last executing test programs: 4.176936701s ago: executing program 1 (id=5392): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0007000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 4.127587932s ago: executing program 3 (id=5394): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x102, 0x4, 0x418, 0x10c, 0x110, 0x10c, 0x324, 0x110, 0x324, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @remote, @multicast1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @multicast2, @empty, 0x9, 0xffffffff}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e9fb760d26c0", @multicast1, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) 4.072671282s ago: executing program 3 (id=5396): syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b00010000000009", @ANYRES8], 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x80) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32, @ANYBLOB="01000000000000001c00"], 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x59) syz_emit_ethernet(0x32, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000080047f50024006500000502907864010102e000007a150fb26593a40f7701019404e25a00000014009078ac1433b8d6ec47ae9f"], 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x92e5e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) syz_emit_ethernet(0x12, &(0x7f00000030c0)={@local, @random="d1c7c73cf1bf", @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@generic={0x88f7}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.043572853s ago: executing program 1 (id=5398): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fc2b0000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=@newtfilter={0x38, 0x2c, 0xd27, 0x60bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x8, 0xa}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r4}]}}]}, 0x38}}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) 3.829559217s ago: executing program 1 (id=5399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x40d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885) 2.318163735s ago: executing program 1 (id=5403): socket$packet(0x11, 0x3, 0x300) ioperm(0x1000, 0x1000, 0x8000000000000001) rt_sigprocmask(0x0, &(0x7f0000000380)={[0xfffff7feffff7fff]}, 0x0, 0x8) r0 = gettid() r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) io_setup(0x3, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x300000000000000, 0x0, 0x0, 0x0, 0xe11, r1, 0x0, 0xf, 0x4, 0x0, 0x0, r1}]) tkill(r0, 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x9, 0x29, 0x80, 0x9, 0xffffffff, 0x91b1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x100, 0xffffffff, 0x1, 0x100, 0x704, 0x8}}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x80}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000080)=0xf5a, 0x4) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000380), 0xffffffffffffff11, 0x281) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01efffffffffffffff000a0000060900020073797a31000000000900010073797a310000000014000380"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2d}) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r5, 0x0, 0x0, 0x40000, &(0x7f0000002500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @empty}, 0x1, 0x2, 0x4, 0x81}}, 0x80) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) 2.262891052s ago: executing program 2 (id=5404): r0 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) writev(r0, &(0x7f0000000040), 0x0) 2.256845712s ago: executing program 0 (id=5405): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r1, 0x25, 0x0, @val=@netkit}, 0x1c) syz_emit_ethernet(0x2596, &(0x7f0000005100)=ANY=[], 0x0) 2.218446152s ago: executing program 2 (id=5406): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0007000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 2.21788275s ago: executing program 0 (id=5407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fc2b0000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=@newtfilter={0x38, 0x2c, 0xd27, 0x60bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x8, 0xa}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r4}]}}]}, 0x38}}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) 2.099596014s ago: executing program 2 (id=5408): syz_emit_ethernet(0x46, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r1, 0x0, 0x0, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xfffffffffffffe68}, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000006c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0x38}, 0x200000e0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000780)) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x7, 0x4e22, 0xfffc, 0x2, 0x0, 0x0, 0x2f}, {0x5, 0xe2, 0x1, 0xffffffffffffffff, 0x4, 0x0, 0x6, 0x1}, {0x4, 0xfff, 0x1, 0x2}, 0x2, 0x6e6bb3, 0x0, 0x1, 0x2, 0x3}, {{@in=@multicast2, 0x4d6, 0x2b}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x34ff, 0x1, 0x1, 0x1, 0xfffffffb, 0x81, 0x1}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000b80)={0x2, 0x9, 0x6, 0x3, 0x2, 0x0, 0x70bd28, 0x25dfdbff}, 0x10}}, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000680)=0x7f, 0x8) 1.873164133s ago: executing program 3 (id=5409): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001fc0)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x1e8, 0xb0, 0xb0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@LOG={0x11, 'LOG\x00', 0x0, {0x0, 0x0, "6b07000000000000005b4809088400ed0000006c0000040500"}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x29}, @multicast2, 0x0, 0x0, 'bond_slave_1\x00', 'batadv_slave_1\x00', {0x836b636e4bafbd70}, {}, 0x62, 0x2, 0x6}, 0x287, 0x110, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'macvtap0\x00', {}, 'vxcan1\x00', {0xff}, 0x1b, 0x18}}, @common=@unspec=@statistic={{0x38}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x34, "9c4b4435910fbfcf24e0fae0e0bfd3b90000000000000000000000000001"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) 1.871492134s ago: executing program 0 (id=5417): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fc2b0000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=@newtfilter={0x38, 0x2c, 0xd27, 0x60bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x8, 0xa}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r4}]}}]}, 0x38}}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, 0x0}, 0x0) 1.842209781s ago: executing program 3 (id=5410): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendfile(r2, r3, 0x0, 0xffffffff000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 1.723785786s ago: executing program 0 (id=5411): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffff000000000000ffffffff18150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1, 0x0, 0x0, 0x800300}, 0x20004801) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) recvmsg(0xffffffffffffffff, 0x0, 0x101) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x3, 0x3, 0x5, 0xfffffff8}, @local, @multicast1, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xb940, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.630536066s ago: executing program 0 (id=5412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x40d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885) 1.327123846s ago: executing program 1 (id=5413): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000002c0), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.190336938s ago: executing program 2 (id=5414): r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r0, 0x8) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff"], 0x78) 921.441262ms ago: executing program 3 (id=5415): r0 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) writev(r0, &(0x7f0000000040)=[{0x0}], 0x1) 790.185949ms ago: executing program 3 (id=5416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0007000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 72.723923ms ago: executing program 0 (id=5418): syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b00010000000009", @ANYRES8], 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x80) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32, @ANYBLOB="01000000000000001c00"], 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x59) syz_emit_ethernet(0x32, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000080047f50024006500000502907864010102e000007a150fb26593a40f7701019404e25a00000014009078ac1433b8d6ec47ae9f"], 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x92e5e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) syz_emit_ethernet(0x12, &(0x7f00000030c0)={@local, @random="d1c7c73cf1bf", @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@generic={0x88f7}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 36.765454ms ago: executing program 2 (id=5419): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r1, 0x25, 0x0, @val=@netkit}, 0x1c) syz_emit_ethernet(0x2596, &(0x7f0000005100)=ANY=[], 0x0) 28.397425ms ago: executing program 1 (id=5420): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fc2b0000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=@newtfilter={0x38, 0x2c, 0xd27, 0x60bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x8, 0xa}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r4}]}}]}, 0x38}}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, 0x0}, 0x0) 0s ago: executing program 2 (id=5421): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@loopback, 0xbe3412, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x1, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002000000"], 0x94}}, 0x0) kernel console output (not intermixed with test programs): 16150] bridge_slave_0: left promiscuous mode [ 311.575332][T16150] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.583309][T16150] bridge_slave_1: left allmulticast mode [ 311.585161][T16150] bridge_slave_1: left promiscuous mode [ 311.587783][T16150] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.613073][T16150] bond0: (slave bond_slave_0): Releasing backup interface [ 311.618811][T16150] bond0: (slave bond_slave_1): Releasing backup interface [ 311.632442][T16150] team0: Port device team_slave_0 removed [ 311.638490][T16150] team0: Port device team_slave_1 removed [ 311.642029][T16150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.644544][T16150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.647747][T16150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.650105][T16150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.654083][T16150] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 311.667513][T16162] tipc: Enabled bearer , priority 0 [ 311.671053][T16161] syzkaller0: entered promiscuous mode [ 311.672782][T16161] syzkaller0: entered allmulticast mode [ 311.675877][T16159] syzkaller0: entered promiscuous mode [ 311.677760][T16159] syzkaller0: entered allmulticast mode [ 311.694978][T16159] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 311.699235][T16159] tipc: Resetting bearer [ 311.702872][T16158] tipc: Resetting bearer [ 311.712820][T16158] tipc: Disabling bearer [ 312.236330][T16182] syzkaller0: entered promiscuous mode [ 312.238048][T16182] syzkaller0: entered allmulticast mode [ 312.331980][ T5746] Bluetooth: hci2: command 0x0405 tx timeout [ 312.397999][T16188] tipc: Enabled bearer , priority 0 [ 312.400584][T16188] syzkaller0: entered promiscuous mode [ 312.402552][T16188] syzkaller0: entered allmulticast mode [ 312.406745][T16188] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 312.415106][T16188] tipc: Resetting bearer [ 312.418106][T16187] tipc: Resetting bearer [ 312.428506][T16187] tipc: Disabling bearer [ 312.653428][T16201] syzkaller0: entered promiscuous mode [ 312.655365][T16201] syzkaller0: entered allmulticast mode [ 312.774482][T16209] tipc: Enabled bearer , priority 0 [ 312.786961][T16209] syzkaller0: entered promiscuous mode [ 312.788835][T16209] syzkaller0: entered allmulticast mode [ 312.793504][T16209] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 312.800115][T16209] tipc: Resetting bearer [ 312.819745][T16208] tipc: Resetting bearer [ 312.831852][T16208] tipc: Disabling bearer [ 313.085700][T16232] syzkaller0: entered promiscuous mode [ 313.087829][T16232] syzkaller0: entered allmulticast mode [ 313.220988][T16238] netlink: 'syz.0.3821': attribute type 4 has an invalid length. [ 313.255171][T16240] tipc: Enabled bearer , priority 0 [ 313.257727][T16240] syzkaller0: entered promiscuous mode [ 313.259454][T16240] syzkaller0: entered allmulticast mode [ 313.263559][T16240] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 313.276642][T16240] tipc: Resetting bearer [ 313.282125][T16239] tipc: Resetting bearer [ 313.298392][T16239] tipc: Disabling bearer [ 313.358404][T16252] syzkaller0: entered promiscuous mode [ 313.360768][T16252] syzkaller0: entered allmulticast mode [ 313.601393][ T29] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 313.762080][ T29] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.766098][ T29] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 313.772820][ T29] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 313.776398][ T29] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 313.779561][ T29] usb 8-1: Product: syz [ 313.781311][ T29] usb 8-1: Manufacturer: syz [ 313.783223][ T29] usb 8-1: SerialNumber: syz [ 313.786933][ T29] usb 8-1: config 0 descriptor?? [ 313.890314][T16277] tipc: Enabled bearer , priority 0 [ 313.893359][T16277] syzkaller0: entered promiscuous mode [ 313.895198][T16277] syzkaller0: entered allmulticast mode [ 313.898864][T16277] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 313.911089][T16277] tipc: Resetting bearer [ 313.914502][T16276] tipc: Resetting bearer [ 313.928075][T16276] tipc: Disabling bearer [ 313.999020][ T29] usb 8-1: USB disconnect, device number 37 [ 314.052425][T16285] syzkaller0: entered promiscuous mode [ 314.054602][T16285] syzkaller0: entered allmulticast mode [ 314.363878][T16299] syzkaller0: entered promiscuous mode [ 314.365775][T16299] syzkaller0: entered allmulticast mode [ 314.369822][T16299] tipc: Enabled bearer , priority 0 [ 314.377639][T16299] tipc: Resetting bearer [ 314.381260][T16298] tipc: Resetting bearer [ 314.393409][T16298] tipc: Disabling bearer [ 314.493575][T16308] tipc: Enabled bearer , priority 0 [ 314.496269][T16308] syzkaller0: entered promiscuous mode [ 314.498041][T16308] syzkaller0: entered allmulticast mode [ 314.504491][T16308] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 314.518568][T16308] tipc: Resetting bearer [ 314.523380][T16307] tipc: Resetting bearer [ 314.533395][T16307] tipc: Disabling bearer [ 314.714729][T16328] syzkaller0: entered promiscuous mode [ 314.717079][T16328] syzkaller0: entered allmulticast mode [ 314.725305][T16328] tipc: Enabled bearer , priority 0 [ 314.732638][T16328] tipc: Resetting bearer [ 314.742800][T16327] tipc: Resetting bearer [ 314.760519][T16327] tipc: Disabling bearer [ 314.897709][T16343] tipc: Enabled bearer , priority 0 [ 314.902111][T16343] syzkaller0: entered promiscuous mode [ 314.904447][T16343] syzkaller0: entered allmulticast mode [ 314.909390][T16343] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 314.924898][T16343] tipc: Resetting bearer [ 314.930968][T16342] tipc: Resetting bearer [ 314.944025][T16342] tipc: Disabling bearer [ 315.030993][ T5850] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 315.197492][ T5850] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.201291][ T5850] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 315.208361][ T5850] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 315.213837][ T5850] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 315.216997][ T5850] usb 6-1: Product: syz [ 315.218683][ T5850] usb 6-1: Manufacturer: