last executing test programs: 4.780070898s ago: executing program 3 (id=3345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0x10}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='\f\x00\b'], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x40) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) 4.69974688s ago: executing program 0 (id=3346): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x1b, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x77ffdf8c}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.589277224s ago: executing program 0 (id=3349): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000f82020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xe, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a8", 0x0, 0xd0d, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.461360978s ago: executing program 3 (id=3352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x6}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e3, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0x1}, {0x5, 0x7, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x6, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x5, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x7, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x200, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x400, 0x2, 0x8, 0x6, 0x200, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0x9}, {0x8, 0x40000004, 0x1, 0x8, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x2}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x3, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24e, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x5, 0x4, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x4, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x8}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x0, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x4, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0x6, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x5, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x81}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x1}, {0x2}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r3, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) 4.367858491s ago: executing program 0 (id=3353): socket$packet(0x11, 0x2, 0x300) socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r5, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r6, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r5, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddb, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008010}, 0x404c004) 1.679076997s ago: executing program 0 (id=3356): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) writev(r3, &(0x7f0000000f80)=[{&(0x7f0000000200)="2e9b5b00ace03dd65193dfb6c561963d86dd", 0x12}], 0x1) 1.669001997s ago: executing program 3 (id=3357): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.58924376s ago: executing program 2 (id=3358): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.535860641s ago: executing program 1 (id=3359): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000004c0)=@ccm_128={{0x304}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "0100009800"}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)}, 0x20004000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x30, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x30}}, 0x0) 1.482575823s ago: executing program 2 (id=3360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0x10}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='\f\x00\b'], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x40) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.469411213s ago: executing program 3 (id=3361): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000f82020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xe, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a8", 0x0, 0xd0d, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.431648205s ago: executing program 1 (id=3362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x1b, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x77ffdf8c}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.358894687s ago: executing program 0 (id=3363): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c706172743d3078303030303030303030303030303030382c6e6c733d6d6163726f6d616e69616e2c003b9f9a5bb3d33bef347b166532d866b1f09e2c8bb707ce9abb9144fb9770b80327dc4f1e1c0cdfa716f809f083c3f99eac5d35488943dd"], 0x1, 0x5d8, &(0x7f0000000cc0)="$eJzs3U1vG8cdB+Df0rJsuoDDJHaSFi0q2IcWMWqLYuLoUKBuURQ6BEWAXnLJQbDpWDCtBBJTKEFR2H299hskPcjnnnooejCQnvsVBPSQQ4HedXOxyyXFWIoixbJIJc8DDGeGszs78/fuiLuEwQDfWEtv5/SjFFm68uZGWd/a7PS2Njv3huUkZ5I0kplBlmI1KT5NbmSQ8u3yzbq74ouO887Hbyx+1n74YFCbqVO1fWO//Q7mfp0yl+RUnR9Vfzefur9iNMMyYJeHgYNJe7zL/cPs/pTXLTANisHfzV1aybkkZ+vPAalXh8bxju7oHWqVAwAAgBPque1sZyPnJz0OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOEnq3/8v6tQYludSDH//f7Z+L3X5RHs06QEAAAAAAAAAwBH4/na2s5Hzw/rjovrO/1JVuVC9fisfZD3drOVqNrKcfvpZSztJa6yj2Y3lfn+tfYA9F/bcc+F45gsAAAAAAAAAX1O/y9LO9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADANiuTUIKvShWG5lcZMkrNJZsvt7if/HJZPskeTHgAAAAAcg+e2s52NnB/WHxfVPf9L1X3/2XyQ1fSzkn566eZW9SxgcNff2Nrs9LY2O/fKtLvfn/7vUMOoeszg2cPeR56vtrg42mMpv8ivciVzeStrWcmvs5x+upnLz6vScoq06qcXreE49x7vjc/V3vqysb5SjaSZ21mpxnY1N/NeermVRjWHapv9j/igjE7xk9oBY3SrzssZ/aXOp0OrisjpUUTm69iX0Xh+/0gc8jx58kjtNEbPoC48g5ifq/My1n+a6pgvjJ19L+0fieTSf7739zu91bt3bq9fmZ4pfUVPRqIzFomXv1GRmK2jMVhFD7daXqr2PZ+V/DLv5Va6eT2LeT0LeS2vZT6LuT4W14sHuNYah7vWLv+wLjST/LnOp0MZ1+fH4jq+0rWqtvF3dqL0wtGvSDPfqQvlMX5f59PhyUi0xyLx4v6R+Ovj8nW9t3p37c7y+wc83g/qvLxs/zhVa3N5vrxQ/mNVtc+fHWXbi3u2tau2C6O2xq62i6O2L7tSZ+vPcLt7WqjaXt6zrVO1vTLWttenHACm3rlXz802/9v8d/OT5h+ad5pvnv3ZmcUz353N6X/N/OPU3xoPGz8uXs0n+e3O/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDVrX/40d3lXq+7pqCgoDAqTHplAp61a/17719b//CjH63cW363+253tdNpX19YvL64cP3a7ZVed37wOulhAs/Azh/9SY8EAAAAAAAAAAAAOKjj+O8Ek54jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLItvZ3Tj1KkPX91vqxvbXZ6ZRqWd7acSdJIUvwmKT5NbmSQ0hrrrvii47zz8RuLn7UfPtjpa2a4fWO//Q7mfp0yl+RUnR9Vfzefur9iNMMyYJeHgYNJ+38AAAD//+NBDmE=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) openat(0xffffffffffffff9c, 0x0, 0x143841, 0x114) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0) 1.26393843s ago: executing program 3 (id=3364): socket$packet(0x11, 0x2, 0x300) socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r5, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r6, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r5, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddb, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008010}, 0x404c004) 1.26376313s ago: executing program 1 (id=3365): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x8000) 1.168387233s ago: executing program 2 (id=3366): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x2c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xae}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) 1.077347676s ago: executing program 0 (id=3367): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2, 0x5, 0x4, 0x854b, 0xd8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x200040d0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="ba", 0x1, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r5, 0x1, 0x7, 0x6, @multicast}, 0x14) 1.032008597s ago: executing program 1 (id=3368): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100080000000000000000008500000087", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 832.814674ms ago: executing program 1 (id=3369): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 734.315827ms ago: executing program 1 (id=3370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2a, 0x2, {0x0, 0x0, 0x0, r6, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a09}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0xffffffffffffffff, 0xc9d, 0xd155}, 0x61}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x20000002) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000200), 0x4) sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c10200000006125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 697.675738ms ago: executing program 3 (id=3371): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r3, 0x0, 0x0) 161.822175ms ago: executing program 2 (id=3372): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000f82020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xe, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a8", 0x0, 