last executing test programs: 13.107638886s ago: executing program 1 (id=5089): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x3f799000) recvfrom(0xffffffffffffffff, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9, 0x32, 0xffffffffffffffff, 0x34d4c000) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000440)="e9", 0x1}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 11.516274097s ago: executing program 1 (id=5094): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r0, 0x400452c8, &(0x7f0000000000)="000000000000000000000000000000000000000001") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/rfcomm0\x00', 0x802, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x5401, 0x0) 11.216730468s ago: executing program 1 (id=5096): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f00000005c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000940)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0xe, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f00000013c0)='GPL\x00', 0x4, 0xfd90, &(0x7f0000001400)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000001500), 0x366, 0x10, &(0x7f0000001540), 0x1dd}, 0x48) recvmsg$unix(r1, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x10000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001600)=ANY=[@ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001640)={{r4}, &(0x7f0000001680), &(0x7f00000016c0)=r0}, 0x20) recvmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001780)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000018c0)='>', 0x33fe0}], 0x1}, 0x0) 10.880680042s ago: executing program 1 (id=5098): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x210000, &(0x7f0000000340)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000000400)="$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") r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='27', 0x2) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000b00)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8200, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'LVM-syz', 0x0, '3\x00'}}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x1, 0x8ffff) r3 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc\x00', 0xd2942, 0x4) io_submit(0x0, 0x3, &(0x7f0000000a40)=[&(0x7f0000000a80)={0x180ffffffffffff, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000ac0)='p', 0x8200, 0x600}]) 9.894720323s ago: executing program 1 (id=5101): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delchain={0x17, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r3 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r4) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r3, &(0x7f0000000400)={&(0x7f0000000440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 8.385742616s ago: executing program 1 (id=5104): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xcc}, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'vxcan0\x00'}) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x4}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000540)}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000580)=ANY=[], 0xc) 7.889265837s ago: executing program 32 (id=5104): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xcc}, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'vxcan0\x00'}) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x4}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000540)}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000580)=ANY=[], 0xc) 7.692642557s ago: executing program 0 (id=5106): syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000500), 0x1, 0x2763, &(0x7f00000011c0)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 6.698023668s ago: executing program 0 (id=5109): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000004d40)=[{{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1}, 0xfff}], 0x1, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a", 0x9e}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000014c0)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a0858fe5c7e75ecf92e735452456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9aee7cd0ed4cbaf18298377e750869551632c1713bd8372e3f11fa02edf0a68d2c01245459d9e78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8ba000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db90c5eaacfdf3657d11a348f747ddd860387de41be3376a5dabf4296bc05282cb73fcd60c4a4148d9e872ae86e30b22db1ce5452ad9fe3fea029f94a583d301e74eac1818da3f1279c63690db6e7166ddaacd1278716fa3221daaa27c98fd97b88e63208d604505ad8f31bd2b83a19f89480b71198d8a31c89cadd258ce338afe1a26b0db248c1a39fe027716e417e45bb6c9a68cab1cd6c3445e9796ee1003650e97eccdadc9bea540e2c8253652c8f1586ba7e508cd29d53467bad11eef729796dbe83d3fc0bc15762c2f1de34c6380a6725f94600a82d87ccf80948babcadec31ca654671d17de360f20aaf04f4d44951661fe8fe7731174ec3aaf330aebeaed9620f694859785a36c5f787ce35e4425ed3387710fa346f04db11255c6985fa4cdbe54d25c942264b3383d60903bd2677611850fe125b", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0x10001, 0x4) 5.225896278s ago: executing program 3 (id=5114): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x3f799000) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9, 0x32, 0xffffffffffffffff, 0x34d4c000) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000440)="e9", 0x1}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 4.993038032s ago: executing program 0 (id=5115): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000006a000085000000860000008500000007000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000380)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f00000003c0)=0x4, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000500)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) 4.787207473s ago: executing program 0 (id=5117): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080) 4.533271438s ago: executing program 0 (id=5118): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) socket(0x1d, 0x2, 0x6) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0xcd81, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6}, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000004d40)=[{{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1}, 0xfff}], 0x1, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000014c0)="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", 0xdf3}], 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0x10001, 0x4) 4.318060261s ago: executing program 2 (id=5119): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setns(r0, 0x24000080) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x0, &(0x7f00000002c0)}) syz_emit_ethernet(0x6a, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0xa, 0x4]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x8e0}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f00000004c0)=[{&(0x7f0000000500)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000001000010004", 0x4d}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000736000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) write(r6, &(0x7f0000000380)='0', 0x1) 3.407926013s ago: executing program 3 (id=5120): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002"], 0x50}}, 0x0) 3.33829653s ago: executing program 2 (id=5121): socket$key(0xf, 0x3, 0x2) openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x12) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0x0, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 3.121635212s ago: executing program 3 (id=5122): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000004d40)=[{{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1}, 0xfff}], 0x1, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000014c0)="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", 0xdf3}], 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0x10001, 0x4) 2.906314714s ago: executing program 2 (id=5123): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delchain={0x17, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r3 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r4) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r3, &(0x7f0000000400)={&(0x7f0000000440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 2.526799223s ago: executing program 3 (id=5124): syz_emit_ethernet(0x4f, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000a86"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[], 0x28) 1.237058134s ago: executing program 2 (id=5125): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000006a000085000000860000008500000007000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000380)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f00000003c0)=0x4, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000500)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) 1.145932233s ago: executing program 2 (id=5126): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000020301010000000000000000020000000800010001000002090002000000000002000000"], 0x40}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000680)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000006c0)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000700)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0x3, 0x2b, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x2c, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e23, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x9, 0x5}}}}, 0x3a) 1.111429437s ago: executing program 0 (id=5127): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x3f799000) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9, 0x32, 0xffffffffffffffff, 0x34d4c000) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000440)="e9", 0x1}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 957.574723ms ago: executing program 3 (id=5128): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setns(r0, 0x24000080) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x0, &(0x7f00000002c0)}) syz_emit_ethernet(0x6a, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0xa, 0x4]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x8e0}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f00000004c0)=[{&(0x7f0000000500)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000001000010004", 0x4d}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000736000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) write(r6, &(0x7f0000000380)='0', 0x1) 484.578191ms ago: executing program 2 (id=5129): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000c00)={'syz_tun\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000c40)={'syz_tun\x00', 0x1}) write$tun(r0, &(0x7f0000000d00)=ANY=[@ANYBLOB="00000805001001"], 0xa) 0s ago: executing program 3 (id=5130): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$md_new_array(r0, &(0x7f0000000080)={'md', @num=0x0}, 0x3) r1 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000000c0)={'/sys/block/md', @num=0x0, '/md/', @array='level\x00'}, 0x1, 0x0) write$md_sysfs(r1, &(0x7f0000000100)=@str='raid1', 0x5) r2 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000140)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0) write$md_sysfs(r2, &(0x7f0000000180)=@str='2', 0x1) r3 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000001c0)={'/sys/block/md', @num=0x0, '/md/', @array='component_size\x00'}, 0x1, 0x0) write$md_sysfs(r3, &(0x7f0000000200)=@str='512', 0x3) r4 = openat$md_sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$md_sysfs(r4, &(0x7f0000000280)=@dev={'1:', 0x0}, 0x16) write$md_sysfs(r4, &(0x7f00000002c0)=@dev={'1:', 0x1}, 0x16) syz_open_procfs(0x0, &(0x7f0000000300)='net\x00') openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000004c0)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x0}, 'slot\x00'}}, 0x1, 0x0) r5 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000400)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x1, 0x0) write$md_sysfs(r5, &(0x7f0000000000)=@str='read-auto', 0x9) kernel console output (not intermixed with test programs): le_timeout failed -512 [ 614.874194][T16694] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3573'. [ 614.894020][T16694] bond9: entered promiscuous mode [ 614.899131][T16694] bond9: entered allmulticast mode [ 614.954071][T16696] dummy0: entered promiscuous mode [ 614.973169][T16696] dummy0: entered allmulticast mode [ 615.003541][T16696] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 615.016559][T16698] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3574'. [ 616.663572][T16746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3587'. [ 616.689791][T16746] 8021q: adding VLAN 0 to HW filter on device bond10 [ 616.705666][T16746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3587'. [ 616.714793][T16746] bond10: entered promiscuous mode [ 616.720244][T16746] bond10: entered allmulticast mode [ 616.732240][T16746] bond9: (slave dummy0): Releasing backup interface [ 616.740095][T16746] dummy0: left promiscuous mode [ 616.745585][T16746] dummy0: left allmulticast mode [ 616.759632][T16746] dummy0: entered promiscuous mode [ 616.765348][T16746] dummy0: entered allmulticast mode [ 616.770993][T16746] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 617.293691][ T5793] Bluetooth: hci2: command 0x0406 tx timeout [ 619.150358][T16718] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 619.231110][T16773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3596'. [ 619.342983][T16773] 8021q: adding VLAN 0 to HW filter on device bond11 [ 619.361098][T16775] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3596'. [ 619.390946][T16775] bond11: entered promiscuous mode [ 619.399195][T16775] bond11: entered allmulticast mode [ 619.434637][T16784] bond10: (slave dummy0): Releasing backup interface [ 619.445194][T16784] dummy0: left promiscuous mode [ 619.450240][T16784] dummy0: left allmulticast mode [ 619.464281][T16784] dummy0: entered promiscuous mode [ 619.478658][T16784] dummy0: entered allmulticast mode [ 619.493927][T16784] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 620.464491][T16805] tipc: Enabling of bearer rejected, failed to enable media [ 620.990729][T16834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3613'. [ 621.017670][T16834] 8021q: adding VLAN 0 to HW filter on device bond17 [ 621.073751][T16834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3613'. [ 621.103036][T16834] bond17: entered promiscuous mode [ 621.114106][T16834] bond17: entered allmulticast mode [ 621.148061][T16834] bond12: (slave dummy0): Releasing backup interface [ 621.161139][T16834] dummy0: left promiscuous mode [ 621.170378][T16834] dummy0: left allmulticast mode [ 621.194030][T16834] dummy0: entered promiscuous mode [ 621.199316][T16834] dummy0: entered allmulticast mode [ 621.223925][T16834] bond17: (slave dummy0): Enslaving as an active interface with an up link [ 623.562315][T16812] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 624.359398][T16913] tipc: Enabling of bearer rejected, failed to enable media [ 624.499031][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.505543][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.888567][T16941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3644'. [ 624.922110][T16941] 8021q: adding VLAN 0 to HW filter on device bond18 [ 624.943908][T16944] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 624.952975][T16941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3644'. [ 624.983433][T16941] bond18: entered promiscuous mode [ 624.988613][T16941] bond18: entered allmulticast mode [ 625.035210][T16946] bond17: (slave dummy0): Releasing backup interface [ 625.057180][T16946] dummy0: left promiscuous mode [ 625.062202][T16946] dummy0: left allmulticast mode [ 625.097032][T16946] dummy0: entered promiscuous mode [ 625.102338][T16946] dummy0: entered allmulticast mode [ 625.128680][T16946] bond18: (slave dummy0): Enslaving as an active interface with an up link [ 626.470607][T16971] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.479949][T16971] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.488929][T16971] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.498156][T16971] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.598673][T16971] bond1: left promiscuous mode [ 626.603688][T16971] bond1: left allmulticast mode [ 626.611219][T16971] bond2: left promiscuous mode [ 626.616944][T16971] bond2: left allmulticast mode [ 626.649622][T16971] bond5: left promiscuous mode [ 626.658497][T16971] bond5: left allmulticast mode [ 626.669953][T16971] bond6: left promiscuous mode [ 626.674931][T16971] bond6: left allmulticast mode [ 627.256150][T16996] netlink: 'syz.3.3660': attribute type 10 has an invalid length. [ 627.264557][T16996] syz_tun: entered promiscuous mode [ 627.273162][T16996] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 627.661659][T16928] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 628.028991][T17020] tipc: Enabling of bearer rejected, failed to enable media [ 628.534421][T17040] syzkaller0: entered promiscuous mode [ 628.539925][T17040] syzkaller0: entered allmulticast mode [ 631.271144][T17033] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 631.470674][T17086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3691'. [ 631.502522][T17086] 8021q: adding VLAN 0 to HW filter on device bond12 [ 631.522070][T17086] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3691'. [ 631.541395][T17086] bond12: entered promiscuous mode [ 631.551813][T17086] bond12: entered allmulticast mode [ 631.571501][T17086] bond11: (slave dummy0): Releasing backup interface [ 631.618169][T17086] dummy0: left promiscuous mode [ 631.638847][T17086] dummy0: left allmulticast mode [ 631.668820][T17086] dummy0: entered promiscuous mode [ 631.688111][T17086] dummy0: entered allmulticast mode [ 631.705467][T17086] bond12: (slave dummy0): Enslaving as an active interface with an up link [ 631.843423][T13013] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 632.755709][T13013] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 632.775020][T13013] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 632.788101][T13013] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 632.799447][T13013] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 632.809137][T13013] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.834890][T17093] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 632.842376][T17093] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 632.855812][T13013] pl2303 4-1:1.0: pl2303 converter detected [ 632.877243][T13013] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 632.966591][T17119] syzkaller0: entered promiscuous mode [ 632.972128][T17119] syzkaller0: entered allmulticast mode [ 633.059984][T17088] bond0: (slave syz_tun): Releasing backup interface [ 634.289151][T17127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3701'. [ 634.310522][T17127] 8021q: adding VLAN 0 to HW filter on device bond13 [ 634.328493][T17127] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3701'. [ 634.337982][T17127] bond13: entered promiscuous mode [ 634.343137][T17127] bond13: entered allmulticast mode [ 634.357716][T17127] bond12: (slave dummy0): Releasing backup interface [ 634.365495][T17127] dummy0: left promiscuous mode [ 634.370467][T17127] dummy0: left allmulticast mode [ 634.381756][T17127] dummy0: entered promiscuous mode [ 634.388138][T17127] dummy0: entered allmulticast mode [ 634.394280][T17127] bond13: (slave dummy0): Enslaving as an active interface with an up link [ 635.685322][T17107] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 635.742033][T13013] usb 4-1: USB disconnect, device number 7 [ 635.767856][T13013] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 635.786196][T13013] pl2303 4-1:1.0: device disconnected [ 635.821873][T17151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3710'. [ 635.862718][T17151] 8021q: adding VLAN 0 to HW filter on device bond16 [ 635.921847][T17151] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3710'. [ 635.965031][T17151] bond16: entered promiscuous mode [ 635.983576][T17151] bond16: entered allmulticast mode [ 635.997895][T17157] dummy0: entered promiscuous mode [ 636.022315][T17157] dummy0: entered allmulticast mode [ 636.040556][T17157] bond16: (slave dummy0): Enslaving as an active interface with an up link [ 636.328331][T17182] syzkaller0: entered promiscuous mode [ 636.336403][T17182] syzkaller0: entered allmulticast mode [ 636.483366][ T6873] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 636.695048][ T6873] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 636.760796][ T6873] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 636.816990][ T6873] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 636.880378][ T6873] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 636.937840][ T6873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.050990][T17173] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 637.112260][T17173] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 637.124609][ T6873] pl2303 1-1:1.0: pl2303 converter detected [ 637.139215][ T6873] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 637.325776][T17173] bond16: (slave dummy0): Releasing backup interface [ 637.333789][T17173] dummy0: left promiscuous mode [ 637.338853][T17173] dummy0: left allmulticast mode [ 637.351387][T17173] team0: Port device bridge0 removed [ 639.229941][T17176] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 639.373549][T13013] usb 1-1: USB disconnect, device number 7 [ 639.411625][T13013] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 639.445762][T13013] pl2303 1-1:1.0: device disconnected [ 639.509292][T17201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3727'. [ 639.549204][T17201] 8021q: adding VLAN 0 to HW filter on device bond17 [ 639.588629][T17201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3727'. [ 639.604701][T17201] bond17: entered promiscuous mode [ 639.610362][T17201] bond17: entered allmulticast mode [ 639.629433][T17201] dummy0: entered promiscuous mode [ 639.640135][T17201] dummy0: entered allmulticast mode [ 639.646215][T17201] bond17: (slave dummy0): Enslaving as an active interface with an up link [ 640.728837][T17220] bond13: (slave dummy0): Releasing backup interface [ 640.750641][T17220] dummy0: left promiscuous mode [ 640.758277][T17220] dummy0: left allmulticast mode [ 640.896917][T17236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3739'. [ 640.921581][T17236] 8021q: adding VLAN 0 to HW filter on device bond18 [ 640.940171][T17236] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3739'. [ 640.949307][T17236] bond18: entered promiscuous mode [ 640.954931][T17236] bond18: entered allmulticast mode [ 640.966548][T17236] bond17: (slave dummy0): Releasing backup interface [ 640.974574][T17236] dummy0: left promiscuous mode [ 640.979561][T17236] dummy0: left allmulticast mode [ 640.987954][T17236] dummy0: entered promiscuous mode [ 640.995134][T17236] dummy0: entered allmulticast mode [ 641.000720][T17236] bond18: (slave dummy0): Enslaving as an active interface with an up link [ 643.704776][T17219] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 643.977754][T17261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3748'. [ 644.054395][T17261] 8021q: adding VLAN 0 to HW filter on device bond14 [ 644.156850][T17265] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3748'. [ 644.190399][T17265] bond14: entered promiscuous mode [ 644.209696][T17265] bond14: entered allmulticast mode [ 644.252315][T17261] dummy0: entered promiscuous mode [ 644.267731][T17261] dummy0: entered allmulticast mode [ 644.291667][T17261] bond14: (slave dummy0): Enslaving as an active interface with an up link [ 644.412969][T17277] bond18: (slave dummy0): Releasing backup interface [ 644.421578][T17277] dummy0: left promiscuous mode [ 644.427037][T17277] dummy0: left allmulticast mode [ 645.858699][T17306] bond9: left promiscuous mode [ 645.863604][T17306] bond9: left allmulticast mode [ 645.874576][T17306] bond10: left promiscuous mode [ 645.879475][T17306] bond10: left allmulticast mode [ 645.895895][T17306] bond11: left promiscuous mode [ 645.900840][T17306] bond11: left allmulticast mode [ 645.916487][T17306] bond12: left promiscuous mode [ 645.921409][T17306] bond12: left allmulticast mode [ 645.960575][T17306] bond17: left promiscuous mode [ 645.965780][T17306] bond17: left allmulticast mode [ 645.980110][T17306] bond18: left promiscuous mode [ 645.985273][T17306] bond18: left allmulticast mode [ 645.995031][T17310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3761'. [ 646.031666][T17310] 8021q: adding VLAN 0 to HW filter on device bond15 [ 646.040339][T17311] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3761'. [ 646.058860][T17311] bond15: entered promiscuous mode [ 646.065081][T17311] bond15: entered allmulticast mode [ 646.084741][T17312] bond14: (slave dummy0): Releasing backup interface [ 646.093117][T17312] dummy0: left promiscuous mode [ 646.102212][T17312] dummy0: left allmulticast mode [ 646.113045][T17312] dummy0: entered promiscuous mode [ 646.121478][T17312] dummy0: entered allmulticast mode [ 646.127584][T17312] bond15: (slave dummy0): Enslaving as an active interface with an up link [ 648.429996][T17290] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 649.044685][T17346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3771'. [ 649.081006][T17346] 8021q: adding VLAN 0 to HW filter on device bond8 [ 649.124668][T17345] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 649.181218][T17345] bond16: left promiscuous mode [ 649.186687][T17345] bond16: left allmulticast mode [ 649.212461][T17345] bond17: left promiscuous mode [ 649.218947][T17345] bond17: left allmulticast mode [ 649.240236][T17345] bond18: left promiscuous mode [ 649.245992][T17345] dummy0: left promiscuous mode [ 649.251108][T17345] bond18: left allmulticast mode [ 649.256347][T17345] dummy0: left allmulticast mode [ 649.276176][T17346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3771'. [ 649.285567][T17346] bond8: entered promiscuous mode [ 649.290630][T17346] bond8: entered allmulticast mode [ 649.304814][T17352] dummy0: entered promiscuous mode [ 649.310113][T17352] dummy0: entered allmulticast mode [ 649.323917][T17352] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 649.672215][T17365] ip_tables: iptables: counters copy to user failed while replacing table [ 649.734754][T17374] bond8: left promiscuous mode [ 649.739611][T17374] bond8: left allmulticast mode [ 650.208506][T17374] bond9: left promiscuous mode [ 650.254905][T17374] bond9: left allmulticast mode [ 650.800666][T17374] bond10: left promiscuous mode [ 650.813603][T17374] bond10: left allmulticast mode [ 650.863491][T17374] bond11: left promiscuous mode [ 650.868416][T17374] bond11: left allmulticast mode [ 650.894645][T17374] bond12: left promiscuous mode [ 650.899577][T17374] bond12: left allmulticast mode [ 650.918854][T17374] bond13: left promiscuous mode [ 650.923971][T17374] bond13: left allmulticast mode [ 650.964023][T17374] bond14: left promiscuous mode [ 650.974028][T17374] bond14: left allmulticast mode [ 650.998424][T17374] bond15: left promiscuous mode [ 651.004006][T17374] dummy0: left promiscuous mode [ 651.009220][T17374] bond15: left allmulticast mode [ 651.015566][T17374] dummy0: left allmulticast mode [ 651.028375][T17388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3783'. [ 651.107819][T17388] 8021q: adding VLAN 0 to HW filter on device bond19 [ 651.119777][T17393] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3783'. [ 651.143272][T17393] bond19: entered promiscuous mode [ 651.148468][T17393] bond19: entered allmulticast mode [ 651.166955][T17396] bond18: (slave dummy0): Releasing backup interface [ 651.186864][T17396] dummy0: entered promiscuous mode [ 651.192423][T17396] dummy0: entered allmulticast mode [ 651.198454][T17396] bond19: (slave dummy0): Enslaving as an active interface with an up link [ 651.316552][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 651.340171][T17409] ip_tables: iptables: counters copy to user failed while replacing table [ 652.401703][ T23] usb 4-1: device descriptor read/64, error -71 [ 652.688601][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 652.717957][T17434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3797'. [ 652.786507][T17434] 8021q: adding VLAN 0 to HW filter on device bond20 [ 652.801377][T17436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3797'. [ 652.827621][T17436] bond20: entered promiscuous mode [ 652.848194][T17436] bond20: entered allmulticast mode [ 652.853675][ T23] usb 4-1: device descriptor read/64, error -71 [ 652.884915][T17434] bond19: (slave dummy0): Releasing backup interface [ 652.908099][T17434] dummy0: left promiscuous mode [ 652.929945][T17434] dummy0: left allmulticast mode [ 652.971887][T17434] dummy0: entered promiscuous mode [ 652.983695][ T23] usb usb4-port1: attempt power cycle [ 652.989977][T17434] dummy0: entered allmulticast mode [ 652.999636][T17434] bond20: (slave dummy0): Enslaving as an active interface with an up link [ 653.257480][T17455] ip_tables: iptables: counters copy to user failed while replacing table [ 654.446512][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 654.491336][ T23] usb 4-1: device descriptor read/8, error -71 [ 654.498912][T17392] team0: Unable to change to the same mode the team is in [ 654.569895][T17465] syzkaller0: entered promiscuous mode [ 654.576695][T17465] syzkaller0: entered allmulticast mode [ 654.763324][ T23] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 654.820244][ T23] usb 4-1: device descriptor read/8, error -71 [ 654.943609][ T23] usb usb4-port1: unable to enumerate USB device [ 657.286381][ T5870] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 657.443563][ T5870] usb 1-1: device descriptor read/64, error -71 [ 657.723471][ T5870] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 657.883478][ T5870] usb 1-1: device descriptor read/64, error -71 [ 658.003704][ T5870] usb usb1-port1: attempt power cycle [ 659.143325][ T5870] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 659.193440][ T5870] usb 1-1: device descriptor read/8, error -71 [ 659.467363][ T5870] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 659.539565][ T5870] usb 1-1: device descriptor read/8, error -71 [ 659.748672][ T5870] usb usb1-port1: unable to enumerate USB device [ 661.253507][ T5870] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 661.413403][ T5870] usb 1-1: device descriptor read/64, error -71 [ 661.733422][ T5870] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 662.003462][ T5870] usb 1-1: device descriptor read/64, error -71 [ 662.133673][ T5870] usb usb1-port1: attempt power cycle [ 662.420997][T17620] macsec0: entered promiscuous mode [ 662.428039][T17619] macsec0: left promiscuous mode [ 662.682473][ T5870] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 662.714092][ T5870] usb 1-1: device descriptor read/8, error -71 [ 663.626935][ T5870] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 663.678857][ T5870] usb 1-1: device descriptor read/8, error -71 [ 663.803525][ T5870] usb usb1-port1: unable to enumerate USB device [ 664.195833][T17666] netlink: 'syz.1.3877': attribute type 1 has an invalid length. [ 664.817839][T17666] 8021q: adding VLAN 0 to HW filter on device bond16 [ 664.905973][T17667] bond16: (slave veth3): Enslaving as an active interface with a down link [ 664.960733][T17671] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 664.992781][T17671] bond16: (slave batadv1): making interface the new active one [ 665.025484][T17671] batadv1: entered promiscuous mode [ 665.039580][T17671] bond16: (slave batadv1): Enslaving as an active interface with an up link [ 665.546797][T17692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3886'. [ 665.794975][ T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 666.600687][T17710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3892'. [ 666.629549][ T23] usb 