last executing test programs: 10m37.866654398s ago: executing program 1 (id=639): futex(0x0, 0x10b, 0x4, 0x0, &(0x7f0000000140), 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 10m32.266089801s ago: executing program 1 (id=649): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) socket$netlink(0x10, 0x3, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'hsr0\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @loopback, 0x1}}, 0x0, 0x0, 0x2d, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169282, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x70, 0x0, 0x9, 0x401, 0x0, 0x0, {0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x70}}, 0x4008000) mkdir(0x0, 0x0) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000880)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESDEC=r7], 0x27) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) connect$can_j1939(r5, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x57, 0x0, 0x4, {0xffff, 0x1}, {0x45, 0x5}, @cond=[{0x2, 0x5388, 0x6, 0x800, 0x80cb, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6, 0x1}]}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x2) ptrace$pokeuser(0x6, r3, 0x358, 0xafe8) 10m31.308786084s ago: executing program 1 (id=652): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0xa, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x66, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x7c56c988f0195595, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0xa, "7556feb9ab8f11d9"}]}}}}}}}, 0x0) 10m31.028213088s ago: executing program 1 (id=653): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mkdir(&(0x7f0000000280)='./file0/file1\x00', 0xb) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0/file1\x00', 0x0, 0x2243005, 0x0) 10m30.518724492s ago: executing program 1 (id=655): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=@delchain={0x40, 0x2c, 0xf31, 0x80, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008844}, 0x0) 10m28.402644975s ago: executing program 1 (id=658): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x22200, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 10m27.856471242s ago: executing program 32 (id=658): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x22200, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 23.262126548s ago: executing program 4 (id=2999): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000600)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1, 0x30, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e24, 0x4e20, 0x1c, 0x0, @opaque="5b730c0c07dd0d8a366ce2acc6ba8906dc14b4f3"}}}, 0x3e) 22.846411765s ago: executing program 4 (id=3005): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) recvmmsg(r4, 0x0, 0x0, 0x40010022, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10a1, 0x0) sendmsg$can_bcm(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 19.912670101s ago: executing program 4 (id=3008): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_DATA={0x14, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x9, 0x1, "261fbabd4e"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) 19.833642828s ago: executing program 4 (id=3011): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_DATA={0x14, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x10, 0x1, "261fbabdae20b34f1f386d4e"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x110}}, 0x0) 19.702620799s ago: executing program 4 (id=3012): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xa4, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x68, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_a, @initial, {0xf, 0x5}}, 0x9, @default, 0x1000, @val, @void, @void, @val={0x4, 0x6, {0x83, 0x8, 0x9, 0x4}}, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @void, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x12f, 0x6}}}}, @NL80211_ATTR_FRAME={0x1f, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x4}, @device_b, @device_b, @initial, {0x1, 0xf52}}, @vht_op_mode_ntf={0x15, 0x2, {0x0, 0x1, 0x0, 0x7}}}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20008000) 19.623095596s ago: executing program 4 (id=3014): r0 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) r3 = socket(0x840000000002, 0x3, 0x100) getsockopt$inet_mreqn(r3, 0x0, 0x33, 0x0, &(0x7f0000000740)=0x2) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028004001200050016000200000006001800"], 0x50}}, 0x4080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000", @ANYRES32=0x0], 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@ipv6_newaddrlabel={0x1c, 0x48, 0x200, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, r2, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) syz_emit_ethernet(0x7e, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @private=0xa010100, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@loopback}]}, @cipso={0x86, 0x1e, 0x0, [{0x0, 0x12, "00000000000000963d096612e35232da"}, {0x0, 0x4, "4eb8"}, {0x0, 0x2}]}, @ssrr={0x89, 0x3}]}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0xffffff1f, 0x10, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MAP={0x24, 0xe, {0x9, 0x6, 0xfffffffffffffffe, 0xfff, 0x6, 0xf6}}]}, 0x58}}, 0x0) 12.874485966s ago: executing program 2 (id=3042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x20040840) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0xa888}], 0x2}, 0x44005) 9.290937008s ago: executing program 2 (id=3051): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @local}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc804}, 0x2) 8.943152719s ago: executing program 3 (id=3055): socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_DATA={0x14, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x9, 0x1, "261fbabd4e"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) 8.650252694s ago: executing program 3 (id=3057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x20040840) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0xa888}], 0x2}, 0x44005) 3.744608493s ago: executing program 2 (id=3059): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000300)={0x1, 0x4}, 0x2) 3.526584582s ago: executing program 2 (id=3060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x4, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 3.520734072s ago: executing program 0 (id=3061): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 3.418891271s ago: executing program 0 (id=3062): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000082) 3.326891959s ago: executing program 0 (id=3063): socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_DATA={0x14, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x9, 0x1, "261fbabd4e"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) 513.932165ms ago: executing program 3 (id=3064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40840}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000500)=0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x2) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200448c1}, 0x40) 503.484426ms ago: executing program 0 (id=3071): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xc2ba7682323d1143, 0x0, 0x0, {0x5, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) 493.186727ms ago: executing program 2 (id=3065): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)={0x40, 0x1, 0x8, 0x401, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x40}, 0x1, 0x0, 0x0, 0x8050}, 0x200000c0) 364.707228ms ago: executing program 3 (id=3066): syz_emit_ethernet(0x7e, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @private=0xa010100, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@loopback}]}, @cipso={0x86, 0x1e, 0x0, [{0x0, 0x12, "00000000000000963d096612e35232da"}, {0x0, 0x4, "4eb8"}, {0x0, 0x2}]}, @ssrr={0x89, 0x3}]}}}}}}}, 0x0) 202.408562ms ago: executing program 0 (id=3067): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, r0, 0x60b, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TSID={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) 202.078862ms ago: executing program 2 (id=3068): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x8, 0x10}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xf04, 0x1, 0xff00}, {0x200, 0x8c5a, 0xcc3f, 0x1, 0x2, 0x2, 0x25d2db1085198a40}}}]}]}]}}]}, 0x5c}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="95", 0x1}], 0x1}, 0x0) 171.782134ms ago: executing program 3 (id=3069): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bic', 0x3) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000040)={0x8, 0x9, 0xe, 0x8743, 0x4, 0x2, 0xd}) r1 = accept4(r0, 0x0, 0x0, 0x80800) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000140)) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) 540.22µs ago: executing program 0 (id=3070): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom(r0, 0x0, 0x63, 0x2, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) 0s ago: executing program 3 (id=3072): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 308762][T11443] bond6: entered promiscuous mode [ 569.314292][T11443] 8021q: adding VLAN 0 to HW filter on device bond6 [ 569.387536][T11443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1646'. [ 569.402807][T11443] bond6: entered allmulticast mode [ 569.414028][T11445] tipc: Enabled bearer , priority 0 [ 569.427868][T11445] syzkaller0: entered promiscuous mode [ 569.433429][T11445] syzkaller0: entered allmulticast mode [ 569.442827][T11440] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1644'. [ 569.478251][T11448] bond6: (slave bridge5): making interface the new active one [ 569.487383][T11448] bridge5: entered promiscuous mode [ 569.492792][T11448] bridge5: entered allmulticast mode [ 569.499398][T11448] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 569.519735][T11440] tipc: Resetting bearer [ 569.589064][T11438] tipc: Resetting bearer [ 569.634871][T11438] tipc: Disabling bearer [ 569.653824][T11445] tipc: Resetting bearer [ 569.686806][T11442] tipc: Resetting bearer [ 569.724101][T11442] tipc: Disabling bearer [ 570.017331][T11469] libceph: resolve '0..' (ret=-3): failed [ 570.892478][T11476] syzkaller0: entered promiscuous mode [ 570.898230][T11476] syzkaller0: entered allmulticast mode [ 570.923943][T11475] libceph: resolve '0..' (ret=-3): failed [ 572.705171][T11457] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 572.954219][T11480] tipc: Enabled bearer , priority 0 [ 572.989168][T11480] syzkaller0: entered promiscuous mode [ 573.007629][T11480] syzkaller0: entered allmulticast mode [ 573.053015][T11486] netlink: 'syz.0.1658': attribute type 1 has an invalid length. [ 573.085340][T11484] libceph: resolve '0..' (ret=-3): failed [ 573.139735][T11486] bond7: entered promiscuous mode [ 573.152833][T11486] 8021q: adding VLAN 0 to HW filter on device bond7 [ 573.188282][T11488] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1658'. [ 573.212079][T11488] bond7: entered allmulticast mode [ 573.249850][T11490] tipc: Resetting bearer [ 573.295834][T11486] bond7: (slave bridge6): making interface the new active one [ 573.313040][T11486] bridge6: entered promiscuous mode [ 573.319617][T11486] bridge6: entered allmulticast mode [ 573.330540][T11486] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 573.341071][T11479] tipc: Resetting bearer [ 573.390176][T11479] tipc: Disabling bearer [ 573.713281][T11497] netlink: 'syz.0.1668': attribute type 1 has an invalid length. [ 573.723143][T11498] tipc: Enabled bearer , priority 0 [ 573.853977][T11496] syzkaller0: entered promiscuous mode [ 573.860223][T11496] syzkaller0: entered allmulticast mode [ 573.929979][T11501] tipc: Enabled bearer , priority 0 [ 573.939176][T11501] syzkaller0: entered promiscuous mode [ 573.960990][T11501] syzkaller0: entered allmulticast mode [ 574.064458][T11501] tipc: Resetting bearer [ 574.071745][T11496] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1660'. [ 574.103202][T11502] tipc: Enabled bearer , priority 0 [ 574.145984][T11496] tipc: Resetting bearer [ 574.157297][T11500] tipc: Resetting bearer [ 574.206464][T11500] tipc: Disabling bearer [ 574.225843][T11495] tipc: Resetting bearer [ 574.304583][T11495] tipc: Disabling bearer [ 574.318788][T11502] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1663'. [ 574.335585][T11504] tipc: Resetting bearer [ 574.391299][T11499] tipc: Disabling bearer [ 574.720653][T11513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.808397][T11515] syzkaller0: entered promiscuous mode [ 574.819008][T11515] syzkaller0: entered allmulticast mode [ 574.911356][T11518] netlink: 'syz.3.1669': attribute type 1 has an invalid length. [ 575.097384][T11524] libceph: resolve '0..' (ret=-3): failed [ 575.371257][T11528] libceph: resolve '0..' (ret=-3): failed [ 575.399460][T11530] libceph: resolve '0..' (ret=-3): failed [ 576.894180][T11534] netlink: 'syz.2.1681': attribute type 1 has an invalid length. [ 577.303817][T11539] libceph: resolve '0..' (ret=-3): failed [ 577.353074][T11544] tipc: Enabled bearer , priority 0 [ 577.387931][T11544] syzkaller0: entered promiscuous mode [ 577.414045][T11544] syzkaller0: entered allmulticast mode [ 577.506072][T11544] tipc: Resetting bearer [ 577.577658][T11543] tipc: Resetting bearer [ 577.707322][T11543] tipc: Disabling bearer [ 577.759794][T11553] libceph: resolve '0..' (ret=-3): failed [ 577.942039][T11557] libceph: resolve '0..' (ret=-3): failed [ 578.173957][T11559] netlink: 'syz.3.1680': attribute type 1 has an invalid length. [ 578.903768][T11564] netlink: 'syz.0.1683': attribute type 1 has an invalid length. [ 579.009463][T11566] libceph: resolve '0..' (ret=-3): failed [ 579.833494][T11574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 579.869843][T11571] libceph: resolve '0..' (ret=-3): failed [ 580.895036][T11588] libceph: resolve '0..' (ret=-3): failed [ 581.529655][T11597] tipc: Enabled bearer , priority 0 [ 581.578626][T11597] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1694'. [ 581.607364][T11597] tipc: Resetting bearer [ 581.694716][T11596] tipc: Disabling bearer [ 582.042433][T11603] libceph: resolve '0..' (ret=-3): failed [ 582.102150][T11607] syzkaller0: entered promiscuous mode [ 582.124701][T11607] syzkaller0: entered allmulticast mode [ 582.447926][T11609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 582.667339][T11615] libceph: resolve '0..' (ret=-3): failed [ 583.870785][T11627] libceph: resolve '0..' (ret=-3): failed [ 584.413262][T11631] tipc: Enabled bearer , priority 0 [ 584.443959][T11631] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1716'. [ 584.478624][T11631] tipc: Resetting bearer [ 584.533060][T11630] tipc: Disabling bearer [ 584.667276][T11637] libceph: resolve '0..' (ret=-3): failed [ 585.304940][T11639] netlink: 'syz.2.1718': attribute type 1 has an invalid length. [ 585.323990][T11643] tipc: Enabled bearer , priority 0 [ 585.345259][T11639] netlink: 'syz.2.1718': attribute type 1 has an invalid length. [ 585.398301][T11643] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1706'. [ 585.439723][T11643] tipc: Resetting bearer [ 585.539033][T11641] tipc: Disabling bearer [ 585.565587][T11647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 585.586853][T11645] libceph: resolve '0..' (ret=-3): failed [ 586.465833][T11653] syzkaller0: entered promiscuous mode [ 586.471401][T11653] syzkaller0: entered allmulticast mode [ 586.664348][T11658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.007583][T11664] tipc: Enabled bearer , priority 0 [ 587.050454][T11663] libceph: resolve '0..' (ret=-3): failed [ 587.060322][T11664] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1720'. [ 587.077942][T11664] tipc: Resetting bearer [ 587.101293][T11662] tipc: Disabling bearer [ 587.225745][T11668] libceph: resolve '0..' (ret=-3): failed [ 587.571819][T11677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.028006][T11684] netlink: 'syz.4.1728': attribute type 16 has an invalid length. [ 