last executing test programs: 4m40.738413508s ago: executing program 1 (id=859): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 4m40.596068661s ago: executing program 1 (id=862): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffff000000000000ffffffff18150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xb940, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m40.523425593s ago: executing program 1 (id=863): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x3, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m40.324798958s ago: executing program 1 (id=866): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x1000000009, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m37.102890166s ago: executing program 1 (id=873): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0xc}, {}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x7, 0x6, 0xb762, 0x6, 0x40, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f9, 0xd6, 0x4, 0x8, 0x7, 0xfffffffd, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x81000, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0x3, 0x1, 0x180, 0x5f09973, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x80000007, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x400009, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7f, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x40101, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000002, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x0, 0x200, 0x8, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x8, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0xd4c, 0x0, 0x0, 0x2, 0x1000, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0xd, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x1009, 0x3, 0x76, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xffb, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0x0, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x2, 0x9, 0x9a6, 0x245, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x8, 0x7, 0x5, 0x2, 0x7b, 0xfffffefe, 0x6, 0x6, 0xc, 0x401000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x4, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, 0x0}, 0x5) 4m34.820132781s ago: executing program 1 (id=878): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x62040200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) socket(0x840000000002, 0x3, 0xff) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r2, &(0x7f00000029c0), 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x3552, 0x549100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x8}}, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) close(0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000dbdf250a0000000000000008000500", @ANYRES32], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3}}, 0x18}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000076000d0b"], 0x18}}, 0x0) 4m19.498820283s ago: executing program 32 (id=878): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x62040200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) socket(0x840000000002, 0x3, 0xff) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r2, &(0x7f00000029c0), 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x3552, 0x549100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x8}}, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) close(0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000dbdf250a0000000000000008000500", @ANYRES32], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3}}, 0x18}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000076000d0b"], 0x18}}, 0x0) 1m33.769143905s ago: executing program 3 (id=1327): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0xffffffff}) landlock_restrict_self(0xffffffffffffffff, 0xc) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) mount$afs(&(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000006c0)='./cgroup\x00', &(0x7f0000000700), 0x1000000, &(0x7f0000000740)) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') socket$kcm(0xa, 0xf, 0x106) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x6) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000008580)=[{0x4, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x3, 0x0, 0x0}, {0x5, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x8, 0x0, 0x0}], 0x8) ioctl$EVIOCGABS3F(r5, 0x8018457f, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca490000", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 1m32.285351661s ago: executing program 3 (id=1331): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x80) 1m32.184200663s ago: executing program 3 (id=1332): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2c3f, 0x3, 0x20000000, 0x2, 0x6}, 0x1e}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r3) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r2, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c1020000ff84125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 1m31.47974348s ago: executing program 3 (id=1337): close(0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f00ffffff03c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c001f4002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 1m29.372050631s ago: executing program 3 (id=1339): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1m28.307947937s ago: executing program 3 (id=1342): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='nfsd 127.0.0.1 2000000000 domain\n', 0x21) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='udp 2049\n', 0x9) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='1\n', 0x2) close(r5) r6 = socket$inet(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) write(r6, &(0x7f00000004c0)="000000010000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000027", 0x38) nanosleep(0x0, 0x0) read(r2, &(0x7f0000000200), 0x3e8) write(r2, &(0x7f0000000500)='4294967295 2000000000 0\n', 0x18) write(r6, &(0x7f0000000540)="000000020000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000027", 0x38) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) read(0xffffffffffffffff, &(0x7f0000000300), 0x3e8) read(r3, &(0x7f0000000400), 0x3e8) read(r2, &(0x7f0000000500), 0x3e8) 1m12.977630669s ago: executing program 33 (id=1342): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='nfsd 127.0.0.1 2000000000 domain\n', 0x21) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='udp 2049\n', 0x9) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./nfsd/threads\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='1\n', 0x2) close(r5) r6 = socket$inet(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) write(r6, &(0x7f00000004c0)="000000010000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000027", 0x38) nanosleep(0x0, 0x0) read(r2, &(0x7f0000000200), 0x3e8) write(r2, &(0x7f0000000500)='4294967295 2000000000 0\n', 0x18) write(r6, &(0x7f0000000540)="000000020000000000000002000186a300000004000000010000000000000000000000000000000000000000000000000000000100000027", 0x38) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) read(0xffffffffffffffff, &(0x7f0000000300), 0x3e8) read(r3, &(0x7f0000000400), 0x3e8) read(r2, &(0x7f0000000500), 0x3e8) 10.971408554s ago: executing program 5 (id=1606): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/address_bits', 0x101082, 0xe8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) connect$unix(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x95}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$sequencer2(0xffffff9c, 0x0, 0x20940, 0x0) ioctl$SNDCTL_SEQ_RESET(r8, 0x5100) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001340)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) read$char_usb(r0, &(0x7f0000001980)=""/179, 0xb3) 7.646245354s ago: executing program 5 (id=1612): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000500)={0x4000000, 0x2000027, 0x1fffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 7.368812421s ago: executing program 0 (id=1615): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) pwrite64(r0, &(0x7f0000000140)='N', 0x1, 0x5) 7.267985834s ago: executing program 0 (id=1617): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x83, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x5, 0x6, 0x6, 0x2, 0x8001, 0x5}}, {0x4}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc53a, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}]}, 0x38}}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31", 0x24}], 0x1}, 0x0) 7.124279087s ago: executing program 5 (id=1620): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/address_bits', 0x101082, 0xe8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) connect$unix(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x95}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$sequencer2(0xffffff9c, 0x0, 0x20940, 0x0) ioctl$SNDCTL_SEQ_RESET(r8, 0x5100) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001340)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) read$char_usb(r0, &(0x7f0000001980)=""/179, 0xb3) 6.955784671s ago: executing program 0 (id=1621): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x7, 0x6, 0x4f, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0x3, 0x6}, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000005b7051970d45e00000800000085000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r6, &(0x7f0000000280)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=0x0, @ANYRES8=r5, @ANYRES8, @ANYRESHEX], 0x33) sendfile(r6, r5, 0x0, 0x10000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)={0x48, r8, 0x7, 0x70bd25, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}]}, 0x48}}, 0x20000800) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001900)=[{{&(0x7f0000000f80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000001000)="d504b0e048fba24bf370c3323d8a6e13d986368ee3174791b895925caa2ffa00333619ad86150be45c5a8dba0329680f8e748141f4241be8f155774e25bb6c29a1fd87d33f7366900a7cc77f4182e27fd42279f5de39c655e0c928dc60715de9dc1be69e3048f12ead23b7f4139516ab16722383d5e435ac70682f7696a92378aa3553b3e6ad9a29afbd9e8c4ab5cd1aca9e2bb42d13f0fbd4ebce265aad81e10047169e25869a7309f7", 0xaa}, {&(0x7f00000010c0)="f4f5cde668756bdca46c44f343154aa3dce08e187fd7a9e3cd54dce7b7097a83c33f66187c832e4fb585dea51b527fc9559683fec695199ca6d8", 0x3a}, {&(0x7f0000001100)="bf941fc5a0875148f1d44e84b05b4dae401e3d7064673db8b7664013af51247f8e72b190ebd6899b7351a03b0affe93a37febf030b0cd7fbba9c9a0d49a5360fc929aa73073a74f99a1b9475cea316f49b3d265760c752d2257ea746f10699eb4cd27ab9bc251a9fbe1a89334afece37c1b7f35d9b5c5a455e71c9786ff018761e0e46fbdb73984de2f9f2647680006f09984ce0c963d8881d6e6f1c5461dcbe34e858bc8b082d24bd5711", 0xab}], 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r6, @ANYRES32, @ANYBLOB="140000000000000001000000010000002333f47e65000fbfd6e277384d8fc1618f55f0572276c4e194c0d2f34974f3872edca70fbec9dedb8b07fb4b393029d53c7c89d730928376d032d4f10a02265741f94e35b5236d225d318bb4a93ce42732b96fbb8fc917063372c93b4e4fc69db5c07324bf4eaa", @ANYRES32=r6, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r9, @ANYRES32=r5, @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0xc001}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001500)="454379f4af", 0x5}, {&(0x7f0000001540)="b6bf36cbea2eb37dd0170d56562049a6437cfadae0df46cc9a3a18df21fc4aa1b0cefc947f4988a5b3a6411b84e302db26d0e0ab13c9596cedc3f125c6046dad31412a2f0b48d7791e8447175c2274582ba720b11693dfaf9faf9b2dc9ef5357ee6a280b61794e1175f02ba49095b368cf639fa33c9a73bc615d9d851cb008faaf5af37188f565a040651cf79a91e03f1452d1eb69c9c7e363ea5abf0ba61a6981c8e79a7d7479137cf32d503b183a040b5dfbf609d60b561502682bcdc4f606472a7035c7781c7b55308df9809cbd0f5e47ef9f8392382683c3", 0xda}, {&(0x7f0000001640)="38673609d1562bd6aff74a0a419c6ef1a99baf0cce07824612df144eb1ccb6cd1f29272e941836c378cbb9e85a2d6bd084bc256dbfcd3d9cb733198cfeb57db6d3fac2e8219c8fe6c1be7c8dea9281275d2261fea43f1d", 0x57}, {&(0x7f00000016c0)="f3c98582fcbc2e5f9ca469160f3bae51dde04899b3e163074ec28bfbd95821eec2a69ddc9d9c9fed38dc49275f71cad7647c45ac6ea4083e81b4d1093fbaa804395af4c2dade2df68bd16fd817234a503057717625f07e944159a4895d34166c8fe379c6bbd95eaec61c9e8061ba376db87fc6b652f8f5055c6b44b286d46a785366a39f15a50dcf97e55ae748eff410c3fad207694021c20c95f5e66b095d5368b2d51cfe758a65b137c51e8e9d279dbf53646da04d8bc19ffd53476fd9915aff852600c8ee77dcc294483e2ec0e52800e82210432193ba3a3475c072375590cfafdd38f7df9ee21edb06", 0xeb}], 0x4, &(0x7f00000018c0)=[@rights={{0x1c, 0x1, 0x1, [r4, r7, 0xffffffffffffffff]}}], 0x20, 0x44}}], 0x2, 0x40004) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000600)="3c95158b54a8c4b6719383230ee0eddc4e1c142211fd532c6dc3b03a7c6b9b39eed4fdaa2bc615ad33e7ca1b079c7e1ed1247b550ce885ec07e6f33705abf33a27d66c3524e431ae4a6a415da8970de67f80981a12e361598643c2c94c6b32845b68a8035fb091b174d1d4ad94855588e8bfa3e85f902d8bfc6ebfeb1b7efd4ce3c8a211f7a8eee0dbe78ab0190e5720060f6ef3f6a12b3d936cbde67ed18c2da0ae4efa9930b2df1e0a5fe2ffd3844ec11534e5a2cb05aa10a7271f26a645aea21d9177cbd3fc41ed4a4aaa036f3e88880124ed113148947a4d67e2620ed5c3632d454c5e39e915", 0xe8}, {&(0x7f0000000700)="911042e1fe88444ad6f9430d94eecd8f0d22e1df4165739252f23960752f3baa77db6a151f2c21a91c12812d3069fb74d6c4736f5bcace6b6c829493f890b8d7d4d3fd895ef7a986734a3732eac028d734836b09a0fb5bfe8ed47b91a1a80d6ab1", 0x61}, {&(0x7f0000000780)="816159df667ec8980986b4802bd8f69a0821774b9605181bebc79b1a65017fbb06a0d6c3e3e0ab0c2790de5fd2f088d52bc4be3a223699999550fddb6a7eff145c020adb771bb9e1af17c7416d94d31e1e43242ffd5e9850a0aecf319eadd12bc65804198ebf64ade9e167e39361b5c688f9db333ce84d6a492bba984ec7328a60d870a3da0e7c6a1dbe6f9956bbb71f96c060c2a1d8627e152c99c901ee2ce97f7d9ccd1768a2d48d441bc6cd3198bddf2424b87bd289cae9eb1c61d16ed078c7cafc949e90aaf2bac49c19a3e8954d3baa8569c563a3353bc185", 0xdb}, {&(0x7f0000000880)}, {&(0x7f00000008c0)="13b9d4a9253c322c10c4ae87575ca18e1402eaf7a465058b8b4277252d5e1a5646c8551c5e10590dc5f89f9667962f181677e4340e437e0a9d09d88f0cc6d3e92436995d94594488af78d596d19db9a9da9e80eea9f6593f0f5afa666e6fa6a74f4013460bbc85a07b4334e116723a3c326f40005b4c682b1a5925e904a2ba9e9fdb3e42e1c0f1d6", 0x88}, {&(0x7f0000000980)="7d0ae056862f0107793f501522bab5147718b73daf479dc493cd15d866b8eba6b4cdc47e6d287a819b83fc5d46054920b26513d726a52e53b84203a01182ea8047d37a5a892ecb9667481b81f298a3fdc6a0b6e77ff5590a5a46d833da90133c8778b47e1be55b7460728cebe0040f461d12271dd63ccf727af6ac38af8928682c45d25022b5590532e20f529d507156bfc9385b29d25ed9", 0x98}], 0x6, &(0x7f0000000cc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r10}}}], 0x78, 0x20004014}, 0x55) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c0000002cbd7000fbdbdf2502000900080000001c000000000000000300060000bb000000000000000002000100000000000000070300000000030005000000000002004e21ac1e010100"/96], 0x60}, 0x1, 0x7}, 0x0) 4.96915216s ago: executing program 2 (id=1622): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="65844100c5dc"], 0xdd12}], 0x1}, 0x200488d4) 3.126138274s ago: executing program 0 (id=1623): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, 0x0, 0x0) 3.125717534s ago: executing program 2 (id=1624): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xffe0, 0xffe0}, {0x0, 0x9}, {0xf, 0xfff6}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.895373759s ago: executing program 4 (id=1625): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1000237, @local, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') sendfile(r0, r1, 0x0, 0xffffffff) 2.740026623s ago: executing program 0 (id=1626): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1008000, &(0x7f0000000040)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c3ccafa7a9d7503c3c985486cf7fdb62fb1fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce80700000000000000b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d095f1c8b49057d94fb5e35ead0a385d3ede5b695c71896aff5c914682aca4fa34ee81de38d27c8f545532", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000003c0)={0x0, 0x2, 0x7fff, 0x79}) 2.689545724s ago: executing program 2 (id=1627): syz_emit_ethernet(0x32, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @private=0xa010101, {[@lsrr={0x83, 0x3, 0x4}]}}, {0x0, 0x4000, 0xc, 0x0, @opaque="12345678"}}}}}, 0x0) 2.649408636s ago: executing program 5 (id=1628): socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000500)={0x4000000, 0x2000027, 0x1fffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 2.629656836s ago: executing program 4 (id=1629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x83, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x5, 0x6, 0x6, 0x2, 0x8001, 0x5}}, {0x4}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc53a, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}]}, 0x38}}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31", 0x24}], 0x1}, 0x0) 2.413951911s ago: executing program 2 (id=1630): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) inotify_init1(0x80800) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x6, 0x2, 0x7, 0x4, @tick=0x4, {0x3, 0x81}, {0x8b, 0x8}, @raw8={"ed8b6350092f90e5f7670ac3"}}, {0xa, 0x4, 0xf7, 0x40, @time={0x9, 0x7}, {0x40, 0xf4}, {0x5, 0x9}, @time=@tick=0x1e}, {0x3, 0x1, 0x4, 0x7, @time={0x553, 0x1}, {0x3}, {0x8, 0x8e}, @note={0x0, 0x2, 0x6, 0x9, 0xfffffbff}}], 0x54) 2.214887896s ago: executing program 5 (id=1631): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000300)={0x2, 0x10, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x6, 0x0, 0x4, 0x0, "c4f40c848d97a447"}}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) 2.04783849s ago: executing program 4 (id=1632): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x7, 0x6, 0x4f, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0x3, 0x6}, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000005b7051970d45e00000800000085000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r6, &(0x7f0000000280)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=0x0, @ANYRES8=r5, @ANYRES8, @ANYRESHEX], 0x33) sendfile(r6, r5, 0x0, 0x10000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)={0x48, r8, 0x7, 0x70bd25, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}]}, 0x48}}, 0x20000800) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001900)=[{{&(0x7f0000000f80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000001000)="d504b0e048fba24bf370c3323d8a6e13d986368ee3174791b895925caa2ffa00333619ad86150be45c5a8dba0329680f8e748141f4241be8f155774e25bb6c29a1fd87d33f7366900a7cc77f4182e27fd42279f5de39c655e0c928dc60715de9dc1be69e3048f12ead23b7f4139516ab16722383d5e435ac70682f7696a92378aa3553b3e6ad9a29afbd9e8c4ab5cd1aca9e2bb42d13f0fbd4ebce265aad81e10047169e25869a7309f7", 0xaa}, {&(0x7f00000010c0)="f4f5cde668756bdca46c44f343154aa3dce08e187fd7a9e3cd54dce7b7097a83c33f66187c832e4fb585dea51b527fc9559683fec695199ca6d8", 0x3a}, {&(0x7f0000001100)="bf941fc5a0875148f1d44e84b05b4dae401e3d7064673db8b7664013af51247f8e72b190ebd6899b7351a03b0affe93a37febf030b0cd7fbba9c9a0d49a5360fc929aa73073a74f99a1b9475cea316f49b3d265760c752d2257ea746f10699eb4cd27ab9bc251a9fbe1a89334afece37c1b7f35d9b5c5a455e71c9786ff018761e0e46fbdb73984de2f9f2647680006f09984ce0c963d8881d6e6f1c5461dcbe34e858bc8b082d24bd5711", 0xab}], 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r6, @ANYRES32, @ANYBLOB="140000000000000001000000010000002333f47e65000fbfd6e277384d8fc1618f55f0572276c4e194c0d2f34974f3872edca70fbec9dedb8b07fb4b393029d53c7c89d730928376d032d4f10a02265741f94e35b5236d225d318bb4a93ce42732b96fbb8fc917063372c93b4e4fc69db5c07324bf4eaa", @ANYRES32=r6, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r9, @ANYRES32=r5, @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0xc001}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001500)="454379f4af", 0x5}, {&(0x7f0000001540)="b6bf36cbea2eb37dd0170d56562049a6437cfadae0df46cc9a3a18df21fc4aa1b0cefc947f4988a5b3a6411b84e302db26d0e0ab13c9596cedc3f125c6046dad31412a2f0b48d7791e8447175c2274582ba720b11693dfaf9faf9b2dc9ef5357ee6a280b61794e1175f02ba49095b368cf639fa33c9a73bc615d9d851cb008faaf5af37188f565a040651cf79a91e03f1452d1eb69c9c7e363ea5abf0ba61a6981c8e79a7d7479137cf32d503b183a040b5dfbf609d60b561502682bcdc4f606472a7035c7781c7b55308df9809cbd0f5e47ef9f8392382683c3", 