerialNumber: syz [ 445.591061][ T6423] usb 1-1: config 0 descriptor?? [ 448.070313][T12553] netlink: 'syz.2.2189': attribute type 1 has an invalid length. [ 448.078642][T12553] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 448.124047][T12566] tipc: Enabling of bearer rejected, failed to enable media [ 448.225949][T12577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2194'. [ 448.264539][ T6428] usb 1-1: USB disconnect, device number 13 [ 448.646258][T12600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2203'. [ 448.710642][T12602] tipc: Enabled bearer , priority 0 [ 448.719785][T12602] syzkaller0: entered promiscuous mode [ 448.733693][T12602] syzkaller0: entered allmulticast mode [ 448.777007][T12601] tipc: Resetting bearer [ 448.805763][T12601] tipc: Disabling bearer [ 448.848914][T12604] syzkaller0: entered promiscuous mode [ 448.854659][T12604] syzkaller0: entered allmulticast mode [ 449.196871][ T6423] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 449.404115][ T6423] usb 3-1: Using ep0 maxpacket: 32 [ 449.416755][ T6423] usb 3-1: config 0 has no interfaces? [ 449.430137][ T6423] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 449.440142][ T6423] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.457580][ T6423] usb 3-1: Product: syz [ 449.462280][ T6423] usb 3-1: Manufacturer: syz [ 449.469763][ T6423] usb 3-1: SerialNumber: syz [ 449.492426][ T6423] usb 3-1: config 0 descriptor?? [ 451.661918][T12608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2207'. [ 451.858955][T12623] tc_dump_action: action bad kind [ 451.895942][T12626] tipc: Enabled bearer , priority 0 [ 451.919699][T12626] syzkaller0: entered promiscuous mode [ 451.926819][T12626] syzkaller0: entered allmulticast mode [ 451.956687][T12626] tipc: Resetting bearer [ 451.980608][T12624] tipc: Resetting bearer [ 452.039518][T12624] tipc: Disabling bearer [ 452.110101][ T6426] usb 3-1: USB disconnect, device number 12 [ 452.392196][T12642] batadv_slave_1: entered allmulticast mode [ 452.400330][T12642] batadv_slave_1: left allmulticast mode [ 452.423135][T12644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2221'. [ 452.533923][T12646] syzkaller0: entered promiscuous mode [ 452.540357][T12646] syzkaller0: entered allmulticast mode [ 452.717864][T12655] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2223'. [ 452.924190][ T787] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 453.133756][ T787] usb 2-1: Using ep0 maxpacket: 32 [ 453.147064][ T787] usb 2-1: config 0 has no interfaces? [ 453.156754][ T787] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 453.171725][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.180620][ T787] usb 2-1: Product: syz [ 453.196896][ T787] usb 2-1: Manufacturer: syz [ 453.204125][ T787] usb 2-1: SerialNumber: syz [ 453.216808][ T787] usb 2-1: config 0 descriptor?? [ 453.453346][ T1173] block nbd3: Possible stuck request ffff888022460000: control (read@0,1024B). Runtime 210 seconds [ 453.465080][ T1173] block nbd3: Possible stuck request ffff888022460200: control (read@1024,1024B). Runtime 210 seconds [ 453.476467][ T1173] block nbd3: Possible stuck request ffff888022460400: control (read@2048,1024B). Runtime 210 seconds [ 453.487952][ T1173] block nbd3: Possible stuck request ffff888022460600: control (read@3072,1024B). Runtime 210 seconds [ 455.841542][ T787] usb 2-1: USB disconnect, device number 14 [ 456.121510][T12683] vlan4: entered promiscuous mode [ 456.132014][T12683] bond0: entered promiscuous mode [ 456.159696][T12683] bond_slave_0: entered promiscuous mode [ 456.167876][T12683] bond_slave_1: entered promiscuous mode [ 456.241339][T12687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2232'. [ 456.332916][T12692] tipc: Enabled bearer , priority 0 [ 456.351092][T12692] syzkaller0: entered promiscuous mode [ 456.373677][T12692] syzkaller0: entered allmulticast mode [ 456.425391][T12692] tipc: Resetting bearer [ 456.484251][T12689] tipc: Resetting bearer [ 456.571731][T12689] tipc: Disabling bearer [ 456.623789][T12698] netlink: 'syz.3.2236': attribute type 1 has an invalid length. [ 456.765065][T12698] 8021q: adding VLAN 0 to HW filter on device bond3 [ 456.800020][T12709] syzkaller0: entered promiscuous mode [ 456.838557][T12709] syzkaller0: entered allmulticast mode [ 456.964345][T12708] bond3: (slave bridge4): making interface the new active one [ 456.972991][T12708] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 457.385750][T12723] syzkaller0: entered promiscuous mode [ 457.414026][T12723] syzkaller0: entered allmulticast mode [ 457.998390][T12750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.078987][T12751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.099750][T12734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2243'. [ 460.148584][T12756] netlink: 'syz.3.2248': attribute type 1 has an invalid length. [ 460.197039][T12756] 8021q: adding VLAN 0 to HW filter on device bond4 [ 460.226707][T12758] bond4: (slave bridge5): making interface the new active one [ 460.240965][T12758] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 460.362333][T12764] syzkaller0: entered promiscuous mode [ 460.383857][T12764] syzkaller0: entered allmulticast mode [ 460.606521][T12773] syzkaller0: entered promiscuous mode [ 460.612252][T12773] syzkaller0: entered allmulticast mode [ 460.687098][T12781] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2257'. [ 460.823774][T12784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.878747][T12782] syzkaller0: entered promiscuous mode [ 460.894321][T12782] syzkaller0: entered allmulticast mode [ 460.895444][T12784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.913694][T12787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2260'. [ 462.456992][ T5775] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 462.481171][ T5775] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 462.492494][ T5775] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 462.536474][ T5775] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 462.565799][ T5775] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 462.581749][ T5775] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 464.151680][T12824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2272'. [ 464.291244][T12829] netlink: 'syz.1.2274': attribute type 1 has an invalid length. [ 464.353959][T12829] 8021q: adding VLAN 0 to HW filter on device bond2 [ 464.444041][T12835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.500901][T12829] bond2: (slave bridge6): making interface the new active one [ 464.525006][T12829] bond2: (slave bridge6): Enslaving as an active interface with an up link [ 464.540323][T12840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.645010][ T5778] Bluetooth: hci4: command tx timeout [ 464.742775][T12826] ip6_vti0 speed is unknown, defaulting to 1000 [ 464.760396][T12847] syzkaller0: entered promiscuous mode [ 464.774106][T12847] syzkaller0: entered allmulticast mode [ 464.791356][T12849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2280'. [ 465.072947][T12853] syzkaller0: entered promiscuous mode [ 465.083594][T12853] syzkaller0: entered allmulticast mode [ 465.329618][T12826] chnl_net:caif_netlink_parms(): no params data found [ 465.423417][T12865] syzkaller0: entered promiscuous mode [ 465.442498][T12865] syzkaller0: entered allmulticast mode [ 465.452242][T12863] syzkaller0: entered promiscuous mode [ 465.458462][T12863] syzkaller0: entered allmulticast mode [ 465.479625][T12869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2288'. [ 465.675417][T12826] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.688766][T12826] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.696367][T12826] bridge_slave_0: entered allmulticast mode [ 465.703487][T12826] bridge_slave_0: entered promiscuous mode [ 465.724927][T12826] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.738674][T12826] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.751592][T12826] bridge_slave_1: entered allmulticast mode [ 465.765186][T12826] bridge_slave_1: entered promiscuous mode [ 465.822527][T12826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.842235][T12826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.862067][T12874] syzkaller0: entered promiscuous mode [ 465.873742][T12874] syzkaller0: entered allmulticast mode [ 465.937386][T12826] team0: Port device team_slave_0 added [ 465.968968][T12826] team0: Port device team_slave_1 added [ 466.005849][T12881] syzkaller0: entered promiscuous mode [ 466.011722][T12881] syzkaller0: entered allmulticast mode [ 466.022308][T12826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.030173][T12826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.057660][T12826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.117945][T12826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.126893][T12826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.174995][T12826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.187214][T12884] syzkaller0: entered promiscuous mode [ 466.192750][T12884] syzkaller0: entered allmulticast mode [ 466.349061][T12826] hsr_slave_0: entered promiscuous mode [ 466.370145][T12826] hsr_slave_1: entered promiscuous mode [ 466.401806][T12826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.411535][T12826] Cannot create hsr debugfs directory [ 466.464946][T12894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2297'. [ 466.695746][T12899] syzkaller0: entered promiscuous mode [ 466.704932][T12902] delete_channel: no stack [ 466.714043][T12899] syzkaller0: entered allmulticast mode [ 466.724111][ T5778] Bluetooth: hci4: command tx timeout [ 466.862169][T12826] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.958290][T12826] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.038043][T12826] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.138058][T12826] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.185189][T12912] syzkaller0: entered promiscuous mode [ 467.190844][T12912] syzkaller0: entered allmulticast mode [ 467.286586][T12916] tipc: Enabling of bearer rejected, failed to enable media [ 467.329405][T12916] syzkaller0: entered promiscuous mode [ 467.363840][T12916] syzkaller0: entered allmulticast mode [ 467.500895][T12826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 467.572745][T12826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 467.586491][T12826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 467.608856][T12826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 467.756702][T12826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.800209][T12826] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.829648][ T2994] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.836908][ T2994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.889868][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.898171][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.004643][ T6423] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 468.110713][T12937] syzkaller0: entered promiscuous mode [ 468.124012][T12937] syzkaller0: entered allmulticast mode [ 468.204711][ T6423] usb 3-1: Using ep0 maxpacket: 32 [ 468.220551][ T6423] usb 3-1: config 0 has no interfaces? [ 468.237707][ T6423] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 468.273624][ T6423] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.281778][ T6423] usb 3-1: Product: syz [ 468.311138][ T6423] usb 3-1: Manufacturer: syz [ 468.327668][ T6423] usb 3-1: SerialNumber: syz [ 468.337142][ T6423] usb 3-1: config 0 descriptor?? [ 468.458600][T12826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.549544][T12826] veth0_vlan: entered promiscuous mode [ 468.596983][T12826] veth1_vlan: entered promiscuous mode [ 468.662180][T12945] delete_channel: no stack [ 468.685740][T12826] veth0_macvtap: entered promiscuous mode [ 468.718475][T12826] veth1_macvtap: entered promiscuous mode [ 468.763026][T12826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.787360][T12826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.804942][ T5778] Bluetooth: hci4: command tx timeout [ 468.811530][T12826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.849484][T12826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.877487][T12826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.910347][T12826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.948244][T12826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.968851][T12826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.978471][T12826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.987804][T12826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.190668][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.209190][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.302818][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.335514][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.545153][T12952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2270'. [ 469.762734][T12956] tipc: Enabled bearer , priority 0 [ 469.820579][T12956] syzkaller0: entered promiscuous mode [ 469.835108][T12956] syzkaller0: entered allmulticast mode [ 469.882725][T12956] tipc: Resetting bearer [ 469.907829][T12953] tipc: Resetting bearer [ 469.970109][T12953] tipc: Disabling bearer [ 470.281522][T12970] syzkaller0: entered promiscuous mode [ 470.287665][T12970] syzkaller0: entered allmulticast mode [ 470.309074][T12968] syzkaller0: entered promiscuous mode [ 470.318336][T12968] syzkaller0: entered allmulticast mode [ 470.893862][ T5778] Bluetooth: hci4: command tx timeout [ 472.741992][ T23] usb 3-1: USB disconnect, device number 13 [ 472.950665][T12980] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2327'. [ 473.040572][T12984] tipc: Enabled bearer , priority 0 [ 473.064248][T12984] syzkaller0: entered promiscuous mode [ 473.069877][T12984] syzkaller0: entered allmulticast mode [ 473.107567][T12984] tipc: Resetting bearer [ 473.148614][T12983] tipc: Resetting bearer [ 473.204666][T12983] tipc: Disabling bearer [ 473.416411][T12992] syzkaller0: entered promiscuous mode [ 473.422223][T12992] syzkaller0: entered allmulticast mode [ 473.553771][ T787] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 473.616974][T13004] syzkaller0: entered promiscuous mode [ 473.623022][T13004] syzkaller0: entered allmulticast mode [ 473.765938][ T787] usb 2-1: Using ep0 maxpacket: 32 [ 473.784584][ T787] usb 2-1: config 0 has no interfaces? [ 473.810129][ T787] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 473.831227][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.850523][ T787] usb 2-1: Product: syz [ 473.855750][ T787] usb 2-1: Manufacturer: syz [ 473.860407][ T787] usb 2-1: SerialNumber: syz [ 473.874465][ T787] usb 2-1: config 0 descriptor?? [ 476.498140][T13011] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2340'. [ 476.527004][ T6424] usb 2-1: USB disconnect, device number 15 [ 476.784475][T13022] tipc: Enabled bearer , priority 0 [ 476.834477][T13022] syzkaller0: entered promiscuous mode [ 476.840210][T13022] syzkaller0: entered allmulticast mode [ 476.901698][T13022] tipc: Resetting bearer [ 476.918036][T13020] tipc: Resetting bearer [ 476.951751][T13020] tipc: Disabling bearer [ 476.993158][T13031] syzkaller0: entered promiscuous mode [ 476.999967][T13031] syzkaller0: entered allmulticast mode [ 477.125116][T13038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2351'. [ 477.243006][T13040] syzkaller0: entered promiscuous mode [ 477.261200][ T787] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 477.270183][T13040] syzkaller0: entered allmulticast mode [ 477.464770][ T787] usb 1-1: Using ep0 maxpacket: 32 [ 477.492982][ T787] usb 1-1: config 0 has no interfaces? [ 477.513007][ T787] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 477.522825][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.541678][ T787] usb 1-1: Product: syz [ 477.563048][ T787] usb 1-1: Manufacturer: syz [ 477.573370][ T787] usb 1-1: SerialNumber: syz [ 477.595188][ T787] usb 1-1: config 0 descriptor?? [ 480.414304][ T5780] usb 1-1: USB disconnect, device number 14 [ 480.697485][T13045] ip6_vti0 speed is unknown, defaulting to 1000 [ 480.899251][T13072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2362'. [ 480.969868][T13071] syzkaller0: entered promiscuous mode [ 480.982892][T13071] syzkaller0: entered allmulticast mode [ 481.145986][T13076] syzkaller0: entered promiscuous mode [ 481.151843][T13076] syzkaller0: entered allmulticast mode [ 481.484958][T13079] syzkaller0: entered promiscuous mode [ 481.493640][T13079] syzkaller0: entered allmulticast mode [ 481.776327][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 481.790217][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 481.803914][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 481.823917][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 481.865267][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 481.872920][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 483.533727][ T1173] block nbd3: Possible stuck request ffff888022460000: control (read@0,1024B). Runtime 240 seconds [ 483.545131][ T1173] block nbd3: Possible stuck request ffff888022460200: control (read@1024,1024B). Runtime 240 seconds [ 483.556645][ T1173] block nbd3: Possible stuck request ffff888022460400: control (read@2048,1024B). Runtime 240 seconds [ 483.568035][ T1173] block nbd3: Possible stuck request ffff888022460600: control (read@3072,1024B). Runtime 240 seconds [ 483.939573][ T5778] Bluetooth: hci1: command tx timeout [ 484.122920][T13091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2370'. [ 484.264844][T13097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2372'. [ 484.394303][T13100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2373'. [ 484.450224][T13085] ip6_vti0 speed is unknown, defaulting to 1000 [ 484.551963][T13102] syzkaller0: entered promiscuous mode [ 484.559887][T13102] syzkaller0: entered allmulticast mode [ 484.935668][T13111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2377'. [ 485.145217][T13111] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2377'. [ 485.181831][T13110] syzkaller0: entered promiscuous mode [ 485.197923][T13110] syzkaller0: entered allmulticast mode [ 486.006686][ T5778] Bluetooth: hci1: command tx timeout [ 487.352660][T13119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2379'. [ 487.530922][T13085] chnl_net:caif_netlink_parms(): no params data found [ 487.576902][T13127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2381'. [ 487.754490][T13132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2382'. [ 487.868986][T13134] syzkaller0: entered promiscuous mode [ 487.895191][T13134] syzkaller0: entered allmulticast mode [ 487.920865][T13085] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.929024][T13085] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.936413][T13085] bridge_slave_0: entered allmulticast mode [ 487.944169][T13085] bridge_slave_0: entered promiscuous mode [ 