588.036603][T11684] netlink: 'syz.4.1728': attribute type 17 has an invalid length. [ 588.065406][T11684] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.134341][T11684] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.241118][T11697] tipc: Enabled bearer , priority 0 [ 589.289781][T11697] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1731'. [ 589.338922][T11697] tipc: Resetting bearer [ 589.441519][T11696] tipc: Disabling bearer [ 590.026697][T11707] syzkaller0: entered promiscuous mode [ 590.045311][T11707] syzkaller0: entered allmulticast mode [ 593.638441][T11714] netlink: 'syz.0.1737': attribute type 1 has an invalid length. [ 593.647021][T11714] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 593.659485][T11715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1737'. [ 593.772549][T11721] tipc: Enabling of bearer rejected, failed to enable media [ 594.272497][T11771] libceph: resolve '0..' (ret=-3): failed [ 594.513098][T11779] syzkaller0: entered promiscuous mode [ 594.525125][T11779] syzkaller0: entered allmulticast mode [ 597.784418][T11787] netlink: 'syz.0.1753': attribute type 1 has an invalid length. [ 597.792719][T11787] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 597.801734][T11789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1753'. [ 597.820915][T11790] tipc: Enabling of bearer rejected, failed to enable media [ 597.958953][T11809] netlink: 'syz.4.1757': attribute type 16 has an invalid length. [ 597.967018][T11809] netlink: 'syz.4.1757': attribute type 17 has an invalid length. [ 598.306644][T11816] syzkaller0: entered promiscuous mode [ 598.340233][T11816] syzkaller0: entered allmulticast mode [ 598.375197][T11825] syzkaller0: entered promiscuous mode [ 598.380942][T11825] syzkaller0: entered allmulticast mode [ 598.741653][T11840] syzkaller0: entered promiscuous mode [ 598.753978][T11840] syzkaller0: entered allmulticast mode [ 598.771024][T11845] netlink: 'syz.4.1768': attribute type 1 has an invalid length. [ 598.846003][T11845] bond4: entered promiscuous mode [ 598.856253][T11845] 8021q: adding VLAN 0 to HW filter on device bond4 [ 602.073281][T11845] bond4: (slave bridge6): making interface the new active one [ 602.088809][T11845] bridge6: entered promiscuous mode [ 602.095937][T11845] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 602.113860][T11852] syzkaller0: entered promiscuous mode [ 602.119417][T11852] syzkaller0: entered allmulticast mode [ 602.237875][T11857] tipc: Enabling of bearer rejected, failed to enable media [ 602.467923][T11874] libceph: resolve '0..' (ret=-3): failed [ 602.943408][T11895] syzkaller0: entered promiscuous mode [ 602.955520][T11895] syzkaller0: entered allmulticast mode [ 603.595770][T11902] syzkaller0: entered promiscuous mode [ 603.601332][T11902] syzkaller0: entered allmulticast mode [ 604.872577][T11949] libceph: resolve '0..' (ret=-3): failed [ 607.573120][T11965] syzkaller0: entered promiscuous mode [ 607.613592][T11965] syzkaller0: entered allmulticast mode [ 607.873631][T11979] libceph: resolve '0..' (ret=-3): failed [ 610.166400][T12022] libceph: resolve '0..' (ret=-3): failed [ 611.816064][T12025] tipc: Enabled bearer , priority 0 [ 611.828626][T12025] syzkaller0: entered promiscuous mode [ 611.853650][T12025] syzkaller0: entered allmulticast mode [ 611.909860][T12025] tipc: Resetting bearer [ 611.961858][T12024] tipc: Resetting bearer [ 612.061537][T12024] tipc: Disabling bearer [ 612.400151][T12047] syzkaller0: entered promiscuous mode [ 612.428217][T12047] syzkaller0: entered allmulticast mode [ 612.496642][T12049] libceph: resolve '0..' (ret=-3): failed [ 613.022251][T12065] tipc: Enabled bearer , priority 0 [ 613.032020][T12065] syzkaller0: entered promiscuous mode [ 613.041915][T12065] syzkaller0: entered allmulticast mode [ 613.055646][T12065] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1835'. [ 613.069835][T12066] tipc: Enabled bearer , priority 0 [ 613.104166][T12065] tipc: Resetting bearer [ 613.111447][T12067] syzkaller0: entered promiscuous mode [ 613.139607][T12067] syzkaller0: entered allmulticast mode [ 613.177920][T12063] tipc: Resetting bearer [ 613.256032][T12063] tipc: Disabling bearer [ 613.290859][T12066] tipc: Resetting bearer [ 613.334057][T12064] tipc: Resetting bearer [ 613.425206][T12064] tipc: Disabling bearer [ 614.350196][T12093] syzkaller0: entered promiscuous mode [ 614.356233][T12093] syzkaller0: entered allmulticast mode [ 614.405159][T12099] tipc: Enabled bearer , priority 0 [ 614.414408][T12099] syzkaller0: entered promiscuous mode [ 614.420046][T12099] syzkaller0: entered allmulticast mode [ 614.887744][T12111] libceph: resolve '0..' (ret=-3): failed [ 617.992839][T12107] tipc: Resetting bearer [ 618.000182][T12097] tipc: Resetting bearer [ 618.021297][T12097] tipc: Disabling bearer [ 618.031316][ T787] tipc: Node number set to 2063906065 [ 618.181494][T12155] netlink: 'syz.2.1872': attribute type 1 has an invalid length. [ 618.192653][T12155] netlink: 'syz.2.1872': attribute type 1 has an invalid length. [ 618.316479][T12159] libceph: resolve '0..' (ret=-3): failed [ 618.710459][T12174] syzkaller0: entered promiscuous mode [ 618.717439][T12174] syzkaller0: entered allmulticast mode [ 619.102665][T12181] tipc: Enabled bearer , priority 0 [ 619.116307][T12181] syzkaller0: entered promiscuous mode [ 619.123314][T12181] syzkaller0: entered allmulticast mode [ 619.166065][T12181] tipc: Resetting bearer [ 619.253243][T12179] tipc: Resetting bearer [ 619.334764][T12179] tipc: Disabling bearer [ 619.600945][T12188] netlink: 'syz.0.1885': attribute type 1 has an invalid length. [ 619.634740][T12188] netlink: 'syz.0.1885': attribute type 1 has an invalid length. [ 620.109169][T12206] syzkaller0: entered promiscuous mode [ 620.116875][T12206] syzkaller0: entered allmulticast mode [ 620.645908][T12228] libceph: resolve '0..' (ret=-3): failed [ 623.795099][T12222] tipc: Enabled bearer , priority 0 [ 623.802405][T12226] syzkaller0: entered promiscuous mode [ 623.808818][T12226] syzkaller0: entered allmulticast mode [ 623.816064][T12245] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1896'. [ 623.879873][T12245] tipc: Resetting bearer [ 623.945115][T12245] tipc: Disabling bearer [ 624.441899][T12286] syzkaller0: entered promiscuous mode [ 624.473987][T12286] syzkaller0: entered allmulticast mode [ 624.653052][T12293] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1911'. [ 624.683943][T12294] syzkaller0: entered promiscuous mode [ 624.689767][T12294] syzkaller0: entered allmulticast mode [ 624.987725][T12305] netlink: 'syz.0.1917': attribute type 1 has an invalid length. [ 625.099156][T12305] bond8: entered promiscuous mode [ 625.110621][T12305] 8021q: adding VLAN 0 to HW filter on device bond8 [ 625.168823][T12308] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1917'. [ 625.250782][T12305] bond8: (slave bridge7): making interface the new active one [ 625.271346][T12305] bridge7: entered promiscuous mode [ 625.282374][T12305] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 625.310003][T12313] syzkaller0: entered promiscuous mode [ 625.354102][T12313] syzkaller0: entered allmulticast mode [ 626.167801][T12331] syzkaller0: entered promiscuous mode [ 626.178044][T12331] syzkaller0: entered allmulticast mode [ 626.224771][T12336] tipc: Enabled bearer , priority 0 [ 626.261038][T12336] syzkaller0: entered promiscuous mode [ 626.286822][T12336] syzkaller0: entered allmulticast mode [ 626.320718][T12336] tipc: Resetting bearer [ 628.799753][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.811408][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.950693][T12335] tipc: Resetting bearer [ 628.976879][T12335] tipc: Disabling bearer [ 629.104363][ T8] tipc: Node number set to 1207122013 [ 629.344438][T12360] syzkaller0: entered promiscuous mode [ 629.364703][T12360] syzkaller0: entered allmulticast mode [ 629.808661][T12374] netlink: 'syz.3.1937': attribute type 1 has an invalid length. [ 629.925830][T12374] bond3: entered promiscuous mode [ 629.931353][T12374] 8021q: adding VLAN 0 to HW filter on device bond3 [ 629.956016][T12379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1937'. [ 629.999679][T12381] bond3: (slave bridge3): making interface the new active one [ 630.010009][T12381] bridge3: entered promiscuous mode [ 630.017842][T12381] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 630.065571][T12385] tipc: Enabled bearer , priority 0 [ 630.074008][T12385] syzkaller0: entered promiscuous mode [ 630.080716][T12385] syzkaller0: entered allmulticast mode [ 630.101825][T12385] tipc: Resetting bearer [ 630.129321][T12383] tipc: Resetting bearer [ 630.182767][T12383] tipc: Disabling bearer [ 630.391613][T12395] tipc: Enabled bearer , priority 0 [ 630.411315][T12395] syzkaller0: entered promiscuous mode [ 630.417528][T12395] syzkaller0: entered allmulticast mode [ 630.505576][T12395] tipc: Resetting bearer [ 630.544234][T12393] tipc: Resetting bearer [ 630.600858][T12393] tipc: Disabling bearer [ 630.859462][T12410] syzkaller0: entered promiscuous mode [ 630.877521][T12410] syzkaller0: entered allmulticast mode [ 631.111828][T12412] netlink: 'syz.4.1951': attribute type 1 has an invalid length. [ 631.191079][T12412] bond5: entered promiscuous mode [ 631.224193][T12412] 8021q: adding VLAN 0 to HW filter on device bond5 [ 631.261182][T12414] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1951'. [ 631.336193][T12421] bond5: (slave bridge7): making interface the new active one [ 631.352965][T12421] bridge7: entered promiscuous mode [ 631.362041][T12421] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 631.819783][T12447] tipc: Enabled bearer , priority 0 [ 631.835621][T12447] syzkaller0: entered promiscuous mode [ 631.841491][T12447] syzkaller0: entered allmulticast mode [ 631.884078][T12446] tipc: Resetting bearer [ 631.952046][T12446] tipc: Disabling bearer [ 632.453110][T12466] syzkaller0: entered promiscuous mode [ 632.467172][T12466] syzkaller0: entered allmulticast mode [ 632.555984][T12470] tipc: Enabled bearer , priority 0 [ 632.564798][T12470] syzkaller0: entered promiscuous mode [ 632.570342][T12470] syzkaller0: entered allmulticast mode [ 632.620114][T12469] tipc: Resetting bearer [ 632.742596][T12469] tipc: Disabling bearer [ 632.817133][T12478] syzkaller0: entered promiscuous mode [ 632.822688][T12478] syzkaller0: entered allmulticast mode [ 633.444224][T12495] syzkaller0: entered promiscuous mode [ 633.456959][T12495] syzkaller0: entered allmulticast mode [ 633.740317][T12513] tipc: Enabled bearer , priority 0 [ 633.749669][T12511] syzkaller0: entered promiscuous mode [ 633.759250][T12511] syzkaller0: entered allmulticast mode [ 633.776206][T12513] syzkaller0: entered promiscuous mode [ 633.783021][T12513] syzkaller0: entered allmulticast mode [ 633.862650][T12512] tipc: Resetting bearer [ 633.932366][T12512] tipc: Disabling bearer [ 634.445540][T12541] syzkaller0: entered promiscuous mode [ 634.451102][T12541] syzkaller0: entered allmulticast mode [ 634.560988][T12545] tipc: Enabled bearer , priority 0 [ 634.581256][T12545] syzkaller0: entered promiscuous mode [ 634.589967][T12545] syzkaller0: entered allmulticast mode [ 634.652587][T12542] tipc: Resetting bearer [ 634.736893][T12542] tipc: Disabling bearer [ 634.767373][T12553] netlink: 'syz.3.2000': attribute type 1 has an invalid length. [ 634.801097][T12553] bond4: entered promiscuous mode [ 634.810310][T12553] 8021q: adding VLAN 0 to HW filter on device bond4 [ 634.824741][T12551] syzkaller0: entered promiscuous mode [ 634.830283][T12551] syzkaller0: entered allmulticast mode [ 634.902293][T12553] bond4: (slave bridge4): making interface the new active one [ 634.911218][T12553] bridge4: entered promiscuous mode [ 634.921984][T12553] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 635.361649][T12575] tipc: Enabled bearer , priority 0 [ 635.369891][T12575] syzkaller0: entered promiscuous mode [ 635.375938][T12575] syzkaller0: entered allmulticast mode [ 635.419419][T12574] tipc: Resetting bearer [ 635.526270][T12574] tipc: Disabling bearer [ 635.638421][T12583] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2013'. [ 635.929511][T12596] syzkaller0: entered promiscuous mode [ 635.939613][T12596] syzkaller0: entered allmulticast mode [ 636.209772][T12608] tipc: Enabled bearer , priority 0 [ 636.221015][T12608] syzkaller0: entered promiscuous mode [ 636.231009][T12608] syzkaller0: entered allmulticast mode [ 636.263261][T12607] tipc: Resetting bearer [ 636.300660][T12607] tipc: Disabling bearer [ 636.396725][T12614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2027'. [ 636.405910][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 636.603748][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 636.619968][ T8] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 636.638271][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 636.648428][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.976336][T12635] tipc: Enabled bearer , priority 0 [ 636.993735][T12635] tipc: Resetting bearer [ 637.021813][T12634] tipc: Disabling bearer [ 637.290487][T12648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2040'. [ 637.812675][T12663] tipc: Enabled bearer , priority 0 [ 637.825874][T12663] tipc: Resetting bearer [ 637.848390][T12662] tipc: Disabling bearer [ 638.108765][T12674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2052'. [ 638.622716][T12696] tipc: Enabled bearer , priority 0 [ 638.648234][T12696] tipc: Resetting bearer [ 638.711164][T12695] tipc: Disabling bearer [ 638.936271][T12707] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2066'. [ 639.160460][ T5809] usb 3-1: USB disconnect, device number 11 [ 639.354564][T12723] netlink: 'syz.3.2070': attribute type 1 has an invalid length. [ 639.650496][T12733] syzkaller0: entered promiscuous mode [ 639.666676][T12733] syzkaller0: entered allmulticast mode [ 640.223906][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 640.413661][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 640.424950][ T9] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 640.435906][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 640.445512][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.921067][T12766] netlink: 'syz.3.2084': attribute type 1 has an invalid length. [ 641.116281][T12769] syzkaller0: entered promiscuous mode [ 641.121843][T12769] syzkaller0: entered allmulticast mode [ 641.516798][T12776] netlink: 'syz.3.2087': attribute type 1 has an invalid length. [ 641.562419][T12776] bond5: entered promiscuous mode [ 641.576207][T12776] 8021q: adding VLAN 0 to HW filter on device bond5 [ 641.595482][T12778] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2087'. [ 642.595947][T12803] netlink: 'syz.3.2093': attribute type 1 has an invalid length. [ 642.952327][T12811] syzkaller0: entered promiscuous mode [ 642.969534][T12811] syzkaller0: entered allmulticast mode [ 643.023270][ T6825] usb 3-1: USB disconnect, device number 12 [ 643.258367][T12824] netlink: 'syz.2.2098': attribute type 1 has an invalid length. [ 643.438841][T12824] bond7: entered promiscuous mode [ 643.487572][T12824] 8021q: adding VLAN 0 to HW filter on device bond7 [ 643.554798][T12828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2098'. [ 644.305280][ T5828] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 644.503611][ T5828] usb 5-1: Using ep0 maxpacket: 8 [ 644.511653][ T5828] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 644.524368][ T5828] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 644.538917][ T5828] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 644.548513][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.568056][ T5828] usbtmc 5-1:16.0: bulk endpoints not found [ 644.936876][T12880] netlink: 'syz.3.2112': attribute type 1 has an invalid length. [ 645.040206][T12880] bond6: entered promiscuous