0xda}, {&(0x7f0000001640)="38673609d1562bd6aff74a0a419c6ef1a99baf0cce07824612df144eb1ccb6cd1f29272e941836c378cbb9e85a2d6bd084bc256dbfcd3d9cb733198cfeb57db6d3fac2e8219c8fe6c1be7c8dea9281275d2261fea43f1d", 0x57}, {&(0x7f00000016c0)="f3c98582fcbc2e5f9ca469160f3bae51dde04899b3e163074ec28bfbd95821eec2a69ddc9d9c9fed38dc49275f71cad7647c45ac6ea4083e81b4d1093fbaa804395af4c2dade2df68bd16fd817234a503057717625f07e944159a4895d34166c8fe379c6bbd95eaec61c9e8061ba376db87fc6b652f8f5055c6b44b286d46a785366a39f15a50dcf97e55ae748eff410c3fad207694021c20c95f5e66b095d5368b2d51cfe758a65b137c51e8e9d279dbf53646da04d8bc19ffd53476fd9915aff852600c8ee77dcc294483e2ec0e52800e82210432193ba3a3475c072375590cfafdd38f7df9ee21edb06", 0xeb}], 0x4, &(0x7f00000018c0)=[@rights={{0x1c, 0x1, 0x1, [r4, r7, 0xffffffffffffffff]}}], 0x20, 0x44}}], 0x2, 0x40004) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000600)="3c95158b54a8c4b6719383230ee0eddc4e1c142211fd532c6dc3b03a7c6b9b39eed4fdaa2bc615ad33e7ca1b079c7e1ed1247b550ce885ec07e6f33705abf33a27d66c3524e431ae4a6a415da8970de67f80981a12e361598643c2c94c6b32845b68a8035fb091b174d1d4ad94855588e8bfa3e85f902d8bfc6ebfeb1b7efd4ce3c8a211f7a8eee0dbe78ab0190e5720060f6ef3f6a12b3d936cbde67ed18c2da0ae4efa9930b2df1e0a5fe2ffd3844ec11534e5a2cb05aa10a7271f26a645aea21d9177cbd3fc41ed4a4aaa036f3e88880124ed113148947a4d67e2620ed5c3632d454c5e39e915", 0xe8}, {&(0x7f0000000700)="911042e1fe88444ad6f9430d94eecd8f0d22e1df4165739252f23960752f3baa77db6a151f2c21a91c12812d3069fb74d6c4736f5bcace6b6c829493f890b8d7d4d3fd895ef7a986734a3732eac028d734836b09a0fb5bfe8ed47b91a1a80d6ab1", 0x61}, {&(0x7f0000000780)="816159df667ec8980986b4802bd8f69a0821774b9605181bebc79b1a65017fbb06a0d6c3e3e0ab0c2790de5fd2f088d52bc4be3a223699999550fddb6a7eff145c020adb771bb9e1af17c7416d94d31e1e43242ffd5e9850a0aecf319eadd12bc65804198ebf64ade9e167e39361b5c688f9db333ce84d6a492bba984ec7328a60d870a3da0e7c6a1dbe6f9956bbb71f96c060c2a1d8627e152c99c901ee2ce97f7d9ccd1768a2d48d441bc6cd3198bddf2424b87bd289cae9eb1c61d16ed078c7cafc949e90aaf2bac49c19a3e8954d3baa8569c563a3353bc185", 0xdb}, {&(0x7f0000000880)}, {&(0x7f00000008c0)="13b9d4a9253c322c10c4ae87575ca18e1402eaf7a465058b8b4277252d5e1a5646c8551c5e10590dc5f89f9667962f181677e4340e437e0a9d09d88f0cc6d3e92436995d94594488af78d596d19db9a9da9e80eea9f6593f0f5afa666e6fa6a74f4013460bbc85a07b4334e116723a3c326f40005b4c682b1a5925e904a2ba9e9fdb3e42e1c0f1d6", 0x88}, {&(0x7f0000000980)="7d0ae056862f0107793f501522bab5147718b73daf479dc493cd15d866b8eba6b4cdc47e6d287a819b83fc5d46054920b26513d726a52e53b84203a01182ea8047d37a5a892ecb9667481b81f298a3fdc6a0b6e77ff5590a5a46d833da90133c8778b47e1be55b7460728cebe0040f461d12271dd63ccf727af6ac38af8928682c45d25022b5590532e20f529d507156bfc9385b29d25ed9", 0x98}], 0x6, &(0x7f0000000cc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r10}}}], 0x78, 0x20004014}, 0x55) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c0000002cbd7000fbdbdf2502000900080000001c000000000000000300060000bb000000000000000002000100000000000000070300000000030005000000000002004e21ac1e010100"/96], 0x60}, 0x1, 0x7}, 0x0) 1.944135393s ago: executing program 5 (id=1633): connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='mem', 0x3) 1.473510824s ago: executing program 4 (id=1634): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40080, 0x8) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40081271, 0x0) 1.342777057s ago: executing program 2 (id=1635): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xffe0, 0xffe0}, {0x0, 0x9}, {0xf, 0xfff6}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.272228849s ago: executing program 0 (id=1636): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/address_bits', 0x101082, 0xe8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) connect$unix(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x95}, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$sequencer2(0xffffff9c, 0x0, 0x20940, 0x0) ioctl$SNDCTL_SEQ_RESET(r8, 0x5100) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001340)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) read$char_usb(r0, &(0x7f0000001980)=""/179, 0xb3) 1.270627529s ago: executing program 4 (id=1637): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) pwrite64(r0, &(0x7f0000000140)='N', 0x1, 0x5) 1.082322983s ago: executing program 2 (id=1638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x10001}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048024}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x1000000009, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 4 (id=1639): socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000500)={0x4000000, 0x2000027, 0x1fffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) kernel console output (not intermixed with test programs): tribute type 13 has an invalid length. [ 110.160213][ T6369] infiniband syz0: set active [ 110.242720][ T9] lo speed is unknown, defaulting to 1000 [ 110.540472][ T5819] usb 2-1: USB disconnect, device number 3 [ 112.602698][ T6352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 113.344116][ T6400] netlink: 'syz.2.167': attribute type 2 has an invalid length. [ 114.556116][ T5777] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 114.756646][ T5777] usb 1-1: Using ep0 maxpacket: 32 [ 114.764817][ T5777] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.812019][ T5777] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 114.854678][ T5777] usb 1-1: config 0 interface 0 has no altsetting 0 [ 114.868367][ T5777] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 114.877924][ T5777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.886924][ T5777] usb 1-1: Product: syz [ 114.891237][ T5777] usb 1-1: Manufacturer: syz [ 114.896726][ T5777] usb 1-1: SerialNumber: syz [ 114.909101][ T5777] usb 1-1: config 0 descriptor?? [ 114.947791][ T5777] gs_usb 1-1:0.0: Required endpoints not found [ 115.336821][ T9] usb 1-1: USB disconnect, device number 3 [ 119.721421][ T6467] syzkaller0: entered promiscuous mode [ 119.738445][ T6467] syzkaller0: entered allmulticast mode [ 119.772281][ T6467] tipc: Enabling of bearer rejected, failed to enable media [ 121.536020][ T5819] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.712461][ T6492] syzkaller0: entered promiscuous mode [ 121.721992][ T6492] syzkaller0: entered allmulticast mode [ 121.736720][ T5819] usb 4-1: Using ep0 maxpacket: 32 [ 121.749970][ T5819] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.770438][ T5819] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 121.799490][ T5819] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.824993][ T5819] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 121.838561][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.854888][ T5819] usb 4-1: Product: syz [ 121.860138][ T5819] usb 4-1: Manufacturer: syz [ 121.864882][ T5819] usb 4-1: SerialNumber: syz [ 121.880397][ T5819] usb 4-1: config 0 descriptor?? [ 121.892764][ T5819] gs_usb 4-1:0.0: Required endpoints not found [ 122.131097][ T5819] usb 4-1: USB disconnect, device number 2 [ 122.157250][ T6505] netlink: 'syz.1.203': attribute type 1 has an invalid length. [ 122.164983][ T6505] netlink: 'syz.1.203': attribute type 4 has an invalid length. [ 122.327277][ T6505] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.203'. [ 122.526909][ T6512] netlink: 'syz.2.204': attribute type 13 has an invalid length. [ 123.102561][ T6521] syzkaller0: entered promiscuous mode [ 123.156432][ T6521] syzkaller0: entered allmulticast mode [ 124.374470][ T6551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.216'. [ 124.518880][ T6553] netlink: 'syz.2.217': attribute type 13 has an invalid length. [ 125.850541][ T6562] syzkaller0: entered promiscuous mode [ 125.870496][ T6562] syzkaller0: entered allmulticast mode [ 126.487841][ T6577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.225'. [ 126.645448][ T6582] netlink: 'syz.0.227': attribute type 13 has an invalid length. [ 126.654402][ T6582] infiniband syz0: set active [ 126.775698][ T5819] lo speed is unknown, defaulting to 1000 [ 127.487196][ T6603] syzkaller0: entered promiscuous mode [ 127.492854][ T6603] syzkaller0: entered allmulticast mode [ 127.527654][ T6604] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 127.902401][ T6619] netlink: 'syz.1.240': attribute type 13 has an invalid length. [ 127.939949][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'. [ 128.050244][ T6623] netlink: 28 bytes leftover after parsing attributes in process `syz.0.241'. [ 130.108616][ T6638] syzkaller0: entered promiscuous mode [ 130.131435][ T6638] syzkaller0: entered allmulticast mode [ 130.204464][ T6645] syzkaller0: entered promiscuous mode [ 130.215062][ T6645] syzkaller0: entered allmulticast mode [ 130.234167][ T6645] tipc: Enabling of bearer rejected, failed to enable media [ 130.441423][ T6651] netlink: 'syz.0.251': attribute type 1 has an invalid length. [ 130.515811][ T6651] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.562076][ T6655] bond1: (slave syz_tun): making interface the new active one [ 130.615313][ T6655] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 130.661751][ T6657] netlink: 'syz.3.252': attribute type 13 has an invalid length. [ 130.759932][ T6663] syzkaller0: entered promiscuous mode [ 130.765530][ T6663] syzkaller0: entered allmulticast mode [ 133.058300][ T6685] syzkaller0: entered promiscuous mode [ 133.070794][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.075641][ T6685] syzkaller0: entered allmulticast mode [ 133.078087][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.189294][ T6690] syzkaller0: entered promiscuous mode [ 133.206787][ T6690] syzkaller0: entered allmulticast mode [ 133.232282][ T6690] tipc: Enabling of bearer rejected, failed to enable media [ 133.422230][ T6696] netlink: 'syz.0.265': attribute type 13 has an invalid length. [ 133.439558][ T6696] infiniband syz0: set active [ 133.545675][ T5777] lo speed is unknown, defaulting to 1000 [ 133.601080][ T6707] syzkaller0: entered promiscuous mode [ 133.607681][ T6707] syzkaller0: entered allmulticast mode [ 136.377476][ T6730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.276'. [ 136.396999][ T6698] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 136.473057][ T6732] syzkaller0: entered promiscuous mode [ 136.488416][ T6732] syzkaller0: entered allmulticast mode [ 139.234657][ T6766] netlink: 16 bytes leftover after parsing attributes in process `syz.3.286'. [ 140.119859][ T6774] syzkaller0: entered promiscuous mode [ 140.125426][ T6774] syzkaller0: entered allmulticast mode [ 140.202132][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.290'. [ 140.222712][ T6772] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.231788][ T6772] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.240589][ T6772] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.249435][ T6772] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.263813][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.290'. [ 140.470314][ T6750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 140.480069][ T6778] netlink: 'syz.2.292': attribute type 1 has an invalid length. [ 141.594969][ T6799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.297'. [ 142.964926][ T6808] syzkaller0: entered promiscuous mode [ 142.996982][ T6808] syzkaller0: entered allmulticast mode [ 143.816617][ T6826] netlink: 16 bytes leftover after parsing attributes in process `syz.0.310'. [ 143.850734][ T6821] 0: reclassify loop, rule prio 0, protocol 03 [ 144.727303][ T6835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.313'. [ 146.623018][ T6848] syzkaller0: entered promiscuous mode [ 146.628939][ T6848] syzkaller0: entered allmulticast mode [ 149.339534][ T6882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.327'. [ 153.918807][ T6896] syzkaller0: entered promiscuous mode [ 153.924453][ T6896] syzkaller0: entered allmulticast mode [ 154.106729][ T6901] netlink: 'syz.3.332': attribute type 13 has an invalid length. [ 158.786505][ T6934] syzkaller0: entered promiscuous mode [ 158.800555][ T6934] syzkaller0: entered allmulticast mode [ 159.083620][ T6940] netlink: 'syz.2.346': attribute type 13 has an invalid length. [ 165.308569][ T6976] netlink: 'syz.3.359': attribute type 13 has an invalid length. [ 166.635514][ T6990] block nbd0: not configured, cannot reconfigure [ 168.887031][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 170.499770][ T7016] syzkaller0: entered promiscuous mode [ 170.517380][ T7016] syzkaller0: entered allmulticast mode [ 170.633564][ T7023] tipc: Enabling of bearer rejected, failed to enable media [ 175.138540][ T7050] syzkaller0: entered promiscuous mode [ 175.144096][ T7050] syzkaller0: entered allmulticast mode [ 175.367592][ T7056] tipc: Enabling of bearer rejected, failed to enable media [ 175.613771][ T7062] netlink: 64 bytes leftover after parsing attributes in process `syz.1.387'. [ 175.850845][ T7066] syzkaller1: entered promiscuous mode [ 175.970174][ T7066] syzkaller1: entered allmulticast mode [ 178.416721][ T7072] syzkaller0: entered promiscuous mode [ 178.464807][ T7072] syzkaller0: entered allmulticast mode [ 186.373975][ T7146] syzkaller0: entered promiscuous mode [ 186.383624][ T7146] syzkaller0: entered allmulticast mode [ 186.452681][ T7148] syzkaller0: entered promiscuous mode [ 186.476684][ T7148] syzkaller0: entered allmulticast mode [ 189.901444][ T7177] syzkaller0: entered promiscuous mode [ 189.916028][ T7177] syzkaller0: entered allmulticast mode [ 192.495269][ T7193] tipc: Enabling of bearer rejected, failed to enable media [ 194.129576][ T7236] tipc: Enabling of bearer rejected, failed to enable media [ 194.192741][ T7236] syzkaller0: entered promiscuous mode [ 194.198715][ T7236] syzkaller0: entered allmulticast mode [ 194.510982][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.523892][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.661923][ T7240] syzkaller0: entered promiscuous mode [ 195.668048][ T7240] syzkaller0: entered allmulticast mode [ 195.854783][ T7244] syzkaller0: entered promiscuous mode [ 195.860512][ T7244] syzkaller0: entered allmulticast mode [ 195.888410][ T7244] tipc: Started in network mode [ 195.893442][ T7244] tipc: Node identity 62d8341a40cf, cluster identity 4711 [ 195.905686][ T7244] tipc: Enabled bearer , priority 0 [ 195.916311][ T7244] tipc: Resetting bearer [ 195.979307][ T7244] tipc: Disabling bearer [ 196.479485][ T7262] tipc: Enabling of bearer rejected, failed to enable media [ 196.666278][ T7262] syzkaller0: entered promiscuous mode [ 196.671842][ T7262] syzkaller0: entered allmulticast mode [ 198.962099][ T7274] syzkaller0: entered promiscuous mode [ 198.967790][ T7274] syzkaller0: entered allmulticast mode [ 199.171504][ T7285] tipc: Enabling of bearer rejected, failed to enable media [ 199.742936][ T7304] Cannot find set identified by id 65534 to match [ 200.004567][ T7310] syzkaller0: entered promiscuous mode [ 200.011564][ T7310] syzkaller0: entered allmulticast mode [ 200.165045][ T7312] tipc: Enabling of bearer rejected, failed to enable media [ 200.219041][ T7313] syzkaller0: entered promiscuous mode [ 200.228850][ T7313] syzkaller0: entered allmulticast mode [ 202.035545][ T7327] tipc: Enabling of bearer rejected, failed to enable media [ 202.248066][ T7343] netlink: 64 bytes leftover after parsing attributes in process `syz.3.462'. [ 202.458225][ T7351] syzkaller0: entered promiscuous mode [ 202.486146][ T7351] syzkaller0: entered allmulticast mode [ 203.300721][ T7360] Can't find ip_set type hash:ip,po [ 203.706432][ T7359] batadv0: entered promiscuous mode [ 203.753650][ T7359] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 203.830738][ T7374] tipc: Enabling of bearer rejected, failed to enable media [ 204.007574][ T7368] syzkaller0: entered promiscuous mode [ 204.025804][ T7368] syzkaller0: entered allmulticast mode [ 204.054291][ T7375] tipc: Enabling of bearer rejected, failed to enable media [ 205.944741][ T7390] netlink: 'syz.1.473': attribute type 13 has an invalid length. [ 206.169631][ T7406] netlink: 64 bytes leftover after parsing attributes in process `syz.2.475'. [ 206.224626][ T7410] syzkaller0: entered promiscuous mode [ 206.252944][ T7410] syzkaller0: entered allmulticast mode [ 206.826127][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 206.833495][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 206.852355][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 206.860271][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 207.017482][ T7413] Can't find ip_set type hash:ip,por [ 207.545420][ T7431] netlink: 'syz.3.486': attribute type 13 has an invalid length. [ 207.688052][ T7438] tipc: Enabling of bearer rejected, failed to enable media [ 207.800747][ T7442] syzkaller0: entered promiscuous mode [ 207.806749][ T7442] syzkaller0: entered allmulticast mode [ 210.232315][ T7455] netlink: 64 bytes leftover after parsing attributes in process `syz.1.488'. [ 210.816385][ T7477] netlink: 'syz.2.497': attribute type 13 has an invalid length. [ 211.958014][ T7486] tipc: Enabling of bearer rejected, failed to enable media [ 212.128077][ T7486] syzkaller0: entered promiscuous mode [ 212.133732][ T7486] syzkaller0: entered allmulticast mode [ 214.411361][ T7522] Can't find ip_set type hash:ip,por [ 215.178274][ T7504] syzkaller0: entered promiscuous mode [ 215.184006][ T7504] syzkaller0: entered allmulticast mode [ 215.194535][ T7506] tipc: Enabled bearer , priority 0 [ 215.219709][ T7516] tipc: Resetting bearer [ 215.247625][ T7494] tipc: Resetting bearer [ 215.295951][ T7494] tipc: Disabling bearer [ 215.499886][ T7533] syzkaller0: entered promiscuous mode [ 215.505552][ T7533] syzkaller0: entered allmulticast mode [ 215.520128][ T7533] tipc: Started in network mode [ 215.539496][ T7533] tipc: Node identity , cluster identity 4711 [ 215.550735][ T7533] tipc: Failed to obtain node identity [ 215.559194][ T7533] tipc: Enabling of bearer rejected, failed to enable media [ 216.859571][ T7551] tipc: Enabling of bearer rejected, failed to enable media [ 216.940037][ T7551] syzkaller0: entered promiscuous mode [ 216.948248][ T7551] syzkaller0: entered allmulticast mode [ 217.019510][ T7549] syzkaller0: entered promiscuous mode [ 217.025198][ T7549] syzkaller0: entered allmulticast mode [ 218.671233][ T7554] tipc: Started in network mode [ 218.677861][ T7554] tipc: Node identity , cluster identity 4711 [ 218.684028][ T7554] tipc: Failed to obtain node identity [ 218.689959][ T7554] tipc: Enabling of bearer rejected, failed to enable media [ 218.951202][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'. [ 222.097948][ T7622] tipc: Enabling of bearer rejected, failed to enable media [ 222.309464][ T7622] syzkaller0: entered promiscuous mode [ 222.332760][ T7622] syzkaller0: entered allmulticast mode [ 224.073515][ T7648] tipc: Enabling of bearer rejected, failed to enable media [ 224.343578][ T7655] syzkaller0: entered promiscuous mode [ 224.360183][ T7655] syzkaller0: entered allmulticast mode [ 224.393270][ T7656] syzkaller0: entered promiscuous mode [ 224.409180][ T7656] syzkaller0: entered allmulticast mode [ 224.428169][ T7655] tipc: Started in network mode [ 224.433310][ T7655] tipc: Node identity 62e8beb5ecbc, cluster identity 4711 [ 224.457451][ T7655] tipc: Enabled bearer , priority 0 [ 224.467087][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.543'. [ 224.480353][ T7659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.543'. [ 224.532076][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.543'. [ 224.541707][ T7659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.543'. [ 224.556664][ T7657] tipc: Resetting bearer [ 224.578098][ T7654] tipc: Resetting bearer [ 224.689860][ T7654] tipc: Disabling bearer [ 226.815209][ T7678] syzkaller0: entered promiscuous mode [ 226.821166][ T7678] syzkaller0: entered allmulticast mode [ 226.853918][ T7678] tipc: Started in network mode [ 226.859328][ T7678] tipc: Node identity , cluster identity 4711 [ 226.865675][ T7678] tipc: Failed to obtain node identity [ 226.872026][ T7678] tipc: Enabling of bearer rejected, failed to enable media [ 228.584030][ T7680] syzkaller0: entered promiscuous mode [ 228.590190][ T7680] syzkaller0: entered allmulticast mode [ 228.598176][ T7681] tipc: Enabling of bearer rejected, failed to enable media [ 228.677402][ T7683] syzkaller0: entered promiscuous mode [ 228.683051][ T7683] syzkaller0: entered allmulticast mode [ 231.665743][ T7695] netlink: 'syz.0.553': attribute type 13 has an invalid length. [ 231.674051][ T7695] netlink: 'syz.0.553': attribute type 27 has an invalid length. [ 231.688803][ T7695] infiniband syz0: set active [ 231.897494][ T8] lo speed is unknown, defaulting to 1000 [ 231.960294][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.556'. [ 231.976885][ T7710] team_slave_0: entered promiscuous mode [ 231.982941][ T7710] team_slave_1: entered promiscuous mode [ 231.989406][ T7710] macvtap1: entered promiscuous mode [ 231.994744][ T7710] team0: entered promiscuous mode [ 232.002851][ T7710] macvtap1: entered allmulticast mode [ 232.008360][ T7710] team0: entered allmulticast mode [ 232.015078][ T7710] team_slave_0: entered allmulticast mode [ 232.021289][ T7710] team_slave_1: entered allmulticast mode [ 232.031732][ T7710] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 232.054164][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.556'. [ 232.090488][ T7711] team0: left allmulticast mode [ 232.099215][ T7711] team_slave_0: left allmulticast mode [ 232.104778][ T7711] team_slave_1: left allmulticast mode [ 232.121576][ T7711] team0: left promiscuous mode [ 232.173914][ T7711] team_slave_0: left promiscuous mode [ 232.179613][ T7711] team_slave_1: left promiscuous mode [ 232.193474][ T7711] macvtap1: left promiscuous mode [ 232.200518][ T7711] macvtap1: left allmulticast mode [ 232.639339][ T7721] syzkaller0: entered promiscuous mode [ 232.644985][ T7721] syzkaller0: entered allmulticast mode [ 232.668744][ T7727] tipc: Enabled bearer , priority 0 [ 232.777968][ T7720] tipc: Resetting bearer [ 234.229684][ T7720] tipc: Disabling bearer [ 234.281173][ T27] tipc: Node number set to 2387918517 [ 234.746685][ T7747] syzkaller0: entered promiscuous mode [ 234.752992][ T7747] syzkaller0: entered allmulticast mode [ 234.761204][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 234.784641][ T7749] team_slave_0: entered promiscuous mode [ 234.790469][ T7749] team_slave_1: entered promiscuous mode [ 234.797363][ T7749] macvtap1: entered promiscuous mode [ 234.803370][ T7749] team0: entered promiscuous mode [ 234.814875][ T7749] macvtap1: entered allmulticast mode [ 234.836547][ T7749] team0: entered allmulticast mode [ 234.841738][ T7749] team_slave_0: entered allmulticast mode [ 234.849558][ T7749] team_slave_1: entered allmulticast mode [ 234.857824][ T7749] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 236.503117][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 236.513158][ T7751] team0: left allmulticast mode [ 236.518601][ T7751] team_slave_0: left allmulticast mode [ 236.524206][ T7751] team_slave_1: left allmulticast mode [ 236.533448][ T7751] team0: left promiscuous mode [ 236.539858][ T7751] team_slave_0: left promiscuous mode [ 236.545414][ T7751] team_slave_1: left promiscuous mode [ 236.560241][ T7751] macvtap1: left promiscuous mode [ 236.565373][ T7751] macvtap1: left allmulticast mode [ 236.839299][ T7773] syzkaller0: entered promiscuous mode [ 236.844862][ T7773] syzkaller0: entered allmulticast mode [ 239.070837][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.585'. [ 239.154506][ T7820] erspan0: entered promiscuous mode [ 239.178404][ T7820] macvtap1: entered promiscuous mode [ 239.183940][ T7820] macvtap1: entered allmulticast mode [ 239.216627][ T7820] erspan0: entered allmulticast mode [ 239.244173][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.585'. [ 239.256465][ T7822] erspan0: left allmulticast mode [ 239.261894][ T7822] erspan0: left promiscuous mode [ 239.272396][ T7822] macvtap1: left promiscuous mode [ 239.278196][ T7822] macvtap1: left allmulticast mode [ 239.338851][ T7831] syzkaller1: entered promiscuous mode [ 239.344499][ T7831] syzkaller1: entered allmulticast mode [ 239.353196][ T7832] netlink: 'syz.0.588': attribute type 11 has an invalid length. [ 239.363538][ T7832] netlink: 44 bytes leftover after parsing attributes in process `syz.0.588'. [ 239.663262][ T7836] syzkaller0: entered promiscuous mode [ 239.676031][ T7836] syzkaller0: entered allmulticast mode [ 241.284325][ T7853] syzkaller0: entered promiscuous mode [ 241.295912][ T7853] syzkaller0: entered allmulticast mode [ 243.343139][ T7878] syzkaller0: entered promiscuous mode [ 243.348889][ T7878] syzkaller0: entered allmulticast mode [ 243.372915][ T7880] netlink: 64 bytes leftover after parsing attributes in process `syz.2.603'. [ 244.835249][ T7880] syzkaller1: entered promiscuous mode [ 244.840906][ T7880] syzkaller1: entered allmulticast mode [ 244.850156][ T7886] syzkaller0: entered promiscuous mode [ 244.855688][ T7886] syzkaller0: entered allmulticast mode [ 244.863085][ T7887] tipc: Started in network mode [ 244.868237][ T7887] tipc: Node identity 4a6f8ffea567, cluster identity 4711 [ 244.876944][ T7887] tipc: Enabled bearer , priority 0 [ 244.907964][ T7892] tipc: Resetting bearer [ 245.020493][ T7881] tipc: Resetting bearer [ 245.065235][ T7881] tipc: Disabling bearer [ 245.252437][ T7903] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 245.418417][ T7904] syzkaller0: entered promiscuous mode [ 245.424097][ T7904] syzkaller0: entered allmulticast mode [ 245.431813][ T7905] netlink: 'syz.2.612': attribute type 11 has an invalid length. [ 245.440041][ T7905] netlink: 44 bytes leftover after parsing attributes in process `syz.2.612'. [ 247.135276][ T7918] syzkaller0: entered promiscuous mode [ 247.151818][ T7918] syzkaller0: entered allmulticast mode [ 249.065502][ T7932] netlink: 64 bytes leftover after parsing attributes in process `syz.1.620'. [ 249.129275][ T7940] tipc: Enabling of bearer rejected, failed to enable media [ 250.315489][ T7962] syzkaller0: entered promiscuous mode [ 250.353588][ T7962] syzkaller0: entered allmulticast mode [ 252.189495][ T7995] syzkaller0: entered promiscuous mode [ 252.196009][ T7995] syzkaller0: entered allmulticast mode [ 252.213782][ T7995] tipc: Started in network mode [ 252.227258][ T7995] tipc: Node identity 6e8dd8ec941a, cluster identity 4711 [ 252.251800][ T7995] tipc: Enabled bearer , priority 0 [ 252.296700][ T7995] tipc: Resetting bearer [ 252.321175][ T7994] tipc: Resetting bearer [ 252.380201][ T7994] tipc: Disabling bearer [ 252.862668][ T8013] syzkaller0: entered promiscuous mode [ 252.868577][ T8013] syzkaller0: entered allmulticast mode [ 253.754522][ T8026] syzkaller0: entered promiscuous mode [ 253.762505][ T8026] syzkaller0: entered allmulticast mode [ 255.268493][ T7997] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.952901][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.959576][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.284501][ T8041] netlink: 64 bytes leftover after parsing attributes in process `syz.1.650'. [ 256.562957][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'. [ 257.191922][ T8088] syzkaller0: entered promiscuous mode [ 257.202560][ T8088] syzkaller0: entered allmulticast mode [ 258.820800][ T8098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'. [ 258.840627][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'. [ 259.086654][ T8112] netlink: 'syz.1.674': attribute type 1 has an invalid length. [ 259.094425][ T8112] netlink: 'syz.1.674': attribute type 2 has an invalid length. [ 259.181354][ T8114] syzkaller0: entered promiscuous mode [ 259.190557][ T8114] syzkaller0: entered allmulticast mode [ 259.513163][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.680'. [ 259.547528][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.680'. [ 259.749297][ T8127] syzkaller0: entered promiscuous mode [ 259.768707][ T8127] syzkaller0: entered allmulticast mode [ 261.621285][ T8152] warning: `syz.1.689' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 261.814363][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.691'. [ 261.828092][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.691'. [ 262.371015][ T8173] syzkaller0: entered promiscuous mode [ 262.392557][ T8173] syzkaller0: entered allmulticast mode [ 262.626103][ T5777] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 262.830471][ T5777] usb 3-1: Using ep0 maxpacket: 32 [ 262.846866][ T5777] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.861969][ T5777] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 262.875559][ T5777] usb 3-1: config 0 interface 0 has no altsetting 0 [ 262.888388][ T5777] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 262.908016][ T5777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.924653][ T5777] usb 3-1: Product: syz [ 262.936379][ T5777] usb 3-1: Manufacturer: syz [ 262.946277][ T5777] usb 3-1: SerialNumber: syz [ 262.973472][ T5777] usb 3-1: config 0 descriptor?? [ 262.994277][ T5777] gs_usb 3-1:0.0: Required endpoints not found [ 267.350983][ T5777] usb 3-1: USB disconnect, device number 2 [ 267.661745][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.703'. [ 267.779090][ T8216] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 268.256326][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 268.446422][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 268.454236][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.464872][ T23] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 268.478426][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 268.493356][ T23] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 268.513013][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.521952][ T23] usb 1-1: Product: syz [ 268.526611][ T23] usb 1-1: Manufacturer: syz [ 268.531271][ T23] usb 1-1: SerialNumber: syz [ 268.539960][ T23] usb 1-1: config 0 descriptor?? [ 268.551587][ T23] gs_usb 1-1:0.0: Required endpoints not found [ 268.682261][ T8230] syzkaller0: entered promiscuous mode [ 268.688359][ T8230] syzkaller0: entered allmulticast mode [ 273.061864][ T5777] usb 1-1: USB disconnect, device number 4 [ 275.363564][ T8254] tipc: Enabling of bearer rejected, failed to enable media [ 275.383746][ T8267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.720'. [ 275.916002][ T5777] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 276.105979][ T5777] usb 1-1: Using ep0 maxpacket: 32 [ 276.118319][ T5777] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.134522][ T5777] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 276.158452][ T5777] usb 1-1: config 0 interface 0 has no altsetting 0 [ 276.173761][ T5777] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 276.182958][ T5777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.197231][ T5777] usb 1-1: Product: syz [ 276.204995][ T5777] usb 1-1: Manufacturer: syz [ 276.213186][ T5777] usb 1-1: SerialNumber: syz [ 276.226420][ T5777] usb 1-1: config 0 descriptor?? [ 276.238074][ T5777] gs_usb 1-1:0.0: Required endpoints not found [ 277.778330][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.730'. [ 277.963145][ T8296] syzkaller0: entered promiscuous mode [ 278.001827][ T8296] syzkaller0: entered allmulticast mode [ 278.705432][ T23] usb 1-1: USB disconnect, device number 5 [ 279.652695][ T8308] syzkaller0: entered promiscuous mode [ 279.658546][ T8308] syzkaller0: entered allmulticast mode [ 279.667068][ T8310] tipc: Enabled bearer , priority 0 [ 279.680428][ T8298] tipc: Resetting bearer [ 279.768065][ T8298] tipc: Disabling bearer [ 282.304859][ T5777] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 282.720567][ T5777] usb 2-1: Using ep0 maxpacket: 32 [ 282.728704][ T5777] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.739564][ T5777] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 282.762116][ T5777] usb 2-1: config 0 interface 0 has no altsetting 0 [ 282.778329][ T5777] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 282.790183][ T5777] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.801580][ T5777] usb 2-1: Product: syz [ 282.808145][ T5777] usb 2-1: Manufacturer: syz [ 282.813035][ T5777] usb 2-1: SerialNumber: syz [ 282.823983][ T5777] usb 2-1: config 0 descriptor?? [ 282.838698][ T5777] gs_usb 2-1:0.0: Required endpoints not found [ 285.642929][ T8342] syzkaller0: entered promiscuous mode [ 285.659810][ T8342] syzkaller0: entered allmulticast mode [ 287.267992][ T23] usb 2-1: USB disconnect, device number 4 [ 288.847497][ T8364] tipc: Enabled bearer , priority 0 [ 288.945173][ T8362] syzkaller0: entered promiscuous mode [ 289.006069][ T8362] syzkaller0: entered allmulticast mode [ 289.850761][ T27] tipc: Node number set to 571946010 [ 289.915388][ T8366] tipc: Resetting bearer [ 292.260663][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 292.456000][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 292.472140][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.504251][ T23] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 292.533574][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 292.552723][ T23] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 292.568935][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.584668][ T23] usb 2-1: Product: syz [ 292.596339][ T23] usb 2-1: Manufacturer: syz [ 292.601284][ T23] usb 2-1: SerialNumber: syz [ 292.631315][ T23] usb 2-1: config 0 descriptor?? [ 292.652018][ T23] gs_usb 2-1:0.0: Required endpoints not found [ 296.944981][ T8366] tipc: Disabling bearer [ 296.994422][ T8] usb 2-1: USB disconnect, device number 5 [ 297.336876][ T8397] syzkaller0: entered promiscuous mode [ 297.342590][ T8397] syzkaller0: entered allmulticast mode [ 302.072420][ T8421] tipc: Enabling of bearer rejected, failed to enable media [ 302.164022][ T8432] syzkaller0: entered promiscuous mode [ 302.169666][ T8432] syzkaller0: entered allmulticast mode [ 302.508965][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 302.787447][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 302.859262][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.998092][ T9] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 303.192014][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 303.298387][ T9] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 303.398251][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.491854][ T9] usb 1-1: Product: syz [ 303.546590][ T9] usb 1-1: Manufacturer: syz [ 303.596447][ T9] usb 1-1: SerialNumber: syz [ 303.733660][ T9] usb 1-1: config 0 descriptor?? [ 303.898267][ T9] gs_usb 1-1:0.0: Required endpoints not found [ 305.500343][ T9] usb 1-1: USB disconnect, device number 6 [ 310.142607][ T8464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.777'. [ 310.185615][ T8480] tipc: Enabled bearer , priority 0 [ 310.248674][ T8476] syzkaller0: entered promiscuous mode [ 310.265903][ T8476] syzkaller0: entered allmulticast mode [ 310.306079][ T8473] tipc: Resetting bearer [ 310.555102][ T8494] afs: Bad value for 'source' [ 312.789939][ T8473] tipc: Disabling bearer [ 312.802336][ T8495] netlink: 16 bytes leftover after parsing attributes in process `syz.1.783'. [ 312.944121][ T8513] netlink: 28 bytes leftover after parsing attributes in process `syz.3.788'. [ 315.200951][ T8517] syzkaller0: entered promiscuous mode [ 315.246911][ T8517] syzkaller0: entered allmulticast mode [ 317.400905][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.407744][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.460948][ T8553] afs: Bad value for 'source' [ 318.697274][ T8530] tipc: Enabling of bearer rejected, failed to enable media [ 318.729444][ T8553] netlink: 16 bytes leftover after parsing attributes in process `syz.2.794'. [ 318.957043][ T8558] syzkaller0: entered promiscuous mode [ 318.963115][ T8558] syzkaller0: entered allmulticast mode [ 318.977069][ T8558] tipc: Enabled bearer , priority 0 [ 318.994186][ T8557] tipc: Resetting bearer [ 319.057933][ T8557] tipc: Disabling bearer [ 319.069511][ T8559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.797'. [ 319.094950][ T8561] syzkaller0: entered promiscuous mode [ 319.104239][ T8561] syzkaller0: entered allmulticast mode [ 322.186014][ T8575] tipc: Enabled bearer , priority 0 [ 322.255558][ T8574] tipc: Disabling bearer [ 322.284752][ T8580] afs: Bad value for 'source' [ 322.351789][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'. [ 322.448874][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.804'. [ 322.570368][ T8581] netlink: 16 bytes leftover after parsing attributes in process `syz.1.803'. [ 323.114413][ T8584] syzkaller0: entered promiscuous mode [ 323.120098][ T8584] syzkaller0: entered allmulticast mode [ 323.127134][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'. [ 323.175896][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.804'. [ 323.187825][ T8584] tipc: Enabled bearer , priority 0 [ 323.237708][ T8584] tipc: Resetting bearer [ 323.292995][ T8583] tipc: Resetting bearer [ 323.360412][ T8583] tipc: Disabling bearer [ 323.374356][ T8590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.808'. [ 323.412312][ T8593] syzkaller0: entered promiscuous mode [ 323.418370][ T8593] syzkaller0: entered allmulticast mode [ 323.445199][ T8593] tipc: Enabled bearer , priority 0 [ 323.475272][ T8591] tipc: Resetting bearer [ 323.625765][ T8591] tipc: Disabling bearer [ 327.105156][ T8626] afs: Bad value for 'source' [ 327.129495][ T8626] netlink: 16 bytes leftover after parsing attributes in process `syz.2.816'. [ 327.352747][ T8629] syzkaller0: entered promiscuous mode [ 327.358502][ T8629] syzkaller0: entered allmulticast mode [ 327.483361][ T8631] syzkaller0: entered promiscuous mode [ 327.498784][ T8631] syzkaller0: entered allmulticast mode [ 327.527302][ T8631] tipc: Enabled bearer , priority 0 [ 327.564495][ T8631] tipc: Resetting bearer [ 327.579715][ T8630] tipc: Resetting bearer [ 327.651305][ T8630] tipc: Disabling bearer [ 327.713433][ T8633] syzkaller0: entered promiscuous mode [ 327.738348][ T8633] syzkaller0: entered allmulticast mode [ 327.779548][ T8633] tipc: Enabled bearer , priority 0 [ 327.816931][ T8632] tipc: Resetting bearer [ 327.861644][ T8632] tipc: Disabling bearer [ 328.291803][ T8656] afs: Bad value for 'source' [ 328.332767][ T8656] netlink: 16 bytes leftover after parsing attributes in process `syz.0.826'. [ 332.258859][ T8678] syzkaller0: entered promiscuous mode [ 332.264446][ T8678] syzkaller0: entered allmulticast mode [ 332.328246][ T8678] tipc: Enabled bearer , priority 0 [ 332.416548][ T8678] tipc: Resetting bearer [ 332.465341][ T8677] tipc: Resetting bearer [ 332.539769][ T8677] tipc: Disabling bearer [ 332.912227][ T8694] afs: Bad value for 'source' [ 332.983692][ T8696] netlink: 16 bytes leftover after parsing attributes in process `syz.3.836'. [ 333.847275][ T8693] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 333.856194][ T8693] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 333.882432][ T8693] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 333.896005][ T8703] tipc: Enabling of bearer rejected, failed to enable media [ 333.910972][ T8693] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 333.971930][ T8693] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 333.997871][ T8693] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 334.062294][ T8693] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 334.071032][ T8693] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 335.865933][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 335.945873][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 336.025890][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 336.106210][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 336.690122][ T8710] syzkaller0: entered promiscuous mode [ 336.767674][ T8710] syzkaller0: entered allmulticast mode [ 337.726018][ T8731] afs: Bad value for 'source' [ 337.945896][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 338.026122][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 338.106116][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 338.187862][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 339.804044][ T8731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.847'. [ 339.818930][ T8735] tipc: Enabled bearer , priority 0 [ 339.986444][ T8733] syzkaller0: entered promiscuous mode [ 339.992006][ T8733] syzkaller0: entered allmulticast mode [ 340.055625][ T8744] tipc: Enabled bearer , priority 0 [ 340.193431][ T8744] syzkaller0: entered promiscuous mode [ 340.199283][ T8744] syzkaller0: entered allmulticast mode [ 340.210943][ T8744] tipc: Resetting bearer [ 340.322355][ T8740] tipc: Resetting bearer [ 343.454540][ T8763] afs: Bad value for 'source' [ 343.472519][ T8763] netlink: 28 bytes leftover after parsing attributes in process `syz.1.856'. [ 344.902279][ T8740] tipc: Disabling bearer [ 344.914627][ T8743] tipc: Resetting bearer [ 346.451188][ T8743] tipc: Disabling bearer [ 346.465226][ T27] tipc: Node number set to 4204255468 [ 346.471941][ T8763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.856'. [ 346.732990][ T8787] syzkaller1: entered promiscuous mode [ 346.751311][ T8787] syzkaller1: entered allmulticast mode [ 349.359720][ T8803] afs: Bad value for 'source' [ 349.398907][ T8803] netlink: 28 bytes leftover after parsing attributes in process `syz.3.867'. [ 349.413567][ T8803] netlink: 16 bytes leftover after parsing attributes in process `syz.3.867'. [ 349.579743][ T8805] tipc: Enabling of bearer rejected, failed to enable media [ 349.687739][ T8808] tipc: Enabled bearer , priority 0 [ 349.996402][ T8808] syzkaller0: entered promiscuous mode [ 350.009813][ T8808] syzkaller0: entered allmulticast mode [ 350.023970][ T8808] tipc: Resetting bearer [ 350.078353][ T8807] tipc: Resetting bearer [ 352.232958][ T8807] tipc: Disabling bearer [ 352.482711][ T8873] afs: Bad value for 'source' [ 352.504249][ T8873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.877'. [ 352.519511][ T8873] netlink: 16 bytes leftover after parsing attributes in process `syz.2.877'. [ 353.344202][ T8881] syzkaller0: entered promiscuous mode [ 353.352864][ T8881] syzkaller0: entered allmulticast mode [ 353.365040][ T8881] tipc: Enabled bearer , priority 0 [ 353.384420][ T8881] tipc: Resetting bearer [ 353.431475][ T8875] lo speed is unknown, defaulting to 1000 [ 353.530035][ T8880] tipc: Resetting bearer [ 353.940573][ T8880] tipc: Disabling bearer [ 356.559504][ T8891] tipc: Enabled bearer , priority 0 [ 356.609999][ T8891] syzkaller0: entered promiscuous mode [ 356.615534][ T8891] syzkaller0: entered allmulticast mode [ 356.622827][ T8891] tipc: Resetting bearer [ 356.722943][ T8890] tipc: Resetting bearer [ 358.373329][ T8890] tipc: Disabling bearer [ 358.417984][ T8899] tipc: Enabling of bearer rejected, failed to enable media [ 358.699837][ T8921] afs: Bad value for 'source' [ 358.727468][ T8921] netlink: 20 bytes leftover after parsing attributes in process `syz.0.889'. [ 358.967380][ T8917] syzkaller0: entered promiscuous mode [ 359.006981][ T8917] syzkaller0: entered allmulticast mode [ 359.193463][ T8921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.889'. [ 359.554694][ T8925] syzkaller0: entered promiscuous mode [ 359.560790][ T8925] syzkaller0: entered allmulticast mode [ 363.284393][ T8935] tipc: Enabled bearer , priority 0 [ 363.373847][ T8941] syzkaller0: entered promiscuous mode [ 363.384918][ T8941] syzkaller0: entered allmulticast mode [ 363.394578][ T8941] tipc: Resetting bearer [ 363.404079][ T8934] tipc: Resetting bearer [ 363.563577][ T8954] afs: Bad value for 'source' [ 363.595197][ T8954] netlink: 20 bytes leftover after parsing attributes in process `syz.0.900'. [ 365.592014][ T8934] tipc: Disabling bearer [ 365.622022][ T8954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.900'. [ 365.643166][ T8956] tipc: Enabling of bearer rejected, failed to enable media [ 365.953836][ T8958] syzkaller0: entered promiscuous mode [ 365.959628][ T8958] syzkaller0: entered allmulticast mode [ 371.097113][ T8993] syzkaller0: entered promiscuous mode [ 371.102639][ T8993] syzkaller0: entered allmulticast mode [ 371.177076][ T5788] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 371.187275][ T5788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 371.195999][ T5788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 371.206471][ T5788] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 371.214913][ T5788] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 371.223507][ T5788] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 372.853564][ T9001] syzkaller0: entered promiscuous mode [ 372.859349][ T9001] syzkaller0: entered allmulticast mode [ 373.041383][ T9005] lo speed is unknown, defaulting to 1000 [ 373.224773][ T3438] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.255868][ T3438] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.306288][ T5783] Bluetooth: hci4: command tx timeout [ 373.318063][ T9025] syzkaller0: entered promiscuous mode [ 373.341338][ T9025] syzkaller0: entered allmulticast mode [ 373.426742][ T3438] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.442156][ T3438] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.853235][ T3438] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.922151][ T3438] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.797263][ T3438] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.897616][ T3438] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.385917][ T5783] Bluetooth: hci4: command tx timeout [ 376.579963][ T9046] syzkaller0: entered promiscuous mode [ 376.585553][ T9046] syzkaller0: entered allmulticast mode [ 376.607486][ T9041] syzkaller0: entered promiscuous mode [ 376.615059][ T9041] syzkaller0: entered allmulticast mode [ 376.651918][ T9040] tipc: Enabled bearer , priority 0 [ 376.719072][ T9044] syzkaller0: entered promiscuous mode [ 376.724638][ T9044] syzkaller0: entered allmulticast mode [ 376.731416][ T9044] tipc: Resetting bearer [ 377.471106][ T5783] Bluetooth: hci4: command tx timeout [ 378.285430][ T9038] tipc: Resetting bearer [ 378.845297][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.851764][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.548412][ T5783] Bluetooth: hci4: command tx timeout [ 379.869064][ T9038] tipc: Disabling bearer [ 379.894031][ T3438] tipc: Left network mode [ 380.216366][ T9005] chnl_net:caif_netlink_parms(): no params data found [ 380.341947][ T9073] syzkaller0: entered promiscuous mode [ 380.357979][ T9073] syzkaller0: entered allmulticast mode [ 383.751287][ T9103] tipc: Enabled bearer , priority 0 [ 383.926656][ T9103] syzkaller0: entered promiscuous mode [ 383.932312][ T9103] syzkaller0: entered allmulticast mode [ 383.951525][ T9103] tipc: Resetting bearer [ 384.052418][ T9102] tipc: Resetting bearer [ 385.524945][ T9102] tipc: Disabling bearer [ 385.541407][ T9005] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.549750][ T9005] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.562059][ T9005] bridge_slave_0: entered allmulticast mode [ 385.569583][ T9005] bridge_slave_0: entered promiscuous mode [ 385.630800][ T23] tipc: Node number set to 4010315774 [ 385.650564][ T9005] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.664423][ T9005] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.672373][ T9005] bridge_slave_1: entered allmulticast mode [ 385.694492][ T9005] bridge_slave_1: entered promiscuous mode [ 385.952341][ T9005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.989505][ T9133] syzkaller0: entered promiscuous mode [ 385.995079][ T9133] syzkaller0: entered allmulticast mode [ 386.033567][ T9005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.133661][ T9005] team0: Port device team_slave_0 added [ 386.189245][ T9005] team0: Port device team_slave_1 added [ 386.239800][ T9136] syzkaller0: entered promiscuous mode [ 386.246290][ T9136] syzkaller0: entered allmulticast mode [ 386.273756][ T9005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.288500][ T9005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.355828][ T9005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.396302][ T9005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.415887][ T9005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.495914][ T9005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.891731][ T9160] syzkaller0: entered promiscuous mode [ 386.898658][ T9160] syzkaller0: entered allmulticast mode [ 387.026421][ T9156] tipc: Enabled bearer , priority 0 [ 387.044922][ T9150] tipc: Resetting bearer [ 388.608945][ T9150] tipc: Disabling bearer [ 388.645317][ T3438] hsr_slave_0: left promiscuous mode [ 388.653479][ T3438] hsr_slave_1: left promiscuous mode [ 388.664567][ T3438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.673053][ T3438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.689380][ T3438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.705992][ T3438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.721352][ T3438] bridge_slave_1: left allmulticast mode [ 388.727287][ T3438] bridge_slave_1: left promiscuous mode [ 388.734487][ T3438] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.758694][ T3438] bridge_slave_0: left allmulticast mode [ 388.764654][ T3438] bridge_slave_0: left promiscuous mode [ 388.772856][ T3438] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.803299][ T3438] veth1_macvtap: left promiscuous mode [ 388.810772][ T3438] veth0_macvtap: left promiscuous mode [ 388.818823][ T3438] veth1_vlan: left promiscuous mode [ 388.824567][ T3438] veth0_vlan: left promiscuous mode [ 389.361871][ T9189] ======================================================= [ 389.361871][ T9189] WARNING: The mand mount option has been deprecated and [ 389.361871][ T9189] and is ignored by this kernel. Remove the mand [ 389.361871][ T9189] option from the mount to silence this warning. [ 389.361871][ T9189] ======================================================= [ 390.359590][ T3438] team0 (unregistering): Port device team_slave_1 removed [ 390.403729][ T3438] team0 (unregistering): Port device team_slave_0 removed [ 390.444511][ T3438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.490741][ T3438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.780945][ T3438] bond0 (unregistering): Released all slaves [ 390.941441][ T9005] hsr_slave_0: entered promiscuous mode [ 390.967720][ T9005] hsr_slave_1: entered promiscuous mode [ 391.046224][ T9188] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 391.052356][ T9188] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 391.124096][ T9188] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 391.186193][ T9188] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 391.212704][ T9188] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 391.247685][ T9188] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 391.727383][ T9212] syzkaller0: entered promiscuous mode [ 391.745728][ T9212] syzkaller0: entered allmulticast mode [ 391.977019][ T9223] tipc: Enabled bearer , priority 0 [ 392.171907][ T9223] syzkaller0: entered promiscuous mode [ 392.187235][ T9223] syzkaller0: entered allmulticast mode [ 392.194097][ T9223] tipc: Resetting bearer [ 392.414943][ T9222] tipc: Resetting bearer [ 393.069224][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 393.069540][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 393.159245][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 393.235933][ T5783] Bluetooth: hci4: command 0x0c1a tx timeout [ 394.028954][ T9222] tipc: Disabling bearer [ 394.039626][ T9005] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 394.090714][ T9005] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 394.137401][ T9005] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 394.174350][ T9005] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 395.131011][ T9256] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 395.176825][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.962'. [ 395.225646][ T9256] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 395.268047][ T9260] bond_slave_0: entered promiscuous mode [ 395.274021][ T9260] bond_slave_1: entered promiscuous mode [ 395.279974][ T9256] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 395.286678][ T9260] macvtap2: entered promiscuous mode [ 395.292078][ T9260] bond0: entered promiscuous mode [ 395.297493][ T9256] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 395.344968][ T9260] macvtap2: entered allmulticast mode [ 395.381126][ T9260] bond0: entered allmulticast mode [ 395.408814][ T9260] bond_slave_0: entered allmulticast mode [ 395.414655][ T9260] bond_slave_1: entered allmulticast mode [ 395.457292][ T9260] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 395.486766][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.962'. [ 395.535039][ T9262] bond0: left allmulticast mode [ 395.546101][ T9262] bond_slave_0: left allmulticast mode [ 395.557195][ T9262] bond_slave_1: left allmulticast mode [ 395.573424][ T9262] bond0: left promiscuous mode [ 395.594186][ T9262] bond_slave_0: left promiscuous mode [ 395.599817][ T9262] bond_slave_1: left promiscuous mode [ 395.624394][ T9262] macvtap2: left promiscuous mode [ 395.639439][ T9262] macvtap2: left allmulticast mode [ 395.830103][ T9281] syzkaller0: entered promiscuous mode [ 395.856141][ T9281] syzkaller0: entered allmulticast mode [ 396.003043][ T9275] syzkaller0: entered promiscuous mode [ 396.021075][ T9275] syzkaller0: entered allmulticast mode [ 396.101974][ T9005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.505960][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 397.308132][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 397.320535][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 397.398686][ T5783] Bluetooth: hci4: command 0x0c1a tx timeout [ 397.982456][ T9005] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.033703][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.041966][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.125121][ T3453] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.132504][ T3453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.226961][ T9302] tipc: Enabled bearer , priority 0 [ 398.383366][ T9302] syzkaller0: entered promiscuous mode [ 398.395998][ T9302] syzkaller0: entered allmulticast mode [ 398.407856][ T9302] tipc: Resetting bearer [ 399.253844][ T9314] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 399.260635][ T9314] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 399.276524][ T9301] tipc: Resetting bearer [ 399.282860][ T9314] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 399.298422][ T9314] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 400.586068][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 401.305950][ T5783] Bluetooth: hci4: command 0x0c1a tx timeout [ 401.305955][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 401.305991][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 403.035410][ T9347] afs: Bad value for 'source' [ 404.724848][ T9301] tipc: Disabling bearer [ 404.744393][ T9005] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.775136][ T9332] syzkaller0: entered promiscuous mode [ 404.783075][ T9332] syzkaller0: entered allmulticast mode [ 404.796668][ T9347] netlink: 16 bytes leftover after parsing attributes in process `syz.2.976'. [ 406.967408][ T9366] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 406.973447][ T9005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.081464][ T9366] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 407.106175][ T9366] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 407.120609][ T9366] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 407.465836][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 409.587200][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 409.593352][ T5779] Bluetooth: hci4: command 0x0c1a tx timeout [ 409.599589][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 409.664149][ T9392] afs: Bad value for 'source' [ 409.748761][ T9392] netlink: 16 bytes leftover after parsing attributes in process `syz.2.984'. [ 410.053346][ T9396] tipc: Enabled bearer , priority 0 [ 410.128812][ T9396] syzkaller0: entered promiscuous mode [ 410.139244][ T9396] syzkaller0: entered allmulticast mode [ 410.147723][ T9396] tipc: Resetting bearer [ 410.182067][ T9395] tipc: Resetting bearer [ 411.872739][ T9395] tipc: Disabling bearer [ 412.038193][ T9005] veth0_vlan: entered promiscuous mode [ 412.084613][ T9005] veth1_vlan: entered promiscuous mode [ 412.222276][ T9414] team0: No ports can be present during mode change [ 412.276491][ T9005] veth0_macvtap: entered promiscuous mode [ 412.302845][ T9005] veth1_macvtap: entered promiscuous mode [ 413.049693][ T9005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.178312][ T9421] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 413.195943][ T9005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.216277][ T9005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.234487][ T9421] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 413.240865][ T9005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.251515][ T9421] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 413.257882][ T9005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.270147][ T9421] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 413.271929][ T9005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.288012][ T9005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.317254][ T9005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.328073][ T9005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.346375][ T9005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.359018][ T9005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.374467][ T9005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.389262][ T9005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.405620][ T9005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.419592][ T9431] afs: Bad value for 'source' [ 414.140562][ T9005] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.169131][ T9005] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.199938][ T9005] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.221359][ T9005] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.240206][ T9432] netlink: 16 bytes leftover after parsing attributes in process `syz.3.993'. [ 414.505924][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 414.672183][ T8661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.713936][ T8661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.853418][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.886072][ T9454] tipc: Enabled bearer , priority 0 [ 414.893181][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.985646][ T9454] syzkaller0: entered promiscuous mode [ 414.994495][ T9454] syzkaller0: entered allmulticast mode [ 415.001958][ T9454] tipc: Resetting bearer [ 415.025727][ T9453] tipc: Resetting bearer [ 415.046208][ T174] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 415.259153][ T174] usb 1-1: Using ep0 maxpacket: 32 [ 415.274386][ T174] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.292298][ T174] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 415.311935][ T5788] Bluetooth: hci4: command 0x0c1a tx timeout [ 415.318340][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 415.324398][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 415.349877][ T174] usb 1-1: config 0 interface 0 has no altsetting 0 [ 415.373074][ T174] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 415.399772][ T174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.418187][ T174] usb 1-1: Product: syz [ 415.422435][ T174] usb 1-1: Manufacturer: syz [ 415.445889][ T174] usb 1-1: SerialNumber: syz [ 415.474242][ T174] usb 1-1: config 0 descriptor?? [ 415.487979][ T174] gs_usb 1-1:0.0: Required endpoints not found [ 415.893601][ T5820] usb 1-1: USB disconnect, device number 7 [ 418.726601][ T9453] tipc: Disabling bearer [ 423.930702][ T9496] afs: Bad value for 'source' [ 423.943811][ T9494] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 423.990874][ T9496] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1002'. [ 424.170827][ T9498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1003'. [ 424.180762][ T9494] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 424.227649][ T9494] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 424.287168][ T9494] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 424.514192][ T9504] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 424.553559][ T9504] syzkaller0: entered promiscuous mode [ 424.582690][ T9504] syzkaller0: entered allmulticast mode [ 424.747863][ T9511] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1006'. [ 424.791049][ T9506] syzkaller1: entered promiscuous mode [ 424.826193][ T9506] syzkaller1: entered allmulticast mode [ 425.153601][ T9520] tipc: Enabled bearer , priority 0 [ 425.416081][ T9520] syzkaller0: entered promiscuous mode [ 425.482383][ T9520] syzkaller0: entered allmulticast mode [ 425.499077][ T9520] tipc: Resetting bearer [ 425.600478][ T9519] tipc: Resetting bearer [ 425.881100][ T9545] afs: Bad value for 'source' [ 425.946192][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 426.265855][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 426.271948][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 426.345847][ T5783] Bluetooth: hci4: command 0x0c1a tx timeout [ 428.003816][ T9519] tipc: Disabling bearer [ 428.024417][ T9539] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1012'. [ 428.045008][ T9544] netlink: 'syz.4.1012': attribute type 1 has an invalid length. [ 428.053847][ T9545] lo speed is unknown, defaulting to 1000 [ 428.060406][ T9546] netlink: 'syz.4.1012': attribute type 1 has an invalid length. [ 428.069715][ T9547] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1013'. [ 428.097193][ T9545] lo speed is unknown, defaulting to 1000 [ 428.151295][ T9545] lo speed is unknown, defaulting to 1000 [ 428.179325][ T9545] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 428.203041][ T9545] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 428.314694][ T9545] lo speed is unknown, defaulting to 1000 [ 428.374553][ T9545] lo speed is unknown, defaulting to 1000 [ 428.417239][ T9545] lo speed is unknown, defaulting to 1000 [ 428.461719][ T9545] lo speed is unknown, defaulting to 1000 [ 429.244843][ T9556] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 429.276619][ T9556] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 429.290449][ T9556] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 429.296987][ T9556] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 429.424707][ T9560] syzkaller0: entered promiscuous mode [ 429.433046][ T9560] syzkaller0: entered allmulticast mode [ 429.575882][ T9568] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1019'. [ 429.599835][ T9563] syzkaller1: entered promiscuous mode [ 429.605413][ T9563] syzkaller1: entered allmulticast mode [ 430.505949][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 430.640235][ T9573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1021'. [ 431.307143][ T5779] Bluetooth: hci4: command 0x0c1a tx timeout [ 431.313352][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 431.319572][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 432.651898][ T9582] tipc: Enabled bearer , priority 0 [ 432.731275][ T9582] syzkaller0: entered promiscuous mode [ 432.736917][ T9582] syzkaller0: entered allmulticast mode [ 432.743255][ T9582] tipc: Resetting bearer [ 432.801611][ T9581] tipc: Resetting bearer [ 433.117976][ T9600] afs: Bad value for 'source' [ 433.146417][ T9600] siw: device registration error -23 [ 435.686945][ T9581] tipc: Disabling bearer [ 435.704625][ T9600] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1028'. [ 436.830532][ T9621] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 436.853415][ T9629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1032'. [ 436.997772][ T9621] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 437.016553][ T9621] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 437.023021][ T9621] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 437.199065][ T9641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1031'. [ 438.105950][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 439.066066][ T5779] Bluetooth: hci4: command 0x0c1a tx timeout [ 439.072141][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 439.078270][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 439.561622][ T9649] netlink: 'syz.2.1034': attribute type 2 has an invalid length. [ 439.829256][ T9659] tipc: Enabled bearer , priority 0 [ 439.933659][ T9659] syzkaller0: entered promiscuous mode [ 439.955556][ T9659] syzkaller0: entered allmulticast mode [ 439.971826][ T9659] tipc: Resetting bearer [ 440.024452][ T9658] tipc: Resetting bearer [ 440.271558][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.278301][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.738375][ T9658] tipc: Disabling bearer [ 441.753118][ T9665] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1039'. [ 441.763012][ T9662] syzkaller1: entered promiscuous mode [ 441.768710][ T9662] syzkaller1: entered allmulticast mode [ 441.896143][ T9675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1041'. [ 442.009557][ T9679] syzkaller0: entered promiscuous mode [ 442.026378][ T9679] syzkaller0: entered allmulticast mode [ 442.243853][ T9685] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1045'. [ 443.060922][ T9688] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 443.246023][ T9688] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 443.266218][ T9688] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 443.272306][ T9688] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 444.425872][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 445.306151][ T5788] Bluetooth: hci4: command 0x0c1a tx timeout [ 445.312387][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 445.318837][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 446.214655][ T9708] syzkaller0: entered promiscuous mode [ 446.255327][ T9708] syzkaller0: entered allmulticast mode [ 448.215943][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1058'. [ 448.295991][ T9734] netlink: 'syz.4.1058': attribute type 1 has an invalid length. [ 448.319029][ T9735] netlink: 'syz.4.1058': attribute type 1 has an invalid length. [ 450.746710][ T9748] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 450.753150][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 451.310062][ T9748] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 451.316369][ T9748] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 451.322435][ T9748] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 451.507131][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1066'. [ 451.559349][ T9763] team_slave_0: entered promiscuous mode [ 451.565385][ T9763] team_slave_1: entered promiscuous mode [ 451.590106][ T9763] macvtap2: entered promiscuous mode [ 451.595508][ T9763] team0: entered promiscuous mode [ 451.616495][ T9763] macvtap2: entered allmulticast mode [ 451.621977][ T9763] team0: entered allmulticast mode [ 451.647899][ T9763] team_slave_0: entered allmulticast mode [ 451.653976][ T9763] team_slave_1: entered allmulticast mode [ 451.665070][ T9763] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 451.726659][ T9766] tipc: Enabled bearer , priority 0 [ 451.743478][ T9768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1066'. [ 451.867402][ T9766] syzkaller0: entered promiscuous mode [ 451.875568][ T9766] syzkaller0: entered allmulticast mode [ 451.882234][ T9766] tipc: Resetting bearer [ 451.900411][ T9779] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1069'. [ 451.920862][ T9765] tipc: Resetting bearer [ 452.829365][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 453.396151][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 453.402550][ T5783] Bluetooth: hci4: command 0x0c1a tx timeout [ 453.908916][ T9765] tipc: Disabling bearer [ 453.919177][ T9775] syzkaller1: entered promiscuous mode [ 453.924767][ T9775] syzkaller1: entered allmulticast mode [ 453.934604][ T9785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1071'. [ 453.972029][ T9795] netlink: 'syz.4.1071': attribute type 1 has an invalid length. [ 453.981711][ T9801] netlink: 'syz.4.1071': attribute type 1 has an invalid length. [ 454.142285][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1074'. [ 456.668658][ T9837] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1079'. [ 456.830659][ T9837] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1079'. [ 457.129721][ T9837] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1079'. [ 457.772971][ T9852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1081'. [ 457.845143][ T9854] tipc: Enabled bearer , priority 0 [ 458.020516][ T9854] syzkaller0: entered promiscuous mode [ 458.042570][ T9854] syzkaller0: entered allmulticast mode [ 458.070265][ T9854] tipc: Resetting bearer [ 458.093445][ T9867] syzkaller0: entered promiscuous mode [ 458.115847][ T9867] syzkaller0: entered allmulticast mode [ 458.171046][ T9851] tipc: Resetting bearer [ 460.014509][ T9851] tipc: Disabling bearer [ 460.032473][ T9853] tipc: Started in network mode [ 460.037639][ T9853] tipc: Node identity ee76901d5748, cluster identity 4711 [ 460.045044][ T9853] tipc: Enabled bearer , priority 0 [ 460.064191][ T9872] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1085'. [ 460.082278][ T9850] tipc: Resetting bearer [ 460.178850][ T9850] tipc: Disabling bearer [ 463.522201][ T9907] syzkaller0: entered promiscuous mode [ 463.527893][ T9907] syzkaller0: entered allmulticast mode [ 465.753673][ T9939] tipc: Enabling of bearer rejected, failed to enable media [ 465.795406][ T9954] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1097'. [ 466.087549][ T9966] syzkaller0: entered promiscuous mode [ 466.125905][ T9966] syzkaller0: entered allmulticast mode [ 472.024042][ T9978] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 472.037426][ T9978] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 472.043564][ T9978] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 472.068676][ T9978] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 472.318859][T10004] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1109'. [ 472.331099][T10004] syzkaller1: entered promiscuous mode [ 472.346608][T10004] syzkaller1: entered allmulticast mode [ 472.871294][ T9992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1105'. [ 473.094559][ T9995] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1105'. [ 473.217015][ T9995] bond1: entered promiscuous mode [ 473.330638][ T9995] bond1: entered allmulticast mode [ 473.480358][ T9995] 8021q: adding VLAN 0 to HW filter on device bond1 [ 473.769926][T10020] lo speed is unknown, defaulting to 1000 [ 474.027240][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 474.106096][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 474.106096][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 474.106221][ T5779] Bluetooth: hci4: command 0x0c1a tx timeout [ 476.542984][T10020] lo speed is unknown, defaulting to 1000 [ 477.664187][T10051] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 477.700292][T10051] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 477.708258][T10051] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 477.714499][T10051] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 477.992374][T10058] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1120'. [ 478.024038][T10058] syzkaller1: entered promiscuous mode [ 478.042852][T10058] syzkaller1: entered allmulticast mode [ 479.225954][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 479.705924][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 479.786022][ T5779] Bluetooth: hci4: command 0x0c1a tx timeout [ 479.792299][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 481.770146][T10087] syzkaller0: entered promiscuous mode [ 481.793061][T10087] syzkaller0: entered allmulticast mode [ 481.818493][T10087] tipc: Enabling of bearer rejected, failed to enable media [ 481.917827][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1131'. [ 481.980240][T10090] bond_slave_0: entered promiscuous mode [ 481.986177][T10090] bond_slave_1: entered promiscuous mode [ 482.027304][T10090] macvtap1: entered promiscuous mode [ 482.042712][T10090] bond0: entered promiscuous mode [ 482.054236][T10090] macvtap1: entered allmulticast mode [ 482.069813][T10090] bond0: entered allmulticast mode [ 482.085798][T10090] bond_slave_0: entered allmulticast mode [ 482.102786][T10090] bond_slave_1: entered allmulticast mode [ 482.126121][T10090] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 482.145425][T10093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1131'. [ 482.182546][T10093] bond0: left allmulticast mode [ 482.193250][T10093] bond_slave_0: left allmulticast mode [ 482.207925][T10093] bond_slave_1: left allmulticast mode [ 482.219187][T10093] bond0: left promiscuous mode [ 482.231483][T10093] bond_slave_0: left promiscuous mode [ 482.237121][T10093] bond_slave_1: left promiscuous mode [ 482.253667][T10093] macvtap1: left promiscuous mode [ 482.276343][T10093] macvtap1: left allmulticast mode [ 482.316695][T10100] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1132'. [ 482.343780][T10098] syzkaller1: entered promiscuous mode [ 482.360400][T10098] syzkaller1: entered allmulticast mode [ 482.695688][T10111] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 485.995600][T10126] syzkaller0: entered promiscuous mode [ 486.015291][T10126] syzkaller0: entered allmulticast mode [ 486.045035][T10126] tipc: Enabling of bearer rejected, failed to enable media [ 486.399332][T10143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1143'. [ 486.431634][T10143] bond_slave_0: entered promiscuous mode [ 486.437463][T10143] bond_slave_1: entered promiscuous mode [ 486.460679][T10143] macvtap3: entered promiscuous mode [ 486.475894][T10143] bond0: entered promiscuous mode [ 486.497045][T10143] macvtap3: entered allmulticast mode [ 486.504530][T10143] bond0: entered allmulticast mode [ 486.513805][T10143] bond_slave_0: entered allmulticast mode [ 486.521417][T10143] bond_slave_1: entered allmulticast mode [ 486.529427][T10143] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 486.539563][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1143'. [ 486.549853][T10146] bond0: left allmulticast mode [ 486.554902][T10146] bond_slave_0: left allmulticast mode [ 486.564818][T10146] bond_slave_1: left allmulticast mode [ 486.572061][T10146] bond0: left promiscuous mode [ 486.582650][T10146] bond_slave_0: left promiscuous mode [ 486.588203][T10146] bond_slave_1: left promiscuous mode [ 486.601560][T10146] macvtap3: left promiscuous mode [ 486.606841][T10146] macvtap3: left allmulticast mode [ 486.764636][T10149] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1144'. [ 486.780768][T10149] syzkaller1: entered promiscuous mode [ 486.789041][T10149] syzkaller1: entered allmulticast mode [ 486.894661][T10132] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 488.897405][T10172] syzkaller1: entered promiscuous mode [ 488.971808][T10172] syzkaller1: entered allmulticast mode [ 490.070881][T10181] syzkaller0: entered promiscuous mode [ 490.150326][T10181] syzkaller0: entered allmulticast mode [ 490.881722][T10202] syzkaller0: entered promiscuous mode [ 490.887559][T10202] syzkaller0: entered allmulticast mode [ 491.403189][T10189] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 495.984477][T10239] syzkaller0: entered promiscuous mode [ 496.004152][T10239] syzkaller0: entered allmulticast mode [ 496.131875][T10244] smc: removing ib device syz0 [ 496.142280][T10245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1174'. [ 496.183093][T10245] bond_slave_0: entered promiscuous mode [ 496.188935][T10245] bond_slave_1: entered promiscuous mode [ 496.232359][T10245] macvtap3: entered promiscuous mode [ 496.243518][T10245] bond0: entered promiscuous mode [ 496.264622][T10245] macvtap3: entered allmulticast mode [ 496.271128][T10245] bond0: entered allmulticast mode [ 496.276912][T10245] bond_slave_0: entered allmulticast mode [ 496.282906][T10245] bond_slave_1: entered allmulticast mode [ 496.297008][T10245] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 496.320000][T10252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1174'. [ 496.337931][T10252] bond0: left allmulticast mode [ 496.343884][T10252] bond_slave_0: left allmulticast mode [ 496.357283][T10252] bond_slave_1: left allmulticast mode [ 496.373219][T10252] bond0: left promiscuous mode [ 496.386545][T10252] bond_slave_0: left promiscuous mode [ 496.392096][T10252] bond_slave_1: left promiscuous mode [ 496.401115][T10252] macvtap3: left promiscuous mode [ 496.418294][T10252] macvtap3: left allmulticast mode [ 496.966948][T10248] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 499.527487][T10264] syzkaller0: entered promiscuous mode [ 499.570232][T10264] syzkaller0: entered allmulticast mode [ 499.793521][T10273] syzkaller0: entered promiscuous mode [ 499.813623][T10273] syzkaller0: entered allmulticast mode [ 500.266087][T10279] syzkaller0: entered promiscuous mode [ 500.271639][T10279] syzkaller0: entered allmulticast mode [ 500.320552][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1185'. [ 500.369246][T10281] macvtap4: entered promiscuous mode [ 500.374938][T10281] macvtap4: entered allmulticast mode [ 500.382289][T10281] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 500.460367][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1185'. [ 500.820989][T10299] syzkaller0: entered promiscuous mode [ 500.859303][T10299] syzkaller0: entered allmulticast mode [ 501.721588][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.744740][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.290601][T10283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 504.573242][T10315] syzkaller0: entered promiscuous mode [ 504.579170][T10315] syzkaller0: entered allmulticast mode [ 504.764824][T10322] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1198'. [ 504.889635][T10324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1199'. [ 504.927061][T10324] team_slave_0: entered promiscuous mode [ 504.932989][T10324] team_slave_1: entered promiscuous mode [ 504.967466][T10324] macvtap4: entered promiscuous mode [ 504.983126][T10324] team0: entered promiscuous mode [ 504.989623][T10324] macvtap4: entered allmulticast mode [ 504.996048][T10324] team0: entered allmulticast mode [ 505.005348][T10324] team_slave_0: entered allmulticast mode [ 505.014516][T10324] team_slave_1: entered allmulticast mode [ 505.033013][T10324] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 505.056811][T10329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1199'. [ 508.539180][T10357] syzkaller0: entered promiscuous mode [ 