syz [ 315.220115][ T5850] usb 6-1: SerialNumber: syz [ 315.224791][ T5850] usb 6-1: config 0 descriptor?? [ 315.341909][T16378] tipc: Enabled bearer , priority 0 [ 315.345765][T16378] syzkaller0: entered promiscuous mode [ 315.347597][T16378] syzkaller0: entered allmulticast mode [ 315.351418][T16378] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 315.361297][T16378] tipc: Resetting bearer [ 315.380759][T16375] tipc: Resetting bearer [ 315.391298][T16375] tipc: Disabling bearer [ 315.437066][ T5850] usb 6-1: USB disconnect, device number 20 [ 315.697052][T16405] tipc: Enabled bearer , priority 0 [ 315.699686][T16405] syzkaller0: entered promiscuous mode [ 315.702039][T16405] syzkaller0: entered allmulticast mode [ 315.706452][T16405] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 315.717204][T16405] tipc: Resetting bearer [ 315.723116][T16404] tipc: Resetting bearer [ 315.733285][T16404] tipc: Disabling bearer [ 316.156627][T16430] tipc: Enabled bearer , priority 0 [ 316.161783][T16430] syzkaller0: entered promiscuous mode [ 316.163406][T16430] syzkaller0: entered allmulticast mode [ 316.167270][T16430] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 316.186533][T16430] tipc: Resetting bearer [ 316.192840][T16429] tipc: Resetting bearer [ 316.232988][T16429] tipc: Disabling bearer [ 316.471221][T16442] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.561996][ T5850] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 316.574984][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.584741][T16452] tipc: Enabled bearer , priority 0 [ 316.587043][T16452] syzkaller0: entered promiscuous mode [ 316.588581][T16452] syzkaller0: entered allmulticast mode [ 316.592008][T16452] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 316.608466][T16452] tipc: Resetting bearer [ 316.612187][T16451] tipc: Resetting bearer [ 316.641289][T16451] tipc: Disabling bearer [ 316.715798][ T5850] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.728039][ T5850] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 316.733031][ T5850] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 316.736690][ T5850] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 316.739921][ T5850] usb 8-1: Product: syz [ 316.742034][ T5850] usb 8-1: Manufacturer: syz [ 316.743987][ T5850] usb 8-1: SerialNumber: syz [ 316.748003][ T5850] usb 8-1: config 0 descriptor?? [ 316.927888][T16463] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3913'. [ 316.959595][ T3989] usb 8-1: USB disconnect, device number 38 [ 317.036407][T16467] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3915'. [ 317.039173][T16467] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3915'. [ 317.043238][T16467] geneve0: entered allmulticast mode [ 317.501923][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880299fb400: rx timeout, send abort [ 317.504932][ C3] vcan0: j1939_tp_rxtimer: 0xffff888022986000: rx timeout, send abort [ 317.508059][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff8880299fb400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 317.516219][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff888022986000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 317.606918][T16492] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3923'. [ 317.661538][T16496] syzkaller0: entered promiscuous mode [ 317.663976][T16496] syzkaller0: entered allmulticast mode [ 317.794378][T16504] syzkaller0: entered promiscuous mode [ 317.796150][T16504] syzkaller0: entered allmulticast mode [ 317.800996][T16504] tipc: Enabled bearer , priority 0 [ 317.805706][T16504] tipc: Resetting bearer [ 317.809759][T16503] tipc: Resetting bearer [ 317.827676][T16503] tipc: Disabling bearer [ 318.090999][ T5818] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 318.254148][ T5818] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.257330][ T5818] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 318.262675][ T5818] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 318.266101][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 318.268914][ T5818] usb 5-1: Product: syz [ 318.270416][ T5818] usb 5-1: Manufacturer: syz [ 318.272377][ T5818] usb 5-1: SerialNumber: syz [ 318.276760][ T5818] usb 5-1: config 0 descriptor?? [ 318.447695][T16519] syzkaller0: entered promiscuous mode [ 318.449977][T16519] syzkaller0: entered allmulticast mode [ 318.484906][ T5850] usb 5-1: USB disconnect, device number 35 [ 318.565371][T16525] syzkaller0: entered promiscuous mode [ 318.567185][T16525] syzkaller0: entered allmulticast mode [ 318.572772][T16525] tipc: Enabled bearer , priority 0 [ 318.577902][T16525] tipc: Resetting bearer [ 318.581898][T16524] tipc: Resetting bearer [ 318.593273][T16524] tipc: Disabling bearer [ 318.659565][T16529] tipc: Enabled bearer , priority 0 [ 318.662517][T16529] syzkaller0: entered promiscuous mode [ 318.664383][T16529] syzkaller0: entered allmulticast mode [ 318.668074][T16529] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 318.681366][T16529] tipc: Resetting bearer [ 318.686543][T16528] tipc: Resetting bearer [ 318.696911][T16528] tipc: Disabling bearer [ 318.833680][T16541] syzkaller0: entered promiscuous mode [ 318.837669][T16541] syzkaller0: entered allmulticast mode [ 319.008483][T16550] tipc: Enabled bearer , priority 0 [ 319.016385][T16550] syzkaller0: entered promiscuous mode [ 319.018228][T16550] syzkaller0: entered allmulticast mode [ 319.022283][T16550] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 319.033106][T16550] tipc: Resetting bearer [ 319.036183][T16549] tipc: Resetting bearer [ 319.045877][T16549] tipc: Disabling bearer [ 319.300244][T16567] syzkaller0: entered promiscuous mode [ 319.302611][T16567] syzkaller0: entered allmulticast mode [ 319.732401][T16577] tipc: Enabled bearer , priority 0 [ 319.735609][T16577] syzkaller0: entered promiscuous mode [ 319.737976][T16577] syzkaller0: entered allmulticast mode [ 319.741775][T16577] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 319.750925][ T1044] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 319.752822][T16577] tipc: Resetting bearer [ 319.758198][T16576] tipc: Resetting bearer [ 319.767963][T16576] tipc: Disabling bearer [ 319.912938][ T1044] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.918266][ T1044] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 319.924522][ T1044] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 319.927950][ T1044] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 319.932074][ T1044] usb 6-1: Product: syz [ 319.933476][ T1044] usb 6-1: Manufacturer: syz [ 319.935058][ T1044] usb 6-1: SerialNumber: syz [ 319.937740][ T1044] usb 6-1: config 0 descriptor?? [ 319.964642][T16587] syzkaller0: entered promiscuous mode [ 319.966514][T16587] syzkaller0: entered allmulticast mode [ 320.014938][T16596] tipc: Enabled bearer , priority 0 [ 320.017398][T16596] syzkaller0: entered promiscuous mode [ 320.019091][T16596] syzkaller0: entered allmulticast mode [ 320.025009][T16596] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 320.037780][T16596] tipc: Resetting bearer [ 320.040898][T16594] tipc: Resetting bearer [ 320.049220][T16594] tipc: Disabling bearer [ 320.117189][T16602] netlink: 'syz.0.3973': attribute type 2 has an invalid length. [ 320.146420][ T5841] usb 6-1: USB disconnect, device number 21 [ 320.203994][T16611] syzkaller0: entered promiscuous mode [ 320.206457][T16611] syzkaller0: entered allmulticast mode [ 320.213725][T16611] tipc: Enabled bearer , priority 0 [ 320.218287][T16610] tipc: Resetting bearer [ 320.236588][T16610] tipc: Disabling bearer [ 320.336358][T16617] syzkaller0: entered promiscuous mode [ 320.338165][T16617] syzkaller0: entered allmulticast mode [ 320.385065][T16621] tipc: Enabled bearer , priority 0 [ 320.388270][T16621] syzkaller0: entered promiscuous mode [ 320.390376][T16621] syzkaller0: entered allmulticast mode [ 320.397478][T16621] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 320.411347][T16621] tipc: Resetting bearer [ 320.414632][T16620] tipc: Resetting bearer [ 320.423622][T16620] tipc: Disabling bearer [ 320.650022][T16635] syzkaller0: entered promiscuous mode [ 320.651943][T16635] syzkaller0: entered allmulticast mode [ 320.660080][T16635] tipc: Enabled bearer , priority 0 [ 320.669228][T16634] tipc: Resetting bearer [ 320.691594][T16634] tipc: Disabling bearer [ 320.703869][T16639] syzkaller0: entered promiscuous mode [ 320.705642][T16639] syzkaller0: entered allmulticast mode [ 321.131185][ T3989] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 321.284443][ T3989] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.288437][ T3989] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 321.294500][ T3989] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 321.298014][ T3989] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 321.300917][ T3989] usb 7-1: Product: syz [ 321.302103][ T3989] usb 7-1: Manufacturer: syz [ 321.303634][ T3989] usb 7-1: SerialNumber: syz [ 321.312198][ T3989] usb 7-1: config 0 descriptor?? [ 322.275266][T16672] tipc: Enabling of bearer rejected, failed to enable media [ 322.280446][ T34] usb 7-1: USB disconnect, device number 28 [ 322.314281][T16682] syzkaller0: entered promiscuous mode [ 322.315973][T16682] syzkaller0: entered allmulticast mode [ 322.487782][T16697] netlink: 'syz.0.4010': attribute type 25 has an invalid length. [ 322.490271][T16697] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4010'. [ 323.676798][T16707] tipc: Enabled bearer , priority 0 [ 323.679065][T16708] syzkaller0: entered promiscuous mode [ 323.681529][T16708] syzkaller0: entered allmulticast mode [ 323.685560][T16709] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 323.700271][T16713] tipc: Resetting bearer [ 323.707765][T16705] tipc: Resetting bearer [ 323.722801][T16705] tipc: Disabling bearer [ 323.730971][T16724] syzkaller0: entered promiscuous mode [ 323.732796][T16724] syzkaller0: entered allmulticast mode [ 323.776608][T16734] syzkaller0: entered promiscuous mode [ 323.778126][T16734] syzkaller0: entered allmulticast mode [ 323.888083][T16743] syzkaller0: entered promiscuous mode [ 323.889770][T16743] syzkaller0: entered allmulticast mode [ 324.018801][T16749] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4025'. [ 324.210897][ T34] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 324.372196][ T34] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.375449][ T34] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 324.379671][ T34] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 324.382823][ T34] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 324.385397][ T34] usb 7-1: Product: syz [ 324.386722][ T34] usb 7-1: Manufacturer: syz [ 324.388144][ T34] usb 7-1: SerialNumber: syz [ 324.392545][ T34] usb 7-1: config 0 descriptor?? [ 325.299107][ T5841] usb 7-1: USB disconnect, device number 29 [ 325.329574][ T1044] IPVS: starting estimator thread 0... [ 325.332500][T16763] tipc: Enabled bearer , priority 0 [ 325.336099][T16763] syzkaller0: entered promiscuous mode [ 325.337956][T16763] syzkaller0: entered allmulticast mode [ 325.349022][T16763] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 325.367128][T16763] tipc: Resetting bearer [ 325.373136][T16761] tipc: Resetting bearer [ 325.386114][T16761] tipc: Disabling bearer [ 325.419341][T16771] syzkaller0: entered promiscuous mode [ 325.422658][T16771] syzkaller0: entered allmulticast mode [ 325.439269][T16772] syzkaller0: entered promiscuous mode [ 325.441017][T16772] syzkaller0: entered allmulticast mode [ 325.441534][T16764] IPVS: using max 44 ests per chain, 105600 per kthread [ 325.498279][T16774] syzkaller0: entered promiscuous mode [ 325.499947][T16774] syzkaller0: entered allmulticast mode [ 325.506783][T16774] tipc: Enabled bearer , priority 0 [ 325.512195][T16773] tipc: Resetting bearer [ 325.531426][T16773] tipc: Disabling bearer [ 325.645319][T16784] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 325.649031][T16784] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 325.652345][T16784] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 327.093577][T16796] tipc: Enabled bearer , priority 0 [ 327.100709][T16799] syzkaller0: entered promiscuous mode [ 327.103688][T16799] syzkaller0: entered allmulticast mode [ 327.134707][T16813] syzkaller0: entered promiscuous mode [ 327.137347][T16813] syzkaller0: entered allmulticast mode [ 327.143616][T16816] tipc: Resetting bearer [ 328.281620][T16793] tipc: Resetting bearer [ 328.290734][T16793] tipc: Disabling bearer [ 328.297888][ T5894] tipc: Node number set to 2017896703 [ 328.327699][T16829] syzkaller0: entered promiscuous mode [ 328.329393][T16829] syzkaller0: entered allmulticast mode [ 328.394866][T16839] netlink: 'syz.3.4051': attribute type 13 has an invalid length. [ 328.454138][T16839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4051'. [ 328.457665][T16839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4051'. [ 328.502463][T16845] lo speed is unknown, defaulting to 1000 [ 328.505722][T16845] lo speed is unknown, defaulting to 1000 [ 328.591035][ T1044] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 328.728316][T16862] syzkaller0: entered promiscuous mode [ 328.730236][T16862] syzkaller0: entered allmulticast mode [ 328.754062][ T1044] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.758412][ T1044] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 328.765327][ T1044] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 328.769069][ T1044] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 328.773765][ T1044] usb 5-1: Product: syz [ 328.775707][ T1044] usb 5-1: Manufacturer: syz [ 328.777620][ T1044] usb 5-1: SerialNumber: syz [ 328.780416][ T1044] usb 5-1: config 0 descriptor?? [ 328.818299][T16866] tipc: Enabled bearer , priority 0 [ 328.820855][T16866] syzkaller0: entered promiscuous mode [ 328.822556][T16866] syzkaller0: entered allmulticast mode [ 328.827260][T16866] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 328.840188][T16866] tipc: Resetting bearer [ 328.848464][T16865] tipc: Resetting bearer [ 328.864409][T16865] tipc: Disabling bearer [ 328.892743][T16868] syzkaller0: entered promiscuous mode [ 328.894822][T16868] syzkaller0: entered allmulticast mode [ 328.958795][T16870] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4062'. [ 328.990397][ T5894] usb 5-1: USB disconnect, device number 36 [ 329.072464][T16880] syzkaller0: entered promiscuous mode [ 329.074414][T16880] syzkaller0: entered allmulticast mode [ 329.131020][T16884] syzkaller0: entered promiscuous mode [ 329.132637][T16884] syzkaller0: entered allmulticast mode [ 329.195003][T16886] tipc: Enabled bearer , priority 0 [ 329.197728][T16886] syzkaller0: entered promiscuous mode [ 329.199523][T16886] syzkaller0: entered allmulticast mode [ 329.204207][T16886] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 329.216709][T16886] tipc: Resetting bearer [ 329.222314][T16885] tipc: Resetting bearer [ 329.233724][T16885] tipc: Disabling bearer [ 329.328760][T16892] syzkaller0: entered promiscuous mode [ 329.331528][T16892] syzkaller0: entered allmulticast mode [ 329.456666][T16905] syzkaller0: entered promiscuous mode [ 329.458392][T16905] syzkaller0: entered allmulticast mode [ 329.597792][T16917] tipc: Enabled bearer , priority 0 [ 329.605073][T16917] syzkaller0: entered promiscuous mode [ 329.610717][T16917] syzkaller0: entered allmulticast mode [ 329.620593][T16917] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 329.634806][T16917] tipc: Resetting bearer [ 329.643288][T16916] tipc: Resetting bearer [ 329.653267][T16916] tipc: Disabling bearer [ 