last executing test programs: 6.687527977s ago: executing program 2 (id=2650): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x4, 0xc9, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x6}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010865}, 0x4008000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd9, 0x6, @random="98c8ca7122df"}, 0x14) 6.257490747s ago: executing program 2 (id=2658): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8081}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r1, 0xc17a) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000400000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00!\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = epoll_create1(0x80000) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, r3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0) r5 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f000000b4c0)=[{{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001580)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x488c4) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) mbind(&(0x7f0000673000/0x1000)=nil, 0x1000, 0x3, 0x0, 0x3, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000001500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000673000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000009c0)=0x7, 0x3, 0x0) 5.180195217s ago: executing program 3 (id=2667): r0 = socket$unix(0x1, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x0) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000202, 0x0, 0x0) munlockall() madvise(&(0x7f0000597000/0x1000)=nil, 0x1000, 0x13) open(0x0, 0x0, 0x0) epoll_create1(0x80000) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = getpid() r4 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r3, 0x0, 0x7fff, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000bc0)={0x5, 0x1, 0x2, 0xe2, 'syz1\x00', 0x4}) shutdown(0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000100)='./file0\x00', 0x105) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001900010000000000000000000a00"], 0x24}, 0x1, 0x0, 0x0, 0x1880}, 0x4000050) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c00000008010104000000000000000002000008240001801400018008000100000000001800020001010000000800000b00010000000000240002800c0002800500010000000001800200e000000208000740000000001800068008000200ac1414000d000380060002004e220000bb4482a942ccdb2cab7201906a69dfad7f38de314b37"], 0x7c}}, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) listen(r0, 0x7) ppoll(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x87, 0x58, 0xfc, 0x20, 0x6e1, 0xa155, 0x848b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x55, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@uac_as={[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3}]}]}}]}}]}}, 0x0) 3.73182114s ago: executing program 2 (id=2677): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES64=r0], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100ac1e000108000200ac1414e80c00028005"], 0x88}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r4, 0x25, 0x0, @void}, 0x10) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) pipe(0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000300)}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0x40, @mcast2, 0xc}, 0x1c, &(0x7f00000000c0)}}], 0x2, 0xc8040) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 3.602143898s ago: executing program 2 (id=2678): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1a00000004000000280000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200000000000000000033"], 0x50) 3.403831986s ago: executing program 2 (id=2680): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f65, 0xfffffffd, 0xc5, 0xe23, 0x5, 0x1, 0x7fff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0x2, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000e0}, 0x4890) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r4, 0x3e}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x40084) 3.094693448s ago: executing program 2 (id=2681): r0 = socket$inet6(0xa, 0x1, 0x6) close(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0xd, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000440)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000b00)={0x40, 0x8, 0x1, "bc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 2.912115404s ago: executing program 0 (id=2682): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x30, 0x1, 0xfd, 0x5ae9}, {0x30, 0x7f, 0x4, 0xfefff00c}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 2.768723834s ago: executing program 1 (id=2685): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x0, 0xfffffffa, 0x9, 0x9, 0x8, 0x18, 0x4}) 2.643938922s ago: executing program 1 (id=2686): socket$packet(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000100)={0x1e, 0x15, 0x10, 0x1a, 0x8, 0x8001, 0x0, 0x33}) bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x8, 0x6, @remote}, 0x14) syz_emit_ethernet(0xac, &(0x7f0000000340)={@empty, @link_local, @void, {@ipv4={0x800, @udp={{0x1a, 0x4, 0x0, 0x3e, 0x9e, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty, {[@ssrr={0x89, 0x3, 0x55}, @timestamp_prespec={0x44, 0x4c, 0x1a, 0x3, 0x9, [{@remote, 0x3}, {@loopback, 0x760}, {@remote, 0x3b4c}, {@loopback, 0x7}, {@remote, 0x9}, {@multicast1, 0xf5c}, {@remote, 0x3719}, {@rand_addr=0x64010101, 0x1da}, {@private=0xa010101, 0x8000}]}, @timestamp_addr={0x44, 0x4, 0xc5, 0x1, 0x7}]}}, {0x0, 0x0, 0x36, 0x0, @opaque="ae87490ce97a93d62fcb4444d79df0bdf6d5a20310abf827452ec16974b00e958d1b0c72d9c1dfc92ac13c4de54a"}}}}}, 0x0) 2.171894807s ago: executing program 1 (id=2687): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES64=r0], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100ac1e000108000200ac1414e80c00028005"], 0x88}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r4, 0x25, 0x0, @void}, 0x10) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) pipe(0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000300)}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0x40, @mcast2, 0xc}, 0x1c, &(0x7f00000000c0)}}], 0x2, 0xc8040) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 2.014085339s ago: executing program 1 (id=2688): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x5, &(0x7f0000032580)=""/102389, &(0x7f00000003c0)=0x18ff5) 1.949204688s ago: executing program 0 (id=2689): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f65, 0xfffffffd, 0xc5, 0xe23, 0x5, 0x1, 0x7fff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0x2, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000e0}, 0x4890) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r4, 0x3e}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x40084) 1.779887442s ago: executing program 1 (id=2690): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003fc0)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="ed2ef3848fbc2506ac5b42f7efd6a5945a881291b52b85c7f892c5b8df27114df6837c52f94519a946fcdd5bc3335442822ad965fda44516aa542c7c9d41a96e", 0x40}, {&(0x7f0000000080)="48f6b6f004535d40f552bb21dd6d21dd96f26efb2708a1c4710dceb1f79310efb70e23d868dbda8404c953ac5d9ef021808656193afc6ad6a6ef929074cd8e096e9c1732c970e04a9fc4444703966b83eaba5aba50a8566505daf033f63385b1cd", 0x61}], 0x2, &(0x7f00000002c0)=[@assoc={0x18, 0x117, 0x4, 0x100}], 0x18, 0x94}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000240)=""/4, 0x4}, {&(0x7f0000000900)=""/220, 0xdc}], 0x2}, 0x0) syz_init_net_socket$ax25(0x3, 0x6, 0xc4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000001c0)={0x8, {{0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0xff}}}, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r2, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r3, r3, 0x0, 0x9) 1.659147309s ago: executing program 3 (id=2691): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d", 0x85}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)}, {&(0x7f0000002240)="6e2ebb87dca38cb8b3378e86c02cafa0bd62c7a2cddda54f6a0a1c1b92bae9731f4063d80b5110c9d03f91a7a36de1b85a723f5902e290250ad0f1ba3a09733260816749c0336324bd84b178c88fa2d67602e2444a7e61aa569282cd7ce83e6c2faa97a4f99d042e50e79936490023788174b7af0c760ea8723eed6912bd85156d534474c9e5629951d6e4287bd996f0f801217b1567d0a160a44f5c122d4512a0c8cde478f738110e77ae94c9add0b05940b71bfecd3f0a7c", 0xb9}], 0x2}}], 0x2, 0x2090) unshare(0x6a040000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) sendto$inet(r0, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) 1.598061037s ago: executing program 0 (id=2692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x8, 0x6, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008500000075"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) 1.529342607s ago: executing program 0 (id=2693): unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000003e00090b000000000008000003"], 0x20}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000004c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00010002"], 0x8) 1.443272779s ago: executing program 0 (id=2694): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x1000}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file1\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x805) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000380)={0x0, &(0x7f0000000100)}) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="5af9", 0x2) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) syz_mount_image$fuse(&(0x7f0000000480), &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100008, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRES64=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB, @ANYRESDEC=r6], 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x629a}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000180)="19c46c87537737a0dc91", 0xa}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x2}, 0x8) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) pread64(r7, &(0x7f00000005c0)=""/126, 0x7e, 0x3d) 1.359834641s ago: executing program 3 (id=2695): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x5, 0x2, 0x3, 0x4, 0x0, 0xfffffff6, 0x8, 0x5}}}}]}, 0x58}}, 0x20040084) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 1.278663532s ago: executing program 3 (id=2696): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES64=r0], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100ac1e000108000200ac1414e80c00028005"], 0x88}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r4, 0x25, 0x0, @void}, 0x10) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) pipe(0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000300)}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0x40, @mcast2, 0xc}, 0x1c, &(0x7f00000000c0)}}], 0x2, 0xc8040) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 1.014656629s ago: executing program 3 (id=2697): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x30, 0x1, 0xfd, 0x5ae9}, {0x30, 0x7f, 0x4, 0xfefff00c}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 843.571163ms ago: executing program 1 (id=2698): syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) syz_usb_connect(0x3, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x89, 0x40, 0xcb, 0x40, 0x5d1, 0x7001, 0x5343, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x40, 0x59, 0x40, 0x1a, [{{0x9, 0x4, 0x92, 0xc, 0x0, 0xf4, 0xb9, 0x23, 0x9a}}]}}]}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0xa, 0x5, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000004) 143.175061ms ago: executing program 0 (id=2699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r1, &(0x7f0000004580)=[{{&(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @dev={0xac, 0x14, 0x14, 0x35}}}}], 0x20}}], 0x1, 0x20000000) 0s ago: executing program 3 (id=2700): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f65, 0xfffffffd, 0xc5, 0xe23, 0x5, 0x1, 0x7fff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x2, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000e0}, 0x4890) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r5, 0x3e}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x40084) kernel console output (not intermixed with test programs): 2] netlink: 12 bytes leftover after parsing attributes in process `syz.1.490'. [ 117.744052][ T7101] 8021q: VLANs not supported on ip6gre0 [ 117.825355][ T7102] sch_fq: defrate 1 ignored. [ 117.895564][ T7106] netlink: 'syz.2.496': attribute type 21 has an invalid length. [ 117.904136][ T7106] netlink: 156 bytes leftover after parsing attributes in process `syz.2.496'. [ 117.916562][ T7105] tipc: Enabled bearer , priority 0 [ 117.924850][ T7105] syzkaller0: entered promiscuous mode [ 117.930848][ T7105] syzkaller0: entered allmulticast mode [ 118.026261][ T7103] tipc: Resetting bearer [ 118.102306][ T7103] tipc: Disabling bearer [ 118.205328][ T7119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.503'. [ 118.447499][ T7131] 8021q: VLANs not supported on ip6gre0 [ 118.594126][ T7138] netlink: 'syz.0.511': attribute type 21 has an invalid length. [ 118.602768][ T7138] netlink: 156 bytes leftover after parsing attributes in process `syz.0.511'. [ 118.680484][ T7136] sch_fq: defrate 1 ignored. [ 118.763087][ T7140] tipc: Enabled bearer , priority 0 [ 118.783287][ T7147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.515'. [ 118.796400][ T7140] syzkaller0: entered promiscuous mode [ 118.801944][ T7140] syzkaller0: entered allmulticast mode [ 118.913891][ T7139] tipc: Resetting bearer [ 118.961679][ T7139] tipc: Disabling bearer [ 119.177407][ T7161] netlink: 'syz.3.522': attribute type 21 has an invalid length. [ 119.197646][ T7161] netlink: 156 bytes leftover after parsing attributes in process `syz.3.522'. [ 119.240900][ T7162] 8021q: VLANs not supported on ip6gre0 [ 119.392412][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.527'. [ 119.453942][ T7175] netlink: 260 bytes leftover after parsing attributes in process `syz.0.528'. [ 119.489052][ T7173] tipc: Enabled bearer , priority 0 [ 119.577013][ T7175] bond0: (slave wlan1): Releasing backup interface [ 119.644162][ T7170] sch_fq: defrate 1 ignored. [ 119.673765][ T7173] tipc: Resetting bearer [ 119.710306][ T7169] tipc: Disabling bearer [ 119.761353][ T7184] tipc: Enabled bearer , priority 0 [ 119.774656][ T7184] syzkaller0: entered promiscuous mode [ 119.792658][ T7184] syzkaller0: entered allmulticast mode [ 119.940997][ T7181] tipc: Resetting bearer [ 120.008225][ T7181] tipc: Disabling bearer [ 120.090873][ T7197] Illegal XDP return value 4291387392 on prog (id 105) dev syz_tun, expect packet loss! [ 120.172361][ T7199] 8021q: VLANs not supported on ip6gre0 [ 120.290659][ T7203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.537'. [ 120.318280][ T7205] netlink: 'syz.3.539': attribute type 21 has an invalid length. [ 120.331000][ T7205] netlink: 156 bytes leftover after parsing attributes in process `syz.3.539'. [ 120.487944][ T7213] tipc: Enabled bearer , priority 0 [ 120.513848][ T7213] tipc: Resetting bearer [ 120.546609][ T7211] tipc: Disabling bearer [ 120.705759][ T7221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.546'. [ 120.745693][ T7222] syzkaller0: entered promiscuous mode [ 120.761580][ T7222] syzkaller0: entered allmulticast mode [ 121.127958][ T7232] netlink: 'syz.1.551': attribute type 21 has an invalid length. [ 121.255041][ T7237] tipc: Enabled bearer , priority 0 [ 121.271876][ T7237] tipc: Resetting bearer [ 121.359928][ T7236] tipc: Disabling bearer [ 121.785292][ T7259] netlink: 'syz.2.563': attribute type 21 has an invalid length. [ 122.306461][ T7269] tipc: Enabled bearer , priority 0 [ 122.337631][ T7269] sch_fq: defrate 1 ignored. [ 122.345149][ T7269] tipc: Resetting bearer [ 122.377492][ T7268] tipc: Disabling bearer [ 122.529142][ T7273] tipc: Enabled bearer , priority 0 [ 122.545290][ T7273] tipc: Resetting bearer [ 122.579753][ T7271] tipc: Disabling bearer [ 123.013886][ T7293] 8021q: VLANs not supported on ip6gre0 [ 123.060502][ T7291] tipc: Enabled bearer , priority 0 [ 123.100032][ T7291] sch_fq: defrate 1 ignored. [ 123.123198][ T7291] tipc: Resetting bearer [ 123.148803][ T7297] __nla_validate_parse: 4 