508.545127][T10357] syzkaller0: entered allmulticast mode [ 508.924918][T10370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1212'. [ 508.957852][T10370] macvtap5: entered promiscuous mode [ 508.963436][T10370] macvtap5: entered allmulticast mode [ 508.984028][T10370] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 509.012264][T10371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1212'. [ 509.215415][T10376] syzkaller0: entered promiscuous mode [ 509.229906][T10376] syzkaller0: entered allmulticast mode [ 509.276589][T10376] tipc: Enabled bearer , priority 0 [ 509.289154][T10374] tipc: Resetting bearer [ 509.337412][T10374] tipc: Disabling bearer [ 509.697562][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888024f4a000: rx timeout, send abort [ 510.207336][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888024f4a000: abort rx timeout. Force session deactivation [ 511.226523][T10387] syzkaller0: entered promiscuous mode [ 511.294347][T10387] syzkaller0: entered allmulticast mode [ 512.482808][T10399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1222'. [ 512.518145][T10399] team_slave_0: entered promiscuous mode [ 512.523958][T10399] team_slave_1: entered promiscuous mode [ 512.569251][T10399] macvtap2: entered promiscuous mode [ 512.574742][T10399] team0: entered promiscuous mode [ 512.646334][T10399] macvtap2: entered allmulticast mode [ 512.651821][T10399] team0: entered allmulticast mode [ 512.670749][T10399] team_slave_0: entered allmulticast mode [ 512.677932][T10399] team_slave_1: entered allmulticast mode [ 512.685257][T10399] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 512.693874][T10400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1222'. [ 512.802802][T10408] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1226'. [ 512.814728][T10408] syzkaller1: entered promiscuous mode [ 512.824678][T10408] syzkaller1: entered allmulticast mode [ 512.930703][T10413] syzkaller0: entered promiscuous mode [ 512.943195][T10413] syzkaller0: entered allmulticast mode [ 515.259864][T10426] syzkaller0: entered promiscuous mode [ 515.342043][T10426] syzkaller0: entered allmulticast mode [ 516.458326][T10441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1235'. [ 516.507720][T10441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1235'. [ 516.548774][T10444] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1236'. [ 516.566815][T10444] syzkaller1: entered promiscuous mode [ 516.580667][T10444] syzkaller1: entered allmulticast mode [ 516.719724][T10448] syzkaller0: entered promiscuous mode [ 516.725314][T10448] syzkaller0: entered allmulticast mode [ 518.929988][T10464] loop4: detected capacity change from 0 to 512 [ 519.203067][T10464] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 520.040888][T10468] syzkaller0: entered promiscuous mode [ 520.091703][T10468] syzkaller0: entered allmulticast mode [ 520.227883][T10464] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 520.266762][T10464] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 520.465555][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1247'. [ 520.506205][T10482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1247'. [ 520.616571][T10484] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1249'. [ 520.644263][T10484] syzkaller1: entered promiscuous mode [ 520.655954][T10484] syzkaller1: entered allmulticast mode [ 520.768811][T10488] syzkaller0: entered promiscuous mode [ 520.774463][T10488] syzkaller0: entered allmulticast mode [ 521.542629][T10517] syzkaller0: entered promiscuous mode [ 521.556269][T10517] syzkaller0: entered allmulticast mode [ 521.617155][T10521] syzkaller0: entered promiscuous mode [ 521.623147][T10521] syzkaller0: entered allmulticast mode [ 521.675561][T10521] tipc: Enabled bearer , priority 0 [ 521.687128][T10520] tipc: Resetting bearer [ 521.723910][T10520] tipc: Disabling bearer [ 521.734429][T10523] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1261'. [ 521.745268][T10523] syzkaller1: entered promiscuous mode [ 521.751073][T10523] syzkaller1: entered allmulticast mode [ 522.618276][T10559] syzkaller0: entered promiscuous mode [ 522.634079][T10559] syzkaller0: entered allmulticast mode [ 522.647051][T10558] syzkaller0: entered promiscuous mode [ 522.667530][T10558] syzkaller0: entered allmulticast mode [ 522.778840][T10558] tipc: Enabled bearer , priority 0 [ 522.796116][T10556] tipc: Resetting bearer [ 522.874207][T10556] tipc: Disabling bearer [ 522.944934][T10566] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1273'. [ 522.976086][T10569] syzkaller1: entered promiscuous mode [ 522.982473][T10569] syzkaller1: entered allmulticast mode [ 523.853271][T10578] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 523.860865][T10578] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 523.869906][T10578] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 523.876984][T10578] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 524.132049][T10604] syzkaller0: entered promiscuous mode [ 524.163453][T10604] syzkaller0: entered allmulticast mode [ 524.302796][T10611] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 524.435751][T10615] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 524.446692][T10614] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1287'. [ 524.469363][T10614] syzkaller1: entered promiscuous mode [ 524.480589][T10614] syzkaller1: entered allmulticast mode [ 525.561810][T10624] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 525.568539][T10624] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 525.574616][T10624] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 525.580797][T10624] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 525.835631][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1298'. [ 525.879610][T10662] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1300'. [ 525.927068][T10662] syzkaller1: entered promiscuous mode [ 525.935956][T10662] syzkaller1: entered allmulticast mode [ 526.096505][T10670] netlink: 'syz.4.1301': attribute type 8 has an invalid length. [ 526.358325][T10675] afs: Bad value for 'source' [ 526.426805][T10677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1304'. [ 526.880784][T10654] Bluetooth: hci0: command 0x0406 tx timeout [ 527.715947][ T5783] Bluetooth: hci4: command 0x0c1a tx timeout [ 527.722111][T10654] Bluetooth: hci3: command 0x0406 tx timeout [ 527.724573][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 528.445897][T10676] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 528.452916][T10676] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 528.462369][T10676] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 528.472745][T10676] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 529.059852][T10703] netlink: 'syz.2.1316': attribute type 8 has an invalid length. [ 530.105882][T10654] Bluetooth: hci0: command 0x0406 tx timeout [ 530.506748][T10654] Bluetooth: hci4: command 0x0c1a tx timeout [ 530.512861][T10654] Bluetooth: hci1: command 0x0406 tx timeout [ 530.518999][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 532.704017][T10709] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 532.764373][T10709] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 532.789451][T10709] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 532.813051][T10709] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 533.532152][T10729] syzkaller0: entered promiscuous mode [ 533.557407][T10729] syzkaller0: entered allmulticast mode [ 534.326553][T10735] afs: Bad value for 'source' [ 534.332030][T10654] Bluetooth: hci0: command 0x0406 tx timeout [ 534.402615][T10738] siw: device registration error -23 [ 534.828128][T10654] Bluetooth: hci4: command 0x0c1a tx timeout [ 534.834239][T10654] Bluetooth: hci1: command 0x0406 tx timeout [ 534.843893][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 534.867181][T10735] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1327'. [ 535.563931][T10741] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 535.570240][T10741] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 535.576725][T10741] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 535.582765][T10741] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 535.874437][T10773] syzkaller0: entered promiscuous mode [ 535.933650][T10773] syzkaller0: entered allmulticast mode [ 536.986133][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 537.626000][ T5788] Bluetooth: hci4: command 0x0c1a tx timeout [ 537.632303][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 537.638766][T10654] Bluetooth: hci1: command 0x0406 tx timeout [ 537.968893][T10782] syzkaller0: entered promiscuous mode [ 538.023811][T10782] syzkaller0: entered allmulticast mode [ 539.214675][T10798] syzkaller0: entered promiscuous mode [ 539.222235][T10798] syzkaller0: entered allmulticast mode [ 541.077513][T10801] syzkaller0: entered promiscuous mode [ 541.083041][T10801] syzkaller0: entered allmulticast mode [ 544.231224][T10833] tipc: Enabled bearer , priority 0 [ 544.417612][T10832] tipc: Disabling bearer [ 546.039330][T10838] syzkaller0: entered promiscuous mode [ 546.045008][T10838] syzkaller0: entered allmulticast mode [ 546.439778][T10849] syzkaller0: entered promiscuous mode [ 546.448077][T10849] syzkaller0: entered allmulticast mode [ 548.247888][T10851] syzkaller0: entered promiscuous mode [ 548.253438][T10851] syzkaller0: entered allmulticast mode [ 550.200933][T10874] tipc: Enabling of bearer rejected, failed to enable media [ 552.300010][T10887] lo speed is unknown, defaulting to 1000 [ 552.929591][T10892] loop0: detected capacity change from 0 to 512 [ 553.203384][T10892] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 553.430033][T10892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.466163][T10892] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 553.502576][T10892] EXT4-fs (loop0): shut down requested (2) [ 553.543606][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.688133][T10902] /dev/sg0: Can't lookup blockdev [ 553.709376][T10902] random: crng reseeded on system resumption [ 553.781778][T10905] gadgetfs: bound to dummy_udc driver [ 553.997176][T10905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.021635][T10905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.056069][ T5820] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 554.071128][ C1] gadgetfs: connected [ 554.076418][ T5820] gadgetfs: disconnected [ 554.169720][T10901] gadgetfs: suspended from state 2 [ 554.446282][ T5820] usb 1-1: device not accepting address 8, error -71 [ 554.591874][T10920] loop4: detected capacity change from 0 to 4096 [ 554.610448][T10920] EXT4-fs: Ignoring removed bh option [ 554.648991][T10920] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 554.694166][T10920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.821760][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 554.831550][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 554.843835][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 554.877018][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 554.891880][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 554.900926][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 554.946444][T10925] loop0: detected capacity change from 0 to 512 [ 554.956657][T10925] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 555.004429][T10920] EXT4-fs error (device loop4): ext4_get_first_dir_block:3595: inode #12: comm syz.4.1374: directory missing '.' [ 555.042125][T10922] lo speed is unknown, defaulting to 1000 [ 555.122519][T10925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.153494][T10925] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 555.272446][T10925] Quota error (device loop0): do_check_range: Getting block 33554435 out of range 1-5 [ 555.288448][ T9005] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.298826][T10925] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 555.332510][T10925] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.1375: Failed to acquire dquot type 1 [ 555.528567][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.562221][T10922] chnl_net:caif_netlink_parms(): no params data found [ 555.833414][T10939] syzkaller0: entered promiscuous mode [ 555.841363][T10939] syzkaller0: entered allmulticast mode [ 555.907100][T10922] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.914274][T10922] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.922845][T10922] bridge_slave_0: entered allmulticast mode [ 555.930814][T10922] bridge_slave_0: entered promiscuous mode [ 556.999579][T10654] Bluetooth: hci2: command tx timeout [ 557.850102][T10922] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.857626][T10922] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.864858][T10922] bridge_slave_1: entered allmulticast mode [ 557.872925][T10922] bridge_slave_1: entered promiscuous mode [ 557.924897][T10922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.943806][T10922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.069437][T10922] team0: Port device team_slave_0 added [ 558.103272][T10922] team0: Port device team_slave_1 added [ 558.203850][T10922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.220824][T10922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.256136][T10967] loop2: detected capacity change from 0 to 4096 [ 558.276449][T10967] EXT4-fs: Ignoring removed bh option [ 558.288806][T10922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.319584][T10967] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 558.334988][T10922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.344705][T10967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.368168][T10922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.407178][T10922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.482209][T10922] hsr_slave_0: entered promiscuous mode [ 558.492247][T10922] hsr_slave_1: entered promiscuous mode [ 558.501015][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.528784][T10922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 558.540629][T10922] Cannot create hsr debugfs directory [ 558.889599][T10975] bridge0: port 3(dummy0) entered blocking state [ 558.901041][T10975] bridge0: port 3(dummy0) entered disabled state [ 558.908500][T10975] dummy0: entered allmulticast mode [ 558.919484][T10975] dummy0: entered promiscuous mode [ 558.931567][T10975] bridge0: port 3(dummy0) entered blocking state [ 558.939527][T10975] bridge0: port 3(dummy0) entered forwarding state [ 559.073904][T10654] Bluetooth: hci2: command tx timeout [ 559.264050][T10980] syzkaller0: entered promiscuous mode [ 559.275485][T10980] syzkaller0: entered allmulticast mode [ 559.330451][T10922] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 559.452823][T10989] loop2: detected capacity change from 0 to 4096 [ 559.496922][T10989] EXT4-fs: Ignoring removed bh option [ 559.507438][T10989] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 559.580320][T10989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.680878][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.155986][T10654] Bluetooth: hci2: command tx timeout [ 561.462651][T10922] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 561.484488][T10922] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 561.505012][T10992] lo speed is unknown, defaulting to 1000 [ 561.505124][T10922] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 561.926427][T10922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.029639][T10922] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.070522][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.077894][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.118396][T11016] syzkaller0: entered promiscuous mode [ 562.123946][T11016] syzkaller0: entered allmulticast mode [ 562.162046][ T3453] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.169277][ T3453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.190852][T11016] tipc: Enabling of bearer rejected, failed to enable media [ 562.251812][T11020] loop4: detected capacity change from 0 to 4096 [ 562.260691][T11020] EXT4-fs: Ignoring removed bh option [ 562.273917][T11020] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 562.304714][T11020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.374750][ T9005] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.577117][T11027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1404'. [ 562.724778][T11025] syzkaller0: entered promiscuous mode [ 562.730541][T11025] syzkaller0: entered allmulticast mode [ 563.164993][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.175874][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.226114][T10654] Bluetooth: hci2: command tx timeout [ 564.664527][T11038] syzkaller0: entered promiscuous mode [ 564.672386][T11038] syzkaller0: entered allmulticast mode [ 564.791915][T11046] loop2: detected capacity change from 0 to 512 [ 564.894483][T11046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.911869][T11046] ext4 filesystem being mounted at /350/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 565.228529][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.998135][T11069] tipc: Enabling of bearer rejected, failed to enable media [ 567.043660][T11066] syzkaller0: entered promiscuous mode [ 567.049325][T11066] syzkaller0: entered allmulticast mode [ 567.090265][T10922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.246265][T11094] tipc: Enabling of bearer rejected, failed to enable media [ 569.324105][T11103] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1415'. [ 569.763158][T10922] veth0_vlan: entered promiscuous mode [ 569.807387][T11115] lo speed is unknown, defaulting to 1000 [ 569.827662][T10922] veth1_vlan: entered promiscuous mode [ 569.899167][T11117] syzkaller0: entered promiscuous mode [ 569.904718][T11117] syzkaller0: entered allmulticast mode [ 571.585322][T11123] syzkaller0: entered promiscuous mode [ 571.591088][T11123] syzkaller0: entered allmulticast mode [ 571.600843][T11124] tipc: Enabling of bearer rejected, failed to enable media [ 571.683679][T10922] veth0_macvtap: entered promiscuous mode [ 571.712480][T10922] veth1_macvtap: entered promiscuous mode [ 571.741129][T10922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.755013][T10922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.771714][T10922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.782609][T10922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.801237][T10922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.825825][T10922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.845799][T10922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.866083][T10922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.885351][T10922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.917340][T11131] loop4: detected capacity change from 0 to 2048 [ 571.971262][T11131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.010968][T11131] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 572.070507][T11131] EXT4-fs (loop4): Delayed block allocation failed for inode 13 at logical offset 0 with max blocks 1 with error 28 [ 572.092118][T11129] syzkaller0: entered promiscuous mode [ 572.097731][T11129] syzkaller0: entered allmulticast mode [ 572.104532][T11131] EXT4-fs (loop4): This should not happen!! Data will be lost [ 572.104532][T11131] [ 572.105544][T10922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.130271][T11131] EXT4-fs (loop4): Total free blocks count 0 [ 572.138773][T10922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.143050][T11131] EXT4-fs (loop4): Free/Dirty block details [ 