487.953483][T13085] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.966611][T13085] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.976876][T13085] bridge_slave_1: entered allmulticast mode [ 487.985132][T13085] bridge_slave_1: entered promiscuous mode [ 488.062507][T13143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2386'. [ 488.071917][T13085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.085180][ T5778] Bluetooth: hci1: command tx timeout [ 488.120402][T13085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.163212][T13143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2386'. [ 488.165429][T13085] team0: Port device team_slave_0 added [ 488.185143][T13085] team0: Port device team_slave_1 added [ 488.279453][T13146] syzkaller0: entered promiscuous mode [ 488.285850][T13146] syzkaller0: entered allmulticast mode [ 490.174461][ T5778] Bluetooth: hci1: command tx timeout [ 490.678990][T13149] syzkaller0: entered promiscuous mode [ 490.687110][T13149] syzkaller0: entered allmulticast mode [ 490.700255][T13157] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2392'. [ 490.809366][T13085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.823014][T13085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.851570][T13085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.874158][T13085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.881257][T13085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.933349][T13085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.954586][T13161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2393'. [ 490.988834][T13167] netlink: 'syz.3.2395': attribute type 1 has an invalid length. [ 491.060152][T13167] 8021q: adding VLAN 0 to HW filter on device bond1 [ 491.190675][T13171] syzkaller0: entered promiscuous mode [ 491.196706][T13171] syzkaller0: entered allmulticast mode [ 491.394180][T13176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2397'. [ 491.626939][T13177] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2397'. [ 492.047962][T13188] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 493.697519][T13085] hsr_slave_0: entered promiscuous mode [ 493.705066][T13085] hsr_slave_1: entered promiscuous mode [ 493.711320][T13085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.719373][T13085] Cannot create hsr debugfs directory [ 493.811160][T13193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2401'. [ 494.194755][T13200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2403'. [ 494.233736][T13187] ip6_vti0 speed is unknown, defaulting to 1000 [ 494.389929][T13085] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.562737][T13085] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.599676][T13207] syzkaller0: entered promiscuous mode [ 494.605992][T13207] syzkaller0: entered allmulticast mode [ 494.738351][T13085] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.778160][T13210] tipc: Enabling of bearer rejected, failed to enable media [ 494.813156][T13209] syzkaller0: entered promiscuous mode [ 494.819592][T13209] syzkaller0: entered allmulticast mode [ 494.852001][T13085] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.170686][T13217] tipc: Started in network mode [ 495.179441][T13217] tipc: Node identity 12e51863e088, cluster identity 4711 [ 495.189788][T13217] tipc: Enabled bearer , priority 0 [ 495.321411][T13217] syzkaller0: entered promiscuous mode [ 495.327417][T13217] syzkaller0: entered allmulticast mode [ 495.342711][T13217] tipc: Resetting bearer [ 495.361223][T13216] tipc: Resetting bearer [ 497.554891][T13216] tipc: Disabling bearer [ 497.580280][T13224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2413'. [ 497.625143][ T5816] tipc: Node number set to 4067235939 [ 497.630817][T13085] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 497.649949][T13085] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 497.708680][T13085] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 497.747542][T13085] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 497.868013][T13230] syzkaller0: entered promiscuous mode [ 497.875035][T13230] syzkaller0: entered allmulticast mode [ 498.247408][T13234] tipc: Enabling of bearer rejected, failed to enable media [ 498.281368][T13234] syzkaller0: entered promiscuous mode [ 498.287424][T13234] syzkaller0: entered allmulticast mode [ 498.320279][T13085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.335559][T13236] tipc: Enabled bearer , priority 0 [ 498.378159][T13236] syzkaller0: entered promiscuous mode [ 498.385267][T13236] syzkaller0: entered allmulticast mode [ 498.420759][T13085] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.498987][T13236] tipc: Resetting bearer [ 498.521045][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.528422][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.540393][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.547731][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.558982][T13235] tipc: Resetting bearer [ 498.592958][T13235] tipc: Disabling bearer [ 498.611145][T13238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2419'. [ 498.804333][T13247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2422'. [ 498.869999][T13246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2421'. [ 499.036248][T13255] syzkaller0: entered promiscuous mode [ 499.042006][T13255] syzkaller0: entered allmulticast mode [ 499.291344][T13265] tipc: Enabling of bearer rejected, failed to enable media [ 499.318553][T13261] syzkaller0: entered promiscuous mode [ 499.329558][T13261] syzkaller0: entered allmulticast mode [ 499.350195][T13085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.482881][T13269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2429'. [ 499.601427][T13274] tipc: Enabled bearer , priority 0 [ 499.636779][T13085] veth0_vlan: entered promiscuous mode [ 499.648162][T13271] syzkaller0: entered promiscuous mode [ 499.679496][T13271] syzkaller0: entered allmulticast mode [ 499.707684][T13085] veth1_vlan: entered promiscuous mode [ 499.760690][T13271] tipc: Resetting bearer [ 499.778300][T13279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2433'. [ 499.799176][T13270] tipc: Resetting bearer [ 499.822993][T13270] tipc: Disabling bearer [ 499.831349][T13277] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2432'. [ 499.891546][T13085] veth0_macvtap: entered promiscuous mode [ 499.938042][T13085] veth1_macvtap: entered promiscuous mode [ 500.011562][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.045229][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.064410][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.075655][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.091511][T13085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.138109][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.183604][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.216718][T13085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.247932][T13085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.275109][T13085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.335200][T13295] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2438'. [ 500.352283][T13085] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.363060][T13085] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.374516][T13085] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.383837][T13085] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.505574][T13287] syzkaller0: entered promiscuous mode [ 500.511741][T13287] syzkaller0: entered allmulticast mode [ 502.086216][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.102277][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.208239][T13309] tipc: Enabling of bearer rejected, failed to enable media [ 503.322462][ T12] tipc: Left network mode [ 503.409570][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.444511][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.478628][T13330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2443'. [ 503.714778][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.737550][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.011362][T13342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2448'. [ 504.295392][T13348] syzkaller0: entered promiscuous mode [ 504.301118][T13348] syzkaller0: entered allmulticast mode [ 504.333148][T13360] tipc: Enabled bearer , priority 0 [ 504.468917][T13360] syzkaller0: entered promiscuous mode [ 504.474754][T13360] syzkaller0: entered allmulticast mode [ 504.582201][T13350] syzkaller0: entered promiscuous mode [ 504.588043][T13350] syzkaller0: entered allmulticast mode [ 504.715367][T13360] tipc: Resetting bearer [ 505.265162][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 505.289345][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 505.300418][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 505.317977][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 505.336868][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 505.353747][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 507.422665][T13366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2455'. [ 507.435015][T13353] tipc: Resetting bearer [ 507.444055][ T5778] Bluetooth: hci0: command tx timeout [ 507.461049][T13353] tipc: Disabling bearer [ 507.661116][ T6424] tipc: Node number set to 2661329447 [ 507.806367][T13376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2457'. [ 507.831864][T13381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2459'. [ 507.896804][T13383] bridge0: entered promiscuous mode [ 507.913678][T13383] bridge0: entered allmulticast mode [ 