callbacks suppressed [ 123.148818][ T7297] netlink: 260 bytes leftover after parsing attributes in process `syz.2.581'. [ 123.165413][ T7289] tipc: Disabling bearer [ 123.189680][ T7297] bridge_slave_0: left allmulticast mode [ 123.200684][ T7297] bridge_slave_0: left promiscuous mode [ 123.217876][ T7297] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.268013][ T7297] bridge_slave_1: left allmulticast mode [ 123.307367][ T7297] bridge_slave_1: left promiscuous mode [ 123.314025][ T7297] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.371282][ T7297] bond0: (slave bond_slave_0): Releasing backup interface [ 123.422242][ T7297] bond0: (slave bond_slave_1): Releasing backup interface [ 123.511917][ T7297] team0: Port device team_slave_0 removed [ 123.609829][ T7297] team0: Port device team_slave_1 removed [ 123.643253][ T7297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.699364][ T7297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.769147][ T7297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.838984][ T7297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.046379][ T7305] tipc: Enabled bearer , priority 0 [ 124.062764][ T7307] syzkaller0: entered promiscuous mode [ 124.071516][ T7307] syzkaller0: entered allmulticast mode [ 124.087373][ T7299] tipc: Resetting bearer [ 124.139400][ T7299] tipc: Disabling bearer [ 124.464039][ T7331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.590'. [ 124.542118][ T7333] netlink: 'syz.1.591': attribute type 21 has an invalid length. [ 124.565805][ T7333] netlink: 156 bytes leftover after parsing attributes in process `syz.1.591'. [ 124.653695][ T7337] syzkaller1: entered promiscuous mode [ 124.668363][ T7337] syzkaller1: entered allmulticast mode [ 124.953425][ T7348] tipc: Enabled bearer , priority 0 [ 124.967731][ T7348] syzkaller0: entered promiscuous mode [ 124.973257][ T7348] syzkaller0: entered allmulticast mode [ 125.022725][ T7346] tipc: Resetting bearer [ 125.058240][ T7346] tipc: Disabling bearer [ 125.603922][ T7358] netlink: 260 bytes leftover after parsing attributes in process `syz.1.600'. [ 125.634966][ T7358] bridge_slave_0: left allmulticast mode [ 125.644205][ T7358] bridge_slave_0: left promiscuous mode [ 125.655723][ T7358] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.678485][ T7358] bridge_slave_1: left allmulticast mode [ 125.684378][ T7358] bridge_slave_1: left promiscuous mode [ 125.702575][ T7358] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.737818][ T7358] bond0: (slave bond_slave_0): Releasing backup interface [ 125.785239][ T7358] bond0: (slave bond_slave_1): Releasing backup interface [ 125.907596][ T7358] team0: Port device team_slave_0 removed [ 125.948449][ T7358] team0: Port device team_slave_1 removed [ 125.970789][ T7358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.992105][ T7358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.002822][ T7358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.012447][ T7358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.103337][ T7367] 8021q: VLANs not supported on ip6gre0 [ 126.298783][ T7369] netlink: 'syz.3.604': attribute type 21 has an invalid length. [ 126.316196][ T7369] netlink: 156 bytes leftover after parsing attributes in process `syz.3.604'. [ 126.500191][ T7372] tipc: Enabled bearer , priority 0 [ 126.531496][ T7372] sch_fq: defrate 1 ignored. [ 126.540897][ T7372] tipc: Resetting bearer [ 126.550832][ T7375] syzkaller1: entered promiscuous mode [ 126.557804][ T7375] syzkaller1: entered allmulticast mode [ 126.565189][ T7376] tipc: Enabled bearer , priority 0 [ 126.583539][ T7371] tipc: Disabling bearer [ 126.619591][ T7376] syzkaller0: entered promiscuous mode [ 126.625088][ T7376] syzkaller0: entered allmulticast mode [ 126.728131][ T7374] tipc: Resetting bearer [ 126.772969][ T7374] tipc: Disabling bearer [ 127.000640][ T7391] syzkaller0: entered promiscuous mode [ 127.011984][ T7391] syzkaller0: entered allmulticast mode [ 127.104824][ T7396] netlink: 260 bytes leftover after parsing attributes in process `syz.3.616'. [ 127.152905][ T7396] bridge_slave_0: left allmulticast mode [ 127.158900][ T7396] bridge_slave_0: left promiscuous mode [ 127.164861][ T7396] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.192762][ T7396] bridge_slave_1: left allmulticast mode [ 127.213098][ T7396] bridge_slave_1: left promiscuous mode [ 127.266835][ T7396] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.337019][ T7396] bond0: (slave bond_slave_0): Releasing backup interface [ 127.385561][ T7396] bond0: (slave bond_slave_1): Releasing backup interface [ 127.456120][ T7396] team0: Port device team_slave_0 removed [ 127.483334][ T7396] team0: Port device team_slave_1 removed [ 127.495192][ T7396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.503337][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.513786][ T7396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.524293][ T7396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.640151][ T7413] tipc: Enabled bearer , priority 0 [ 127.665261][ T7410] syzkaller0: entered promiscuous mode [ 127.680706][ T7410] syzkaller0: entered allmulticast mode [ 127.727889][ T7410] tipc: Resetting bearer [ 127.794004][ T7409] tipc: Resetting bearer [ 127.917034][ T7409] tipc: Disabling bearer [ 127.930606][ T7422] netlink: 'syz.0.625': attribute type 21 has an invalid length. [ 127.954256][ T7422] netlink: 156 bytes leftover after parsing attributes in process `syz.0.625'. [ 128.088419][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.629'. [ 128.315864][ T7438] netlink: 320 bytes leftover after parsing attributes in process `syz.2.629'. [ 128.575708][ T7452] netlink: 'syz.1.638': attribute type 21 has an invalid length. [ 128.584544][ T7452] netlink: 156 bytes leftover after parsing attributes in process `syz.1.638'. [ 128.716411][ T7454] tipc: Enabled bearer , priority 0 [ 128.761394][ T7454] syzkaller0: entered promiscuous mode [ 128.769993][ T7454] syzkaller0: entered allmulticast mode [ 128.786693][ T7454] tipc: Resetting bearer [ 128.833827][ T7453] tipc: Resetting bearer [ 128.927574][ T7453] tipc: Disabling bearer [ 128.960943][ T7468] 8021q: VLANs not supported on ip6gre0 [ 129.340786][ T7481] syzkaller0: entered promiscuous mode [ 129.356219][ T7481] syzkaller0: entered allmulticast mode [ 129.851152][ T7500] 8021q: VLANs not supported on ip6gre0 [ 130.041220][ T7507] tipc: Enabled bearer , priority 0 [ 130.120017][ T7507] syzkaller0: entered promiscuous mode [ 130.130607][ T7507] syzkaller0: entered allmulticast mode [ 130.175195][ T7507] tipc: Resetting bearer [ 130.208784][ T7506] tipc: Resetting bearer [ 130.268377][ T7506] tipc: Disabling bearer [ 130.364650][ T7519] tipc: Enabling of bearer rejected, failed to enable media [ 130.637539][ T7535] netlink: 72 bytes leftover after parsing attributes in process `syz.1.662'. [ 130.703006][ T7533] syzkaller0: entered promiscuous mode [ 130.711239][ T7533] syzkaller0: entered allmulticast mode [ 130.896453][ T7550] xt_hashlimit: size too large, truncated to 1048576 [ 131.062930][ T7552] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 131.849294][ T7578] tipc: Enabled bearer , priority 0 [ 131.891720][ T7578] syzkaller0: entered promiscuous mode [ 131.896823][ T7588] netlink: 260 bytes leftover after parsing attributes in process `syz.2.672'. [ 131.916409][ T7578] syzkaller0: entered allmulticast mode [ 131.951323][ T7578] tipc: Resetting bearer [ 132.059925][ T7577] tipc: Resetting bearer [ 132.157956][ T7577] tipc: Disabling bearer [ 132.215456][ T7597] tipc: Enabling of bearer rejected, failed to enable media [ 132.879630][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.676'. [ 133.092947][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.106255][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.185786][ T7625] netlink: 320 bytes leftover after parsing attributes in process `syz.1.676'. [ 133.195215][ T7628] 8021q: VLANs not supported on ip6gre0 [ 134.082498][ T7647] netlink: 260 bytes leftover after parsing attributes in process `syz.1.685'. [ 134.188592][ T7650] tipc: Enabling of bearer rejected, failed to enable media [ 134.825776][ T7673] syzkaller0: entered promiscuous mode [ 134.846977][ T7673] syzkaller0: entered allmulticast mode [ 135.586763][ T7700] tipc: Enabling of bearer rejected, failed to enable media [ 136.151447][ T7719] 8021q: VLANs not supported on ip6gre0 [ 136.681605][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 136.755411][ T7736] tipc: Enabling of bearer rejected, failed to enable media [ 137.054586][ T7750] netlink: 'syz.2.707': attribute type 21 has an invalid length. [ 137.073499][ T7734] netlink: 320 bytes leftover after parsing attributes in process `syz.3.703'. [ 137.086556][ T7750] netlink: 156 bytes leftover after parsing attributes in process `syz.2.707'. [ 137.431801][ T7759] syzkaller0: entered promiscuous mode [ 137.446314][ T7759] syzkaller0: entered allmulticast mode [ 137.614753][ T7764] netlink: 260 bytes leftover after parsing attributes in process `syz.3.713'. [ 137.834365][ T7770] netlink: 'syz.3.716': attribute type 21 has an invalid length. [ 137.851511][ T7770] netlink: 156 bytes leftover after parsing attributes in process `syz.3.716'. [ 137.878753][ T7772] tipc: Enabling of bearer rejected, failed to enable media [ 138.520521][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.723'. [ 138.730218][ T7803] netlink: 260 bytes leftover after parsing attributes in process `syz.2.727'. [ 138.743174][ T7796] tipc: Enabled bearer , priority 0 [ 138.850551][ T7796] tipc: Resetting bearer [ 138.963070][ T7795] tipc: Disabling bearer [ 139.185775][ T7819] tipc: Enabling of bearer rejected, failed to enable media [ 139.207318][ T7816] 8021q: VLANs not supported on ip6gre0 [ 139.685836][ T7839] netlink: 'syz.2.738': attribute type 21 has an invalid length. [ 139.714011][ T7839] netlink: 156 bytes leftover after parsing attributes in process `syz.2.738'. [ 139.743068][ T7843] netlink: 260 bytes leftover after parsing attributes in process `syz.1.740'. [ 140.028930][ T7853] tipc: Enabled bearer , priority 0 [ 140.050789][ T7853] syzkaller0: entered promiscuous mode [ 140.076191][ T7853] syzkaller0: entered allmulticast mode [ 140.189723][ T7853] tipc: Resetting bearer [ 140.214664][ T7852] tipc: Resetting bearer [ 140.243724][ T7852] tipc: Disabling bearer [ 140.272918][ T7865] tipc: Enabling of bearer rejected, failed to enable media [ 140.678695][ T7883] netlink: 260 bytes leftover after parsing attributes in process `syz.0.753'. [ 141.254476][ T7896] 8021q: VLANs not supported on ip6gre0 [ 141.271432][ T7895] tipc: Enabled bearer , priority 0 [ 141.317449][ T7895] tipc: Resetting bearer [ 141.415767][ T7894] tipc: Disabling bearer [ 141.456208][ T7905] tipc: Enabling of bearer rejected, failed to enable media [ 141.523469][ T7907] netlink: 'syz.0.764': attribute type 21 has an invalid length. [ 141.545676][ T7907] netlink: 156 bytes leftover after parsing attributes in process `syz.0.764'. [ 142.006954][ T7929] netlink: 260 bytes leftover after parsing attributes in process `syz.2.771'. [ 142.082583][ T7932] tipc: Enabled bearer , priority 0 [ 142.117057][ T7932] syzkaller0: entered promiscuous mode [ 142.135029][ T7932] syzkaller0: entered allmulticast mode [ 142.166562][ T7932] tipc: Resetting bearer [ 142.183407][ T7936] tipc: Enabled bearer , priority 0 [ 142.193667][ T7936] syzkaller0: entered promiscuous mode [ 142.206106][ T7936] syzkaller0: entered allmulticast mode [ 142.226898][ T7930] tipc: Resetting bearer [ 142.262319][ T7930] tipc: Disabling bearer [ 142.324885][ T7935] tipc: Resetting bearer [ 142.395110][ T7935] tipc: Disabling bearer [ 142.408214][ T7940] netlink: 'syz.0.777': attribute type 21 has an invalid length. [ 142.417140][ T7940] netlink: 156 bytes leftover after parsing attributes in process `syz.0.777'. [ 142.617784][ T7950] tipc: Enabling of bearer rejected, failed to enable media [ 143.142985][ T7976] netlink: 260 bytes leftover after parsing attributes in process `syz.1.790'. [ 143.159913][ T7978] netlink: 'syz.2.791': attribute type 21 has an invalid length. [ 143.170431][ T7978] netlink: 156 bytes leftover after parsing attributes in process `syz.2.791'. [ 143.720320][ T7997] tipc: Enabled bearer , priority 0 [ 143.782200][ T7997] sch_fq: defrate 1 ignored. [ 143.800284][ T7997] tipc: Resetting bearer [ 143.877549][ T7996] tipc: Disabling bearer [ 144.296635][ T8019] 8021q: VLANs not supported on ip6gre0 [ 144.316811][ T8023] netlink: 260 bytes leftover after parsing attributes in process `syz.3.810'. [ 144.497262][ T8030] tipc: Enabled bearer , priority 0 [ 144.504889][ T8030] syzkaller0: entered promiscuous mode [ 144.510986][ T8030] syzkaller0: entered allmulticast mode [ 144.578524][ T8030] tipc: Resetting bearer [ 144.590683][ T8029] tipc: Resetting bearer [ 144.640435][ T8029] tipc: Disabling bearer [ 144.892950][ T8043] netlink: 'syz.1.819': attribute type 21 has an invalid length. [ 144.918413][ T8043] netlink: 156 bytes leftover after parsing attributes in process `syz.1.819'. [ 144.960689][ T8045] syzkaller1: entered promiscuous mode [ 144.971864][ T8045] syzkaller1: entered allmulticast mode [ 145.143429][ T8053] 8021q: VLANs not supported on ip6gre0 [ 145.355308][ T8064] syzkaller1: entered promiscuous mode [ 145.362899][ T8064] syzkaller1: entered allmulticast mode [ 145.392420][ T8065] tipc: Enabled bearer , priority 0 [ 145.446249][ T8065] syzkaller0: entered promiscuous mode [ 145.458033][ T8065] syzkaller0: entered allmulticast mode [ 145.493383][ T8065] tipc: Resetting bearer [ 145.505582][ T8063] tipc: Resetting bearer [ 145.548132][ T8063] tipc: Disabling bearer [ 145.569427][ T8072] netlink: 260 bytes leftover after parsing attributes in process `syz.3.831'. [ 145.844208][ T8080] xt_hashlimit: size too large, truncated to 1048576 [ 145.947980][ T8082] syzkaller1: entered promiscuous mode [ 145.972367][ T8082] syzkaller1: entered allmulticast mode [ 146.020927][ T8085] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 146.223571][ T8091] tipc: Enabled bearer , priority 0 [ 146.265599][ T8091] syzkaller0: entered promiscuous mode [ 146.292738][ T8091] syzkaller0: entered allmulticast mode [ 146.332636][ T8094] tipc: Enabled bearer , priority 0 [ 146.343149][ T8091] tipc: Resetting bearer [ 146.368326][ T8094] sch_fq: defrate 1 ignored. [ 146.392580][ T8090] tipc: Resetting bearer [ 146.433146][ T8090] tipc: Disabling bearer [ 146.456553][ T8094] tipc: Resetting bearer [ 146.492263][ T8092] tipc: Disabling bearer [ 146.682179][ T8100] tipc: Enabled bearer , priority 0 [ 146.699631][ T8103] netlink: 'syz.3.845': attribute type 21 has an invalid length. [ 146.708924][ T8103] netlink: 156 bytes leftover after parsing attributes in process `syz.3.845'. [ 146.723549][ T8100] syzkaller0: entered promiscuous mode [ 146.741352][ T8100] syzkaller0: entered allmulticast mode [ 146.836448][ T8100] tipc: Resetting bearer [ 146.870634][ T8098] tipc: Resetting bearer [ 146.897169][ T8098] tipc: Disabling bearer [ 146.913538][ T8108] 8021q: VLANs not supported on ip6gre0 [ 147.283336][ T8115] netlink: 260 bytes leftover after parsing attributes in process `syz.3.849'. [ 147.367468][ T8118] syzkaller1: entered promiscuous mode [ 147.380021][ T8118] syzkaller1: entered allmulticast mode [ 147.796603][ T8122] tipc: Enabled bearer , priority 0 [ 147.816816][ T8122] syzkaller0: entered promiscuous mode [ 147.822328][ T8122] syzkaller0: entered allmulticast mode [ 147.861710][ T8122] tipc: Resetting bearer [ 147.883073][ T8121] tipc: Resetting bearer [ 147.925351][ T8121] tipc: Disabling bearer [ 148.571436][ T8144] 8021q: VLANs not supported on ip6gre0 [ 148.846654][ T8151] tipc: Enabled bearer , priority 0 [ 148.899432][ T8151] syzkaller0: entered promiscuous mode [ 148.905540][ T8151] syzkaller0: entered allmulticast mode [ 148.944464][ T8151] tipc: Resetting bearer [ 148.960984][ T8150] tipc: Resetting bearer [ 148.983096][ T8150] tipc: Disabling bearer [ 149.419153][ T8166] syzkaller0: entered