2-1: device descriptor read/64, error -71 [ 666.913404][ T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 667.093313][ T23] usb 2-1: device descriptor read/64, error -71 [ 667.214652][ T23] usb usb2-port1: attempt power cycle [ 667.396998][T17733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3902'. [ 667.432151][T17733] 8021q: adding VLAN 0 to HW filter on device bond19 [ 667.452855][T17733] bond19: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 667.633512][ T23] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 667.674100][ T23] usb 2-1: device descriptor read/8, error -71 [ 667.963321][ T23] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 668.004028][ T23] usb 2-1: device descriptor read/8, error -71 [ 668.033794][T17755] syzkaller0: entered promiscuous mode [ 668.039315][T17755] syzkaller0: entered allmulticast mode [ 668.049649][T17756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3913'. [ 668.094276][T17756] 8021q: adding VLAN 0 to HW filter on device bond9 [ 668.109250][T17757] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 668.129208][ T23] usb usb2-port1: unable to enumerate USB device [ 670.691708][T17797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3922'. [ 670.750257][T17797] 8021q: adding VLAN 0 to HW filter on device bond10 [ 670.795201][T17803] bond9: (slave veth0_to_bond): Releasing backup interface [ 670.823690][T17803] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 670.960245][T17808] netpci0: tun_chr_ioctl cmd 3223869504 [ 670.970428][T17808] netpci0: tun_chr_ioctl cmd 1074812118 [ 671.092041][T17810] syzkaller0: entered promiscuous mode [ 671.098361][T17810] syzkaller0: entered allmulticast mode [ 671.163810][T13013] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 671.266813][T17817] ip_tables: iptables: counters copy to user failed while replacing table [ 671.343503][T13013] usb 1-1: device descriptor read/64, error -71 [ 671.624249][T13013] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 671.783440][T13013] usb 1-1: device descriptor read/64, error -71 [ 671.914464][T13013] usb usb1-port1: attempt power cycle [ 672.353311][T13013] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 672.394154][T13013] usb 1-1: device descriptor read/8, error -71 [ 672.683473][T13013] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 672.727533][T13013] usb 1-1: device descriptor read/8, error -71 [ 672.865091][T13013] usb usb1-port1: unable to enumerate USB device [ 673.351737][T17824] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3930'. [ 673.502831][T17832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3934'. [ 673.534569][T17832] 8021q: adding VLAN 0 to HW filter on device bond17 [ 673.560837][T17832] bond17: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 673.905185][T17846] syzkaller0: entered promiscuous mode [ 673.910848][T17846] syzkaller0: entered allmulticast mode [ 673.975375][T17852] ip_tables: iptables: counters copy to user failed while replacing table [ 676.396025][T11202] batadv1: left promiscuous mode [ 676.627346][T17837] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 676.780831][T17865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3945'. [ 676.811502][T17865] 8021q: adding VLAN 0 to HW filter on device bond18 [ 676.826652][T17867] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3947'. [ 676.854632][T17865] bond17: (slave veth0_to_bond): Releasing backup interface [ 676.869794][T17865] bond18: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 676.916099][T17867] netlink: 'syz.3.3947': attribute type 10 has an invalid length. [ 676.930729][T17867] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 677.698755][T17890] syzkaller0: entered promiscuous mode [ 677.706009][T17890] syzkaller0: entered allmulticast mode [ 679.687904][T17903] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3958'. [ 679.698081][T17903] netlink: 'syz.0.3958': attribute type 10 has an invalid length. [ 679.706725][T17903] syz_tun: entered promiscuous mode [ 679.715932][T17903] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 680.630762][T17920] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3963'. [ 680.639927][T17920] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3963'. [ 680.661820][T17920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3963'. [ 680.691174][T17893] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 681.579438][T17952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3975'. [ 682.473942][T17956] netlink: 'syz.3.3976': attribute type 1 has an invalid length. [ 682.502809][T17956] 8021q: adding VLAN 0 to HW filter on device bond11 [ 682.549130][T17956] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 682.569225][T17956] bond11: (slave batadv1): making interface the new active one [ 682.578777][T17956] bond11: (slave batadv1): Enslaving as an active interface with an up link [ 682.724213][ T5793] Bluetooth: hci4: unexpected event 0x17 length: 5 < 6 [ 682.786529][T17972] batman_adv: batadv0: Adding interface: syzkaller0 [ 682.793735][T17972] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.822222][T17972] batman_adv: batadv0: Interface activated: syzkaller0 [ 682.844041][T17971] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 682.895211][T17971] batman_adv: batadv0: Removing interface: syzkaller0 [ 684.055241][T17998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3989'. [ 684.564134][T15274] Bluetooth: hci2: command 0x0406 tx timeout [ 685.465518][T18024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4001'. [ 685.482280][T15274] Bluetooth: hci4: unexpected event 0x17 length: 5 < 6 [ 685.803840][T18034] syzkaller0: entered promiscuous mode [ 685.809487][T18034] syzkaller0: entered allmulticast mode [ 685.937988][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.944630][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.467730][ T23] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 687.679877][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 687.690215][ T23] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 687.700779][ T23] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 687.710473][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.255082][T18064] bond0: (slave syz_tun): Releasing backup interface [ 688.282794][T18064] bond20: (slave dummy0): Releasing backup interface [ 688.300960][T18064] dummy0: left promiscuous mode [ 688.307925][T18064] dummy0: left allmulticast mode [ 688.342574][T18067] team0: Unable to change to the same mode the team is in [ 688.382451][ T5846] usb 1-1: USB disconnect, device number 20 [ 688.399396][T18070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4014'. [ 688.481629][T18070] 8021q: adding VLAN 0 to HW filter on device bond20 [ 688.670718][T18086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4016'. [ 688.905609][T18096] syzkaller0: entered promiscuous mode [ 688.924150][T18096] syzkaller0: entered allmulticast mode [ 691.083131][T18112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4026'. [ 691.094978][T18112] workqueue: Failed to create a rescuer kthread for wq "bond21": -EINTR [ 691.371652][T18131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4027'. [ 691.755409][T18149] syzkaller0: entered promiscuous mode [ 691.760935][T18149] syzkaller0: entered allmulticast mode [ 691.767728][T18151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4037'. [ 691.813499][ T5846] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 692.027677][ T5846] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 692.046067][ T5846] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 692.061300][ T5846] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 692.073988][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.130377][T18139] bond15: (slave dummy0): Releasing backup interface [ 694.145725][T18139] bond18: (slave veth0_to_bond): Releasing backup interface [ 694.175303][T18139] bond16: (slave veth3): Releasing active interface [ 694.182839][T18139] bond16: (slave veth3): the permanent HWaddr of slave - 52:d0:4e:86:cd:f3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 694.212545][T18139] batadv1: entered promiscuous mode [ 694.238879][T18139] bond16: (slave batadv1): Releasing active interface [ 694.252186][T18139] batadv1: left promiscuous mode [ 694.275670][T18159] team0: Unable to change to the same mode the team is in [ 694.306323][T13013] usb 2-1: USB disconnect, device number 14 [ 694.632549][T18183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4043'. [ 694.667261][T18185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4046'. [ 694.712634][T18184] batman_adv: batadv0: Adding interface: syzkaller0 [ 694.719624][T18184] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 694.746852][T18184] batman_adv: batadv0: Interface activated: syzkaller0 [ 694.784998][T18181] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 694.860118][T18181] batman_adv: batadv0: Removing interface: syzkaller0 [ 694.940936][T18189] syzkaller0: entered promiscuous mode [ 694.946710][T18189] syzkaller0: entered allmulticast mode [ 697.721929][T18222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4057'. [ 697.786561][ T41] tipc: Disabling bearer [ 697.813494][ T41] tipc: Left network mode [ 698.033565][ T5846] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 698.322393][ T5846] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 698.463794][ T5846] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 698.583035][ T5846] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 698.618389][ T5846] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 698.636673][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.662319][T18225] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 698.687657][ T5846] pl2303 3-1:1.0: required endpoints missing [ 698.930095][T18225] bond19: (slave veth0_to_bond): Releasing backup interface [ 699.073845][T18247] team0: Unable to change to the same mode the team is in [ 699.109504][ T5846] usb 3-1: USB disconnect, device number 3 [ 699.546702][T18249] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4061'. [ 700.110152][T18256] syzkaller0: entered promiscuous mode [ 700.130829][T18256] syzkaller0: entered allmulticast mode [ 702.575221][T18270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4068'. [ 702.916806][T18294] pimreg: entered allmulticast mode [ 702.933107][T18294] pimreg: left allmulticast mode [ 703.213954][ T23] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 703.301409][ T41] hsr_slave_0: left promiscuous mode [ 703.317830][ T41] hsr_slave_1: left promiscuous mode [ 703.382422][ T41] veth1_macvtap: left promiscuous mode [ 703.392971][ T41] veth0_macvtap: left promiscuous mode [ 703.419961][ T41] veth1_vlan: left promiscuous mode [ 703.426012][ T41] veth0_vlan: left promiscuous mode [ 703.505399][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 703.626699][ T23] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 703.729985][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 703.893444][ T23] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 703.930358][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.949941][T18295] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 703.986046][ T23] pl2303 1-1:1.0: required endpoints missing [ 704.194296][ T41] bond6 (unregistering): Released all slaves [ 704.353454][ T41] bond5 (unregistering): Released all slaves [ 704.515635][ T41] bond4 (unregistering): Released all slaves [ 704.658372][ T41] bond3 (unregistering): Released all slaves [ 704.699605][ T41] bond2 (unregistering): (slave veth3): Releasing active interface [ 704.851035][ T41] bond2 (unregistering): Released all slaves [ 704.989198][ T41] bond1 (unregistering): Released all slaves [ 705.037014][ T41] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 705.727853][T18280] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 706.903249][ T41] bond0 (unregistering): Released all slaves [ 707.163067][T18315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4079'. [ 707.177040][ T23] usb 1-1: USB disconnect, device number 21 [ 707.430932][T18325] syzkaller0: entered promiscuous mode [ 707.439656][T18325] syzkaller0: entered allmulticast mode [ 707.471769][T18330] batman_adv: batadv0: Adding interface: syzkaller0 [ 707.490122][T18330] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.523695][T18330] batman_adv: batadv0: Interface activated: syzkaller0 [ 709.864207][T18324] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 709.888791][T18324] batman_adv: batadv0: Removing interface: syzkaller0 [ 710.167300][ T41] IPVS: stop unused estimator thread 0... [ 710.281883][T18367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4092'. [ 710.413372][ T23] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 710.611922][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 710.817191][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 711.023389][ T23] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 711.124999][ T23] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 711.164237][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.186327][T18357] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 711.210815][ T23] pl2303 2-1:1.0: required endpoints missing [ 711.321101][T18383] netlink: 'syz.3.4097': attribute type 1 has an invalid length. [ 711.400629][T18383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.422334][T18383] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.436359][T18383] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 711.476658][T18357] team0: Unable to change to the same mode the team is in [ 711.499925][T13013] usb 2-1: USB disconnect, device number 15 [ 713.213265][ T5793] Bluetooth: hci2: command 0x0406 tx timeout [ 714.583319][T13013] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 714.765078][T13013] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 714.778687][T13013] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 714.808394][T13013] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 714.850993][T13013] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 714.873631][T13013] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 714.882734][T13013] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.920293][T18425] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 714.929413][T18425] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 714.967738][T13013] pl2303 3-1:1.0: required interrupt-in endpoint missing [ 715.189154][T18425] team0: Unable to change to the same mode the team is in [ 715.203046][T18447] netlink: 1532 bytes leftover after parsing attributes in process `syz.0.4121'. [ 715.229656][T13013] usb 3-1: USB disconnect, device number 4 [ 715.525656][T18453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4124'. [ 715.671900][T18457] netlink: 'syz.3.4126': attribute type 1 has an invalid length. [ 715.728703][T18457] 8021q: adding VLAN 0 to HW filter on device bond12 [ 715.804336][T18457] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 715.821192][T18457] bond12: (slave batadv2): making interface the new active one [ 715.830649][T18457] bond12: (slave batadv2): Enslaving as an active interface with an up link [ 716.178547][T18475] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4133'. [ 716.659143][T18487] netlink: 'syz.0.4137': attribute type 1 has an invalid length. [ 716.673310][ T23] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 716.705976][T18487] 8021q: adding VLAN 0 to HW filter on device bond21 [ 716.726945][T18489] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 716.736327][T18489] bond21: (slave batadv2): making interface the new active one [ 716.745912][T18489] bond21: (slave batadv2): Enslaving as an active interface with an up link [ 716.866072][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 716.886989][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 716.913283][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 