572.148797][T10922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.148817][T10922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.148830][T10922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.148845][T10922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.148869][T10922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.148883][T10922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.159826][T10922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.227165][T11131] EXT4-fs (loop4): free_blocks=2415919520 [ 572.233092][T11131] EXT4-fs (loop4): dirty_blocks=16 [ 572.248620][T11131] EXT4-fs (loop4): Block reservation details [ 572.254705][T11131] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 572.317374][ T9005] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.083905][T11146] tipc: Enabling of bearer rejected, failed to enable media [ 574.094292][T10922] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.111366][T10922] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.128770][T10922] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.137813][T10922] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.251133][T11148] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1426'. [ 574.387358][ T9342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.395872][ T9342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.485310][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.508966][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.838592][T11157] syzkaller0: entered promiscuous mode [ 574.865247][T11157] syzkaller0: entered allmulticast mode [ 577.156240][T11163] syzkaller0: entered promiscuous mode [ 577.161894][T11163] syzkaller0: entered allmulticast mode [ 577.174094][T11168] tipc: Enabling of bearer rejected, failed to enable media [ 579.436065][T11187] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1435'. [ 579.477706][T11194] tipc: Enabling of bearer rejected, failed to enable media [ 579.780459][T11207] lo speed is unknown, defaulting to 1000 [ 579.793266][T11210] syzkaller0: entered promiscuous mode [ 579.807036][T11208] loop5: detected capacity change from 0 to 4096 [ 579.807886][T11210] syzkaller0: entered allmulticast mode [ 579.822836][T11208] EXT4-fs: Ignoring removed bh option [ 579.854842][T11208] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 579.893530][T11208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.003123][T10922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.259924][T11219] loop5: detected capacity change from 0 to 1024 [ 580.368370][T11219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 580.382019][T11219] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 580.553626][T10922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 580.715273][T11228] syzkaller0: entered promiscuous mode [ 580.742147][T11228] syzkaller0: entered allmulticast mode [ 580.773224][T11228] tipc: Enabling of bearer rejected, failed to enable media [ 580.822121][T11232] syzkaller0: entered promiscuous mode [ 580.827954][T11232] syzkaller0: entered allmulticast mode [ 581.338079][T11243] loop0: detected capacity change from 0 to 4096 [ 581.355652][T11243] EXT4-fs: Ignoring removed bh option [ 581.430468][T11243] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 581.483449][T11243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.618285][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.324894][T11239] tipc: Enabling of bearer rejected, failed to enable media [ 583.441244][T11266] loop5: detected capacity change from 0 to 512 [ 583.490171][T11266] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.546044][T11266] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 583.683764][T10922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.767773][T11274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1453'. [ 584.018390][T11283] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1457'. [ 584.260784][T11291] syzkaller0: entered promiscuous mode [ 584.269610][T11291] syzkaller0: entered allmulticast mode [ 584.293696][T11291] tipc: Enabling of bearer rejected, failed to enable media [ 584.321176][T11293] syzkaller0: entered promiscuous mode [ 584.330731][T11293] syzkaller0: entered allmulticast mode [ 584.352897][T11293] tipc: Started in network mode [ 584.368641][T11293] tipc: Node identity b6595ab50867, cluster identity 4711 [ 584.396539][T11293] tipc: Enabled bearer , priority 0 [ 584.447454][T11292] tipc: Resetting bearer [ 584.493047][T11292] tipc: Disabling bearer [ 584.724286][T11303] lo speed is unknown, defaulting to 1000 [ 584.923648][T11308] loop4: detected capacity change from 0 to 512 [ 585.020326][T11310] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1467'. [ 585.052492][T11308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.078249][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1468'. [ 585.239459][ T9005] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.258969][T11310] syzkaller1: entered promiscuous mode [ 585.264519][T11310] syzkaller1: entered allmulticast mode [ 585.550031][T11323] syzkaller0: entered promiscuous mode [ 585.566079][T11323] syzkaller0: entered allmulticast mode [ 585.596471][T11326] syzkaller0: entered promiscuous mode [ 585.602060][T11326] syzkaller0: entered allmulticast mode [ 585.662119][T11326] tipc: Enabled bearer , priority 0 [ 585.673837][T11325] tipc: Resetting bearer [ 585.757733][T11325] tipc: Disabling bearer [ 585.992943][T11336] lo speed is unknown, defaulting to 1000 [ 586.007294][T11341] loop0: detected capacity change from 0 to 512 [ 586.097893][T11341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.116860][T11341] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 586.249578][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.276336][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1481'. [ 586.510670][T11353] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1483'. [ 586.736905][T11357] syzkaller1: entered promiscuous mode [ 586.745896][T11357] syzkaller1: entered allmulticast mode [ 586.982890][T11365] syzkaller0: entered promiscuous mode [ 586.998861][T11365] syzkaller0: entered allmulticast mode [ 587.044034][T11365] tipc: Enabled bearer , priority 0 [ 587.076105][T11364] tipc: Resetting bearer [ 587.306337][T11375] loop5: detected capacity change from 0 to 512 [ 587.413356][T11375] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 587.426714][T11375] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 587.533515][T11375] EXT4-fs (loop5): 1 truncate cleaned up [ 587.552275][T11375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.372546][T11364] tipc: Disabling bearer [ 588.735687][ C0] sched: RT throttling activated [ 588.818530][T11379] syzkaller0: entered promiscuous mode [ 588.824514][T11379] syzkaller0: entered allmulticast mode [ 589.447465][T10922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.252527][ T9833] tipc: Node number set to 3107885085 [ 591.265370][T11394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1494'. [ 591.282226][T11394] bond_slave_0: entered promiscuous mode [ 591.288055][T11394] bond_slave_1: entered promiscuous mode [ 591.302581][T11394] macvtap3: entered promiscuous mode [ 591.311727][T11394] bond0: entered promiscuous mode [ 591.322446][T11394] macvtap3: entered allmulticast mode [ 591.328313][T11394] bond0: entered allmulticast mode [ 591.334938][T11394] bond_slave_0: entered allmulticast mode [ 591.347030][T11394] bond_slave_1: entered allmulticast mode [ 591.354542][T11394] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 591.367576][T11397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1494'. [ 591.384284][T11397] bond0: left allmulticast mode [ 591.393655][T11397] bond_slave_0: left allmulticast mode [ 591.402317][T11397] bond_slave_1: left allmulticast mode [ 591.409557][T11397] bond0: left promiscuous mode [ 591.415233][T11397] bond_slave_0: left promiscuous mode [ 591.420789][T11397] bond_slave_1: left promiscuous mode [ 591.426993][T11397] macvtap3: left promiscuous mode [ 591.432082][T11397] macvtap3: left allmulticast mode [ 591.641235][T11410] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1498'. [ 591.702823][T11413] syzkaller0: entered promiscuous mode [ 591.716975][T11413] syzkaller0: entered allmulticast mode [ 591.729819][T11410] syzkaller1: entered promiscuous mode [ 591.739383][T11417] sg_write: data in/out 352256/136 bytes for SCSI command 0x0-- guessing data in; [ 591.739383][T11417] program syz.2.1501 not setting count and/or reply_len properly [ 591.760285][T11410] syzkaller1: entered allmulticast mode [ 591.776110][T11413] tipc: Enabled bearer , priority 0 [ 591.821034][T11412] tipc: Resetting bearer [ 591.894826][T11412] tipc: Disabling bearer [ 592.031786][T11424] syzkaller0: entered promiscuous mode [ 592.063899][T11424] syzkaller0: entered allmulticast mode [ 592.112690][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1504'. [ 592.752534][T11445] syzkaller0: entered promiscuous mode [ 592.764581][T11445] syzkaller0: entered allmulticast mode [ 592.781258][T11447] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1513'. [ 592.836711][T11445] tipc: Enabled bearer , priority 0 [ 592.847162][T11444] tipc: Resetting bearer [ 592.922710][T11444] tipc: Disabling bearer [ 592.961255][T11447] syzkaller1: entered promiscuous mode [ 592.974234][T11447] syzkaller1: entered allmulticast mode [ 593.078424][T11457] syzkaller0: entered promiscuous mode [ 593.084000][T11457] syzkaller0: entered allmulticast mode [ 593.304645][ T59] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 593.878973][T11493] syzkaller0: entered promiscuous mode [ 593.884629][T11493] syzkaller0: entered allmulticast mode [ 593.960562][T11495] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1527'. [ 593.976947][T11495] syzkaller1: entered promiscuous mode [ 593.982652][T11495] syzkaller1: entered allmulticast mode [ 594.217386][T11500] syzkaller0: entered promiscuous mode [ 594.222962][T11500] syzkaller0: entered allmulticast mode [ 596.208310][T11462] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 596.521480][T11529] syzkaller0: entered promiscuous mode [ 596.536080][T11529] syzkaller0: entered allmulticast mode [ 598.448003][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1542'. [ 598.620943][T11541] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 598.798171][T11541] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 599.018280][T11543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1542'. [ 599.283653][T11543] netdevsim netdevsim5 netdevsim3: left promiscuous mode [ 599.449730][T11543] netdevsim netdevsim5 netdevsim3: left allmulticast mode [ 599.745595][T11554] loop4: detected capacity change from 0 to 136 [ 599.918103][T11559] syzkaller0: entered promiscuous mode [ 599.923689][T11559] syzkaller0: entered allmulticast mode [ 599.978882][T11559] tipc: Enabled bearer , priority 0 [ 600.032621][T11556] tipc: Resetting bearer [ 600.104601][T11556] tipc: Disabling bearer [ 600.434787][T11572] syzkaller0: entered promiscuous mode [ 600.480482][T11572] syzkaller0: entered allmulticast mode [ 603.190301][T11583] loop4: detected capacity change from 0 to 2048 [ 603.525167][T11583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.661670][T11583] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 603.872722][ T9005] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.896539][T11604] tipc: Enabling of bearer rejected, failed to enable media [ 604.314866][T11615] netlink: 'syz.2.1564': attribute type 8 has an invalid length. [ 607.466609][T11632] dummy0: left allmulticast mode [ 607.471908][T11632] dummy0: left promiscuous mode [ 607.479014][T11632] bridge0: port 3(dummy0) entered disabled state [ 607.616593][T11633] loop2: detected capacity change from 0 to 2048 [ 607.726160][T11633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.791015][T11640] syzkaller0: entered promiscuous mode [ 607.804347][T11640] syzkaller0: entered allmulticast mode [ 607.848409][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.080411][T11649] (null): rxe_set_mtu: Set mtu to 1024 [ 608.533863][T11649] infiniband syz0: set active [ 608.539507][T11649] infiniband syz0: added veth0 [ 609.978427][T11649] RDS/IB: syz0: added [ 610.160789][T11649] smc: adding ib device syz0 with port count 1 [ 610.296485][T11649] smc: ib device syz0 port 1 has pnetid [ 611.519407][T11673] loop4: detected capacity change from 0 to 2048 [ 611.607377][T11673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.817284][ T9005] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.382311][T11693] syzkaller0: entered promiscuous mode [ 612.405993][T11693] syzkaller0: entered allmulticast mode [ 615.916450][T11713] loop0: detected capacity change from 0 to 512 [ 616.039972][T11713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.107494][T11713] ext4 filesystem being mounted at /419/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 616.238565][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.504100][T11732] syzkaller0: entered promiscuous mode [ 616.537794][T11732] syzkaller0: entered allmulticast mode [ 619.711701][T11749] loop5: detected capacity change from 0 to 512 [ 619.819826][T11749] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.850776][T11749] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 619.983249][T11758] syzkaller0: entered promiscuous mode [ 620.015984][T11758] syzkaller0: entered allmulticast mode [ 620.132406][T10922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.585194][T11790] loop0: detected capacity change from 0 to 128 [ 624.615600][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.626086][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.714293][T11790] FAT-fs (loop0): error, clusters badly computed (1 != 163841) [ 624.746616][T11790] FAT-fs (loop0): Filesystem has been set read-only [ 624.756800][T11796] loop5: detected capacity change from 0 to 512 [ 624.767492][T11790] FAT-fs (loop0): error, clusters badly computed (2 != 163842) [ 624.784616][T11790] FAT-fs (loop0): error, clusters badly computed (3 != 163843) [ 624.793832][T11790] FAT-fs (loop0): error, clusters badly computed (4 != 163844) [ 624.801762][T11795] syzkaller0: entered promiscuous mode [ 624.801784][T11795] syzkaller0: entered allmulticast mode [ 624.846855][T11790] FAT-fs (loop0): error, clusters badly computed (5 != 163845) [ 624.854631][T11790] FAT-fs (loop0): error, clusters badly computed (6 != 163846) [ 624.866527][T11796] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.913468][T11790] FAT-fs (loop0): error, clusters badly computed (7 != 163847) [ 624.933614][T11790] FAT-fs (loop0): error, clusters badly computed (8 != 163848) [ 624.936868][T11796] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 624.950826][T11790] FAT-fs (loop0): error, clusters badly computed (9 != 163849) [ 624.966218][T11790] FAT-fs (loop0): error, clusters badly computed (10 != 163850) [ 624.976880][T11790] FAT-fs (loop0): error, clusters badly computed (11 != 163851) [ 625.018773][T11790] FAT-fs (loop0): error, clusters badly computed (12 != 163852) [ 625.026769][T11790] FAT-fs (loop0): error, clusters badly computed (13 != 163853) [ 625.034816][T11790] FAT-fs (loop0): error, clusters badly computed (14 != 163854) [ 625.043493][T11790] FAT-fs (loop0): error, clusters badly computed (15 != 163855) [ 625.052889][T10922] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.062624][T11790] FAT-fs (loop0): error, clusters badly computed (16 != 163856) [ 625.071039][T11790] FAT-fs (loop0): error, clusters badly computed (17 != 163857) [ 625.079814][T11790] FAT-fs (loop0): error, clusters badly computed (18 != 163858) [ 625.106654][T11790] FAT-fs (loop0): error, clusters badly computed (19 != 163859) [ 625.128739][T11790] FAT-fs (loop0): error, clusters badly computed (20 != 163860) [ 625.153867][T11790] FAT-fs (loop0): error, clusters badly computed (21 != 163861) [ 625.172475][T11790] FAT-fs (loop0): error, clusters badly computed (22 != 163862) [ 625.202071][T11790] FAT-fs (loop0): error, clusters badly computed (23 != 163863) [ 625.226548][T11790] FAT-fs (loop0): error, clusters badly computed (24 != 163864) [ 625.252069][T11790] FAT-fs (loop0): error, clusters badly computed (25 != 163865) [ 625.269966][T11790] FAT-fs (loop0): error, clusters badly computed (26 != 163866) [ 625.287252][T11790] FAT-fs (loop0): error, clusters badly computed (27 != 163867) [ 625.315422][T11790] FAT-fs (loop0): error, clusters badly computed (28 != 163868) [ 625.324540][T11790] FAT-fs (loop0): error, clusters badly computed (29 != 163869) [ 625.349842][T11790] FAT-fs (loop0): error, clusters badly computed (30 != 163870) [ 625.362563][T11809] PM: suspend entry (deep) [ 625.374633][T11790] FAT-fs (loop0): error, clusters badly computed (31 != 163871) [ 625.397625][T11790] FAT-fs (loop0): error, clusters badly computed (32 != 163872) [ 625.412267][T11790] FAT-fs (loop0): error, clusters badly computed (33 != 163873) [ 625.422561][T11790] FAT-fs (loop0): error, clusters badly computed (34 != 163874) [ 625.430693][T11790] FAT-fs (loop0): error, clusters badly computed (35 != 163875) [ 625.439818][T11790] FAT-fs (loop0): error, clusters badly computed (36 != 163876) [ 625.453544][T11790] FAT-fs (loop0): error, clusters badly computed (37 != 163877) [ 625.479273][T11790] FAT-fs (loop0): error, clusters badly computed (38 != 163878) [ 625.494306][T11790] FAT-fs (loop0): error, clusters badly computed (39 != 163879) [ 625.504303][T11790] FAT-fs (loop0): error, clusters badly computed (40 != 163880) [ 625.520143][T11790] FAT-fs (loop0): error, clusters badly computed (41 != 163881) [ 625.543509][T11790] FAT-fs (loop0): error, clusters badly computed (42 != 163882) [ 625.559978][T11790] FAT-fs (loop0): error, clusters badly computed (43 != 163883) [ 625.573103][T11790] FAT-fs (loop0): error, clusters badly computed (44 != 163884) [ 625.584327][T11790] FAT-fs (loop0): error, clusters badly computed (45 != 163885) [ 625.598024][T11790] FAT-fs (loop0): error, clusters badly computed (46 != 163886) [ 625.606298][T11790] FAT-fs (loop0): error, clusters badly computed (47 != 163887) [ 625.614364][T11790] FAT-fs (loop0): error, clusters badly computed (48 != 163888) [ 625.625478][T11790] FAT-fs (loop0): error, clusters badly computed (49 != 163889) [ 625.648240][T11809] Filesystems sync: 0.277 seconds [ 625.654445][T11790] FAT-fs (loop0): error, clusters badly computed (50 != 163890) [ 625.672876][T11790] FAT-fs (loop0): error, clusters badly computed (51 != 163891) [ 625.692948][T11790] FAT-fs (loop0): error, clusters badly computed (52 != 163892) [ 625.703559][T11790] FAT-fs (loop0): error, clusters badly computed (53 != 163893) [ 625.712291][T11790] FAT-fs (loop0): error, clusters badly computed (54 != 163894) [ 625.720667][T11790] FAT-fs (loop0): error, clusters badly computed (55 != 163895) [ 625.729019][T11790] FAT-fs (loop0): error, clusters badly computed (56 != 163896) [ 625.737011][T11790] FAT-fs (loop0): error, clusters badly computed (57 != 163897) [ 625.745046][T11790] FAT-fs (loop0): error, clusters badly computed (58 != 163898) [ 625.764001][T11790] FAT-fs (loop0): error, clusters badly computed (59 != 163899) [ 625.774412][T11790] FAT-fs (loop0): error, clusters badly computed (60 != 163900) [ 625.787638][T11790] FAT-fs (loop0): error, clusters badly computed (61 != 163901) [ 625.816179][T11790] FAT-fs (loop0): error, clusters badly computed (62 != 163902) [ 625.824010][T11790] FAT-fs (loop0): error, clusters badly computed (63 != 163903) [ 625.881195][T11790] FAT-fs (loop0): error, clusters badly computed (64 != 163904) [ 627.043965][T11809] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 627.163796][T11809] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 627.245196][T11809] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 627.344040][T11809] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 627.434294][T11809] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 627.514900][T11809] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 627.785906][T10654] Bluetooth: hci0: command 0x0406 tx timeout [ 627.856543][T11809] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 628.138445][T11809] Freezing user space processes [ 628.172502][T11821] syzkaller0: entered promiscuous mode [ 628.194925][T11809] ------------[ cut here ]------------ [ 628.195570][T11809] [ 628.195575][T11809] ====================================================== [ 628.195581][T11809] WARNING: possible circular locking dependency detected [ 628.195587][T11809] syzkaller #0 Not tainted [ 628.195594][T11809] ------------------------------------------------------ [ 628.195599][T11809] syz.5.1633/11809 is trying to acquire lock: [ 628.195608][T11809] ffffffff8d1260a0 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 628.195757][T11809] [ 628.195757][T11809] but task is already holding lock: [ 628.195761][T11809] ffff888028226418 (&p->pi_lock){-.