promiscuous mode [ 149.431508][ T8166] syzkaller0: entered allmulticast mode [ 149.455643][ T8166] sch_fq: defrate 1 ignored. [ 149.592043][ T8170] 8021q: VLANs not supported on ip6gre0 [ 149.801162][ T8176] tipc: Enabled bearer , priority 0 [ 149.841006][ T8176] syzkaller0: entered promiscuous mode [ 149.861653][ T8176] syzkaller0: entered allmulticast mode [ 149.925456][ T8176] tipc: Resetting bearer [ 149.963149][ T8174] tipc: Resetting bearer [ 150.010300][ T8174] tipc: Disabling bearer [ 150.255023][ T8188] tipc: Enabled bearer , priority 0 [ 150.273868][ T8188] syzkaller0: entered promiscuous mode [ 150.281019][ T8188] syzkaller0: entered allmulticast mode [ 150.303945][ T8188] tipc: Resetting bearer [ 150.311692][ T8187] tipc: Resetting bearer [ 150.332561][ T8187] tipc: Disabling bearer [ 150.687864][ T8200] syzkaller0: entered promiscuous mode [ 150.703625][ T8200] syzkaller0: entered allmulticast mode [ 150.715105][ T8200] sch_fq: defrate 1 ignored. [ 151.004383][ T8210] netlink: 260 bytes leftover after parsing attributes in process `syz.2.890'. [ 151.335494][ T8227] tipc: Enabled bearer , priority 0 [ 151.349404][ T8227] syzkaller0: entered promiscuous mode [ 151.356644][ T8227] syzkaller0: entered allmulticast mode [ 151.459782][ T8227] tipc: Resetting bearer [ 151.478107][ T8223] tipc: Resetting bearer [ 151.507158][ T8223] tipc: Disabling bearer [ 151.955025][ T8249] netlink: 260 bytes leftover after parsing attributes in process `syz.3.907'. [ 151.994537][ T8251] tipc: Enabled bearer , priority 0 [ 152.002673][ T8251] syzkaller0: entered promiscuous mode [ 152.009855][ T8251] syzkaller0: entered allmulticast mode [ 152.028182][ T8251] tipc: Resetting bearer [ 152.041749][ T8250] tipc: Resetting bearer [ 152.062841][ T8250] tipc: Disabling bearer [ 152.398269][ T8257] netlink: 'syz.2.912': attribute type 21 has an invalid length. [ 152.423087][ T8257] netlink: 156 bytes leftover after parsing attributes in process `syz.2.912'. [ 152.686920][ T8267] 8021q: VLANs not supported on ip6gre0 [ 152.964853][ T8283] netlink: 260 bytes leftover after parsing attributes in process `syz.3.922'. [ 153.606330][ T8303] 8021q: VLANs not supported on ip6gre0 [ 153.839087][ T8316] tipc: Enabled bearer , priority 0 [ 153.896841][ T8316] syzkaller0: entered promiscuous mode [ 153.902403][ T8316] syzkaller0: entered allmulticast mode [ 154.001068][ T8316] tipc: Resetting bearer [ 154.017824][ T8314] tipc: Resetting bearer [ 154.045252][ T8314] tipc: Disabling bearer [ 154.059762][ T8324] netlink: 'syz.1.940': attribute type 21 has an invalid length. [ 154.068418][ T8324] netlink: 156 bytes leftover after parsing attributes in process `syz.1.940'. [ 154.232442][ T8332] syzkaller0: entered promiscuous mode [ 154.246925][ T8332] syzkaller0: entered allmulticast mode [ 154.266765][ T8335] 8021q: VLANs not supported on ip6gre0 [ 154.276877][ T8332] sch_fq: defrate 1 ignored. [ 155.418678][ T8383] netlink: 260 bytes leftover after parsing attributes in process `syz.3.967'. [ 156.129385][ T8406] netlink: 'syz.3.976': attribute type 21 has an invalid length. [ 156.138663][ T8406] netlink: 156 bytes leftover after parsing attributes in process `syz.3.976'. [ 156.174941][ T8408] tipc: Enabled bearer , priority 0 [ 156.187093][ T8408] syzkaller0: entered promiscuous mode [ 156.192818][ T8408] syzkaller0: entered allmulticast mode [ 156.237596][ T8408] tipc: Resetting bearer [ 156.258534][ T8407] tipc: Resetting bearer [ 156.302109][ T8407] tipc: Disabling bearer [ 156.327489][ T8412] 8021q: VLANs not supported on ip6gre0 [ 156.448231][ T8415] syzkaller1: entered promiscuous mode [ 156.454520][ T8415] syzkaller1: entered allmulticast mode [ 156.501937][ T8416] tipc: Enabled bearer , priority 0 [ 156.526724][ T8419] syzkaller0: entered promiscuous mode [ 156.549134][ T8419] syzkaller0: entered allmulticast mode [ 156.591320][ T8416] tipc: Resetting bearer [ 156.643983][ T8413] tipc: Resetting bearer [ 156.746420][ T8413] tipc: Disabling bearer [ 156.789342][ T8428] syzkaller0: entered promiscuous mode [ 156.803923][ T8428] syzkaller0: entered allmulticast mode [ 156.843430][ T8428] sch_fq: defrate 1 ignored. [ 157.002481][ T8438] syzkaller1: entered promiscuous mode [ 157.010019][ T8438] syzkaller1: entered allmulticast mode [ 157.556824][ T8456] tipc: Enabled bearer , priority 0 [ 157.593732][ T8456] syzkaller0: entered promiscuous mode [ 157.600225][ T8456] syzkaller0: entered allmulticast mode [ 157.634168][ T8456] tipc: Resetting bearer [ 157.678271][ T8455] tipc: Resetting bearer [ 157.712228][ T8455] tipc: Disabling bearer [ 157.795541][ T8464] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1003'. [ 157.886918][ T8466] syzkaller1: entered promiscuous mode [ 157.892457][ T8466] syzkaller1: entered allmulticast mode [ 158.230292][ T8476] 8021q: VLANs not supported on ip6gre0 [ 158.486918][ T8486] tipc: Enabled bearer , priority 0 [ 158.495340][ T8486] syzkaller0: entered promiscuous mode [ 158.504973][ T8486] syzkaller0: entered allmulticast mode [ 158.557974][ T8486] tipc: Resetting bearer [ 158.602547][ T8485] tipc: Resetting bearer [ 158.624802][ T8485] tipc: Disabling bearer [ 158.703549][ T8496] syzkaller1: entered promiscuous mode [ 158.719876][ T8496] syzkaller1: entered allmulticast mode [ 158.799130][ T8500] syzkaller0: entered promiscuous mode [ 158.804657][ T8500] syzkaller0: entered allmulticast mode [ 158.818374][ T8500] sch_fq: defrate 1 ignored. [ 158.982118][ T8504] netlink: 'syz.1.1021': attribute type 21 has an invalid length. [ 158.991152][ T8504] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1021'. [ 159.093227][ T8508] syzkaller1: entered promiscuous mode [ 159.099082][ T8508] syzkaller1: entered allmulticast mode [ 159.376040][ T8516] tipc: Enabled bearer , priority 0 [ 159.383735][ T8516] syzkaller0: entered promiscuous mode [ 159.396814][ T8516] syzkaller0: entered allmulticast mode [ 159.437064][ T8516] tipc: Resetting bearer [ 159.491910][ T8515] tipc: Resetting bearer [ 159.511959][ T8515] tipc: Disabling bearer [ 159.545167][ T8522] tipc: Enabled bearer , priority 0 [ 159.554439][ T8522] syzkaller0: entered promiscuous mode [ 159.565705][ T8522] syzkaller0: entered allmulticast mode [ 159.585847][ T8522] tipc: Resetting bearer [ 159.612296][ T8521] tipc: Resetting bearer [ 159.677433][ T8521] tipc: Disabling bearer [ 159.720289][ T8528] netlink: 'syz.2.1031': attribute type 21 has an invalid length. [ 159.728077][ T8527] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1032'. [ 159.728363][ T8528] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1031'. [ 159.884596][ T8533] syzkaller1: entered promiscuous mode [ 159.890375][ T8533] syzkaller1: entered allmulticast mode [ 160.299534][ T8546] tipc: Enabled bearer , priority 0 [ 160.317516][ T8546] syzkaller0: entered promiscuous mode [ 160.328400][ T8546] syzkaller0: entered allmulticast mode [ 160.368703][ T8546] tipc: Resetting bearer [ 160.381088][ T8550] netlink: 'syz.2.1042': attribute type 21 has an invalid length. [ 160.392626][ T8550] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1042'. [ 160.404166][ T8545] tipc: Resetting bearer [ 160.437101][ T8545] tipc: Disabling bearer [ 160.516420][ T8552] tipc: Enabled bearer , priority 0 [ 160.552936][ T8552] syzkaller0: entered promiscuous mode [ 160.585635][ T8552] syzkaller0: entered allmulticast mode [ 160.629045][ T8552] tipc: Resetting bearer [ 160.653533][ T8551] tipc: Resetting bearer [ 160.734180][ T8551] tipc: Disabling bearer [ 160.752988][ T8562] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1047'. [ 160.917621][ T8567] syzkaller0: entered promiscuous mode [ 160.923149][ T8567] syzkaller0: entered allmulticast mode [ 160.955750][ T8567] sch_fq: defrate 1 ignored. [ 161.185637][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1055'. [ 161.211427][ T8578] vlan2: entered allmulticast mode [ 161.222793][ T8578] bridge_slave_0: entered allmulticast mode [ 161.233692][ T8578] bridge0: port 1(vlan2) entered blocking state [ 161.240769][ T8578] bridge0: port 1(vlan2) entered disabled state [ 161.258006][ T8578] vlan2: entered promiscuous mode [ 161.263378][ T8578] bridge_slave_0: entered promiscuous mode [ 161.743155][ T8601] syzkaller0: entered promiscuous mode [ 161.753883][ T8601] syzkaller0: entered allmulticast mode [ 161.777167][ T8601] sch_fq: defrate 1 ignored. [ 161.882755][ T8609] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 162.401407][ T8628] syzkaller1: entered promiscuous mode [ 162.407372][ T8628] syzkaller1: entered allmulticast mode [ 162.690892][ T8634] 8021q: VLANs not supported on ip6gre0 [ 162.744031][ T8636] syzkaller0: entered promiscuous mode [ 162.750863][ T8636] syzkaller0: entered allmulticast mode [ 162.762279][ T8636] sch_fq: defrate 1 ignored. [ 162.982451][ T8642] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1083'. [ 163.470815][ T8657] 8021q: VLANs not supported on ip6gre0 [ 163.684032][ T8665] syzkaller0: entered promiscuous mode [ 163.690400][ T8665] syzkaller0: entered allmulticast mode [ 163.710332][ T8665] sch_fq: defrate 1 ignored. [ 163.983096][ T8674] tipc: Enabled bearer , priority 0 [ 163.993693][ T8674] syzkaller0: entered promiscuous mode [ 164.003271][ T8674] syzkaller0: entered allmulticast mode [ 164.034069][ T8674] tipc: Resetting bearer [ 164.054010][ T8672] tipc: Resetting bearer [ 164.086823][ T8672] tipc: Disabling bearer [ 164.111718][ T8678] netlink: 'syz.1.1097': attribute type 21 has an invalid length. [ 164.129723][ T8678] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1097'. [ 164.171180][ T8680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1098'. [ 164.234770][ T8682] 8021q: VLANs not supported on ip6gre0 [ 164.376891][ T8688] tipc: Enabled bearer , priority 0 [ 164.443316][ T8691] syzkaller0: entered promiscuous mode [ 164.456211][ T8691] syzkaller0: entered allmulticast mode [ 164.557315][ T8691] tipc: Resetting bearer [ 164.599935][ T8687] tipc: Resetting bearer [ 164.670941][ T8687] tipc: Disabling bearer [ 164.689781][ T8699] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1106'. [ 164.793513][ T8706] netlink: 'syz.2.1109': attribute type 21 has an invalid length. [ 164.801786][ T8706] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1109'. [ 164.954865][ T8711] 8021q: VLANs not supported on ip6gre0 [ 165.034334][ T8716] syzkaller1: entered promiscuous mode [ 165.040401][ T8716] syzkaller1: entered allmulticast mode [ 165.186232][ T8725] geneve2: entered promiscuous mode [ 165.191607][ T8725] geneve2: entered allmulticast mode [ 165.666972][ T8732] tipc: Enabled bearer , priority 0 [ 165.706570][ T8732] syzkaller0: entered promiscuous mode [ 165.721282][ T8732] syzkaller0: entered allmulticast mode [ 165.798859][ T8732] tipc: Resetting bearer [ 165.819866][ T8731] tipc: Resetting bearer [ 165.873070][ T8731] tipc: Disabling bearer [ 165.904969][ T8735] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1120'. [ 166.223711][ T8743] 8021q: VLANs not supported on ip6gre0 [ 166.397005][ T8751] syzkaller0: entered promiscuous mode [ 166.402644][ T8751] syzkaller0: entered allmulticast mode [ 166.426304][ T8751] sch_fq: defrate 1 ignored. [ 166.710093][ T8765] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1130'. [ 166.733501][ T8764] tipc: Enabled bearer , priority 0 [ 166.748733][ T8764] syzkaller0: entered promiscuous mode [ 166.761062][ T8764] syzkaller0: entered allmulticast mode [ 166.840215][ T8764] tipc: Resetting bearer [ 166.862127][ T8763] tipc: Resetting bearer [ 166.899862][ T8763] tipc: Disabling bearer [ 166.953258][ T8774] 8021q: VLANs not supported on ip6gre0 [ 167.091090][ T8780] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1138'. [ 167.336112][ T8787] syzkaller0: entered promiscuous mode [ 167.341874][ T8787] syzkaller0: entered allmulticast mode [ 167.353851][ T8787] sch_fq: defrate 1 ignored. [ 167.660487][ T8799] tipc: Enabled bearer , priority 0 [ 167.668426][ T8799] syzkaller0: entered promiscuous mode [ 167.674359][ T8799] syzkaller0: entered allmulticast mode [ 167.690848][ T8797] 8021q: VLANs not supported on ip6gre0 [ 167.738468][ T8799] tipc: Resetting bearer [ 167.758203][ T8798] tipc: Resetting bearer [ 167.846964][ T8798] tipc: Disabling bearer [ 168.037824][ T8810] netlink: 'syz.0.1151': attribute type 21 has an invalid length. [ 168.046242][ T8808] syz.1.1150 (8808) used greatest stack depth: 17960 bytes left [ 168.056177][ T8810] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1151'. [ 168.277982][ T8816] syzkaller0: entered promiscuous mode [ 168.297289][ T8816] syzkaller0: entered allmulticast mode [ 168.298841][ T8820] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 168.324832][ T8820] bridge0: port 1(veth0_to_bridge) entered blocking state [ 168.337990][ T8820] bridge0: port 1(veth0_to_bridge) entered disabled state [ 168.355901][ T8820] veth0_to_bridge: entered allmulticast mode [ 168.364661][ T8820] veth0_to_bridge: entered promiscuous mode [ 168.375719][ T8820] bridge0: port 1(veth0_to_bridge) entered blocking state [ 168.383361][ T8820] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 168.407960][ T8822] sch_fq: defrate 1 ignored. [ 168.555769][ T8828] 8021q: VLANs not supported on ip6gre0 [ 168.634546][ T8831] tipc: Enabled bearer , priority 0 [ 168.642424][ T8831] syzkaller0: entered promiscuous mode [ 168.657810][ T8831] syzkaller0: entered allmulticast mode [ 168.687193][ T8831] tipc: Resetting bearer [ 168.716223][ T8829] tipc: Resetting bearer [ 168.742308][ T8829] tipc: Disabling bearer [ 168.759509][ T8835] netlink: 'syz.0.1162': attribute type 21 has an invalid length. [ 168.773630][ T8835] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1162'. [ 168.940150][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1164'. [ 168.991894][ T8843] tipc: Enabled bearer , priority 0 [ 169.013058][ T8843] syzkaller0: entered promiscuous mode [ 169.031403][ T8843] syzkaller0: entered allmulticast mode [ 169.078889][ T8842] tipc: Resetting bearer [ 169.133997][ T8842] tipc: Disabling bearer [ 169.152184][ T8849] 8021q: VLANs not supported on ip6gre0 [ 169.279839][ T8854] syzkaller0: entered promiscuous mode [ 169.285518][ T8854] syzkaller0: entered allmulticast mode [ 169.295786][ T8854] sch_fq: defrate 1 ignored. [ 169.311875][ T8857] netlink: 'syz.1.1172': attribute type 21 has an invalid length. [ 169.320226][ T8857] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1172'. [ 170.257954][ T8858] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.267118][ T8858] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.276397][ T8858] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.285373][ T8858] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.395402][ T8861] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 170.456444][ T8869] tipc: Enabling of bearer rejected, failed to enable media [ 170.548055][ T8885] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1178'. [ 170.744047][ T8891] tipc: Enabled bearer , priority 0 [ 170.779115][ T8891] syzkaller0: entered promiscuous mode [ 170.784647][ T8891] syzkaller0: entered allmulticast mode [ 170.885860][ T8889] tipc: Resetting bearer [ 170.939578][ T8889] tipc: Disabling bearer [ 171.060498][ T8900] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 171.594672][ T8916] tipc: Enabled bearer , priority 0 [ 171.605133][ T8916] syzkaller0: entered promiscuous mode [ 171.611719][ T8916] syzkaller0: entered allmulticast mode [ 171.637490][ T8916] tipc: Resetting bearer [ 171.674938][ T8915] tipc: Resetting bearer [ 171.702723][ T8915] tipc: Disabling bearer [ 171.746098][ T8918] 8021q: VLANs not supported on ip6gre0 [ 171.896269][ T8920] netlink: 'syz.2.1191': attribute type 21 has an invalid length. [ 171.904217][ T8920] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1191'. [ 171.958318][ T8924] tipc: Enabled bearer , priority 0 [ 171.988315][ T8924] syzkaller0: entered promiscuous mode [ 172.006135][ T8924] syzkaller0: entered allmulticast mode [ 172.074255][ T8921] tipc: Resetting bearer [ 172.166316][ T8921] tipc: Disabling bearer [ 172.296510][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'. [ 172.321918][ T8929] nbd0: detected capacity change from 0 to 127 [ 172.348047][ T8940] tipc: Enabled bearer , priority 0 [ 172.364716][ T8940] syzkaller0: entered promiscuous mode [ 172.390663][ T8940] syzkaller0: entered allmulticast mode [ 172.398932][ T8942] 8021q: VLANs not supported on ip6gre0 [ 172.442129][ T8940] tipc: Resetting bearer [ 172.442503][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1195'. [ 172.462898][ T8939] tipc: Resetting bearer [ 172.492999][ T8939] tipc: Disabling bearer [ 172.610382][ T8950] netlink: 'syz.0.1204': attribute type 21 has an invalid length. [ 172.619242][ T8950] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1204'. [ 172.788148][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1209'. [ 172.836918][ T8962] netlink: 'syz.0.1210': attribute type 3 has an invalid length. [ 172.891349][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1211'. [ 172.922002][ T5085] block nbd0: Receive control failed (result -104) [ 173.129491][ T8969] tipc: Enabled bearer , priority 0 [ 173.145603][ T8969] syzkaller0: entered promiscuous mode [ 173.163673][ T8969] syzkaller0: entered allmulticast mode [ 173.171459][ T8973] netlink: 'syz.3.1214': attribute type 21 has an invalid length. [ 173.186111][ T8973] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1214'. [ 173.253679][ T8969] tipc: Resetting bearer [ 173.259745][ T8975] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1216'. [ 173.334510][ T8968] tipc: Resetting bearer [ 173.386442][ T8968] tipc: Disabling bearer [ 173.953034][ T9000] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1225'. [ 173.973671][ T9003] netlink: 'syz.0.1226': attribute type 21 has an invalid length. [ 173.981885][ T9003] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1226'. [ 174.620187][ T9024] syzkaller1: entered promiscuous mode [ 174.643098][ T9024] syzkaller1: entered allmulticast mode [ 174.650615][ T9025] 8021q: VLANs not supported on ip6gre0 [ 174.817049][ T9030] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 174.872137][ T9030] batman_adv: batadv0: Adding interface: gretap1 [ 174.886164][ T9030] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.959331][ T9030] batman_adv: batadv0: Interface activated: gretap1 [ 175.025066][ T9034] syzkaller0: entered promiscuous mode [ 175.044904][ T9034] syzkaller0: entered allmulticast mode [ 175.088587][ T9034] sch_fq: defrate 1 ignored. [ 175.441531][ T9055] 8021q: VLANs not supported on ip6gre0 [ 176.287694][ T9085] 8021q: VLANs not supported on ip6gre0 [ 176.331975][ T9081] nbd1: detected capacity change from 0 to 127 [ 176.865040][ T9107] netlink: 'syz.2.1268': attribute type 12 has an invalid length. [ 176.981695][ T5085] block nbd1: Receive control failed (result -104) [ 177.092028][ T9111] syzkaller0: entered promiscuous mode [ 177.097987][ T9111] syzkaller0: entered allmulticast mode [ 177.108443][ T9111] sch_fq: defrate 1 ignored. [ 177.313676][ T9115] 8021q: VLANs not supported on ip6gre0 [ 177.414653][ T9117] __nla_validate_parse: 4 callbacks suppressed [ 177.414668][ T9117] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1273'. [ 177.482953][ T9117] vlan2: left promiscuous mode [ 177.508856][ T9117] bridge_slave_0: left promiscuous mode [ 177.533291][ T9117] bridge0: port 1(vlan2) entered disabled state [ 177.564314][ T9117] batman_adv: batadv0: Interface deactivated: gretap1 [ 177.595894][ T9117] batman_adv: batadv0: Removing interface: gretap1 [ 177.620225][ T9126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1277'. [ 178.541057][ T9157] netlink: 'syz.1.1289': attribute type 21 has an invalid length. [ 178.571783][ T9157] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1289'. [ 178.877629][ T9171] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1292'. [ 178.979904][ T9173] 8021q: VLANs not supported on ip6gre0 [ 179.524237][ T9187] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 179.547544][ T9187] batman_adv: batadv0: Adding interface: gretap1 [ 179.553980][ T9187] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.580685][ T9187] batman_adv: batadv0: Interface activated: gretap1 [ 179.829918][ T9198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1305'. [ 180.189466][ T9208] tipc: Enabled bearer , priority 0 [ 180.203594][ T9210] tipc: Enabling of bearer rejected, failed to enable media [ 180.216239][ T9208] syzkaller0: entered promiscuous mode [ 180.221763][ T9208] syzkaller0: entered allmulticast mode [ 180.230890][ T9210] syzkaller0: entered promiscuous mode [ 180.237988][ T9210] syzkaller0: entered allmulticast mode [ 180.266668][ T9210] sch_fq: defrate 1 ignored. [ 180.316637][ T9208] tipc: Resetting bearer [ 180.384823][ T9207] tipc: Resetting bearer [ 180.410605][ T9207] tipc: Disabling bearer [ 180.715483][ T9230] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1321'. [ 181.173412][ T9254] veth0_to_bridge: left allmulticast mode [ 181.179538][ T9254] veth0_to_bridge: left promiscuous mode [ 181.185435][ T9254] bridge0: port 1(veth0_to_bridge) entered disabled state [ 181.203005][ T9254] batman_adv: batadv0: Interface deactivated: gretap1 [ 181.213913][ T9254] batman_adv: batadv0: Removing interface: gretap1 [ 182.338246][ T9292] tipc: Enabling of bearer rejected, failed to enable media [ 182.361569][ T9292] syzkaller0: entered promiscuous mode [ 182.369009][ T9292] syzkaller0: entered allmulticast mode [ 182.403247][ T9292] sch_fq: defrate 1 ignored. [ 182.672621][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1352'. [ 182.971774][ T9320] 8021q: VLANs not supported on ip6gre0 [ 183.321687][ T9329] tipc: Enabling of bearer rejected, failed to enable media [ 183.341987][ T9329] syzkaller0: entered promiscuous mode [ 183.348863][ T9329] syzkaller0: entered allmulticast mode [ 183.365191][ T9329] sch_fq: defrate 1 ignored. [ 183.521434][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1363'. [ 183.983366][ T9340] netlink: 'syz.3.1366': attribute type 21 has an invalid length. [ 183.996732][ T9340] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1366'. [ 184.457698][ T9362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1375'. [ 184.694001][ T9371] syzkaller1: entered promiscuous mode [ 184.701187][ T9371] syzkaller1: entered allmulticast mode [ 185.114075][ T9387] 8021q: VLANs not supported on ip6gre0 [ 185.161274][ T9389] tipc: Enabling of bearer rejected, failed to enable media [ 185.191468][ T9389] syzkaller0: entered promiscuous mode [ 185.212037][ T9389] syzkaller0: entered allmulticast mode [ 185.238516][ T9389] sch_fq: defrate 1 ignored. [ 185.409179][ T9399] syzkaller1: entered promiscuous mode [ 185.414704][ T9399] syzkaller1: entered allmulticast mode [ 185.437622][ T9401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1393'. [ 185.647482][ T9407] tipc: Enabled bearer , priority 0 [ 185.691281][ T9407] syzkaller0: entered promiscuous mode [ 185.736017][ T9407] syzkaller0: entered allmulticast mode [ 185.883004][ T9406] tipc: Resetting bearer [ 185.918866][ T9406] tipc: Disabling bearer [ 186.293291][ T9437] syzkaller1: entered promiscuous mode [ 186.311550][ T9437] syzkaller1: entered allmulticast mode [ 186.657970][ T9446] tipc: Enabled bearer , priority 0 [ 186.671200][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1412'. [ 186.681162][ T9446] syzkaller0: entered promiscuous mode [ 186.687356][ T9446] syzkaller0: entered allmulticast mode [ 186.812853][ T9445] tipc: Resetting bearer [ 186.872240][ T9445] tipc: Disabling bearer [ 187.450715][ T9471] syzkaller1: entered promiscuous mode [ 187.457457][ T9471] syzkaller1: entered allmulticast mode [ 187.545362][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1423'. [ 188.056393][ T9491] tipc: Enabling of bearer rejected, failed to enable media [ 188.069160][ T9491] syzkaller0: entered promiscuous mode [ 188.075042][ T9491] syzkaller0: entered allmulticast mode [ 188.085883][ T9491] sch_fq: defrate 1 ignored. [ 188.329647][ T9498] syzkaller1: entered promiscuous mode [ 188.335327][ T9498] syzkaller1: entered allmulticast mode [ 188.404511][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1434'. [ 189.077661][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1443'. [ 189.201509][ T9531] syzkaller1: entered promiscuous mode [ 189.219882][ T9531] syzkaller1: entered allmulticast mode [ 189.881588][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1451'. [ 190.130488][ T5772] Bluetooth: hci3: link tx timeout [ 190.136902][ T5772] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.147786][ T5768] Bluetooth: hci3: link tx timeout [ 190.152958][ T5768] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.177703][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'. [ 190.315334][ T5768] Bluetooth: hci3: link tx timeout [ 190.320918][ T5768] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.337397][ T5768] Bluetooth: hci3: link tx timeout [ 190.340999][ T9571] syzkaller1: entered promiscuous mode [ 190.342620][ T5768] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.356102][ T9571] syzkaller1: entered allmulticast mode [ 190.705413][ T5768] Bluetooth: hci3: link tx timeout [ 190.710993][ T5768] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.851871][ T5768] Bluetooth: hci3: link tx timeout [ 190.857217][ T5768] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.497425][ T5768] Bluetooth: hci2: command 0x0406 tx timeout [ 191.497443][ T5777] Bluetooth: hci1: command 0x0406 tx timeout [ 191.497479][ T5777] Bluetooth: hci0: command 0x0406 tx timeout [ 191.649355][ T9624] syzkaller0: entered promiscuous mode [ 191.654925][ T9624] syzkaller0: entered allmulticast mode [ 191.671078][ T9624] sch_fq: defrate 1 ignored. [ 191.906162][ T5771] Bluetooth: hci3: link tx timeout [ 191.911397][ T5771] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 192.112542][ T5771] Bluetooth: hci3: link tx timeout [ 192.118291][ T5771] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 192.207810][ T5771] Bluetooth: hci3: command 0x0406 tx timeout [ 192.268114][ T9653] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1481'. [ 192.579038][ T9665] syzkaller0: entered promiscuous mode [ 192.584787][ T9665] syzkaller0: entered allmulticast mode [ 192.596985][ T9665] sch_fq: defrate 1 ignored. [ 193.393767][ T9692] syzkaller0: entered promiscuous mode [ 193.399489][ T9692] syzkaller0: entered allmulticast mode [ 193.410563][ T9692] sch_fq: defrate 1 ignored. [ 193.468055][ T9695] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1499'. [ 194.531226][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.868347][ T9736] netlink: 'syz.1.1517': attribute type 21 has an invalid length. [ 194.879430][ T9736] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1517'. [ 195.191634][ T9755] syzkaller1: entered promiscuous mode [ 195.197280][ T9755] syzkaller1: entered allmulticast mode [ 195.324113][ T9757] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1526'. [ 195.648751][ T9767] 8021q: VLANs not supported on ip6gre0 [ 196.134873][ T9787] syzkaller0: entered promiscuous mode [ 196.157685][ T9787] syzkaller0: entered allmulticast mode [ 196.216253][ T9787] sch_fq: defrate 1 ignored. [ 196.355113][ T9799] netlink: 'syz.0.1545': attribute type 21 has an invalid length. [ 196.377297][ T9799] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1545'. [ 196.491492][ T9807] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1547'. [ 196.617566][ T9812] bridge_slave_0: entered promiscuous mode [ 196.878665][ T9827] 8021q: VLANs not supported on ip6gre0 [ 196.979675][ T9829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1559'. [ 197.149411][ T9838] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1564'. [ 197.494146][ T9851] netlink: 'syz.0.1568': attribute type 3 has an invalid length. [ 197.604144][ T9855] 8021q: VLANs not supported on ip6gre0 [ 197.719774][ T9859] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1572'. [ 197.863805][ T9866] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1576'. [ 197.932413][ T9869] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1577'. [ 198.363443][ T9883] Bluetooth: MGMT ver 1.22 [ 198.467253][ T9888] syzkaller1: entered promiscuous mode [ 198.472889][ T9888] syzkaller1: entered allmulticast mode [ 198.524899][ T9891] __nla_validate_parse: 1 callbacks suppressed [ 198.524914][ T9891] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1587'. [ 198.754576][ T9900] netlink: 'syz.3.1590': attribute type 21 has an invalid length. [ 198.770513][ T9900] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1590'. [ 199.092201][ T9916] 8021q: VLANs not supported on ip6gre0 [ 199.348670][ T9929] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1603'. [ 199.430113][ T9932] syzkaller1: entered promiscuous mode [ 199.435682][ T9932] syzkaller1: entered allmulticast mode [ 199.894477][ T9938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1606'. [ 200.446717][ T5772] Bluetooth: hci0: command 0x0406 tx timeout [ 200.611444][ T9963] syzkaller1: entered promiscuous mode [ 200.623433][ T9963] syzkaller1: entered allmulticast mode [ 200.944922][ T9975] syzkaller0: entered promiscuous mode [ 200.953132][ T9975] syzkaller0: entered allmulticast mode [ 200.970793][ T9975] sch_fq: defrate 1 ignored. [ 201.798859][ T9995] syzkaller0: entered promiscuous mode [ 201.816894][ T9995] syzkaller0: entered allmulticast mode [ 201.874023][ T9995] sch_fq: defrate 1 ignored. [ 202.854333][ T24] block nbd0: Possible stuck request ffff888021978000: control (read@0,4096B). Runtime 30 seconds [ 203.853793][T10092] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1655'. [ 204.538643][T10113] syzkaller0: entered promiscuous mode [ 204.544171][T10113] syzkaller0: entered allmulticast mode [ 204.554139][T10113] sch_fq: defrate 1 ignored. [ 204.746224][T10119] syzkaller1: entered promiscuous mode [ 204.751781][T10119] syzkaller1: entered allmulticast mode [ 205.066185][T10134] netlink: 'syz.3.1672': attribute type 21 has an invalid length. [ 205.096903][T10134] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1672'. [ 205.483698][T10153] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 205.530372][T10153] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 205.557419][T10161] netlink: 'syz.0.1684': attribute type 21 has an invalid length. [ 205.572823][T10161] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1684'. [ 206.593923][T10202] tipc: Enabled bearer , priority 0 [ 206.613275][T10202] sch_fq: defrate 1 ignored. [ 206.634220][T10202] tipc: Resetting bearer [ 206.670856][T10200] tipc: Disabling bearer [ 206.691072][ T96] block nbd1: Possible stuck request ffff8880219a0000: control (read@0,1024B). Runtime 30 seconds [ 206.702818][ T96] block nbd1: Possible stuck request ffff8880219a0200: control (read@1024,1024B). Runtime 30 seconds [ 206.714246][ T96] block nbd1: Possible stuck request ffff8880219a0400: control (read@2048,1024B). Runtime 30 seconds [ 206.727800][ T96] block nbd1: Possible stuck request ffff8880219a0600: control (read@3072,1024B). Runtime 30 seconds [ 206.806747][T10208] geneve2: entered promiscuous mode [ 207.051017][T10218] netlink: 'syz.3.1710': attribute type 21 has an invalid length. [ 207.064359][T10218] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1710'. [ 207.250060][T10224] syzkaller1: entered promiscuous mode [ 207.255620][T10224] syzkaller1: entered allmulticast mode [ 207.268752][T10226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1714'. [ 207.379933][T10228] tipc: Enabled bearer , priority 0 [ 207.425192][T10228] sch_fq: defrate 1 ignored. [ 207.477072][T10228] tipc: Resetting bearer [ 207.529019][T10227] tipc: Disabling bearer [ 207.684820][T10241] syzkaller0: entered promiscuous mode [ 207.700978][T10241] syzkaller0: entered allmulticast mode [ 210.053843][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1736'. [ 210.213424][T10291] tipc: Enabled bearer , priority 0 [ 210.222950][T10291] syzkaller0: entered promiscuous mode [ 210.233618][T10291] syzkaller0: entered allmulticast mode [ 210.255444][T10291] sch_fq: defrate 1 ignored. [ 210.276891][T10289] syzkaller1: entered promiscuous mode [ 210.282416][T10289] syzkaller1: entered allmulticast mode [ 210.331570][T10290] tipc: Resetting bearer [ 210.377107][T10290] tipc: Disabling bearer [ 210.944740][T10320] syzkaller0: entered promiscuous mode [ 210.955034][T10320] syzkaller0: entered allmulticast mode [ 212.364389][T10386] tipc: Enabled bearer , priority 0 [ 212.425617][T10386] syzkaller0: entered promiscuous mode [ 212.431465][T10386] syzkaller0: entered allmulticast mode [ 212.456679][T10386] tipc: Resetting bearer [ 212.468927][T10385] tipc: Resetting bearer [ 212.491413][T10385] tipc: Disabling bearer [ 212.507035][T10380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1772'. [ 213.231027][T10416] tipc: Enabled bearer , priority 0 [ 213.286472][T10416] syzkaller0: entered promiscuous mode [ 213.292010][T10416] syzkaller0: entered allmulticast mode [ 213.330013][T10416] tipc: Resetting bearer [ 213.396633][T10424] syzkaller1: entered promiscuous mode [ 213.404924][T10424] syzkaller1: entered allmulticast mode [ 213.488461][T10415] tipc: Resetting bearer [ 213.538374][T10415] tipc: Disabling bearer [ 216.209131][T10526] syzkaller0: entered promiscuous mode [ 216.226161][T10526] syzkaller0: entered allmulticast mode [ 216.703040][T10550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1835'. [ 216.722960][T10550] vlan3: entered promiscuous mode [ 216.806471][T10553] tipc: Enabled bearer , priority 0 [ 216.814199][T10553] syzkaller0: entered promiscuous mode [ 216.820910][T10553] syzkaller0: entered allmulticast mode [ 216.839410][T10553] tipc: Resetting bearer [ 216.856173][T10552] tipc: Resetting bearer [ 216.900322][T10552] tipc: Disabling bearer [ 217.555804][T10581] batadv_slave_0: entered promiscuous mode [ 217.570192][T10581] netlink: 'syz.3.1849': attribute type 2 has an invalid length. [ 217.827068][T10587] tipc: Enabled bearer , priority 0 [ 217.844464][T10587] syzkaller0: entered promiscuous mode [ 217.850686][T10587] syzkaller0: entered allmulticast mode [ 217.934553][T10587] tipc: Resetting bearer [ 217.962664][T10586] tipc: Resetting bearer [ 217.998317][T10586] tipc: Disabling bearer [ 218.162700][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1857'. [ 219.088102][T10639] rdma_op ffff88801f3941f0 conn xmit_rdma 0000000000000000 [ 219.186389][T10646] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1877'. [ 220.056918][T10680] tipc: Enabled bearer , priority 0 [ 220.079010][T10683] vlan0: entered allmulticast mode [ 220.084279][T10683] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 220.132502][T10680] syzkaller0: entered promiscuous mode [ 220.138273][T10680] syzkaller0: entered allmulticast mode [ 220.152255][T10680] tipc: Resetting bearer [ 220.165347][T10678] tipc: Resetting bearer [ 220.193452][T10678] tipc: Disabling bearer [ 220.545320][T10707] rdma_op ffff888077fdc1f0 conn xmit_rdma 0000000000000000 [ 220.736813][T10713] netlink: 'syz.2.1904': attribute type 21 has an invalid length. [ 221.723977][T10758] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 221.861994][T10769] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1930'. [ 222.469203][T10791] tipc: Enabled bearer , priority 0 [ 222.488123][T10791] syzkaller0: entered promiscuous mode [ 222.494645][T10791] syzkaller0: entered allmulticast mode [ 222.515176][T10791] tipc: Resetting bearer [ 222.562950][T10788] tipc: Resetting bearer [ 222.632557][T10788] tipc: Disabling bearer [ 222.901260][T10813] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1948'. [ 223.122477][T10819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1951'. [ 223.145604][T10819] vlan3: entered promiscuous mode [ 223.272877][T10823] netlink: 'syz.1.1953': attribute type 21 has an invalid length. [ 223.485886][T10829] tipc: Enabled bearer , priority 0 [ 223.507297][T10829] syzkaller0: entered promiscuous mode [ 223.521780][T10829] syzkaller0: entered allmulticast mode [ 223.557239][T10829] tipc: Resetting bearer [ 223.596998][T10828] tipc: Resetting bearer [ 223.722837][T10828] tipc: Disabling bearer [ 227.168900][T10974] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2002'. [ 227.193557][T10974] vlan3: entered promiscuous mode [ 227.380896][T10984] netlink: 'syz.0.2007': attribute type 2 has an invalid length. [ 227.531886][T10990] tipc: Enabled bearer , priority 0 [ 227.541807][T10990] syzkaller0: entered promiscuous mode [ 227.553402][T10990] syzkaller0: entered allmulticast mode [ 227.573776][T10990] tipc: Resetting bearer [ 227.603234][T10989] tipc: Resetting bearer [ 227.657842][T10989] tipc: Disabling bearer [ 227.900267][T11000] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2014'. [ 227.941770][T11000] vlan0: entered promiscuous mode [ 227.952925][T11000] syz_tun: entered promiscuous mode [ 227.983455][T11004] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2016'. [ 228.521684][T11024] tipc: Enabled bearer , priority 0 [ 228.557868][T11016] tipc: Resetting bearer [ 228.682548][T11027] syzkaller0: entered promiscuous mode [ 228.688457][T11027] syzkaller0: entered allmulticast mode [ 228.715101][T11014] tipc: Resetting bearer [ 228.804035][T11014] tipc: Disabling bearer [ 229.389369][T11069] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2041'. [ 229.593687][T11078] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2045'. [ 229.657307][T11076] tipc: Enabled bearer , priority 0 [ 229.674173][T11076] syzkaller0: entered promiscuous mode [ 229.679986][T11076] syzkaller0: entered allmulticast mode [ 229.724676][T11080] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2046'. [ 229.749964][T11080] vlan2: entered promiscuous mode [ 229.755170][T11080] syz_tun: entered promiscuous mode [ 229.779716][T11076] tipc: Resetting bearer [ 229.796246][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.804991][T11076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.888296][T11075] tipc: Resetting bearer [ 229.919238][T11075] tipc: Disabling bearer [ 230.132921][T11091] batadv_slave_0: entered promiscuous mode [ 230.186925][T11091] batadv_slave_0: left promiscuous mode [ 230.446700][T11108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2056'. [ 230.462021][T11108] vlan0: entered promiscuous mode [ 230.658877][T11115] syzkaller0: entered promiscuous mode [ 230.672303][T11115] syzkaller0: entered allmulticast mode [ 231.082939][T11135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2066'. [ 231.175829][T11140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2068'. [ 231.199282][T11140] vlan2: entered promiscuous mode [ 231.204375][T11140] syz_tun: entered promiscuous mode [ 231.359703][T11148] Bluetooth: MGMT ver 1.22 [ 231.724930][T11168] syzkaller0: entered promiscuous mode [ 231.731332][T11168] syzkaller0: entered allmulticast mode [ 232.139957][T11181] caif0: Master is either lo or non-ether device [ 232.222441][T11183] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2085'. [ 232.358436][T11191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2089'. [ 232.368200][T11191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2089'. [ 232.382709][T11191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2089'. [ 232.421916][T11191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2089'. [ 232.789658][T11213] caif0: Master is either lo or non-ether device [ 232.935899][ T24] block nbd0: Possible stuck request ffff888021978000: control (read@0,4096B). Runtime 60 seconds [ 233.050279][T11230] batadv_slave_0: entered promiscuous mode [ 233.059778][T11230] batadv_slave_0: left promiscuous mode [ 233.273484][T11239] tipc: Enabled bearer , priority 0 [ 233.284236][T11239] syzkaller0: entered promiscuous mode [ 233.292080][T11239] syzkaller0: entered allmulticast mode [ 233.309240][T11239] tipc: Resetting bearer [ 233.321591][T11238] tipc: Resetting bearer [ 233.341267][T11238] tipc: Disabling bearer [ 233.352056][T11241] syzkaller0: entered promiscuous mode [ 233.357980][T11241] syzkaller0: entered allmulticast mode [ 233.505719][T11244] caif0: Master is either lo or non-ether device [ 233.937700][T11261] syzkaller0: entered promiscuous mode [ 233.953515][T11261] syzkaller0: entered allmulticast mode [ 234.926467][ T5772] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 234.936276][ T5772] Bluetooth: hci0: command 0x0406 tx timeout [ 235.079023][T11317] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2135'. [ 235.198162][T11292] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 235.696392][T11342] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2141'. [ 235.799659][T11349] tipc: Enabling of bearer rejected, failed to enable media [ 235.840622][T11347] tipc: Enabled bearer , priority 0 [ 235.872158][T11347] syzkaller0: entered promiscuous mode [ 235.906172][T11347] syzkaller0: entered allmulticast mode [ 235.937380][T11347] sch_fq: defrate 1 ignored. [ 235.988121][T11347] tipc: Resetting bearer [ 236.010805][T11346] tipc: Resetting bearer [ 236.104011][T11346] tipc: Disabling bearer [ 236.767390][ T96] block nbd1: Possible stuck request ffff8880219a0000: control (read@0,1024B). Runtime 60 seconds [ 236.778979][ T96] block nbd1: Possible stuck request ffff8880219a0200: control (read@1024,1024B). Runtime 60 seconds [ 236.790249][ T96] block nbd1: Possible stuck request ffff8880219a0400: control (read@2048,1024B). Runtime 60 seconds [ 236.801398][ T96] block nbd1: Possible stuck request ffff8880219a0600: control (read@3072,1024B). Runtime 60 seconds [ 236.960191][T11377] tipc: Enabled bearer , priority 0 [ 236.992966][T11377] syzkaller0: entered promiscuous mode [ 237.006801][ T5772] Bluetooth: hci0: command 0x0406 tx timeout [ 237.012978][T11377] syzkaller0: entered allmulticast mode [ 237.106607][T11387] tipc: Resetting bearer [ 237.120650][T11385] syzkaller0: entered promiscuous mode [ 237.128226][T11389] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2160'. [ 237.137709][T11385] syzkaller0: entered allmulticast mode [ 237.156340][T11375] tipc: Resetting bearer [ 237.204275][T11375] tipc: Disabling bearer [ 237.567698][T11410] tipc: Enabled bearer , priority 0 [ 237.575478][T11410] syzkaller0: entered promiscuous mode [ 237.593854][T11410] syzkaller0: entered allmulticast mode [ 237.612456][T11415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2171'. [ 237.687058][T11410] tipc: Resetting bearer [ 237.718922][T11409] tipc: Resetting bearer [ 237.775296][T11409] tipc: Disabling bearer [ 237.815540][T11422] tipc: Enabled bearer , priority 0 [ 237.833126][T11420] syzkaller0: entered promiscuous mode [ 237.854741][T11420] syzkaller0: entered allmulticast mode [ 237.926467][T11420] tipc: Resetting bearer [ 237.940410][T11427] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2176'. [ 237.953422][T11419] tipc: Resetting bearer [ 238.040591][T11419] tipc: Disabling bearer [ 238.073212][T11433] netlink: 'syz.3.2179': attribute type 10 has an invalid length. [ 238.087108][T11431] syzkaller0: entered promiscuous mode [ 238.092639][T11431] syzkaller0: entered allmulticast mode [ 238.220329][T11439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2181'. [ 238.483007][T11452] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2187'. [ 238.696758][T11458] tipc: Enabled bearer , priority 0 [ 238.713215][T11458] syzkaller0: entered promiscuous mode [ 238.720389][T11458] syzkaller0: entered allmulticast mode [ 238.739529][T11462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2192'. [ 238.764144][T11458] tipc: Resetting bearer [ 238.790411][T11457] tipc: Resetting bearer [ 238.868639][T11457] tipc: Disabling bearer [ 238.986043][T11466] syzkaller0: entered promiscuous mode [ 238.999340][T11466] syzkaller0: entered allmulticast mode [ 239.246173][ T5772] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 239.246296][ T5771] Bluetooth: hci0: command 0x0406 tx timeout [ 239.391461][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2202'. [ 239.575139][T11490] tipc: Enabled bearer , priority 0 [ 239.591534][T11490] syzkaller0: entered promiscuous mode [ 239.606110][T11490] syzkaller0: entered allmulticast mode [ 239.654926][T11490] tipc: Resetting bearer [ 239.679598][T11489] tipc: Resetting bearer [ 239.726524][T11489] tipc: Disabling bearer [ 239.975598][T11505] syzkaller0: entered promiscuous mode [ 239.996497][T11505] syzkaller0: entered allmulticast mode [ 240.344842][T11518] tipc: Enabled bearer , priority 0 [ 240.360909][T11518] syzkaller0: entered promiscuous mode [ 240.366921][T11518] syzkaller0: entered allmulticast mode [ 240.397806][T11524] caif0: Master is either lo or non-ether device [ 240.419640][T11518] tipc: Resetting bearer [ 240.430266][T11520] syzkaller0: entered promiscuous mode [ 240.435800][T11520] syzkaller0: entered allmulticast mode [ 240.461558][T11517] tipc: Resetting bearer [ 240.497244][T11517] tipc: Disabling bearer [ 240.864143][T11545] syzkaller0: entered promiscuous mode [ 240.871971][T11545] syzkaller0: entered allmulticast mode [ 241.106371][T11556] tipc: Enabled bearer , priority 0 [ 241.120323][T11556] syzkaller0: entered promiscuous mode [ 241.126391][T11556] syzkaller0: entered allmulticast mode [ 241.176701][T11556] tipc: Resetting bearer [ 241.200379][T11554] tipc: Resetting bearer [ 241.240038][T11554] tipc: Disabling bearer [ 241.278001][T11559] syzkaller0: entered promiscuous mode [ 241.283916][T11559] syzkaller0: entered allmulticast mode [ 241.598708][T11543] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 241.807197][T11573] syzkaller0: entered promiscuous mode [ 241.812724][T11573] syzkaller0: entered allmulticast mode [ 241.830233][T11576] tipc: Enabled bearer , priority 0 [ 241.863695][T11576] syzkaller0: entered promiscuous mode [ 241.887576][T11576] syzkaller0: entered allmulticast mode [ 241.968276][T11580] syzkaller0: entered promiscuous mode [ 241.973971][T11580] syzkaller0: entered allmulticast mode [ 242.045213][T11576] tipc: Resetting bearer [ 242.063971][T11575] tipc: Resetting bearer [ 242.108301][T11575] tipc: Disabling bearer [ 242.126024][T11584] caif0: Master is either lo or non-ether device [ 242.184368][T11586] tipc: Enabled bearer , priority 0 [ 242.208955][T11586] syzkaller0: entered promiscuous mode [ 242.246352][T11586] syzkaller0: entered allmulticast mode [ 242.272597][T11586] tipc: Resetting bearer [ 242.291270][T11585] tipc: Resetting bearer [ 242.346867][T11585] tipc: Disabling bearer [ 242.587656][T11603] syzkaller0: entered promiscuous mode [ 242.602939][T11603] syzkaller0: entered allmulticast mode [ 242.602958][T11605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2253'. [ 242.642459][T11604] syzkaller0: entered promiscuous mode [ 242.648927][T11604] syzkaller0: entered allmulticast mode [ 242.773349][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2257'. [ 242.928028][ T5771] Bluetooth: hci0: command 0x0406 tx timeout [ 242.938296][T11613] caif0: Master is either lo or non-ether device [ 243.289854][T11635] syzkaller0: entered promiscuous mode [ 243.295505][T11635] syzkaller0: entered allmulticast mode [ 243.350839][T11637] syzkaller0: entered promiscuous mode [ 243.356557][T11637] syzkaller0: entered allmulticast mode [ 246.346977][T11656] caif0: Master is either lo or non-ether device [ 246.355569][T11678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2281'. [ 246.445637][T11701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2292'. [ 247.243783][ T5772] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 247.255350][ T5772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 247.264633][ T5772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 247.286496][ T5772] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 247.295168][ T5772] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 247.302703][ T5772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 247.470083][T11729] syzkaller0: entered promiscuous mode [ 247.476882][T11729] syzkaller0: entered allmulticast mode [ 249.331658][ T5771] Bluetooth: hci2: command tx timeout [ 