329.659879][T16923] syzkaller0: entered promiscuous mode [ 329.662099][T16923] syzkaller0: entered allmulticast mode [ 329.780219][T16931] syzkaller0: entered promiscuous mode [ 329.782749][T16931] syzkaller0: entered allmulticast mode [ 329.818838][T16935] syzkaller1: entered promiscuous mode [ 329.820657][T16935] syzkaller1: entered allmulticast mode [ 329.941333][ T5841] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 329.975412][T16944] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4096'. [ 330.042678][T16948] tipc: Enabled bearer , priority 0 [ 330.046021][T16948] syzkaller0: entered promiscuous mode [ 330.048224][T16948] syzkaller0: entered allmulticast mode [ 330.054689][T16948] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 330.074291][T16948] tipc: Resetting bearer [ 330.077363][T16947] tipc: Resetting bearer [ 330.087837][T16947] tipc: Disabling bearer [ 330.102200][ T5841] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.105276][ T5841] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 330.109344][ T5841] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 330.112821][ T5841] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 330.115246][ T5841] usb 7-1: Product: syz [ 330.116516][ T5841] usb 7-1: Manufacturer: syz [ 330.117916][ T5841] usb 7-1: SerialNumber: syz [ 330.120548][ T5841] usb 7-1: config 0 descriptor?? [ 330.202629][T16954] syzkaller0: entered promiscuous mode [ 330.204357][T16954] syzkaller0: entered allmulticast mode [ 330.323003][T16964] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4107'. [ 330.327780][ T5841] usb 7-1: USB disconnect, device number 30 [ 330.382961][T16970] tipc: Enabled bearer , priority 0 [ 330.386272][T16970] syzkaller0: entered promiscuous mode [ 330.388553][T16970] syzkaller0: entered allmulticast mode [ 330.395485][T16970] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 330.413036][T16970] tipc: Resetting bearer [ 330.432327][T16969] tipc: Resetting bearer [ 330.444936][T16969] tipc: Disabling bearer [ 330.493336][T16980] syzkaller0: entered promiscuous mode [ 330.495247][T16980] syzkaller0: entered allmulticast mode [ 330.654708][T16992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4120'. [ 330.877007][T17002] tipc: Enabled bearer , priority 0 [ 330.880432][T17002] syzkaller0: entered promiscuous mode [ 330.883228][T17002] syzkaller0: entered allmulticast mode [ 330.889015][T17002] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 330.904946][T17002] tipc: Resetting bearer [ 330.909814][T17001] tipc: Resetting bearer [ 330.919070][T17001] tipc: Disabling bearer [ 331.050554][T17010] syzkaller0: entered promiscuous mode [ 331.052769][T17010] syzkaller0: entered allmulticast mode [ 331.079797][T17004] syzkaller1: entered promiscuous mode [ 331.081572][T17004] syzkaller1: entered allmulticast mode [ 331.205748][T17016] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4131'. [ 331.530948][ T5841] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 331.587253][T17033] syzkaller0: entered promiscuous mode [ 331.589495][T17033] syzkaller0: entered allmulticast mode [ 331.625276][T17035] ipvlan0: Caught tx_queue_len zero misconfig [ 331.692753][ T5841] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.700997][ T5841] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 331.708674][ T5841] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 331.712861][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 331.716069][ T5841] usb 6-1: Product: syz [ 331.717584][ T5841] usb 6-1: Manufacturer: syz [ 331.719058][ T5841] usb 6-1: SerialNumber: syz [ 331.722556][ T5841] usb 6-1: config 0 descriptor?? [ 331.742423][T17045] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4143'. [ 331.882218][T17052] lo speed is unknown, defaulting to 1000 [ 331.884791][T17052] lo speed is unknown, defaulting to 1000 [ 331.939016][ T3989] usb 6-1: USB disconnect, device number 22 [ 332.238125][T17065] syzkaller0: entered promiscuous mode [ 332.240489][T17065] syzkaller0: entered allmulticast mode [ 332.386840][T17070] syzkaller0: entered promiscuous mode [ 332.388953][T17070] syzkaller0: entered allmulticast mode [ 332.405120][T17070] tipc: Enabled bearer , priority 0 [ 332.409125][T17069] tipc: Resetting bearer [ 332.429664][T17069] tipc: Disabling bearer [ 332.519815][T17076] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4154'. [ 332.678138][T17087] syzkaller0: entered promiscuous mode [ 332.680414][T17087] syzkaller0: entered allmulticast mode [ 332.801135][T17092] tipc: Enabled bearer , priority 0 [ 332.803929][T17092] syzkaller0: entered promiscuous mode [ 332.805582][T17092] syzkaller0: entered allmulticast mode [ 332.809619][T17092] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 332.823734][T17092] tipc: Resetting bearer [ 332.827327][T17091] tipc: Resetting bearer [ 332.838837][T17091] tipc: Disabling bearer [ 332.920955][ T3989] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 333.073354][ T3989] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.077219][ T3989] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 333.085153][ T3989] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 333.100918][ T3989] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 333.103558][ T3989] usb 8-1: Product: syz [ 333.105167][ T3989] usb 8-1: Manufacturer: syz [ 333.106980][ T3989] usb 8-1: SerialNumber: syz [ 333.109837][ T3989] usb 8-1: config 0 descriptor?? [ 333.265028][T17110] tipc: Enabled bearer , priority 0 [ 333.267798][T17110] syzkaller0: entered promiscuous mode [ 333.269794][T17110] syzkaller0: entered allmulticast mode [ 333.275439][T17110] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 333.294004][T17110] tipc: Resetting bearer [ 333.298039][T17109] tipc: Resetting bearer [ 333.309801][T17109] tipc: Disabling bearer [ 333.324748][ T29] usb 8-1: USB disconnect, device number 39 [ 333.516803][T17126] syzkaller0: entered promiscuous mode [ 333.519041][T17126] syzkaller0: entered allmulticast mode [ 333.759596][T17134] syzkaller0: entered promiscuous mode [ 333.761283][T17134] syzkaller0: entered allmulticast mode [ 334.386069][T17156] syzkaller0: entered promiscuous mode [ 334.388372][T17156] syzkaller0: entered allmulticast mode [ 334.421496][ T29] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 334.592423][ T29] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.595524][ T29] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 334.599607][ T29] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 334.602522][ T29] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 334.605067][ T29] usb 8-1: Product: syz [ 334.606300][ T29] usb 8-1: Manufacturer: syz [ 334.607719][ T29] usb 8-1: SerialNumber: syz [ 334.610448][ T29] usb 8-1: config 0 descriptor?? [ 334.823050][ T29] usb 8-1: USB disconnect, device number 40 [ 334.849399][T17168] lo speed is unknown, defaulting to 1000 [ 334.852369][T17168] lo speed is unknown, defaulting to 1000 [ 335.116777][ T5793] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.120347][ T5793] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.128511][ T5793] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.131320][ T5793] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.377365][T17183] syzkaller0: entered promiscuous mode [ 335.379669][T17183] syzkaller0: entered allmulticast mode [ 335.509391][T17186] syzkaller0: mtu greater than device maximum [ 335.712034][T17197] tipc: Enabled bearer , priority 0 [ 335.717734][T17197] tipc: Resetting bearer [ 335.729330][T17195] tipc: Disabling bearer [ 336.080914][ T5890] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 336.242236][ T5890] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.245485][ T5890] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 336.249996][ T5890] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 336.254190][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 336.257380][ T5890] usb 7-1: Product: syz [ 336.259109][ T5890] usb 7-1: Manufacturer: syz [ 336.261370][ T5890] usb 7-1: SerialNumber: syz [ 336.266588][ T5890] usb 7-1: config 0 descriptor?? [ 336.378053][T17213] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4214'. [ 336.477035][ T5890] usb 7-1: USB disconnect, device number 31 [ 336.507612][T17219] tipc: Enabled bearer , priority 0 [ 336.514048][T17219] tipc: Resetting bearer [ 336.527588][T17218] tipc: Disabling bearer [ 336.836593][T17245] syzkaller0: entered promiscuous mode [ 336.838588][T17245] syzkaller0: entered allmulticast mode [ 336.845574][T17245] tipc: Enabled bearer , priority 0 [ 336.853364][T17245] tipc: Resetting bearer [ 336.859386][T17244] tipc: Resetting bearer [ 336.873027][T17244] tipc: Disabling bearer [ 337.008667][T17259] netlink: 22 bytes leftover after parsing attributes in process `syz.1.4235'. [ 337.175259][T17274] syzkaller0: entered promiscuous mode [ 337.177469][T17274] syzkaller0: entered allmulticast mode [ 337.251469][T17276] netlink: 'syz.1.4243': attribute type 1 has an invalid length. [ 337.299362][T17276] bridge2: entered promiscuous mode [ 337.306487][T17276] bond1: (slave bridge2): making interface the new active one [ 337.310620][T17276] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 337.355030][T17281] netlink: 22 bytes leftover after parsing attributes in process `syz.1.4245'. [ 337.387150][T17284] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4246'. [ 337.502910][T17290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4249'. [ 337.601234][ T5841] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 337.743074][T17309] netlink: 22 bytes leftover after parsing attributes in process `syz.1.4254'. [ 337.763178][ T5841] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.766758][T17311] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4255'. [ 337.767282][ T5841] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 337.780713][ T5841] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 337.784533][ T5841] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 337.787241][ T5841] usb 7-1: Product: syz [ 337.788660][ T5841] usb 7-1: Manufacturer: syz [ 337.790179][ T5841] usb 7-1: SerialNumber: syz [ 337.793463][ T5841] usb 7-1: config 0 descriptor?? [ 337.917598][T17325] batman_adv: batadv0: Adding interface: gretap1 [ 337.920523][T17325] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.931820][T17325] batman_adv: batadv0: Interface activated: gretap1 [ 338.001163][ T5841] usb 7-1: USB disconnect, device number 32 [ 338.015947][T17340] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4265'. [ 338.172395][T17353] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4268'. [ 338.176165][T17353] lo speed is unknown, defaulting to 1000 [ 338.560488][T17366] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4274'. [ 338.848224][T17389] tipc: Enabled bearer , priority 0 [ 338.852808][T17389] syzkaller0: entered promiscuous mode [ 338.855371][T17389] syzkaller0: entered allmulticast mode [ 338.859722][T17389] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 338.871592][T17388] tipc: Resetting bearer [ 338.887234][T17388] tipc: Disabling bearer [ 338.983021][T17401] syzkaller0: entered promiscuous mode [ 338.985345][T17401] syzkaller0: entered allmulticast mode [ 338.994112][T17401] tipc: Enabled bearer , priority 0 [ 338.999162][T17401] tipc: Resetting bearer [ 339.020964][ T5841] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 339.064043][T17400] tipc: Resetting bearer [ 339.075871][T17400] tipc: Disabling bearer [ 339.202229][ T5841] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.207795][ T5841] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 339.214904][ T5841] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 339.219503][ T5841] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 339.224807][ T5841] usb 7-1: Product: syz [ 339.226039][ T5841] usb 7-1: Manufacturer: syz [ 339.229641][ T5841] usb 7-1: SerialNumber: syz [ 339.233903][ T5841] usb 7-1: config 0 descriptor?? [ 339.446861][ T5850] usb 7-1: USB disconnect, device number 33 [ 339.988653][T17426] syzkaller0: entered promiscuous mode [ 339.990462][T17426] syzkaller0: entered allmulticast mode [ 339.996266][T17426] tipc: Enabled bearer , priority 0 [ 340.000488][T17426] tipc: Resetting bearer [ 340.009736][T17425] tipc: Resetting bearer [ 340.027754][T17425] tipc: Disabling bearer [ 340.040308][T17428] openvswitch: netlink: Message has 4 unknown bytes. [ 340.042469][T17428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.147632][T17444] lo speed is unknown, defaulting to 1000 [ 340.315661][T17456] openvswitch: netlink: Actions may not be safe on all matching packets [ 340.465852][T17466] syzkaller0: entered promiscuous mode [ 340.467552][T17466] syzkaller0: entered allmulticast mode [ 340.473203][T17466] tipc: Enabled bearer , priority 0 [ 340.478559][T17466] tipc: Resetting bearer [ 340.484305][T17465] tipc: Resetting bearer [ 340.496183][T17465] tipc: Disabling bearer [ 340.622433][T17468] syzkaller1: entered promiscuous mode [ 340.624906][T17468] syzkaller1: entered allmulticast mode [ 341.147609][T17486] syzkaller0: entered promiscuous mode [ 341.149488][T17486] syzkaller0: entered allmulticast mode [ 341.157766][T17486] TC_ACT_REPEAT abuse ? [ 341.172708][T17488] tipc: Enabled bearer , priority 0 [ 341.176795][T17488] tipc: Resetting bearer [ 341.315553][T17487] tipc: Disabling bearer [ 341.699237][T17519] __nla_validate_parse: 9 callbacks suppressed [ 341.699247][T17519] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4331'. [ 341.704215][T17519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4331'. [ 341.791931][T17527] syzkaller1: entered promiscuous mode [ 341.793646][T17527] syzkaller1: entered allmulticast mode [ 341.831448][T17531] tipc: Enabled bearer , priority 0 [ 341.837077][T17531] tipc: Resetting bearer [ 341.852254][T17530] tipc: Disabling bearer [ 341.921460][T17539] syzkaller0: entered promiscuous mode [ 341.923906][T17539] syzkaller0: entered allmulticast mode [ 341.975548][T17545] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4340'. [ 341.979037][T17545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4340'. [ 342.044837][T17550] bridge0: port 4(dummy0) entered blocking state [ 342.047001][T17550] bridge0: port 4(dummy0) entered disabled state [ 342.049256][T17550] dummy0: entered allmulticast mode [ 342.053822][T17550] dummy0: entered promiscuous mode [ 342.060257][T17550] bridge0: port 4(dummy0) entered blocking state [ 342.062983][T17550] bridge0: port 4(dummy0) entered forwarding state [ 342.070174][T17550] dummy0: left allmulticast mode [ 342.074276][T17550] dummy0: left promiscuous mode [ 342.080918][T17550] bridge0: port 4(dummy0) entered disabled state [ 342.135364][T17558] netlink: 'syz.0.4346': attribute type 1 has an invalid length. [ 342.182478][T17558] bridge2: entered promiscuous mode [ 342.189760][T17558] bond1: (slave bridge2): making interface the new active one [ 342.193050][T17558] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 342.195815][T17561] syzkaller0: entered promiscuous mode [ 342.197468][T17561] syzkaller0: entered allmulticast mode [ 342.262602][T17564] tipc: Enabled bearer , priority 0 [ 342.266248][T17564] tipc: Resetting bearer [ 342.275191][T17563] tipc: Disabling bearer [ 342.301750][T17566] syzkaller0: entered promiscuous mode [ 342.303473][T17566] syzkaller0: entered allmulticast mode [ 342.309744][T17566] TC_ACT_REPEAT abuse ? [ 342.405800][T17568] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4350'. [ 342.409669][T17568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4350'. [ 342.520259][T17582] syzkaller0: entered promiscuous mode [ 