-.}-{2:2}, at: task_call_func+0x43/0x260 [ 628.195810][T11809] [ 628.195810][T11809] which lock already depends on the new lock. [ 628.195810][T11809] [ 628.195814][T11809] [ 628.195814][T11809] the existing dependency chain (in reverse order) is: [ 628.195819][T11809] [ 628.195819][T11809] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 628.195838][T11809] _raw_spin_lock_irqsave+0xb4/0x100 [ 628.195939][T11809] try_to_wake_up+0x5b/0x10e0 [ 628.195954][T11809] __wake_up_common+0x28e/0x4d0 [ 628.195972][T11809] __wake_up+0x125/0x1a0 [ 628.195988][T11809] tty_port_default_wakeup+0xa2/0xf0 [ 628.196027][T11809] serial8250_tx_chars+0x6a2/0x8b0 [ 628.196046][T11809] serial8250_handle_irq+0x567/0x730 [ 628.196066][T11809] serial8250_default_handle_irq+0xb8/0x1a0 [ 628.196088][T11809] serial8250_interrupt+0x9f/0x1c0 [ 628.196106][T11809] __handle_irq_event_percpu+0x271/0x940 [ 628.196130][T11809] handle_irq_event+0x8b/0x1e0 [ 628.196153][T11809] handle_edge_irq+0x246/0xb20 [ 628.196170][T11809] __common_interrupt+0x13b/0x230 [ 628.196199][T11809] common_interrupt+0xb4/0xd0 [ 628.196239][T11809] asm_common_interrupt+0x26/0x40 [ 628.196313][T11809] unwind_next_frame+0x4d8/0x2990 [ 628.196333][T11809] arch_stack_walk+0x144/0x190 [ 628.196354][T11809] stack_trace_save+0xaa/0x100 [ 628.196373][T11809] kasan_set_track+0x4e/0x70 [ 628.196408][T11809] __kasan_kmalloc+0x8f/0xa0 [ 628.196426][T11809] __kmalloc_node_track_caller+0xb4/0x230 [ 628.196460][T11809] kmalloc_reserve+0x116/0x240 [ 628.196507][T11809] __alloc_skb+0x138/0x2c0 [ 628.196521][T11809] alloc_skb_with_frags+0xcd/0x7a0 [ 628.196541][T11809] sock_alloc_send_pskb+0x883/0x9a0 [ 628.196589][T11809] unix_dgram_sendmsg+0x5a9/0x16e0 [ 628.196628][T11809] sock_write_iter+0x2dc/0x420 [ 628.196645][T11809] do_iter_write+0x747/0xc50 [ 628.196672][T11809] do_writev+0x27f/0x480 [ 628.196685][T11809] do_syscall_64+0x55/0xb0 [ 628.196700][T11809] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 628.196716][T11809] [ 628.196716][T11809] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 628.196736][T11809] _raw_spin_lock_irqsave+0xb4/0x100 [ 628.196808][T11809] __wake_up+0x10b/0x1a0 [ 628.196827][T11809] tty_port_default_wakeup+0xa2/0xf0 [ 628.196844][T11809] serial8250_tx_chars+0x6a2/0x8b0 [ 628.196866][T11809] serial8250_handle_irq+0x567/0x730 [ 628.196894][T11809] serial8250_default_handle_irq+0xb8/0x1a0 [ 628.196914][T11809] serial8250_interrupt+0x9f/0x1c0 [ 628.196930][T11809] __handle_irq_event_percpu+0x271/0x940 [ 628.196952][T11809] handle_irq_event+0x8b/0x1e0 [ 628.196973][T11809] handle_edge_irq+0x246/0xb20 [ 628.196988][T11809] __common_interrupt+0x13b/0x230 [ 628.197006][T11809] common_interrupt+0xb4/0xd0 [ 628.197021][T11809] asm_common_interrupt+0x26/0x40 [ 628.197035][T11809] _raw_spin_unlock_irqrestore+0xc0/0x120 [ 628.197057][T11809] uart_write+0x45b/0x5d0 [ 628.197068][T11809] n_tty_write+0xd3d/0x11e0 [ 628.197087][T11809] file_tty_write+0x529/0x960 [ 628.197103][T11809] vfs_write+0x474/0x9a0 [ 628.197122][T11809] ksys_write+0x151/0x260 [ 628.197141][T11809] do_syscall_64+0x55/0xb0 [ 628.197155][T11809] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 628.197170][T11809] [ 628.197170][T11809] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 628.197187][T11809] _raw_spin_lock_irqsave+0xb4/0x100 [ 628.197208][T11809] serial8250_console_write+0x181/0x18b0 [ 628.197228][T11809] console_flush_all+0x6ad/0xcf0 [ 628.197245][T11809] console_unlock+0xad/0x350 [ 628.197264][T11809] vprintk_emit+0x497/0x610 [ 628.197281][T11809] _printk+0xde/0x130 [ 628.197311][T11809] register_console+0xb96/0xf00 [ 628.197328][T11809] univ8250_console_init+0x45/0x50 [ 628.197382][T11809] console_init+0x17b/0x5d0 [ 628.197412][T11809] start_kernel+0x2c8/0x4e0 [ 628.197454][T11809] x86_64_start_reservations+0x2a/0x30 [ 628.197471][T11809] copy_bootdata+0x0/0xd0 [ 628.197487][T11809] secondary_startup_64_no_verify+0x179/0x17b [ 628.197510][T11809] [ 628.197510][T11809] -> #0 (console_owner){-.-.}-{0:0}: [ 628.197528][T11809] __lock_acquire+0x37ef/0x7d80 [ 628.197544][T11809] lock_acquire+0x19e/0x420 [ 628.197559][T11809] console_flush_all+0x676/0xcf0 [ 628.197576][T11809] console_unlock+0xad/0x350 [ 628.197593][T11809] vprintk_emit+0x497/0x610 [ 628.197609][T11809] _printk+0xde/0x130 [ 628.197629][T11809] report_bug+0x34e/0x4f0 [ 628.197662][T11809] handle_bug+0xcf/0x120 [ 628.197676][T11809] exc_invalid_op+0x1a/0x50 [ 628.197691][T11809] asm_exc_invalid_op+0x1a/0x20 [ 628.197704][T11809] __set_task_frozen+0x210/0x2d0 [ 628.197721][T11809] task_call_func+0x1a2/0x260 [ 628.197733][T11809] freeze_task+0x217/0x3a0 [ 628.197754][T11809] try_to_freeze_tasks+0x190/0x620 [ 628.197775][T11809] freeze_processes+0xc9/0x1e0 [ 628.197787][T11809] pm_suspend+0x275/0x950 [ 628.197799][T11809] state_store+0x206/0x290 [ 628.197819][T11809] kernfs_fop_write_iter+0x3a4/0x520 [ 628.197850][T11809] vfs_write+0x474/0x9a0 [ 628.197869][T11809] ksys_write+0x151/0x260 [ 628.197888][T11809] do_syscall_64+0x55/0xb0 [ 628.197902][T11809] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 628.197916][T11809] [ 628.197916][T11809] other info that might help us debug this: [ 628.197916][T11809] [ 628.197921][T11809] Chain exists of: [ 628.197921][T11809] console_owner --> &tty->write_wait --> &p->pi_lock [ 628.197921][T11809] [ 628.197941][T11809] Possible unsafe locking scenario: [ 628.197941][T11809] [ 628.197944][T11809] CPU0 CPU1 [ 628.197948][T11809] ---- ---- [ 628.197951][T11809] lock(&p->pi_lock); [ 628.197959][T11809] lock(&tty->write_wait); [ 628.197968][T11809] lock(&p->pi_lock); [ 628.197977][T11809] lock(console_owner); [ 628.197984][T11809] [ 628.197984][T11809] *** DEADLOCK *** [ 628.197984][T11809] [ 628.197987][T11809] 10 locks held by syz.5.1633/11809: [ 628.197996][T11809] #0: ffff88807e6d9748 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 628.198041][T11809] #1: ffff8880548a6418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 628.198083][T11809] #2: ffff88823bcb0088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 [ 628.198124][T11809] #3: ffff888141e45ba8 (kn->active#64){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 [ 628.198168][T11809] #4: ffffffff8cfe58a8 (system_transition_mutex){+.+.}-{3:3}, at: pm_suspend+0x3a8/0x950 [ 628.198200][T11809] #5: ffffffff8ce0a058 (tasklist_lock){.+.+}-{2:2}, at: try_to_freeze_tasks+0xe5/0x620 [ 628.198241][T11809] #6: ffffffff8d144ef8 (freezer_lock){....}-{2:2}, at: freeze_task+0x80/0x3a0 [ 628.198278][T11809] #7: ffff888028226418 (&p->pi_lock){-.-.}-{2:2}, at: task_call_func+0x43/0x260 [ 628.198310][T11809] #8: ffffffff8d126180 (console_lock){+.+.}-{0:0}, at: _printk+0xde/0x130 [ 628.198349][T11809] #9: ffffffff8d00d990 (console_srcu){....}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 628.198386][T11809] [ 628.198386][T11809] stack backtrace: [ 628.198397][T11809] CPU: 0 PID: 11809 Comm: syz.5.1633 Not tainted syzkaller #0 [ 628.198410][T11809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 628.198422][T11809] Call Trace: [ 628.198428][T11809] [ 628.198480][T11809] dump_stack_lvl+0x18c/0x250 [ 628.198537][T11809] ? load_image+0x420/0x420 [ 628.198579][T11809] ? show_regs_print_info+0x20/0x20 [ 628.198598][T11809] ? print_circular_bug+0x12b/0x1a0 [ 628.198619][T11809] check_noncircular+0x2fc/0x400 [ 628.198641][T11809] ? print_deadlock_bug+0x5d0/0x5d0 [ 628.198659][T11809] ? lockdep_lock+0xf5/0x230 [ 628.198681][T11809] __lock_acquire+0x37ef/0x7d80 [ 628.198710][T11809] ? verify_lock_unused+0x140/0x140 [ 628.198737][T11809] lock_acquire+0x19e/0x420 [ 628.198758][T11809] ? console_flush_all+0x10b/0xcf0 [ 628.198781][T11809] ? __lock_acquire+0x7d80/0x7d80 [ 628.198798][T11809] ? do_raw_spin_lock+0x11f/0x2b0 [ 628.198818][T11809] ? read_lock_is_recursive+0x20/0x20 [ 628.198836][T11809] ? __rwlock_init+0x150/0x150 [ 628.198857][T11809] ? do_raw_spin_unlock+0x121/0x230 [ 628.198879][T11809] console_flush_all+0x676/0xcf0 [ 628.198898][T11809] ? console_flush_all+0x10b/0xcf0 [ 628.198918][T11809] ? console_flush_all+0x10b/0xcf0 [ 628.198941][T11809] ? is_console_locked+0x20/0x20 [ 628.198959][T11809] ? mark_lock+0x94/0x320 [ 628.198981][T11809] console_unlock+0xad/0x350 [ 628.199000][T11809] ? other_cpu_in_panic+0xf0/0xf0 [ 628.199024][T11809] vprintk_emit+0x497/0x610 [ 628.199044][T11809] ? printk_sprint+0x460/0x460 [ 628.199063][T11809] ? verify_lock_unused+0x140/0x140 [ 628.199085][T11809] _printk+0xde/0x130 [ 628.199109][T11809] ? load_image+0x420/0x420 [ 628.199134][T11809] ? find_bug+0xa5/0x3a0 [ 628.199149][T11809] ? __set_task_frozen+0x210/0x2d0 [ 628.199169][T11809] report_bug+0x34e/0x4f0 [ 628.199185][T11809] ? __set_task_frozen+0x210/0x2d0 [ 628.199203][T11809] ? __set_task_frozen+0x210/0x2d0 [ 628.199221][T11809] ? __set_task_frozen+0x212/0x2d0 [ 628.199239][T11809] handle_bug+0xcf/0x120 [ 628.199257][T11809] exc_invalid_op+0x1a/0x50 [ 628.199274][T11809] asm_exc_invalid_op+0x1a/0x20 [ 628.199296][T11809] RIP: 0010:__set_task_frozen+0x210/0x2d0 [ 628.199338][T11809] Code: 41 c7 06 00 80 00 00 bd 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ac 92 11 00 0f 0b e9 0a ff ff ff e8 a0 92 11 00 <0f> 0b eb 9d 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 14 fe ff ff 4c [ 628.199373][T11809] RSP: 0018:ffffc900045c7a50 EFLAGS: 00010046 [ 628.199407][T11809] RAX: ffffffff8175e230 RBX: ffff888028225a00 RCX: 0000000000080000 [ 628.199418][T11809] RDX: ffffc9000dbc4000 RSI: 000000000007ffff RDI: 0000000000080000 [ 628.199428][T11809] RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000004 [ 628.199437][T11809] R10: dffffc0000000000 R11: fffff520008b8f2c R12: 0000000000000000 [ 628.199447][T11809] R13: 1ffff11005044b43 R14: ffff888028225a18 R15: ffff8880282264d8 [ 628.199461][T11809] ? __set_task_frozen+0x210/0x2d0 [ 628.199483][T11809] ? set_freezable+0x230/0x230 [ 628.199501][T11809] task_call_func+0x1a2/0x260 [ 628.199518][T11809] freeze_task+0x217/0x3a0 [ 628.199537][T11809] ? __refrigerator+0x660/0x660 [ 628.199554][T11809] ? preempt_schedule+0xc0/0xd0 [ 628.199573][T11809] ? read_tsc+0x9/0x20 [ 628.199589][T11809] ? ktime_get_with_offset+0x2db/0x330 [ 628.199611][T11809] try_to_freeze_tasks+0x190/0x620 [ 628.199637][T11809] freeze_processes+0xc9/0x1e0 [ 628.199651][T11809] pm_suspend+0x275/0x950 [ 628.199666][T11809] state_store+0x206/0x290 [ 628.199689][T11809] ? sysfs_kf_read+0x360/0x360 [ 628.199702][T11809] kernfs_fop_write_iter+0x3a4/0x520 [ 628.199728][T11809] vfs_write+0x474/0x9a0 [ 628.199838][T11809] ? file_end_write+0x250/0x250 [ 628.199871][T11809] ? __fget_files+0x3fc/0x460 [ 628.199897][T11809] ? __fdget_pos+0x2a3/0x330 [ 628.199918][T11809] ? ksys_write+0x74/0x260 [ 628.199940][T11809] ksys_write+0x151/0x260 [ 628.199964][T11809] ? __ia32_sys_read+0x90/0x90 [ 628.199987][T11809] ? lockdep_hardirqs_on+0x98/0x150 [ 628.200009][T11809] do_syscall_64+0x55/0xb0 [ 628.200024][T11809] ? clear_bhb_loop+0x40/0x90 [ 628.200040][T11809] ? clear_bhb_loop+0x40/0x90 [ 628.200057][T11809] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 628.200082][T11809] RIP: 0033:0x7f623ed9de99 [ 628.200102][T11809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.200118][T11809] RSP: 002b:00007f623fd0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 628.200142][T11809] RAX: ffffffffffffffda RBX: 00007f623f025fa0 RCX: 00007f623ed9de99 [ 628.200153][T11809] RDX: 0000000000000003 RSI: 0000200000000100 RDI: 0000000000000003 [ 628.200163][T11809] RBP: 00007f623ee33eaf R08: 0000000000000000 R09: 0000000000000000 [ 628.200172][T11809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.200180][T11809] R13: 00007f623f026038 R14: 00007f623f025fa0 R15: 00007ffc1a52d2b8 [ 628.200197][T11809] [ 629.434040][T11809] WARNING: CPU: 0 PID: 11809 at kernel/freezer.c:133 __set_task_frozen+0x210/0x2d0 [ 629.443342][T11809] Modules linked in: [ 629.447239][T11809] CPU: 0 PID: 11809 Comm: syz.5.1633 Not tainted syzkaller #0 [ 629.454699][T11809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 629.464774][T11809] RIP: 0010:__set_task_frozen+0x210/0x2d0 [ 629.470504][T11809] Code: 41 c7 06 00 80 00 00 bd 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ac 92 11 00 0f 0b e9 0a ff ff ff e8 a0 92 11 00 <0f> 0b eb 9d 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 14 fe ff ff 4c [ 629.490123][T11809] RSP: 0018:ffffc900045c7a50 EFLAGS: 00010046 [ 629.496197][T11809] RAX: ffffffff8175e230 RBX: ffff888028225a00 RCX: 0000000000080000 [ 629.504174][T11809] RDX: ffffc9000dbc4000 RSI: 000000000007ffff RDI: 0000000000080000 [ 629.512166][T11809] RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000004 [ 629.520141][T11809] R10: dffffc0000000000 R11: fffff520008b8f2c R12: 0000000000000000 [ 629.528118][T11809] R13: 1ffff11005044b43 R14: ffff888028225a18 R15: ffff8880282264d8 [ 629.536096][T11809] FS: 00007f623fd0a6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 629.545031][T11809] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 629.551617][T11809] CR2: 00007ffc26a1c0f8 CR3: 000000002cec0000 CR4: 00000000003506f0 [ 629.559599][T11809] Call Trace: [ 629.562887][T11809] [ 629.565833][T11809] ? set_freezable+0x230/0x230 [ 629.570613][T11809] task_call_func+0x1a2/0x260 [ 629.575307][T11809] freeze_task+0x217/0x3a0 [ 629.579741][T11809] ? __refrigerator+0x660/0x660 [ 629.584599][T11809] ? preempt_schedule+0xc0/0xd0 [ 629.589563][T11809] ? read_tsc+0x9/0x20 [ 629.593645][T11809] ? ktime_get_with_offset+0x2db/0x330 [ 629.599121][T11809] try_to_freeze_tasks+0x190/0x620 [ 629.604259][T11809] freeze_processes+0xc9/0x1e0 [ 629.609032][T11809] pm_suspend+0x275/0x950 [ 629.613367][T11809] state_store+0x206/0x290 [ 629.617820][T11809] ? sysfs_kf_read+0x360/0x360 [ 629.622610][T11809] kernfs_fop_write_iter+0x3a4/0x520 [ 629.628010][T11809] vfs_write+0x474/0x9a0 [ 629.632285][T11809] ? file_end_write+0x250/0x250 [ 629.637159][T11809] ? __fget_files+0x3fc/0x460 [ 629.641860][T11809] ? __fdget_pos+0x2a3/0x330 [ 629.646488][T11809] ? ksys_write+0x74/0x260 [ 629.650960][T11809] ksys_write+0x151/0x260 [ 629.655309][T11809] ? __ia32_sys_read+0x90/0x90 [ 629.660114][T11809] ? lockdep_hardirqs_on+0x98/0x150 [ 629.665350][T11809] do_syscall_64+0x55/0xb0 [ 629.669797][T11809] ? clear_bhb_loop+0x40/0x90 [ 629.674496][T11809] ? clear_bhb_loop+0x40/0x90 [ 629.679185][T11809] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 629.685090][T11809] RIP: 0033:0x7f623ed9de99 [ 629.689512][T11809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.709138][T11809] RSP: 002b:00007f623fd0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 629.717572][T11809] RAX: ffffffffffffffda RBX: 00007f623f025fa0 RCX: 00007f623ed9de99 [ 629.725553][T11809] RDX: 0000000000000003 RSI: 0000200000000100 RDI: 0000000000000003 [ 629.733550][T11809] RBP: 00007f623ee33eaf R08: 0000000000000000 R09: 0000000000000000 [ 629.741542][T11809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.749547][T11809] R13: 00007f623f026038 R14: 00007f623f025fa0 R15: 00007ffc1a52d2b8 [ 629.757539][T11809] [ 629.760585][T11809] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 629.767869][T11809] CPU: 0 PID: 11809 Comm: syz.5.1633 Not tainted syzkaller #0 [ 629.775693][T11809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 629.785760][T11809] Call Trace: [ 629.789054][T11809] [ 629.791997][T11809] dump_stack_lvl+0x18c/0x250 [ 629.796718][T11809] ? show_regs_print_info+0x20/0x20 [ 629.802035][T11809] ? load_image+0x420/0x420 [ 629.806555][T11809] panic+0x2ca/0x720 [ 629.810470][T11809] ? bpf_jit_dump+0xd0/0xd0 [ 629.815013][T11809] __warn+0x2e0/0x470 [ 629.819022][T11809] ? __set_task_frozen+0x210/0x2d0 [ 629.824170][T11809] ? __set_task_frozen+0x210/0x2d0 [ 629.829327][T11809] report_bug+0x2be/0x4f0 [ 629.833701][T11809] ? __set_task_frozen+0x210/0x2d0 [ 629.838821][T11809] ? __set_task_frozen+0x210/0x2d0 [ 629.843943][T11809] ? __set_task_frozen+0x212/0x2d0 [ 629.849064][T11809] handle_bug+0xcf/0x120 [ 629.853313][T11809] exc_invalid_op+0x1a/0x50 [ 629.857829][T11809] asm_exc_invalid_op+0x1a/0x20 [ 629.862690][T11809] RIP: 0010:__set_task_frozen+0x210/0x2d0 [ 629.868423][T11809] Code: 41 c7 06 00 80 00 00 bd 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ac 92 11 00 0f 0b e9 0a ff ff ff e8 a0 92 11 00 <0f> 0b eb 9d 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 14 fe ff ff 4c [ 629.888060][T11809] RSP: 0018:ffffc900045c7a50 EFLAGS: 00010046 [ 629.894249][T11809] RAX: ffffffff8175e230 RBX: ffff888028225a00 RCX: 0000000000080000 [ 629.902247][T11809] RDX: ffffc9000dbc4000 RSI: 000000000007ffff RDI: 0000000000080000 [ 629.910319][T11809] RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000004 [ 629.918303][T11809] R10: dffffc0000000000 R11: fffff520008b8f2c R12: 0000000000000000 [ 629.926293][T11809] R13: 1ffff11005044b43 R14: ffff888028225a18 R15: ffff8880282264d8 [ 629.934281][T11809] ? __set_task_frozen+0x210/0x2d0 [ 629.939422][T11809] ? set_freezable+0x230/0x230 [ 629.944195][T11809] task_call_func+0x1a2/0x260 [ 629.948879][T11809] freeze_task+0x217/0x3a0 [ 629.953308][T11809] ? __refrigerator+0x660/0x660 [ 629.958169][T11809] ? preempt_schedule+0xc0/0xd0 [ 629.963049][T11809] ? read_tsc+0x9/0x20 [ 629.967215][T11809] ? ktime_get_with_offset+0x2db/0x330 [ 629.972698][T11809] try_to_freeze_tasks+0x190/0x620 [ 629.977968][T11809] freeze_processes+0xc9/0x1e0 [ 629.982760][T11809] pm_suspend+0x275/0x950 [ 629.987123][T11809] state_store+0x206/0x290 [ 629.991567][T11809] ? sysfs_kf_read+0x360/0x360 [ 629.996358][T11809] kernfs_fop_write_iter+0x3a4/0x520 [ 630.001691][T11809] vfs_write+0x474/0x9a0 [ 630.005966][T11809] ? file_end_write+0x250/0x250 [ 630.010846][T11809] ? __fget_files+0x3fc/0x460 [ 630.015720][T11809] ? __fdget_pos+0x2a3/0x330 [ 630.020328][T11809] ? ksys_write+0x74/0x260 [ 630.024760][T11809] ksys_write+0x151/0x260 [ 630.029106][T11809] ? __ia32_sys_read+0x90/0x90 [ 630.033975][T11809] ? lockdep_hardirqs_on+0x98/0x150 [ 630.039194][T11809] do_syscall_64+0x55/0xb0 [ 630.043617][T11809] ? clear_bhb_loop+0x40/0x90 [ 630.048299][T11809] ? clear_bhb_loop+0x40/0x90 [ 630.052991][T11809] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 630.058909][T11809] RIP: 0033:0x7f623ed9de99 [ 630.063328][T11809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.082942][T11809] RSP: 002b:00007f623fd0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 630.091359][T11809] RAX: ffffffffffffffda RBX: 00007f623f025fa0 RCX: 00007f623ed9de99 [ 630.099333][T11809] RDX: 0000000000000003 RSI: 0000200000000100 RDI: 0000000000000003 [ 630.107305][T11809] RBP: 00007f623ee33eaf R08: 0000000000000000 R09: 0000000000000000 [ 630.115297][T11809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 630.123267][T11809] R13: 00007f623f026038 R14: 00007f623f025fa0 R15: 00007ffc1a52d2b8 [ 630.131253][T11809] [ 631.240430][T11809] Shutting down cpus with NMI [ 631.245764][T11809] Kernel Offset: disabled [ 631.250107][T11809] Rebooting in 86400 seconds..