249.662869][T11750] caif0: Master is either lo or non-ether device [ 249.868100][T11767] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2311'. [ 249.956867][T11722] chnl_net:caif_netlink_parms(): no params data found [ 250.146819][T11722] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.154423][T11722] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.162361][T11722] bridge_slave_0: entered allmulticast mode [ 250.171002][T11722] bridge_slave_0: entered promiscuous mode [ 250.192924][T11722] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.204393][T11722] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.221673][T11722] bridge_slave_1: entered allmulticast mode [ 250.230829][T11722] bridge_slave_1: entered promiscuous mode [ 250.281501][T11722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.303430][T11722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.398702][T11722] team0: Port device team_slave_0 added [ 250.408344][T11722] team0: Port device team_slave_1 added [ 250.499201][T11722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.513107][T11722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.544471][T11722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.584179][T11722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.591738][T11722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.619488][T11722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.719670][T11722] hsr_slave_0: entered promiscuous mode [ 250.728778][T11722] hsr_slave_1: entered promiscuous mode [ 250.735411][T11722] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.743559][T11722] Cannot create hsr debugfs directory [ 250.789869][T11785] syzkaller0: entered promiscuous mode [ 250.795514][T11785] syzkaller0: entered allmulticast mode [ 251.406303][ T5771] Bluetooth: hci2: command tx timeout [ 251.524507][ T5771] Bluetooth: hci3: link tx timeout [ 251.530788][ T5771] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 252.701621][T11793] caif0: Master is either lo or non-ether device [ 252.723878][T11803] dvmrp6: entered allmulticast mode [ 253.219281][T11822] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2332'. [ 253.439802][T11826] caif0: Master is either lo or non-ether device [ 253.453797][T11722] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 253.463670][T11722] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 253.477166][T11722] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 253.486217][ T5772] Bluetooth: hci2: command tx timeout [ 253.493962][T11722] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 253.566163][ T5772] Bluetooth: hci3: command 0x0406 tx timeout [ 253.924847][T11722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.008064][T11722] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.069507][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.076739][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.088348][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.096630][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.134406][T11722] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 254.144994][T11722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.294940][T11858] syzkaller0: entered promiscuous mode [ 254.314173][T11858] syzkaller0: entered allmulticast mode [ 254.494723][T11865] caif0: Master is either lo or non-ether device [ 254.596781][T11722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.716710][T11722] veth0_vlan: entered promiscuous mode [ 254.750334][T11722] veth1_vlan: entered promiscuous mode [ 254.843580][T11722] veth0_macvtap: entered promiscuous mode [ 254.862257][T11722] veth1_macvtap: entered promiscuous mode [ 254.905198][T11722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.925554][T11722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.947723][T11722] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.963599][T11722] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.997866][T11722] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.014785][T11722] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.257683][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.295736][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.379314][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.414677][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.566452][ T5771] Bluetooth: hci2: command tx timeout [ 255.590562][T11894] syzkaller0: entered promiscuous mode [ 255.616537][T11894] syzkaller0: entered allmulticast mode [ 255.640841][T11896] caif0: Master is either lo or non-ether device [ 255.970884][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.547449][T11928] tipc: Started in network mode [ 256.552387][T11928] tipc: Node identity ee83e926fd2f, cluster identity 4711 [ 256.578997][T11928] tipc: Enabled bearer , priority 0 [ 256.677116][T11932] syzkaller0: entered promiscuous mode [ 256.682717][T11932] syzkaller0: entered allmulticast mode [ 256.835085][T11926] tipc: Resetting bearer [ 256.921243][T11926] tipc: Disabling bearer [ 256.968744][T11941] caif0: Master is either lo or non-ether device [ 257.251563][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.262415][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.281099][ T5772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.292962][ T5772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.301126][ T5772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 257.315230][ T5772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.777476][T11966] Bluetooth: MGMT ver 1.22 [ 257.841880][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.984594][T11974] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2371'. [ 258.059803][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.180125][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.217819][T11977] caif0: Master is either lo or non-ether device [ 258.400420][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.773945][T11949] chnl_net:caif_netlink_parms(): no params data found [ 259.037729][ T49] tipc: Left network mode [ 259.143227][T11949] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.158154][T11949] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.165631][T11949] bridge_slave_0: entered allmulticast mode [ 259.175104][T11949] bridge_slave_0: entered promiscuous mode [ 259.185544][T11949] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.193604][T11949] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.202730][T11949] bridge_slave_1: entered allmulticast mode [ 259.211308][T11949] bridge_slave_1: entered promiscuous mode [ 259.409994][ T5771] Bluetooth: hci1: command tx timeout [ 259.483506][T11949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.561291][T11949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.942336][T11949] team0: Port device team_slave_0 added [ 259.956878][T12037] caif0: Master is either lo or non-ether device [ 259.981196][T11949] team0: Port device team_slave_1 added [ 260.234456][T11949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.242859][T11949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.286400][T11949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.449233][T11949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.462612][T11949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.499876][T11949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.659568][ T49] dvmrp6 (unregistering): left allmulticast mode [ 260.679873][T11949] hsr_slave_0: entered promiscuous mode [ 260.686902][T11949] hsr_slave_1: entered promiscuous mode [ 260.694088][T11949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.703433][T11949] Cannot create hsr debugfs directory [ 261.081892][T12077] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2395'. [ 261.242775][ T49] hsr_slave_0: left promiscuous mode [ 261.260997][ T49] hsr_slave_1: left promiscuous mode [ 261.407009][ T49] veth1_macvtap: left promiscuous mode [ 261.426314][ T49] veth0_macvtap: left promiscuous mode [ 261.432049][ T49] veth1_vlan: left promiscuous mode [ 261.467168][ T49] veth0_vlan: left promiscuous mode [ 261.489033][ T5771] Bluetooth: hci1: command tx timeout [ 262.868564][ T49] bond0 (unregistering): Released all slaves [ 262.951142][T12088] caif0: Master is either lo or non-ether device [ 263.016343][ T24] block nbd0: Possible stuck request ffff888021978000: control (read@0,4096B). Runtime 90 seconds [ 263.567598][ T5771] Bluetooth: hci1: command tx timeout [ 263.778976][ T49] IPVS: stop unused estimator thread 0... [ 263.873532][T11949] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 263.933656][T11949] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 263.969622][T11949] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 264.017049][T11949] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 264.350194][T12139] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 264.621915][T11949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.664580][T11949] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.699148][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.706557][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.761509][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.768804][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.833711][T12151] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2413'. [ 265.479885][T11949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.646156][ T5771] Bluetooth: hci1: command tx timeout [ 265.651326][T11949] veth0_vlan: entered promiscuous mode [ 265.675610][T11949] veth1_vlan: entered promiscuous mode [ 265.757408][T11949] veth0_macvtap: entered promiscuous mode [ 265.778615][T11949] veth1_macvtap: entered promiscuous mode [ 265.863874][T11949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.886394][T11949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.907554][T11949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.931258][T12177] caif0: Master is either lo or non-ether device [ 265.950194][T11949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.962644][T11949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.989381][T11949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.043996][T11949] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.053212][T11949] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.063719][T11949] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.073273][T11949] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.250698][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.298444][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.439414][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.479585][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.847026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 266.847754][ T96] block nbd1: Possible stuck request ffff8880219a0000: control (read@0,1024B). Runtime 90 seconds [ 266.866575][ T96] block nbd1: Possible stuck request ffff8880219a0200: control (read@1024,1024B). Runtime 90 seconds [ 266.877621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 266.886235][ T96] block nbd1: Possible stuck request ffff8880219a0400: control (read@2048,1024B). Runtime 90 seconds [ 266.897564][ T96] block nbd1: Possible stuck request ffff8880219a0600: control (read@3072,1024B). Runtime 90 seconds [ 267.023714][T12192] kernel profiling enabled (shift: 9) [ 267.756760][T12206] tipc: Started in network mode [ 267.761686][T12206] tipc: Node identity 2e55876264b2, cluster identity 4711 [ 267.837152][T12206] tipc: Enabled bearer , priority 0 [ 267.846831][T12207] syzkaller0: entered promiscuous mode [ 267.883247][T12207] syzkaller0: entered allmulticast mode [ 268.049902][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 268.060321][ T5772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 268.068819][ T5772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 268.105817][ T5772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 268.114226][ T5772] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 268.123646][ T5772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 268.256219][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.289500][T12205] tipc: Resetting bearer [ 268.438271][T12205] tipc: Disabling bearer [ 268.598021][T12214] syzkaller0: entered promiscuous mode [ 268.603567][T12214] syzkaller0: entered allmulticast mode [ 268.950756][T12208] chnl_net:caif_netlink_parms(): no params data found [ 269.138747][T12208] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.147085][T12208] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.154435][T12208] bridge_slave_0: entered allmulticast mode [ 269.162061][T12208] bridge_slave_0: entered promiscuous mode [ 269.176591][T12208] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.187647][T12208] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.194905][T12208] bridge_slave_1: entered allmulticast mode [ 269.207137][T12208] bridge_slave_1: entered promiscuous mode [ 269.270621][T12240] tipc: Enabled bearer , priority 0 [ 269.294701][T12208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.308140][T12241] syzkaller0: entered promiscuous mode [ 269.313701][T12241] syzkaller0: entered allmulticast mode [ 269.325151][T12208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.362935][T12238] tipc: Resetting bearer [ 269.389192][T12238] tipc: Disabling bearer [ 269.420751][T12208] team0: Port device team_slave_0 added [ 269.444872][T12208] team0: Port device team_slave_1 added [ 269.479233][T12208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.496041][T12208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.523183][T12208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.553554][T12208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.563971][T12208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.591980][T12208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.742705][T12208] hsr_slave_0: entered promiscuous mode [ 269.783989][T12208] hsr_slave_1: entered promiscuous mode [ 269.795068][T12258] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 269.812969][T12208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.825420][T12208] Cannot create hsr debugfs directory [ 270.206441][ T5771] Bluetooth: hci3: command tx timeout [ 270.239275][T12208] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.516784][T12208] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.654281][T12208] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.877561][T12208] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.249275][T12208] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 271.275915][T12208] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 271.304492][T12208] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 271.323990][T12208] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 271.354089][T12290] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2465'. [ 271.502596][T12208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.534320][T12208] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.552508][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.559730][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.578238][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.585421][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.671982][T12305] tipc: Enabled bearer , priority 0 [ 271.685596][T12305] tipc: Resetting bearer [ 271.704654][T12304] tipc: Disabling bearer [ 271.879843][T12208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.994893][T12208] veth0_vlan: entered promiscuous mode [ 272.012595][T12208] veth1_vlan: entered promiscuous mode [ 272.052736][T12208] veth0_macvtap: entered promiscuous mode [ 272.101769][T12208] veth1_macvtap: entered promiscuous mode [ 272.152104][T12313] syzkaller0: entered promiscuous mode [ 272.157736][T12313] syzkaller0: entered allmulticast mode [ 272.169382][T12318] tipc: Enabled bearer , priority 0 [ 