0xd0d, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) 48.018079ms ago: executing program 2 (id=3373): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 0s ago: executing program 2 (id=3374): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0x10}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='\f\x00\b'], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x40) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) kernel console output (not intermixed with test programs): ][ T5829] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 128.317724][ T5829] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 128.336435][ T5829] usb 3-1: config 0 has no interface number 0 [ 128.353636][ T5829] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.385645][ T5829] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 128.400112][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.409421][ T5829] usb 3-1: Product: syz [ 128.413621][ T5829] usb 3-1: Manufacturer: syz [ 128.418710][ T5829] usb 3-1: SerialNumber: syz [ 128.445243][ T5829] usb 3-1: config 0 descriptor?? [ 128.461060][ T5829] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 128.522607][ T7559] autofs4:pid:7559:autofs_fill_super: called with bogus options [ 129.112704][ T7582] binder: 7581:7582 ioctl c0306201 200000000080 returned -14 [ 129.622205][ T7601] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1420284373 (1420284373 ns) > initial count (164304968 ns). Using initial count to start timer. [ 129.898369][ T7613] autofs4:pid:7613:autofs_fill_super: called with bogus options [ 130.487872][ T7631] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1420284373 (1420284373 ns) > initial count (164304968 ns). Using initial count to start timer. [ 130.795353][ C1] usb 3-1: yurex_control_callback - control failed: -2 [ 130.805215][ T5829] usb 3-1: USB disconnect, device number 6 [ 130.836202][ T5829] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 131.164420][ T7655] fuse: Bad value for 'fd' [ 132.125494][ T28] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 132.319406][ T28] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 132.337518][ T28] usb 1-1: config 0 has no interface number 0 [ 132.353907][ T28] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 132.382766][ T28] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 132.412769][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.425957][ T28] usb 1-1: Product: syz [ 132.430177][ T28] usb 1-1: Manufacturer: syz [ 132.443102][ T28] usb 1-1: SerialNumber: syz [ 132.468825][ T28] usb 1-1: config 0 descriptor?? [ 132.490239][ T28] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 132.694594][ T5829] usb 1-1: USB disconnect, device number 4 [ 132.714150][ T5829] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 132.960589][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.967616][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.066497][ T28] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 134.260062][ T28] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 134.285637][ T28] usb 1-1: config 0 has no interface number 0 [ 134.302252][ T28] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.338551][ T28] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 134.351632][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.368580][ T28] usb 1-1: Product: syz [ 134.377399][ T28] usb 1-1: Manufacturer: syz [ 134.389544][ T28] usb 1-1: SerialNumber: syz [ 134.420833][ T28] usb 1-1: config 0 descriptor?? [ 134.450652][ T28] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 134.652695][ T5829] usb 1-1: USB disconnect, device number 5 [ 134.667235][ T5829] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 135.198044][ T7806] netlink: 24 bytes leftover after parsing attributes in process `syz.2.781'. [ 135.614623][ T7824] fuse: Bad value for 'fd' [ 135.831868][ T7829] binder: 7828:7829 ioctl c0306201 200000000080 returned -14 [ 136.127941][ T7841] netlink: 24 bytes leftover after parsing attributes in process `syz.2.795'. [ 136.597286][ T7851] fuse: Bad value for 'fd' [ 136.966031][ T7864] netlink: 24 bytes leftover after parsing attributes in process `syz.0.804'. [ 137.215689][ T7869] fuse: Bad value for 'group_id' [ 