716.942720][ T23] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 716.970968][ T23] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 716.990821][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.025825][T18484] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 717.071954][T18484] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 717.105329][ T23] pl2303 2-1:1.0: required interrupt-in endpoint missing [ 717.340176][T18484] team0: Unable to change to the same mode the team is in [ 717.359603][ T5846] usb 2-1: USB disconnect, device number 16 [ 717.473001][T18501] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4143'. [ 717.496577][T18501] bond10: (slave veth0_to_bond): Releasing backup interface [ 717.736885][T18511] netlink: 'syz.2.4147': attribute type 1 has an invalid length. [ 717.769380][T18511] 8021q: adding VLAN 0 to HW filter on device bond21 [ 717.967314][T18511] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 718.001803][T18511] bond21: (slave batadv2): making interface the new active one [ 718.013599][T15274] Bluetooth: hci2: command 0x0406 tx timeout [ 718.033138][T18511] bond21: (slave batadv2): Enslaving as an active interface with an up link [ 718.335071][T18530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4152'. [ 718.436186][T18533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4153'. [ 719.192932][T18549] netlink: 'syz.1.4160': attribute type 1 has an invalid length. [ 719.233726][ T5870] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 719.256543][T18549] 8021q: adding VLAN 0 to HW filter on device bond19 [ 719.425679][ T5870] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.444058][ T5870] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 719.464949][ T5870] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 719.485168][ T5870] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 719.518379][T18563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4162'. [ 719.530243][ T5870] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 719.555004][T18565] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4163'. [ 719.564475][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.591921][T18543] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 719.604397][T18543] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 719.618685][ T5870] pl2303 4-1:1.0: required interrupt-in endpoint missing [ 720.103923][T15274] Bluetooth: hci2: command 0x0406 tx timeout [ 720.199854][T18543] bond0: (slave syz_tun): Releasing backup interface [ 720.516134][T18543] bond8: (slave dummy0): Releasing backup interface [ 720.539248][T18543] dummy0: left promiscuous mode [ 720.550950][T18543] dummy0: left allmulticast mode [ 720.576438][T18543] bond11: (slave batadv1): Releasing active interface [ 720.651705][T18543] bond12: (slave batadv2): Releasing active interface [ 720.687307][T18581] team0: Unable to change to the same mode the team is in [ 720.719257][ T6873] usb 4-1: USB disconnect, device number 12 [ 720.989598][T18596] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.008727][T18596] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.025431][T18596] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.043633][T18596] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.065115][T18598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4175'. [ 722.182226][T18624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4186'. [ 722.635063][T13013] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 723.483218][T13013] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 723.513387][T13013] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 723.553317][T13013] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 723.583290][T13013] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 723.600980][T18656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4198'. [ 723.612788][T13013] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.646738][T18634] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 723.664032][T18634] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 723.692990][T13013] pl2303 4-1:1.0: required interrupt-in endpoint missing [ 723.934267][T18634] team0: Unable to change to the same mode the team is in [ 723.961301][T13013] usb 4-1: USB disconnect, device number 13 [ 724.133651][T18678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4207'. [ 724.756757][T18697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4216'. [ 725.041332][T18711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4223'. [ 725.173310][ T6873] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 725.204773][T18719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4227'. [ 725.375121][ T6873] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 725.393237][ T6873] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 725.413323][ T6873] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 725.435853][ T6873] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 725.458821][ T6873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.532038][T18703] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 725.554571][T18703] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 725.600990][ T6873] pl2303 1-1:1.0: required interrupt-in endpoint missing [ 725.810157][T18703] bond21: (slave batadv2): Releasing active interface [ 725.858784][T18703] team0: Unable to change to the same mode the team is in [ 725.894668][ T6873] usb 1-1: USB disconnect, device number 22 [ 726.060263][T18736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4234'. [ 726.242603][T18742] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4237'. [ 726.518546][T18753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4240'. [ 726.936738][T18768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4247'. [ 727.031993][T18768] 8021q: adding VLAN 0 to HW filter on device bond20 [ 727.213499][ T23] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 727.415246][ T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 727.427146][ T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 727.438991][ T23] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 727.449908][ T23] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 727.459345][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.473492][T18775] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 727.487317][T18775] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 727.515968][ T23] pl2303 4-1:1.0: required interrupt-in endpoint missing [ 727.575743][T18794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4256'. [ 727.756112][T18801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4260'. [ 727.794201][T18801] 8021q: adding VLAN 0 to HW filter on device bond22 [ 727.810876][T18775] team0: Unable to change to the same mode the team is in [ 727.845406][T13013] usb 4-1: USB disconnect, device number 14 [ 728.030385][T18816] syzkaller0: entered promiscuous mode [ 728.037101][T18816] syzkaller0: entered allmulticast mode [ 728.225039][T18825] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 728.235696][T18825] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 728.254211][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4268'. [ 728.508608][T18833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4271'. [ 728.566674][T18835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4272'. [ 728.617416][T18835] 8021q: adding VLAN 0 to HW filter on device bond21 [ 729.065810][T18852] syzkaller0: entered promiscuous mode [ 729.071329][T18852] syzkaller0: entered allmulticast mode [ 729.260923][T18860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4280'. [ 729.386820][T18863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4282'. [ 729.458029][T18863] 8021q: adding VLAN 0 to HW filter on device bond22 [ 729.473337][ T8] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 729.679313][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 729.697802][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 729.709189][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 729.721897][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 729.742138][ T8] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 729.770473][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.802387][T18858] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 729.837655][T18858] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 729.861859][ T8] pl2303 2-1:1.0: pl2303 converter detected [ 729.894142][ T8] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 730.030865][T18886] syzkaller0: entered promiscuous mode [ 730.043475][T18886] syzkaller0: entered allmulticast mode [ 730.148274][T18893] team0: Unable to change to the same mode the team is in [ 730.275990][T18858] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 730.302133][T18858] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 730.311960][T18858] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 730.349925][T18858] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 730.352771][T18897] 8021q: adding VLAN 0 to HW filter on device bond13 [ 730.365474][T18858] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 730.377180][ T5870] usb 2-1: USB disconnect, device number 17 [ 730.394949][ T5870] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 730.429659][ T5870] pl2303 2-1:1.0: device disconnected [ 731.144386][T18921] syzkaller0: entered promiscuous mode [ 731.150741][T18921] syzkaller0: entered allmulticast mode [ 731.328632][T18927] __nla_validate_parse: 2 callbacks suppressed [ 731.328655][T18927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4302'. [ 731.609292][T18935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4305'. [ 731.682957][T18935] 8021q: adding VLAN 0 to HW filter on device bond22 [ 731.763080][T18943] xt_CT: You must specify a L4 protocol and not use inversions on it [ 731.981505][T18953] syzkaller0: entered promiscuous mode [ 731.997985][T18953] syzkaller0: entered allmulticast mode [ 732.141436][T18962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4313'. [ 733.034254][T18980] syzkaller1: entered promiscuous mode [ 733.048418][T18980] syzkaller1: entered allmulticast mode [ 733.131570][T18997] syzkaller0: entered promiscuous mode [ 733.165760][T18997] syzkaller0: entered allmulticast mode [ 733.425982][T19006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4328'. [ 734.025611][T19032] syzkaller0: entered promiscuous mode [ 734.031491][T19032] syzkaller0: entered allmulticast mode [ 734.205084][T19040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4341'. [ 734.912199][T19076] syzkaller0: entered promiscuous mode [ 734.924179][T19076] syzkaller0: entered allmulticast mode [ 735.024250][T19080] netlink: 'syz.1.4355': attribute type 4 has an invalid length. [ 735.032276][T19085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4354'. [ 735.872332][T19116] syzkaller0: entered promiscuous mode [ 735.879165][T19116] syzkaller0: entered allmulticast mode [ 736.226581][T19131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4367'. [ 736.800962][T19154] syzkaller0: entered promiscuous mode [ 736.807495][T19154] syzkaller0: entered allmulticast mode [ 737.183079][T19166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4381'. [ 737.213488][T15274] Bluetooth: hci2: command 0x0406 tx timeout [ 738.461149][T19198] syzkaller0: entered promiscuous mode [ 738.466865][T19198] syzkaller0: entered allmulticast mode [ 738.687031][T19211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4392'. [ 739.294357][T15274] Bluetooth: hci2: command 0x0406 tx timeout [ 740.026843][T19244] netlink: 'syz.0.4404': attribute type 27 has an invalid length. [ 740.044931][T19239] syzkaller0: entered promiscuous mode [ 740.060754][T19239] syzkaller0: entered allmulticast mode [ 741.219104][ T8] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 741.451803][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 741.477116][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 741.503476][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 741.524864][ T8] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 741.563332][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.595203][T19259] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 741.602810][T19259] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 741.647168][T15274] Bluetooth: hci2: unexpected event 0x05 length: 0 < 4 [ 741.647958][ T8] pl2303 2-1:1.0: pl2303 converter detected [ 741.687646][ T8] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 741.812414][T19292] syzkaller0: entered promiscuous mode [ 741.818457][T19292] syzkaller0: entered allmulticast mode [ 741.890435][T19259] team0: Unable to change to the same mode the team is in [ 742.350212][T19296] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 742.468539][T19296] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 742.568974][T19296] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 742.595284][T19296] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 742.616846][T19296] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 742.719874][T19302] syzkaller0: entered promiscuous mode [ 742.733282][T19302] syzkaller0: entered allmulticast mode [ 742.893744][T19296] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 742.901739][T19296] pl2303 ttyUSB0: error sending break = -32 [ 742.949968][ T8] usb 2-1: USB disconnect, device number 18 [ 742.994458][ T8] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 743.016341][ T8] pl2303 2-1:1.0: device disconnected [ 744.658546][ T5793] Bluetooth: hci2: command 0x0406 tx timeout [ 746.913642][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 747.091758][T19358] syzkaller0: entered promiscuous mode [ 747.104951][T19358] syzkaller0: entered allmulticast mode [ 747.135270][ T8] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 747.153823][ T8] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 747.175655][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 747.199983][ T8] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 747.216515][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.245943][T19348] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 747.274574][T19348] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 747.302919][ T8] pl2303 3-1:1.0: pl2303 converter detected [ 747.326328][ T8] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 747.381570][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.388072][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.559982][T19363] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4437'. [ 747.583396][T19363] ip_tables: iptables: counters copy to user failed while replacing table [ 747.685847][T19364] pl2303 3-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 747.706046][T19364] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 747.723578][T19364] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 747.733994][T19364] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 747.742567][T19364] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 748.024270][T19364] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 748.041365][T19364] pl2303 ttyUSB0: error sending break = -32 [ 749.814374][T19348] team0: Unable to change to the same mode the team is in [ 749.879848][ T8] usb 3-1: USB disconnect, device number 5 [ 749.913027][ T8] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 749.941826][ T8] pl2303 3-1:1.0: device disconnected [ 751.055315][T19390] syzkaller0: entered promiscuous mode [ 751.060857][T19390] syzkaller0: entered allmulticast mode [ 751.314832][T19399] syzkaller0: entered promiscuous mode [ 751.320623][T19399] syzkaller0: entered allmulticast mode [ 751.513299][ T23] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 751.725291][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 751.743225][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 751.753044][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 