342.522829][T17582] syzkaller0: entered allmulticast mode [ 342.587674][T17590] netlink: 'syz.3.4357': attribute type 1 has an invalid length. [ 342.634246][T17590] bridge2: entered promiscuous mode [ 342.639496][T17590] bond1: (slave bridge2): making interface the new active one [ 342.647137][T17590] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 342.739453][T17603] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4362'. [ 342.842188][T17618] netlink: 'syz.2.4367': attribute type 1 has an invalid length. [ 342.873445][T17618] bridge2: entered promiscuous mode [ 342.879343][T17618] bond2: (slave bridge2): making interface the new active one [ 342.883718][T17618] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 343.108087][T17640] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4372'. [ 343.489626][T17672] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4382'. [ 343.741680][T17690] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4392'. [ 343.774315][T17695] netlink: 'syz.3.4393': attribute type 1 has an invalid length. [ 343.861189][T17700] syzkaller0: entered promiscuous mode [ 343.863478][T17700] syzkaller0: entered allmulticast mode [ 344.217556][T17719] netlink: 'syz.3.4402': attribute type 1 has an invalid length. [ 344.260931][ T5746] Bluetooth: hci4: command 0x0406 tx timeout [ 344.272547][T17719] bridge3: entered promiscuous mode [ 344.277642][T17719] bond3: (slave bridge3): making interface the new active one [ 344.281706][T17719] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 344.351901][T17725] tipc: Enabled bearer , priority 0 [ 344.357523][T17725] tipc: Resetting bearer [ 344.359990][T17727] syzkaller0: entered promiscuous mode [ 344.361782][T17727] syzkaller0: entered allmulticast mode [ 344.372396][T17724] tipc: Disabling bearer [ 344.573645][T17741] syzkaller0: entered promiscuous mode [ 344.575435][T17741] syzkaller0: entered allmulticast mode [ 344.628291][T17747] netlink: 'syz.0.4414': attribute type 1 has an invalid length. [ 344.709462][T17753] tipc: Enabled bearer , priority 0 [ 344.713945][T17753] tipc: Resetting bearer [ 344.728884][T17752] tipc: Disabling bearer [ 344.824382][T17762] syzkaller0: entered promiscuous mode [ 344.826343][T17762] syzkaller0: entered allmulticast mode [ 344.957071][T17772] netlink: 'syz.2.4424': attribute type 1 has an invalid length. [ 345.019840][T17777] syzkaller0: entered promiscuous mode [ 345.024326][T17777] syzkaller0: entered allmulticast mode [ 346.224671][T17782] netlink: 'syz.2.4427': attribute type 11 has an invalid length. [ 346.271786][T17789] tipc: Enabled bearer , priority 0 [ 346.275546][T17789] tipc: Resetting bearer [ 346.285050][T17788] tipc: Disabling bearer [ 346.389235][T17805] netlink: 'syz.3.4435': attribute type 1 has an invalid length. [ 346.416541][T17804] syzkaller0: entered promiscuous mode [ 346.418295][T17804] syzkaller0: entered allmulticast mode [ 347.703867][T17826] bridge_slave_0: left allmulticast mode [ 347.706258][T17826] bridge_slave_0: left promiscuous mode [ 347.710472][T17826] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.717127][T17826] bridge_slave_1: left allmulticast mode [ 347.719617][T17826] bridge_slave_1: left promiscuous mode [ 347.723618][T17826] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.732806][T17826] bond0: (slave bond_slave_0): Releasing backup interface [ 347.741283][T17826] bond0: (slave bond_slave_1): Releasing backup interface [ 347.750771][T17826] team0: Port device team_slave_0 removed [ 347.762301][T17826] team0: Port device team_slave_1 removed [ 347.765553][T17826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.768668][T17826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.773649][T17826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.776748][T17826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.781861][T17826] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 347.824142][T17840] __nla_validate_parse: 3 callbacks suppressed [ 347.824154][T17840] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4447'. [ 347.828974][T17840] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4447'. [ 347.837037][T17841] syzkaller0: entered promiscuous mode [ 347.838796][T17841] syzkaller0: entered allmulticast mode [ 347.868342][T17845] netlink: 'syz.1.4449': attribute type 1 has an invalid length. [ 347.958146][T17851] syzkaller0: entered promiscuous mode [ 347.960480][T17851] syzkaller0: entered allmulticast mode [ 349.176587][T17857] syzkaller0: entered promiscuous mode [ 349.178308][T17857] syzkaller0: entered allmulticast mode [ 349.187962][T17865] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 349.224133][T17868] syzkaller0: entered promiscuous mode [ 349.225926][T17868] syzkaller0: entered allmulticast mode [ 349.289776][T17876] netlink: 'syz.2.4460': attribute type 1 has an invalid length. [ 349.495577][T17894] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 350.210497][T17920] netlink: 'syz.1.4473': attribute type 1 has an invalid length. [ 350.826960][T17926] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4474'. [ 350.852468][T17930] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 350.910878][T17942] syzkaller0: entered promiscuous mode [ 350.913032][T17942] syzkaller0: entered allmulticast mode [ 350.917802][T17944] netlink: 'syz.3.4483': attribute type 1 has an invalid length. [ 352.249505][T17968] syzkaller0: entered promiscuous mode [ 352.251855][T17968] syzkaller0: entered allmulticast mode [ 352.261328][T17979] team0: left allmulticast mode [ 352.263739][T17979] team_slave_0: left allmulticast mode [ 352.266227][T17979] team_slave_1: left allmulticast mode [ 352.269782][T17979] team0: left promiscuous mode [ 352.272175][T17979] team_slave_0: left promiscuous mode [ 352.274627][T17979] team_slave_1: left promiscuous mode [ 352.277204][T17979] bridge0: port 3(team0) entered disabled state [ 352.293922][T17979] bridge_slave_0: left allmulticast mode [ 352.295788][T17979] bridge_slave_0: left promiscuous mode [ 352.299906][T17979] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.304827][T17979] bridge_slave_1: left allmulticast mode [ 352.307271][T17979] bridge_slave_1: left promiscuous mode [ 352.309585][T17979] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.317804][T17979] bond0: (slave bond_slave_0): Releasing backup interface [ 352.324340][T17979] bond0: (slave bond_slave_1): Releasing backup interface [ 352.327912][T17985] netlink: 'syz.3.4493': attribute type 1 has an invalid length. [ 352.333692][T17979] team0: Port device team_slave_0 removed [ 352.339978][T17979] team0: Port device team_slave_1 removed [ 352.344129][T17979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.346485][T17979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.349431][T17979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.352540][T17979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.356204][T17979] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 353.533099][T17985] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 353.686749][T18015] syzkaller0: entered promiscuous mode [ 353.694784][T18015] syzkaller0: entered allmulticast mode [ 353.763325][T18027] syzkaller0: entered promiscuous mode [ 353.765123][T18027] syzkaller0: entered allmulticast mode [ 353.832677][T18033] syzkaller0: entered promiscuous mode [ 353.834456][T18033] syzkaller0: entered allmulticast mode [ 353.974315][T18052] syzkaller0: entered promiscuous mode [ 353.976092][T18052] syzkaller0: entered allmulticast mode [ 354.014475][T18059] syzkaller0: entered promiscuous mode [ 354.016207][T18059] syzkaller0: entered allmulticast mode [ 354.166160][T18071] syzkaller0: entered promiscuous mode [ 354.168053][T18071] syzkaller0: entered allmulticast mode [ 354.289453][T18086] syzkaller0: entered promiscuous mode [ 354.291857][T18086] syzkaller0: entered allmulticast mode [ 354.311028][T18090] syzkaller0: entered promiscuous mode [ 354.312764][T18090] syzkaller0: entered allmulticast mode [ 354.352384][T18093] syzkaller0: entered promiscuous mode [ 354.354329][T18093] syzkaller0: entered allmulticast mode [ 354.488797][T18098] syzkaller0: entered promiscuous mode [ 354.491494][T18098] syzkaller0: entered allmulticast mode [ 354.496580][T18100] tipc: Enabled bearer , priority 0 [ 354.499806][T18100] syzkaller0: entered promiscuous mode [ 354.503145][T18100] syzkaller0: entered allmulticast mode [ 354.527692][T18100] tipc: Resetting bearer [ 354.530916][T18097] tipc: Resetting bearer [ 354.539343][T18097] tipc: Disabling bearer [ 354.703998][T18109] syzkaller0: entered promiscuous mode [ 354.705745][T18109] syzkaller0: entered allmulticast mode [ 354.730536][T18113] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 354.774711][T18115] syzkaller0: entered promiscuous mode [ 354.776385][T18115] syzkaller0: entered allmulticast mode [ 354.837521][T18119] syzkaller0: entered promiscuous mode [ 354.839244][T18119] syzkaller0: entered allmulticast mode [ 354.844487][T18119] tipc: Enabled bearer , priority 0 [ 354.857836][T18119] tipc: Resetting bearer [ 354.865484][T18118] tipc: Resetting bearer [ 354.878318][T18118] tipc: Disabling bearer [ 355.041324][T18133] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 355.093013][T18135] syzkaller0: entered promiscuous mode [ 355.094803][T18135] syzkaller0: entered allmulticast mode [ 355.233761][T18147] syzkaller0: entered promiscuous mode [ 355.237085][T18147] syzkaller0: entered allmulticast mode [ 355.317246][T18151] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 355.406505][T18161] syzkaller0: entered promiscuous mode [ 355.408719][T18161] syzkaller0: entered allmulticast mode [ 355.597670][T18176] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 355.634692][T18179] syzkaller0: entered promiscuous mode [ 355.636487][T18179] syzkaller0: entered allmulticast mode [ 355.689974][T18186] syzkaller0: entered promiscuous mode [ 355.693864][T18186] syzkaller0: entered allmulticast mode [ 355.858952][T18199] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 355.968677][T18208] syzkaller0: entered promiscuous mode [ 355.970477][T18208] syzkaller0: entered allmulticast mode [ 356.010732][T18212] syzkaller0: entered promiscuous mode [ 356.013093][T18212] syzkaller0: entered allmulticast mode [ 356.105419][T18220] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 356.547958][T18236] syzkaller0: entered promiscuous mode [ 356.549751][T18236] syzkaller0: entered allmulticast mode [ 357.399143][T18244] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 357.435030][T18248] syzkaller0: entered promiscuous mode [ 357.436759][T18248] syzkaller0: entered allmulticast mode [ 357.771158][ T5890] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 357.789710][T18275] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 357.798875][T18277] syzkaller0: entered promiscuous mode [ 357.801173][T18277] syzkaller0: entered allmulticast mode [ 357.924515][ T5890] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.928608][ T5890] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 357.933537][ T5890] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 357.936431][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 357.938962][ T5890] usb 7-1: Product: syz [ 357.940347][ T5890] usb 7-1: Manufacturer: syz [ 357.941945][ T5890] usb 7-1: SerialNumber: syz [ 357.946101][ T5890] usb 7-1: config 0 descriptor?? [ 358.128763][T18255] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 358.134497][T18255] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 358.140237][T18255] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 358.153733][T18255] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 358.157042][T18255] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 358.158392][ T5890] usb 7-1: USB disconnect, device number 34 [ 358.383239][T18290] lo speed is unknown, defaulting to 1000 [ 358.385845][T18290] lo speed is unknown, defaulting to 1000 [ 358.429566][T18308] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 358.493382][T18310] syzkaller0: entered promiscuous mode [ 358.495088][T18310] syzkaller0: entered allmulticast mode [ 358.640880][T18290] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.643108][T18290] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.645342][T18290] bridge_slave_0: entered allmulticast mode [ 358.648017][T18290] bridge_slave_0: entered promiscuous mode [ 358.655229][T18290] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.657989][T18290] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.660557][T18290] bridge_slave_1: entered allmulticast mode [ 358.669109][T18290] bridge_slave_1: entered promiscuous mode [ 358.692350][T18290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.698079][T18290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.715743][T18290] team0: Port device team_slave_0 added [ 358.717845][T18331] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 358.724591][T18290] team0: Port device team_slave_1 added [ 358.751251][T18290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.753610][T18290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.761364][T18290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.768249][T18290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.770365][T18290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.779218][T18290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.817467][T18290] hsr_slave_0: entered promiscuous mode [ 358.819665][T18290] hsr_slave_1: entered promiscuous mode [ 358.821862][T18290] debugfs: 'hsr0' already exists in 'hsr' [ 358.823604][T18290] Cannot create hsr debugfs directory [ 358.938358][T18290] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.943435][T18290] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.065693][T18290] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.068854][T18290] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.195801][T18290] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.199913][T18290] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.241087][ T5818] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 359.261715][T18352] syzkaller0: entered promiscuous mode [ 359.263548][T18352] syzkaller0: entered allmulticast mode [ 359.283976][T18290] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.287245][T18290] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.412059][ T5818] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.415093][ T5818] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 359.419258][ T5818] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 359.422213][ T5818] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 359.424654][ T5818] usb 8-1: Product: syz [ 359.425928][ T5818] usb 8-1: Manufacturer: syz [ 359.427364][ T5818] usb 8-1: SerialNumber: syz [ 359.432833][ T5818] usb 8-1: config 0 descriptor?? [ 359.621042][ T5756] Bluetooth: hci1: command 0x0406 tx timeout [ 360.253374][ T5750] Bluetooth: hci3: command tx timeout [ 360.542564][ T5850] usb 8-1: USB disconnect, device number 41 [ 360.607559][T18290] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 360.612998][T18290] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 360.616042][T18290] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 360.621577][T18290] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 360.624207][T18290] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 360.628205][T18290] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 360.630912][T18290] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 360.635031][T18290] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 360.671744][ T5793] pimreg9: left allmulticast mode [ 360.830340][ T5793] team0: Port device bridge1 removed [ 360.837866][ T5793] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 360.855820][ T5793] bond0 (unregistering): Released all slaves [ 360.868933][ T5793] bond1 (unregistering): Released all slaves [ 360.891131][ T5793] bond2 (unregistering): Released all slaves [ 360.900443][ T5793] bond3 (unregistering): Released all slaves [ 360.911056][ T5793] bond4 (unregistering): Released all slaves [ 360.922604][ T5793] bond5 (unregistering): Released all slaves [ 360.933998][ T5793] bond6 (unregistering): Released all slaves [ 360.977872][T18387] net_ratelimit: 1 callbacks suppressed [ 360.977884][T18387] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 361.069222][T18389] syzkaller0: entered promiscuous mode [ 361.076259][T18389] syzkaller0: entered allmulticast mode [ 361.084398][ T5793] tipc: Left network mode [ 361.102069][ T5793] IPVS: stopping master sync thread 15089 ... [ 362.210577][T18396] syzkaller0: entered promiscuous mode [ 362.212397][T18396] syzkaller0: entered allmulticast mode [ 362.229239][T18290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.239522][T18290] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.244471][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.246719][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.254306][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.257105][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.331237][ T5750] Bluetooth: hci3: command tx timeout [ 362.514900][T18423] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 362.526910][ T5793] hsr_slave_0: left promiscuous mode [ 362.533934][ T5793] hsr_slave_1: left promiscuous mode [ 362.544036][ T5793] veth1_macvtap: left promiscuous mode [ 362.546601][ T5793] veth0_macvtap: left promiscuous mode [ 362.549169][ T5793] veth1_vlan: left promiscuous mode [ 362.551685][ T5793] veth0_vlan: left promiscuous mode [ 362.822906][T18433] syzkaller0: entered promiscuous mode [ 362.824942][T18433] syzkaller0: entered allmulticast mode [ 362.828390][T18290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.853389][T18443] syzkaller0: entered promiscuous mode [ 362.855303][T18443] syzkaller0: entered allmulticast mode [ 364.411120][ T5750] Bluetooth: hci3: command tx timeout [ 365.133769][T18456] syzkaller0: entered promiscuous mode [ 365.135400][T18456] syzkaller0: entered allmulticast mode [ 366.269295][T18470] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 366.310162][T18290] veth0_vlan: entered promiscuous mode [ 366.317161][T18290] veth1_vlan: entered promiscuous mode [ 366.334942][T18290] veth0_macvtap: entered promiscuous mode [ 366.339258][T18290] veth1_macvtap: entered promiscuous mode [ 366.347905][T18290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.358526][T18290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.368136][T18395] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.371685][T18395] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.374810][T18395] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.377843][T18395] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.435446][T18483] syzkaller0: entered promiscuous mode [ 366.437244][T18483] syzkaller0: entered allmulticast mode [ 366.491061][ T5750] Bluetooth: hci3: command tx timeout [ 367.639807][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.643234][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.670510][T18506] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 367.707486][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.709994][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.792159][T18520] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4687'. [ 367.850023][ T5746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 367.856600][ T5746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 367.860240][ T5746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 367.865114][ T5746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 367.865581][T18529] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 367.868198][ T5746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 367.947144][T18533] syzkaller0: entered promiscuous mode [ 367.948939][T18533] syzkaller0: entered allmulticast mode [ 368.706787][T18556] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4696'. [ 369.223170][ T5793] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.258831][T18562] bridge_slave_0: left allmulticast mode [ 369.260650][T18562] bridge_slave_0: left promiscuous mode [ 369.264206][T18562] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.269668][T18562] bridge_slave_1: left allmulticast mode [ 369.272602][T18562] bridge_slave_1: left promiscuous mode [ 369.275007][T18562] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.285909][T18562] bond0: (slave bond_slave_0): Releasing backup interface [ 369.293622][T18562] bond0: (slave bond_slave_1): Releasing backup interface [ 369.306315][T18562] team0: Port device team_slave_0 removed [ 369.313643][T18562] team0: Port device team_slave_1 removed [ 369.316530][T18562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.318810][T18562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.326041][T18562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.328420][T18562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.333340][T18562] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 369.374451][ T5793] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.393239][T18525] lo speed is unknown, defaulting to 1000 [ 369.397761][T18525] lo speed is unknown, defaulting to 1000 [ 369.468341][ T5793] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.505498][T18580] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 369.543940][ T5793] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.549634][T18582] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4705'. [ 369.690607][T18590] syzkaller0: entered promiscuous mode [ 369.693114][T18590] syzkaller0: entered allmulticast mode [ 369.932036][ T5750] Bluetooth: hci0: command tx timeout [ 371.068878][T18601] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 371.091587][T18603] syzkaller0: entered promiscuous mode [ 371.096689][T18603] syzkaller0: entered allmulticast mode [ 371.134447][ T5793] pimreg9: left allmulticast mode [ 371.258619][ T5793] team0: Port device bridge1 removed [ 371.263604][ T5793] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 371.270966][ T5793] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 371.277895][ T5793] bond0 (unregistering): Released all slaves [ 371.284917][ T5793] bond1 (unregistering): Released all slaves [ 371.292165][ T5793] bond2 (unregistering): Released all slaves [ 371.300178][ T5793] bond3 (unregistering): Released all slaves [ 371.314954][ T5793] bond4 (unregistering): Released all slaves [ 371.324356][ T5793] bond5 (unregistering): Released all slaves [ 371.332159][ T5793] bond6 (unregistering): Released all slaves [ 371.344082][ T5793] bond7 (unregistering): Released all slaves [ 371.358860][ T5793] bond8 (unregistering): Released all slaves [ 371.378579][T18625] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4713'. [ 372.011334][ T5750] Bluetooth: hci0: command tx timeout [ 372.650771][T18525] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.652918][T18525] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.655101][T18525] bridge_slave_0: entered allmulticast mode [ 372.657539][T18525] bridge_slave_0: entered promiscuous mode [ 372.661949][T18525] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.664038][T18525] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.666220][T18525] bridge_slave_1: entered allmulticast mode [ 372.668881][T18525] bridge_slave_1: entered promiscuous mode [ 372.685678][ T5793] tipc: Left network mode [ 372.692489][T18525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.697893][T18525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.726924][T18525] team0: Port device team_slave_0 added [ 372.731215][T18525] team0: Port device team_slave_1 added [ 372.733705][ T5793] IPVS: stopping master sync thread 15046 ... [ 372.769036][T18525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.771840][T18525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.779736][T18525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.784202][T18525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.787561][T18525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.800827][T18525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.810336][T18645] bridge_slave_0: default FDB implementation only supports local addresses [ 372.854059][T18525] hsr_slave_0: entered promiscuous mode [ 372.857281][T18525] hsr_slave_1: entered promiscuous mode [ 372.859968][T18525] debugfs: 'hsr0' already exists in 'hsr' [ 372.862047][T18525] Cannot create hsr debugfs directory [ 372.873995][ T5454] 8021q: adding VLAN 0 to HW filter on device eth2 [ 372.884954][T18649] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 373.004250][T18658] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4722'. [ 373.077540][T18665] syzkaller0: entered promiscuous mode [ 373.079291][T18665] syzkaller0: entered allmulticast mode [ 373.165508][ T5454] 8021q: adding VLAN 0 to HW filter on device eth3 [ 373.168688][T18667] syzkaller0: entered promiscuous mode [ 373.171536][T18667] syzkaller0: entered allmulticast mode [ 373.182587][ T5793] hsr_slave_0: left promiscuous mode [ 373.185416][ T5793] hsr_slave_1: left promiscuous mode [ 373.199198][ T5793] veth1_macvtap: left promiscuous mode [ 373.202271][ T5793] veth0_macvtap: left promiscuous mode [ 373.204687][ T5793] veth1_vlan: left promiscuous mode [ 373.207013][ T5793] veth0_vlan: left promiscuous mode [ 373.665029][T18679] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 373.696924][T18681] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4730'. [ 373.802583][T18694] syzkaller0: entered promiscuous mode [ 373.804494][T18694] syzkaller0: entered allmulticast mode [ 373.808070][T18695] syzkaller0: entered promiscuous mode [ 373.810921][T18695] syzkaller0: entered allmulticast mode [ 373.976790][T18525] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 373.982080][T18525] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 373.985127][T18525] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 373.990203][T18525] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 373.997709][T18525] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 374.007017][T18525] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 374.010440][T18525] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 374.023386][T18525] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 374.030631][ T5793] IPVS: stop unused estimator thread 0... [ 374.076260][T18716] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 374.103825][ T5750] Bluetooth: hci0: command tx timeout [ 374.143637][T18525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.154130][T18525] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.160457][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.163522][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.169959][T18704] tipc: Enabling of bearer rejected, failed to enable media [ 374.178409][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.180904][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.339062][T18750] syzkaller0: entered promiscuous mode [ 374.341440][T18750] syzkaller0: entered allmulticast mode [ 374.415142][T18755] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 374.442770][T18525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.495680][T18525] veth0_vlan: entered promiscuous mode [ 374.506808][T18525] veth1_vlan: entered promiscuous mode [ 374.526560][T18525] veth0_macvtap: entered promiscuous mode [ 374.541356][T18525] veth1_macvtap: entered promiscuous mode [ 374.554444][T18525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.564530][T18525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.580984][ T5793] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.584957][ T5793] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.588540][ T5793] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.591806][ T5793] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.600059][T18776] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 374.682636][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.689471][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.713511][T18766] tipc: Enabling of bearer rejected, failed to enable media [ 374.726236][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.728722][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.753083][T18790] syzkaller0: entered promiscuous mode [ 374.754996][T18790] syzkaller0: entered allmulticast mode [ 374.863123][T18804] bridge_slave_0: left allmulticast mode [ 374.864914][T18804] bridge_slave_0: left promiscuous mode [ 374.866743][T18804] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.873590][T18804] bridge_slave_1: left allmulticast mode [ 374.875550][T18804] bridge_slave_1: left promiscuous mode [ 374.877384][T18804] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.883023][T18804] bond0: (slave bond_slave_0): Releasing backup interface [ 374.887467][T18804] bond0: (slave bond_slave_1): Releasing backup interface [ 374.908608][T18804] team0: Port device team_slave_0 removed [ 374.917773][T18804] team0: Port device team_slave_1 removed [ 374.919993][T18804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.922596][T18804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.926721][T18804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.928966][T18804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.935034][T18804] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 375.142459][T18818] tipc: Enabling of bearer rejected, failed to enable media [ 375.226012][T18844] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 375.238048][T18846] syzkaller0: entered promiscuous mode [ 375.240476][T18846] syzkaller0: entered allmulticast mode [ 375.425791][T18855] syzkaller0: entered promiscuous mode [ 375.427621][T18855] syzkaller0: entered allmulticast mode [ 375.571890][T18866] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 375.630032][ T5746] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 375.635513][ T5746] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 375.642442][ T5746] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 375.646736][ T5746] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 375.653175][ T5746] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 375.727352][T18868] tipc: Enabling of bearer rejected, failed to enable media [ 375.892449][T18871] lo speed is unknown, defaulting to 1000 [ 375.894869][T18871] lo speed is unknown, defaulting to 1000 [ 375.932708][T18903] syzkaller0: entered promiscuous mode [ 375.934850][T18903] syzkaller0: entered allmulticast mode [ 375.983292][T18907] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 376.141862][T18871] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.144213][T18871] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.146497][T18871] bridge_slave_0: entered allmulticast mode [ 376.149082][T18871] bridge_slave_0: entered promiscuous mode [ 376.152541][T18871] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.154891][T18871] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.157700][T18871] bridge_slave_1: entered allmulticast mode [ 376.160367][T18871] bridge_slave_1: entered promiscuous mode [ 376.172346][ T5746] Bluetooth: hci0: command tx timeout [ 