507.919608][T13383] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 507.996526][T13386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2461'. [ 508.048031][T13387] xt_hashlimit: max too large, truncated to 1048576 [ 508.059931][T13386] Bluetooth: MGMT ver 1.22 [ 508.241235][T13392] syzkaller0: entered promiscuous mode [ 508.262828][T13392] syzkaller0: entered allmulticast mode [ 508.500469][T13399] tipc: Enabled bearer , priority 0 [ 508.524306][T13369] ip6_vti0 speed is unknown, defaulting to 1000 [ 508.566437][T13395] tipc: Resetting bearer [ 508.595452][T13403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2467'. [ 508.711427][T13400] syzkaller0: entered promiscuous mode [ 508.719044][T13400] syzkaller0: entered allmulticast mode [ 508.751224][T13394] tipc: Resetting bearer [ 508.857279][T13394] tipc: Disabling bearer [ 508.952867][T13408] veth1: entered promiscuous mode [ 508.976302][T13408] veth1: entered allmulticast mode [ 509.041462][T13408] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 509.524624][ T5778] Bluetooth: hci0: command tx timeout [ 509.580717][T13416] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2473'. [ 509.643914][ T12] hsr_slave_0: left promiscuous mode [ 509.689068][ T12] hsr_slave_1: left promiscuous mode [ 509.697953][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.706051][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.715302][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.722993][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.737371][ T12] bridge_slave_1: left allmulticast mode [ 509.750122][ T12] bridge_slave_1: left promiscuous mode [ 509.768237][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.798552][ T12] bridge_slave_0: left allmulticast mode [ 509.804720][ T12] bridge_slave_0: left promiscuous mode [ 509.810560][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.925988][ T12] veth1_macvtap: left promiscuous mode [ 509.938146][ T12] veth0_macvtap: left promiscuous mode [ 509.948730][ T12] veth1_vlan: left promiscuous mode [ 510.900131][ T12] bond4 (unregistering): Released all slaves [ 511.067203][ T12] bond3 (unregistering): Released all slaves [ 511.280142][ T12] bond2 (unregistering): Released all slaves [ 511.516487][ T12] bond1 (unregistering): Released all slaves [ 511.612537][ T5778] Bluetooth: hci0: command tx timeout [ 511.710963][ T5816] syz1: rxe_query_port: returned err = -19 [ 511.738258][ T64] smc: removing ib device syz1 [ 512.491432][ T12] team0 (unregistering): Port device team_slave_1 removed [ 512.618535][ T12] team0 (unregistering): Port device team_slave_0 removed [ 512.732172][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.851831][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.464428][ T12] bond0 (unregistering): Released all slaves [ 513.605598][T13435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2476'. [ 513.606317][ T1173] block nbd3: Possible stuck request ffff888022460000: control (read@0,1024B). Runtime 270 seconds [ 513.626228][ T1173] block nbd3: Possible stuck request ffff888022460200: control (read@1024,1024B). Runtime 270 seconds [ 513.637984][ T1173] block nbd3: Possible stuck request ffff888022460400: control (read@2048,1024B). Runtime 270 seconds [ 513.650975][ T1173] block nbd3: Possible stuck request ffff888022460600: control (read@3072,1024B). Runtime 270 seconds [ 513.683938][ T5778] Bluetooth: hci0: command tx timeout [ 513.879300][T13369] chnl_net:caif_netlink_parms(): no params data found [ 513.904171][T13442] tipc: Started in network mode [ 513.909203][T13442] tipc: Node identity 5aa7219eac26, cluster identity 4711 [ 513.947602][T13442] tipc: Enabled bearer , priority 0 [ 514.001560][T13447] syzkaller0: entered promiscuous mode [ 514.017654][T13447] syzkaller0: entered allmulticast mode [ 514.164616][T13447] tipc: Resetting bearer [ 514.268225][T13441] tipc: Resetting bearer [ 514.291656][T13441] tipc: Disabling bearer [ 514.329540][T13369] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.341860][T13369] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.382220][T13369] bridge_slave_0: entered allmulticast mode [ 514.402940][T13369] bridge_slave_0: entered promiscuous mode [ 514.413340][T13457] tipc: Enabled bearer , priority 0 [ 514.433650][T13458] syzkaller0: entered promiscuous mode [ 514.439205][T13458] syzkaller0: entered allmulticast mode [ 514.499591][T13369] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.518572][T13369] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.526369][T13369] bridge_slave_1: entered allmulticast mode [ 514.534024][T13369] bridge_slave_1: entered promiscuous mode [ 514.544293][T13465] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2484'. [ 514.573377][T13456] tipc: Resetting bearer [ 514.615413][T13456] tipc: Disabling bearer [ 514.628963][T13369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.642039][T13369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.710247][T13464] netlink: 'syz.3.2485': attribute type 4 has an invalid length. [ 514.786398][T13369] team0: Port device team_slave_0 added [ 514.806384][T13369] team0: Port device team_slave_1 added [ 514.876371][T13469] syzkaller0: entered promiscuous mode [ 514.882903][T13469] syzkaller0: entered allmulticast mode [ 514.928360][T13369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.940001][T13369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.971183][T13369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.159311][T13369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.178000][T13369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.244650][T13369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.388712][T13369] hsr_slave_0: entered promiscuous mode [ 515.397714][T13369] hsr_slave_1: entered promiscuous mode [ 515.411509][T13485] tipc: Enabled bearer , priority 0 [ 515.420717][T13487] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2493'. [ 515.443091][T13485] syzkaller0: entered promiscuous mode [ 515.449778][T13485] syzkaller0: entered allmulticast mode [ 515.601457][T13485] tipc: Resetting bearer [ 515.641131][T13484] tipc: Resetting bearer [ 515.682509][T13484] tipc: Disabling bearer [ 515.719280][T13498] tipc: Enabled bearer , priority 0 [ 515.728111][T13495] syzkaller0: entered promiscuous mode [ 515.740528][T13495] syzkaller0: entered allmulticast mode [ 515.875708][T13494] tipc: Resetting bearer [ 515.920945][T13494] tipc: Disabling bearer [ 515.942540][T13502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2496'. [ 516.261102][T13510] syzkaller0: entered promiscuous mode [ 516.267553][T13512] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2501'. [ 516.278944][T13510] syzkaller0: entered allmulticast mode [ 516.434133][T13516] tipc: Enabled bearer , priority 0 [ 516.441933][T13516] syzkaller0: entered promiscuous mode [ 516.448284][T13516] syzkaller0: entered allmulticast mode [ 516.519358][T13516] tipc: Resetting bearer [ 516.550266][T13515] tipc: Resetting bearer [ 516.628007][T13515] tipc: Disabling bearer [ 516.742948][T13523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2505'. [ 516.845577][T13525] tipc: Enabled bearer , priority 0 [ 516.879886][T13525] syzkaller0: entered promiscuous mode [ 516.891190][T13525] syzkaller0: entered allmulticast mode [ 516.927123][T13369] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 516.989454][T13369] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 517.008093][T13369] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 517.059834][T13524] tipc: Resetting bearer [ 517.100832][T13524] tipc: Disabling bearer [ 517.110862][T13369] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 517.132547][T13534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2510'. [ 517.307000][T13536] syzkaller0: entered promiscuous mode [ 517.312560][T13536] syzkaller0: entered allmulticast mode [ 517.557689][T13369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.629955][T13369] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.655643][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.662847][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.676636][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.683932][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.703872][T13549] syzkaller0: entered promiscuous mode [ 517.709590][T13549] syzkaller0: entered allmulticast mode [ 518.165783][T13369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.251455][T13540] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 518.258212][T13369] veth0_vlan: entered promiscuous mode [ 518.381803][T13555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2516'. [ 518.401298][T13369] veth1_vlan: entered promiscuous mode [ 518.479815][T13369] veth0_macvtap: entered promiscuous mode [ 518.509618][T13369] veth1_macvtap: entered promiscuous mode [ 518.583116][T13369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.600577][T13369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.613674][T13369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.632852][T13369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.646818][T13369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.665924][T13561] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2518'. [ 518.679789][T13369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.703658][T13369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.718064][T13369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.729489][T13369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.742394][T13369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.751740][T13560] tipc: Enabled bearer , priority 0 [ 518.770083][T13564] syzkaller0: entered promiscuous mode [ 518.780912][T13564] syzkaller0: entered allmulticast mode [ 518.800846][T13369] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.824421][T13369] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.843693][T13369] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.855061][T13369] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.896250][T13560] tipc: Resetting bearer [ 518.929318][T13558] tipc: Resetting bearer [ 518.961148][T13558] tipc: Disabling bearer [ 519.041908][T13570] ip6_vti0 speed is unknown, defaulting to 1000 [ 519.220705][T13568] syzkaller0: entered promiscuous mode [ 519.226760][T13568] syzkaller0: entered allmulticast mode [ 519.270628][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.288353][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.888075][T13580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2525'. [ 521.978477][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.014899][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.301603][T13591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2454'. [ 522.387284][T13591] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2454'. [ 522.446533][T13595] tipc: Enabled bearer , priority 0 [ 522.490373][T13595] syzkaller0: entered promiscuous mode [ 522.513869][T13595] syzkaller0: entered allmulticast mode [ 522.593277][T13595] tipc: Resetting bearer [ 522.631598][T13594] tipc: Resetting bearer [ 522.705011][T13594] tipc: Disabling bearer [ 522.751937][T13599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2533'. [ 522.783875][T13604] erspan0: entered promiscuous mode [ 522.789249][T13604] erspan0: entered allmulticast mode [ 522.797912][T13604] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 522.935796][T13601] syzkaller0: entered promiscuous mode [ 522.941355][T13601] syzkaller0: entered allmulticast mode [ 525.888405][T13620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2541'. [ 525.964691][T13620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2541'. [ 526.454647][T13635] syzkaller0: entered promiscuous mode [ 526.483792][T13635] syzkaller0: entered allmulticast mode [ 526.744954][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 526.769838][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 526.813869][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 526.842307][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 526.856073][ T5775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 526.863885][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 526.955758][ T6428] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 526.957092][T13643] ip6_vti0 speed is unknown, defaulting to 1000 [ 526.988654][T13649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2554'. [ 527.049185][T13649] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2554'. [ 527.143598][ T6428] usb 3-1: Using ep0 maxpacket: 32 [ 527.165921][ T6428] usb 3-1: config 0 has no interfaces? [ 527.196498][ T6428] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 527.213568][ T6428] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.221648][ T6428] usb 3-1: Product: syz [ 527.235439][ T6428] usb 3-1: Manufacturer: syz [ 527.240304][ T6428] usb 3-1: SerialNumber: syz [ 527.271185][ T6428] usb 3-1: config 0 descriptor?? [ 527.544306][T13662] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2560'. [ 527.580286][T13643] chnl_net:caif_netlink_parms(): no params data found [ 527.739022][T13643] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.746412][T13643] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.754143][T13643] bridge_slave_0: entered allmulticast mode [ 527.761911][T13643] bridge_slave_0: entered promiscuous mode [ 527.781569][T13643] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.789119][T13643] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.797841][T13643] bridge_slave_1: entered allmulticast mode [ 527.805978][T13643] bridge_slave_1: entered promiscuous mode [ 527.813755][T13669] syzkaller0: entered promiscuous mode [ 527.819315][T13669] syzkaller0: entered allmulticast mode [ 527.826532][T13671] tipc: Enabled bearer , priority 0 [ 527.912698][T13670] tipc: Disabling bearer [ 527.959497][T13643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.998647][T13643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.106983][T13643] team0: Port device team_slave_0 added [ 528.152817][T13643] team0: Port device team_slave_1 added [ 528.171955][T13676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2564'. [ 528.189706][T13643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.213958][T13643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.263834][T13643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.305555][T13643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.323159][T13643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.363858][T13676] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2564'. [ 528.387808][T13643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.513352][T13643] hsr_slave_0: entered promiscuous mode [ 528.529543][T13643] hsr_slave_1: entered promiscuous mode [ 528.563125][T13643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 528.581523][T13643] Cannot create hsr debugfs directory [ 528.645174][T13691] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2569'. [ 528.810485][T13693] syzkaller0: entered promiscuous mode [ 528.817422][T13693] syzkaller0: entered allmulticast mode [ 528.948088][T13695] tipc: Started in network mode [ 528.953226][T13695] tipc: Node identity 2603b5173149, cluster identity 4711 [ 528.961182][T13695] tipc: Enabled bearer , priority 0 [ 528.968416][ T5778] Bluetooth: hci2: command tx timeout [ 529.045682][T13694] tipc: Disabling bearer [ 529.443066][T13706] syzkaller0: entered promiscuous mode [ 529.460449][T13706] syzkaller0: entered allmulticast mode [ 529.551794][T13710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2577'. [ 529.810091][T13715] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2577'. [ 531.051089][ T5778] Bluetooth: hci2: command tx timeout [ 532.206886][ T6427] usb 3-1: USB disconnect, device number 14 [ 532.320415][T13643] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 532.333597][T13718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2578'. [ 532.346562][T13643] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 532.383991][T13643] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 532.410825][T13643] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 532.435935][T13719] syzkaller0: entered promiscuous mode [ 532.441561][T13719] syzkaller0: entered allmulticast mode [ 532.455139][T13721] netlink: 'syz.3.2580': attribute type 1 has an invalid length. [ 532.494195][T13721] 8021q: adding VLAN 0 to HW filter on device bond2 [ 532.757274][T13729] tipc: Enabled bearer , priority 0 [ 532.785880][T13728] tipc: Disabling bearer [ 532.941182][T13643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.964760][T13643] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.104231][T13740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2587'. [ 533.130265][ T5778] Bluetooth: hci2: command tx timeout [ 533.156887][ T6428] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 533.317273][T13745] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2587'. [ 533.367430][ T6428] usb 4-1: Using ep0 maxpacket: 32 [ 533.411287][ T6428] usb 4-1: config 0 has no interfaces? [ 533.456776][ T6428] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 533.594733][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.602324][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.611111][ T6428] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.633612][ T6428] usb 4-1: Product: syz [ 533.649090][ T6428] usb 4-1: Manufacturer: syz [ 533.652034][T13438] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.653933][ T6428] usb 4-1: SerialNumber: syz [ 533.661012][T13438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.679382][ T6428] usb 4-1: config 0 descriptor?? [ 533.860774][T13747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2588'. [ 534.078586][T13756] syzkaller0: entered promiscuous mode [ 534.100745][T13756] syzkaller0: entered allmulticast mode [ 534.212721][T13643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.341363][T13643] veth0_vlan: entered promiscuous mode [ 534.376539][T13643] veth1_vlan: entered promiscuous mode [ 534.460141][T13766] netlink: 'syz.2.2594': attribute type 1 has an invalid length. [ 534.505140][T13766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 534.527109][T13643] veth0_macvtap: entered promiscuous mode [ 534.545082][T13643] veth1_macvtap: entered promiscuous mode [ 534.652980][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.671165][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.681619][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.694025][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.705040][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.716165][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.731924][T13643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.749145][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.762350][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.783849][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.800337][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.822550][T13643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.833665][T13643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.846534][T13643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.871336][T13643] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.882806][T13643] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.893590][T13643] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.902893][T13643] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.039624][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.057263][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.098071][T13438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.110498][T13778] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2598'. [ 