last executing test programs: 2m58.108862818s ago: executing program 3 (id=2188): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@bridge_newneigh={0x24, 0x1c, 0x1, 0x70bd2a, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_PROTOCOL={0x5, 0xc, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0xcd9ad27008a939a2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 2m58.018294119s ago: executing program 3 (id=2193): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000100)={r2, r2, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f00000004c0)={@any, 0xff, 0x5, 0x3, 0x800, 0x5, "8f1dc444b2a813bcfd8e57d84dc7115eec5fbeda733e52756349fd8d2c4fda878f0e54599180e4543cba2ef65d539ad3cd097ab0f432e66f1466ba52b445f33927335186bbab00507d36e8b17e8b3af68ca2e0d945c90c64f86ad7be6544128410589a95916675cc8006a544210f380098271a4f83f018722836306112e8b25b"}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x2}, 0x8, 0x10, &(0x7f0000000bc0)={0x0, 0xffffffff}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r4, 0x702, 0x1b, 0x0, &(0x7f0000000c80)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29da", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)}, 0x811) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d80)={{r6}, &(0x7f0000000dc0), &(0x7f0000000e00), 0x2000000}, 0x20) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f72"], 0x58}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)={0x20, 0x0, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000001080)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001100)={&(0x7f0000001140)={0x34, r8, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x840) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000012c0)="394e8037857d431d200a0d987efe45365acae06b0560703cba41e9e6eb3236d39f7fbd21a0c57871f06ee8a0ccca7b31f488f5c91423f9973840ed68ad7db6ae203c8710ab16e7b7e7520c605595a12b5a", 0x51}], 0x1, 0x0, 0x90, 0x8800}}], 0x1, 0x4) ioctl(r0, 0x8916, &(0x7f0000001340)='wpan0\x00') 2m57.434386162s ago: executing program 3 (id=2198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40900, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x1, 0x3}, 0x20}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000480), 0x56) sendmsg$kcm(r6, &(0x7f00000004c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000580)=[{&(0x7f00000005c0)="27030200dc0f14000e0007000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 2m57.128678199s ago: executing program 3 (id=2203): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000100)={[{@noload}, {@quota}, {@lazytime}, {@errors_remount}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$eJzs3MtvG0UYAPBv10mgLxJKefQBBMqj4pE0aYEeuIBA4gASEhzKMSRpVeo2qAkSrSoICJUjqsQdcUTiL+BELwg4IXGFAzdUqUK9tHAyWnu3cYztNsbuQv37SevM7I4182V37JmdbAIYWpPZSxKxNSJ+iYjxRnZ9gcnGj6uXz87/efnsfBK12ht/JPVyVy6fnS+KFu/bkmf2pRHpJ0nsblPv8ukzx+eq1cVTeX565cS708unzzx97MTc0cWjiydnDx06eGDmuWdnn+lLnFlcV3Z9sLRn5ytvnX9t/vD5t3/4Oinib4mjTya7HXy0VutzdeXa1pRORkpsCBtSiYjsdI3W+/94VGLt5I3Hyx+X2jhgoGq5DodXa8AtLImyWwCUo/iiz+a/xXbzRh/lu/RCYwKUxX013xpHRiLNy4y2zG/7aTIiDq/+9UW2xWDuQwAArPNtNv55qt34L417msrdka+hTETEnRGxPSLuiogdEXF3RL3svRFx3wbrb10k+ef4J73YU2A3KBv/PZ+vba0f/xWjv5io5Llt9fhHkyPHqov7G8dWs5csP9Oljgsv/fxZp2PN479sy+ovxoJ5Oy6O3Lb+PQtzK3O9xtvq0kcRu0baxZ9cWwlIImJnROzqsY5jT3y1p9Ox68ffRR/WmWpfRjzeOP+r0RJ/Iem+Pjl9e1QX9083XRUtfvzp3Oud6v9X8fdBdv43t73+r8U/kTSv1y5vvI5zv37acU7T6/U/lrxZT4/l+96fW1k5NRMxlrzaaHTz/tm19xb5onwW/7697fv/9lj7TeyOiOwivj8iHoiIB/O2PxQRD0fE3i7xf//iI+/0Hv9gZfEvbOj8ryXGonVP+0Tl+HffrKt0YiPxZ+f/YD21L99T//xLusd1I+3q7WoGAACA/580IrZGkk5dS6fp1FTjb/h3xOa0urS88uSRpfdOLjSeEZiI0bS40zXedD90Jp/WF/nZlvyB/L7x55VN9fzU/FJ1oezgYcht6dD/M79Xym4dMHCe14Lhpf/D8NL/YXjp/zC82vT/TWW0A7j52n3/fxgRFx4roTHATdXS/y37wRAx/4fhpf/D8LqB/v/brfXvqoGIWN4U139IfrCJSpRZu0SPiUj/E82QGFCi7E8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg7AAD//9aZ7PU=") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x402, &(0x7f0000000080)={0x0}) ptrace$ARCH_GET_FS(0x1e, r4, &(0x7f00000000c0), 0x1003) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) quotactl_fd$Q_SYNC(r5, 0xffffffff80000101, 0x0, 0x0) symlinkat(&(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) 2m56.068381092s ago: executing program 3 (id=2210): socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x39, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000540), 0x56) sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f00000005c0)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000680)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2m55.466747574s ago: executing program 3 (id=2218): r0 = socket(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendto(r2, &(0x7f00000000c0)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000101010108000100e1", 0x31, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000982001f000000fe0000000000000008000f00fd000000", 0x24) 2m55.131415722s ago: executing program 32 (id=2218): r0 = socket(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendto(r2, &(0x7f00000000c0)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000101010108000100e1", 0x31, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000982001f000000fe0000000000000008000f00fd000000", 0x24) 9.755682598s ago: executing program 4 (id=2806): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x44, 0x0, 0x2, 0x5, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x20}}, {0x14, 0x4, @mcast1}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r0 = socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000480)=0x7) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000d40)={0x30be, 0x8008, 0x1, 0x3632}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000006c0)='asymmetric\x00', 0x0, &(0x7f0000000700), 0x0, r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x53340389580ec156) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89b0, &(0x7f0000000680)={'vlan0\x00', @random="1800002000"}) prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x2, &(0x7f0000000c80)) syz_open_dev$swradio(0x0, 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) 8.7696142s ago: executing program 2 (id=2807): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000010240)={0x0, 0x0}, &(0x7f0000010280)=0xc) mount$9p_fd(0x0, &(0x7f00000102c0)='.\x00', &(0x7f0000010300), 0x1000000, &(0x7f0000010340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid={'access', 0x3d, r4}}]}}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8005) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x10005, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe2}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80040, 0x54) fsetxattr$system_posix_acl(r5, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {0x1, 0x1}, [], {}, [{0x8, 0x2}], {0x10, 0x3}, {0x20, 0x1}}, 0x2c, 0x0) getxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00', &(0x7f0000000540)=""/213, 0xd5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) 8.76583834s ago: executing program 4 (id=2808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd28, 0x25dddbbd, {0x0, 0x0, 0x0, 0x0, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x2}, {0x9, 0xfffffff9, 0x0, 0x3}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xc50, 0x7, 0x2}, {{0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000480)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000500)=[{&(0x7f00000005c0)="f9f4b7d213f11a4e12deb790801bfd87", 0x10}], 0x1}, 0x20004014) 8.445123117s ago: executing program 0 (id=2810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001d00)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000680), 0x56) sendmsg$kcm(r7, &(0x7f00000006c0)={&(0x7f0000000700)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000780)=[{&(0x7f00000007c0)="27030200dc0f14000e0000000025c10200000002125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f0000000800)="02db0b9ef1cafdab", 0xa888}], 0x2}, 0x4005) 5.622409908s ago: executing program 2 (id=2813): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x404, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000001300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000003340)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f00000033c0)='./file0/file1\x00', 0x1000, 0x10, 0x0) syz_fuse_handle_req(r0, &(0x7f0000003400)="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", 0x2000, &(0x7f0000005400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000054c0)={0x90, 0x0, 0x7, {0x5, 0x200000003, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x100000003, 0x79, 0xfffffffe, 0x7, 0x1, 0xc000, 0x4, r2, r3, 0x17, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000005580)="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", 0x2000, &(0x7f0000007580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007640)={0x90, 0x0, 0xfffffffffffffffd, {0x5, 0x3, 0x0, 0x4000000000804, 0xfffffffd, 0x400, {0x4, 0x1000, 0x8, 0x100000000000, 0x2080000000000db4, 0x89, 0x8, 0x6, 0x6, 0xa000, 0xe44, r2, 0x0, 0x7, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000007700)='./file0/file1\x00', 0x880cc2, 0x20) 5.53828065s ago: executing program 0 (id=2814): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x4, 0x6361, 0x6, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000002c0), 0x56) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000340)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000400)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000440)="0b676ae7ce0aa301d6ff23b6557b3e02be56268cb67cc8df76c62092c9dc73bf02e2fbfd0d14f594db9a8faca2d1ee15bc4c2c588479eb0b462fed8714ae90e42c4c1477864b7c37d96279e5c380cb5f53b2983f7e1ec1fb074a8d4be7374be1c9b65b8587e435b5dc319cd5d25258ed81710608c0331449192c63736d71c7fbb72bd9ef8a3be726b464f445638ea32879fe12b88ebe8e141ba4b0efe8ae02c225a3c07cbd1c65a5f9a57267f88213743ea2ab323a2f8f1c50ecca7b6ee9a0fea79147e75e0eca42d7cf6d4d9a1e658e44cd8dc36a7b91cca77237962b41d760dd6e3aed631486ad0f453ef4501e60f923d992103a3845a67fca331897cac2bd51790acf2661efa41d90eda2061ce1aa53cbeab80229844f3954fe9ac6447af516907739ea3e6bbb832770194e6e655ec3a7ab80374b17059080", 0x13a}, {&(0x7f00000006c0)="acf730000094767e", 0x8}], 0x3}, 0x44081) 5.53471398s ago: executing program 2 (id=2815): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000004c0)="e4", 0x1, 0x4040040, &(0x7f0000000500)={0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./proc_mnt\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) lseek(r4, 0x800, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') r6 = fanotify_init(0x4, 0x101000) fanotify_mark(r6, 0x1, 0x40001019, r5, 0x0) write$binfmt_format(r5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_STORE(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="c2e9b43616"], 0x28) 5.483522261s ago: executing program 4 (id=2816): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x44, 0x0, 0x2, 0x5, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x20}}, {0x14, 0x4, @mcast1}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r0 = socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000480)=0x7) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000d40)={0x30be, 0x8008, 0x1, 0x3632}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000006c0)='asymmetric\x00', 0x0, &(0x7f0000000700), 0x0, r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x53340389580ec156) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b0, &(0x7f0000000680)={'vlan0\x00', @random="1800002000"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x48}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x2, &(0x7f0000000c80)) syz_open_dev$swradio(0x0, 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) 5.395513773s ago: executing program 1 (id=2817): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) accept4$inet6(r0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000880)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.654641249s ago: executing program 0 (id=2818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0xfff1}, {0x1, 0xfff1}, {0xfff2}}}, 0x24}}, 0x448c0) 4.535613001s ago: executing program 2 (id=2819): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='attr/current\x00') writev(r3, &(0x7f0000000500)=[{&(0x7f0000000540)='w', 0x1}], 0x1) 4.395574565s ago: executing program 1 (id=2820): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f0000000200)=[@request_death], 0x50, 0x0, &(0x7f0000000240)=""/80}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x10, 0x0, &(0x7f00000001c0)=[@register_looper, @dead_binder_done], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 4.312966217s ago: executing program 0 (id=2821): syz_usb_connect$uac3(0x5, 0x89, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201100100000010630780204000010203010902770003017f"], 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r0, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x40000005) 4.267337347s ago: executing program 1 (id=2822): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001d00)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000680), 0x56) sendmsg$kcm(r7, &(0x7f00000006c0)={&(0x7f0000000700)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000780)=[{&(0x7f00000007c0)="27030200dc0f14000e0000000025c10200000002125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f0000000800)="02db0b9ef1cafdab", 0xa888}], 0x2}, 0x4005) 4.031444002s ago: executing program 1 (id=2823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000010240), &(0x7f0000010280)=0xc) getgroups(0x2, &(0x7f00000103c0)=[0x0, 0xee00]) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8005) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x10005, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe2}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80040, 0x54) fsetxattr$system_posix_acl(r4, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {0x1, 0x1}, [], {}, [{0x8, 0x2}], {0x10, 0x3}, {0x20, 0x1}}, 0x2c, 0x0) getxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00', &(0x7f0000000540)=""/213, 0xd5) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b2a, &(0x7f0000000040)) 3.712865779s ago: executing program 4 (id=2824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd28, 0x25dddbbd, {0x0, 0x0, 0x0, 0x0, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x2}, {0x9, 0xfffffff9, 0x0, 0x3}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xc50, 0x7, 0x2}, {{0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000480)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000500)=[{&(0x7f00000005c0)="f9f4b7d213f11a4e12deb790801bfd87", 0x10}], 0x1}, 0x20004014) 2.997061925s ago: executing program 1 (id=2825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000680), 0x56) sendmsg$kcm(r7, &(0x7f00000006c0)={&(0x7f0000000700)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000780)=[{&(0x7f00000007c0)="27030200dc0f14000e0000000025c10200000002125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f0000000800)="02db0b9ef1cafdab", 0xa888}], 0x2}, 0x4005) 2.482335296s ago: executing program 2 (id=2826): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x4, 0x6361, 0x6, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000002c0), 0x56) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000340)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000400)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000440)="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", 0x13a}, {&(0x7f00000006c0)="acf730000094767e", 0x8}], 0x3}, 0x44081) 1.165862115s ago: executing program 0 (id=2827): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000004c0)="e4", 0x1, 0x4040040, &(0x7f0000000500)={0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./proc_mnt\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) lseek(r4, 0x800, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') r6 = fanotify_init(0x4, 0x101000) fanotify_mark(r6, 0x1, 0x40001019, r5, 0x0) write$binfmt_format(r5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_STORE(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="c2e9b43616"], 0x28) 240.727365ms ago: executing program 0 (id=2828): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) accept4$inet6(r0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000880)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 144.001417ms ago: executing