mode [ 645.056403][T12880] 8021q: adding VLAN 0 to HW filter on device bond6 [ 645.076395][T12882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2112'. [ 647.060960][ T6825] usb 5-1: USB disconnect, device number 6 [ 648.498175][T12936] syzkaller0: entered promiscuous mode [ 648.511488][T12936] syzkaller0: entered allmulticast mode [ 648.703810][ T5828] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 648.931450][ T5828] usb 3-1: Using ep0 maxpacket: 8 [ 648.971551][ T5828] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 648.982114][ T5828] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 648.995496][ T5828] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 649.005117][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.053957][ T5828] usbtmc 3-1:16.0: bulk endpoints not found [ 651.441338][ T5828] usb 3-1: USB disconnect, device number 13 [ 652.469834][T12996] tipc: Enabled bearer , priority 0 [ 652.490562][T12996] syzkaller0: entered promiscuous mode [ 652.518916][T12996] syzkaller0: entered allmulticast mode [ 652.616466][T12996] tipc: Resetting bearer [ 652.644316][T12995] tipc: Resetting bearer [ 652.704770][T12995] tipc: Disabling bearer [ 652.760109][T13006] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2146'. [ 652.823819][ T5809] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 652.882559][T13011] syzkaller0: entered promiscuous mode [ 652.888979][T13011] syzkaller0: entered allmulticast mode [ 652.977106][T13009] syzkaller0: entered promiscuous mode [ 652.983348][T13009] syzkaller0: entered allmulticast mode [ 653.013844][ T5809] usb 5-1: Using ep0 maxpacket: 8 [ 653.021441][ T5809] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 653.036808][ T5809] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 653.051075][ T5809] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 653.066981][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.108819][ T5809] usbtmc 5-1:16.0: bulk endpoints not found [ 655.515675][ T8] usb 5-1: USB disconnect, device number 7 [ 656.165682][T13044] syzkaller0: entered promiscuous mode [ 656.171246][T13044] syzkaller0: entered allmulticast mode [ 656.181415][T13048] netlink: 'syz.4.2158': attribute type 1 has an invalid length. [ 656.226502][T13048] bond6: entered promiscuous mode [ 656.232050][T13048] 8021q: adding VLAN 0 to HW filter on device bond6 [ 656.259142][T13052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2158'. [ 656.277468][T13044] tipc: Enabled bearer , priority 0 [ 656.290548][T13051] netlink: 'syz.0.2160': attribute type 1 has an invalid length. [ 656.360336][T13044] tipc: Resetting bearer [ 656.386775][T13044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.395706][T13044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.424464][ T5828] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 656.440280][T13042] tipc: Resetting bearer [ 656.515003][T13042] tipc: Disabling bearer [ 656.613709][ T5828] usb 4-1: Using ep0 maxpacket: 8 [ 656.622729][ T5828] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 656.647356][ T5828] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 656.679197][ T5828] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 656.699963][ T5828] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 656.725411][ T5828] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 656.744830][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.765330][T13063] syzkaller0: entered promiscuous mode [ 656.777906][T13063] syzkaller0: entered allmulticast mode [ 656.778925][ T5828] usbtmc 4-1:16.0: bulk endpoints not found [ 657.093476][T13075] netlink: 'syz.0.2170': attribute type 1 has an invalid length. [ 657.135409][T13075] bond9: entered promiscuous mode [ 657.140883][T13075] 8021q: adding VLAN 0 to HW filter on device bond9 [ 657.149072][T13077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2170'. [ 657.217787][T13079] netlink: 'syz.2.2171': attribute type 1 has an invalid length. [ 657.687861][T13098] syzkaller0: entered promiscuous mode [ 657.694020][T13098] syzkaller0: entered allmulticast mode [ 658.042718][T13111] netlink: 'syz.2.2183': attribute type 1 has an invalid length. [ 658.454992][T13128] syzkaller0: entered promiscuous mode [ 658.463655][T13128] syzkaller0: entered allmulticast mode [ 659.195591][ T787] usb 4-1: USB disconnect, device number 8 [ 659.766358][T13160] syzkaller0: entered promiscuous mode [ 659.788024][T13160] syzkaller0: entered allmulticast mode [ 659.872690][T13164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2203'. [ 660.383641][ T5801] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 660.585642][ T5801] usb 1-1: Using ep0 maxpacket: 8 [ 660.603432][ T5801] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 660.641932][ T5801] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 660.659762][ T5801] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 660.670532][ T5801] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 660.697011][ T5801] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 660.708768][ T5801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.737681][ T5801] usbtmc 1-1:16.0: bulk endpoints not found [ 661.918897][T13201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2214'. [ 662.372734][T13208] syzkaller0: entered promiscuous mode [ 662.388697][T13208] syzkaller0: entered allmulticast mode [ 663.127527][ T787] usb 1-1: USB disconnect, device number 12 [ 663.399525][T13224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2224'. [ 663.462265][T13229] syzkaller0: entered promiscuous mode [ 663.472233][T13229] syzkaller0: entered allmulticast mode [ 663.892216][T13239] syzkaller0: entered promiscuous mode [ 663.901189][T13239] syzkaller0: entered allmulticast mode [ 664.103645][ T6825] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 664.313807][ T6825] usb 1-1: Using ep0 maxpacket: 8 [ 664.321536][ T6825] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 664.338541][ T6825] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 664.368879][ T6825] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 664.382059][ T6825] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 664.395732][ T6825] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 664.406218][ T6825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.432855][ T6825] usbtmc 1-1:16.0: bulk endpoints not found [ 665.752705][T13270] netlink: 'syz.2.2240': attribute type 1 has an invalid length. [ 665.788730][T13270] bond8: entered promiscuous mode [ 665.795634][T13270] 8021q: adding VLAN 0 to HW filter on device bond8 [ 665.817030][T13270] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2240'. [ 666.291242][T13287] syzkaller0: entered promiscuous mode [ 666.298604][T13287] syzkaller0: entered allmulticast mode [ 666.307022][T13288] tipc: Enabled bearer , priority 0 [ 666.328037][T13288] tipc: Resetting bearer [ 666.872181][ T8] usb 1-1: USB disconnect, device number 13 [ 669.733118][ T6825] tipc: Node number set to 757475140 [ 669.771314][T13285] tipc: Disabling bearer [ 670.820650][T13330] syzkaller0: entered promiscuous mode [ 670.826445][T13330] syzkaller0: entered allmulticast mode [ 670.963857][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 671.168996][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 671.195090][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 671.209952][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 671.229784][ T8] usb 1-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 671.252975][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 671.266287][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 671.275721][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.296875][ T8] usbtmc 1-1:16.0: bulk endpoints not found [ 673.431070][T13333] syzkaller0: entered promiscuous mode [ 673.438580][T13333] syzkaller0: entered allmulticast mode [ 673.729397][ T6825] usb 1-1: USB disconnect, device number 14 [ 677.341171][T13346] tipc: Enabling of bearer rejected, failed to enable media [ 678.098485][ T787] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 678.314294][ T787] usb 4-1: Using ep0 maxpacket: 8 [ 678.359172][ T787] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 678.370684][ T787] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 678.403442][ T787] usb 4-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 678.418142][ T787] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 678.637591][ T787] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 678.647510][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.708658][ T787] usbtmc 4-1:16.0: bulk endpoints not found [ 678.838097][T13413] syzkaller0: entered promiscuous mode [ 678.878634][T13413] syzkaller0: entered allmulticast mode [ 679.001497][T13416] syzkaller0: entered promiscuous mode [ 679.007326][T13416] syzkaller0: entered allmulticast mode [ 680.575940][ T6825] usb 4-1: USB disconnect, device number 9 [ 681.771154][T13422] tipc: Enabling of bearer rejected, failed to enable media [ 681.978584][T13446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2280'. [ 683.261320][T13474] syzkaller0: entered promiscuous mode [ 683.268247][T13474] syzkaller0: entered allmulticast mode [ 683.363975][T13471] syzkaller0: entered promiscuous mode [ 683.370691][T13471] syzkaller0: entered allmulticast mode [ 683.419618][T13477] tipc: Enabled bearer , priority 0 [ 683.448354][T13473] tipc: Resetting bearer [ 683.525476][T13473] tipc: Disabling bearer [ 686.009477][T13495] tipc: Enabling of bearer rejected, failed to enable media [ 686.290847][T13510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2294'. [ 687.699878][T13539] syzkaller0: entered promiscuous mode [ 687.728444][T13539] syzkaller0: entered allmulticast mode [ 688.025912][ T6825] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 688.222589][ T6825] usb 5-1: Using ep0 maxpacket: 8 [ 688.232321][ T6825] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 688.255366][ T6825] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 688.268744][ T6825] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 688.309219][ T6825] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 688.320418][ T6825] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 688.336759][ T6825] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 688.348052][ T6825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.371674][ T6825] usbtmc: probe of 5-1:16.0 failed with error -22 [ 690.254779][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.261280][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.597055][T13554] tipc: Enabling of bearer rejected, failed to enable media [ 690.817730][ T5828] usb 5-1: USB disconnect, device number 8 [ 691.157622][T13581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2308'. [ 692.133724][T13596] libceph: resolve '0..' (ret=-3): failed [ 692.752794][T13603] syzkaller0: entered promiscuous mode [ 692.771708][T13603] syzkaller0: entered allmulticast mode [ 692.793129][T13604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2320'. [ 694.485079][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 694.695597][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 694.707961][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 694.723624][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 694.740456][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 694.750891][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 694.763194][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 694.778229][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 694.788175][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.808748][ T8] usbtmc: probe of 5-1:16.0 failed with error -22 [ 696.457810][T13620] tipc: Enabling of bearer rejected, failed to enable media [ 697.644338][ T8] usb 5-1: USB disconnect, device number 9 [ 697.864580][T13658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2325'. [ 698.161779][T13660] syzkaller0: entered promiscuous mode [ 698.191857][T13660] syzkaller0: entered allmulticast mode [ 698.208028][T13664] syzkaller0: entered promiscuous mode [ 698.232678][T13664] syzkaller0: entered allmulticast mode [ 698.433272][T10086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 698.461408][T10086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 698.471889][T10086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 698.629396][T10086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 698.638416][T10086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 698.647495][T10086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 700.716650][T10086] Bluetooth: hci3: command tx timeout [ 702.004396][T13366] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.084136][T13678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2330'. [ 702.095841][T13678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2330'. [ 702.204299][T13678] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 702.214075][T13678] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 702.222999][T13678] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 702.232208][T13678] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 702.771712][T13366] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.797607][T10086] Bluetooth: hci3: command tx timeout [ 702.860165][T13678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2330'. [ 702.869790][T13670] xfrm0 speed is unknown, defaulting to 1000 [ 702.919255][T13678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2330'. [ 703.147365][T13366] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.298364][T13366] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.472748][T13706] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2339'. [ 703.563229][T13703] syzkaller0: entered promiscuous mode [ 703.568939][T13703] syzkaller0: entered allmulticast mode [ 703.585376][T13670] chnl_net:caif_netlink_parms(): no params data found [ 703.754672][T13714] libceph: resolve '0..' (ret=-3): failed [ 704.891395][T10086] Bluetooth: hci3: command tx timeout [ 706.959593][T10086] Bluetooth: hci3: command tx timeout [ 707.766665][T13762] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2349'. [ 707.810001][T13366] tipc: Left network mode [ 707.908835][ T787] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 708.079280][T13670] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.095669][T13670] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.110497][T13670] bridge_slave_0: entered allmulticast mode [ 708.114124][ T787] usb 3-1: Using ep0 maxpacket: 8 [ 708.125971][T13670] bridge_slave_0: entered promiscuous mode [ 708.140017][ T787] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 708.167330][T13670] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.179715][ T787] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 708.185729][T13670] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.212890][T13670] bridge_slave_1: entered allmulticast mode [ 708.221610][ T787] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 708.241493][T13670] bridge_slave_1: entered promiscuous mode [ 708.251043][ T787] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 708.277654][ T787] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 708.315819][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.562550][ T787] usb 3-1: usb_control_msg returned -32 [ 708.577036][T13670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.580487][ T787] usbtmc 3-1:16.0: can't read capabilities [ 708.622860][T13670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.864574][T13787] syzkaller0: entered promiscuous mode [ 708.880349][T13787] syzkaller0: entered allmulticast mode [ 709.099543][ T8] usb 3-1: USB disconnect, device number 14 [ 709.492290][T13670] team0: Port device team_slave_0 added [ 712.802491][T13670] team0: Port device team_slave_1 added [ 