751.764899][ T23] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 751.774478][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.790554][T19397] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 751.813376][T19397] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 751.840075][ T23] pl2303 2-1:1.0: pl2303 converter detected [ 751.863836][ T23] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 752.216042][T19400] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 752.234815][T19400] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 752.251891][T19400] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 752.276305][T19400] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 752.299846][T19400] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 752.626690][T19400] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 752.653562][T19400] pl2303 ttyUSB0: error sending break = -32 [ 754.141453][T19405] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4450'. [ 754.161209][T19397] team0: Unable to change to the same mode the team is in [ 754.245539][ T23] usb 2-1: USB disconnect, device number 19 [ 754.285342][ T23] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 754.344872][ T23] pl2303 2-1:1.0: device disconnected [ 754.834446][T19440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4461'. [ 754.896222][T19440] 8021q: adding VLAN 0 to HW filter on device bond23 [ 754.916043][T19445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4461'. [ 755.103291][ T8] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 755.309364][ T8] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 755.329931][ T8] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 755.360348][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 755.381875][ T8] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 755.396314][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.422707][T19439] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 755.446060][T19439] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 755.467470][ T8] pl2303 1-1:1.0: pl2303 converter detected [ 755.487783][ T8] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 756.202298][T19439] team0: Unable to change to the same mode the team is in [ 756.433323][T19439] pl2303 1-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 756.453496][T19439] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 756.473601][T19439] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 756.483011][T19439] pl2303 1-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 756.494267][T19439] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 756.773854][T19439] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 756.799577][T19439] pl2303 ttyUSB0: error sending break = -32 [ 756.814463][ T8] usb 1-1: USB disconnect, device number 23 [ 756.835216][ T8] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 756.851457][ T8] pl2303 1-1:1.0: device disconnected [ 756.861303][T19475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4473'. [ 756.946843][T19475] 8021q: adding VLAN 0 to HW filter on device bond24 [ 756.960871][T19478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4473'. [ 758.541641][T19509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4486'. [ 758.593525][T19509] 8021q: adding VLAN 0 to HW filter on device bond23 [ 758.612756][T19510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4486'. [ 758.649660][T19516] batman_adv: batadv0: Adding interface: syzkaller0 [ 758.665860][T19516] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.693052][T19516] batman_adv: batadv0: Interface activated: syzkaller0 [ 758.744556][T19512] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 759.626848][T19512] batman_adv: batadv0: Removing interface: syzkaller0 [ 759.964432][ T5846] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 760.055601][T19547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4497'. [ 760.103074][T19547] 8021q: adding VLAN 0 to HW filter on device bond24 [ 760.111347][T19552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4497'. [ 760.791243][ T5846] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 760.801291][ T5846] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 760.812355][ T5846] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 760.834120][ T5846] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 760.843655][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.875320][T19528] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 760.892194][T19528] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 760.911759][ T5846] pl2303 3-1:1.0: pl2303 converter detected [ 760.986499][ T5846] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 761.091089][T19560] batman_adv: batadv0: Adding interface: syzkaller0 [ 761.110659][T19560] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.173375][T19560] batman_adv: batadv0: Interface activated: syzkaller0 [ 761.191487][T19528] team0: Unable to change to the same mode the team is in [ 761.225004][T19559] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 761.303488][T19528] pl2303 3-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 761.312011][T19528] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 761.323511][T19528] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 761.335193][T19559] batman_adv: batadv0: Removing interface: syzkaller0 [ 761.340021][T19528] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 761.356602][T19528] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 761.644015][T19528] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 761.661113][T19528] pl2303 ttyUSB0: error sending break = -32 [ 761.678295][ T5846] usb 3-1: USB disconnect, device number 6 [ 761.702995][ T5846] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 761.731963][ T5846] pl2303 3-1:1.0: device disconnected [ 761.974743][T19581] tipc: Enabling of bearer rejected, failed to enable media [ 762.024653][T19581] syzkaller0: entered promiscuous mode [ 762.030201][T19581] syzkaller0: entered allmulticast mode [ 766.152317][T19626] netlink: 'syz.0.4520': attribute type 10 has an invalid length. [ 766.621346][T19632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4522'. [ 766.667434][T19635] tipc: Enabling of bearer rejected, failed to enable media [ 766.760746][T19635] syzkaller0: entered promiscuous mode [ 766.766432][T19635] syzkaller0: entered allmulticast mode [ 769.407123][T19656] netlink: 'syz.0.4530': attribute type 10 has an invalid length. [ 769.516724][T19662] tipc: Enabling of bearer rejected, failed to enable media [ 770.296752][T19671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4534'. [ 770.500191][T19679] tipc: Enabling of bearer rejected, failed to enable media [ 770.569355][T19679] syzkaller0: entered promiscuous mode [ 770.588144][T19679] syzkaller0: entered allmulticast mode [ 770.969947][T19696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4545'. [ 774.034936][T19682] batman_adv: batadv0: Adding interface: syzkaller0 [ 774.041592][T19682] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.068726][T19682] batman_adv: batadv0: Interface activated: syzkaller0 [ 774.080087][T19681] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 774.175208][T19681] batman_adv: batadv0: Removing interface: syzkaller0 [ 774.272560][T19715] syzkaller0: entered promiscuous mode [ 774.278273][T19715] syzkaller0: entered allmulticast mode [ 775.172628][T19733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4559'. [ 775.563750][T19737] batman_adv: batadv0: Adding interface: syzkaller0 [ 775.570690][T19737] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.597666][T19737] batman_adv: batadv0: Interface activated: syzkaller0 [ 775.696887][T19735] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 775.773730][T19735] batman_adv: batadv0: Removing interface: syzkaller0 [ 775.811964][T19753] syzkaller0: entered promiscuous mode [ 775.818053][T19753] syzkaller0: entered allmulticast mode [ 776.071584][T19765] lo: entered promiscuous mode [ 776.089114][T19765] batadv_slave_0: entered promiscuous mode [ 776.104974][T19762] batadv_slave_0: left promiscuous mode [ 776.133741][T19762] lo: left promiscuous mode [ 776.470243][T19785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4569'. [ 777.035737][T19811] vlan2: entered promiscuous mode [ 777.046884][T19811] macvlan0: entered promiscuous mode [ 778.351562][T19863] syzkaller0: entered promiscuous mode [ 778.362753][T19863] syzkaller0: entered allmulticast mode [ 778.433977][ T5870] IPVS: starting estimator thread 0... [ 778.535563][T19869] IPVS: using max 29 ests per chain, 69600 per kthread [ 778.766941][T19883] syzkaller0: entered promiscuous mode [ 778.772476][T19883] syzkaller0: entered allmulticast mode [ 779.517718][T19921] syzkaller0: entered promiscuous mode [ 779.523326][T19921] syzkaller0: entered allmulticast mode [ 780.128799][T19948] syzkaller0: entered promiscuous mode [ 780.135865][T19948] syzkaller0: entered allmulticast mode [ 781.322720][T19985] syzkaller0: entered promiscuous mode [ 781.345899][T19985] syzkaller0: entered allmulticast mode [ 782.495786][T20008] syzkaller0: entered promiscuous mode [ 782.501331][T20008] syzkaller0: entered allmulticast mode [ 782.949913][T20020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4676'. [ 783.890237][T20043] syzkaller0: entered promiscuous mode [ 783.924124][T20043] syzkaller0: entered allmulticast mode [ 784.360312][T20053] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4687'. [ 785.165463][T20075] syzkaller0: entered promiscuous mode [ 785.175084][T20075] syzkaller0: entered allmulticast mode [ 785.560049][T20083] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 786.142584][T20098] syzkaller0: entered promiscuous mode [ 786.148801][T20098] syzkaller0: entered allmulticast mode [ 786.232883][T20102] netlink: 'syz.1.4706': attribute type 1 has an invalid length. [ 786.613872][T20107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.767052][T20107] 8021q: adding VLAN 0 to HW filter on device team0 [ 786.991074][T20107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 787.401221][T20116] rxe_eth0 speed is unknown, defaulting to 1000 [ 787.722819][T20116] wlan1 speed is unknown, defaulting to 1000 [ 788.288588][T20151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4718'. [ 788.351681][T20153] netlink: 'syz.1.4720': attribute type 1 has an invalid length. [ 788.435517][T20153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 793.923549][T20257] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4758'. [ 794.100935][T20268] ip_tables: iptables: counters copy to user failed while replacing table [ 794.368836][T20281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4766'. [ 794.381500][T20281] ip_tables: iptables: counters copy to user failed while replacing table [ 794.543428][T20286] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4768'. [ 795.337082][T20290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4769'. [ 795.436572][T20295] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 795.574024][T20301] ip_tables: iptables: counters copy to user failed while replacing table [ 795.820312][T20307] syzkaller0: entered promiscuous mode [ 795.831873][T20307] syzkaller0: entered allmulticast mode [ 795.860942][T20311] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4779'. [ 796.864122][T20327] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4785'. [ 797.028712][T20334] ip_tables: iptables: counters copy to user failed while replacing table [ 797.136419][T20338] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4790'. [ 798.439000][T20366] syzkaller0: entered promiscuous mode [ 798.454476][T20366] syzkaller0: entered allmulticast mode [ 798.469259][T20372] ip_tables: iptables: counters copy to user failed while replacing table [ 798.478881][T20371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4799'. [ 798.813313][T15274] Bluetooth: hci2: command 0x0406 tx timeout [ 799.909090][T20410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4810'. [ 800.219201][T20418] syzkaller0: entered promiscuous mode [ 800.226277][T20418] syzkaller0: entered allmulticast mode [ 800.271049][T20423] ip_tables: iptables: counters copy to user failed while replacing table [ 801.407972][T20445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4820'. [ 801.687766][T20454] syzkaller0: entered promiscuous mode [ 801.716765][T20454] syzkaller0: entered allmulticast mode [ 802.043977][T20459] syzkaller0: entered promiscuous mode [ 802.068400][T20459] syzkaller0: entered allmulticast mode [ 802.381090][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 802.394817][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 802.406859][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 802.433271][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 802.705021][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 802.718789][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 803.224278][T20473] rxe_eth0 speed is unknown, defaulting to 1000 [ 803.559931][T20473] wlan1 speed is unknown, defaulting to 1000 [ 803.831626][ T41] tipc: Left network mode [ 803.899205][T20507] syzkaller0: entered promiscuous mode [ 803.915092][T20507] syzkaller0: entered allmulticast mode [ 804.815131][ T5793] Bluetooth: hci1: command tx timeout [ 805.291138][T20473] chnl_net:caif_netlink_parms(): no params data found [ 805.752174][T20560] syzkaller0: entered promiscuous mode [ 805.758074][T20560] syzkaller0: entered allmulticast mode [ 806.748373][T20473] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.765963][T20473] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.786824][T20473] bridge_slave_0: entered allmulticast mode [ 806.809344][T20473] bridge_slave_0: entered promiscuous mode [ 806.893631][ T5793] Bluetooth: hci1: command tx timeout [ 806.986475][T20473] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.999235][T20473] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.007047][T20473] bridge_slave_1: entered allmulticast mode [ 807.017384][T20473] bridge_slave_1: entered promiscuous mode [ 807.189067][T20473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.247183][T20473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.454504][T20597] syzkaller0: entered promiscuous mode [ 807.460049][T20597] syzkaller0: entered allmulticast mode [ 808.181940][T20473] team0: Port device team_slave_0 added [ 808.255061][T20473] team0: Port device team_slave_1 added [ 808.288659][T20473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.306001][T20473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.342330][T20473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.551466][T20473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.565655][T20473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.632725][T20473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.829404][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.835848][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.913773][ T41] hsr_slave_0: left promiscuous mode [ 808.926143][ T41] hsr_slave_1: left promiscuous mode [ 808.973269][ T5793] Bluetooth: hci1: command tx timeout [ 810.301474][ T41] bond24 (unregistering): Released all slaves [ 810.635211][ T41] bond23 (unregistering): Released all slaves [ 810.890588][ T41] bond22 (unregistering): Released all slaves [ 811.053636][ T5793] Bluetooth: hci1: command tx timeout [ 811.096313][ T41] bond21 (unregistering): Released all slaves [ 811.266454][ T41] bond20 (unregistering): Released all slaves [ 811.439952][ T41] bond19 (unregistering): Released all slaves [ 811.610446][ T41] bond18 (unregistering): Released all slaves [ 811.790798][ T41] bond17 (unregistering): Released all slaves [ 811.953568][ T41] bond16 (unregistering): Released all slaves [ 812.117740][ T41] bond15 (unregistering): Released all slaves [ 812.293206][ T41] bond14 (unregistering): Released all slaves [ 812.459301][ T41] bond13 (unregistering): Released all slaves [ 812.623011][ T41] bond12 (unregistering): Released all slaves [ 812.784209][ T41] bond11 (unregistering): Released all slaves [ 812.953102][ T41] bond10 (unregistering): Released all slaves [ 813.122054][ T41] bond9 (unregistering): Released all slaves [ 813.296949][ T41] bond8 (unregistering): Released all slaves [ 813.455665][ T41] bond7 (unregistering): Released all slaves [ 813.606978][ T41] bond6 (unregistering): Released all slaves [ 813.766608][ T41] bond5 (unregistering): Released all slaves [ 813.929820][ T41] bond4 (unregistering): Released all slaves [ 814.097986][ T41] bond3 (unregistering): Released all slaves [ 814.251486][ T41] bond2 (unregistering): Released all slaves [ 814.401181][ T41] bond1 (unregistering): Released all slaves [ 815.623734][ T41] bond0 (unregistering): Released all slaves [ 815.635194][ T41] lo (unregistering): left allmulticast mode [ 815.667738][T20473] hsr_slave_0: entered promiscuous mode [ 815.675709][T20473] hsr_slave_1: entered promiscuous mode [ 816.051618][T20688] ip_tables: iptables: counters copy to user failed while replacing table [ 818.243779][ T41] IPVS: stop unused estimator thread 0... [ 818.431741][T20730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4884'. [ 818.572521][T20741] ip_tables: iptables: counters copy to user failed while replacing table [ 819.837940][T20473] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 819.924357][T20473] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 819.980063][T20473] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 820.038620][T20473] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 820.327133][T20473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 820.406910][T20473] 8021q: adding VLAN 0 to HW filter on device team0 [ 820.441816][T19596] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.449041][T19596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 820.521239][T19596] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.528502][T19596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 820.558469][T20770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4894'. [ 820.894845][T20784] ip_tables: iptables: counters copy to user failed while replacing table [ 821.963061][T20473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.129007][T20473] veth0_vlan: entered promiscuous mode [ 822.212237][T20473] veth1_vlan: entered promiscuous mode [ 822.324328][T20814] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4904'. [ 822.365646][T20473] veth0_macvtap: entered promiscuous mode [ 822.400212][T20473] veth1_macvtap: entered promiscuous mode [ 822.473738][T20473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.498782][T20473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 822.537063][T20473] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.546675][T20473] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.555544][T20473] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.564502][T20473] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.751875][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.778759][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.857801][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.885175][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.029290][T20830] syzkaller0: entered promiscuous mode [ 823.043517][T20830] syzkaller0: entered allmulticast mode [ 823.894220][T20859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4913'. [ 824.218430][T15274] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 824.229813][T15274] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 824.238842][T15274] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 824.247232][T15274] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 824.257275][T15274] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 824.270728][T15274] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 824.627886][T20869] rxe_eth0 speed is unknown, defaulting to 1000 [ 825.442306][T20913] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4925'. [ 825.721411][T11204] tipc: Left network mode [ 826.041278][T20936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4929'. [ 826.145313][T20869] chnl_net:caif_netlink_parms(): no params data found [ 826.313083][T20947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4931'. [ 826.333949][T15274] Bluetooth: hci3: command tx timeout [ 826.609953][T20869] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.628972][T20869] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.644666][T20869] bridge_slave_0: entered allmulticast mode [ 826.660292][T20869] bridge_slave_0: entered promiscuous mode [ 826.767128][T20869] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.793815][T20869] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.811036][T20869] bridge_slave_1: entered allmulticast mode [ 826.831637][T20869] bridge_slave_1: entered promiscuous mode [ 826.924206][T20966] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4935'. [ 826.980319][T20970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4937'. [ 827.011084][T20970] 8021q: adding VLAN 0 to HW filter on device bond25 [ 827.119292][T20869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.167860][T20869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.312284][T20869] team0: Port device team_slave_0 added [ 827.345213][T20869] team0: Port device team_slave_1 added [ 827.543674][T20987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4941'. [ 827.554077][T20869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.561190][T20869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.608801][T20869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.650077][T20869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.670250][T20869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.723722][T20869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.977828][T20869] hsr_slave_0: entered promiscuous mode [ 827.985093][T20869] hsr_slave_1: entered promiscuous mode [ 828.001695][T20869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 828.010905][T20869] Cannot create hsr debugfs directory [ 828.076326][T21000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4945'. [ 828.162305][T21000] 8021q: adding VLAN 0 to HW filter on device bond23 [ 828.413555][T15274] Bluetooth: hci3: command tx timeout [ 828.489454][T21018] tipc: Started in network mode [ 828.503695][T21018] tipc: Node identity 4a669a2da2c, cluster identity 4711 [ 828.521446][T21018] tipc: Enabled bearer , priority 0 [ 828.681744][T21020] syzkaller0: entered promiscuous mode [ 828.695500][T21020] syzkaller0: entered allmulticast mode [ 828.709017][T21020] tipc: Resetting bearer [ 828.762065][T11204] hsr_slave_0: left promiscuous mode [ 828.783926][T11204] hsr_slave_1: left promiscuous mode [ 829.026204][T21041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4954'. [ 829.198773][T11204] bond13 (unregistering): Released all slaves [ 829.427369][T11204] bond12 (unregistering): Released all slaves [ 829.588160][T11204] bond11 (unregistering): Released all slaves [ 829.747473][T11204] bond10 (unregistering): Released all slaves [ 829.905304][T11204] bond9 (unregistering): Released all slaves [ 830.053499][T11204] bond8 (unregistering): Released all slaves [ 830.212189][T11204] bond7 (unregistering): Released all slaves [ 830.364448][T11204] bond6 (unregistering): Released all slaves [ 830.497309][T15274] Bluetooth: hci3: command tx timeout [ 830.537154][T11204] bond5 (unregistering): Released all slaves [ 830.692613][T11204] bond4 (unregistering): Released all slaves [ 830.866157][T11204] bond3 (unregistering): Released all slaves [ 831.026167][T11204] bond2 (unregistering): Released all slaves [ 831.212445][T11204] bond1 (unregistering): Released all slaves [ 832.443838][T11204] bond0 (unregistering): Released all slaves [ 832.476781][T21015] tipc: Resetting bearer [ 832.573538][T15274] Bluetooth: hci3: command tx timeout [ 834.783017][T21015] tipc: Disabling bearer [ 834.818324][T21049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4956'. [ 834.849755][T21049] workqueue: Failed to create a rescuer kthread for wq "bond26": -EINTR [ 834.873462][ T8] tipc: Node number set to 3903232557 [ 835.479648][T21075] tipc: Enabled bearer , priority 0 [ 835.564825][T21075] syzkaller0: entered promiscuous mode [ 835.570577][T21075] syzkaller0: entered allmulticast mode [ 835.577321][T21075] tipc: Resetting bearer [ 835.661006][T21073] tipc: Resetting bearer [ 839.041699][T21073] tipc: Disabling bearer [ 839.051394][T21085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4965'. [ 839.173732][T21108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4968'. [ 839.518853][T20869] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 839.551808][T20869] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 839.582087][T20869] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 839.615237][T21125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4973'. [ 839.654497][T21125] 8021q: adding VLAN 0 to HW filter on device bond26 [ 839.661960][T20869] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 839.801070][T21125] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 839.831263][T21125] bond26: (slave batadv4): Enslaving as an active interface with an up link [ 839.884707][T21139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4976'. [ 839.952329][T21139] 8021q: adding VLAN 0 to HW filter on device bond24 [ 840.147811][T20869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 840.251923][T20869] 8021q: adding VLAN 0 to HW filter on device team0 [ 840.318477][T11204] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.325687][T11204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 840.346601][T11204] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.353815][T11204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 840.588145][T20869] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 840.613210][T20869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 840.779847][T21171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4986'. [ 840.868432][T21171] 8021q: adding VLAN 0 to HW filter on device bond27 [ 840.918166][T21177] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 840.957475][T21177] bond27: (slave batadv5): Enslaving as an active interface with an up link [ 841.182697][T20869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.297753][T20869] veth0_vlan: entered promiscuous mode [ 841.332963][T20869] veth1_vlan: entered promiscuous mode [ 841.416240][T20869] veth0_macvtap: entered promiscuous mode [ 841.427494][T20869] veth1_macvtap: entered promiscuous mode [ 841.475074][T20869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 841.492016][T20869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.504288][T20869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.519488][T20869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.530830][T20869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.551932][T20869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.581743][T20869] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.592569][T20869] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.601990][T20869] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.611074][T20869] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.839593][T20482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.854504][T20482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.953684][T19266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.961560][T19266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.219322][T21233] fuse: Unknown parameter '00000000000000000000' [ 843.883418][T20482] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.906520][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 843.918079][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 843.926996][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 843.954309][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 843.973602][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 843.982830][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 844.107440][T21251] x_tables: duplicate underflow at hook 2 [ 844.229020][T20482] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.308183][T21245] rxe_eth0 speed is unknown, defaulting to 1000 [ 844.731869][T20482] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.395402][T20482] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.814667][T21245] chnl_net:caif_netlink_parms(): no params data found [ 846.094169][T15274] Bluetooth: hci0: command tx timeout [ 846.535663][T21245] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.561368][T21245] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.588602][T21245] bridge_slave_0: entered allmulticast mode [ 846.614008][T21245] bridge_slave_0: entered promiscuous mode [ 846.797854][T21245] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.811801][T21245] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.833884][T21245] bridge_slave_1: entered allmulticast mode [ 847.193508][T21245] bridge_slave_1: entered promiscuous mode [ 847.696093][T21304] rxe_eth0 speed is unknown, defaulting to 1000 [ 848.100275][T21245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.173292][T15274] Bluetooth: hci0: command tx timeout [ 848.201111][T21245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.371996][T21245] team0: Port device team_slave_0 added [ 848.586783][T21245] team0: Port device team_slave_1 added [ 848.727079][T21245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 848.758537][T21245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 848.814301][T21245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.904723][T21245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 848.911732][T21245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 848.993470][T21245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.255307][T21245] hsr_slave_0: entered promiscuous mode [ 849.294906][T21245] hsr_slave_1: entered promiscuous mode [ 849.333288][T21245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 849.340905][T21245] Cannot create hsr debugfs directory [ 850.321052][T15274] Bluetooth: hci0: command tx timeout [ 850.853213][T20482] hsr_slave_0: left promiscuous mode [ 850.872450][T20482] hsr_slave_1: left promiscuous mode [ 851.065337][T20482] bond27 (unregistering): (slave batadv5): Releasing backup interface [ 851.331274][T20482] bond27 (unregistering): Released all slaves [ 851.390568][T20482] bond26 (unregistering): (slave batadv4): Releasing backup interface [ 851.655716][T20482] bond26 (unregistering): Released all slaves [ 851.955361][T20482] bond25 (unregistering): Released all slaves [ 852.228969][T20482] bond24 (unregistering): Released all slaves [ 852.334568][T15274] Bluetooth: hci0: command tx timeout [ 852.562065][T20482] bond23 (unregistering): Released all slaves [ 852.787637][T20482] bond22 (unregistering): Released all slaves [ 853.098929][T20482] bond21 (unregistering): Released all slaves [ 853.341778][T20482] bond20 (unregistering): Released all slaves [ 853.645799][T20482] bond19 (unregistering): Released all slaves [ 853.905554][T20482] bond18 (unregistering): Released all slaves [ 854.122607][T20482] bond17 (unregistering): Released all slaves [ 854.477332][T20482] bond16 (unregistering): Released all slaves [ 854.765465][T20482] bond15 (unregistering): Released all slaves [ 855.064340][T20482] bond14 (unregistering): Released all slaves [ 855.342038][T20482] bond13 (unregistering): Released all slaves [ 855.488370][T20482] bond12 (unregistering): Released all slaves [ 855.629898][T20482] bond11 (unregistering): Released all slaves [ 855.784343][T20482] bond10 (unregistering): Released all slaves [ 855.937782][T20482] bond9 (unregistering): Released all slaves [ 856.081751][T20482] bond8 (unregistering): Released all slaves [ 856.232293][T20482] bond7 (unregistering): Released all slaves [ 856.380802][T20482] bond6 (unregistering): Released all slaves [ 856.541547][T20482] bond5 (unregistering): Released all slaves [ 856.681634][T20482] bond4 (unregistering): Released all slaves [ 856.819287][T20482] bond3 (unregistering): Released all slaves [ 856.963448][T20482] bond2 (unregistering): Released all slaves [ 857.100253][T20482] bond1 (unregistering): Released all slaves [ 858.256933][T20482] bond0 (unregistering): Released all slaves [ 858.714648][T21380] i2c i2c-0: Failed to register i2c client fsa4480 at 0x42 (-16) [ 860.713912][T21245] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 860.727664][T20482] IPVS: stop unused estimator thread 0... [ 860.795883][T21245] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 860.826711][T21245] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 860.839748][T21413] loop2: detected capacity change from 0 to 33280 [ 860.872299][T21245] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 860.922375][T21413] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 861.047426][T21417] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 861.073988][T21413] EXT4-fs (loop2): 1 truncate cleaned up [ 861.112879][T21413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 861.279565][T21421] loop0: detected capacity change from 0 to 49152 [ 861.308231][T21421] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 861.350921][T21245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.430954][T21245] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.467582][T21421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w with ordered data mode. Quota mode: none. [ 861.855061][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.862244][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.906054][T21421] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 861.994522][T11195] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.001741][T11195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.154627][T13630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.221073][T20473] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.229062][T21442] netlink: 'syz.0.5043': attribute type 10 has an invalid length. [ 863.268161][T21442] syz_tun: entered promiscuous mode [ 863.301628][T21442] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 863.546303][T21245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 863.696337][T21245] veth0_vlan: entered promiscuous mode [ 863.846011][T21245] veth1_vlan: entered promiscuous mode [ 864.389346][T21245] veth0_macvtap: entered promiscuous mode [ 864.596606][T21245] veth1_macvtap: entered promiscuous mode [ 864.664911][T21245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.711099][T21245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.728975][T21245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.749293][T21245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.768218][T21245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.787024][T21245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.799361][T21245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.809746][T21245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.821784][T21245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.833970][T21245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.852692][T21245] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.873563][T21245] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.882306][T21245] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.891585][T21245] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.081999][T11204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.113344][T11204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.264609][T11204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.272488][T11204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.420362][T21486] veth0_vlan: left promiscuous mode [ 865.433552][T21486] veth0_vlan: entered allmulticast mode [ 865.447529][T21486] veth0_vlan: entered promiscuous mode [ 866.427166][T21501] syzkaller0: entered promiscuous mode [ 866.432707][T21501] syzkaller0: entered allmulticast mode [ 867.384355][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 867.404728][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 867.414473][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 867.425240][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 867.434874][ T5793] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 867.450173][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 867.622238][T21525] rxe_eth0 speed is unknown, defaulting to 1000 [ 867.736815][T21522] loop3: detected capacity change from 0 to 49152 [ 867.772633][T21522] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 867.904789][T21522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w with ordered data mode. Quota mode: none. [ 867.941677][T21538] FAULT_INJECTION: forcing a failure. [ 867.941677][T21538] name fail_futex, interval 1, probability 0, space 0, times 0 [ 867.955127][T21538] CPU: 1 PID: 21538 Comm: syz.1.5060 Not tainted syzkaller #0 [ 867.962655][T21538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 867.972719][T21538] Call Trace: [ 867.976006][T21538] [ 867.978939][T21538] dump_stack_lvl+0x18c/0x250 [ 867.983708][T21538] ? show_regs_print_info+0x20/0x20 [ 867.988901][T21538] ? load_image+0x420/0x420 [ 867.993413][T21538] ? __lock_acquire+0x1431/0x7eb0 [ 867.998473][T21538] should_fail_ex+0x394/0x4c0 [ 868.003178][T21538] get_futex_key+0x134/0xf40 [ 868.007777][T21538] ? futex_setup_timer+0xc0/0xc0 [ 868.012714][T21538] futex_wake+0x127/0x4f0 [ 868.017089][T21538] ? futex_wake_mark+0x150/0x150 [ 868.022096][T21538] do_futex+0x35d/0x3e0 [ 868.026248][T21538] ? __might_fault+0xaa/0x120 [ 868.030955][T21538] ? __ia32_sys_get_robust_list+0x110/0x110 [ 868.036848][T21538] ? __might_fault+0xc6/0x120 [ 868.041526][T21538] mm_release+0x184/0x3a0 [ 868.045938][T21538] ? exit_mm_release+0x30/0x30 [ 868.050701][T21538] ? lockdep_hardirqs_on+0x98/0x150 [ 868.055954][T21538] exit_mm+0xa4/0x340 [ 868.059942][T21538] ? sysctl_delayacct+0x220/0x220 [ 868.064963][T21538] ? do_exit+0x2530/0x2530 [ 868.069383][T21538] do_exit+0x909/0x2530 [ 868.073548][T21538] ? put_task_struct+0xc0/0xc0 [ 868.078321][T21538] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 868.084295][T21538] ? get_signal+0x100e/0x1390 [ 868.088966][T21538] ? lock_chain_count+0x20/0x20 [ 868.093829][T21538] ? _raw_spin_lock_irq+0xbb/0xf0 [ 868.098965][T21538] do_group_exit+0x22d/0x2f0 [ 868.103556][T21538] ? lockdep_hardirqs_on+0x98/0x150 [ 868.108759][T21538] get_signal+0x12a6/0x1390 [ 868.113286][T21538] arch_do_signal_or_restart+0xc2/0x7b0 [ 868.118879][T21538] ? __ia32_sys_get_robust_list+0x110/0x110 [ 868.124770][T21538] ? get_sigframe_size+0x20/0x20 [ 868.129725][T21538] ? exit_to_user_mode_loop+0x3b/0x110 [ 868.135191][T21538] exit_to_user_mode_loop+0x70/0x110 [ 868.140474][T21538] exit_to_user_mode_prepare+0xee/0x180 [ 868.146027][T21538] syscall_exit_to_user_mode+0x1a/0x50 [ 868.151481][T21538] do_syscall_64+0x61/0xb0 [ 868.155895][T21538] ? clear_bhb_loop+0x40/0x90 [ 868.160666][T21538] ? clear_bhb_loop+0x40/0x90 [ 868.165349][T21538] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 868.171249][T21538] RIP: 0033:0x7f04f69a94d9 [ 868.175662][T21538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.195265][T21538] RSP: 002b:00007f04f78780e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 868.203674][T21538] RAX: fffffffffffffe00 RBX: 00007f04f6c25fa8 RCX: 00007f04f69a94d9 [ 868.211641][T21538] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f04f6c25fa8 [ 868.219612][T21538] RBP: 00007f04f6c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 868.227579][T21538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 868.235549][T21538] R13: 00007f04f6c26038 R14: 00007ffe5af112c0 R15: 00007ffe5af113a8 [ 868.243616][T21538] [ 868.249221][T21522] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 868.461980][T20869] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.533379][ T5793] Bluetooth: hci2: command tx timeout [ 869.674478][T21565] syzkaller0: entered promiscuous mode [ 869.703479][T21565] syzkaller0: entered allmulticast mode [ 869.779820][T21525] chnl_net:caif_netlink_parms(): no params data found [ 869.932840][ T61] tipc: Disabling bearer [ 869.944135][ T61] tipc: Left network mode [ 870.139126][T21525] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.164665][T21525] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.186388][T21525] bridge_slave_0: entered allmulticast mode [ 870.203042][T21525] bridge_slave_0: entered promiscuous mode [ 870.232183][T21525] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.259031][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.266159][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.282360][T21525] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.300091][T21525] bridge_slave_1: entered allmulticast mode [ 870.311422][T21525] bridge_slave_1: entered promiscuous mode [ 870.667930][T21525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 870.758265][T21525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 870.838236][T21525] team0: Port device team_slave_0 added [ 870.852114][T21525] team0: Port device team_slave_1 added [ 870.908528][T21604] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5072'. [ 870.963619][T21604] ip_tables: iptables: counters copy to user failed while replacing table [ 870.974189][T21525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 870.982245][T21525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 871.067650][T21525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 871.142725][T21525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 871.163603][T21525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 871.191972][T21525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.633199][T15274] Bluetooth: hci2: command tx timeout [ 872.119647][T21525] hsr_slave_0: entered promiscuous mode [ 872.138070][T21525] hsr_slave_1: entered promiscuous mode [ 872.148984][T21525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 872.159291][T21525] Cannot create hsr debugfs directory [ 872.701854][ T61] hsr_slave_0: left promiscuous mode [ 872.716481][ T61] hsr_slave_1: left promiscuous mode [ 872.767215][ T61] veth0_vlan: left promiscuous mode [ 872.937745][T21644] FAULT_INJECTION: forcing a failure. [ 872.937745][T21644] name failslab, interval 1, probability 0, space 0, times 0 [ 872.959481][T21644] CPU: 0 PID: 21644 Comm: syz.1.5078 Not tainted syzkaller #0 [ 872.966995][T21644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 872.977082][T21644] Call Trace: [ 872.980386][T21644] [ 872.983333][T21644] dump_stack_lvl+0x18c/0x250 [ 872.988013][T21644] ? show_regs_print_info+0x20/0x20 [ 872.993250][T21644] ? load_image+0x420/0x420 [ 872.997742][T21644] ? __might_sleep+0xe0/0xe0 [ 873.002318][T21644] ? __lock_acquire+0x7eb0/0x7eb0 [ 873.007337][T21644] should_fail_ex+0x394/0x4c0 [ 873.012012][T21644] should_failslab+0x9/0x20 [ 873.016511][T21644] slab_pre_alloc_hook+0x59/0x300 [ 873.021571][T21644] ? vidtv_psi_pat_program_init+0x5a/0x270 [ 873.027506][T21644] __kmem_cache_alloc_node+0x53/0x260 [ 873.032929][T21644] ? vidtv_psi_pat_program_init+0x5a/0x270 [ 873.039518][T21644] kmalloc_trace+0x2a/0xe0 [ 873.043934][T21644] vidtv_psi_pat_program_init+0x5a/0x270 [ 873.049586][T21644] vidtv_channel_s302m_init+0x1f4/0x830 [ 873.055158][T21644] vidtv_channels_init+0x45/0xa0 [ 873.060104][T21644] vidtv_mux_init+0x4d4/0x1950 [ 873.064882][T21644] ? rcu_is_watching+0x15/0xb0 [ 873.069642][T21644] vidtv_start_feed+0x36c/0x590 [ 873.074490][T21644] ? vidtv_i2c_func+0x10/0x10 [ 873.079184][T21644] ? vidtv_stop_feed+0x260/0x260 [ 873.084123][T21644] ? lock_chain_count+0x20/0x20 [ 873.088961][T21644] ? _raw_spin_lock_irq+0xbb/0xf0 [ 873.093976][T21644] ? _raw_spin_unlock_irq+0x23/0x50 [ 873.099161][T21644] dmx_section_feed_start_filtering+0x4f7/0x690 [ 873.105488][T21644] dvb_dmxdev_filter_start+0xc9a/0x10a0 [ 873.111028][T21644] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 873.116481][T21644] dvb_demux_do_ioctl+0x467/0x530 [ 873.121502][T21644] dvb_usercopy+0x195/0x2b0 [ 873.126007][T21644] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 873.131555][T21644] ? dvb_generic_ioctl+0xb0/0xb0 [ 873.136498][T21644] ? dvb_demux_poll+0x210/0x210 [ 873.141333][T21644] dvb_demux_ioctl+0x29/0x30 [ 873.145912][T21644] __se_sys_ioctl+0xfd/0x170 [ 873.150521][T21644] do_syscall_64+0x55/0xb0 [ 873.154927][T21644] ? clear_bhb_loop+0x40/0x90 [ 873.159596][T21644] ? clear_bhb_loop+0x40/0x90 [ 873.164301][T21644] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 873.170185][T21644] RIP: 0033:0x7f04f69a94d9 [ 873.174594][T21644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.194196][T21644] RSP: 002b:00007f04f7857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 873.202595][T21644] RAX: ffffffffffffffda RBX: 00007f04f6c26090 RCX: 00007f04f69a94d9 [ 873.210575][T21644] RDX: 0000200000002800 RSI: 00000000403c6f2b RDI: 0000000000000009 [ 873.213282][ T5793] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 873.218528][T21644] RBP: 00007f04f6a3804e R08: 0000000000000000 R09: 0000000000000000 [ 873.232969][T21644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 873.240963][T21644] R13: 00007f04f6c26128 R14: 00007f04f6c26090 R15: 00007ffe5af113a8 [ 873.248963][T21644] [ 873.364039][ T61] bond24 (unregistering): Released all slaves [ 873.680279][ T61] bond23 (unregistering): Released all slaves [ 873.693325][ T5793] Bluetooth: hci2: command tx timeout [ 874.021197][ T61] bond22 (unregistering): Released all slaves [ 874.456516][ T61] bond21 (unregistering): (slave batadv2): Releasing active interface [ 874.899922][ T61] bond21 (unregistering): Released all slaves [ 875.056162][ T61] bond20 (unregistering): Released all slaves [ 875.206816][ T61] bond19 (unregistering): Released all slaves [ 875.358972][ T61] bond18 (unregistering): Released all slaves [ 875.520035][ T61] bond17 (unregistering): Released all slaves [ 875.669486][ T61] bond16 (unregistering): Released all slaves [ 875.775064][ T5793] Bluetooth: hci2: command tx timeout [ 875.824012][ T61] bond15 (unregistering): Released all slaves [ 875.979534][ T61] bond14 (unregistering): Released all slaves [ 876.135879][ T61] bond13 (unregistering): Released all slaves [ 876.285765][ T61] bond12 (unregistering): Released all slaves [ 876.451514][ T61] bond11 (unregistering): Released all slaves [ 876.606261][ T61] bond10 (unregistering): Released all slaves [ 876.758225][ T61] bond9 (unregistering): Released all slaves [ 876.910485][ T61] bond8 (unregistering): Released all slaves [ 877.056277][ T61] bond7 (unregistering): Released all slaves [ 877.210466][ T61] bond6 (unregistering): Released all slaves [ 877.367043][ T61] bond5 (unregistering): Released all slaves [ 877.522311][ T61] bond4 (unregistering): Released all slaves [ 877.669972][ T61] bond3 (unregistering): Released all slaves [ 877.810475][ T61] bond2 (unregistering): Released all slaves [ 877.962397][ T61] bond1 (unregistering): Released all slaves [ 879.101306][ T61] bond0 (unregistering): Released all slaves [ 879.203213][T21659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5083'. [ 879.501707][T21670] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5085'. [ 879.535049][T21670] ip_tables: iptables: counters copy to user failed while replacing table [ 880.205608][T21525] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 880.249663][T21525] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 880.300194][ T61] IPVS: stop unused estimator thread 0... [ 880.313764][T21525] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 880.362080][T21525] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 881.408964][T21525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 881.435364][T21706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5092'. [ 