program 4 (id=2829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0xfff1}, {0x1, 0xfff1}, {0xfff2}}}, 0x24}}, 0x448c0) 56.976769ms ago: executing program 1 (id=2830): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f0000000200)=[@clear_death], 0x50, 0x0, &(0x7f0000000240)=""/80}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x10, 0x0, &(0x7f00000001c0)=[@register_looper, @dead_binder_done], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 56.737109ms ago: executing program 2 (id=2831): shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) r0 = add_key(&(0x7f0000000000)='id_resolver\x00', 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(0x0, 0x80) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10, 0x84, 0x4}], 0x10}}], 0x2, 0xc88c4) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0xc3) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000005c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000006c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000700), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000740)=0x6) read$eventfd(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x7, 0x0) get_mempolicy(0x0, 0x0, 0x800, &(0x7f000031e000/0x4000)=nil, 0x2) 0s ago: executing program 4 (id=2832): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x202, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000d40)={0x48, &(0x7f0000000d80)}) prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x18}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000880)=0x7) r2 = syz_io_uring_setup(0x111, &(0x7f00000008c0)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)) io_uring_enter(r2, 0x66a8, 0x4000, 0xf, 0x0, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000a00)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000a40)={0xaa, 0x549}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000a80)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) kernel console output (not intermixed with test programs): ered allmulticast mode [ 117.154097][ T6861] syzkaller0: entered promiscuous mode [ 117.170162][ T6861] syzkaller0: entered allmulticast mode [ 117.958693][ T6004] wlan1: Trigger new scan to find an IBSS to join [ 118.868284][ T6902] syzkaller0: entered promiscuous mode [ 118.878236][ T6902] syzkaller0: entered allmulticast mode [ 118.934239][ T6900] syzkaller0: entered promiscuous mode [ 118.940302][ T6900] syzkaller0: entered allmulticast mode [ 118.972591][ T6904] syzkaller0: entered promiscuous mode [ 118.981611][ T6904] syzkaller0: entered allmulticast mode [ 119.970005][ T5999] wlan1: Creating new IBSS network, BSSID 36:81:fd:63:ef:19 [ 121.328459][ T6972] syzkaller0: entered promiscuous mode [ 121.335921][ T6972] syzkaller0: entered allmulticast mode [ 123.183308][ T7014] Illegal XDP return value 65535 on prog (id 61) dev syz_tun, expect packet loss! [ 123.389654][ T7023] syzkaller0: entered promiscuous mode [ 123.395186][ T7023] syzkaller0: entered allmulticast mode [ 123.603672][ T7027] syzkaller0: entered promiscuous mode [ 123.627772][ T7027] syzkaller0: entered allmulticast mode [ 125.410197][ T7079] syzkaller0: entered promiscuous mode [ 125.434510][ T7079] syzkaller0: entered allmulticast mode [ 125.895568][ T7111] syzkaller0: entered promiscuous mode [ 125.917272][ T7111] syzkaller0: entered allmulticast mode [ 125.938543][ T7117] netlink: 'syz.3.396': attribute type 1 has an invalid length. [ 126.366659][ T7137] (null): rxe_set_mtu: Set mtu to 4096 [ 128.634869][ T7137] lo speed is unknown, defaulting to 1000 [ 128.644865][ T7137] lo speed is unknown, defaulting to 1000 [ 128.658886][ T7140] netdevsim0: mtu less than device minimum [ 128.697400][ T7137] lo speed is unknown, defaulting to 1000 [ 128.845783][ T7168] syzkaller0: entered promiscuous mode [ 128.865868][ T7168] syzkaller0: entered allmulticast mode [ 128.912952][ T7168] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 128.914553][ T7137] infiniband syz0: set active [ 128.934291][ T23] lo speed is unknown, defaulting to 1000 [ 128.953168][ T7137] infiniband syz0: added lo [ 128.960326][ T7137] syz0: rxe_create_cq: returned err = -12 [ 128.972484][ T7137] infiniband syz0: Couldn't create ib_mad CQ [ 128.991858][ T7137] infiniband syz0: Couldn't open port 1 [ 129.070545][ T7137] RDS/IB: syz0: added [ 129.094094][ T7137] smc: adding ib device syz0 with port count 1 [ 129.118358][ T7137] smc: ib device syz0 port 1 has pnetid [ 129.134432][ T43] lo speed is unknown, defaulting to 1000 [ 129.152332][ T7137] lo speed is unknown, defaulting to 1000 [ 129.465614][ T7137] lo speed is unknown, defaulting to 1000 [ 129.752211][ T7199] syzkaller0: entered promiscuous mode [ 129.759281][ T7199] syzkaller0: entered allmulticast mode [ 129.766420][ T7137] lo speed is unknown, defaulting to 1000 [ 129.802174][ T7199] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 129.829837][ T7202] netlink: 'syz.0.421': attribute type 1 has an invalid length. [ 129.844134][ T7202] netlink: 84 bytes leftover after parsing attributes in process `syz.0.421'. [ 130.024861][ T7137] lo speed is unknown, defaulting to 1000 [ 130.314189][ T7216] syzkaller0: entered promiscuous mode [ 130.337404][ T7216] syzkaller0: entered allmulticast mode [ 130.658577][ T7229] syzkaller0: entered promiscuous mode [ 130.669273][ T7229] syzkaller0: entered allmulticast mode [ 130.725856][ T7229] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 130.852087][ T7239] netlink: 'syz.0.434': attribute type 1 has an invalid length. [ 130.874868][ T7239] netlink: 84 bytes leftover after parsing attributes in process `syz.0.434'. [ 130.905890][ T7243] ip_tables: iptables: counters copy to user failed while replacing table [ 131.634442][ T7266] netlink: 'syz.0.447': attribute type 1 has an invalid length. [ 131.673584][ T7266] netlink: 84 bytes leftover after parsing attributes in process `syz.0.447'. [ 131.716240][ T7268] syzkaller0: entered promiscuous mode [ 131.722624][ T7268] syzkaller0: entered allmulticast mode [ 131.763334][ T7274] netlink: 52 bytes leftover after parsing attributes in process `syz.1.449'. [ 132.107338][ T7291] syzkaller0: entered promiscuous mode [ 132.113000][ T7291] syzkaller0: entered allmulticast mode [ 132.224638][ T7297] netlink: 'syz.3.459': attribute type 1 has an invalid length. [ 132.234975][ T7297] netlink: 84 bytes leftover after parsing attributes in process `syz.3.459'. [ 132.323784][ T7301] syzkaller0: entered promiscuous mode [ 132.329889][ T7301] syzkaller0: entered allmulticast mode [ 132.657090][ T7314] syzkaller0: entered promiscuous mode [ 132.665195][ T7314] syzkaller0: entered allmulticast mode [ 132.876865][ T7327] sctp: [Deprecated]: syz.3.472 (pid 7327) Use of int in max_burst socket option deprecated. [ 132.876865][ T7327] Use struct sctp_assoc_value instead [ 132.934835][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.941645][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.644922][ T7365] syzkaller0: entered promiscuous mode [ 134.666012][ T7365] syzkaller0: entered allmulticast mode [ 136.475828][ T7372] syzkaller0: entered promiscuous mode [ 136.496880][ T7372] syzkaller0: entered allmulticast mode [ 138.365239][ T7438] vxcan3: entered allmulticast mode [ 138.847266][ T7459] syzkaller0: entered promiscuous mode [ 138.852802][ T7459] syzkaller0: entered allmulticast mode [ 138.936993][ T7465] netlink: 52 bytes leftover after parsing attributes in process `syz.2.512'. [ 140.615936][ T7503] netlink: 156 bytes leftover after parsing attributes in process `syz.2.520'. [ 140.723628][ T7507] netlink: 52 bytes leftover after parsing attributes in process `syz.2.521'. [ 140.778180][ T7506] syzkaller0: entered promiscuous mode [ 140.787719][ T7506] syzkaller0: entered allmulticast mode [ 141.434141][ T7540] netlink: 'syz.3.535': attribute type 1 has an invalid length. [ 141.459552][ T7540] netlink: 84 bytes leftover after parsing attributes in process `syz.3.535'. [ 142.013261][ T7567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.547'. [ 142.125475][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.550'. [ 142.576568][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.553'. [ 142.797936][ T7603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.558'. [ 142.810313][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.559'. [ 144.901571][ T7640] netlink: 24 bytes leftover after parsing attributes in process `syz.3.570'. [ 144.915327][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.571'. [ 145.320139][ T7669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.580'. [ 145.355436][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 145.488260][ T7677] syzkaller0: entered promiscuous mode [ 145.493804][ T7677] syzkaller0: entered allmulticast mode [ 146.403841][ T7691] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 146.914887][ T7688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.587'. [ 147.046723][ T7700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.591'. [ 147.201864][ T7705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.593'. [ 147.383444][ T7715] syzkaller0: entered promiscuous mode [ 147.390531][ T7715] syzkaller0: entered allmulticast mode [ 147.399818][ T7717] netlink: 40 bytes leftover after parsing attributes in process `syz.1.599'. [ 150.242909][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.606'. [ 150.792139][ T7768] sch_fq: defrate 3 ignored. [ 151.027376][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'. [ 151.147337][ T7777] netlink: 52 bytes leftover after parsing attributes in process `syz.0.619'. [ 155.564139][ T7853] syzkaller0: entered promiscuous mode [ 155.583684][ T7853] syzkaller0: entered allmulticast mode [ 155.678420][ T7858] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 158.253334][ T7888] netlink: 20 bytes leftover after parsing attributes in process `syz.1.659'. [ 158.478726][ T7887] syzkaller0: entered promiscuous mode [ 158.504809][ T7887] syzkaller0: entered allmulticast mode [ 159.423843][ T23] IPVS: starting estimator thread 0... [ 159.547322][ T7924] IPVS: using max 19 ests per chain, 45600 per kthread [ 160.898501][ T7938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.672'. [ 160.918581][ T7938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.672'. [ 161.194509][ T7956] syzkaller0: entered promiscuous mode [ 161.211672][ T7956] syzkaller0: entered allmulticast mode [ 161.331174][ T7962] syzkaller0: entered promiscuous mode [ 161.336839][ T7962] syzkaller0: entered allmulticast mode [ 161.596750][ T23] IPVS: starting estimator thread 0... [ 161.697354][ T7976] IPVS: using max 20 ests per chain, 48000 per kthread [ 161.819441][ T7989] syzkaller0: entered promiscuous mode [ 161.830441][ T7989] syzkaller0: entered allmulticast mode [ 162.275179][ T8012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.698'. [ 162.477387][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.703'. [ 162.895349][ T8046] syzkaller1: entered promiscuous mode [ 162.905569][ T8046] syzkaller1: entered allmulticast mode [ 162.989246][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.714'. [ 163.431965][ T8071] syzkaller0: entered promiscuous mode [ 163.441356][ T8071] syzkaller0: entered allmulticast mode [ 164.136887][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.725'. [ 166.417351][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.735'. [ 166.651350][ T8164] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 168.435240][ T8181] syzkaller0: entered promiscuous mode [ 168.440954][ T8181] syzkaller0: entered allmulticast mode [ 168.524911][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.748'. [ 168.883054][ T8225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.754'. [ 169.349011][ T8240] TC_ACT_REPEAT abuse ? [ 169.446145][ T8243] syzkaller0: entered promiscuous mode [ 169.470001][ T8243] syzkaller0: entered allmulticast mode [ 169.974381][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.767'. [ 170.526986][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.774'. [ 170.537196][ T8283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.774'. [ 171.173559][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.782'. [ 172.061822][ T8321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.791'. [ 172.077328][ T8321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.791'. [ 172.327534][ T8330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.794'. [ 172.416246][ T8330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.794'. [ 172.537953][ T8335] netlink: 76 bytes leftover after parsing attributes in process `syz.0.796'. [ 173.613690][ T8349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.802'. [ 174.980882][ T8408] __nla_validate_parse: 3 callbacks suppressed [ 174.980897][ T8408] netlink: 76 bytes leftover after parsing attributes in process `syz.3.826'. [ 175.260249][ T5807] IPVS: starting estimator thread 0... [ 175.367260][ T8420] IPVS: using max 18 ests per chain, 43200 per kthread [ 175.489186][ T8433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.835'. [ 175.531256][ T8433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.835'. [ 175.790082][ T8438] netlink: 76 bytes leftover after parsing attributes in process `syz.0.837'. [ 175.934600][ T8440] syzkaller0: entered promiscuous mode [ 175.945256][ T8440] syzkaller0: entered allmulticast mode [ 177.308899][ T8506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.855'. [ 177.391022][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.855'. [ 178.098001][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.864'. [ 178.538905][ T8551] tipc: Started in network mode [ 178.543978][ T8551] tipc: Node identity 8e8ef61f4f46, cluster identity 4711 [ 178.571544][ T8551] tipc: Enabled bearer , priority 0 [ 178.582020][ T8551] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 178.597073][ T8551] tipc: Resetting bearer [ 178.631726][ T8550] tipc: Disabling bearer [ 180.850889][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.886'. [ 181.993626][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.895'. [ 182.163933][ T8651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.897'. [ 182.912251][ T8694] netlink: 24 bytes leftover after parsing attributes in process `syz.2.909'. [ 183.157728][ T8704] Bluetooth: MGMT ver 1.22 [ 183.523505][ T8722] TC_ACT_REPEAT abuse ? [ 183.992437][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.924'. [ 184.084358][ T8754] tipc: Started in network mode [ 184.106644][ T8754] tipc: Node identity ce9d389f4f5e, cluster identity 4711 [ 184.125102][ T8754] tipc: Enabled bearer , priority 0 [ 184.137790][ T8754] syzkaller0: entered promiscuous mode [ 184.143384][ T8754] syzkaller0: entered allmulticast mode [ 184.166385][ T8754] tipc: Resetting bearer [ 184.185313][ T8752] tipc: Resetting bearer [ 184.248081][ T8752] tipc: Disabling bearer [ 184.315515][ T8762] TC_ACT_REPEAT abuse ? [ 184.598393][ T8775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.936'. [ 184.845243][ T8787] netlink: 24 bytes leftover after parsing attributes in process `syz.2.942'. [ 184.896070][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.942'. [ 185.134378][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.948'. [ 185.380744][ T8812] netlink: 24 bytes leftover after parsing attributes in process `syz.0.956'. [ 185.443159][ T8818] syzkaller0: entered promiscuous mode [ 185.448743][ T8818] syzkaller0: entered allmulticast mode [ 185.893961][ T8839] syzkaller0: entered promiscuous mode [ 185.903278][ T8839] syzkaller0: entered allmulticast mode [ 186.128781][ T8850] __nla_validate_parse: 3 callbacks suppressed [ 186.128797][ T8850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.971'. [ 186.190754][ T8852] netlink: 84 bytes leftover after parsing attributes in process `syz.2.972'. [ 186.425674][ T8866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.979'. [ 186.701496][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.983'. [ 186.750814][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.985'. [ 186.839895][ T8884] netlink: 84 bytes leftover after parsing attributes in process `syz.3.987'. [ 186.909305][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.989'. [ 