712.871988][T13820] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2360'. [ 713.062880][T13670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.071435][T13670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.108062][T13670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.217458][T13670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.253798][T13670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.318422][T13670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.814326][ T5828] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 714.045436][ T5828] usb 5-1: Using ep0 maxpacket: 8 [ 714.061234][ T5828] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 714.103601][ T5828] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 714.124902][ T5828] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 714.144259][ T5828] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 714.171387][ T5828] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 714.191190][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.291784][T13670] hsr_slave_0: entered promiscuous mode [ 714.309867][T13670] hsr_slave_1: entered promiscuous mode [ 714.333458][T13670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 714.346425][T13670] Cannot create hsr debugfs directory [ 714.434810][ T5828] usb 5-1: usb_control_msg returned -32 [ 714.440521][ T5828] usbtmc 5-1:16.0: can't read capabilities [ 714.477348][T13851] syzkaller0: entered promiscuous mode [ 714.494770][T13851] syzkaller0: entered allmulticast mode [ 714.725583][ T787] usb 5-1: USB disconnect, device number 10 [ 717.289475][T13866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2372'. [ 718.075029][T13366] hsr_slave_0: left promiscuous mode [ 718.088610][T13366] hsr_slave_1: left promiscuous mode [ 718.107008][T13366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 718.120003][T13366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.131135][T13366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.139432][T13366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.149296][T13366] bridge_slave_1: left allmulticast mode [ 718.169013][T13366] bridge_slave_1: left promiscuous mode [ 718.180114][T13366] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.200689][T13366] bridge_slave_0: left allmulticast mode [ 718.208246][T13366] bridge_slave_0: left promiscuous mode [ 718.214529][T13366] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.249197][T13896] libceph: resolve '0..' (ret=-3): failed [ 718.277660][T13366] veth1_macvtap: left promiscuous mode [ 718.283446][T13366] veth0_macvtap: left promiscuous mode [ 718.290747][T13366] veth1_vlan: left promiscuous mode [ 718.296653][T13366] veth0_vlan: left promiscuous mode [ 718.423752][ T8] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 718.613849][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 718.631116][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 718.653962][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 718.670692][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 718.681275][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 718.699372][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 718.710051][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.953189][ T8] usb 3-1: usb_control_msg returned -32 [ 719.003422][ T8] usbtmc 3-1:16.0: can't read capabilities [ 719.127727][T13366] bond6 (unregistering): Released all slaves [ 719.191441][ T8] usb 3-1: USB disconnect, device number 15 [ 719.459760][T13366] bond5 (unregistering): Released all slaves [ 719.501862][T13366] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 719.510615][T13366] bridge4 (unregistering): left promiscuous mode [ 719.745733][T13366] bond4 (unregistering): Released all slaves [ 719.784303][T13366] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 719.792573][T13366] bridge3 (unregistering): left promiscuous mode [ 720.024282][T13366] bond3 (unregistering): Released all slaves [ 720.049249][T13366] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 720.057517][T13366] bridge2 (unregistering): left promiscuous mode [ 720.228306][T13366] bond2 (unregistering): Released all slaves [ 720.272664][T13366] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 720.290296][T13366] bridge1 (unregistering): left promiscuous mode [ 720.496026][T13366] bond1 (unregistering): Released all slaves [ 720.542729][T13366] team0 (unregistering): Port device vlan2 removed [ 721.281455][T13366] team0 (unregistering): Port device team_slave_1 removed [ 721.338549][T13366] team0 (unregistering): Port device team_slave_0 removed [ 721.396589][T13366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 721.458664][T13366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 721.899274][T13366] bond0 (unregistering): Released all slaves [ 722.093677][T13927] tipc: Enabling of bearer rejected, failed to enable media [ 722.113684][T13933] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2384'. [ 723.518253][T13961] loop2: detected capacity change from 0 to 8192 [ 723.543779][ T5809] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 723.564574][T13961] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 723.774043][ T5809] usb 5-1: Using ep0 maxpacket: 8 [ 723.791221][ T5809] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 724.124778][ T5809] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 724.212801][ T5809] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 724.281541][ T5809] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 724.339394][ T5809] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 724.360098][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.603726][ T5809] usb 5-1: usb_control_msg returned -32 [ 724.609412][ T5809] usbtmc 5-1:16.0: can't read capabilities [ 724.878871][ T5809] usb 5-1: USB disconnect, device number 11 [ 724.989240][T13670] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 725.044746][T13670] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 725.069507][T13670] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 725.092617][T13670] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 725.111316][T13983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2395'. [ 725.129513][T13983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2395'. [ 725.140346][T13983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2395'. [ 725.149501][T13983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2395'. [ 725.624450][T13670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.863067][T13670] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.937376][ T4427] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.944653][ T4427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.030655][ T4427] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.038110][ T4427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.200821][T13670] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 727.227881][T14003] libceph: resolve '0..' (ret=-3): failed [ 727.418400][T14011] syzkaller0: entered promiscuous mode [ 727.424890][T14011] syzkaller0: entered allmulticast mode [ 730.746690][T14019] syzkaller0: entered promiscuous mode [ 730.752277][T14019] syzkaller0: entered allmulticast mode [ 731.114001][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 731.313769][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 731.324858][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 731.340331][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 731.367971][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 731.388532][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 731.403239][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 731.422932][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.656961][ T9] usb 1-1: usb_control_msg returned -32 [ 731.662737][ T9] usbtmc 1-1:16.0: can't read capabilities [ 731.799004][ T6825] usb 1-1: USB disconnect, device number 15 [ 733.486134][T13670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 733.673882][T13670] veth0_vlan: entered promiscuous mode [ 733.724510][T13670] veth1_vlan: entered promiscuous mode [ 733.734333][T14056] syzkaller0: entered promiscuous mode [ 733.739912][T14056] syzkaller0: entered allmulticast mode [ 733.916065][T14060] loop4: detected capacity change from 0 to 8192 [ 733.982549][T14060] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 734.036312][T13670] veth0_macvtap: entered promiscuous mode [ 734.070144][T13670] veth1_macvtap: entered promiscuous mode [ 734.287004][T13670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.316631][T13670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.343680][T13670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.357465][T13670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.368442][T14070] libceph: resolve '0..' (ret=-3): failed [ 734.374498][T13670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.389003][T13670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.458481][T13670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.640986][T13670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.705693][T13670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.740599][T13670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.765317][T13670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.775812][T13670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.794204][T13670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.827085][T13670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.878129][T13670] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.920656][T13670] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.960336][T13670] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.993718][T13670] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.203307][T14080] syzkaller0: entered promiscuous mode [ 735.221338][T14080] syzkaller0: entered allmulticast mode [ 739.118280][T14100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2414'. [ 739.127558][T14100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2414'. [ 739.146413][T14100] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.155544][T14100] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.164486][T14100] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.173273][T14100] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.212763][ T7839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.226344][ T7839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.240121][T14100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2414'. [ 739.258236][T14100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2414'. [ 739.415773][T13366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.434519][T13366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.559922][T14127] syzkaller0: entered promiscuous mode [ 739.591820][T14127] syzkaller0: entered allmulticast mode [ 739.754135][T14127] tipc: Enabled bearer , priority 0 [ 739.814926][T14127] tipc: Resetting bearer [ 739.882461][T14126] tipc: Resetting bearer [ 739.976106][T14126] tipc: Disabling bearer [ 740.012833][T14145] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2423'. [ 740.035834][T14141] loop2: detected capacity change from 0 to 8192 [ 740.065994][T14145] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2423'. [ 740.080447][T14141] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 741.599795][T14161] loop2: detected capacity change from 0 to 8192 [ 741.650524][T14161] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 741.720891][ T4427] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.768734][ T4427] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.483982][ T4427] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.577655][ T4427] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.811032][ T5082] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 742.855339][ T5082] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 742.865296][ T5082] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 742.885758][ T5082] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 742.921156][ T5082] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 742.936385][ T5082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 743.040352][ T4427] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.067321][ T4427] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.208204][T14186] syzkaller0: entered promiscuous mode [ 743.244040][T14186] syzkaller0: entered allmulticast mode [ 745.039752][T10086] Bluetooth: hci2: command tx timeout [ 745.670957][ T4427] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.681976][ T4427] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.698993][T14208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2435'. [ 745.713598][T14211] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2435'. [ 745.728909][T14203] syzkaller0: entered promiscuous mode [ 745.743664][T14203] syzkaller0: entered allmulticast mode [ 745.899713][T14188] xfrm0 speed is unknown, defaulting to 1000 [ 746.362544][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2440'. [ 746.398544][T14229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2440'. [ 746.426823][T14229] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.436127][T14229] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.445416][T14229] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.454396][T14229] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.512074][T14226] loop3: detected capacity change from 0 to 8192 [ 746.523259][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2440'. [ 746.568162][T14229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2440'. [ 746.628018][T14226] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 746.638027][ T4427] tipc: Left network mode [ 747.223597][T10086] Bluetooth: hci2: command tx timeout [ 747.479282][T14247] syzkaller0: entered promiscuous mode [ 747.489368][T14247] syzkaller0: entered allmulticast mode [ 747.498759][T14251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2444'. [ 747.562201][T14252] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2444'. [ 749.275802][ T5082] Bluetooth: hci2: command tx timeout [ 750.252645][T14188] chnl_net:caif_netlink_parms(): no params data found [ 750.630432][T14282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2447'. [ 750.653885][T14282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2447'. [ 750.817661][T14282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2447'. [ 750.833738][T14282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2447'. [ 751.102171][ T5809] xfrm0 speed is unknown, defaulting to 1000 [ 751.308191][T14188] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.368968][T14188] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.384554][T14297] loop4: detected capacity change from 0 to 8192 [ 751.394465][ T5082] Bluetooth: hci2: command tx timeout [ 751.410058][T14188] bridge_slave_0: entered allmulticast mode [ 751.449379][T14188] bridge_slave_0: entered promiscuous mode [ 751.466538][T14188] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.511916][T14188] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.548717][T14297] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 751.715070][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.734602][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.760726][T14188] bridge_slave_1: entered allmulticast mode [ 752.335910][T14188] bridge_slave_1: entered promiscuous mode [ 752.732927][T14319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2455'. [ 752.834548][T14319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2455'. [ 755.235201][T14188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.671524][T14188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.056832][T14188] team0: Port device