881.457299][T21707] md: array md3 already has disks! [ 881.480331][T21707] md: could not open device unknown-block(1,6). [ 881.503064][T21706] 8021q: adding VLAN 0 to HW filter on device bond1 [ 881.513337][T21707] md: error, md_import_device() returned -16 [ 881.534756][T21710] md: could not open device unknown-block(1,7). [ 881.552264][T21710] md: error, md_import_device() returned -16 [ 881.586499][T21709] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 881.683860][T21707] md/raid1:md3: active with 1 out of 1027 mirrors [ 881.692384][T21525] 8021q: adding VLAN 0 to HW filter on device team0 [ 881.701110][T21707] md3: detected capacity change from 0 to 5884 [ 881.748260][T20482] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.755491][T20482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 881.803051][T21710] md3: detected capacity change from 5884 to 0 [ 881.846116][T19596] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.853353][T19596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 881.853787][T21710] md: md3 stopped. [ 882.610027][T21525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 882.634968][T21740] loop1: detected capacity change from 0 to 33792 [ 882.655054][T21740] EXT4-fs: Ignoring removed bh option [ 882.671549][T21731] loop3: detected capacity change from 0 to 49152 [ 882.685164][T21731] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 882.709453][T21740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 882.767224][T21525] veth0_vlan: entered promiscuous mode [ 882.796657][T21525] veth1_vlan: entered promiscuous mode [ 882.849440][T21731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w with ordered data mode. Quota mode: none. [ 882.863261][T21731] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 882.875641][T21740] FAULT_INJECTION: forcing a failure. [ 882.875641][T21740] name failslab, interval 1, probability 0, space 0, times 0 [ 882.908417][T21525] veth0_macvtap: entered promiscuous mode [ 882.932181][T21740] CPU: 0 PID: 21740 Comm: syz.1.5098 Not tainted syzkaller #0 [ 882.939706][T21740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 882.949794][T21740] Call Trace: [ 882.953101][T21740] [ 882.956065][T21740] dump_stack_lvl+0x18c/0x250 [ 882.960788][T21740] ? show_regs_print_info+0x20/0x20 [ 882.966043][T21740] ? load_image+0x420/0x420 [ 882.970581][T21740] ? __might_sleep+0xe0/0xe0 [ 882.975207][T21740] ? __lock_acquire+0x7eb0/0x7eb0 [ 882.980302][T21740] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 882.986243][T21740] should_fail_ex+0x394/0x4c0 [ 882.990956][T21740] should_failslab+0x9/0x20 [ 882.995484][T21740] slab_pre_alloc_hook+0x59/0x300 [ 883.000534][T21740] ? pcpu_alloc+0x11e7/0x1880 [ 883.005245][T21740] ? percpu_ref_init+0xc3/0x340 [ 883.010174][T21740] __kmem_cache_alloc_node+0x53/0x260 [ 883.015584][T21740] ? percpu_ref_init+0xc3/0x340 [ 883.020472][T21740] ? blk_timeout_work+0x10/0x10 [ 883.025410][T21740] kmalloc_trace+0x2a/0xe0 [ 883.029863][T21740] percpu_ref_init+0xc3/0x340 [ 883.034575][T21740] blk_alloc_queue+0x369/0x4c0 [ 883.039379][T21740] __blk_alloc_disk+0x19/0x80 [ 883.044122][T21740] dm_create+0x46f/0xf90 [ 883.048445][T21740] dev_create+0x1f8/0x400 [ 883.052828][T21740] ? list_devices+0x8a0/0x8a0 [ 883.057540][T21740] ? __might_fault+0xaa/0x120 [ 883.062256][T21740] ? __might_fault+0xc6/0x120 [ 883.066965][T21740] ? __might_fault+0xaa/0x120 [ 883.071668][T21740] ? list_devices+0x8a0/0x8a0 [ 883.076381][T21740] dm_ctl_ioctl+0x975/0xd00 [ 883.080932][T21740] ? list_devices+0x8a0/0x8a0 [ 883.085648][T21740] ? dm_poll+0x120/0x120 [ 883.089959][T21740] ? bpf_lsm_file_ioctl+0x9/0x10 [ 883.094964][T21740] ? security_file_ioctl+0x80/0xa0 [ 883.100140][T21740] ? dm_poll+0x120/0x120 [ 883.104416][T21740] __se_sys_ioctl+0xfd/0x170 [ 883.109039][T21740] do_syscall_64+0x55/0xb0 [ 883.113486][T21740] ? clear_bhb_loop+0x40/0x90 [ 883.118191][T21740] ? clear_bhb_loop+0x40/0x90 [ 883.122908][T21740] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 883.128835][T21740] RIP: 0033:0x7f04f69a94d9 [ 883.133276][T21740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.152918][T21740] RSP: 002b:00007f04f7878028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 883.161370][T21740] RAX: ffffffffffffffda RBX: 00007f04f6c25fa0 RCX: 00007f04f69a94d9 [ 883.169376][T21740] RDX: 0000200000000b00 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 883.177381][T21740] RBP: 00007f04f6a3804e R08: 0000000000000000 R09: 0000000000000000 [ 883.185388][T21740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 883.191326][T21525] veth1_macvtap: entered promiscuous mode [ 883.193364][T21740] R13: 00007f04f6c26038 R14: 00007f04f6c25fa0 R15: 00007ffe5af113a8 [ 883.193397][T21740] [ 883.262297][T21749] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 883.322519][T21525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.345170][T20869] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.370410][T21525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.403262][T21525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.453430][T21525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.481806][T21525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.492198][T21245] EXT4-fs error (device loop1): ext4_read_inline_dir:1600: inode #12: block 7: comm syz-executor: path /15/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 883.536905][T21245] EXT4-fs (loop1): Remounting filesystem read-only [ 883.567234][T21525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.598173][T21525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 883.681948][T21525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.720800][T21525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.743148][T21525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.763189][T21525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.773060][T21525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.809011][T21525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.839372][T21525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 883.867829][T21525] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.877216][T21525] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.888441][T21525] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.909139][T21525] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.877637][T21245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.022737][T11195] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.291108][T11195] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.426423][T11195] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.492545][T20482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.509546][T20482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.548236][T11195] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.619791][T20482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.641736][T20482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.172421][T21798] loop2: detected capacity change from 0 to 33280 [ 886.204826][T21789] loop0: detected capacity change from 0 to 49152 [ 886.241895][T21789] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 886.247023][T21798] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 886.266348][T15274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 886.280684][T15274] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 886.289435][T15274] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 886.302882][T15274] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 886.317510][T15274] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 886.329681][T15274] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 886.331484][T21798] EXT4-fs (loop2): 1 truncate cleaned up [ 886.389158][T21789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w with ordered data mode. Quota mode: none. [ 886.437153][T21798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 886.485685][T21789] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 886.705944][T20473] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.746325][T21799] rxe_eth0 speed is unknown, defaulting to 1000 [ 886.926060][T21525] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 887.915359][T21825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5111'. [ 888.068810][T21825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 888.107841][T21826] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 888.424766][T15274] Bluetooth: hci0: command tx timeout [ 888.730253][T21851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5116'. [ 888.770356][T21851] ip_tables: iptables: counters copy to user failed while replacing table [ 889.090172][T21799] chnl_net:caif_netlink_parms(): no params data found [ 890.182366][T11195] hsr_slave_0: left promiscuous mode [ 890.194206][T11195] hsr_slave_1: left promiscuous mode [ 890.239268][T11195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 890.250929][T11195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 890.284570][T11195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 890.303411][T11195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 890.329439][T11195] bridge_slave_1: left allmulticast mode [ 890.349702][T11195] bridge_slave_1: left promiscuous mode [ 890.371626][T11195] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.407437][T11195] bridge_slave_0: left allmulticast mode [ 890.423174][T11195] bridge_slave_0: left promiscuous mode [ 890.445480][T11195] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.493533][T15274] Bluetooth: hci0: command tx timeout [ 890.509149][T11195] veth1_macvtap: left promiscuous mode [ 890.524838][T11195] veth0_macvtap: left promiscuous mode [ 890.532378][T11195] veth1_vlan: left promiscuous mode [ 890.538529][T11195] veth0_vlan: left promiscuous mode [ 891.392438][T11195] team0 (unregistering): Port device team_slave_1 removed [ 891.438320][T11195] team0 (unregistering): Port device team_slave_0 removed [ 891.492798][T11195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.545816][T11195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.937730][T11195] bond0 (unregistering): Released all slaves [ 892.035869][T21878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5123'. [ 892.337034][T21902] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5126'. [ 892.349245][T21902] ip_tables: iptables: counters copy to user failed while replacing table [ 892.469946][T21799] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.489837][T21799] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.513358][T21799] bridge_slave_0: entered allmulticast mode [ 892.524767][T21799] bridge_slave_0: entered promiscuous mode [ 892.543805][T21799] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.557786][T21799] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.575147][T15274] Bluetooth: hci0: command tx timeout [ 892.603228][T21799] bridge_slave_1: entered allmulticast mode [ 892.956629][T21799] bridge_slave_1: entered promiscuous mode [ 893.395107][T21799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.455949][T21799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.503861][T21916] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN [ 893.515631][T21916] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 893.524066][T21916] CPU: 0 PID: 21916 Comm: syz.3.5130 Not tainted syzkaller #0 [ 893.531544][T21916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 893.541618][T21916] RIP: 0010:__percpu_ref_switch_mode+0x123/0x5f0 [ 893.547979][T21916] Code: 31 ff 89 c6 e8 6e 7a 59 fd 45 85 ff 0f 84 5a 04 00 00 e8 b0 76 59 fd eb 05 e8 a9 76 59 fd 4d 8d 74 24 10 4d 89 f5 49 c1 ed 03 <41> 80 7c 1d 00 00 74 08 4c 89 f7 e8 3d 7f b2 fd 49 83 3e 00 0f 84 [ 893.567607][T21916] RSP: 0018:ffffc900035af8e0 EFLAGS: 00010002 [ 893.573691][T21916] RAX: ffffffff842e67f0 RBX: dffffc0000000000 RCX: 0000000000080000 [ 893.581676][T21916] RDX: ffffc9000ca29000 RSI: 00000000000022a9 RDI: 00000000000022aa [ 893.589641][T21916] RBP: ffffc900035af9f8 R08: 0000000000000003 R09: 0000000000000004 [ 893.597608][T21916] R10: dffffc0000000000 R11: fffff520006b5f1c R12: 0000000000000000 [ 893.605571][T21916] R13: 0000000000000002 R14: 0000000000000010 R15: 0000000000000001 [ 893.613538][T21916] FS: 00007f77c37f66c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 893.622471][T21916] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 893.629081][T21916] CR2: 00007f234dc774e8 CR3: 00000000585c4000 CR4: 00000000003506f0 [ 893.637059][T21916] Call Trace: [ 893.640331][T21916] [ 893.643260][T21916] ? percpu_ref_switch_to_atomic+0xa0/0xa0 [ 893.649073][T21916] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 893.654540][T21916] ? _raw_spin_lock+0x40/0x40 [ 893.659211][T21916] percpu_ref_kill_and_confirm+0x9b/0x130 [ 893.664927][T21916] __mddev_suspend+0x2d1/0x630 [ 893.669788][T21916] ? rcu_read_unlock+0xa0/0xa0 [ 893.674548][T21916] ? _parse_integer_limit+0x19c/0x1e0 [ 893.679913][T21916] ? kstrtoull+0x130/0x1d0 [ 893.684321][T21916] raid_disks_store+0xb8/0x550 [ 893.689073][T21916] ? md_attr_store+0x175/0x390 [ 893.693823][T21916] ? __lock_acquire+0x7eb0/0x7eb0 [ 893.698838][T21916] ? raid_disks_show+0x140/0x140 [ 893.703763][T21916] ? do_raw_spin_unlock+0x121/0x230 [ 893.708956][T21916] md_attr_store+0x19c/0x390 [ 893.713548][T21916] ? sysfs_kf_read+0x360/0x360 [ 893.718345][T21916] kernfs_fop_write_iter+0x3a4/0x520 [ 893.723622][T21916] vfs_write+0x474/0x9a0 [ 893.727870][T21916] ? file_end_write+0x250/0x250 [ 893.732718][T21916] ? __fget_files+0x3fc/0x460 [ 893.737391][T21916] ? __fdget_pos+0x2a3/0x330 [ 893.741981][T21916] ? ksys_write+0x74/0x260 [ 893.746396][T21916] ksys_write+0x151/0x260 [ 893.750744][T21916] ? __ia32_sys_read+0x90/0x90 [ 893.755529][T21916] ? lockdep_hardirqs_on+0x98/0x150 [ 893.760729][T21916] do_syscall_64+0x55/0xb0 [ 893.765228][T21916] ? clear_bhb_loop+0x40/0x90 [ 893.769903][T21916] ? clear_bhb_loop+0x40/0x90 [ 893.774571][T21916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 893.780460][T21916] RIP: 0033:0x7f77c55a94d9 [ 893.784871][T21916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 893.804482][T21916] RSP: 002b:00007f77c37f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 893.812888][T21916] RAX: ffffffffffffffda RBX: 00007f77c5825fa0 RCX: 00007f77c55a94d9 [ 893.820852][T21916] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000005 [ 893.828818][T21916] RBP: 00007f77c563804e R08: 0000000000000000 R09: 0000000000000000 [ 893.836782][T21916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 893.844749][T21916] R13: 00007f77c5826038 R14: 00007f77c5825fa0 R15: 00007ffc63b1c208 [ 893.852724][T21916] [ 893.855749][T21916] Modules linked in: [ 893.859645][T21916] ---[ end trace 0000000000000000 ]--- [ 893.865175][T21916] RIP: 0010:__percpu_ref_switch_mode+0x123/0x5f0 [ 893.871502][T21916] Code: 31 ff 89 c6 e8 6e 7a 59 fd 45 85 ff 0f 84 5a 04 00 00 e8 b0 76 59 fd eb 05 e8 a9 76 59 fd 4d 8d 74 24 10 4d 89 f5 49 c1 ed 03 <41> 80 7c 1d 00 00 74 08 4c 89 f7 e8 3d 7f b2 fd 49 83 3e 00 0f 84 [ 893.891128][T21916] RSP: 0018:ffffc900035af8e0 EFLAGS: 00010002 [ 893.897183][T21916] RAX: ffffffff842e67f0 RBX: dffffc0000000000 RCX: 0000000000080000 [ 893.905144][T21916] RDX: ffffc9000ca29000 RSI: 00000000000022a9 RDI: 00000000000022aa [ 893.913105][T21916] RBP: ffffc900035af9f8 R08: 0000000000000003 R09: 0000000000000004 [ 893.921067][T21916] R10: dffffc0000000000 R11: fffff520006b5f1c R12: 0000000000000000 [ 893.929031][T21916] R13: 0000000000000002 R14: 0000000000000010 R15: 0000000000000001 [ 893.937081][T21916] FS: 00007f77c37f66c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 893.946005][T21916] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 893.952577][T21916] CR2: 00007f234dc774e8 CR3: 00000000585c4000 CR4: 00000000003506f0 [ 893.960543][T21916] Kernel panic - not syncing: Fatal exception [ 893.966839][T21916] Kernel Offset: disabled [ 893.971154][T21916] Rebooting in 86400 seconds..