187.007529][ T8893] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.089499][ T8896] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 187.208628][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.997'. [ 187.303428][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.996'. [ 187.365696][ T8911] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1000'. [ 188.148897][ T8953] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20002 [ 189.207143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 191.357613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 192.144810][ T9000] __nla_validate_parse: 7 callbacks suppressed [ 192.144825][ T9000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1033'. [ 192.545653][ T9009] syzkaller0: entered promiscuous mode [ 192.557323][ T9009] syzkaller0: entered allmulticast mode [ 194.141089][ T9024] tipc: Enabling of bearer rejected, failed to enable media [ 194.152526][ T9038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1038'. [ 194.385004][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.393991][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.410565][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1042'. [ 194.534134][ T9055] netlink: 'syz.2.1046': attribute type 1 has an invalid length. [ 194.645718][ T9059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1048'. [ 194.769186][ T9061] syzkaller0: entered promiscuous mode [ 194.774720][ T9061] syzkaller0: entered allmulticast mode [ 194.792128][ T9066] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1051'. [ 196.294435][ T9063] tipc: Started in network mode [ 196.299466][ T9063] tipc: Node identity ced10ce7a42a, cluster identity 4711 [ 196.306882][ T9063] tipc: Enabled bearer , priority 0 [ 196.314253][ T9070] syzkaller0: entered promiscuous mode [ 196.319841][ T9070] syzkaller0: entered allmulticast mode [ 196.329884][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1051'. [ 196.359421][ T9077] tipc: Resetting bearer [ 196.396016][ T9062] tipc: Resetting bearer [ 196.416326][ T9062] tipc: Disabling bearer [ 196.992574][ T9113] syzkaller0: entered promiscuous mode [ 197.014465][ T9113] syzkaller0: entered allmulticast mode [ 199.793965][ T9126] tipc: Enabling of bearer rejected, failed to enable media [ 199.955564][ T9157] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1073'. [ 201.558649][ T5087] Bluetooth: hci0: command 0x0406 tx timeout [ 201.562690][ T5776] Bluetooth: hci1: command 0x0406 tx timeout [ 201.565501][ T5087] Bluetooth: hci2: command 0x0406 tx timeout [ 202.139545][ T9185] tipc: Enabling of bearer rejected, failed to enable media [ 202.293694][ T9216] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1084'. [ 202.486324][ T9225] syzkaller0: entered promiscuous mode [ 202.508073][ T9225] syzkaller0: entered allmulticast mode [ 204.096718][ T9258] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1093'. [ 204.294243][ T9262] tipc: Enabled bearer , priority 0 [ 204.318172][ T9262] syzkaller0: entered promiscuous mode [ 204.324013][ T9262] syzkaller0: entered allmulticast mode [ 204.341592][ T9262] tipc: Resetting bearer [ 204.369470][ T9261] tipc: Resetting bearer [ 204.398734][ T9261] tipc: Disabling bearer [ 204.767653][ T9277] netlink: 468 bytes leftover after parsing attributes in process `syz.2.1102'. [ 204.814673][ T9284] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1105'. [ 205.018871][ T9279] syzkaller0: entered promiscuous mode [ 205.045161][ T9279] syzkaller0: entered allmulticast mode [ 205.088100][ T9291] netlink: 'syz.0.1106': attribute type 1 has an invalid length. [ 206.670395][ T9291] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1106'. [ 206.702173][ T9305] tipc: Enabling of bearer rejected, failed to enable media [ 207.346818][ T9342] syzkaller0: entered promiscuous mode [ 207.355388][ T9342] syzkaller0: entered allmulticast mode [ 208.603074][ T9344] tipc: Enabled bearer , priority 0 [ 208.618446][ T9350] syzkaller0: entered promiscuous mode [ 208.623986][ T9350] syzkaller0: entered allmulticast mode [ 208.634587][ T9353] netlink: 'syz.1.1121': attribute type 1 has an invalid length. [ 208.647780][ T9357] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1121'. [ 208.671543][ T9362] tipc: Resetting bearer [ 208.687413][ T9343] tipc: Resetting bearer [ 208.714747][ T9343] tipc: Disabling bearer [ 209.103626][ T9389] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1130'. [ 209.204259][ T9393] syzkaller0: entered promiscuous mode [ 209.210832][ T9393] syzkaller0: entered allmulticast mode [ 210.884167][ T9406] tipc: Enabling of bearer rejected, failed to enable media [ 211.075871][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1141'. [ 211.335075][ T9451] syzkaller0: entered promiscuous mode [ 211.344963][ T9451] syzkaller0: entered allmulticast mode [ 214.397590][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 216.216011][ T9490] tipc: Enabling of bearer rejected, failed to enable media [ 216.386750][ T9528] syzkaller0: entered promiscuous mode [ 216.394803][ T9528] syzkaller0: entered allmulticast mode [ 216.505846][ T9530] syzkaller0: entered promiscuous mode [ 216.526711][ T9530] syzkaller0: entered allmulticast mode [ 216.556721][ T9535] netlink: 'syz.0.1159': attribute type 1 has an invalid length. [ 218.045517][ T9532] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1159'. [ 218.650360][ T9592] netlink: 'syz.3.1175': attribute type 1 has an invalid length. [ 218.665184][ T9592] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1175'. [ 218.856675][ T9597] syzkaller0: entered promiscuous mode [ 218.889668][ T9597] syzkaller0: entered allmulticast mode [ 220.616758][ T9636] netlink: 'syz.2.1189': attribute type 1 has an invalid length. [ 220.632483][ T9636] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1189'. [ 220.977001][ T9652] syzkaller0: entered promiscuous mode [ 220.993592][ T9652] syzkaller0: entered allmulticast mode [ 222.792603][ T9695] netlink: 'syz.1.1203': attribute type 1 has an invalid length. [ 222.817043][ T9695] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1203'. [ 222.942783][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1207'. [ 223.082598][ T9713] syzkaller0: entered promiscuous mode [ 223.090974][ T9713] syzkaller0: entered allmulticast mode [ 224.663558][ T9736] netlink: 'syz.2.1217': attribute type 1 has an invalid length. [ 224.684640][ T9736] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1217'. [ 224.773459][ T9742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1219'. [ 225.122057][ T9758] syzkaller0: entered promiscuous mode [ 225.127799][ T9758] syzkaller0: entered allmulticast mode [ 226.588914][ T9759] netlink: 'syz.3.1224': attribute type 1 has an invalid length. [ 226.603761][ T9762] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1224'. [ 226.809122][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1231'. [ 226.838675][ T9788] netlink: 'syz.2.1230': attribute type 1 has an invalid length. [ 226.902406][ T9794] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1233'. [ 227.246555][ T9804] syzkaller0: entered promiscuous mode [ 227.277947][ T9804] syzkaller0: entered allmulticast mode [ 228.635887][ T9812] netlink: 'syz.3.1241': attribute type 1 has an invalid length. [ 228.654293][ T9815] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1241'. [ 228.822920][ T9828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1243'. [ 229.176678][ T9848] tipc: Cannot configure node identity twice [ 229.326412][ T9854] netlink: 'syz.2.1253': attribute type 1 has an invalid length. [ 229.346432][ T9854] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1253'. [ 229.870071][ T9887] netlink: 'syz.3.1270': attribute type 1 has an invalid length. [ 229.892976][ T9887] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1270'. [ 232.319234][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1290'. [ 232.401773][ T9934] syzkaller0: entered promiscuous mode [ 232.408489][ T9934] syzkaller0: entered allmulticast mode [ 234.212496][ T9973] syzkaller0: entered promiscuous mode [ 234.218134][ T9973] syzkaller0: entered allmulticast mode [ 236.300918][T10043] netlink: 'syz.3.1320': attribute type 1 has an invalid length. [ 236.351563][T10043] 8021q: adding VLAN 0 to HW filter on device bond1 [ 236.416624][T10043] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1320'. [ 236.681470][T10059] syzkaller0: entered promiscuous mode [ 236.688226][T10059] syzkaller0: entered allmulticast mode [ 237.173320][T10081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1336'. [ 237.201463][T10083] tipc: Started in network mode [ 237.206381][T10083] tipc: Node identity 1000001, cluster identity 4369 [ 237.227537][T10083] tipc: Node number set to 16777217 [ 237.261975][T10085] tipc: Cannot configure node identity twice [ 237.666596][T10109] tipc: Cannot configure node identity twice [ 237.675764][T10107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1347'. [ 237.922289][T10123] syzkaller0: entered promiscuous mode [ 237.929028][T10123] syzkaller0: entered allmulticast mode [ 238.206729][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1359'. [ 239.513762][T10176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1370'. [ 239.870535][T10203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1379'. [ 240.012434][T10212] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 240.028013][T10212] lo speed is unknown, defaulting to 1000 [ 240.035685][T10212] lo speed is unknown, defaulting to 1000 [ 240.043200][T10212] lo speed is unknown, defaulting to 1000 [ 240.084125][T10212] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 240.137396][T10212] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 240.171775][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1384'. [ 240.195449][T10212] lo speed is unknown, defaulting to 1000 [ 240.205486][T10212] lo speed is unknown, defaulting to 1000 [ 240.213997][T10212] lo speed is unknown, defaulting to 1000 [ 240.222072][T10212] lo speed is unknown, defaulting to 1000 [ 241.175161][T10259] syzkaller0: entered promiscuous mode [ 241.187221][T10259] syzkaller0: entered allmulticast mode [ 242.957262][T10293] syzkaller0: entered promiscuous mode [ 242.962791][T10293] syzkaller0: entered allmulticast mode [ 243.420425][T10313] syzkaller0: entered promiscuous mode [ 243.426591][T10313] syzkaller0: entered allmulticast mode [ 243.518667][T10319] tc action pedit offset must be on 32 bit boundaries [ 244.103979][T10345] lo speed is unknown, defaulting to 1000 [ 244.148064][T10350] netlink: 'syz.3.1429': attribute type 1 has an invalid length. [ 244.538338][T10352] syzkaller0: entered promiscuous mode [ 244.549986][T10352] syzkaller0: entered allmulticast mode [ 244.557491][T10345] lo speed is unknown, defaulting to 1000 [ 246.475116][T10364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1433'. [ 246.513615][T10370] tipc: Enabled bearer , priority 0 [ 246.577979][T10371] syzkaller0: entered promiscuous mode [ 246.583509][T10371] syzkaller0: entered allmulticast mode [ 246.658599][T10368] tipc: Resetting bearer [ 246.672370][T10367] tipc: Resetting bearer [ 246.693275][T10367] tipc: Disabling bearer [ 246.919586][T10392] sch_fq: defrate 3 ignored. [ 246.925757][T10392] syzkaller0: entered promiscuous mode [ 246.932734][T10392] syzkaller0: entered allmulticast mode [ 247.164328][T10403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1445'. [ 247.425498][T10409] tipc: Enabled bearer , priority 0 [ 247.433963][T10409] syzkaller0: entered promiscuous mode [ 247.439638][T10409] syzkaller0: entered allmulticast mode [ 247.485397][T10409] tipc: Resetting bearer [ 247.510545][T10408] tipc: Resetting bearer [ 247.533396][T10408] tipc: Disabling bearer [ 247.691069][T10416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1452'. [ 247.704646][T10416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1452'. [ 247.806170][T10418] sch_fq: defrate 3 ignored. [ 247.817341][T10418] syzkaller0: entered promiscuous mode [ 247.831847][T10418] syzkaller0: entered allmulticast mode [ 247.891708][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1455'. [ 248.145387][T10434] syzkaller0: entered promiscuous mode [ 248.153931][T10438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1462'. [ 248.166199][T10434] syzkaller0: entered allmulticast mode [ 248.174467][T10438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1462'. [ 248.336956][T10446] syzkaller0: entered promiscuous mode [ 248.342670][T10446] syzkaller0: entered allmulticast mode [ 248.414317][T10450] syzkaller0: entered promiscuous mode [ 248.421266][T10450] syzkaller0: entered allmulticast mode [ 248.648471][T10458] syzkaller0: entered promiscuous mode [ 248.654793][T10458] syzkaller0: entered allmulticast mode [ 248.743851][T10462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1472'. [ 248.754558][T10462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1472'. [ 249.183168][T10484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1482'. [ 249.378361][T10493] syzkaller0: entered promiscuous mode [ 249.384123][T10493] syzkaller0: entered allmulticast mode [ 249.843822][T10522] syzkaller0: entered promiscuous mode [ 249.857208][T10522] syzkaller0: entered allmulticast mode [ 249.936954][T10526] syzkaller0: entered promiscuous mode [ 249.942630][T10526] syzkaller0: entered allmulticast mode [ 250.456066][ T5778] Bluetooth: hci3: link tx timeout [ 250.464150][ T5778] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 250.473854][ T5781] Bluetooth: hci3: link tx timeout [ 250.479266][ T5781] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 250.487015][ T5781] Bluetooth: hci3: link tx timeout [ 250.492378][ T5781] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 250.741270][T10552] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 250.828921][T10552] xt_CT: No such helper "netbios-ns" [ 251.707994][T10538] __nla_validate_parse: 2 callbacks suppressed [ 251.708009][T10538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1503'. [ 251.723653][T10550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1507'. [ 251.735496][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1507'. [ 251.850343][T10556] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1509'. [ 252.156883][T10572] netlink: 'syz.1.1515': attribute type 1 has an invalid length. [ 252.191559][T10574] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1516'. [ 252.312595][T10580] netlink: 'syz.3.1518': attribute type 10 has an invalid length. [ 252.349305][T10580] team0: Device veth1_vlan failed to register rx_handler [ 252.393074][T10580] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1518'. [ 252.404380][T10580] syz.3.1518 (10580) used greatest stack depth: 19400 bytes left [ 252.413682][T10579] syzkaller0: entered promiscuous mode [ 252.424012][T10579] syzkaller0: entered allmulticast mode [ 252.518727][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 252.806253][T10601] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1526'. [ 252.831587][T10603] syzkaller0: entered promiscuous mode [ 252.857586][T10603] syzkaller0: entered allmulticast mode [ 252.967650][T10607] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1529'. [ 253.047861][T10610] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1529'. [ 253.118937][T10612] syzkaller0: entered promiscuous mode [ 253.124446][T10612] syzkaller0: entered allmulticast mode [ 253.471437][T10617] udevd[10617]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 253.536480][T10629] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1536'. [ 253.716220][T10633] syzkaller0: entered promiscuous mode [ 253.735049][T10633] syzkaller0: entered allmulticast mode [ 254.033842][T10654] netlink: 'syz.2.1548': attribute type 10 has an invalid length. [ 254.064208][T10654] team0: Port device netdevsim0 added [ 254.101453][T10653] syzkaller0: entered promiscuous mode [ 254.111670][T10653] syzkaller0: entered allmulticast mode [ 254.261738][T10662] netlink: 'syz.2.1548': attribute type 10 has an invalid length. [ 254.336756][T10662] team0: Port device netdevsim0 removed [ 254.371081][T10662] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 