376.176849][T18871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.183039][T18871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.197954][T18871] team0: Port device team_slave_0 added [ 376.201573][T18871] team0: Port device team_slave_1 added [ 376.216952][T18871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.219122][T18871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.227163][T18871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.231352][T18871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.233461][T18871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.241256][T18871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.275359][T18871] hsr_slave_0: entered promiscuous mode [ 376.277567][T18871] hsr_slave_1: entered promiscuous mode [ 376.279618][T18871] debugfs: 'hsr0' already exists in 'hsr' [ 376.281624][T18871] Cannot create hsr debugfs directory [ 376.291713][T18917] tipc: Enabling of bearer rejected, failed to enable media [ 376.373906][ T5793] pimreg9: left allmulticast mode [ 376.489431][ T5793] team0: Port device bridge1 removed [ 376.498558][ T5793] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 376.508641][ T5793] bond0 (unregistering): Released all slaves [ 376.513811][ T5793] bond1 (unregistering): Released all slaves [ 376.531407][ T5793] bond2 (unregistering): Released all slaves [ 376.539141][ T5793] bond3 (unregistering): Released all slaves [ 376.547723][ T5793] bond4 (unregistering): Released all slaves [ 376.554615][ T5793] bond5 (unregistering): Released all slaves [ 376.561440][ T5793] bond6 (unregistering): Released all slaves [ 376.570612][ T5793] bond7 (unregistering): Released all slaves [ 376.603057][ T5454] 8021q: adding VLAN 0 to HW filter on device eth2 [ 376.644273][T18943] syzkaller0: entered promiscuous mode [ 376.646109][T18943] syzkaller0: entered allmulticast mode [ 376.657323][T18950] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 376.697043][ T5793] tipc: Left network mode [ 376.747049][ T5793] IPVS: stopping master sync thread 15722 ... [ 377.702717][ T5746] Bluetooth: hci4: command tx timeout [ 378.005476][ T5454] 8021q: adding VLAN 0 to HW filter on device eth3 [ 378.013022][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.202409][T18997] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 378.256942][T19005] syzkaller0: entered promiscuous mode [ 378.258627][T19005] syzkaller0: entered allmulticast mode [ 378.313614][T19007] tipc: Enabling of bearer rejected, failed to enable media [ 378.487984][ T5793] hsr_slave_0: left promiscuous mode [ 378.495080][ T5793] hsr_slave_1: left promiscuous mode [ 378.860667][T19041] syzkaller0: entered promiscuous mode [ 378.865066][T19041] syzkaller0: entered allmulticast mode [ 378.896183][T19048] syzkaller0: entered promiscuous mode [ 378.897983][T19048] syzkaller0: entered allmulticast mode [ 378.902865][T18871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 378.909538][T18871] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 379.781472][ T5746] Bluetooth: hci4: command tx timeout [ 381.265483][T18871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 381.277510][T18871] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 381.293066][T18871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 381.300122][T18871] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 381.303909][T18871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 381.310717][T18871] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 381.389337][T19082] syzkaller0: entered promiscuous mode [ 381.391215][T19082] syzkaller0: entered allmulticast mode [ 381.406137][T18871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.861229][ T5746] Bluetooth: hci4: command tx timeout [ 382.731504][T19088] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 382.753391][T19096] syzkaller0: entered promiscuous mode [ 382.755110][T19096] syzkaller0: entered allmulticast mode [ 382.757591][T19099] tipc: Started in network mode [ 382.759102][T19099] tipc: Node identity c29023920635, cluster identity 4711 [ 382.761841][T19099] tipc: Enabled bearer , priority 0 [ 382.767753][T18871] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.773730][ T1219] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.775965][ T1219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.782693][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.785460][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.790160][T19101] tipc: Resetting bearer [ 382.807257][T19101] tipc: Disabling bearer [ 382.888320][T19110] syzkaller0: entered promiscuous mode [ 382.890048][T19110] syzkaller0: entered allmulticast mode [ 383.931044][ T5746] Bluetooth: hci4: command tx timeout [ 384.282739][T18871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.343916][T19161] syzkaller0: entered promiscuous mode [ 384.345789][T19161] syzkaller0: entered allmulticast mode [ 384.349298][T19161] tipc: Started in network mode [ 384.351607][T19161] tipc: Node identity 922d9ee728c, cluster identity 4711 [ 384.355241][T19161] tipc: Enabled bearer , priority 0 [ 384.371423][T18871] veth0_vlan: entered promiscuous mode [ 384.375321][T19161] tipc: Resetting bearer [ 384.382844][T19160] tipc: Resetting bearer [ 384.393096][T19160] tipc: Disabling bearer [ 384.402457][T18871] veth1_vlan: entered promiscuous mode [ 384.418515][T18871] veth0_macvtap: entered promiscuous mode [ 384.423045][T18871] veth1_macvtap: entered promiscuous mode [ 384.431288][T18871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.441504][T18871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.459915][T19168] syzkaller0: entered promiscuous mode [ 384.463860][T19168] syzkaller0: entered allmulticast mode [ 384.473672][T18395] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.477049][T18395] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.726719][T18395] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.729652][T18395] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.762755][T19188] syzkaller0: entered promiscuous mode [ 385.764655][T19188] syzkaller0: entered allmulticast mode [ 386.963106][T19218] syzkaller0: entered promiscuous mode [ 386.964873][T19218] syzkaller0: entered allmulticast mode [ 386.967712][T19221] tipc: Enabled bearer , priority 0 [ 387.023163][T19221] tipc: Resetting bearer [ 387.039461][T19221] tipc: Disabling bearer [ 387.058701][ T167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.063731][ T167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.089806][ T167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.094647][ T167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.120128][T19231] syzkaller0: entered promiscuous mode [ 387.122491][T19231] syzkaller0: entered allmulticast mode [ 388.426445][T19253] syzkaller0: entered promiscuous mode [ 388.428632][T19253] syzkaller0: entered allmulticast mode [ 388.435051][T19279] syzkaller0: entered promiscuous mode [ 388.436730][T19279] syzkaller0: entered allmulticast mode [ 388.439274][T19282] tipc: Enabled bearer , priority 0 [ 389.919269][T19292] Set syz1 is full, maxelem 65536 reached [ 390.223369][T19273] tipc: Resetting bearer [ 390.229942][T19271] tipc: Resetting bearer [ 390.238832][T19271] tipc: Disabling bearer [ 390.243122][ T5818] tipc: Node number set to 3244443471 [ 390.352456][T19304] syzkaller0: entered promiscuous mode [ 390.354961][T19304] syzkaller0: entered allmulticast mode [ 391.605303][T19313] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 391.610397][T19313] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 391.615907][T19313] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 391.646957][T19321] syzkaller0: entered promiscuous mode [ 391.648927][T19321] syzkaller0: entered allmulticast mode [ 393.023639][T19359] syzkaller0: entered promiscuous mode [ 393.025354][T19359] syzkaller0: entered allmulticast mode [ 393.029008][T19359] tipc: Enabled bearer , priority 0 [ 393.052094][T19359] tipc: Resetting bearer [ 393.058974][T19358] tipc: Resetting bearer [ 393.074214][T19358] tipc: Disabling bearer [ 393.165109][T19368] syzkaller0: entered promiscuous mode [ 393.167401][T19368] syzkaller0: entered allmulticast mode [ 394.505010][ T5793] bridge_slave_1: left allmulticast mode [ 394.507276][ T5793] bridge_slave_1: left promiscuous mode [ 394.509868][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.516005][ T5793] bridge_slave_0: left allmulticast mode [ 394.518382][ T5793] bridge_slave_0: left promiscuous mode [ 394.521153][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.655266][ T5793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.660227][ T5793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.664660][ T5793] bond0 (unregistering): Released all slaves [ 394.672326][T19378] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 394.676180][T19378] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 394.682901][T19378] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 394.706774][T19400] syzkaller0: entered promiscuous mode [ 394.708726][T19400] syzkaller0: entered allmulticast mode [ 395.024680][T19428] netlink: 'syz.3.4895': attribute type 8 has an invalid length. [ 395.950614][ T5793] tipc: Disabling bearer [ 395.955920][ T5793] tipc: Left network mode [ 395.973225][T19434] tipc: Enabling of bearer rejected, failed to enable media [ 396.061231][T19451] syzkaller0: entered promiscuous mode [ 396.062981][T19451] syzkaller0: entered allmulticast mode [ 397.292021][T19458] syzkaller0: entered promiscuous mode [ 397.293733][T19458] syzkaller0: entered allmulticast mode [ 398.563026][ T5793] hsr_slave_0: left promiscuous mode [ 398.565138][ T5793] hsr_slave_1: left promiscuous mode [ 398.567097][ T5793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.569364][ T5793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.572096][ T5793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.574376][ T5793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.579820][ T5793] veth1_macvtap: left promiscuous mode [ 398.581754][ T5793] veth0_macvtap: left promiscuous mode [ 398.583589][ T5793] veth1_vlan: left promiscuous mode [ 398.585308][ T5793] veth0_vlan: left promiscuous mode [ 398.769217][ T5793] team0 (unregistering): Port device team_slave_1 removed [ 398.781882][ T5793] team0 (unregistering): Port device team_slave_0 removed [ 398.902747][T19502] tipc: Enabling of bearer rejected, failed to enable media [ 399.180408][T19531] /dev/sg0: Can't lookup blockdev [ 399.196956][T19531] random: crng reseeded on system resumption [ 399.208418][T19531] Restarting kernel threads ... [ 399.213610][T19531] Done restarting kernel threads. [ 399.220608][T19531] gadgetfs: bound to dummy_udc driver [ 399.240165][T19533] syzkaller0: entered promiscuous mode [ 399.242629][T19533] syzkaller0: entered allmulticast mode [ 399.462801][ T56] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 399.466310][ C3] gadgetfs: connected [ 399.467864][ T56] gadgetfs: disconnected [ 399.500869][ T5841] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 399.623458][ C3] gadgetfs: connected [ 399.637836][ T56] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 399.644924][ T56] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 399.647715][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.656480][ C3] gadgetfs: configuration #1 [ 399.662427][ T5841] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.666061][ T5841] usb 7-1: config 0 has no interfaces? [ 399.667989][ T5841] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 399.671734][ T5841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.676090][ T5841] usb 7-1: config 0 descriptor?? [ 399.926668][ T5841] usb 7-1: USB disconnect, device number 35 [ 399.950101][T19530] gadgetfs: suspended from state 3 [ 399.957909][ T34] usb 5-1: USB disconnect, device number 37 [ 399.967538][T19530] gadgetfs: disconnected [ 400.517973][T19562] syzkaller0: entered promiscuous mode [ 400.519674][T19562] syzkaller0: entered allmulticast mode [ 400.523728][T19565] tipc: Enabled bearer , priority 0 [ 400.527037][T19570] tipc: Resetting bearer [ 400.530485][T19553] tipc: Resetting bearer [ 400.544877][T19553] tipc: Disabling bearer [ 400.620758][T19579] sctp: [Deprecated]: syz.0.4927 (pid 19579) Use of int in maxseg socket option. [ 400.620758][T19579] Use struct sctp_assoc_value instead [ 400.741257][T19593] syzkaller0: entered promiscuous mode [ 400.743723][T19593] syzkaller0: entered allmulticast mode [ 400.840946][T19603] netlink: 'syz.0.4939': attribute type 1 has an invalid length. [ 400.842209][T19601] syzkaller0: entered promiscuous mode [ 400.843426][T19603] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4939'. [ 400.845045][T19601] syzkaller0: entered allmulticast mode [ 402.173259][T19626] tipc: Enabling of bearer rejected, failed to enable media [ 402.275817][T19639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 402.330364][T19645] netlink: 'syz.3.4948': attribute type 1 has an invalid length. [ 402.334009][T19645] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4948'. [ 402.386503][T19649] syzkaller0: entered promiscuous mode [ 402.388175][T19649] syzkaller0: entered allmulticast mode [ 402.476935][T19655] syzkaller0: entered promiscuous mode [ 402.478730][T19655] syzkaller0: entered allmulticast mode [ 402.482608][T19655] tipc: Enabled bearer , priority 0 [ 402.494059][T19655] tipc: Resetting bearer [ 402.504157][T19654] tipc: Resetting bearer [ 402.515955][T19654] tipc: Disabling bearer [ 402.567128][T19659] syzkaller0: entered promiscuous mode [ 402.568943][T19659] syzkaller0: entered allmulticast mode [ 402.620914][T19663] netlink: 304 bytes leftover after parsing attributes in process `syz.0.4957'. [ 402.670020][T19667] netlink: 'syz.0.4958': attribute type 1 has an invalid length. [ 402.672906][T19667] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4958'. [ 403.904043][T19684] syzkaller0: entered promiscuous mode [ 403.906641][T19684] syzkaller0: entered allmulticast mode [ 405.071321][T19715] tipc: Enabling of bearer rejected, failed to enable media [ 405.086199][T19724] netlink: 'syz.3.4967': attribute type 1 has an invalid length. [ 405.089216][T19724] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4967'. [ 405.214376][T19736] syzkaller0: entered promiscuous mode [ 405.216287][T19736] syzkaller0: entered allmulticast mode [ 406.491749][T19756] /dev/sg0: Can't lookup blockdev [ 406.494610][T19756] random: crng reseeded on system resumption [ 406.496929][T19754] syzkaller0: entered promiscuous mode [ 406.499157][T19754] syzkaller0: entered allmulticast mode [ 406.503863][T19756] Restarting kernel threads ... [ 406.505589][T19756] Done restarting kernel threads. [ 406.508995][T19756] gadgetfs: bound to dummy_udc driver [ 406.750881][ T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 406.760949][ T5894] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 406.764219][ C1] gadgetfs: connected [ 406.769696][ T5894] gadgetfs: disconnected [ 406.902066][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.905556][ T9] usb 6-1: config 0 has no interfaces? [ 406.907325][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 406.917507][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.923084][ T9] usb 6-1: config 0 descriptor?? [ 406.931168][ C1] gadgetfs: connected [ 406.933646][ T5894] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 406.936448][ T5894] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 406.942275][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.947024][ C1] gadgetfs: configuration #1 [ 407.157913][ T34] usb 6-1: USB disconnect, device number 23 [ 407.162848][T19755] gadgetfs: suspended from state 3 [ 407.164792][ T56] usb 5-1: USB disconnect, device number 38 [ 407.167154][T19755] gadgetfs: disconnected [ 407.788543][T19782] tipc: Enabling of bearer rejected, failed to enable media [ 407.997140][T19802] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 408.040119][T19806] netlink: 'syz.0.4987': attribute type 1 has an invalid length. [ 408.043993][T19806] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4987'. [ 408.194520][T19814] syzkaller0: entered promiscuous mode [ 408.198187][T19814] syzkaller0: entered allmulticast mode [ 409.426934][T19831] syzkaller0: entered promiscuous mode [ 409.428784][T19831] syzkaller0: entered allmulticast mode [ 409.431887][T19834] tipc: Enabled bearer , priority 0 [ 409.445969][T19843] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 409.469173][T19836] tipc: Resetting bearer [ 409.494311][T19836] tipc: Disabling bearer [ 409.629666][ T5750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 409.635875][ T5750] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 409.638765][ T5750] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 409.643687][ T5750] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 409.646738][ T5750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 409.741121][T19872] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 409.797421][T19876] syzkaller0: entered promiscuous mode [ 409.799693][T19876] syzkaller0: entered allmulticast mode [ 410.987123][T19895] syzkaller0: entered promiscuous mode [ 410.989470][T19895] syzkaller0: entered allmulticast mode [ 410.996259][T19898] tipc: Enabled bearer , priority 0 [ 411.000009][T19887] tipc: Resetting bearer [ 411.008658][T19886] tipc: Resetting bearer [ 411.026380][T19886] tipc: Disabling bearer [ 411.041751][T19861] lo speed is unknown, defaulting to 1000 [ 411.044607][T19861] lo speed is unknown, defaulting to 1000 [ 411.225429][T19917] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 411.309544][T19861] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.311982][T19861] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.314256][T19861] bridge_slave_0: entered allmulticast mode [ 411.316927][T19861] bridge_slave_0: entered promiscuous mode [ 411.345800][T19923] syzkaller0: entered promiscuous mode [ 411.348117][T19923] syzkaller0: entered allmulticast mode [ 411.352586][T19861] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.355103][T19861] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.357850][T19861] bridge_slave_1: entered allmulticast mode [ 411.360777][T19861] bridge_slave_1: entered promiscuous mode [ 411.693539][ T5746] Bluetooth: hci2: command tx timeout [ 412.678810][T19953] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 412.686149][T19861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.694771][T19861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.718777][T19861] team0: Port device team_slave_0 added [ 412.726928][T19861] team0: Port device team_slave_1 added [ 412.740497][T19956] syzkaller0: entered promiscuous mode [ 412.742836][T19956] syzkaller0: entered allmulticast mode [ 412.746219][T19861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.749192][T19861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.759468][T19861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.764516][T19956] tipc: Enabled bearer , priority 0 [ 412.768090][T19861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.771138][T19861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.782355][T19861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.819805][T19956] tipc: Resetting bearer [ 412.846897][T19955] tipc: Resetting bearer [ 412.857626][T19955] tipc: Disabling bearer [ 412.878560][T19861] hsr_slave_0: entered promiscuous mode [ 412.881148][T19861] hsr_slave_1: entered promiscuous mode [ 412.883665][T19861] debugfs: 'hsr0' already exists in 'hsr' [ 412.885572][T19861] Cannot create hsr debugfs directory [ 412.980957][T19861] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.058541][T19974] syzkaller0: entered promiscuous mode [ 413.060419][T19974] syzkaller0: entered allmulticast mode [ 413.086314][T19861] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.771273][ T5746] Bluetooth: hci2: command tx timeout [ 414.313673][T19861] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.430771][T19861] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.557342][T19861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 414.561966][T19861] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 414.564972][T19861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 414.568896][T19861] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 414.577557][T19861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 414.591831][T19861] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 414.595776][T19861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 414.601331][T19861] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 414.641027][T20028] syzkaller0: entered promiscuous mode [ 414.642879][T20028] syzkaller0: entered allmulticast mode [ 415.851538][ T5746] Bluetooth: hci2: command tx timeout [ 415.877383][T19861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.887839][T19861] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.895305][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.898270][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.907288][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.910285][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.997848][T20082] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5057'. [ 416.163305][T19861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.186921][T19861] veth0_vlan: entered promiscuous mode [ 416.193160][T19861] veth1_vlan: entered promiscuous mode [ 416.212087][T19861] veth0_macvtap: entered promiscuous mode [ 416.216357][T19861] veth1_macvtap: entered promiscuous mode [ 416.225868][T19861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.232576][T19861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.240472][ T5793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.247791][ T5793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.262389][ T5793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.268701][ T5793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.289760][T19573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.299097][T19573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.324199][ T167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.326756][ T167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.347793][T20106] syzkaller0: entered promiscuous mode [ 416.349944][T20106] syzkaller0: entered allmulticast mode [ 417.728888][T20153] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5069'. [ 417.744884][T20155] netlink: 192 bytes leftover after parsing attributes in process `syz.0.5070'. [ 417.748374][T20155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5070'. [ 417.756465][T20155] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5070'. [ 417.925812][T20171] syzkaller0: entered promiscuous mode [ 417.927598][T20171] syzkaller0: entered allmulticast mode [ 417.932454][ T5746] Bluetooth: hci2: command tx timeout [ 417.945112][T20172] bridge_slave_0: left allmulticast mode [ 417.947110][T20172] bridge_slave_0: left promiscuous mode [ 417.948982][T20172] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.954745][T20172] bridge_slave_1: left allmulticast mode [ 417.956934][T20172] bridge_slave_1: left promiscuous mode [ 417.959021][T20172] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.967500][T20172] bond0: (slave bond_slave_0): Releasing backup interface [ 417.973644][T20172] bond0: (slave bond_slave_1): Releasing backup interface [ 417.979827][T20172] team0: Port device team_slave_0 removed [ 417.987159][T20172] team0: Port device team_slave_1 removed [ 417.989698][T20172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.992846][T20172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.996512][T20172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.999172][T20172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.003152][T20172] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 418.797775][T20210] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5083'. [ 419.437469][T20231] syzkaller0: entered promiscuous mode [ 419.439772][T20231] syzkaller0: entered allmulticast mode [ 419.723307][T20251] tipc: Enabled bearer , priority 0 [ 419.727899][T20251] tipc: Resetting bearer [ 419.742955][T20250] tipc: Disabling bearer [ 419.847715][T20254] syzkaller0: entered promiscuous mode [ 419.850476][T20254] syzkaller0: entered allmulticast mode [ 422.554470][T20305] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 422.558685][T20302] tipc: Enabling of bearer rejected, failed to enable media [ 422.560987][T20305] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 422.565979][T20305] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 422.756248][T20343] syzkaller0: entered promiscuous mode [ 422.757960][T20343] syzkaller0: entered allmulticast mode [ 424.106021][T20363] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 424.108778][T20363] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 424.112098][T20363] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 424.221783][T20391] tipc: Enabled bearer , priority 0 [ 424.225996][T20391] tipc: Resetting bearer [ 424.264485][T20389] tipc: Disabling bearer [ 424.447116][T20421] syzkaller0: entered promiscuous mode [ 424.449071][T20421] syzkaller0: entered allmulticast mode [ 425.948790][T20453] syzkaller0: entered promiscuous mode [ 425.950591][T20453] syzkaller0: entered allmulticast mode [ 425.958592][T20453] tipc: Enabled bearer , priority 0 [ 425.963531][T20453] tipc: Resetting bearer [ 425.969047][T20452] tipc: Resetting bearer [ 425.977453][T20452] tipc: Disabling bearer [ 426.147568][T20476] syzkaller0: entered promiscuous mode [ 426.149320][T20476] syzkaller0: entered allmulticast mode [ 427.338712][T20498] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 427.418345][T20513] syzkaller0: entered promiscuous mode [ 427.420035][T20513] syzkaller0: entered allmulticast mode [ 427.424710][T20513] tipc: Started in network mode [ 427.427358][T20513] tipc: Node identity 72d084aa6429, cluster identity 4711 [ 427.432606][T20513] tipc: Enabled bearer , priority 0 [ 427.437202][T20513] tipc: Resetting bearer [ 427.444940][T20512] tipc: Resetting bearer [ 427.456499][T20512] tipc: Disabling bearer [ 427.637529][T20536] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 427.702068][T20540] syzkaller0: entered promiscuous mode [ 427.703845][T20540] syzkaller0: entered allmulticast mode [ 428.967996][T20573] syzkaller0: entered promiscuous mode [ 428.969722][T20573] syzkaller0: entered allmulticast mode [ 428.972971][T20576] tipc: Enabled bearer , priority 0 [ 428.992901][T20578] tipc: Resetting bearer [ 429.004106][T20578] tipc: Disabling bearer [ 429.332956][T20620] syzkaller0: entered promiscuous mode [ 429.334801][T20620] syzkaller0: entered allmulticast mode [ 429.339237][T20620] tipc: Started in network mode [ 429.340973][T20620] tipc: Node identity 4ad4e2e8b0cd, cluster identity 4711 [ 429.343443][T20620] tipc: Enabled bearer , priority 0 [ 429.348547][T20620] tipc: Resetting bearer [ 429.356425][T20619] tipc: Resetting bearer [ 429.364901][T20619] tipc: Disabling bearer [ 429.592774][T20656] syzkaller0: entered promiscuous mode [ 429.594652][T20656] syzkaller0: entered allmulticast mode [ 429.604476][T20656] tipc: Enabled bearer , priority 0 [ 429.609278][T20656] tipc: Resetting bearer [ 429.616078][T20654] tipc: Resetting bearer [ 429.633833][T20654] tipc: Disabling bearer [ 429.955658][T20693] syzkaller0: entered promiscuous mode [ 429.958026][T20693] syzkaller0: entered allmulticast mode [ 429.964206][T20693] tipc: Enabled bearer , priority 0 [ 429.973435][T20693] tipc: Resetting bearer [ 429.981439][T20692] tipc: Resetting bearer [ 429.996558][T20692] tipc: Disabling bearer [ 430.434698][T20732] syzkaller0: entered promiscuous mode [ 430.436586][T20732] syzkaller0: entered allmulticast mode [ 430.441737][T20732] tipc: Enabled bearer , priority 0 [ 430.448597][T20732] tipc: Resetting bearer [ 430.460113][T20731] tipc: Resetting bearer [ 430.473767][T20731] tipc: Disabling bearer [ 430.549269][T20744] syzkaller0: entered promiscuous mode [ 430.551059][T20744] syzkaller0: entered allmulticast mode [ 430.616689][T20748] syzkaller0: entered promiscuous mode [ 430.619297][T20748] syzkaller0: entered allmulticast mode [ 431.857649][T20793] syzkaller0: entered promiscuous mode [ 431.859950][T20793] syzkaller0: entered allmulticast mode [ 431.863744][T20798] tipc: Enabled bearer , priority 0 [ 431.878866][T20788] tipc: Resetting bearer [ 431.883293][T20787] tipc: Resetting bearer [ 431.892111][T20787] tipc: Disabling bearer [ 432.005358][T20809] syzkaller0: entered promiscuous mode [ 432.007174][T20809] syzkaller0: entered allmulticast mode [ 432.136874][T20827] syzkaller0: entered promiscuous mode [ 432.138704][T20827] syzkaller0: entered allmulticast mode [ 433.278143][T20837] syzkaller0: entered promiscuous mode [ 433.280358][T20837] syzkaller0: entered allmulticast mode [ 433.325796][T20846] syzkaller0: entered promiscuous mode [ 433.327690][T20846] syzkaller0: entered allmulticast mode [ 433.562612][T20876] capability: warning: `syz.2.5245' uses 32-bit capabilities (legacy support in use) [ 434.520241][T20863] syzkaller0: entered promiscuous mode [ 434.522191][T20863] syzkaller0: entered allmulticast mode [ 434.528868][T20869] tipc: Enabled bearer , priority 0 [ 434.533040][T20885] tipc: Resetting bearer [ 434.551956][T20883] syzkaller0: entered promiscuous mode [ 434.553802][T20883] syzkaller0: entered allmulticast mode [ 434.556590][T20853] tipc: Resetting bearer [ 434.565682][T20853] tipc: Disabling bearer [ 435.847319][T20932] syzkaller0: entered promiscuous mode [ 435.849517][T20932] syzkaller0: entered allmulticast mode [ 437.080655][T20954] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 437.083900][T20954] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 437.087288][T20954] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 437.087659][T20967] tipc: Enabling of bearer rejected, failed to enable media [ 437.133909][T20983] syzkaller0: entered promiscuous mode [ 437.135633][T20983] syzkaller0: entered allmulticast mode [ 437.286115][T20999] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 437.444075][T21009] syzkaller0: entered promiscuous mode [ 437.445799][T21009] syzkaller0: entered allmulticast mode [ 438.676592][T21026] tipc: Enabling of bearer rejected, failed to enable media [ 438.701167][T21042] syzkaller0: entered promiscuous mode [ 438.702945][T21042] syzkaller0: entered allmulticast mode [ 438.784207][T21053] mmap: syz.3.5284 (21053) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 439.463708][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.919671][T21059] bridge_slave_0: left allmulticast mode [ 439.921467][T21059] bridge_slave_0: left promiscuous mode [ 439.923309][T21059] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.929949][T21059] bridge_slave_1: left allmulticast mode [ 439.931923][T21059] bridge_slave_1: left promiscuous mode [ 439.933782][T21059] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.939064][T21059] bond0: (slave bond_slave_0): Releasing backup interface [ 439.946947][T21059] bond0: (slave bond_slave_1): Releasing backup interface [ 439.956133][T21059] team0: Port device team_slave_0 removed [ 439.960542][T21059] team0: Port device team_slave_1 removed [ 439.964584][T21059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.966942][T21059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.971687][T21059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.974351][T21059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.977858][T21059] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 440.107992][T21085] syzkaller0: entered promiscuous mode [ 440.109819][T21085] syzkaller0: entered allmulticast mode [ 440.260910][ T3989] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 440.422720][ T3989] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.425843][ T3989] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 440.430287][ T3989] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 440.433476][ T3989] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 440.436020][ T3989] usb 5-1: Product: syz [ 440.437303][ T3989] usb 5-1: Manufacturer: syz [ 440.438993][ T3989] usb 5-1: SerialNumber: syz [ 440.449238][ T3989] usb 5-1: config 0 descriptor?? [ 441.571660][ T5841] usb 5-1: USB disconnect, device number 39 [ 441.598855][T21095] syzkaller0: entered promiscuous mode [ 441.601424][T21095] syzkaller0: entered allmulticast mode [ 442.880552][T21114] tipc: Enabling of bearer rejected, failed to enable media [ 442.892802][T21133] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 443.044157][T21149] syzkaller0: entered promiscuous mode [ 443.045898][T21149] syzkaller0: entered allmulticast mode [ 443.330967][ T5841] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 443.492120][ T5841] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.495405][ T5841] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 443.499820][ T5841] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 443.503032][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 443.505703][ T5841] usb 6-1: Product: syz [ 443.507089][ T5841] usb 6-1: Manufacturer: syz [ 443.508648][ T5841] usb 6-1: SerialNumber: syz [ 443.511553][ T5841] usb 6-1: config 0 descriptor?? [ 444.237773][ T1044] usb 6-1: USB disconnect, device number 24 [ 444.250511][T21167] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 444.318034][T21170] syzkaller0: entered promiscuous mode [ 444.319824][T21170] syzkaller0: entered allmulticast mode [ 445.692835][T21194] syzkaller0: entered promiscuous mode [ 445.694493][T21194] syzkaller0: entered allmulticast mode [ 445.697499][T21203] syzkaller0: entered promiscuous mode [ 445.699898][T21203] syzkaller0: entered allmulticast mode [ 445.703180][T21209] tipc: Enabled bearer , priority 0 [ 445.854377][T21221] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5319'. [ 446.130931][ T5841] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 446.282145][ T5841] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.285481][ T5841] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 446.289737][ T5841] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 446.293174][ T5841] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 446.296242][ T5841] usb 8-1: Product: syz [ 446.297774][ T5841] usb 8-1: Manufacturer: syz [ 446.299524][ T5841] usb 8-1: SerialNumber: syz [ 446.303470][ T5841] usb 8-1: config 0 descriptor?? [ 447.049006][T21211] tipc: Resetting bearer [ 447.059503][T21211] tipc: Disabling bearer [ 447.067747][ T5841] usb 8-1: USB disconnect, device number 42 [ 447.068981][ T1044] tipc: Node number set to 3136134887 [ 448.536271][T21282] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 448.553916][T21286] syzkaller0: entered promiscuous mode [ 448.556165][T21286] syzkaller0: entered allmulticast mode [ 448.563353][T21286] tipc: Enabled bearer , priority 0 [ 448.568876][T21286] tipc: Resetting bearer [ 448.585783][T21285] tipc: Resetting bearer [ 448.601511][T21285] tipc: Disabling bearer [ 448.634345][T21289] syzkaller0: entered promiscuous mode [ 448.636031][T21289] syzkaller0: entered allmulticast mode [ 448.931255][ T29] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 449.082734][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.086132][ T29] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 449.090449][ T29] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 449.093776][ T29] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 449.096295][ T29] usb 5-1: Product: syz [ 449.097575][ T29] usb 5-1: Manufacturer: syz [ 449.099027][ T29] usb 5-1: SerialNumber: syz [ 449.101990][ T29] usb 5-1: config 0 descriptor?? [ 449.949201][ T1044] usb 5-1: USB disconnect, device number 40 [ 450.072080][T21315] syzkaller0: entered promiscuous mode [ 450.074273][T21315] syzkaller0: entered allmulticast mode [ 451.333754][T21329] syzkaller0: entered promiscuous mode [ 451.335633][T21329] syzkaller0: entered allmulticast mode [ 452.595969][T21359] syzkaller0: entered promiscuous mode [ 452.598308][T21359] syzkaller0: entered allmulticast mode [ 452.911675][ T1044] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 453.062293][ T1044] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.065422][ T1044] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 453.069891][ T1044] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 453.072788][ T1044] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 453.075144][ T1044] usb 8-1: Product: syz [ 453.076387][ T1044] usb 8-1: Manufacturer: syz [ 453.077726][ T1044] usb 8-1: SerialNumber: syz [ 453.081256][ T1044] usb 8-1: config 0 descriptor?? [ 453.868572][ T3989] usb 8-1: USB disconnect, device number 43 [ 454.005459][T21411] syzkaller0: entered promiscuous mode [ 454.007814][T21411] syzkaller0: entered allmulticast mode [ 454.196773][T21427] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 454.245559][T21431] syzkaller0: entered promiscuous mode [ 454.247279][T21431] syzkaller0: entered allmulticast mode [ 455.579536][T21454] syzkaller0: entered promiscuous mode [ 455.581976][T21454] syzkaller0: entered allmulticast mode [ 458.482243][T21478] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 458.486089][T21478] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 458.489913][T21478] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 458.698294][T21525] syzkaller0: entered promiscuous mode [ 458.700559][T21525] syzkaller0: entered allmulticast mode [ 459.011032][ T3989] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 459.047526][T21542] syzkaller0: entered promiscuous mode [ 459.049195][T21542] syzkaller0: entered allmulticast mode [ 459.172788][ T3989] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.175984][ T3989] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 459.197673][ T3989] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 459.200513][ T3989] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 459.203229][ T3989] usb 8-1: Product: syz [ 459.210052][ T3989] usb 8-1: Manufacturer: syz [ 459.212172][ T3989] usb 8-1: SerialNumber: syz [ 459.216672][ T3989] usb 8-1: config 0 descriptor?? [ 460.440256][ T50] usb 8-1: USB disconnect, device number 44 [ 460.647949][T21575] syzkaller0: entered promiscuous mode [ 460.650357][T21575] syzkaller0: entered allmulticast mode [ 461.152901][T21588] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 461.254472][T21591] syzkaller0: entered promiscuous mode [ 461.256728][T21591] syzkaller0: entered allmulticast mode [ 462.731809][T21617] syzkaller0: entered promiscuous mode [ 462.733664][T21617] syzkaller0: entered allmulticast mode [ 462.854906][T21633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5421'. [ 462.912779][T21638] [ 462.913813][T21638] ============================= [ 462.915727][T21638] WARNING: suspicious RCU usage [ 462.917628][T21638] syzkaller #0 Not tainted [ 462.919325][T21638] ----------------------------- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 462.921194][T21638] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 462.924163][T21638] [ 462.924163][T21638] other info that might help us debug this: [ 462.924163][T21638] [ 462.927208][T21638] [ 462.927208][T21638] rcu_scheduler_active = 2, debug_locks = 1 [ 462.930317][T21638] 1 lock held by syz.2.5421/21638: [ 462.933125][T21638] #0: ffff88804f656ad0 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x62/0x90 [ 462.937387][T21638] [ 462.937387][T21638] stack backtrace: [ 462.940179][T21638] CPU: 1 UID: 0 PID: 21638 Comm: syz.2.5421 Not tainted syzkaller #0 PREEMPT(full) [ 462.940205][T21638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 462.940216][T21638] Call Trace: [ 462.940225][T21638] [ 462.940232][T21638] dump_stack_lvl+0x100/0x190 [ 462.940259][T21638] lockdep_rcu_suspicious.cold+0x4f/0xb1 [ 462.940295][T21638] xfrm_do_migrate_state+0x2463/0x2f10 [ 462.940330][T21638] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 462.940356][T21638] ? __asan_memset+0x23/0x50 [ 462.940378][T21638] ? __nla_validate_parse+0x1e7/0x28b0 [ 462.940416][T21638] ? find_held_lock+0x2b/0x80 [ 462.940444][T21638] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 462.940472][T21638] ? xfrm_user_rcv_msg+0x411/0xd00 [ 462.940491][T21638] ? xfrm_user_rcv_msg+0x379/0xd00 [ 462.940509][T21638] xfrm_user_rcv_msg+0x411/0xd00 [ 462.940534][T21638] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 462.940556][T21638] ? finish_task_switch.isra.0+0x3b6/0x10c0 [ 462.940580][T21638] ? rcu_is_watching+0x12/0xc0 [ 462.940632][T21638] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 462.940654][T21638] ? __mutex_lock+0x82c/0x1bd0 [ 462.940682][T21638] ? lockdep_hardirqs_on+0x78/0x100 [ 462.940708][T21638] ? __mutex_lock+0x82c/0x1bd0 [ 462.940731][T21638] ? __mutex_lock+0x26d/0x1bd0 [ 462.940758][T21638] netlink_rcv_skb+0x159/0x420 [ 462.940794][T21638] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 462.940818][T21638] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 462.940858][T21638] xfrm_netlink_rcv+0x71/0x90 [ 462.940878][T21638] netlink_unicast+0x585/0x850 [ 462.940904][T21638] ? __pfx_netlink_unicast+0x10/0x10 [ 462.940934][T21638] netlink_sendmsg+0x8b0/0xda0 [ 462.940961][T21638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.940988][T21638] ? apparmor_socket_sendmsg+0x15b/0x270 [ 462.941013][T21638] ____sys_sendmsg+0xa4d/0xbe0 [ 462.941032][T21638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.941056][T21638] ? __pfx_____sys_sendmsg+0x10/0x10 [ 462.941082][T21638] ? find_held_lock+0x2b/0x80 [ 462.941105][T21638] ? tomoyo_path_number_perm+0x28f/0x580 [ 462.941134][T21638] ___sys_sendmsg+0x190/0x1e0 [ 462.941157][T21638] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.941177][T21638] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 462.941213][T21638] ? find_held_lock+0x2b/0x80 [ 462.941254][T21638] __sys_sendmsg+0x160/0x210 [ 462.941282][T21638] ? __pfx___sys_sendmsg+0x10/0x10 [ 462.941308][T21638] ? kfree+0x1e5/0x6c0 [ 462.941341][T21638] __do_fast_syscall_32+0xe7/0x970 [ 462.941370][T21638] do_fast_syscall_32+0x32/0x70 [ 462.941396][T21638] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 462.941421][T21638] RIP: 0023:0xf708efec [ 462.941442][T21638] Code: Unable to access opcode bytes at 0xf708efc2. [ 462.941451][T21638] RSP: 002b:00000000f545c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 462.941470][T21638] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 462.941483][T21638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 462.941494][T21638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 462.941505][T21638] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 462.941517][T21638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 462.941543][T21638] [ 463.060092][ T1044] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 464.484826][ T5793] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.666828][ T5793] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.827429][ T5793] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.937721][ T5793] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.209045][ T5793] bond0 (unregistering): Released all slaves [ 465.303142][ T5793] tipc: Left network mode [ 465.401175][ T5454] 8021q: adding VLAN 0 to HW filter on device eth2 [ 465.559138][ T5454] 8021q: adding VLAN 0 to HW filter on device eth3 [ 465.601785][ T5793] hsr_slave_0: left promiscuous mode [ 465.604876][ T5793] hsr_slave_1: left promiscuous mode [ 465.617716][ T5793] veth1_macvtap: left promiscuous mode [ 465.620075][ T5793] veth0_macvtap: left promiscuous mode [ 465.622749][ T5793] veth1_vlan: left promiscuous mode [ 465.624845][ T5793] veth0_vlan: left promiscuous mode [ 465.843679][ T5454] 8021q: adding VLAN 0 to HW filter on device eth4 [ 466.018649][ T5454] 8021q: adding VLAN 0 to HW filter on device eth5 [ 466.362675][ T5793] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.441388][ T5793] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.500568][ T5793] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.578748][ T5793] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.737549][ T5793] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.831477][ T5793] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.921879][ T5793] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.932136][ T5454] 8021q: adding VLAN 0 to HW filter on device eth6 [ 466.994853][ T5793] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.134888][ T5454] 8021q: adding VLAN 0 to HW filter on device eth7 [ 467.192495][ T5793] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.287217][ T5793] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.362814][ T5454] 8021q: adding VLAN 0 to HW filter on device eth8 [ 467.411521][ T5793] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.490366][ T5793] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.537546][ T5454] 8021q: adding VLAN 0 to HW filter on device eth9 [ 467.827424][ T5793] bond0 (unregistering): Released all slaves [ 467.912056][ T5793] bond0 (unregistering): Released all slaves [ 468.005382][ T5793] bond0 (unregistering): Released all slaves [ 468.147191][ T5793] tipc: Left network mode [ 468.170606][ T5793] tipc: Left network mode [ 468.179356][ T5793] tipc: Left network mode [ 468.210639][ T5454] 8021q: adding VLAN 0 to HW filter on device eth10 [ 468.414673][ T5454] 8021q: adding VLAN 0 to HW filter on device eth11 [ 468.621547][ T5454] 8021q: adding VLAN 0 to HW filter on device eth12 [ 468.811463][ T5454] 8021q: adding VLAN 0 to HW filter on device eth13 [ 469.026523][ T5454] 8021q: adding VLAN 0 to HW filter on device eth14 [ 469.062499][ T5793] hsr_slave_0: left promiscuous mode [ 469.064704][ T5793] hsr_slave_1: left promiscuous mode [ 469.068923][ T5793] hsr_slave_0: left promiscuous mode [ 469.071100][ T5793] hsr_slave_1: left promiscuous mode [ 469.075711][ T5793] hsr_slave_0: left promiscuous mode [ 469.077967][ T5793] hsr_slave_1: left promiscuous mode [ 469.117146][ T5793] veth1_macvtap: left promiscuous mode [ 469.118995][ T5793] veth0_macvtap: left promiscuous mode [ 469.120720][ T5793] veth1_vlan: left promiscuous mode [ 469.122412][ T5793] veth0_vlan: left promiscuous mode [ 469.128428][ T5793] veth1_macvtap: left promiscuous mode [ 469.130182][ T5793] veth0_macvtap: left promiscuous mode [ 469.132619][ T5793] veth1_vlan: left promiscuous mode [ 469.134837][ T5793] veth0_vlan: left promiscuous mode [ 469.138593][ T5793] veth1_macvtap: left promiscuous mode [ 469.140327][ T5793] veth0_macvtap: left promiscuous mode [ 469.142598][ T5793] veth1_vlan: left promiscuous mode [ 469.144827][ T5793] veth0_vlan: left promiscuous mode [ 469.752815][ T5454] 8021q: adding VLAN 0 to HW filter on device eth15 [ 469.954559][ T5454] 8021q: adding VLAN 0 to HW filter on device eth16 [ 470.120329][ T5454] 8021q: adding VLAN 0 to HW filter on device eth17