272.179151][T12208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.190942][T12208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.200930][T12208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.213063][T12208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.224618][T12208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.286300][ T5771] Bluetooth: hci3: command tx timeout [ 272.362949][T12321] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2474'. [ 272.573907][T12327] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2477'. [ 272.607735][ T5755] IPVS: starting estimator thread 0... [ 272.715579][T12328] IPVS: using max 19 ests per chain, 45600 per kthread [ 274.337430][T12319] tipc: Resetting bearer [ 274.345389][T12208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.356317][T12208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.366559][ T5771] Bluetooth: hci3: command tx timeout [ 274.372064][T12208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.382715][T12208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.393872][T12208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.411209][T12327] bridge_slave_0: left allmulticast mode [ 274.419987][T12327] bridge_slave_0: left promiscuous mode [ 274.425711][T12327] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.444593][T12327] bridge_slave_1: left allmulticast mode [ 274.450328][T12327] bridge_slave_1: left promiscuous mode [ 274.456664][T12327] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.470864][T12327] bond0: (slave bond_slave_0): Releasing backup interface [ 274.492394][T12327] bond0: (slave bond_slave_1): Releasing backup interface [ 274.532052][T12327] team0: Port device team_slave_0 removed [ 274.556492][T12327] team0: Port device team_slave_1 removed [ 274.570561][T12327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.582274][T12327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.591333][T12327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.601142][T12327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.664622][T12317] tipc: Disabling bearer [ 274.684058][ T5755] tipc: Node number set to 1594433322 [ 274.733348][T12208] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.752363][T12208] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.765230][T12208] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.776360][T12208] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.818974][T12337] tipc: Enabled bearer , priority 0 [ 274.875764][T12336] tipc: Resetting bearer [ 274.917427][T12335] tipc: Disabling bearer [ 275.061402][T12345] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2482'. [ 275.088497][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.113877][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.187175][ T3540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.211386][ T3540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.435661][T12353] caif0: Master is either lo or non-ether device [ 275.524989][T12362] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2488'. [ 275.581661][T12364] loop4: detected capacity change from 0 to 7 [ 275.596566][ T5836] IPVS: starting estimator thread 0... [ 275.613025][T12365] bridge_slave_0: left allmulticast mode [ 275.641418][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.647717][T12365] bridge_slave_0: left promiscuous mode [ 275.650880][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 275.681417][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.690641][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 275.711863][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.721124][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 275.727728][T12365] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.737963][T12366] IPVS: using max 20 ests per chain, 48000 per kthread [ 275.748464][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.757718][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 275.767780][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.777027][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 275.793511][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.802766][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 275.811862][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.818733][T12365] bridge_slave_1: left allmulticast mode [ 275.821076][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 275.839766][T12364] ldm_validate_partition_table(): Disk read failed. [ 275.845904][T12365] bridge_slave_1: left promiscuous mode [ 275.858550][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.867855][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 275.881491][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.890766][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 275.903028][T12365] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.914067][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.923306][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 275.937010][T12364] Dev loop4: unable to read RDB block 0 [ 275.943367][T12364] loop4: unable to read partition table [ 275.950509][T12364] loop4: partition table beyond EOD, truncated [ 275.957203][T12364] loop_reread_partitions: partition scan of loop4 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 275.979521][T12365] bond0: (slave bond_slave_0): Releasing backup interface [ 276.007014][ T5813] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 276.067496][T12365] bond0: (slave bond_slave_1): Releasing backup interface [ 276.189848][T12365] team0: Port device team_slave_0 removed [ 276.217562][ T5813] usb 4-1: unable to get BOS descriptor or descriptor too short [ 276.271479][ T5813] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 276.306439][T12365] team0: Port device team_slave_1 removed [ 276.323764][T12365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.324630][ T5813] usb 4-1: can't read configurations, error -71 [ 276.342266][T12365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.373607][T12365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.390600][T12365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.446606][ T5771] Bluetooth: hci3: command tx timeout [ 276.555171][T12384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2498'. [ 276.719729][T12389] caif0: Master is either lo or non-ether device [ 276.856043][ T5836] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 277.039503][T12407] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2504'. [ 277.064050][ T5836] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 277.080432][ T5836] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 277.114528][ T5836] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 277.156080][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.164130][ T5836] usb 2-1: Product: syz [ 277.176957][ T5836] usb 2-1: Manufacturer: syz [ 277.184358][ T5836] usb 2-1: SerialNumber: syz [ 277.218192][ T5836] usb 2-1: config 0 descriptor?? [ 277.228527][T12386] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 277.240528][T12409] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2506'. [ 277.244960][T12386] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 277.268189][ T5836] usb 2-1: ucan: probing device on interface #0 [ 277.274662][ T5836] usb 2-1: ucan: invalid EP count (1) [ 277.281850][ T5836] usb 2-1: ucan: probe failed; try to update the device firmware [ 277.306268][ T5755] IPVS: starting estimator thread 0... [ 277.332572][T12409] bridge_slave_0: left allmulticast mode [ 277.338551][T12409] bridge_slave_0: left promiscuous mode [ 277.344239][T12409] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.355908][T12409] bridge_slave_1: left allmulticast mode [ 277.368026][T12409] bridge_slave_1: left promiscuous mode [ 277.374001][T12409] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.390850][T12409] bond0: (slave bond_slave_0): Releasing backup interface [ 277.417234][T12412] IPVS: using max 18 ests per chain, 43200 per kthread [ 277.435310][T12409] bond0: (slave bond_slave_1): Releasing backup interface [ 277.584058][T12409] team0: Port device team_slave_0 removed [ 277.633981][T12409] team0: Port device team_slave_1 removed [ 277.663258][T12409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.678935][T12409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.694128][T12409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.707253][T12409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.803227][T12418] syzkaller0: entered promiscuous mode [ 277.810636][T12418] syzkaller0: entered allmulticast mode [ 278.187819][T12437] tipc: Enabled bearer , priority 0 [ 278.207581][T12437] tipc: Resetting bearer [ 278.234722][T12436] tipc: Disabling bearer [ 278.378747][T12445] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2516'. [ 278.894552][T12458] caif0: Master is either lo or non-ether device [ 279.456259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 279.532134][T12468] tipc: Started in network mode [ 279.551290][T12468] tipc: Node identity 5af8e3afea06, cluster identity 4711 [ 279.569939][T12468] tipc: Enabled bearer , priority 0 [ 279.579876][T12470] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2526'. [ 279.628028][T12468] tipc: Resetting bearer [ 279.639081][ T787] usb 2-1: USB disconnect, device number 2 [ 279.697098][T12467] tipc: Disabling bearer [ 279.780384][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 279.934650][T12476] caif0: Master is either lo or non-ether device [ 280.143491][T12485] syzkaller0: entered promiscuous mode [ 280.153243][T12485] syzkaller0: entered allmulticast mode [ 280.305269][T12491] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2536'. [ 280.595866][T12502] caif0: Master is either lo or non-ether device [ 281.037197][T12527] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2551'. [ 281.317203][T12531] syzkaller0: entered promiscuous mode [ 281.338912][T12531] syzkaller0: entered allmulticast mode [ 281.625591][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 281.639282][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 281.648827][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 281.667287][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 281.675838][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 281.684534][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 281.729288][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.973466][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.198627][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.408501][T12558] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2560'. [ 282.447566][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.607175][T12562] syzkaller0: entered promiscuous mode [ 282.612706][T12562] syzkaller0: entered allmulticast mode [ 282.739426][T12537] chnl_net:caif_netlink_parms(): no params data found [ 282.984182][ T49] tipc: Left network mode [ 283.300611][T12596] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2572'. [ 283.378364][T12537] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.390666][T12597] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 283.406205][T12537] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.416692][T12537] bridge_slave_0: entered allmulticast mode [ 283.424043][T12537] bridge_slave_0: entered promiscuous mode [ 283.506274][T12537] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.519121][T12537] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.528903][T12537] bridge_slave_1: entered allmulticast mode [ 283.539489][T12537] bridge_slave_1: entered promiscuous mode [ 283.732617][T12537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.742192][ T5772] Bluetooth: hci0: command tx timeout [ 283.762025][T12537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.029966][T12537] team0: Port device team_slave_0 added [ 284.056624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 284.064955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 284.212498][T12537] team0: Port device team_slave_1 added [ 284.219095][T12614] syzkaller0: entered promiscuous mode [ 284.245160][T12614] syzkaller0: entered allmulticast mode [ 284.484459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 284.688721][T12537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.706186][T12537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.732133][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.746451][T12537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.819912][T12537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.827619][T12537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.853622][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.860240][T12537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.009767][T12537] hsr_slave_0: entered promiscuous mode [ 285.070155][T12537] hsr_slave_1: entered promiscuous mode [ 285.077897][T12537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.123241][T12537] Cannot create hsr debugfs directory [ 285.597437][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 285.627238][ T49] hsr_slave_0: left promiscuous mode [ 285.655511][ T49] hsr_slave_1: left promiscuous mode [ 285.661391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 285.670387][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 285.806201][ T5772] Bluetooth: hci0: command tx timeout [ 285.829712][ T49] veth1_macvtap: left promiscuous mode [ 285.835255][ T49] veth0_macvtap: left promiscuous mode [ 285.871694][ T49] veth1_vlan: left promiscuous mode [ 285.888870][ T49] veth0_vlan: left promiscuous mode [ 287.459106][ T49] bond0 (unregistering): Released all slaves [ 287.887557][ T5772] Bluetooth: hci0: command tx timeout [ 287.916704][T12537] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 288.005447][T12537] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 288.066944][T12537] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 288.105211][T12537] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 288.341967][T12690] caif0: Master is either lo or non-ether device [ 288.349644][ T49] IPVS: stop unused estimator thread 0... [ 288.411876][T12537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.498620][T12537] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.520877][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.528109][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.573992][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.581268][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.946131][ T23] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 289.115095][T12537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.161959][ T23] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 289.180369][ T23] usb 2-1: config 0 has no interface number 0 [ 289.201391][ T23] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 289.235836][ T23] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 289.292229][T12537] veth0_vlan: entered promiscuous mode [ 289.301573][ T23] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 289.321994][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.332743][T12537] veth1_vlan: entered promiscuous mode [ 289.348011][ T23] usb 2-1: config 0 descriptor?? [ 289.369007][T12703] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 289.409826][ T23] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 289.444567][T12537] veth0_macvtap: entered promiscuous mode [ 289.481512][T12537] veth1_macvtap: entered promiscuous mode [ 289.607007][T12537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.640415][ T23] usb 2-1: USB disconnect, device number 3 [ 289.690153][T12537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.728318][T12537] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.762274][T12537] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.779407][T12537] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.793766][T12537] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.810829][T12738] caif0: Master is either lo or non-ether device [ 289.966336][ T5772] Bluetooth: hci0: command tx timeout [ 