254.717438][T10676] syzkaller0: entered promiscuous mode [ 254.726984][T10676] syzkaller0: entered allmulticast mode [ 254.898597][T10692] lo: entered allmulticast mode [ 254.938889][T10691] lo: left allmulticast mode [ 255.009267][T10695] syzkaller0: entered promiscuous mode [ 255.025940][T10695] syzkaller0: entered allmulticast mode [ 255.469215][T10713] syzkaller0: entered promiscuous mode [ 255.474753][T10713] syzkaller0: entered allmulticast mode [ 255.641486][T10722] syzkaller0: entered promiscuous mode [ 255.647995][T10722] syzkaller0: entered allmulticast mode [ 255.805558][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.812296][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.948702][T10734] netlink: 'syz.3.1576': attribute type 10 has an invalid length. [ 255.974477][T10734] team0: Device netdevsim0 failed to register rx_handler [ 256.124626][T10741] syzkaller0: entered promiscuous mode [ 256.130492][T10741] syzkaller0: entered allmulticast mode [ 256.397255][T10749] syzkaller0: entered promiscuous mode [ 256.402870][T10749] syzkaller0: entered allmulticast mode [ 256.812489][T10763] __nla_validate_parse: 7 callbacks suppressed [ 256.812504][T10763] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1590'. [ 256.905405][T10766] syzkaller0: entered promiscuous mode [ 256.928937][T10766] syzkaller0: entered allmulticast mode [ 257.042494][T10771] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1594'. [ 257.066464][T10773] syzkaller0: entered promiscuous mode [ 257.074727][T10773] syzkaller0: entered allmulticast mode [ 257.084665][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1594'. [ 257.317867][T10783] netlink: 468 bytes leftover after parsing attributes in process `syz.2.1599'. [ 257.506069][T10789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.569049][T10793] syzkaller0: entered promiscuous mode [ 257.574671][T10793] syzkaller0: entered allmulticast mode [ 257.915502][T10809] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1611'. [ 258.144362][T10819] syzkaller0: entered promiscuous mode [ 258.150134][T10819] syzkaller0: entered allmulticast mode [ 258.316189][T10829] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1621'. [ 258.579302][T10842] block nbd3: not configured, cannot reconfigure [ 258.619012][T10845] syzkaller0: entered promiscuous mode [ 258.625004][T10845] syzkaller0: entered allmulticast mode [ 258.797063][T10854] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1632'. [ 258.917722][T10858] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1635'. [ 259.374823][T10880] syzkaller0: entered promiscuous mode [ 259.387231][T10880] syzkaller0: entered allmulticast mode [ 259.604463][T10888] netlink: 'syz.2.1649': attribute type 1 has an invalid length. [ 259.628002][T10890] syzkaller0: entered promiscuous mode [ 259.643769][T10890] syzkaller0: entered allmulticast mode [ 259.667352][T10888] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1649'. [ 259.900852][T10902] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1656'. [ 260.009480][T10906] syzkaller0: entered promiscuous mode [ 260.023399][T10906] syzkaller0: entered allmulticast mode [ 260.056908][T10911] syzkaller0: entered promiscuous mode [ 260.068885][T10911] syzkaller0: entered allmulticast mode [ 260.489602][T10928] batman_adv: batadv0: Adding interface: syzkaller0 [ 260.506809][T10928] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.565833][T10928] batman_adv: batadv0: Interface activated: syzkaller0 [ 260.576756][T10927] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 260.609875][T10927] batman_adv: batadv0: Removing interface: syzkaller0 [ 260.655584][T10932] syzkaller0: entered promiscuous mode [ 260.662338][T10932] syzkaller0: entered allmulticast mode [ 261.420044][T10972] syzkaller0: entered promiscuous mode [ 261.425574][T10972] syzkaller0: entered allmulticast mode [ 262.204541][T11008] syzkaller0: entered promiscuous mode [ 262.214212][T11008] syzkaller0: entered allmulticast mode [ 262.269969][T11011] syzkaller0: entered promiscuous mode [ 262.275621][T11011] syzkaller0: entered allmulticast mode [ 262.287279][T11012] syzkaller0: entered promiscuous mode [ 262.292786][T11012] syzkaller0: entered allmulticast mode [ 262.626667][T11025] batman_adv: batadv0: Adding interface: syzkaller0 [ 262.665933][T11025] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.698876][T11025] batman_adv: batadv0: Interface activated: syzkaller0 [ 262.772249][T11033] syzkaller0: entered promiscuous mode [ 262.777910][T11033] syzkaller0: entered allmulticast mode [ 262.786603][T11024] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 262.823412][T11024] batman_adv: batadv0: Removing interface: syzkaller0 [ 264.370812][T11058] tipc: Cannot configure node identity twice [ 264.447779][T11061] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 264.727679][T11074] TC_ACT_REPEAT abuse ? [ 264.895556][T11082] syzkaller0: entered promiscuous mode [ 264.901374][T11082] syzkaller0: entered allmulticast mode [ 264.934571][T11088] tc action pedit 'at' offset 2 out of bounds [ 264.941057][T11088] tc action pedit 'at' offset 2 out of bounds [ 264.947209][T11088] tc action pedit 'at' offset 2 out of bounds [ 264.953302][T11088] tc action pedit 'at' offset 2 out of bounds [ 264.959439][T11088] tc action pedit 'at' offset 2 out of bounds [ 264.965538][T11088] tc action pedit 'at' offset 2 out of bounds [ 264.971763][T11088] tc action pedit 'at' offset 2 out of bounds [ 264.977932][T11088] tc action pedit 'at' offset 2 out of bounds [ 264.984034][T11088] tc action pedit 'at' offset 2 out of bounds [ 264.990170][T11088] tc action pedit 'at' offset 2 out of bounds [ 264.996270][T11088] 0: reclassify loop, rule prio 0, protocol 800 [ 265.069900][T11093] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 266.806907][T11113] lo: entered allmulticast mode [ 266.835937][T11112] lo: left allmulticast mode [ 266.923647][T11120] tipc: Failed to remove unknown binding: 66,0,0/0:3523566275/3523566277 [ 266.941816][T11120] tipc: Failed to remove unknown binding: 66,0,0/0:3523566275/3523566276 [ 266.986774][T11120] tipc: Failed to remove unknown binding: 66,0,0/0:3523566275/3523566277 [ 267.007244][T11120] tipc: Failed to remove unknown binding: 66,0,0/0:3523566275/3523566276 [ 267.148918][T11133] Bluetooth: MGMT ver 1.22 [ 267.170936][T11128] syzkaller0: entered promiscuous mode [ 267.176487][T11128] syzkaller0: entered allmulticast mode [ 268.635422][T11153] lo: entered allmulticast mode [ 268.641152][T11153] lo: left allmulticast mode [ 268.851169][T11162] __nla_validate_parse: 2 callbacks suppressed [ 268.851184][T11162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1752'. [ 269.431988][T11180] syzkaller0: entered promiscuous mode [ 269.439115][T11180] syzkaller0: entered allmulticast mode [ 275.125194][T11280] syzkaller0: entered promiscuous mode [ 275.130889][T11280] syzkaller0: entered allmulticast mode [ 275.142991][T11280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.155448][T11280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.474703][T11303] netlink: 'syz.3.1802': attribute type 11 has an invalid length. [ 276.184075][T11327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1813'. [ 276.926962][T11360] syzkaller0: entered promiscuous mode [ 276.937413][T11360] syzkaller0: entered allmulticast mode [ 277.629819][T11391] syzkaller0: entered promiscuous mode [ 277.637456][T11391] syzkaller0: entered allmulticast mode [ 277.698890][T11393] syzkaller0: entered promiscuous mode [ 277.712133][T11393] syzkaller0: entered allmulticast mode [ 277.792970][T11397] syzkaller0: entered promiscuous mode [ 277.798881][T11397] syzkaller0: entered allmulticast mode [ 278.361245][T11423] syzkaller0: entered promiscuous mode [ 278.366886][T11423] syzkaller0: entered allmulticast mode [ 278.431332][T11427] syzkaller0: entered promiscuous mode [ 278.436859][T11427] syzkaller0: entered allmulticast mode [ 279.319565][T11449] syzkaller0: entered promiscuous mode [ 279.331974][T11449] syzkaller0: entered allmulticast mode [ 279.422365][T11453] tipc: New replicast peer: 255.255.255.255 [ 279.438363][T11453] tipc: Enabled bearer , priority 10 [ 279.633136][T11458] syzkaller0: entered promiscuous mode [ 279.647249][T11458] syzkaller0: entered allmulticast mode [ 279.950730][T11464] syzkaller0: entered promiscuous mode [ 279.956503][T11464] syzkaller0: entered allmulticast mode [ 281.643401][T11499] syzkaller0: entered promiscuous mode [ 281.656100][T11499] syzkaller0: entered allmulticast mode [ 281.841007][T11507] block nbd2: not configured, cannot reconfigure [ 281.949068][T11512] syzkaller0: entered promiscuous mode [ 281.954568][T11512] syzkaller0: entered allmulticast mode [ 283.512855][T11537] syzkaller0: entered promiscuous mode [ 283.527310][T11537] syzkaller0: entered allmulticast mode [ 285.401468][T11585] netlink: 404 bytes leftover after parsing attributes in process `syz.2.1900'. [ 285.448332][T11583] syzkaller0: entered promiscuous mode [ 285.453826][T11583] syzkaller0: entered allmulticast mode [ 285.900259][T11604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1900'. [ 287.031346][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1900'. [ 287.436362][T11625] syzkaller0: entered promiscuous mode [ 287.442299][T11625] syzkaller0: entered allmulticast mode [ 287.458139][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.555018][T11630] syzkaller0: entered promiscuous mode [ 287.561397][T11630] syzkaller0: entered allmulticast mode [ 287.752783][T11640] 0: reclassify loop, rule prio 0, protocol 03 [ 288.420873][T11656] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1916'. [ 288.445474][T11656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1916'. [ 289.512017][T11662] syzkaller0: entered promiscuous mode [ 289.518499][T11662] syzkaller0: entered allmulticast mode [ 289.525559][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.538035][T11662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.691457][T11638] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.846352][T11672] syzkaller0: entered promiscuous mode [ 290.857330][T11672] syzkaller0: entered allmulticast mode [ 291.592933][T11716] syzkaller0: entered promiscuous mode [ 291.598671][T11716] syzkaller0: entered allmulticast mode [ 292.494530][T11758] syzkaller0: entered promiscuous mode [ 292.500183][T11758] syzkaller0: entered allmulticast mode [ 294.193043][T11694] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 294.393572][T11796] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1962'. [ 294.601525][T11804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1967'. [ 295.243221][T11837] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1982'. [ 295.295925][T11837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1982'. [ 295.338523][T11841] syzkaller0: entered promiscuous mode [ 295.344279][T11841] syzkaller0: entered allmulticast mode [ 295.590469][T11855] infiniband syz0: set active [ 295.624121][ T23] lo speed is unknown, defaulting to 1000 [ 295.645152][T11853] netlink: 'syz.1.1990': attribute type 10 has an invalid length. [ 295.686884][T11853] team0: Port device netdevsim0 added [ 295.735075][T11858] netlink: 'syz.1.1990': attribute type 10 has an invalid length. [ 295.776976][T11858] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 295.810135][T11858] team0: Port device netdevsim0 removed [ 295.830245][T11858] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 296.102605][T11877] syzkaller0: entered promiscuous mode [ 296.109112][T11877] syzkaller0: entered allmulticast mode [ 296.312757][T11890] lo: entered allmulticast mode [ 296.321971][T11888] lo: left allmulticast mode [ 296.384966][T11893] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 296.719595][T11909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2014'. [ 296.792890][T11915] lo: entered allmulticast mode [ 296.800668][T11913] lo: left allmulticast mode [ 296.804694][T11917] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 297.167644][T11931] ip_tables: iptables: counters copy to user failed while replacing table [ 297.373879][T11942] lo: entered allmulticast mode [ 297.383139][T11941] lo: left allmulticast mode [ 297.466496][T11949] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 297.625431][T11956] syzkaller0: entered promiscuous mode [ 297.631764][T11956] syzkaller0: entered allmulticast mode [ 299.202342][T11983] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2035'. [ 299.322580][T11989] lo: entered allmulticast mode [ 299.342291][T11988] lo: left allmulticast mode [ 299.566943][T12005] syzkaller0: entered promiscuous mode [ 299.573133][T12005] syzkaller0: entered allmulticast mode [ 299.701554][T12010] syzkaller0: entered promiscuous mode [ 299.707236][T12010] syzkaller0: entered allmulticast mode [ 300.021312][T12023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2052'. [ 300.196331][T12031] syzkaller0: entered promiscuous mode [ 300.202076][T12031] syzkaller0: entered allmulticast mode [ 300.350649][T12033] syzkaller0: entered promiscuous mode [ 300.356180][T12033] syzkaller0: entered allmulticast mode [ 300.689407][T12050] syzkaller0: entered promiscuous mode [ 300.694946][T12050] syzkaller0: entered allmulticast mode [ 300.788848][T12057] syzkaller0: entered promiscuous mode [ 300.794352][T12057] syzkaller0: entered allmulticast mode [ 300.928830][T12060] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2069'. [ 301.000892][T12064] syzkaller0: entered promiscuous mode [ 301.006545][T12064] syzkaller0: entered allmulticast mode [ 301.377238][T12080] syzkaller0: entered promiscuous mode [ 301.382895][T12080] syzkaller0: entered allmulticast mode [ 301.393190][T12078] syzkaller0: entered promiscuous mode [ 301.403140][T12078] syzkaller0: entered allmulticast mode [ 303.190555][T12114] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2085'. [ 303.232992][T12114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2085'. [ 303.533210][T12128] syzkaller0: entered promiscuous mode [ 303.543386][T12128] syzkaller0: entered allmulticast mode [ 303.611835][T12127] syzkaller0: entered promiscuous mode [ 303.617485][T12127] syzkaller0: entered allmulticast mode [ 306.392623][T12140] syzkaller0: entered promiscuous mode [ 306.398201][T12140] syzkaller0: entered allmulticast mode [ 306.405676][T12141] syzkaller0: entered promiscuous mode [ 306.411301][T12141] syzkaller0: entered allmulticast mode [ 307.031451][T12187] TC_ACT_REPEAT abuse ? [ 307.085013][T12189] syzkaller0: entered promiscuous mode [ 307.091044][T12189] syzkaller0: entered allmulticast mode [ 307.762332][T12209] TC_ACT_REPEAT abuse ? [ 308.076822][T12232] syzkaller0: entered promiscuous mode [ 308.082527][T12232] syzkaller0: entered allmulticast mode [ 308.286991][T12238] TCP: TCP_TX_DELAY enabled [ 308.715149][T12256] syzkaller0: entered promiscuous mode [ 308.721014][T12256] syzkaller0: entered allmulticast mode [ 308.962388][T12270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2146'. [ 309.091729][T12275] syzkaller0: entered promiscuous mode [ 309.097574][T12275] syzkaller0: entered allmulticast mode [ 310.833067][T12307] syzkaller0: entered promiscuous mode [ 310.857287][T12307] syzkaller0: entered allmulticast mode [ 312.353650][T12317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2157'. [ 312.531562][T12339] syzkaller0: entered promiscuous mode [ 312.538102][T12339] syzkaller0: entered allmulticast mode [ 312.788884][T12353] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 312.828016][T12355] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2169'. [ 312.918373][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2169'. [ 313.065721][T12368] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2173'. [ 313.571368][T12386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2181'. [ 314.093398][T12405] syzkaller0: entered promiscuous mode [ 314.104117][T12405] syzkaller0: entered allmulticast mode [ 314.117695][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2191'. [ 314.191360][T12412] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 314.345444][T12414] netlink: 'syz.2.2194': attribute type 10 has an invalid length. [ 