team_slave_0 added [ 756.069502][T14188] team0: Port device team_slave_1 added [ 756.083208][T14372] syzkaller0: entered promiscuous mode [ 756.104023][T14372] syzkaller0: entered allmulticast mode [ 756.256401][T14188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.266416][T14188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.301838][T14188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.332652][T14375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2464'. [ 756.347386][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2464'. [ 756.362393][T14375] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.372057][T14375] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.381367][T14375] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.390463][T14375] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.409457][T14375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2464'. [ 756.421169][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2464'. [ 756.457784][T14378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2465'. [ 756.579267][T14188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.591107][T14188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.619012][T14188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.642748][T14380] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2465'. [ 757.123175][ T4427] hsr_slave_0: left promiscuous mode [ 757.154514][ T4427] hsr_slave_1: left promiscuous mode [ 757.179326][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.194048][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.211773][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.222647][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.239314][ T4427] bridge_slave_1: left allmulticast mode [ 757.248191][ T4427] bridge_slave_1: left promiscuous mode [ 757.314149][ T4427] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.351256][ T4427] bridge_slave_0: left allmulticast mode [ 757.676971][ T4427] bridge_slave_0: left promiscuous mode [ 757.791530][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.436408][ T4427] veth1_macvtap: left promiscuous mode [ 758.454425][ T4427] veth0_macvtap: left promiscuous mode [ 758.460181][ T4427] veth1_vlan: left promiscuous mode [ 758.495453][ T4427] veth0_vlan: left promiscuous mode [ 759.232902][ T4427] bond9 (unregistering): Released all slaves [ 759.259132][ T4427] bond8 (unregistering): (slave bridge7): Releasing backup interface [ 759.267776][ T4427] bridge7 (unregistering): left promiscuous mode [ 759.441582][ T4427] bond8 (unregistering): Released all slaves [ 759.465697][ T4427] bond7 (unregistering): (slave bridge6): Releasing backup interface [ 759.473962][ T4427] bridge6 (unregistering): left promiscuous mode [ 759.480318][ T4427] bridge6 (unregistering): left allmulticast mode [ 759.648007][ T4427] bond7 (unregistering): Released all slaves [ 759.672706][ T4427] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 759.681072][ T4427] bridge5 (unregistering): left promiscuous mode [ 759.688267][ T4427] bridge5 (unregistering): left allmulticast mode [ 759.879261][ T4427] bond6 (unregistering): Released all slaves [ 759.904249][ T4427] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 759.912412][ T4427] bridge4 (unregistering): left promiscuous mode [ 759.919490][ T4427] bridge4 (unregistering): left allmulticast mode [ 760.087289][ T4427] bond5 (unregistering): Released all slaves [ 760.144842][ T4427] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 760.153085][ T4427] bridge3 (unregistering): left promiscuous mode [ 760.326178][ T4427] bond4 (unregistering): Released all slaves [ 760.408972][ T4427] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 760.421027][ T4427] bridge2 (unregistering): left promiscuous mode [ 760.612827][ T4427] bond3 (unregistering): Released all slaves [ 760.639285][ T4427] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 760.649461][ T4427] bridge1 (unregistering): left promiscuous mode [ 760.661118][ T4427] bridge1 (unregistering): left allmulticast mode [ 760.851955][ T4427] bond2 (unregistering): Released all slaves [ 761.010274][ T4427] bond1 (unregistering): Released all slaves [ 761.726591][ T4427] team0 (unregistering): Port device team_slave_1 removed [ 761.791405][ T4427] team0 (unregistering): Port device team_slave_0 removed [ 761.847590][ T4427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.904289][ T4427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 762.331647][ T4427] bond0 (unregistering): Released all slaves [ 762.436970][T14188] hsr_slave_0: entered promiscuous mode [ 762.443832][T14188] hsr_slave_1: entered promiscuous mode [ 762.452186][T14188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 762.459919][T14188] Cannot create hsr debugfs directory [ 763.321972][T14459] loop4: detected capacity change from 0 to 8192 [ 763.358831][T14459] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 765.270913][T14482] bond7: entered promiscuous mode [ 765.276740][T14482] 8021q: adding VLAN 0 to HW filter on device bond7 [ 765.337350][T14482] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2475'. [ 766.090365][T14188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 766.559603][T14188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 766.981403][T14188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 767.107699][T14188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 767.231379][T14511] loop2: detected capacity change from 0 to 128 [ 767.254195][T14511] FAT-fs (loop2): Unrecognized mount option "uni_x" or missing value [ 769.721012][T14188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.752753][T14519] syzkaller0: entered promiscuous mode [ 769.779656][T14519] syzkaller0: entered allmulticast mode [ 769.977010][T14188] 8021q: adding VLAN 0 to HW filter on device team0 [ 770.197949][ T7846] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.205225][ T7846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 770.251564][ T7846] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.258879][ T7846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.329209][T14530] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2486'. [ 770.353574][T14530] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 770.360975][T14530] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 770.765659][T14537] syzkaller0: entered promiscuous mode [ 770.771230][T14537] syzkaller0: entered allmulticast mode [ 772.449329][T14188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 772.467551][T14563] syzkaller0: entered promiscuous mode [ 772.473223][T14563] syzkaller0: entered allmulticast mode [ 773.856273][T14188] veth0_vlan: entered promiscuous mode [ 773.932380][T14188] veth1_vlan: entered promiscuous mode [ 773.961374][T14586] loop3: detected capacity change from 0 to 128 [ 773.969256][T14586] FAT-fs (loop3): Unrecognized mount option "uni_x" or missing value [ 774.226126][T14591] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 774.874642][T14188] veth0_macvtap: entered promiscuous mode [ 775.022656][T14188] veth1_macvtap: entered promiscuous mode [ 775.286293][T14188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.456933][T14188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.561225][T14188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.639523][T14188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.703650][T14188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.752671][T14188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.799590][T14188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 775.970832][T14606] bond1: entered promiscuous mode [ 775.989721][T14606] 8021q: adding VLAN 0 to HW filter on device bond1 [ 776.021935][T14609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2497'. [ 776.072203][T14609] bond1: entered allmulticast mode [ 776.116236][T14613] bridge1: entered promiscuous mode [ 776.121717][T14613] bridge1: entered allmulticast mode [ 776.145082][T14613] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 776.200292][T14188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.246540][T14188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.273395][T14188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.303496][T14188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.353683][T14188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.407228][T14188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.616262][T14188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 776.729295][T14188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.836335][T14188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.990151][T14188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.603068][T14188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.664822][T14635] tipc: Enabled bearer , priority 0 [ 777.743825][T14634] tipc: Disabling bearer [ 778.046821][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.098868][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.208217][ T7846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.216531][ T7846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.301421][T14655] netlink: 'syz.4.2510': attribute type 1 has an invalid length. [ 779.796295][T14678] bond8: entered promiscuous mode [ 779.811802][T14678] 8021q: adding VLAN 0 to HW filter on device bond8 [ 779.854035][T14681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2507'. [ 779.896631][T14681] bond8: entered allmulticast mode [ 779.916328][T14683] bridge10: entered promiscuous mode [ 779.921869][T14683] bridge10: entered allmulticast mode [ 779.928925][T14683] bond8: (slave bridge10): Enslaving as an active interface with an up link [ 780.985019][T14703] syzkaller0: entered promiscuous mode [ 781.015866][T14703] syzkaller0: entered allmulticast mode [ 781.054833][T14703] tipc: Started in network mode [ 781.091408][T14703] tipc: Node identity 5ef584d87599, cluster identity 4711 [ 781.145003][T14703] tipc: Enabled bearer , priority 0 [ 781.183718][T14711] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2513'. [ 781.218214][T14703] tipc: Resetting bearer [ 781.256442][T14711] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2513'. [ 781.307755][T14702] tipc: Resetting bearer [ 781.425087][T14702] tipc: Disabling bearer [ 781.509924][T10086] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 781.523339][T10086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 781.543818][T10086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 781.556334][T10086] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 781.577104][T14719] loop4: detected capacity change from 0 to 128 [ 781.583976][T10086] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 781.591545][T10086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 781.601347][T14719] FAT-fs (loop4): Unrecognized mount option "uni_x" or missing value [ 782.394815][T14724] loop3: detected capacity change from 0 to 128 [ 782.402470][T14724] FAT-fs (loop3): Unrecognized mount option "uni_x" or missing value [ 783.678567][ T5082] Bluetooth: hci4: command tx timeout [ 784.025274][ T7839] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 784.041023][ T7839] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.561356][ T7839] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 784.603572][ T7839] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.057478][ T7839] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 785.105819][ T7839] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.276280][T14744] loop3: detected capacity change from 0 to 8192 [ 785.473762][T14744] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 785.517455][ T7839] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 785.621485][ T7839] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.753834][ T5082] Bluetooth: hci4: command tx timeout [ 785.952223][T14716] chnl_net:caif_netlink_parms(): no params data found [ 786.228141][T14760] netlink: 'syz.4.2517': attribute type 1 has an invalid length. [ 786.647377][ T7839] tipc: Left network mode [ 786.657764][T14716] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.718709][T14716] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.739863][T14716] bridge_slave_0: entered allmulticast mode [ 786.765706][T14716] bridge_slave_0: entered promiscuous mode [ 786.796638][T14716] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.823647][T14716] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.831052][T14716] bridge_slave_1: entered allmulticast mode [ 786.875912][T14716] bridge_slave_1: entered promiscuous mode [ 786.980405][T14782] loop4: detected capacity change from 0 to 128 [ 787.015832][T14782] FAT-fs (loop4): Unrecognized mount option "uni_x" or missing value [ 787.285632][T14792] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 787.833728][ T5082] Bluetooth: hci4: command tx timeout [ 788.887038][T14797] loop3: detected capacity change from 0 to 8192 [ 789.046372][T14797] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 789.493830][T14716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 789.869156][T14716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 789.914701][ T5082] Bluetooth: hci4: command tx timeout [ 789.930407][T14816] netlink: 'syz.4.2526': attribute type 1 has an invalid length. [ 790.012971][T14816] bond9: entered promiscuous mode [ 790.053921][T14816] 8021q: adding VLAN 0 to HW filter on device bond9 [ 790.076699][T14819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2526'. [ 790.120645][T14819] bond9: entered allmulticast mode [ 790.145420][T14818] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2525'. [ 790.163883][T14818] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2525'. [ 790.338761][T14824] bridge11: entered promiscuous mode [ 790.354307][T14824] bridge11: entered allmulticast mode [ 790.370825][T14824] bond9: (slave bridge11): Enslaving as an active interface with an up link [ 790.865070][T14832] syzkaller0: entered promiscuous mode [ 790.905741][T14832] syzkaller0: entered allmulticast mode [ 790.931954][T14846] loop4: detected capacity change from 0 to 8192 [ 790.961748][T14846] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 791.961198][T14858] loop4: detected capacity change from 0 to 128 [ 791.980219][T14858] FAT-fs (loop4): Unrecognized mount option "uni_x" or missing value [ 792.115092][T14446] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 796.092708][T14716] team0: Port device team_slave_0 added [ 796.176294][T14716] team0: Port device team_slave_1 added [ 796.298640][T14716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.335131][T14716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.403972][T14716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 796.519350][T14877] tipc: Enabled bearer , priority 0 [ 796.531325][T14716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 796.550908][T14716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.591565][T14716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.613066][T14879] tipc: Resetting bearer [ 796.666645][T14880] syzkaller0: entered promiscuous mode [ 796.672209][T14880] syzkaller0: entered allmulticast mode [ 796.743223][T14876] tipc: Resetting bearer [ 796.780863][T14876] tipc: Disabling bearer [ 796.814891][T14716] hsr_slave_0: entered promiscuous mode [ 796.823101][T14716] hsr_slave_1: entered promiscuous mode [ 796.832871][T14716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 796.853540][T14716] Cannot create hsr debugfs directory [ 796.955838][ T7839] veth0_to_bond: left allmulticast mode [ 796.961492][ T7839] veth0_to_bond: left promiscuous mode [ 796.983771][ T7839] bridge1: port 2(veth0_to_bond) entered disabled state [ 797.010167][T14894] loop3: detected capacity change from 0 to 128 [ 797.024632][ T7839] veth5: left allmulticast mode [ 