535.112115][T13438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.205839][ T5778] Bluetooth: hci2: command tx timeout [ 535.250856][T13780] tipc: Started in network mode [ 535.256263][T13780] tipc: Node identity f6f2f0877091, cluster identity 4711 [ 535.263950][T13780] tipc: Enabled bearer , priority 0 [ 535.273894][T13780] syzkaller0: entered promiscuous mode [ 535.279544][T13780] syzkaller0: entered allmulticast mode [ 535.302760][T13780] tipc: Resetting bearer [ 535.311741][T13779] tipc: Resetting bearer [ 535.346526][T13779] tipc: Disabling bearer [ 535.488418][T13786] syzkaller0: entered promiscuous mode [ 535.517809][T13786] syzkaller0: entered allmulticast mode [ 535.952422][T13805] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2607'. [ 536.037402][ T5816] usb 4-1: USB disconnect, device number 5 [ 536.236459][T13812] netlink: 'syz.0.2611': attribute type 27 has an invalid length. [ 536.253851][T13812] netlink: 'syz.0.2611': attribute type 1 has an invalid length. [ 536.262889][T13812] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.303983][T13810] tipc: Enabled bearer , priority 0 [ 536.334834][T13813] syzkaller0: entered promiscuous mode [ 536.340559][T13813] syzkaller0: entered allmulticast mode [ 536.456811][T13810] tipc: Resetting bearer [ 536.468060][T13809] tipc: Resetting bearer [ 536.559184][T13809] tipc: Disabling bearer [ 536.620593][T13820] syzkaller0: entered promiscuous mode [ 536.629715][T13820] syzkaller0: entered allmulticast mode [ 536.799936][T13828] syzkaller0: entered promiscuous mode [ 536.813292][T13828] syzkaller0: entered allmulticast mode [ 536.931110][T13837] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2619'. [ 537.003784][ T6428] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 537.223705][ T6428] usb 2-1: Using ep0 maxpacket: 32 [ 537.232712][ T6428] usb 2-1: config 0 has no interfaces? [ 537.247614][ T6428] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 537.266836][ T6428] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.281691][ T6428] usb 2-1: Product: syz [ 537.292788][ T6428] usb 2-1: Manufacturer: syz [ 537.308093][ T6428] usb 2-1: SerialNumber: syz [ 537.340041][ T6428] usb 2-1: config 0 descriptor?? [ 539.881932][ T6428] usb 2-1: USB disconnect, device number 16 [ 540.061487][T13846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2623'. [ 540.103969][T13852] tipc: Enabled bearer , priority 0 [ 540.119457][T13852] syzkaller0: entered promiscuous mode [ 540.135427][T13852] syzkaller0: entered allmulticast mode [ 540.167854][T13846] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2623'. [ 540.176400][T13852] tipc: Resetting bearer [ 540.213434][T13851] tipc: Resetting bearer [ 540.267021][T13851] tipc: Disabling bearer [ 540.468348][T13862] syzkaller0: entered promiscuous mode [ 540.482718][T13862] syzkaller0: entered allmulticast mode [ 540.591568][T13865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2630'. [ 540.813660][ T5816] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 540.869473][T13872] syzkaller0: entered promiscuous mode [ 540.875605][T13872] syzkaller0: entered allmulticast mode [ 541.023671][ T5816] usb 1-1: Using ep0 maxpacket: 32 [ 541.035551][ T5816] usb 1-1: config 0 has no interfaces? [ 541.052707][ T5816] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 541.084080][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.092158][ T5816] usb 1-1: Product: syz [ 541.105803][ T5816] usb 1-1: Manufacturer: syz [ 541.110651][ T5816] usb 1-1: SerialNumber: syz [ 541.121772][ T5816] usb 1-1: config 0 descriptor?? [ 543.707540][ T1173] block nbd3: Possible stuck request ffff888022460000: control (read@0,1024B). Runtime 300 seconds [ 543.720711][ T1173] block nbd3: Possible stuck request ffff888022460200: control (read@1024,1024B). Runtime 300 seconds [ 543.732331][ T1173] block nbd3: Possible stuck request ffff888022460400: control (read@2048,1024B). Runtime 300 seconds [ 543.743720][ T1173] block nbd3: Possible stuck request ffff888022460600: control (read@3072,1024B). Runtime 300 seconds [ 543.988177][ T787] usb 1-1: USB disconnect, device number 15 [ 544.111167][T13893] tipc: Enabled bearer , priority 0 [ 544.135636][T13893] syzkaller0: entered promiscuous mode [ 544.173794][T13893] syzkaller0: entered allmulticast mode [ 544.219822][T13893] tipc: Resetting bearer [ 544.242610][T13897] syzkaller0: entered promiscuous mode [ 544.258696][T13899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2641'. [ 544.263878][T13897] syzkaller0: entered allmulticast mode [ 544.282665][T13892] tipc: Resetting bearer [ 544.317498][T13892] tipc: Disabling bearer [ 544.843753][ T6424] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 545.053590][ T6424] usb 2-1: Using ep0 maxpacket: 32 [ 545.070041][ T6424] usb 2-1: config 0 has no interfaces? [ 545.078597][T13928] syzkaller0: entered promiscuous mode [ 545.090881][ T6424] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 545.097896][T13928] syzkaller0: entered allmulticast mode [ 545.114750][ T6424] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.153749][ T6424] usb 2-1: Product: syz [ 545.163704][ T6424] usb 2-1: Manufacturer: syz [ 545.168553][ T6424] usb 2-1: SerialNumber: syz [ 545.195157][ T6424] usb 2-1: config 0 descriptor?? [ 546.014357][T13962] syzkaller0: entered promiscuous mode [ 546.021023][T13962] syzkaller0: entered allmulticast mode [ 546.780321][T13987] tipc: Enabled bearer , priority 0 [ 546.788903][T13989] syzkaller0: entered promiscuous mode [ 546.797473][T13989] syzkaller0: entered allmulticast mode [ 546.834484][T13987] tipc: Resetting bearer [ 546.856758][T13984] tipc: Resetting bearer [ 546.913098][T13984] tipc: Disabling bearer [ 547.038117][T13994] syzkaller0: entered promiscuous mode [ 547.060167][T13994] syzkaller0: entered allmulticast mode [ 547.739692][ T6428] usb 2-1: USB disconnect, device number 17 [ 547.864111][T14020] tipc: Enabled bearer , priority 0 [ 547.879636][T14020] syzkaller0: entered promiscuous mode [ 547.902316][T14020] syzkaller0: entered allmulticast mode [ 547.917979][T14022] syzkaller0: entered promiscuous mode [ 547.933902][T14022] syzkaller0: entered allmulticast mode [ 548.059540][T14030] tipc: Resetting bearer [ 548.080326][T14019] tipc: Resetting bearer [ 548.145036][T14019] tipc: Disabling bearer [ 548.707914][ T6426] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 548.747730][T14051] syzkaller0: entered promiscuous mode [ 548.774291][T14051] syzkaller0: entered allmulticast mode [ 548.913618][ T6426] usb 3-1: Using ep0 maxpacket: 32 [ 548.922908][T14059] tipc: Enabled bearer , priority 0 [ 548.935627][T14059] syzkaller0: entered promiscuous mode [ 548.935640][ T6426] usb 3-1: config 0 has no interfaces? [ 548.959435][ T6426] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 548.959447][T14059] syzkaller0: entered allmulticast mode [ 548.973154][T14059] tipc: Resetting bearer [ 548.999058][T14056] tipc: Resetting bearer [ 549.002835][ T6426] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.018682][ T6426] usb 3-1: Product: syz [ 549.026113][ T6426] usb 3-1: Manufacturer: syz [ 549.030873][ T6426] usb 3-1: SerialNumber: syz [ 549.039141][ T6426] usb 3-1: config 0 descriptor?? [ 549.084824][T14056] tipc: Disabling bearer [ 549.632357][T14082] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2712'. [ 550.821686][T14098] syzkaller0: entered promiscuous mode [ 550.842795][T14098] syzkaller0: entered allmulticast mode [ 551.379675][T14106] tipc: Enabled bearer , priority 0 [ 551.408691][T14106] syzkaller0: entered promiscuous mode [ 551.427832][T14106] syzkaller0: entered allmulticast mode [ 551.480551][T14106] tipc: Resetting bearer [ 551.527416][T14104] tipc: Resetting bearer [ 551.636518][T14104] tipc: Disabling bearer [ 551.930046][ T5816] usb 3-1: USB disconnect, device number 15 [ 551.957639][T14116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2726'. [ 552.427063][T14124] syzkaller0: entered promiscuous mode [ 552.441811][T14124] syzkaller0: entered allmulticast mode [ 557.137324][T14173] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2739'. [ 558.638041][T14201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2746'. [ 558.761555][T14205] syzkaller0: entered promiscuous mode [ 558.875640][T14205] syzkaller0: entered allmulticast mode [ 559.308348][T14212] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2746'. [ 559.482057][T14218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2750'. [ 559.528871][T14216] tipc: Enabled bearer , priority 0 [ 559.585017][T14213] tipc: Resetting bearer [ 559.697078][T14224] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2751'. [ 559.762578][T14219] syzkaller0: entered promiscuous mode [ 559.778906][T14219] syzkaller0: entered allmulticast mode [ 559.807602][T14211] tipc: Resetting bearer [ 559.882140][T14211] tipc: Disabling bearer [ 