137.346212][ T7874] binder: 7872:7874 ioctl c0306201 200000000080 returned -14 [ 137.382766][ T7874] binder: BINDER_SET_CONTEXT_MGR already set [ 137.396431][ T7874] binder: 7872:7874 ioctl 4018620d 200000004a80 returned -16 [ 137.775627][ T7888] fuse: Bad value for 'fd' [ 138.054647][ T7899] fuse: Bad value for 'fd' [ 138.334676][ T7910] fuse: Bad value for 'fd' [ 138.446833][ T7915] fuse: Bad value for 'group_id' [ 138.658076][ T7924] fuse: Bad value for 'fd' [ 140.061057][ T7985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.849'. [ 140.373444][ T7998] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2565672578 (164203044992 ns) > initial count (144322706944 ns). Using initial count to start timer. [ 142.106219][ T8056] fuse: Bad value for 'fd' [ 142.578312][ T8071] netlink: 40 bytes leftover after parsing attributes in process `syz.3.878'. [ 143.161737][ T8085] fuse: Bad value for 'fd' [ 144.268432][ T8116] kvm: pic: non byte write [ 145.182730][ T8141] kvm: pic: non byte write [ 145.306700][ T8151] binder: BINDER_SET_CONTEXT_MGR already set [ 145.315264][ T8151] binder: 8150:8151 ioctl 4018620d 200000004a80 returned -16 [ 146.562614][ T8172] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2565672578 (2565672578 ns) > initial count (2255042296 ns). Using initial count to start timer. [ 146.760849][ T8188] binder: BINDER_SET_CONTEXT_MGR already set [ 146.769245][ T8188] binder: 8187:8188 ioctl 4018620d 200000004a80 returned -16 [ 146.831279][ T8191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.926'. [ 146.848896][ T8191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.926'. [ 147.395034][ T8209] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.570860][ T8213] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.843172][ T8213] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.098313][ T8213] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.304446][ T8213] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.329752][ T8213] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.356911][ T8213] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.402260][ T8213] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.559102][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.941'. [ 148.690993][ T8255] binder: BINDER_SET_CONTEXT_MGR already set [ 148.715480][ T8255] binder: 8254:8255 ioctl 4018620d 200000004a80 returned -16 [ 150.145513][ T8320] binder: 8319:8320 ioctl c0306201 200000000080 returned -14 [ 152.187130][ T8400] fuse: Unknown parameter 'grou00000000000000000000' [ 152.500063][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1000'. [ 152.779561][ T8421] fuse: Bad value for 'fd' [ 152.804295][ T8426] fuse: Unknown parameter 'grou00000000000000000000' [ 152.838344][ T8425] fuse: Invalid rootmode [ 153.148937][ T8437] fuse: Bad value for 'group_id' [ 153.459413][ T8450] fuse: Bad value for 'fd' [ 153.485867][ T8452] fuse: Unknown parameter 'grou00000000000000000000' [ 153.793308][ T8464] fuse: Bad value for 'group_id' [ 153.949545][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1025'. [ 153.967472][ T8471] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.976694][ T8471] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.985446][ T8471] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.994139][ T8471] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.011837][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1025'. [ 154.014190][ T8472] kvm: pic: non byte write [ 154.088418][ T8475] fuse: Bad value for 'fd' [ 154.149247][ T8477] fuse: Unknown parameter 'grou00000000000000000000' [ 154.383000][ T8489] fuse: Bad value for 'group_id' [ 154.525347][ T8496] fuse: Bad value for 'fd' [ 154.589328][ T8500] fuse: Unknown parameter 'group_i00000000000000000000' [ 154.658547][ T8504] fuse: Unknown parameter 'group_i00000000000000000000' [ 154.709260][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1040'. [ 154.864460][ T8512] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1043'. [ 154.987110][ T8516] binder: 8515:8516 ioctl c0306201 200000000080 returned -14 [ 155.246228][ T8522] fuse: Unknown parameter 'group_i00000000000000000000' [ 155.318293][ T8526] fuse: Unknown parameter 'group_i00000000000000000000' [ 