797.035217][ T7839] veth5: left promiscuous mode [ 797.040289][ T7839] bridge1: port 1(veth5) entered disabled state [ 797.052709][T14894] FAT-fs (loop3): Unrecognized mount option "uni_x" or missing value [ 797.091825][ T7839] hsr_slave_0: left promiscuous mode [ 797.109858][ T7839] hsr_slave_1: left promiscuous mode [ 797.386333][ T7839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 797.393952][ T7839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 797.463937][ T7839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 797.471589][ T7839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.680556][ T7839] bridge_slave_1: left allmulticast mode [ 797.830944][ T7839] bridge_slave_1: left promiscuous mode [ 798.024867][ T7839] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.108932][ T7839] bridge_slave_0: left allmulticast mode [ 798.167076][ T7839] bridge_slave_0: left promiscuous mode [ 798.172913][ T7839] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.186658][T14903] loop4: detected capacity change from 0 to 8192 [ 798.321166][T14903] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 798.685292][ T7839] veth1_macvtap: left promiscuous mode [ 798.690948][ T7839] veth0_macvtap: left promiscuous mode [ 798.718655][ T7839] veth1_vlan: left promiscuous mode [ 798.749273][ T7839] veth0_vlan: left promiscuous mode [ 799.396097][T14917] loop4: detected capacity change from 0 to 128 [ 799.413872][T14917] FAT-fs (loop4): Unrecognized mount option "uni_x" or missing value [ 800.376688][ T7839] bond8 (unregistering): Released all slaves [ 800.876424][T14934] loop4: detected capacity change from 0 to 128 [ 800.936491][T14934] FAT-fs (loop4): Unrecognized mount option "uni_x" or missing value [ 801.124304][T14446] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 802.090147][ T7839] bond7 (unregistering): Released all slaves [ 802.142753][ T7839] bond6 (unregistering): (slave bridge7): Releasing backup interface [ 802.159085][ T7839] bridge7 (unregistering): left promiscuous mode [ 802.170099][ T7839] bridge7 (unregistering): left allmulticast mode [ 802.453382][ T7839] bond6 (unregistering): Released all slaves [ 802.500856][ T7839] bond5 (unregistering): (slave bridge6): Releasing backup interface [ 802.510894][ T7839] bridge6 (unregistering): left promiscuous mode [ 803.100905][ T7839] bond5 (unregistering): Released all slaves [ 804.148439][ T7839] bond4 (unregistering): Released all slaves [ 804.209734][ T7839] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 804.218381][ T7839] bridge4 (unregistering): left promiscuous mode [ 804.450088][ T7839] bond3 (unregistering): Released all slaves [ 804.502139][ T7839] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 804.510455][ T7839] bridge3 (unregistering): left promiscuous mode [ 804.694917][ T7839] bond2 (unregistering): Released all slaves [ 804.720258][ T7839] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 804.728719][ T7839] bridge2 (unregistering): left promiscuous mode [ 804.735178][ T7839] bridge2 (unregistering): left allmulticast mode [ 804.945354][ T7839] bond1 (unregistering): Released all slaves [ 805.737799][ T7839] team0 (unregistering): Port device team_slave_1 removed [ 805.792216][ T7839] team0 (unregistering): Port device team_slave_0 removed [ 805.847531][ T7839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.901054][ T7839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 806.329288][ T7839] bond0 (unregistering): Released all slaves [ 806.874502][T14958] syzkaller0: entered promiscuous mode [ 806.880164][T14958] syzkaller0: entered allmulticast mode [ 806.950105][T14956] tipc: Enabled bearer , priority 0 [ 807.053403][T14956] tipc: Resetting bearer [ 807.062571][T14955] tipc: Resetting bearer [ 807.105526][T14955] tipc: Disabling bearer [ 807.723299][T14976] loop4: detected capacity change from 0 to 128 [ 807.868845][T14976] FAT-fs (loop4): Unrecognized mount option "uni_x" or missing value [ 808.795750][T14994] loop3: detected capacity change from 0 to 128 [ 808.813867][T14994] FAT-fs (loop3): Unrecognized mount option "uni_x" or missing value [ 811.279508][T14446] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 811.962400][T15014] syzkaller0: entered promiscuous mode [ 811.974158][T15014] syzkaller0: entered allmulticast mode [ 812.001574][T15014] tipc: Enabled bearer , priority 0 [ 812.055737][T15014] tipc: Resetting bearer [ 812.078427][T15013] tipc: Resetting bearer [ 812.350249][T15013] tipc: Disabling bearer [ 813.195980][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.202373][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.410278][T14716] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 813.508654][T15037] loop3: detected capacity change from 0 to 512 [ 813.516509][T15037] EXT4-fs: Ignoring removed nobh option [ 813.708286][T15037] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 813.722330][T15037] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 813.818716][T15037] EXT4-fs (loop3): 1 truncate cleaned up [ 813.834094][T15037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 814.461001][T14716] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 814.608028][T14716] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 814.633552][T13670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.660550][T14716] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 814.912469][T15053] loop3: detected capacity change from 0 to 128 [ 814.935108][T15053] FAT-fs (loop3): Unrecognized mount option "uni_x" or missing value [ 817.258791][T14716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.545348][T14716] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.628449][ T7826] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.635724][ T7826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.744004][T15073] loop4: detected capacity change from 0 to 512 [ 817.752676][T15073] EXT4-fs: Ignoring removed nobh option [ 818.944494][T15073] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 819.106626][ T7839] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.113943][ T7839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.154486][T15073] EXT4-fs (loop4): 1 truncate cleaned up [ 819.161132][T15073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 819.487875][ T8264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.633383][T15088] syzkaller0: entered promiscuous mode [ 819.669418][T15088] syzkaller0: entered allmulticast mode [ 819.701739][T15090] tipc: Enabled bearer , priority 0 [ 819.754294][T15088] tipc: Resetting bearer [ 819.789639][T15085] tipc: Resetting bearer [ 820.650170][T15085] tipc: Disabling bearer [ 820.839236][T14716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.865826][T15101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2568'. [ 820.902784][T15101] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2568'. [ 820.996105][T15104] syzkaller0: entered promiscuous mode [ 821.003024][T15104] syzkaller0: entered allmulticast mode [ 821.457738][T15118] loop4: detected capacity change from 0 to 8192 [ 821.472299][T15118] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 824.322010][T14716] veth0_vlan: entered promiscuous mode [ 824.361405][T14716] veth1_vlan: entered promiscuous mode [ 824.422769][T14716] veth0_macvtap: entered promiscuous mode [ 824.437965][T14716] veth1_macvtap: entered promiscuous mode [ 824.448708][T15125] loop4: detected capacity change from 0 to 128 [ 824.464348][T14716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 824.475115][T14716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.488689][T14716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 824.502988][T15125] FAT-fs (loop4): Unrecognized mount option "uni_x" or missing value [ 824.521699][T14716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.546243][T14716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 824.629639][T14716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.726521][T15134] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 825.092541][T14716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.415371][T14716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.460107][T15123] Bluetooth: hci3: command 0x0406 tx timeout [ 825.503824][T14716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.566066][T14716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.621090][T14716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.683693][T14716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.735923][T14716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.815701][T14716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.941502][T14716] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.980395][T14716] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.274072][T14716] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.293275][T14716] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.365606][T15152] syzkaller0: entered promiscuous mode [ 827.433421][T15152] syzkaller0: entered allmulticast mode [ 827.562479][ T6163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.592455][ T6163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.637638][T15154] syzkaller0: entered promiscuous mode [ 827.655207][T15154] syzkaller0: entered allmulticast mode [ 830.222302][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.245715][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.326408][T15171] loop4: detected capacity change from 0 to 128 [ 830.358497][T15171] FAT-fs (loop4): Unrecognized mount option "uni_x" or missing value [ 830.620635][T15180] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 832.384925][T15191] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 833.214073][ T5082] Bluetooth: hci4: command 0x0405 tx timeout [ 834.275695][T15208] loop3: detected capacity change from 0 to 2048 [ 834.320497][T15208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 834.351572][T15208] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 834.949459][T15219] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2591'. [ 835.024304][ T27] audit: type=1800 audit(1771808900.073:3): pid=15219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2591" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 835.356347][T13670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.496977][T15220] libceph: resolve '0..' (ret=-3): failed [ 837.202535][T15235] loop3: detected capacity change from 0 to 128 [ 837.254386][T15235] FAT-fs (loop3): Unrecognized mount option "uni_x" or missing value [ 837.457540][T15240] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 838.843840][T15243] netlink: 'syz.3.2600': attribute type 1 has an invalid length. [ 838.854412][T15243] netlink: 'syz.3.2600': attribute type 1 has an invalid length. [ 841.384940][T14446] udevd[14446]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 842.602695][T15263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2602'. [ 843.115073][T15269] loop4: detected capacity change from 0 to 128 [ 843.144215][T15269] FAT-fs (loop4): Unrecognized mount option "uni_x" or missing value [ 845.702056][T15281] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 847.504741][T15289] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 848.313077][T15298] syzkaller0: entered promiscuous mode [ 848.320867][T15298] syzkaller0: entered allmulticast mode [ 848.512673][T15299] libceph: resolve '0..' (ret=-3): failed [ 850.059151][T15318] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 852.463945][T15328] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 856.293911][T15343] lo speed is unknown, defaulting to 1000 [ 856.299933][T15343] lo speed is unknown, defaulting to 1000 [ 856.308309][T15343] lo speed is unknown, defaulting to 1000 [ 856.325869][T15343] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 857.433981][T15337] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 857.564437][T15342] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 858.604102][T15343] lo speed is unknown, defaulting to 1000 [ 858.612599][T15343] lo speed is unknown, defaulting to 1000 [ 858.620040][T15343] lo speed is unknown, defaulting to 1000 [ 858.627545][T15343] lo speed is unknown, defaulting to 1000 [ 859.197854][T15351] syzkaller0: entered promiscuous mode [ 859.233570][T15351] syzkaller0: entered allmulticast mode [ 859.809324][T15363] loop4: detected capacity change from 0 to 128 [ 859.970831][T15363] FAT-fs (loop4): Unrecognized mount option "uni_x" or missing value [ 860.330464][T15368] netlink: 'syz.0.2633': attribute type 1 has an invalid length. [ 860.406577][T15371] siw: device registration error -23 [ 860.430984][T15371] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 861.337699][T15373] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 861.519638][T15368] netlink: 'syz.0.2633': attribute type 1 has an invalid length. [ 863.700550][T15384] siw: device registration error -23 [ 863.780025][T15384] loop4: detected capacity change from 0 to 512 [ 864.755937][T15390] libceph: resolve '0..' (ret=-3): failed [ 864.886002][T15394] siw: device registration error -23 [ 864.916260][T15394] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 866.473555][T15123] Bluetooth: hci2: command 0x0406 tx timeout [ 866.677147][T15404] tipc: Enabled bearer , priority 0 [ 866.719236][T15404] tipc: Resetting bearer [ 866.758631][T15403] tipc: Disabling bearer [ 867.443818][T15408] siw: device registration error -23 [ 868.063658][T15408] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 868.752310][T15413] loop4: detected capacity change from 0 to 128 [ 868.872906][T15413] FAT-fs (loop4): Unrecognized mount option "uni_x" or missing value [ 868.917229][T15413] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 870.800723][T15428] siw: device registration error -23 [ 872.014390][T15432] siw: device registration error -23 [ 874.481524][T15442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2650'. [ 874.496651][T15449] tipc: Enabled bearer , priority 0 [ 874.518242][T15449] tipc: Resetting bearer [ 874.552851][T15447] tipc: Disabling bearer [ 874.565652][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 874.565778][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.613569][ T6825] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 874.806379][ T6825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.832991][ T6825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.863862][ T6825] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 874.903519][ T6825] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 874.912646][ T6825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.957597][ T6825] usb 1-1: config 0 descriptor?? [ 875.394302][T15455] loop4: detected capacity change from 0 to 128 [ 875.412517][T15455] FAT-fs (loop4): Unrecognized mount option "uni_x" or missing value [ 875.490698][T15455] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 875.653713][ T6825] usbhid 1-1:0.0: can't add hid device: -71 [ 875.684881][ T6825] usbhid: probe of 1-1:0.0 failed with error -71 [ 875.744759][ T6825] usb 1-1: USB disconnect, device number 16 [ 875.900022][T15459] loop4: detected capacity change from 0 to 128 [ 875.946790][T15459] FAT-fs (loop4): Unrecognized mount option "uni_x" or missing value [ 877.628940][T15465] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 878.643755][T15472] siw: device registration error -23 [ 880.227925][T15478] siw: device registration error -23 [ 881.232277][T15480] tipc: Started in network mode [ 881.243562][T15480] tipc: Node identity fabd55aedaf2, cluster identity 4711 [ 881.266695][T15480] tipc: Enabled bearer , priority 0 [ 881.460316][T15479] tipc: Disabling bearer [ 881.542652][T15486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2664'. [ 881.637158][T15487] siw: device registration error -23 [ 