314.362237][T12414] bond0: (slave netdevsim0): Releasing backup interface [ 314.375469][T12414] team0: Port device netdevsim0 added [ 314.473394][T12414] netlink: 'syz.2.2194': attribute type 10 has an invalid length. [ 314.534423][T12414] team0: Port device netdevsim0 removed [ 314.571225][T12414] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 314.883600][T12442] syzkaller0: entered promiscuous mode [ 314.903068][T12442] syzkaller0: entered allmulticast mode [ 314.993518][T12448] lo: entered allmulticast mode [ 315.004876][T12447] lo: left allmulticast mode [ 315.010151][T12451] syz.3.2203[12451]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 315.035542][T12451] loop3: detected capacity change from 0 to 512 [ 315.117193][T12451] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 315.147169][T12451] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 315.192463][T12451] EXT4-fs (loop3): 1 truncate cleaned up [ 315.209800][T12451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.440676][T12460] netlink: 'syz.0.2207': attribute type 10 has an invalid length. [ 315.450622][T12460] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 315.478136][T12460] team0: Port device netdevsim0 added [ 315.500281][T12463] netlink: 'syz.0.2207': attribute type 10 has an invalid length. [ 315.583513][T12468] process 'syz.3.2203' launched './file0' with NULL argv: empty string added [ 315.902574][T12463] team0: Failed to send options change via netlink (err -105) [ 315.935732][T12463] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 315.963292][T12463] team0: Port device netdevsim0 removed [ 315.989874][T12463] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 316.022254][ T5777] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 316.067125][ T5777] EXT4-fs (loop3): Remounting filesystem read-only [ 316.453192][T12490] syzkaller0: entered promiscuous mode [ 316.462959][T12490] syzkaller0: entered allmulticast mode [ 316.565758][T12467] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.683929][ T5982] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.789181][ T5982] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.881878][ T5982] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.050529][ T5982] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.242220][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.257219][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.425899][ T5982] tipc: Left network mode [ 317.494838][T12515] syzkaller0: entered promiscuous mode [ 317.512021][T12515] syzkaller0: entered allmulticast mode [ 317.629706][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 317.643942][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 317.654093][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 317.674385][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 317.684787][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 317.692547][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 317.942362][T12519] lo speed is unknown, defaulting to 1000 [ 318.056743][T12535] syzkaller0: entered promiscuous mode [ 318.083307][T12535] syzkaller0: entered allmulticast mode [ 318.326683][T12539] syzkaller0: entered promiscuous mode [ 318.336241][T12539] syzkaller0: entered allmulticast mode [ 318.412474][T12519] lo speed is unknown, defaulting to 1000 [ 319.721527][ T5778] Bluetooth: hci3: command tx timeout [ 320.473082][T12582] syzkaller0: entered promiscuous mode [ 320.479145][T12582] syzkaller0: entered allmulticast mode [ 320.632134][T12594] overlayfs: failed to clone upperpath [ 321.797985][ T5778] Bluetooth: hci3: command tx timeout [ 322.516289][T12628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2238'. [ 322.682413][T12632] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2239'. [ 322.858956][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2239'. [ 323.048731][T12519] chnl_net:caif_netlink_parms(): no params data found [ 323.464873][ T5982] hsr_slave_0: left promiscuous mode [ 323.509372][ T5982] hsr_slave_1: left promiscuous mode [ 323.527397][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.534920][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.569639][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.584439][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.668435][ T5982] veth1_macvtap: left promiscuous mode [ 323.677865][ T5982] veth0_macvtap: left promiscuous mode [ 323.691211][ T5982] veth0_vlan: left promiscuous mode [ 323.878516][ T5778] Bluetooth: hci3: command tx timeout [ 323.963957][ T5982] infiniband syz0: set down [ 324.126855][ T5982] bond1 (unregistering): Released all slaves [ 324.606089][ T5982] team0 (unregistering): Port device team_slave_1 removed [ 324.645902][ T5982] team0 (unregistering): Port device team_slave_0 removed [ 324.683794][ T5982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.724653][ T5982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.972937][ T5982] bond0 (unregistering): Released all slaves [ 325.010497][ T1034] smc: removing ib device syz0 [ 325.241878][ T43] infiniband syz0: ib_query_port failed (-19) [ 325.957447][ T5778] Bluetooth: hci3: command tx timeout [ 327.241543][T12519] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.250194][T12519] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.258201][T12519] bridge_slave_0: entered allmulticast mode [ 327.265992][T12519] bridge_slave_0: entered promiscuous mode [ 327.346482][T12519] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.361912][T12519] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.387627][T12519] bridge_slave_1: entered allmulticast mode [ 327.408532][T12519] bridge_slave_1: entered promiscuous mode [ 327.520219][T12519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.555369][T12519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.603932][T12723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2254'. [ 327.655109][T12519] team0: Port device team_slave_0 added [ 327.701138][T12519] team0: Port device team_slave_1 added [ 327.804372][T12519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.830283][T12519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.866413][T12519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.924729][T12519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.932903][T12736] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 327.951123][T12519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.015058][T12519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.288355][T12745] syzkaller0: entered promiscuous mode [ 328.300382][T12745] syzkaller0: entered allmulticast mode [ 328.401630][T12519] hsr_slave_0: entered promiscuous mode [ 328.432019][T12519] hsr_slave_1: entered promiscuous mode [ 328.468303][T12519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.493267][T12519] Cannot create hsr debugfs directory [ 328.516742][ T5982] IPVS: stop unused estimator thread 0... [ 328.770017][T12750] syzkaller0: entered promiscuous mode [ 328.775629][T12750] syzkaller0: entered allmulticast mode [ 330.370958][T12775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2266'. [ 330.477821][T12780] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2268'. [ 330.525475][T12519] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 330.558599][T12519] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 330.584047][T12519] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 330.612124][T12519] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 330.734836][T12792] syzkaller0: entered promiscuous mode [ 330.747313][T12792] syzkaller0: entered allmulticast mode [ 330.854845][T12519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.923646][T12519] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.931350][T12800] syzkaller0: entered promiscuous mode [ 330.939030][T12800] syzkaller0: entered allmulticast mode [ 330.956049][ T6004] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.963246][ T6004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.983285][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.990516][ T5982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.143113][T12804] syzkaller0: entered promiscuous mode [ 331.149216][T12804] syzkaller0: entered allmulticast mode [ 331.256418][T12810] deleting an unspecified loop device is not supported. [ 331.382358][T12815] loop2: detected capacity change from 0 to 128 [ 331.435308][T12815] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 331.460676][T12815] ext4 filesystem being mounted at /533/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 331.475813][T12815] netlink: zone id is out of range [ 331.511637][ T5772] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 331.763030][T12519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.815074][T12835] syzkaller0: entered promiscuous mode [ 331.824882][T12835] syzkaller0: entered allmulticast mode [ 332.328486][T12853] 9pnet_fd: Insufficient options for proto=fd [ 332.928687][T12855] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2285'. [ 333.060590][T12859] syzkaller0: entered promiscuous mode [ 333.066129][T12859] syzkaller0: entered allmulticast mode [ 333.096116][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2285'. [ 333.219594][T12519] veth0_vlan: entered promiscuous mode [ 333.249560][T12519] veth1_vlan: entered promiscuous mode [ 333.325887][T12519] veth0_macvtap: entered promiscuous mode [ 333.346700][T12519] veth1_macvtap: entered promiscuous mode [ 333.372144][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.383005][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.420782][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.459118][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.485315][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.504769][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.516474][T12519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.553949][T12875] syzkaller0: entered promiscuous mode [ 333.564208][T12875] syzkaller0: entered allmulticast mode [ 333.579761][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.596939][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.612822][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.632466][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.646764][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.680191][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.701524][T12519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.783655][T12519] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.807474][T12519] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.816548][T12519] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.830045][T12519] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.013423][ T5982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.026271][ T5982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.156297][ T5997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.179296][T12896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2296'. [ 334.189837][ T5997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.266976][T12896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2296'. [ 334.335582][T12900] 9pnet_fd: Insufficient options for proto=fd [ 334.919653][ T6004] wlan1: Trigger new scan to find an IBSS to join [ 335.119540][T12906] netlink: 'syz.4.2220': attribute type 10 has an invalid length. [ 335.189094][T12906] team0: Port device netdevsim0 added [ 335.296850][T12906] netlink: 'syz.4.2220': attribute type 10 has an invalid length. [ 335.475629][T12906] team0: Port device netdevsim0 removed [ 335.971457][T12906] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 336.067720][T12911] syzkaller0: entered promiscuous mode [ 336.086958][T12911] syzkaller0: entered allmulticast mode [ 336.733491][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 336.743409][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 336.755353][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 336.766893][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 336.774585][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 336.781968][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.880987][T12949] ip6gretap0: entered promiscuous mode [ 336.920592][T12949] ip6gretap0: left promiscuous mode [ 337.009592][T12952] loop2: detected capacity change from 0 to 2048 [ 337.013972][ T5989] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.047471][T12941] lo speed is unknown, defaulting to 1000 [ 337.726471][ T5989] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.954811][ T5989] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.002736][T12963] netlink: 'syz.1.2310': attribute type 10 has an invalid length. [ 338.021232][T12963] bond0: (slave netdevsim0): Releasing backup interface [ 338.049858][T12963] team0: Port device netdevsim0 added [ 338.114587][ T5989] bond0: (slave netdevsim0): Releasing backup interface [ 338.129126][ T5989] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.183231][T12963] netlink: 'syz.1.2310': attribute type 10 has an invalid length. [ 338.203790][T12963] team0: Port device netdevsim0 removed [ 338.215435][T12963] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 338.226381][T12964] syzkaller0: entered promiscuous mode [ 338.236268][T12964] syzkaller0: entered allmulticast mode [ 338.581897][T12941] chnl_net:caif_netlink_parms(): no params data found [ 338.742783][T12986] syzkaller0: entered promiscuous mode [ 338.748729][T12986] syzkaller0: entered allmulticast mode [ 338.782244][T12993] syzkaller0: entered promiscuous mode [ 338.794817][T12993] syzkaller0: entered allmulticast mode [ 338.837992][ T5781] Bluetooth: hci0: command tx timeout [ 338.917442][ T6001] wlan1: Trigger new scan to find an IBSS to join [ 339.008448][T12999] 9pnet_fd: Insufficient options for proto=fd [ 340.919650][ T5781] Bluetooth: hci0: command tx timeout [ 340.920521][ T5997] wlan1: Creating new IBSS network, BSSID 2e:06:44:b1:14:5f [ 341.492014][ T5989] tipc: Left network mode [ 341.526927][T12941] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.534891][T12941] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.550077][T12941] bridge_slave_0: entered allmulticast mode [ 341.558373][T12941] bridge_slave_0: entered promiscuous mode [ 341.668319][T12941] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.697252][T12941] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.727361][T12941] bridge_slave_1: entered allmulticast mode [ 341.766546][T12941] bridge_slave_1: entered promiscuous mode [ 341.882819][T13049] Bluetooth: MGMT ver 1.22 [ 341.930560][T13050] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 341.951285][T13050] overlayfs: failed to set xattr on upper [ 341.952225][T12941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.957034][T13050] overlayfs: ...falling back to redirect_dir=nofollow. [ 341.967701][T13050] overlayfs: ...falling back to index=off. [ 342.003424][T13050] overlayfs: ...falling back to uuid=null. [ 342.026646][T12941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.137588][T12941] team0: Port device team_slave_0 added [ 342.143922][T13053] syzkaller0: entered promiscuous mode [ 342.157310][T13053] syzkaller0: entered allmulticast mode [ 342.204308][T12941] team0: Port device team_slave_1 added [ 342.454399][T12941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.475718][T12941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.534912][T12941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.613312][T13068] syzkaller0: entered promiscuous mode [ 342.619200][T13068] syzkaller0: entered allmulticast mode [ 342.660895][T12941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.669348][T12941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.714636][T12941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.002722][ T5781] Bluetooth: hci0: command tx timeout [ 344.360483][T13079] syzkaller0: entered promiscuous mode [ 344.365999][T13079] syzkaller0: entered allmulticast mode [ 345.077246][ T5781] Bluetooth: hci0: command tx timeout [ 345.722372][T13123] loop2: detected capacity change from 0 to 1024 [ 