290.293318][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.374505][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.412748][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.448763][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.591106][T12730] QAT: failed to copy from user cfg_data. [ 291.064680][T12773] caif0: Master is either lo or non-ether device [ 291.788506][T12794] tipc: Enabled bearer , priority 0 [ 291.804168][T12794] tipc: Resetting bearer [ 291.866456][T12792] tipc: Disabling bearer [ 292.307792][T12810] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2622'. [ 292.547122][T12816] syzkaller0: entered promiscuous mode [ 292.558667][T12816] syzkaller0: entered allmulticast mode [ 292.878311][ T28] audit: type=1326 audit(1768259319.888:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12827 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8da78f749 code=0x7ffc0000 [ 292.936240][ T28] audit: type=1326 audit(1768259319.928:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12827 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8da78f749 code=0x7ffc0000 [ 292.974702][ T28] audit: type=1326 audit(1768259319.938:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12827 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc8da78f749 code=0x7ffc0000 [ 293.016702][T12832] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2633'. [ 293.043203][ T28] audit: type=1326 audit(1768259319.938:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12827 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8da78f749 code=0x7ffc0000 [ 293.077204][ T28] audit: type=1326 audit(1768259319.938:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12827 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc8da78f749 code=0x7ffc0000 [ 293.111349][ T24] block nbd0: Possible stuck request ffff888021978000: control (read@0,4096B). Runtime 120 seconds [ 293.137848][ T28] audit: type=1326 audit(1768259319.938:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12827 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8da78f749 code=0x7ffc0000 [ 293.166750][ T28] audit: type=1326 audit(1768259319.938:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12827 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8da78f749 code=0x7ffc0000 [ 293.195887][ T28] audit: type=1326 audit(1768259319.948:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12827 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc8da78f749 code=0x7ffc0000 [ 293.219139][ T28] audit: type=1326 audit(1768259319.948:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12827 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8da78f749 code=0x7ffc0000 [ 293.241835][ T28] audit: type=1326 audit(1768259319.948:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12827 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8da78f749 code=0x7ffc0000 [ 293.376421][ T5815] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 293.510028][T12849] syzkaller0: entered promiscuous mode [ 293.522109][T12849] syzkaller0: entered allmulticast mode [ 293.556083][ T5815] usb 2-1: Using ep0 maxpacket: 32 [ 293.563348][ T5815] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 293.580395][ T5815] usb 2-1: config 0 has no interface number 0 [ 293.594776][ T5815] usb 2-1: config 0 interface 12 has no altsetting 0 [ 293.608141][ T5815] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 293.630714][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.639427][ T5815] usb 2-1: Product: syz [ 293.643769][ T5815] usb 2-1: Manufacturer: syz [ 293.650142][ T5815] usb 2-1: SerialNumber: syz [ 293.658760][ T5815] usb 2-1: config 0 descriptor?? [ 293.941720][ T5815] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 293.970656][ T5815] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 293.994285][ T5815] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 294.013030][ T5815] f81534: probe of 2-1:0.12 failed with error -71 [ 294.074986][ T5815] usb 2-1: USB disconnect, device number 4 [ 294.137906][T12861] syzkaller0: entered promiscuous mode [ 294.143472][T12861] syzkaller0: entered allmulticast mode [ 294.683860][T12868] caif0: Master is either lo or non-ether device [ 294.824682][T12871] syzkaller0: entered promiscuous mode [ 294.857587][T12871] syzkaller0: entered allmulticast mode [ 294.961547][T12880] tipc: Started in network mode [ 294.974317][T12880] tipc: Node identity 52529101f0a7, cluster identity 4711 [ 294.983851][T12880] tipc: Enabled bearer , priority 0 [ 295.020069][T12880] tipc: Resetting bearer [ 295.098285][T12878] tipc: Disabling bearer [ 295.411617][T12905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2661'. [ 295.423633][T12905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2661'. [ 295.433429][T12907] syz.1.2662[12907]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 295.443221][ T5755] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 295.634077][ T5755] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.664190][ T5755] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.684868][ T5755] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 295.694733][ T5755] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 295.714784][ T5755] usb 3-1: Manufacturer: syz [ 295.722863][ T5755] usb 3-1: config 0 descriptor?? [ 295.996255][T12919] syzkaller0: entered promiscuous mode [ 296.001807][T12919] syzkaller0: entered allmulticast mode [ 296.161784][ T5755] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 296.192866][ T5755] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 296.216866][ T5755] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 296.224331][ T5755] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 296.228809][T12924] tipc: Enabled bearer , priority 0 [ 296.240107][ T5755] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 296.249465][ T5755] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 296.252122][T12924] tipc: Resetting bearer [ 296.256969][ T5755] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 296.290648][T12923] tipc: Disabling bearer [ 296.314239][ T5755] pyra 0003:1E7D:2CF6.0001: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 296.422541][T12928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2667'. [ 296.620171][T12932] syzkaller0: entered promiscuous mode [ 296.625680][T12932] syzkaller0: entered allmulticast mode [ 296.696080][ T5813] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 296.827200][ T5755] pyra 0003:1E7D:2CF6.0001: couldn't init struct pyra_device [ 296.863176][ T5755] pyra 0003:1E7D:2CF6.0001: couldn't install mouse [ 296.927042][ T96] block nbd1: Possible stuck request ffff8880219a0000: control (read@0,1024B). Runtime 120 seconds [ 296.940851][ T96] block nbd1: Possible stuck request ffff8880219a0200: control (read@1024,1024B). Runtime 120 seconds [ 296.952218][ T96] block nbd1: Possible stuck request ffff8880219a0400: control (read@2048,1024B). Runtime 120 seconds [ 296.963515][ T96] block nbd1: Possible stuck request ffff8880219a0600: control (read@3072,1024B). Runtime 120 seconds [ 296.974621][ T5813] usb 4-1: Using ep0 maxpacket: 32 [ 296.988030][ T5755] pyra: probe of 0003:1E7D:2CF6.0001 failed with error -71 [ 297.002993][ T5755] usb 3-1: USB disconnect, device number 2 [ 297.020435][ T5813] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 297.028709][ T5813] usb 4-1: config 0 has no interface number 0 [ 297.060732][ T5813] usb 4-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=84.8b [ 297.086152][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.094738][ T5813] usb 4-1: Product: syz [ 297.099982][ T5813] usb 4-1: Manufacturer: syz [ 297.106962][ T5813] usb 4-1: SerialNumber: syz [ 297.124344][ T5813] usb 4-1: config 0 descriptor?? [ 297.155046][ T5813] radio-si470x 4-1:0.85: could not find interrupt in endpoint [ 297.193329][ T5813] radio-si470x: probe of 4-1:0.85 failed with error -5 [ 297.222929][ T5813] usbhid 4-1:0.85: couldn't find an input interrupt endpoint [ 297.411248][T12938] fido_id[12938]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 297.649254][T12947] macvlan1: entered promiscuous mode [ 297.666113][T12947] macvlan1: left promiscuous mode [ 297.672338][T12950] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2677'. [ 298.006695][T12958] syzkaller0: entered promiscuous mode [ 298.028829][T12958] syzkaller0: entered allmulticast mode [ 298.536192][ T5813] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 298.726452][ T5813] usb 3-1: Using ep0 maxpacket: 32 [ 298.734671][ T5813] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 298.758701][ T5813] usb 3-1: config 0 has no interface number 0 [ 298.777667][ T5813] usb 3-1: config 0 interface 12 has no altsetting 0 [ 298.804947][ T5813] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 298.833701][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.849993][ T5813] usb 3-1: Product: syz [ 298.866278][ T5813] usb 3-1: Manufacturer: syz [ 298.877462][ T5813] usb 3-1: SerialNumber: syz [ 298.906095][ T5813] usb 3-1: config 0 descriptor?? [ 299.223839][T12974] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2687'. [ 299.478569][T12978] syzkaller0: entered promiscuous mode [ 299.487005][T12978] syzkaller0: entered allmulticast mode [ 299.635179][ T5853] usb 4-1: USB disconnect, device number 4 [ 300.077419][T12996] process 'syz.0.2694' launched './file1' with NULL argv: empty string added [ 300.189717][T12999] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2696'. [ 300.329095][T12996] overlayfs: missing 'lowerdir' [ 300.806298][ T787] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 300.997840][ T787] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 301.015245][ T787] usb 2-1: config 0 interface 0 has no altsetting 0 [ 301.025391][ T787] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 301.034767][ T787] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 301.043408][ T787] usb 2-1: Product: syz [ 301.051053][ T787] usb 2-1: Manufacturer: syz [ 301.057682][ T787] usb 2-1: SerialNumber: syz [ 301.065905][ T787] usb 2-1: config 0 descriptor?? [ 301.085096][ T787] usb 2-1: selecting invalid altsetting 0 [ 301.337316][T13004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.366561][T13004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.385506][T13004] syz_tun: entered promiscuous mode [ 301.398342][T13004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2698'. [ 301.410028][T13004] syz_tun: left promiscuous mode [ 301.435670][T13009] syzkaller0: entered promiscuous mode [ 301.439542][T13003] [ 301.442715][T13009] syzkaller0: entered allmulticast mode [ 301.443486][T13003] ============================================ [ 301.443494][T13003] WARNING: possible recursive locking detected [ 301.443509][T13003] syzkaller #0 Not tainted [ 301.465741][T13003] -------------------------------------------- [ 301.471898][T13003] syz.1.2698/13003 is trying to acquire lock: [ 301.477977][T13003] ffff888067688b30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_close+0x3c/0x4c0 [ 301.487487][T13003] [ 301.487487][T13003] but task is already holding lock: [ 301.494855][T13003] ffff888067688b30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_set_params+0x6d/0x2b50 [ 301.504889][T13003] [ 301.504889][T13003] other info that might help us debug this: [ 301.512962][T13003] Possible unsafe locking scenario: [ 301.512962][T13003] [ 301.520419][T13003] CPU0 [ 301.523700][T13003] ---- [ 301.526970][T13003] lock(&chip->mutex); [ 301.531169][T13003] lock(&chip->mutex); [ 301.535313][T13003] [ 301.535313][T13003] *** DEADLOCK *** [ 301.535313][T13003] [ 301.543439][T13003] May be due to missing lock nesting notation [ 301.543439][T13003] [ 301.551743][T13003] 3 locks held by syz.1.2698/13003: [ 301.556934][T13003] #0: ffff8880785084e0 (&runtime->oss.params_lock){+.+.}-{3:3}, at: snd_pcm_oss_sync+0x2a7/0xc20 [ 301.567551][T13003] #1: ffff888078508238 (&runtime->buffer_mutex){+.+.}-{3:3}, at: snd_pcm_hw_params+0x15a/0x1c50 [ 301.578071][T13003] #2: ffff888067688b30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_set_params+0x6d/0x2b50 [ 301.588587][T13003] [ 301.588587][T13003] stack backtrace: [ 301.594476][T13003] CPU: 1 PID: 13003 Comm: syz.1.2698 Not tainted syzkaller #0 [ 301.601920][T13003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 301.611997][T13003] Call Trace: [ 301.615279][T13003] [ 301.618202][T13003] dump_stack_lvl+0x16c/0x230 [ 301.622874][T13003] ? show_regs_print_info+0x20/0x20 [ 301.628071][T13003] ? print_deadlock_bug+0x435/0x5d0 [ 301.633260][T13003] __lock_acquire+0x5d40/0x7c80 [ 301.638109][T13003] ? verify_lock_unused+0x140/0x140 [ 301.643308][T13003] lock_acquire+0x197/0x410 [ 301.647802][T13003] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 301.653255][T13003] ? trace_contention_end+0x39/0xe0 [ 301.658447][T13003] ? __might_sleep+0xe0/0xe0 [ 301.663028][T13003] ? read_lock_is_recursive+0x20/0x20 [ 301.668391][T13003] ? wait_clear_urbs+0x184/0x390 [ 301.673325][T13003] ? snd_usb_endpoint_sync_pending_stop+0x30/0x30 [ 301.679732][T13003] __mutex_lock+0x129/0xcc0 [ 301.684229][T13003] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 301.689678][T13003] ? usb_free_coherent+0x5d/0x90 [ 301.694601][T13003] ? release_urbs+0x3fe/0x4a0 [ 301.699271][T13003] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 301.704722][T13003] ? mutex_lock_nested+0x20/0x20 [ 301.709655][T13003] ? snd_usb_endpoint_set_params+0x407/0x2b50 [ 301.715723][T13003] snd_usb_endpoint_close+0x3c/0x4c0 [ 301.721043][T13003] snd_usb_hw_params+0x1357/0x19c0 [ 301.726148][T13003] ? snd_usb_pcm_close+0x300/0x300 [ 301.731275][T13003] ? snd_pcm_lib_malloc_pages+0x2f0/0x690 [ 301.736991][T13003] snd_pcm_hw_params+0x835/0x1c50 [ 301.742074][T13003] ? snd_pcm_hw_param_first+0x6a0/0xb30 [ 301.747607][T13003] ? snd_pcm_forward+0x6d0/0x6d0 [ 301.752541][T13003] snd_pcm_oss_change_params_locked+0x2144/0x3d30 [ 301.758981][T13003] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 301.764097][T13003] ? ima_file_free+0x154/0x450 [ 301.768849][T13003] ? mutex_lock_nested+0x20/0x20 [ 301.773773][T13003] ? __fsnotify_parent+0x6cc/0x7c0 [ 301.778872][T13003] snd_pcm_oss_sync+0x363/0xc20 [ 301.783714][T13003] snd_pcm_oss_release+0x102/0x240 [ 301.788817][T13003] ? snd_pcm_oss_open+0x1b40/0x1b40 [ 301.794002][T13003] __fput+0x234/0x970 [ 301.798005][T13003] task_work_run+0x1ce/0x250 [ 301.802590][T13003] ? task_work_cancel+0x240/0x240 [ 301.807608][T13003] ? exit_to_user_mode_loop+0x3b/0x110 [ 301.813057][T13003] exit_to_user_mode_loop+0xe6/0x110 [ 301.818330][T13003] exit_to_user_mode_prepare+0xf6/0x180 [ 301.823873][T13003] syscall_exit_to_user_mode+0x1a/0x50 [ 301.829326][T13003] do_syscall_64+0x61/0xb0 [ 301.833730][T13003] ? clear_bhb_loop+0x40/0x90 [ 301.838407][T13003] ? clear_bhb_loop+0x40/0x90 [ 301.843070][T13003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.848967][T13003] RIP: 0033:0x7f64eef8f749 [ 301.853397][T13003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.873004][T13003] RSP: 002b:00007ffcbb812008 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 301.881412][T13003] RAX: 0000000000000000 RBX: 00000000000495c6 RCX: 00007f64eef8f749 [ 301.889378][T13003] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 301.897377][T13003] RBP: 00007f64ef1e7da0 R08: 0000000000000001 R09: 0000000ebb8122ff [ 301.905333][T13003] R10: 0000001b2d420000 R11: 0000000000000246 R12: 00007f64ef1e5fac [ 301.913308][T13003] R13: 00007f64ef1e5fa0 R14: ffffffffffffffff R15: 00007ffcbb812120 [ 301.921274][T13003] [ 302.544677][ T5813] f81534 3-1:0.12: f81534_get_register: reg: 1004 failed: -71 [ 302.552311][ T5813] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 302.559657][ T5813] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 302.568716][ T5813] f81534: probe of 3-1:0.12 failed with error -71 [ 302.577959][ T5813] usb 3-1: USB disconnect, device number 3 [ 306.066941][ T5140] udevd[5140]: worker [5758] /devices/virtual/block/nbd0 is taking a long time [ 306.077573][ T5140] udevd[5140]: worker [5779] /devices/virtual/block/nbd1 is taking a long time