881.659972][T15487] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 881.887955][T15488] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2664'. [ 882.692539][T15494] netlink: 'syz.4.2659': attribute type 1 has an invalid length. [ 882.709750][T15494] netlink: 'syz.4.2659': attribute type 1 has an invalid length. [ 884.620751][T15504] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 886.025967][T15516] libceph: resolve '0..' (ret=-3): failed [ 886.699369][T15528] tipc: Started in network mode [ 886.716417][T15528] tipc: Node identity decc17050ab7, cluster identity 4711 [ 886.730921][T15526] loop4: detected capacity change from 0 to 8192 [ 886.737963][T15528] tipc: Enabled bearer , priority 0 [ 886.776472][T15526] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 886.792177][T15528] tipc: Resetting bearer [ 887.132194][T15527] tipc: Disabling bearer [ 887.463880][T13897] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 887.503787][T15537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2676'. [ 887.537308][T15537] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2676'. [ 887.675667][T13897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.693625][T13897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.710923][T13897] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 887.734071][T13897] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 887.747518][T13897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.759148][T13897] usb 5-1: config 0 descriptor?? [ 888.091172][T15543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2677'. [ 888.807690][T15544] syzkaller0: entered promiscuous mode [ 888.813255][T15544] syzkaller0: entered allmulticast mode [ 888.959736][T13897] usbhid 5-1:0.0: can't add hid device: -71 [ 888.966107][T13897] usbhid: probe of 5-1:0.0 failed with error -71 [ 888.975623][T13897] usb 5-1: USB disconnect, device number 12 [ 889.170895][T15550] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 890.521187][T15558] loop4: detected capacity change from 0 to 8192 [ 890.578735][T15558] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 891.238097][T15562] siw: device registration error -23 [ 892.158151][T15565] tipc: Enabled bearer , priority 0 [ 892.169618][T15565] tipc: Resetting bearer [ 892.292222][T15564] tipc: Disabling bearer [ 892.741166][T15570] libceph: resolve '0..' (ret=-3): failed [ 892.908480][T15574] syzkaller0: entered promiscuous mode [ 892.925936][T15574] syzkaller0: entered allmulticast mode [ 894.530997][T15583] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 897.136884][T15597] binder_alloc: 15586: binder_alloc_buf, no vma [ 898.584446][T15605] tipc: Enabled bearer , priority 0 [ 898.638406][T15605] tipc: Resetting bearer [ 898.740920][T15604] tipc: Disabling bearer [ 899.065836][T15611] syzkaller0: entered promiscuous mode [ 899.071501][T15611] syzkaller0: entered allmulticast mode [ 900.028265][T15617] siw: device registration error -23 [ 900.042468][T15617] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 903.272548][T15643] binder_alloc: 15628: binder_alloc_buf, no vma [ 904.509952][T15642] libceph: resolve '0..' (ret=-3): failed [ 907.363584][T15123] Bluetooth: hci4: command 0x0405 tx timeout [ 908.170106][T15677] syzkaller0: entered promiscuous mode [ 908.514040][T15677] syzkaller0: entered allmulticast mode [ 910.907795][T15687] tipc: Enabled bearer , priority 0 [ 910.954896][T15687] tipc: Resetting bearer [ 911.014703][T15686] tipc: Disabling bearer [ 911.224850][T15696] netlink: 'syz.4.2725': attribute type 1 has an invalid length. [ 911.366412][T15696] bond10: entered promiscuous mode [ 911.398670][T15696] 8021q: adding VLAN 0 to HW filter on device bond10 [ 911.407202][T15703] libceph: resolve '0..' (ret=-3): failed [ 911.416205][T15702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2725'. [ 911.468494][T15696] bond10: (slave bridge12): making interface the new active one [ 911.489504][T15696] bridge12: entered promiscuous mode [ 911.497390][T15696] bond10: (slave bridge12): Enslaving as an active interface with an up link [ 912.384207][T15715] syzkaller0: entered promiscuous mode [ 912.412731][T15715] syzkaller0: entered allmulticast mode [ 913.128007][T15724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2730'. [ 914.430945][T15730] tipc: Enabled bearer , priority 0 [ 914.476005][T15730] tipc: Resetting bearer [ 914.527000][T15729] tipc: Disabling bearer [ 914.538988][T15736] netlink: 'syz.2.2737': attribute type 1 has an invalid length. [ 914.620277][T15736] bond1: entered promiscuous mode [ 914.625949][T15736] 8021q: adding VLAN 0 to HW filter on device bond1 [ 914.639602][T15738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2737'. [ 914.777254][T15736] bond1: (slave bridge1): making interface the new active one [ 914.823744][T15736] bridge1: entered promiscuous mode [ 914.840294][T15736] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 917.273147][T15768] libceph: resolve '0..' (ret=-3): failed [ 917.475341][T15779] syzkaller0: entered promiscuous mode [ 917.481061][T15779] syzkaller0: entered allmulticast mode [ 920.903178][T15805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2755'. [ 926.491064][T15830] libceph: resolve '0..' (ret=-3): failed [ 932.994284][T15887] netlink: 'syz.3.2777': attribute type 1 has an invalid length. [ 933.059196][T15887] bond2: entered promiscuous mode [ 933.097965][T15887] 8021q: adding VLAN 0 to HW filter on device bond2 [ 933.200998][T15891] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2777'. [ 933.248630][T15892] libceph: resolve '0..' (ret=-3): failed [ 933.286224][T15887] bond2: (slave bridge2): making interface the new active one [ 933.298332][T15887] bridge2: entered promiscuous mode [ 933.319400][T15887] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 933.887972][T15912] syzkaller0: entered promiscuous mode [ 933.928962][T15912] syzkaller0: entered allmulticast mode [ 935.941754][T15933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2786'. [ 935.998481][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.005188][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.936206][T15941] tipc: Enabling of bearer rejected, failed to enable media [ 939.505141][T15976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 939.604991][T15982] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 939.771969][T15992] vcan0: tx drop: invalid sa for name 0x0008000000000005 [ 940.343272][T16011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2810'. [ 940.738266][T16026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2815'. [ 940.897556][T16032] syzkaller0: entered promiscuous mode [ 940.903350][T16032] syzkaller0: entered allmulticast mode [ 940.997462][T16036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2820'. [ 941.148095][T16040] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.305003][T16048] syzkaller1: entered promiscuous mode [ 941.310563][T16048] syzkaller1: entered allmulticast mode [ 941.390778][T16051] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2827'. [ 941.481380][T16053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2828'. [ 941.772053][T16066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2835'. [ 941.864883][T16070] lo speed is unknown, defaulting to 1000 [ 942.266404][ T4427] nci: nci_rx_work: unknown MT 0x1 [ 942.404211][T15123] Bluetooth: hci4: command 0x0405 tx timeout [ 943.164604][T16109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2849'. [ 943.234739][T16111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2850'. [ 945.146048][T16083] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 945.845269][T16149] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2868'. [ 945.871971][T16149] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2868'. [ 946.366737][T16169] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2877'. [ 946.379450][T16169] netlink: 'syz.2.2877': attribute type 7 has an invalid length. [ 946.389792][T16169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2877'. [ 946.417769][T16169] erspan0: entered promiscuous mode [ 946.427938][T16169] gretap0: entered promiscuous mode [ 946.680767][T16178] netlink: 484 bytes leftover after parsing attributes in process `syz.2.2880'. [ 946.766498][T16180] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 946.859032][T16184] syzkaller0: entered promiscuous mode [ 946.864934][T16184] syzkaller0: entered allmulticast mode [ 947.027033][T16186] syzkaller0: entered promiscuous mode [ 947.042138][T16186] syzkaller0: entered allmulticast mode [ 947.166282][T16190] syzkaller0: entered promiscuous mode [ 947.184585][T16190] syzkaller0: entered allmulticast mode [ 947.428946][T16202] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2892'. [ 947.459183][T16202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2892'. [ 947.482971][T16199] lo speed is unknown, defaulting to 1000 [ 947.518049][T16205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2893'. [ 947.567567][T16207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 947.575677][T16207] IPv6: NLM_F_CREATE should be set when creating new route [ 947.582986][T16207] IPv6: NLM_F_CREATE should be set when creating new route [ 948.068163][T16228] syz_tun: entered allmulticast mode [ 948.089763][T16227] syz_tun: left allmulticast mode [ 948.218328][T16233] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 948.451008][T16234] lo speed is unknown, defaulting to 1000 [ 949.216226][T16268] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2918'. [ 949.319819][T16276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2921'. [ 950.009071][T16270] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 950.334717][T16309] syzkaller0: entered promiscuous mode [ 950.340291][T16309] syzkaller0: entered allmulticast mode [ 951.102292][T16349] syzkaller0: entered promiscuous mode [ 951.108807][T16349] syzkaller0: entered allmulticast mode [ 951.192341][T16354] netlink: 'syz.2.2953': attribute type 1 has an invalid length. [ 951.254840][T16354] bond2: (slave bridge2): making interface the new active one [ 951.265287][T16354] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 951.293535][ T4427] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 951.322610][T16354] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 951.388815][T16354] macvlan2: entered promiscuous mode [ 951.427031][T16354] macvlan2: entered allmulticast mode [ 951.445177][T16354] bond2: entered promiscuous mode [ 951.473556][T16354] bridge2: entered promiscuous mode [ 951.479830][T16354] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 951.498083][T16354] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 951.531751][T16354] bond2: left promiscuous mode [ 951.537190][T16354] bridge2: left promiscuous mode [ 951.659900][T16365] netlink: 'syz.4.2957': attribute type 1 has an invalid length. [ 951.715973][T16365] 8021q: adding VLAN 0 to HW filter on device bond11 [ 951.738666][T16368] macvlan2: entered promiscuous mode [ 951.747627][T16368] macvlan2: entered allmulticast mode [ 951.769986][T16369] bond11: (slave ip6gretap1): making interface the new active one [ 951.780182][T16369] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link [ 952.230058][T16385] syzkaller0: entered promiscuous mode [ 952.243580][T16385] syzkaller0: entered allmulticast mode [ 953.203527][ T5082] Bluetooth: hci4: command 0x0405 tx timeout [ 953.356014][T16420] syzkaller0: entered promiscuous mode [ 953.371907][T16420] syzkaller0: entered allmulticast mode [ 953.474046][T16432] __nla_validate_parse: 1 callbacks suppressed [ 953.474147][T16432] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2981'. [ 953.508949][T16432] syzkaller1: entered promiscuous mode [ 953.518123][T16432] syzkaller1: entered allmulticast mode [ 953.771633][T16436] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 953.790358][T16436] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.946273][T16436] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 953.964512][T16436] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.076515][T16451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.090987][T16436] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 954.101896][T16436] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.127673][T16450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.212723][T16436] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 954.233536][T16436] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.304604][T16453] block nbd4: not configured, cannot reconfigure [ 954.388016][T16436] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.397001][T16436] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.423070][T16436] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.431860][T16436] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.473356][T16436] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.483192][T16436] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.493798][T16455] syzkaller0: entered promiscuous mode [ 954.499344][T16455] syzkaller0: entered allmulticast mode [ 954.517256][T16436] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.526303][T16436] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.622878][T16457] syzkaller0: entered promiscuous mode [ 954.628970][T16457] syzkaller0: entered allmulticast mode [ 954.824048][T16461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.868203][T16461] bond0: (slave rose0): Enslaving as an active interface with an up link [ 955.197947][T16478] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2999'. [ 955.273229][T16478] syzkaller1: entered promiscuous mode [ 955.306864][T16478] syzkaller1: entered allmulticast mode [ 955.558662][T16500] syzkaller0: entered promiscuous mode [ 955.564491][T16500] syzkaller0: entered allmulticast mode [ 955.575856][T16500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3004'. [ 955.585454][T16500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3004'. [ 955.854515][T14091] IPVS: starting estimator thread 0... [ 955.963823][T16513] IPVS: using max 17 ests per chain, 40800 per kthread [ 955.993731][T15123] Bluetooth: hci4: command 0x0405 tx timeout [ 958.370999][T16489] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 958.604341][T16544] syzkaller0: entered promiscuous mode [ 958.610088][T16544] syzkaller0: entered allmulticast mode [ 959.279422][T16563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3019'. [ 959.609809][ T5082] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 959.622199][ T5082] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 959.638772][ T5082] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 959.649842][ T5082] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 959.657911][ T5082] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 959.687156][ T5082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 959.746927][ T7839] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 959.759126][ T7839] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.852425][ T7839] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 959.871609][ T7839] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.901609][T16568] lo speed is unknown, defaulting to 1000 [ 960.001771][ T7839] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 960.020075][ T7839] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.129830][ T7839] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 960.142103][ T7839] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.259215][T16579] syzkaller0: entered promiscuous mode [ 960.278402][T16579] syzkaller0: entered allmulticast mode [ 960.646139][T16568] chnl_net:caif_netlink_parms(): no params data found [ 960.800785][ T7839] tipc: Left network mode [ 960.930750][T16568] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.942094][T16568] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.949931][T16568] bridge_slave_0: entered allmulticast mode [ 960.958016][T16568] bridge_slave_0: entered promiscuous mode [ 960.967899][T16568] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.976613][T16568] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.984283][T16568] bridge_slave_1: entered allmulticast mode [ 960.991899][T16568] bridge_slave_1: entered promiscuous mode [ 961.205331][ T7839] bond11: (slave ip6gretap1): Releasing active interface [ 961.670225][T16568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.710840][T16568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.753935][ T5082] Bluetooth: hci0: command tx timeout [ 962.024499][T16641] syzkaller0: entered promiscuous mode [ 962.030168][T16641] syzkaller0: entered allmulticast mode [ 962.262300][T16568] team0: Port device team_slave_0 added [ 962.314537][ T7832] wlan1: Trigger new scan to find an IBSS to join [ 962.442595][T16643] syzkaller0: entered promiscuous mode [ 962.449640][T16643] syzkaller0: entered allmulticast mode [ 962.475833][T16568] team0: Port device team_slave_1 added [ 963.833612][ T5082] Bluetooth: hci0: command tx timeout [ 965.357301][T14365] wlan1: Trigger new scan to find an IBSS to join [ 965.417212][T16568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.434410][T16568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 965.466578][T16568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.510256][T16568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 965.523583][T16568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 965.553275][T16568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.836998][T16680] syzkaller0: entered promiscuous mode [ 965.844749][T16680] syzkaller0: entered allmulticast mode [ 965.869812][T16568] hsr_slave_0: entered promiscuous mode [ 965.894893][T16568] hsr_slave_1: entered promiscuous mode [ 965.902971][T16568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 965.912164][T16568] Cannot create hsr debugfs directory [ 965.916201][ T5082] Bluetooth: hci0: command tx timeout [ 967.998498][ T5082] Bluetooth: hci0: command tx timeout [ 968.329852][ T7832] wlan1: Creating new IBSS network, BSSID 2e:2b:c2:df:c1:25 [ 968.848446][T16690] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3046'. [ 969.363552][ T7839] hsr_slave_0: left promiscuous mode [ 969.372387][ T7839] hsr_slave_1: left promiscuous mode [ 969.398016][ T7839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 969.411203][ T7839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 969.426780][ T7839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 969.436783][ T7839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 969.446328][ T7839] bridge_slave_1: left allmulticast mode [ 969.452044][ T7839] bridge_slave_1: left promiscuous mode [ 969.459404][ T7839] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.480565][T16727] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20001 [ 969.489729][ T7839] bridge_slave_0: left allmulticast mode [ 969.507349][ T7839] bridge_slave_0: left promiscuous mode [ 969.523046][ T7839] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.786767][ T7839] veth1_macvtap: left promiscuous mode [ 969.793822][ T7839] veth0_macvtap: left promiscuous mode [ 969.806880][ T7839] veth1_vlan: left promiscuous mode [ 969.812349][ T7839] veth0_vlan: left promiscuous mode [ 970.331204][ T7839] bond11 (unregistering): Released all slaves [ 970.360169][ T7839] bond10 (unregistering): (slave bridge12): Releasing backup interface [ 970.368771][ T7839] bridge12 (unregistering): left promiscuous mode [ 970.585266][ T7839] bond10 (unregistering): Released all slaves [ 970.615105][ T7839] bond9 (unregistering): (slave bridge11): Releasing backup interface [ 970.634526][ T7839] bridge11 (unregistering): left promiscuous mode [ 970.641063][ T7839] bridge11 (unregistering): left allmulticast mode [ 970.888210][ T7839] bond9 (unregistering): Released all slaves [ 970.914794][ T7839] bond8 (unregistering): (slave bridge10): Releasing backup interface [ 970.924080][ T7839] bridge10 (unregistering): left promiscuous mode [ 970.930588][ T7839] bridge10 (unregistering): left allmulticast mode [ 971.169326][ T7839] bond8 (unregistering): Released all slaves [ 971.421962][ T7839] bond7 (unregistering): Released all slaves [ 971.627657][ T7839] bond6 (unregistering): Released all slaves [ 971.651644][ T7839] bond5 (unregistering): (slave bridge7): Releasing backup interface [ 971.660115][ T7839] bridge7 (unregistering): left promiscuous mode [ 971.853321][ T7839] bond5 (unregistering): Released all slaves [ 971.879880][ T7839] bond4 (unregistering): (slave bridge6): Releasing backup interface [ 971.888366][ T7839] bridge6 (unregistering): left promiscuous mode [ 972.090386][ T7839] bond4 (unregistering): Released all slaves [ 972.373983][ T7839] bond3 (unregistering): Released all slaves [ 972.401739][ T7839] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 972.410260][ T7839] bridge2 (unregistering): left promiscuous mode [ 972.422921][ T7839] bridge2 (unregistering): left allmulticast mode [ 972.651664][ T7839] bond2 (unregistering): Released all slaves [ 972.700311][ T7839] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 972.708818][ T7839] bridge1 (unregistering): left promiscuous mode [ 972.717639][ T7839] bridge1 (unregistering): left allmulticast mode [ 972.922795][ T7839] bond1 (unregistering): Released all slaves [ 973.607452][ T7839] team0 (unregistering): Port device team_slave_1 removed [ 973.673157][ T7839] team0 (unregistering): Port device team_slave_0 removed [ 973.750310][ T7839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 973.811455][ T7839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 974.289570][ T7839] bond0 (unregistering): Released all slaves [ 974.667343][T16743] syzkaller0: entered promiscuous mode [ 974.672904][T16743] syzkaller0: entered allmulticast mode [ 974.711695][T16757] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3058'. [ 978.285582][T16801] syzkaller0: entered promiscuous mode [ 978.291137][T16801] syzkaller0: entered allmulticast mode [ 978.341026][T16801] ------------[ cut here ]------------ [ 978.347261][T16801] WARNING: CPU: 0 PID: 16801 at include/linux/skbuff.h:2871 em_cmp_match+0x56e/0x7c0 [ 978.357179][T16801] Modules linked in: [ 978.361278][T16801] CPU: 0 PID: 16801 Comm: syz.2.3068 Not tainted syzkaller #0 [ 978.368953][T16801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 978.379143][T16801] RIP: 0010:em_cmp_match+0x56e/0x7c0 [ 978.384674][T16801] Code: e8 77 6b d5 f8 39 dd 0f 94 c0 e9 40 fe ff ff e8 e8 69 d5 f8 e9 34 fe ff ff e8 de 69 d5 f8 0f 0b e9 97 fc ff ff e8 d2 69 d5 f8 <0f> 0b e9 79 fb ff ff 89 d9 80 e1 07 fe c1 38 c1 0f 8c e5 fa ff ff [ 978.404574][T16801] RSP: 0018:ffffc90002ee7118 EFLAGS: 00010287 [ 978.410778][T16801] RAX: ffffffff88b1ab3e RBX: ffff88801df35bea RCX: 0000000000080000 [ 978.418883][T16801] RDX: ffffc90011f19000 RSI: 00000000000005dc RDI: 00000000000005dd [ 978.426967][T16801] RBP: 000000000000ffff R08: ffff88801afb8000 R09: 0000000000000003 [ 978.435050][T16801] R10: 0000000000000002 R11: 0000000000000002 R12: 1ffff11003be6b7d [ 978.443102][T16801] R13: 1ffff11005ffcb7e R14: ffff88802ffe5b40 R15: ffff88802ffe5bf6 [ 978.451467][T16801] FS: 00007fb1da3f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 978.460986][T16801] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 978.467693][T16801] CR2: 00007ffc941a33d0 CR3: 000000005c37d000 CR4: 00000000003506f0 [ 978.475779][T16801] Call Trace: [ 978.479221][T16801] [ 978.482339][T16801] __tcf_em_tree_match+0x1cf/0x7a0 [ 978.487642][T16801] ? tcf_em_tree_dump+0x900/0x900 [ 978.492830][T16801] ? __lock_acquire+0x1273/0x7d40 [ 978.498085][T16801] basic_classify+0x115/0x2d0 [ 978.502854][T16801] tcf_classify+0x4c4/0xeb0 [ 978.507602][T16801] multiq_enqueue+0x103/0x4c0 [ 978.512438][T16801] ? sch_tree_unlock+0x1b0/0x1b0 [ 978.517529][T16801] ? do_raw_spin_lock+0x11f/0x2c0 [ 978.522644][T16801] ? __rwlock_init+0x150/0x150 [ 978.527590][T16801] dev_qdisc_enqueue+0x48/0x220 [ 978.532516][T16801] ? __dev_queue_xmit+0xd3b/0x36b0 [ 978.537766][T16801] __dev_queue_xmit+0xea8/0x36b0 [ 978.542837][T16801] ? __dev_queue_xmit+0x26b/0x36b0 [ 978.548178][T16801] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 978.553689][T16801] ? netdev_core_pick_tx+0x340/0x340 [ 978.559042][T16801] ? packet_parse_headers+0x85e/0xac0 [ 978.564549][T16801] ? __virt_addr_valid+0x18c/0x540 [ 978.569748][T16801] ? __check_object_size+0x506/0xa20 [ 978.575165][T16801] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 978.580803][T16801] ? skb_copy_datagram_from_iter+0x5f6/0x6e0 [ 978.586912][T16801] ? packet_xmit+0x66/0x330 [ 978.591487][T16801] ? packet_sendmsg+0x3a37/0x4d70 [ 978.596635][T16801] packet_sendmsg+0x3b7a/0x4d70 [ 978.601594][T16801] ? verify_lock_unused+0x140/0x140 [ 978.607005][T16801] ? finish_task_switch+0x326/0x8f0 [ 978.612297][T16801] ? verify_lock_unused+0x140/0x140 [ 978.617616][T16801] ? aa_sk_perm+0x83c/0x970 [ 978.622285][T16801] ? packet_getsockopt+0xad0/0xad0 [ 978.627522][T16801] ? aa_sock_msg_perm+0x94/0x150 [ 978.632533][T16801] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 978.637950][T16801] ? security_socket_sendmsg+0x80/0xa0 [ 978.643512][T16801] ? packet_getsockopt+0xad0/0xad0 [ 978.648795][T16801] ____sys_sendmsg+0x5ba/0x960 [ 978.653709][T16801] ? __lock_acquire+0x7d40/0x7d40 [ 978.658821][T16801] ? __asan_memset+0x22/0x40 [ 978.663521][T16801] ? __sys_sendmsg_sock+0x30/0x30 [ 978.668602][T16801] ? __import_iovec+0x5f2/0x850 [ 978.673596][T16801] ? import_iovec+0x73/0xa0 [ 978.678178][T16801] ___sys_sendmsg+0x2a6/0x360 [ 978.682926][T16801] ? __sys_sendmsg+0x2a0/0x2a0 [ 978.687851][T16801] __se_sys_sendmsg+0x1c2/0x2b0 [ 978.692773][T16801] ? __x64_sys_sendmsg+0x80/0x80 [ 978.697837][T16801] ? lockdep_hardirqs_on+0x98/0x150 [ 978.703107][T16801] do_syscall_64+0x55/0xa0 [ 978.707650][T16801] ? clear_bhb_loop+0x40/0x90 [ 978.712578][T16801] ? clear_bhb_loop+0x40/0x90 [ 978.717376][T16801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 978.723466][T16801] RIP: 0033:0x7fb1dc19c629 [ 978.728024][T16801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.747747][T16801] RSP: 002b:00007fb1da3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 978.756384][T16801] RAX: ffffffffffffffda RBX: 00007fb1dc415fa0 RCX: 00007fb1dc19c629 [ 978.764474][T16801] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 978.772514][T16801] RBP: 00007fb1dc232b39 R08: 0000000000000000 R09: 0000000000000000 [ 978.780690][T16801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 978.788774][T16801] R13: 00007fb1dc416038 R14: 00007fb1dc415fa0 R15: 00007ffd6fec0c08 [ 978.796882][T16801] [ 978.799961][T16801] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 978.807297][T16801] CPU: 0 PID: 16801 Comm: syz.2.3068 Not tainted syzkaller #0 [ 978.814813][T16801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 978.824932][T16801] Call Trace: [ 978.828269][T16801] [ 978.831255][T16801] dump_stack_lvl+0x18c/0x250 [ 978.836005][T16801] ? show_regs_print_info+0x20/0x20 [ 978.841279][T16801] ? load_image+0x400/0x400 [ 978.845866][T16801] panic+0x2dc/0x730 [ 978.849830][T16801] ? bpf_jit_dump+0xd0/0xd0 [ 978.854412][T16801] __warn+0x2e0/0x470 [ 978.858453][T16801] ? em_cmp_match+0x56e/0x7c0 [ 978.863281][T16801] ? em_cmp_match+0x56e/0x7c0 [ 978.868024][T16801] report_bug+0x2be/0x4f0 [ 978.872514][T16801] ? em_cmp_match+0x56e/0x7c0 [ 978.877272][T16801] ? em_cmp_match+0x56e/0x7c0 [ 978.882013][T16801] ? em_cmp_match+0x570/0x7c0 [ 978.886752][T16801] handle_bug+0xcf/0x120 [ 978.891102][T16801] exc_invalid_op+0x1a/0x50 [ 978.895677][T16801] asm_exc_invalid_op+0x1a/0x20 [ 978.900588][T16801] RIP: 0010:em_cmp_match+0x56e/0x7c0 [ 978.905930][T16801] Code: e8 77 6b d5 f8 39 dd 0f 94 c0 e9 40 fe ff ff e8 e8 69 d5 f8 e9 34 fe ff ff e8 de 69 d5 f8 0f 0b e9 97 fc ff ff e8 d2 69 d5 f8 <0f> 0b e9 79 fb ff ff 89 d9 80 e1 07 fe c1 38 c1 0f 8c e5 fa ff ff [ 978.925594][T16801] RSP: 0018:ffffc90002ee7118 EFLAGS: 00010287 [ 978.931716][T16801] RAX: ffffffff88b1ab3e RBX: ffff88801df35bea RCX: 0000000000080000 [ 978.939743][T16801] RDX: ffffc90011f19000 RSI: 00000000000005dc RDI: 00000000000005dd [ 978.947775][T16801] RBP: 000000000000ffff R08: ffff88801afb8000 R09: 0000000000000003 [ 978.955804][T16801] R10: 0000000000000002 R11: 0000000000000002 R12: 1ffff11003be6b7d [ 978.963827][T16801] R13: 1ffff11005ffcb7e R14: ffff88802ffe5b40 R15: ffff88802ffe5bf6 [ 978.971858][T16801] ? em_cmp_match+0x56e/0x7c0 [ 978.976604][T16801] ? em_cmp_match+0x56e/0x7c0 [ 978.981355][T16801] __tcf_em_tree_match+0x1cf/0x7a0 [ 978.986539][T16801] ? tcf_em_tree_dump+0x900/0x900 [ 978.991639][T16801] ? __lock_acquire+0x1273/0x7d40 [ 978.996730][T16801] basic_classify+0x115/0x2d0 [ 979.001561][T16801] tcf_classify+0x4c4/0xeb0 [ 979.006140][T16801] multiq_enqueue+0x103/0x4c0 [ 979.010876][T16801] ? sch_tree_unlock+0x1b0/0x1b0 [ 979.015857][T16801] ? do_raw_spin_lock+0x11f/0x2c0 [ 979.020946][T16801] ? __rwlock_init+0x150/0x150 [ 979.025952][T16801] dev_qdisc_enqueue+0x48/0x220 [ 979.030952][T16801] ? __dev_queue_xmit+0xd3b/0x36b0 [ 979.036143][T16801] __dev_queue_xmit+0xea8/0x36b0 [ 979.041171][T16801] ? __dev_queue_xmit+0x26b/0x36b0 [ 979.046447][T16801] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 979.051895][T16801] ? netdev_core_pick_tx+0x340/0x340 [ 979.057246][T16801] ? packet_parse_headers+0x85e/0xac0 [ 979.062695][T16801] ? __virt_addr_valid+0x18c/0x540 [ 979.067908][T16801] ? __check_object_size+0x506/0xa20 [ 979.073256][T16801] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 979.078872][T16801] ? skb_copy_datagram_from_iter+0x5f6/0x6e0 [ 979.084920][T16801] ? packet_xmit+0x66/0x330 [ 979.089486][T16801] ? packet_sendmsg+0x3a37/0x4d70 [ 979.094569][T16801] packet_sendmsg+0x3b7a/0x4d70 [ 979.099513][T16801] ? verify_lock_unused+0x140/0x140 [ 979.104770][T16801] ? finish_task_switch+0x326/0x8f0 [ 979.110046][T16801] ? verify_lock_unused+0x140/0x140 [ 979.115303][T16801] ? aa_sk_perm+0x83c/0x970 [ 979.119870][T16801] ? packet_getsockopt+0xad0/0xad0 [ 979.125044][T16801] ? aa_sock_msg_perm+0x94/0x150 [ 979.130041][T16801] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 979.135390][T16801] ? security_socket_sendmsg+0x80/0xa0 [ 979.140910][T16801] ? packet_getsockopt+0xad0/0xad0 [ 979.146087][T16801] ____sys_sendmsg+0x5ba/0x960 [ 979.150922][T16801] ? __lock_acquire+0x7d40/0x7d40 [ 979.156017][T16801] ? __asan_memset+0x22/0x40 [ 979.160761][T16801] ? __sys_sendmsg_sock+0x30/0x30 [ 979.165833][T16801] ? __import_iovec+0x5f2/0x850 [ 979.170839][T16801] ? import_iovec+0x73/0xa0 [ 979.175404][T16801] ___sys_sendmsg+0x2a6/0x360 [ 979.180141][T16801] ? __sys_sendmsg+0x2a0/0x2a0 [ 979.185010][T16801] __se_sys_sendmsg+0x1c2/0x2b0 [ 979.189910][T16801] ? __x64_sys_sendmsg+0x80/0x80 [ 979.194997][T16801] ? lockdep_hardirqs_on+0x98/0x150 [ 979.200250][T16801] do_syscall_64+0x55/0xa0 [ 979.204724][T16801] ? clear_bhb_loop+0x40/0x90 [ 979.209451][T16801] ? clear_bhb_loop+0x40/0x90 [ 979.214184][T16801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 979.220130][T16801] RIP: 0033:0x7fb1dc19c629 [ 979.224602][T16801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 979.244443][T16801] RSP: 002b:00007fb1da3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 979.253000][T16801] RAX: ffffffffffffffda RBX: 00007fb1dc415fa0 RCX: 00007fb1dc19c629 [ 979.261011][T16801] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 979.269040][T16801] RBP: 00007fb1dc232b39 R08: 0000000000000000 R09: 0000000000000000 [ 979.277194][T16801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 979.285198][T16801] R13: 00007fb1dc416038 R14: 00007fb1dc415fa0 R15: 00007ffd6fec0c08 [ 979.293324][T16801] [ 979.297183][T16801] Kernel Offset: disabled [ 979.301681][T16801] Rebooting in 86400 seconds..