345.733162][T13123] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 345.760624][T13123] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 345.813297][T13123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.053724][T13123] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 346.067391][T13123] EXT4-fs (loop2): This should not happen!! Data will be lost [ 346.067391][T13123] [ 346.077753][T13123] EXT4-fs (loop2): Total free blocks count 0 [ 346.084331][T13123] EXT4-fs (loop2): Free/Dirty block details [ 346.098643][T13123] EXT4-fs (loop2): free_blocks=0 [ 346.103782][T13123] EXT4-fs (loop2): dirty_blocks=0 [ 346.109240][T13123] EXT4-fs (loop2): Block reservation details [ 346.115255][T13123] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 346.213070][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.777363][T12941] hsr_slave_0: entered promiscuous mode [ 346.796250][T12941] hsr_slave_1: entered promiscuous mode [ 346.817628][T12941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.825241][T12941] Cannot create hsr debugfs directory [ 347.106654][T13145] syzkaller0: entered promiscuous mode [ 347.125648][T13145] syzkaller0: entered allmulticast mode [ 348.093353][T13166] loop4: detected capacity change from 0 to 128 [ 348.190346][T13166] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 348.301251][T12519] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 348.462156][ T5989] hsr_slave_0: left promiscuous mode [ 348.470283][ T5989] hsr_slave_1: left promiscuous mode [ 348.476554][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.490160][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.503674][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.521466][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.531508][ T5989] bridge_slave_1: left allmulticast mode [ 348.543016][ T5989] bridge_slave_1: left promiscuous mode [ 348.552709][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.565500][ T5989] bridge_slave_0: left allmulticast mode [ 348.571755][ T5989] bridge_slave_0: left promiscuous mode [ 348.578334][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.601735][ T5989] veth1_macvtap: left promiscuous mode [ 348.610663][ T5989] veth0_macvtap: left promiscuous mode [ 348.616270][ T5989] veth1_vlan: left promiscuous mode [ 348.621822][ T5989] veth0_vlan: left promiscuous mode [ 349.206991][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 349.249847][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 349.306110][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.386268][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.752003][ T5989] bond0 (unregistering): Released all slaves [ 349.887495][T13169] syzkaller0: entered promiscuous mode [ 349.893182][T13169] syzkaller0: entered allmulticast mode [ 349.915078][T13183] syzkaller0: entered promiscuous mode [ 349.921159][T13183] syzkaller0: entered allmulticast mode [ 349.956027][ T5810] infiniband syz2: ib_query_port failed (-19) [ 351.884906][T13212] syzkaller0: entered promiscuous mode [ 351.905751][T13212] syzkaller0: entered allmulticast mode [ 352.072074][T13225] 9pnet_fd: Insufficient options for proto=fd [ 352.873980][T13233] loop4: detected capacity change from 0 to 128 [ 352.928869][T13233] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 352.949826][T13234] loop2: detected capacity change from 0 to 1024 [ 353.027854][T12519] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 353.062879][T13234] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 353.098104][T13234] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 353.153177][T13234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.184511][T13237] syzkaller0: entered promiscuous mode [ 353.190953][T13237] syzkaller0: entered allmulticast mode [ 353.285744][ T6004] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 353.318478][ T6004] EXT4-fs (loop2): This should not happen!! Data will be lost [ 353.318478][ T6004] [ 353.328757][ T6004] EXT4-fs (loop2): Total free blocks count 0 [ 353.334846][ T6004] EXT4-fs (loop2): Free/Dirty block details [ 353.348822][ T6004] EXT4-fs (loop2): free_blocks=0 [ 353.354222][ T6004] EXT4-fs (loop2): dirty_blocks=0 [ 353.366383][ T6004] EXT4-fs (loop2): Block reservation details [ 353.379454][ T6004] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 353.438466][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.223925][T13246] syzkaller0: entered promiscuous mode [ 355.232615][T13246] syzkaller0: entered allmulticast mode [ 355.351246][T12941] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 355.401184][T12941] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 355.442950][T12941] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 355.474219][T12941] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 355.796219][T13296] 9pnet_fd: Insufficient options for proto=fd [ 356.426946][T12941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.483028][T13303] loop2: detected capacity change from 0 to 128 [ 356.530862][T12941] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.581289][T13303] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 356.610490][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.617695][ T5997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.675663][ T1034] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.682814][ T1034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.802061][ T5772] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 356.835868][T13307] syzkaller0: entered promiscuous mode [ 356.872597][T13307] syzkaller0: entered allmulticast mode [ 357.059360][T13325] loop2: detected capacity change from 0 to 1024 [ 357.113092][T13325] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 357.160597][T13325] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 357.255381][T13325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.300661][T13329] syzkaller0: entered promiscuous mode [ 357.306602][T13329] syzkaller0: entered allmulticast mode [ 357.453955][ T6001] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 357.480356][ T6001] EXT4-fs (loop2): This should not happen!! Data will be lost [ 357.480356][ T6001] [ 357.495936][ T6001] EXT4-fs (loop2): Total free blocks count 0 [ 357.503718][ T6001] EXT4-fs (loop2): Free/Dirty block details [ 357.523841][ T6001] EXT4-fs (loop2): free_blocks=0 [ 357.539407][ T6001] EXT4-fs (loop2): dirty_blocks=0 [ 357.545988][ T6001] EXT4-fs (loop2): Block reservation details [ 357.556498][ T6001] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 357.580923][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.702339][T13347] loop2: detected capacity change from 0 to 512 [ 357.716097][T13347] EXT4-fs: Ignoring removed bh option [ 357.750794][T13347] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 357.828278][T13347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.860754][T13347] ext4 filesystem being mounted at /571/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.403080][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.555034][T13363] loop2: detected capacity change from 0 to 128 [ 358.606216][T13363] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 358.623535][T13363] ext4 filesystem being mounted at /572/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 358.704585][ T5772] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 359.730920][T12941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.852174][T12941] veth0_vlan: entered promiscuous mode [ 359.883538][T12941] veth1_vlan: entered promiscuous mode [ 359.969810][T12941] veth0_macvtap: entered promiscuous mode [ 360.000283][T12941] veth1_macvtap: entered promiscuous mode [ 360.086771][T12941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.145782][T12941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.317844][T12941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.364640][T12941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.405236][T12941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.470687][T13400] 9pnet_fd: Insufficient options for proto=fd [ 360.525343][T12941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.686230][T12941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.001171][T12941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.034179][T12941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.079456][T12941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.115341][T12941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.141316][T12941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.151852][T12941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.163433][T12941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.174788][T12941] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.183837][T12941] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.193863][T12941] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.223204][T12941] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.525750][ T5999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.549746][ T5999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.641518][ T5997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.672593][ T5997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.298473][T13453] 9pnet_fd: Insufficient options for proto=fd [ 363.048848][T13458] loop2: detected capacity change from 0 to 512 [ 363.140816][T13458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.167316][T13458] ext4 filesystem being mounted at /579/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.183123][T13434] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.190564][T13434] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.401973][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.892824][T13434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.955020][T13434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.284506][T13434] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.297096][T13434] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.306016][T13434] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.316977][T13434] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.193456][T13517] syzkaller0: entered promiscuous mode [ 365.205614][T13517] syzkaller0: entered allmulticast mode [ 365.276252][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 365.289500][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 365.299741][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.337220][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.345146][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 365.353283][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 367.311102][T13558] loop0: detected capacity change from 0 to 512 [ 367.373308][T13558] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.2410: iget: bad i_size value: 38620345925642 [ 367.405170][T13558] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.2410: couldn't read orphan inode 15 (err -117) [ 367.405830][ T5778] Bluetooth: hci2: command tx timeout [ 367.433775][T13558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.571437][T13562] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.2410: bg 0: block 5: invalid block bitmap [ 367.602478][T13562] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1208 with error 28 [ 367.616960][T13562] EXT4-fs (loop0): This should not happen!! Data will be lost [ 367.616960][T13562] [ 367.644751][T13562] EXT4-fs (loop0): Total free blocks count 0 [ 367.659493][T13562] EXT4-fs (loop0): Free/Dirty block details [ 367.674849][T13562] EXT4-fs (loop0): free_blocks=0 [ 367.682747][T13562] EXT4-fs (loop0): dirty_blocks=1208 [ 367.688843][T13562] EXT4-fs (loop0): Block reservation details [ 367.708377][T13562] EXT4-fs (loop0): i_reserved_data_blocks=1208 [ 367.881427][T13574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2413'. [ 367.974616][T12941] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.143234][T13522] chnl_net:caif_netlink_parms(): no params data found [ 368.318926][T13596] loop4: detected capacity change from 0 to 512 [ 368.326943][T13596] EXT4-fs: Ignoring removed bh option [ 368.363057][T13596] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 368.472754][T13596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.541511][T13600] syzkaller0: entered promiscuous mode [ 368.547268][T13600] syzkaller0: entered allmulticast mode [ 368.548903][T13596] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.569001][T13522] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.576297][T13522] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.584033][T13522] bridge_slave_0: entered allmulticast mode [ 368.592334][T13522] bridge_slave_0: entered promiscuous mode [ 369.244303][T12519] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.478546][ T5778] Bluetooth: hci2: command tx timeout [ 369.803685][T13619] 9pnet_fd: Insufficient options for proto=fd [ 371.276802][T13522] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.285964][T13522] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.294576][T13522] bridge_slave_1: entered allmulticast mode [ 371.306348][T13522] bridge_slave_1: entered promiscuous mode [ 371.379881][T13522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.410311][T13522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.503337][T13522] team0: Port device team_slave_0 added [ 371.521075][T13522] team0: Port device team_slave_1 added [ 371.642561][ T5778] Bluetooth: hci2: command tx timeout [ 371.668768][T13522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.698186][T13522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.829921][T13643] loop0: detected capacity change from 0 to 512 [ 372.060427][T13643] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.2428: corrupted in-inode xattr: invalid ea_ino [ 372.081036][T13643] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.2428: couldn't read orphan inode 15 (err -117) [ 372.108860][T13643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.208720][T13522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.276165][T13522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.283914][T13522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.338968][T13522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.436707][T12941] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.592014][T13522] hsr_slave_0: entered promiscuous mode [ 372.629424][T13659] loop0: detected capacity change from 0 to 256 [ 372.643057][T13522] hsr_slave_1: entered promiscuous mode [ 373.803114][ T5778] Bluetooth: hci2: command tx timeout [ 374.305982][T13685] syzkaller0: entered promiscuous mode [ 374.321248][T13685] syzkaller0: entered allmulticast mode [ 374.597060][ C1] sched: RT throttling activated [ 376.892982][T13522] bond0: (slave netdevsim0): Releasing backup interface [ 377.172832][T13522] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 377.256715][T13522] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 377.286502][T13522] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 377.322865][T13522] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 377.549951][T13522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.631244][T13522] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.705246][ T1034] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.712479][ T1034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.858098][ T1034] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.865344][ T1034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.045635][T13770] 9pnet_fd: Insufficient options for proto=fd [ 378.666544][T13522] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 378.682578][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.682671][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.755625][T13522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 378.855853][T13779] syzkaller0: entered promiscuous mode [ 378.866160][T13779] syzkaller0: entered allmulticast mode [ 379.285705][T13797] 0: reclassify loop, rule prio 0, protocol 03 [ 379.298773][T13522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.542234][T13522] veth0_vlan: entered promiscuous mode [ 379.569839][T13522] veth1_vlan: entered promiscuous mode [ 379.660884][T13522] veth0_macvtap: entered promiscuous mode [ 379.693836][T13522] veth1_macvtap: entered promiscuous mode [ 379.718784][T13522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.749299][T13522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.784785][T13522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.811386][T13522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.847195][T13522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.887198][T13522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.909547][T13522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.979408][T13821] 9pnet_fd: Insufficient options for proto=fd [ 380.596314][T13522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.646620][T13522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.677618][T13522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.710081][T13522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.750285][T13522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.777197][T13522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.799650][T13522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.813677][T13522] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.829733][T13522] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.838703][T13522] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.857233][T13522] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.097803][T13833] syzkaller0: entered promiscuous mode [ 381.116939][T13833] syzkaller0: entered allmulticast mode [ 383.521376][ T1034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.536822][ T5997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.576123][ T1034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.588081][ T5997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.681687][T13901] 9pnet_fd: Insufficient options for proto=fd [ 385.656859][T13928] loop1: detected capacity change from 0 to 512 [ 385.721397][T13928] EXT4-fs: Ignoring removed bh option [ 385.790542][T13928] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 385.952585][T13928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.967333][T13928] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.462463][T13522] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.660520][T13963] loop0: detected capacity change from 0 to 256 [ 386.695313][ T5781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 386.711960][ T5781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 386.749215][ T5781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 386.760339][ T5781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 386.828003][ T5781] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 386.836465][ T5781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 387.627526][T13976] loop1: detected capacity change from 0 to 512 [ 387.691265][T13976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.723841][T13976] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.356224][T13522] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.682994][T13984] syzkaller0: entered promiscuous mode [ 388.697358][T13984] syzkaller0: entered allmulticast mode [ 388.997225][ T5781] Bluetooth: hci4: command tx timeout [ 391.080626][ T5781] Bluetooth: hci4: command tx timeout [ 391.213724][T13964] chnl_net:caif_netlink_parms(): no params data found [ 391.416789][T14032] 9pnet_fd: Insufficient options for proto=fd [ 391.705366][T14031] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2486'. [ 391.806641][T13964] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.893867][T13964] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.012492][T13964] bridge_slave_0: entered allmulticast mode [ 392.028530][T13964] bridge_slave_0: entered promiscuous mode [ 392.044693][T13964] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.052267][T13964] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.077435][T13964] bridge_slave_1: entered allmulticast mode [ 392.094515][T13964] bridge_slave_1: entered promiscuous mode [ 392.153145][T14038] loop4: detected capacity change from 0 to 128 [ 392.190809][T14038] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 392.280907][T14038] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 392.293743][T13964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.325591][T13964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.365675][T13964] team0: Port device team_slave_0 added [ 392.378110][T14038] EXT4-fs error (device loop4): __ext4_find_entry:1698: inode #2: comm syz.4.2488: checksumming directory block 0 [ 392.447198][T13964] team0: Port device team_slave_1 added [ 392.750089][T14055] EXT4-fs error (device loop4): __ext4_find_entry:1698: inode #2: comm syz.4.2488: checksumming directory block 0 [ 393.043813][T13964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.087163][T13964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.187449][ T5781] Bluetooth: hci4: command tx timeout [ 393.255836][T13964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.268507][T12519] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 393.366667][T13964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.394084][T13964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.436619][T13964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.442512][T13964] hsr_slave_0: entered promiscuous mode [ 394.471148][T13964] hsr_slave_1: entered promiscuous mode [ 394.485581][T13964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.503625][T13964] Cannot create hsr debugfs directory [ 394.622386][T14087] loop0: detected capacity change from 0 to 512 [ 394.671554][T14087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.784918][T13964] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.900792][T13964] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.954621][T12941] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.247430][ T5781] Bluetooth: hci4: command tx timeout [ 395.627326][T13964] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.820919][T13964] bond0: (slave netdevsim0): Releasing backup interface [ 395.842005][T13964] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.192649][T13964] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 396.212155][T13964] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 396.276289][T13964] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 396.420813][T13964] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 397.106327][T13964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.138000][T13964] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.152349][T14124] FAULT_INJECTION: forcing a failure. [ 397.152349][T14124] name failslab, interval 1, probability 0, space 0, times 0 [ 397.172080][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.179285][ T5997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.192633][T14124] CPU: 0 PID: 14124 Comm: syz.0.2505 Not tainted syzkaller #0 [ 397.200148][T14124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 397.210247][T14124] Call Trace: [ 397.213565][T14124] [ 397.216531][T14124] dump_stack_lvl+0x18c/0x250 [ 397.221260][T14124] ? show_regs_print_info+0x20/0x20 [ 397.226483][T14124] ? load_image+0x420/0x420 [ 397.231027][T14124] ? __lock_acquire+0x7eb0/0x7eb0 [ 397.236080][T14124] ? mark_lock+0x94/0x320 [ 397.240451][T14124] should_fail_ex+0x394/0x4c0 [ 397.245175][T14124] should_failslab+0x9/0x20 [ 397.249716][T14124] slab_pre_alloc_hook+0x59/0x300 [ 397.254775][T14124] ? sctp_auth_shkey_create+0x7a/0x1a0 [ 397.260275][T14124] __kmem_cache_alloc_node+0x53/0x250 [ 397.265694][T14124] ? sctp_auth_shkey_create+0x7a/0x1a0 [ 397.271185][T14124] kmalloc_trace+0x2a/0xe0 [ 397.275641][T14124] sctp_auth_shkey_create+0x7a/0x1a0 [ 397.280972][T14124] sctp_endpoint_new+0x43f/0xa10 [ 397.285951][T14124] sctp_init_sock+0x95f/0x11f0 [ 397.291019][T14124] sctp_v6_init_sock+0x16/0x70 [ 397.295815][T14124] sctp_v6_create_accept_sk+0x41b/0x5b0 [ 397.301441][T14124] sctp_accept+0x545/0x6b0 [ 397.305904][T14124] ? sctp_disconnect+0x10/0x10 [ 397.310697][T14124] ? wake_bit_function+0x200/0x200 [ 397.315835][T14124] ? aa_sk_perm+0x83c/0x970 [ 397.320436][T14124] inet_accept+0x108/0x190 [ 397.324888][T14124] ? sock_rps_record_flow+0x3f0/0x3f0 [ 397.330294][T14124] ? bpf_lsm_socket_accept+0x9/0x10 [ 397.335533][T14124] do_accept+0x4d7/0x6b0 [ 397.338417][T14130] syzkaller0: entered promiscuous mode [ 397.339794][T14124] ? __ia32_sys_listen+0x70/0x70 [ 397.350241][T14124] __sys_accept4+0x9b/0x100 [ 397.354787][T14124] __x64_sys_accept4+0x9a/0xb0 [ 397.356948][T14130] syzkaller0: entered allmulticast mode [ 397.359574][T14124] do_syscall_64+0x55/0xb0 [ 397.359597][T14124] ? clear_bhb_loop+0x40/0x90 [ 397.359616][T14124] ? clear_bhb_loop+0x40/0x90 [ 397.359637][T14124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.359679][T14124] RIP: 0033:0x7f65b0d9e1d9 [ 397.389337][T14124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.408972][T14124] RSP: 002b:00007f65b1b94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 397.417422][T14124] RAX: ffffffffffffffda RBX: 00007f65b1025fa0 RCX: 00007f65b0d9e1d9 [ 397.425424][T14124] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 397.433427][T14124] RBP: 00007f65b0e35888 R08: 0000000000000000 R09: 0000000000000000 [ 397.438195][T13964] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 397.441402][T14124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.441418][T14124] R13: 00007f65b1026038 R14: 00007f65b1025fa0 R15: 00007ffe313a1768 [ 397.441450][T14124] [ 397.458338][T13964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.639849][ T1034] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.647090][ T1034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.256133][T13964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.503567][T13964] veth0_vlan: entered promiscuous mode [ 400.565304][T13964] veth1_vlan: entered promiscuous mode [ 400.665585][T13964] veth0_macvtap: entered promiscuous mode [ 400.695953][T13964] veth1_macvtap: entered promiscuous mode [ 400.761183][T13964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.807102][T13964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.836580][T13964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.857066][T13964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.885921][T13964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.913291][T13964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.928050][T13964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.944685][T13964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.959921][T13964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.999049][T13964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.016799][T13964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.029358][T13964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.045547][T13964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.072544][T13964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.189340][T13964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.241857][T13964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.255957][T13964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.274298][T13964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.566807][T13964] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.762221][T13964] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.897641][T13964] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.906397][T13964] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.278688][T14146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.286547][T14146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.392535][ T5982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.411580][ T5982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.301223][T14220] syzkaller0: entered promiscuous mode [ 403.306759][T14220] syzkaller0: entered allmulticast mode [ 403.953801][T14255] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 405.734367][T14304] netlink: 'syz.2.2549': attribute type 10 has an invalid length. [ 405.785699][T14304] team0: Port device netdevsim0 added [ 405.934797][T14304] netlink: 'syz.2.2549': attribute type 10 has an invalid length. [ 406.010740][T14304] team0: Port device netdevsim0 removed [ 406.032659][T14304] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 406.252010][T14317] syzkaller0: entered promiscuous mode [ 406.265527][T14317] syzkaller0: entered allmulticast mode [ 409.796878][T14373] syzkaller0: entered promiscuous mode [ 409.802529][T14373] syzkaller0: entered allmulticast mode [ 412.676400][T14389] FAULT_INJECTION: forcing a failure. [ 412.676400][T14389] name failslab, interval 1, probability 0, space 0, times 0 [ 412.690437][T14389] CPU: 0 PID: 14389 Comm: syz.1.2570 Not tainted syzkaller #0 [ 412.697930][T14389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 412.708096][T14389] Call Trace: [ 412.711388][T14389] [ 412.714327][T14389] dump_stack_lvl+0x18c/0x250 [ 412.719024][T14389] ? show_regs_print_info+0x20/0x20 [ 412.724256][T14389] ? load_image+0x420/0x420 [ 412.728794][T14389] should_fail_ex+0x394/0x4c0 [ 412.733497][T14389] should_failslab+0x9/0x20 [ 412.738014][T14389] slab_pre_alloc_hook+0x59/0x300 [ 412.743046][T14389] kmem_cache_alloc_node+0x5e/0x310 [ 412.748264][T14389] ? __alloc_skb+0x103/0x2c0 [ 412.752875][T14389] __alloc_skb+0x103/0x2c0 [ 412.757308][T14389] fdb_notify+0xa6/0x160 [ 412.761564][T14389] fdb_add_local+0x14e/0x240 [ 412.766160][T14389] ? br_fdb_add_local+0x2a/0x50 [ 412.771011][T14389] br_fdb_add_local+0x3a/0x50 [ 412.775696][T14389] __vlan_add+0x616/0x2630 [ 412.780117][T14389] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 412.786058][T14389] ? br_vlan_add+0x201/0x940 [ 412.790652][T14389] ? br_vlan_add+0x940/0x940 [ 412.795248][T14389] br_vlan_add+0x41d/0x940 [ 412.799661][T14389] ? vlan_vid_add+0x551/0x750 [ 412.804343][T14389] __vlan_add+0x434/0x2630 [ 412.808774][T14389] ? br_vlan_add+0x940/0x940 [ 412.813373][T14389] nbp_vlan_add+0x262/0x3c0 [ 412.817880][T14389] br_vlan_info+0x101/0x460 [ 412.822393][T14389] ? br_process_vlan_info+0x8a0/0x8a0 [ 412.827775][T14389] br_process_vlan_info+0x316/0x8a0 [ 412.832995][T14389] ? br_getlink+0x180/0x180 [ 412.837532][T14389] br_vlan_rtm_process+0xcb3/0x11a0 [ 412.842773][T14389] ? br_vlan_link_state_change_fn+0x100/0x100 [ 412.848870][T14389] ? br_vlan_link_state_change_fn+0x100/0x100 [ 412.854945][T14389] rtnetlink_rcv_msg+0x843/0xf90 [ 412.859988][T14389] ? rtnetlink_rcv_msg+0x220/0xf90 [ 412.865111][T14389] ? rtnetlink_bind+0x80/0x80 [ 412.869814][T14389] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 412.875813][T14389] ? lock_chain_count+0x20/0x20 [ 412.880672][T14389] ? __local_bh_enable_ip+0x13a/0x1c0 [ 412.886055][T14389] ? lockdep_hardirqs_on+0x98/0x150 [ 412.891266][T14389] ? __local_bh_enable_ip+0x13a/0x1c0 [ 412.896643][T14389] ? _local_bh_enable+0xa0/0xa0 [ 412.901499][T14389] ? __dev_queue_xmit+0x272/0x37e0 [ 412.906619][T14389] ? __dev_queue_xmit+0x1329/0x37e0 [ 412.911819][T14389] ? __dev_queue_xmit+0x272/0x37e0 [ 412.916946][T14389] ? ref_tracker_free+0x686/0x830 [ 412.921987][T14389] netlink_rcv_skb+0x235/0x4c0 [ 412.926760][T14389] ? rtnetlink_bind+0x80/0x80 [ 412.931442][T14389] ? netlink_ack+0x1160/0x1160 [ 412.936218][T14389] ? __lock_acquire+0x7eb0/0x7eb0 [ 412.941247][T14389] ? netlink_deliver_tap+0x2e/0x1b0 [ 412.946450][T14389] netlink_unicast+0x7b1/0x930 [ 412.951312][T14389] netlink_sendmsg+0x8d0/0xbf0 [ 412.956089][T14389] ? netlink_getsockopt+0x590/0x590 [ 412.961297][T14389] ? apparmor_socket_sendmsg+0x8e/0x330 [ 412.966847][T14389] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 412.972133][T14389] ? security_socket_sendmsg+0x80/0xa0 [ 412.977589][T14389] ? netlink_getsockopt+0x590/0x590 [ 412.982789][T14389] ____sys_sendmsg+0x61b/0x980 [ 412.987569][T14389] ? __asan_memset+0x22/0x40 [ 412.992171][T14389] ? __sys_sendmsg_sock+0x30/0x30 [ 412.997220][T14389] ? __import_iovec+0x5f2/0x850 [ 413.002083][T14389] ? import_iovec+0x73/0xa0 [ 413.006595][T14389] ___sys_sendmsg+0x2a6/0x360 [ 413.011282][T14389] ? __sys_sendmsg+0x2b0/0x2b0 [ 