559.978744][T14230] tipc: Enabled bearer , priority 0 [ 560.032679][T14233] syzkaller0: entered promiscuous mode [ 560.079148][T14233] syzkaller0: entered allmulticast mode [ 560.142224][T14230] tipc: Resetting bearer [ 560.168694][T14229] tipc: Resetting bearer [ 560.222218][T14229] tipc: Disabling bearer [ 560.390881][T14249] syzkaller0: entered promiscuous mode [ 560.410452][T14249] syzkaller0: entered allmulticast mode [ 560.452677][T14251] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2760'. [ 560.615619][T14257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2761'. [ 560.717083][T14259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2763'. [ 560.778663][T14254] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2761'. [ 561.028282][T14267] tipc: Enabled bearer , priority 0 [ 561.046753][T14267] syzkaller0: entered promiscuous mode [ 561.052395][T14267] syzkaller0: entered allmulticast mode [ 561.125406][T14272] tipc: Resetting bearer [ 561.154949][T14266] tipc: Resetting bearer [ 562.714940][T14266] tipc: Disabling bearer [ 562.804307][ T6428] tipc: Node number set to 2254696583 [ 562.828686][T14280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2772'. [ 562.898054][T14282] syzkaller0: entered promiscuous mode [ 562.913298][T14282] syzkaller0: entered allmulticast mode [ 563.214469][T14288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2776'. [ 563.315440][T14288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2776'. [ 563.527541][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.535197][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.890078][T14303] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2782'. [ 563.914156][T14307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2774'. [ 564.005810][T14310] tipc: Enabled bearer , priority 0 [ 564.025153][T14310] syzkaller0: entered promiscuous mode [ 564.038477][T14310] syzkaller0: entered allmulticast mode [ 564.099111][T14310] tipc: Resetting bearer [ 564.157003][T14313] syzkaller0: entered promiscuous mode [ 564.206956][T14313] syzkaller0: entered allmulticast mode [ 564.248234][T14308] tipc: Resetting bearer [ 564.305558][T14308] tipc: Disabling bearer [ 564.839610][T14331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2787'. [ 565.028915][T14331] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2787'. [ 565.278739][T14344] syzkaller0: entered promiscuous mode [ 565.297890][T14344] syzkaller0: entered allmulticast mode [ 565.640743][T14354] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2794'. [ 565.821218][T14357] tipc: Enabled bearer , priority 0 [ 565.878350][T14356] tipc: Disabling bearer [ 566.664747][T14380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2799'. [ 566.830331][T14378] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2799'. [ 567.084630][T14387] syzkaller0: entered promiscuous mode [ 567.090266][T14387] syzkaller0: entered allmulticast mode [ 568.582449][T14395] syzkaller0: entered promiscuous mode [ 568.614177][T14395] syzkaller0: entered allmulticast mode [ 570.021512][T14427] __nla_validate_parse: 1 callbacks suppressed [ 570.021531][T14427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2810'. [ 570.185652][T14433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2811'. [ 570.289663][T14429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2811'. [ 571.418876][T14455] syzkaller0: entered promiscuous mode [ 571.429824][T14455] syzkaller0: entered allmulticast mode [ 571.816564][T14474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2823'. [ 572.104708][T14484] tipc: Enabled bearer , priority 0 [ 572.123294][T14484] syzkaller0: entered promiscuous mode [ 572.152514][T14484] syzkaller0: entered allmulticast mode [ 572.189783][T14484] tipc: Resetting bearer [ 572.201772][T14482] tipc: Resetting bearer [ 572.228204][T14482] tipc: Disabling bearer [ 572.253621][ T6428] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 572.451708][ T6428] usb 3-1: Using ep0 maxpacket: 8 [ 572.469952][ T6428] usb 3-1: unable to get BOS descriptor or descriptor too short [ 572.486434][ T6428] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 572.506252][ T6428] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 572.531674][ T6428] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 572.542995][ T6428] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 572.555101][ T6428] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 572.577035][ T6428] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 572.590661][ T6428] usb 3-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 572.598174][T14499] tipc: Enabled bearer , priority 0 [ 572.607072][ T6428] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 572.632386][ T6428] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.645860][ T6428] usb 3-1: Product: syz [ 572.650229][ T6428] usb 3-1: Manufacturer: syz [ 572.665356][T14499] syzkaller0: entered promiscuous mode [ 572.671155][ T6428] usb 3-1: SerialNumber: syz [ 572.674888][T14499] syzkaller0: entered allmulticast mode [ 572.694620][ T6428] usb 3-1: config 0 descriptor?? [ 572.713046][T14481] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 572.728129][ T6428] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 572.788731][T14499] tipc: Resetting bearer [ 572.803144][T14502] syzkaller0: entered promiscuous mode [ 572.812983][T14502] syzkaller0: entered allmulticast mode [ 572.841932][T14497] tipc: Resetting bearer [ 572.897538][T14497] tipc: Disabling bearer [ 572.921386][ T6428] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 573.005963][ T6177] udevd[6177]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 573.245486][T14510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2834'. [ 573.764682][ T1173] block nbd3: Possible stuck request ffff888022460000: control (read@0,1024B). Runtime 330 seconds [ 573.777580][ T1173] block nbd3: Possible stuck request ffff888022460200: control (read@1024,1024B). Runtime 330 seconds [ 573.791782][ T1173] block nbd3: Possible stuck request ffff888022460400: control (read@2048,1024B). Runtime 330 seconds [ 573.805655][ T1173] block nbd3: Possible stuck request ffff888022460600: control (read@3072,1024B). Runtime 330 seconds [ 574.185242][T14518] syzkaller0: entered promiscuous mode [ 574.196574][T14518] syzkaller0: entered allmulticast mode [ 574.930850][T14520] tipc: Enabling of bearer rejected, failed to enable media [ 575.231240][ T5780] usb 3-1: USB disconnect, device number 16 [ 577.244251][T14546] syzkaller0: entered promiscuous mode [ 577.251135][T14546] syzkaller0: entered allmulticast mode [ 577.407114][T14551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2845'. [ 577.650725][T14558] syzkaller0: entered promiscuous mode [ 577.658051][T14558] syzkaller0: entered allmulticast mode [ 578.730764][T14566] tipc: Enabled bearer , priority 0 [ 578.782570][T14567] syzkaller0: entered promiscuous mode [ 578.813726][T14567] syzkaller0: entered allmulticast mode [ 578.877023][T14571] tipc: Enabled bearer , priority 0 [ 579.007442][T14571] syzkaller0: entered promiscuous mode [ 579.013393][T14571] syzkaller0: entered allmulticast mode [ 579.046210][T14567] tipc: Resetting bearer [ 579.072106][T14571] tipc: Resetting bearer [ 579.101775][T14570] tipc: Resetting bearer [ 579.216055][T14570] tipc: Disabling bearer [ 579.316256][T14565] tipc: Resetting bearer [ 579.501026][T14565] tipc: Disabling bearer [ 581.170823][T14594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2857'. [ 581.216814][T14598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2858'. [ 582.672495][T14620] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2863'. [ 582.733926][T14620] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2863'. [ 583.835802][T14637] tipc: Enabled bearer , priority 0 [ 583.862956][T14637] syzkaller0: entered promiscuous mode [ 583.880772][T14637] syzkaller0: entered allmulticast mode [ 583.887989][T14640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2868'. [ 585.526372][T14646] tipc: Resetting bearer [ 585.933806][T14636] tipc: Resetting bearer [ 586.074327][T14636] tipc: Disabling bearer [ 586.100138][T14649] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2870'. [ 587.379085][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 587.895308][T14682] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2879'. [ 588.054320][T14684] macsec1: entered promiscuous mode [ 588.059942][T14684] macsec1: entered allmulticast mode [ 588.836511][T14691] tipc: Enabled bearer , priority 0 [ 588.877801][T14691] syzkaller0: entered promiscuous mode [ 588.897192][T14691] syzkaller0: entered allmulticast mode [ 589.154490][T14696] tipc: Resetting bearer [ 589.218252][T14690] tipc: Resetting bearer [ 589.374783][T14690] tipc: Disabling bearer [ 589.431599][T14705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2884'. [ 589.536424][T14706] syzkaller0: entered promiscuous mode [ 589.543552][T14703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2884'. [ 589.557412][T14706] syzkaller0: entered allmulticast mode [ 589.794992][T14715] syzkaller0: entered promiscuous mode [ 589.800564][T14715] syzkaller0: entered allmulticast mode [ 591.044969][ T28] INFO: task udevd:6167 blocked for more than 143 seconds. [ 591.167377][ T28] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 591.301003][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 591.453273][ T28] task:udevd state:D stack:23592 pid:6167 ppid:5140 flags:0x00004006 [ 591.564004][ T28] Call Trace: [ 591.567464][ T28] [ 591.653519][ T28] __schedule+0x1553/0x45a0 [ 591.658176][ T28] ? asan.module_dtor+0x20/0x20 [ 591.723586][ T28] ? mark_lock+0x94/0x320 [ 591.728044][ T28] ? lock_chain_count+0x20/0x20 [ 591.732934][ T28] ? _raw_spin_lock_irq+0xbb/0xf0 [ 591.791237][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 591.798255][ T28] schedule+0xbd/0x170 [ 591.802518][ T28] io_schedule+0x80/0xd0 [ 591.822215][ T28] folio_wait_bit_common+0x714/0xfa0 [ 591.833572][ T28] ? folio_wait_bit+0x30/0x30 [ 591.838425][ T28] ? _compound_head+0x120/0x120 [ 591.856046][ T28] ? filemap_add_folio+0x192/0x3c0 [ 591.861431][ T28] ? __filemap_get_folio+0x704/0xbb0 [ 591.867331][ T28] ? blkdev_writepage+0x30/0x30 [ 591.872431][ T28] do_read_cache_folio+0x1c0/0x7d0 [ 591.878415][ T28] ? blkdev_writepage+0x30/0x30 [ 591.883339][ T28] read_part_sector+0xd2/0x340 [ 591.888713][ T28] adfspart_check_POWERTEC+0x93/0xed0 [ 591.903321][ T28] ? adfspart_check_ADFS+0x620/0x620 [ 591.909460][ T28] ? put_partition+0x370/0x370 [ 591.914942][ T28] ? alloc_pages+0x4dc/0x740 [ 591.919769][ T28] bdev_disk_changed+0x740/0x1420 [ 591.926086][ T28] ? bdev_resize_partition+0xf0/0xf0 [ 591.931537][ T28] ? iput+0x343/0x920 [ 591.944778][ T28] blkdev_get_whole+0x30d/0x390 [ 591.949886][ T28] blkdev_get_by_dev+0x279/0x600 [ 591.955530][ T28] blkdev_open+0x152/0x360 [ 591.959995][ T28] ? blkdev_mmap+0x1b0/0x1b0 [ 591.965148][ T28] do_dentry_open+0x8c6/0x1500 [ 591.969986][ T28] path_openat+0x27f1/0x3230 [ 591.975332][ T28] ? do_sys_openat2+0xda/0x1d0 [ 591.980485][ T28] ? verify_lock_unused+0x140/0x140 [ 591.986475][ T28] ? do_filp_open+0x430/0x430 [ 591.991217][ T28] ? __virt_addr_valid+0x18c/0x540 [ 591.997644][ T28] do_filp_open+0x1f5/0x430 [ 592.002299][ T28] ? vfs_tmpfile+0x490/0x490 [ 592.007608][ T28] ? _raw_spin_unlock+0x28/0x40 [ 592.012696][ T28] ? alloc_fd+0x58f/0x630 [ 592.017704][ T28] do_sys_openat2+0x134/0x1d0 [ 592.022442][ T28] ? do_sys_open+0xe0/0xe0 [ 592.027489][ T28] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 592.033858][ T28] ? lock_chain_count+0x20/0x20 [ 592.038851][ T28] __x64_sys_openat+0x139/0x160 [ 592.045585][ T28] do_syscall_64+0x55/0xa0 [ 592.050244][ T28] ? clear_bhb_loop+0x40/0x90 [ 592.063307][ T28] ? clear_bhb_loop+0x40/0x90 [ 592.068799][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 592.081470][ T28] RIP: 0033:0x7f68a44a7407 [ 592.086419][ T28] RSP: 002b:00007fffa871de80 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 592.095449][ T28] RAX: ffffffffffffffda RBX: 00007f68a4bde880 RCX: 00007f68a44a7407 [ 592.107259][ T28] RDX: 00000000000a0800 RSI: 00005620ae7de460 RDI: ffffffffffffff9c [ 592.116122][ T28] RBP: 00005620ae7b8910 R08: 0000000000000000 R09: 0000000000000000 [ 592.124471][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 00005620ae7ccba0 [ 592.132678][ T28] R13: 00005620ae7d0410 R14: 0000000000000000 R15: 00005620ae7ccba0 [ 592.141418][ T28] [ 592.144983][ T28] [ 592.144983][ T28] Showing all locks held in the system: [ 592.152826][ T28] 1 lock held by pool_workqueue_/3: [ 592.166239][ T28] 4 locks held by kworker/u4:1/12: [ 592.171611][ T28] #0: ffff888017c73938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 592.201608][ T28] #1: ffffc90000117d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 592.224091][ T28] #2: ffffffff8e3b3310 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 592.243790][ T28] #3: ffffffff8d137840 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x580 [ 592.254975][ T28] 1 lock held by khungtaskd/28: [ 592.260130][ T28] #0: ffffffff8d131fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 592.270256][ T28] 3 locks held by kworker/u4:4/64: [ 592.275802][ T28] #0: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa9/0x140 [ 592.286015][ T28] #1: ffff8880b8f289c0 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2176/0x45a0 [ 592.295606][ T28] #2: ffff8880b8f29598 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 592.306646][ T28] 2 locks held by kworker/u4:5/1083: [ 592.312090][ T28] 2 locks held by getty/5530: [ 592.317506][ T28] #0: ffff88814c7a50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 592.327860][ T28] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 592.338370][ T28] 2 locks held by kworker/1:5/5835: [ 592.344037][ T28] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 592.360458][ T28] #1: ffffc90004a1fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 592.372834][ T28] 1 lock held by udevd/6167: [ 592.378811][ T28] #0: ffff88802238b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 592.389371][ T28] 1 lock held by syz-executor/12826: [ 592.395134][ T28] #0: ffffffff8d137978 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 592.407215][ T28] 2 locks held by kworker/u4:9/14189: [ 592.412722][ T28] #0: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa9/0x140 [ 592.422772][ T28] #1: ffff8880b8f289c0 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2176/0x45a0 [ 592.431868][ T28] [ 592.434624][ T28] ============================================= [ 592.434624][ T28] [ 592.443407][ T28] NMI backtrace for cpu 0 [ 592.447867][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 592.455200][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 592.465502][ T28] Call Trace: [ 592.468836][ T28] [ 592.471977][ T28] dump_stack_lvl+0x18c/0x250 [ 592.476894][ T28] ? show_regs_print_info+0x20/0x20 [ 592.482146][ T28] ? load_image+0x400/0x400 [ 592.486795][ T28] nmi_cpu_backtrace+0x3a6/0x3e0 [ 592.491772][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 592.498031][ T28] ? _printk+0xde/0x130 [ 592.502397][ T28] ? load_image+0x400/0x400 [ 592.506944][ T28] ? load_image+0x400/0x400 [ 592.511477][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 592.517576][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 592.523613][ T28] watchdog+0xf3d/0xf80 [ 592.527891][ T28] ? watchdog+0x1e1/0xf80 [ 592.532447][ T28] kthread+0x2fa/0x390 [ 592.536529][ T28] ? hungtask_pm_notify+0x90/0x90 [ 592.541664][ T28] ? kthread_blkcg+0xd0/0xd0 [ 592.546513][ T28] ret_from_fork+0x48/0x80 [ 592.551150][ T28] ? kthread_blkcg+0xd0/0xd0 [ 592.556125][ T28] ret_from_fork_asm+0x11/0x20 [ 592.560934][ T28] [ 592.564866][ T28] Sending NMI from CPU 0 to CPUs 1: [ 592.570333][ C1] NMI backtrace for cpu 1 [ 592.570345][ C1] CPU: 1 PID: 1083 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 592.570360][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 592.570369][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 592.570397][ C1] RIP: 0010:__this_cpu_preempt_check+0x0/0x20 [ 592.570418][ C1] Code: 48 89 da e8 02 6a f4 ff 48 8b 74 24 30 48 c7 c7 60 83 1c 8b e8 f1 69 f4 ff e8 4c 80 ff ff eb a8 e8 e5 e8 ff ff 0f 1f 44 00 00 0f 1e fa 48 89 fe 48 c7 c7 e0 82 1c 8b e9 dd fe ff ff cc cc cc [ 592.570430][ C1] RSP: 0018:ffffc900047bf918 EFLAGS: 00000092 [ 592.570442][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81683900 [ 592.570453][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8acada80 [ 592.570463][ C1] RBP: ffffc900047bfa28 R08: dffffc0000000000 R09: 1ffffffff2237ea2 [ 592.570473][ C1] R10: dffffc0000000000 R11: fffffbfff2237ea3 R12: 1ffff920008f7f30 [ 592.570484][ C1] R13: ffff88802507e418 R14: 0000000000000046 R15: dffffc0000000000 [ 592.570495][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 592.570507][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 592.570518][ C1] CR2: 000055555a9d59b8 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 592.570533][ C1] Call Trace: [ 592.570539][ C1] [ 592.570544][ C1] lock_acquire+0x1ae/0x420 [ 592.570567][ C1] ? read_lock_is_recursive+0x20/0x20 [ 592.570589][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 592.570604][ C1] ? try_to_wake_up+0x60/0x1190 [ 592.570617][ C1] ? _raw_spin_lock+0x40/0x40 [ 592.570631][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 592.570649][ C1] try_to_wake_up+0x60/0x1190 [ 592.570667][ C1] kick_pool+0x320/0x420 [ 592.570684][ C1] process_scheduled_works+0x7c8/0x15d0 [ 592.570708][ C1] ? do_raw_spin_lock+0x11f/0x2c0 [ 592.570730][ C1] ? assign_work+0x430/0x430 [ 592.570749][ C1] ? assign_work+0x3d0/0x430 [ 592.570767][ C1] worker_thread+0xa55/0xfc0 [ 592.570794][ C1] kthread+0x2fa/0x390 [ 592.570807][ C1] ? pr_cont_work+0x560/0x560 [ 592.570824][ C1] ? kthread_blkcg+0xd0/0xd0 [ 592.570838][ C1] ret_from_fork+0x48/0x80 [ 592.570854][ C1] ? kthread_blkcg+0xd0/0xd0 [ 592.570868][ C1] ret_from_fork_asm+0x11/0x20 [ 592.570892][ C1] [ 592.653605][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 592.653620][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 592.653638][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 592.653649][ T28] Call Trace: [ 592.653656][ T28] [ 592.653663][ T28] dump_stack_lvl+0x18c/0x250 [ 592.653696][ T28] ? show_regs_print_info+0x20/0x20 [ 592.653720][ T28] ? load_image+0x400/0x400 [ 592.653751][ T28] panic+0x2dc/0x730 [ 592.653770][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 592.653796][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 592.653814][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 592.653838][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 592.653869][ T28] watchdog+0xf7c/0xf80 [ 592.653892][ T28] ? watchdog+0x1e1/0xf80 [ 592.653919][ T28] kthread+0x2fa/0x390 [ 592.653935][ T28] ? hungtask_pm_notify+0x90/0x90 [ 592.653956][ T28] ? kthread_blkcg+0xd0/0xd0 [ 592.653973][ T28] ret_from_fork+0x48/0x80 [ 592.653992][ T28] ? kthread_blkcg+0xd0/0xd0 [ 592.654009][ T28] ret_from_fork_asm+0x11/0x20 [ 592.654043][ T28] [ 592.660061][ T28] Kernel Offset: disabled [ 592.917140][ T28] Rebooting in 86400 seconds..