413.016102][T14389] __se_sys_sendmsg+0x1d0/0x2c0 [ 413.020963][T14389] ? __x64_sys_sendmsg+0x80/0x80 [ 413.025918][T14389] ? lockdep_hardirqs_on+0x98/0x150 [ 413.031120][T14389] do_syscall_64+0x55/0xb0 [ 413.035534][T14389] ? clear_bhb_loop+0x40/0x90 [ 413.040225][T14389] ? clear_bhb_loop+0x40/0x90 [ 413.044898][T14389] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.050801][T14389] RIP: 0033:0x7fe118f9e1d9 [ 413.055216][T14389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.074828][T14389] RSP: 002b:00007fe119d9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.083250][T14389] RAX: ffffffffffffffda RBX: 00007fe119225fa0 RCX: 00007fe118f9e1d9 [ 413.091243][T14389] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 0000000000000004 [ 413.099211][T14389] RBP: 00007fe119035888 R08: 0000000000000000 R09: 0000000000000000 [ 413.107197][T14389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.115163][T14389] R13: 00007fe119226038 R14: 00007fe119225fa0 R15: 00007fff85ec2cb8 [ 413.123147][T14389] [ 413.126185][ C0] vkms_vblank_simulate: vblank timer overrun [ 413.278296][T14416] syzkaller0: entered promiscuous mode [ 413.283872][T14416] syzkaller0: entered allmulticast mode [ 413.380072][T14421] loop2: detected capacity change from 0 to 256 [ 415.689258][T14449] syzkaller0: entered promiscuous mode [ 415.698195][T14449] syzkaller0: entered allmulticast mode [ 419.091623][T14502] loop1: detected capacity change from 0 to 1024 [ 419.134476][T14502] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 419.194056][T14502] JBD2: no valid journal superblock found [ 419.277119][T14502] EXT4-fs (loop1): Could not load journal inode [ 419.773146][T14516] syzkaller0: entered promiscuous mode [ 419.804427][T14516] syzkaller0: entered allmulticast mode [ 422.442669][T14542] syzkaller0: entered promiscuous mode [ 422.457246][T14542] syzkaller0: entered allmulticast mode [ 424.964378][T14578] loop1: detected capacity change from 0 to 512 [ 425.031133][T14578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.062835][T14578] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.178109][T13522] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.980967][T14598] loop4: detected capacity change from 0 to 512 [ 425.998409][T14598] EXT4-fs: Ignoring removed bh option [ 426.021447][T14598] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 426.027147][T14585] syzkaller0: entered promiscuous mode [ 426.046503][T14585] syzkaller0: entered allmulticast mode [ 426.100831][T14596] syzkaller0: entered promiscuous mode [ 426.104277][T14598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.106338][T14596] syzkaller0: entered allmulticast mode [ 426.127262][T14598] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.190684][T14603] binder: 14602:14603 ioctl 4018620d 0 returned -22 [ 426.286553][T12519] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.810828][T14637] loop0: detected capacity change from 0 to 512 [ 428.824376][T14637] EXT4-fs: Ignoring removed bh option [ 428.848561][T14637] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 428.908485][T14637] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.921575][T14637] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.098937][T12941] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.375340][T14647] binder: 14646:14647 ioctl 4018620d 0 returned -22 [ 432.351026][T14686] loop0: detected capacity change from 0 to 512 [ 432.441349][T14686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.459602][T14686] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.520941][T12941] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.151365][T14693] syzkaller0: entered promiscuous mode [ 433.156895][T14693] syzkaller0: entered allmulticast mode [ 436.322336][T14716] netlink: 'syz.2.2637': attribute type 10 has an invalid length. [ 436.337190][T14716] bond0: (slave netdevsim0): Releasing backup interface [ 436.349199][T14716] team0: Port device netdevsim0 added [ 436.355057][T14718] netlink: 'syz.2.2637': attribute type 10 has an invalid length. [ 436.380807][T14718] team0: Port device netdevsim0 removed [ 436.399618][T14718] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 436.488264][T14762] syzkaller0: entered promiscuous mode [ 436.493950][T14762] syzkaller0: entered allmulticast mode [ 436.658169][T14768] binder: 14766:14768 ioctl c0306201 0 returned -14 [ 437.901590][T14788] loop2: detected capacity change from 0 to 256 [ 438.028156][T14791] loop0: detected capacity change from 0 to 128 [ 438.102984][T14791] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 438.146696][T14791] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 438.157733][T14794] syzkaller0: entered promiscuous mode [ 438.281370][T14794] syzkaller0: entered allmulticast mode [ 439.017001][T12941] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 439.438118][T14814] netlink: 'syz.0.2654': attribute type 10 has an invalid length. [ 439.576857][T14814] team0: Port device netdevsim0 added [ 439.814505][T14818] syzkaller0: entered promiscuous mode [ 439.863292][T14818] syzkaller0: entered allmulticast mode [ 439.953529][T14814] netlink: 'syz.0.2654': attribute type 10 has an invalid length. [ 440.076421][T14814] team0: Port device netdevsim0 removed [ 440.087142][T14814] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 440.132958][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.139398][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.530365][T14856] loop2: detected capacity change from 0 to 128 [ 441.612452][T14856] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 441.678186][T14856] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 441.821144][T13964] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 442.200039][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 443.336650][T14833] syzkaller0: entered promiscuous mode [ 443.342202][T14833] syzkaller0: entered allmulticast mode [ 443.534144][T14889] loop4: detected capacity change from 0 to 256 [ 446.472180][T14882] syzkaller0: entered promiscuous mode [ 446.487239][T14882] syzkaller0: entered allmulticast mode [ 446.505443][T14893] netlink: 'syz.4.2667': attribute type 10 has an invalid length. [ 446.540189][T14893] bond0: (slave netdevsim0): Releasing backup interface [ 446.563770][T14893] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 446.581685][T14893] team0: Failed to send options change via netlink (err -105) [ 446.589753][T14893] team0: Port device netdevsim0 added [ 446.596993][T14894] netlink: 'syz.4.2667': attribute type 10 has an invalid length. [ 446.646322][T14894] team0: Failed to send options change via netlink (err -105) [ 446.672982][T14894] team0: Port device netdevsim0 removed [ 446.690390][T14894] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 446.864370][T14902] loop1: detected capacity change from 0 to 512 [ 447.005929][T14902] EXT4-fs: Ignoring removed bh option [ 447.159671][T14902] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 447.706505][T14902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.737766][T14902] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.760353][T14918] loop0: detected capacity change from 0 to 512 [ 447.842612][T14918] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.861457][T14918] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.862594][T13522] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.998814][T12941] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.977394][T14949] syzkaller0: entered promiscuous mode [ 449.982926][T14949] syzkaller0: entered allmulticast mode [ 450.114838][T14957] loop4: detected capacity change from 0 to 128 [ 450.133466][T14957] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 450.154611][T14957] ext4 filesystem being mounted at /120/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 450.510435][T12519] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 450.658461][T14965] loop2: detected capacity change from 0 to 512 [ 450.760335][T14965] EXT4-fs: Ignoring removed bh option [ 450.850919][T14965] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 451.009569][T14965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.088147][T14965] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.132610][T14972] loop4: detected capacity change from 0 to 512 [ 451.223704][T14972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.260804][T14972] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.276732][T13964] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.362689][T12519] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.380673][T14971] syzkaller0: entered promiscuous mode [ 451.403496][T14971] syzkaller0: entered allmulticast mode [ 452.149634][T15004] fuse: Bad value for 'group_id' [ 453.835931][T15018] loop0: detected capacity change from 0 to 128 [ 453.937894][T15018] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 453.957236][T15022] loop1: detected capacity change from 0 to 256 [ 453.979131][T15018] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 454.104943][T15028] loop2: detected capacity change from 0 to 512 [ 454.121531][T15028] EXT4-fs: Ignoring removed bh option [ 454.152207][T12941] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 454.171699][T15028] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 454.835758][T15028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.032858][T15028] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.228979][T13964] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.795243][T15046] syzkaller0: entered promiscuous mode [ 455.805580][T15046] syzkaller0: entered allmulticast mode [ 456.113128][T15050] fuse: Bad value for 'group_id' [ 456.134981][T15051] loop0: detected capacity change from 0 to 512 [ 456.249596][T15051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.274318][T15051] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.423951][T12941] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.598971][T15093] loop2: detected capacity change from 0 to 512 [ 458.618333][T15093] EXT4-fs: Ignoring removed bh option [ 458.668113][T15093] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 458.952898][T15093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.185079][T15093] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.429966][T15103] fuse: Bad value for 'group_id' [ 459.544926][T13964] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.741539][T15110] loop1: detected capacity change from 0 to 256 [ 460.848571][T15118] loop2: detected capacity change from 0 to 512 [ 460.953454][T15118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.057187][T15118] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.269898][T13964] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.418130][T15128] syzkaller0: entered promiscuous mode [ 461.423658][T15128] syzkaller0: entered allmulticast mode [ 462.837432][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 463.456247][T15157] loop1: detected capacity change from 0 to 512 [ 463.504956][T15157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.525333][T15157] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.722359][T13522] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.901752][T15176] syzkaller0: entered promiscuous mode [ 463.927254][T15176] syzkaller0: entered allmulticast mode [ 466.779096][T15219] syzkaller0: entered promiscuous mode [ 466.796808][T15219] syzkaller0: entered allmulticast mode [ 467.132277][T15225] syzkaller0: entered promiscuous mode [ 467.151304][T15225] syzkaller0: entered allmulticast mode [ 468.034806][T15236] syzkaller0: entered promiscuous mode [ 468.043208][T15239] binder: 15238:15239 ioctl c0306201 0 returned -14 [ 468.049673][T15236] syzkaller0: entered allmulticast mode [ 468.237912][ T5810] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 468.277316][T15243] syzkaller0: entered promiscuous mode [ 468.285612][T15243] syzkaller0: entered allmulticast mode [ 468.522490][T15250] syzkaller0: entered promiscuous mode [ 468.627217][T15250] syzkaller0: entered allmulticast mode [ 468.667314][ T5810] usb 3-1: Using ep0 maxpacket: 16 [ 468.729381][ T5810] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.855556][ T5810] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 469.039721][ T5810] usb 3-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 469.110807][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.133615][ T5810] usb 3-1: Product: syz [ 469.139350][ T5810] usb 3-1: Manufacturer: syz [ 469.144174][ T5810] usb 3-1: SerialNumber: syz [ 469.930981][T15260] 9pnet_fd: Insufficient options for proto=fd [ 469.956509][ T5810] usb 3-1: USB disconnect, device number 2 [ 470.286618][T15269] syzkaller0: entered promiscuous mode [ 470.292536][T15269] syzkaller0: entered allmulticast mode [ 470.576264][T15273] syzkaller0: entered promiscuous mode [ 470.581878][T15273] syzkaller0: entered allmulticast mode [ 470.814447][T15282] syzkaller0: entered promiscuous mode [ 470.823051][T15282] syzkaller0: entered allmulticast mode [ 472.003173][T15295] 9pnet_fd: Insufficient options for proto=fd [ 472.731901][T15296] syzkaller0: entered promiscuous mode [ 472.827551][T15296] syzkaller0: entered allmulticast mode [ 475.664858][T15332] syzkaller0: entered promiscuous mode [ 475.670704][T15332] syzkaller0: entered allmulticast mode [ 477.022997][T15352] 9pnet_fd: Insufficient options for proto=fd [ 477.859510][T15365] syzkaller0: entered promiscuous mode [ 477.879862][T15365] syzkaller0: entered allmulticast mode [ 477.966873][T15369] syzkaller0: entered promiscuous mode [ 477.972611][T15369] syzkaller0: entered allmulticast mode [ 477.983081][T15367] syzkaller0: entered promiscuous mode [ 477.989178][T15367] syzkaller0: entered allmulticast mode [ 478.183519][T15373] syzkaller0: entered promiscuous mode [ 478.197545][T15373] syzkaller0: entered allmulticast mode [ 479.332971][T15385] fuse: Unknown parameter 'grou00000000000000000000' [ 479.852017][T15393] 9pnet_fd: Insufficient options for proto=fd [ 481.864809][T15406] syzkaller0: entered promiscuous mode [ 481.871706][T15406] syzkaller0: entered allmulticast mode [ 481.882694][T15404] syzkaller0: entered promiscuous mode [ 481.898359][T15404] syzkaller0: entered allmulticast mode [ 481.998576][T15408] syzkaller0: entered promiscuous mode [ 482.004104][T15408] syzkaller0: entered allmulticast mode [ 482.080561][T15413] fuse: Unknown parameter 'grou00000000000000000000' [ 483.375607][T15428] syzkaller0: entered promiscuous mode [ 483.381260][T15428] syzkaller0: entered allmulticast mode [ 483.716562][T15436] 9pnet_fd: Insufficient options for proto=fd [ 486.486529][T15467] fuse: Unknown parameter 'grou00000000000000000000' [ 486.573347][T15469] syzkaller0: entered promiscuous mode [ 486.602988][T15469] syzkaller0: entered allmulticast mode [ 487.889539][T15492] syzkaller0: entered promiscuous mode [ 487.905278][T15492] syzkaller0: entered allmulticast mode [ 489.054746][T15500] syzkaller0: entered promiscuous mode [ 489.080791][T15500] syzkaller0: entered allmulticast mode [ 492.507211][ T5989] unregister_netdevice: waiting for vcan0 to become free. Usage count = 3 [ 492.525382][ T5989] ref_tracker: vcan0@ffff8880266d85b8 has 1/2 users at [ 492.525382][ T5989] j1939_ecu_create_locked+0x1c6/0x400 [ 492.525382][ T5989] j1939_local_ecu_get+0xec/0x400 [ 492.525382][ T5989] j1939_sk_bind+0x70a/0xc60 [ 492.525382][ T5989] __sys_bind+0x2f0/0x3f0 [ 492.525382][ T5989] __x64_sys_bind+0x7a/0x90 [ 492.525382][ T5989] do_syscall_64+0x55/0xb0 [ 492.525382][ T5989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.525382][ T5989] [ 492.570707][ T5989] ref_tracker: vcan0@ffff8880266d85b8 has 1/2 users at [ 492.570707][ T5989] j1939_netdev_start+0x37c/0xaf0 [ 492.570707][ T5989] j1939_sk_bind+0x941/0xc60 [ 492.570707][ T5989] __sys_bind+0x2f0/0x3f0 [ 492.570707][ T5989] __x64_sys_bind+0x7a/0x90 [ 492.570707][ T5989] do_syscall_64+0x55/0xb0 [ 492.570707][ T5989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.570707][ T5989] [ 493.407829][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 501.561253][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.567774][ T1292] ieee802154 phy1 wpan1: encryption failed: -22