155.484247][ T8534] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1053'. [ 155.928528][ T8553] fuse: Unknown parameter 'group_id00000000000000000000' [ 156.194242][ T8560] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1063'. [ 156.551328][ T8569] fuse: Unknown parameter 'group_i00000000000000000000' [ 156.719618][ T8578] fuse: Unknown parameter 'group_id00000000000000000000' [ 156.743666][ T8580] fuse: Unknown parameter 'use00000000000000000000' [ 157.337951][ T8603] fuse: Unknown parameter 'group_id00000000000000000000' [ 157.582344][ T8] IPVS: starting estimator thread 0... [ 157.677835][ T8619] IPVS: using max 19 ests per chain, 45600 per kthread [ 157.794135][ T8629] fuse: Bad value for 'user_id' [ 158.233586][ T8650] fuse: Unknown parameter 'group_id00000000000000000000' [ 158.283214][ T8652] fuse: Bad value for 'user_id' [ 158.375857][ T8659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1104'. [ 158.424645][ T8655] kvm: pic: non byte write [ 158.633803][ T8673] fuse: Unknown parameter 'grou00000000000000000000' [ 158.809179][ T8681] fuse: Bad value for 'user_id' [ 158.923908][ T8687] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1115'. [ 159.049279][ T8695] fuse: Bad value for 'user_id' [ 159.198272][ T8704] fuse: Unknown parameter 'grou00000000000000000000' [ 159.328950][ T8706] fuse: Bad value for 'fd' [ 159.513186][ T8714] fuse: Unknown parameter 'user_i00000000000000000000' [ 159.705938][ T8721] fuse: Bad value for 'fd' [ 159.836455][ T8725] fuse: Unknown parameter 'grou00000000000000000000' [ 159.847531][ T8729] fuse: Bad value for 'fd' [ 160.164482][ T8745] fuse: Unknown parameter 'user_i00000000000000000000' [ 160.273475][ T8751] fuse: Bad value for 'fd' [ 160.323211][ T8753] fuse: Unknown parameter 'use00000000000000000000' [ 160.332093][ T8755] fuse: Unknown parameter 'group_i00000000000000000000' [ 160.390683][ T8757] fuse: Bad value for 'fd' [ 160.696777][ T8772] fuse: Unknown parameter 'user_id00000000000000000000' [ 160.770884][ T8775] fuse: Bad value for 'group_id' [ 160.866431][ T8781] fuse: Bad value for 'fd' [ 160.952674][ T8778] kvm: pic: non byte write [ 160.980405][ T8784] fuse: Bad value for 'fd' [ 161.290578][ T8803] fuse: Unknown parameter 'user_id00000000000000000000' [ 161.420187][ T8805] fuse: Bad value for 'group_id' [ 161.511666][ T8811] fuse: Bad value for 'fd' [ 161.582063][ T5829] IPVS: starting estimator thread 0... [ 161.685352][ T8815] IPVS: using max 23 ests per chain, 55200 per kthread [ 161.866926][ T8817] kvm: pic: non byte write [ 162.173311][ T8831] fuse: Unknown parameter 'user_id00000000000000000000' [ 162.273988][ T8838] fuse: Bad value for 'group_id' [ 162.369276][ T8840] fuse: Bad value for 'fd' [ 162.502324][ T8849] IPVS: fo: FWM 3 0x00000003 - no destination available [ 162.736820][ T8861] fuse: Bad value for 'fd' [ 162.877217][ T8854] kvm: pic: non byte write [ 163.294774][ T8884] fuse: Bad value for 'fd' [ 163.385990][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 163.572261][ T8897] fuse: Invalid rootmode [ 163.608858][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.621018][ T8] usb 4-1: config 0 has no interfaces? [ 163.637717][ T8] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 163.647899][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.660941][ T8] usb 4-1: Product: syz [ 163.678748][ T8] usb 4-1: Manufacturer: syz [ 163.704851][ T8] usb 4-1: SerialNumber: syz [ 163.724994][ T8] usb 4-1: config 0 descriptor?? [ 163.766468][ T8906] fuse: Bad value for 'fd' [ 163.840471][ T8908] fuse: Bad value for 'fd' [ 163.961175][ T8] usb 4-1: USB disconnect, device number 4 [ 164.117592][ T8918] fuse: Invalid rootmode [ 164.122195][ T8921] fuse: Bad value for 'fd' [ 164.127990][ T8922] fuse: Invalid rootmode [ 164.227992][ T8925] fuse: Bad value for 'fd' [ 164.567390][ T8944] fuse: Bad value for 'rootmode' [ 164.573289][ T8945] fuse: Invalid rootmode [ 164.743549][ T8953] fuse: Bad value for 'fd' [ 165.163973][ T8973] fuse: Bad value for 'rootmode' [ 165.189366][ T8977] fuse: Unknown parameter '0x0000000000000003' [ 165.286206][ T8983] fuse: Invalid rootmode [ 165.333102][ T8987] fuse: Invalid rootmode [ 165.434992][ T8991] fuse: Bad value for 'user_id' [ 165.610572][ T9001] fuse: Bad value for 'rootmode' [ 165.658269][ T9004] fuse: Unknown parameter '0x0000000000000003' [ 165.829589][ T9011] fuse: Invalid rootmode [ 165.933033][ T9017] fuse: Bad value for 'fd' [ 166.137986][ T9027] fuse: Bad value for 'rootmode' [ 166.206129][ T9031] fuse: Unknown parameter '0x0000000000000003' [ 166.241987][ T9033] fuse: Bad value for 'rootmode' [ 166.333743][ T9037] fuse: Bad value for 'fd' [ 166.816330][ T9061] fuse: Unknown parameter '0x0000000000000003' [ 166.829142][ T9062] IPVS: fo: FWM 3 0x00000003 - no destination available [ 166.901166][ T9066] fuse: Bad value for 'fd' [ 166.902966][ T9065] fuse: Bad value for 'rootmode' [ 167.463317][ T9096] fuse: Bad value for 'rootmode' [ 167.618212][ T9101] fuse: Bad value for 'fd' [ 167.923302][ T9120] fuse: Unknown parameter 'use00000000000000000000' [ 168.127237][ T9131] fuse: Bad value for 'fd' [ 168.225455][ T9135] fuse: Unknown parameter 'use00000000000000000000' [ 168.523967][ T9153] fuse: Unknown parameter 'use00000000000000000000' [ 168.581108][ T9155] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.590179][ T9155] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.599127][ T9155] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.608004][ T9155] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.620169][ T9158] fuse: Unknown parameter 'fd0x0000000000000003' [ 168.801033][ T9165] fuse: Unknown parameter 'user_i00000000000000000000' [ 169.315229][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 169.364082][ T9183] fuse: Unknown parameter 'use00000000000000000000' [ 169.477753][ T9189] fuse: Unknown parameter 'fd0x0000000000000003' [ 169.528361][ T9] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 169.540596][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.559116][ T9191] fuse: Unknown parameter 'user_i00000000000000000000' [ 169.567011][ T9] usb 4-1: config 0 has no interface number 0 [ 169.578940][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 169.597448][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.616278][ T9] usb 4-1: Product: syz [ 169.625357][ T9] usb 4-1: Manufacturer: syz [ 169.630063][ T9] usb 4-1: SerialNumber: syz [ 169.639197][ T9] usb 4-1: config 0 descriptor?? [ 169.651531][ T9] yurex 4-1:0.50: Could not find endpoints [ 169.862328][ T28] usb 4-1: USB disconnect, device number 5 [ 169.974386][ T9205] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1327'. [ 170.367616][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1329'. [ 170.466741][ T9224] fuse: Unknown parameter 'group_i00000000000000000000' [ 170.494382][ T9226] fuse: Unknown parameter 'user_i00000000000000000000' [ 170.544325][ T9228] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1335'. [ 170.562872][ T9230] fuse: Unknown parameter 'user_i00000000000000000000' [ 170.705225][ T5811] IPVS: starting estimator thread 0... [ 170.795259][ T9237] IPVS: using max 18 ests per chain, 43200 per kthread [ 171.045479][ T5811] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 171.217624][ T9251] fuse: Unknown parameter 'group_i00000000000000000000' [ 171.240239][ T5811] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 171.248577][ T5811] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.259114][ T5811] usb 2-1: config 0 has no interface number 0 [ 171.270845][ T5811] usb 2-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 171.291837][ T5811] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 171.301034][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.310249][ T9254] fuse: Unknown parameter 'user_id00000000000000000000' [ 171.310720][ T5811] usb 2-1: Product: syz [ 171.322648][ T5811] usb 2-1: Manufacturer: syz [ 171.330644][ T5811] usb 2-1: SerialNumber: syz [ 171.339712][ T5811] usb 2-1: config 0 descriptor?? [ 171.357962][ T5811] yurex 2-1:0.50: Could not find endpoints [ 171.381295][ T9256] fuse: Unknown parameter 'user_id00000000000000000000' [ 171.563378][ T28] usb 2-1: USB disconnect, device number 4 [ 172.103172][ T9264] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1347'. [ 172.317866][ T9178] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 172.521919][ T9272] fuse: Unknown parameter 'group_id00000000000000000000' [ 172.669685][ T9277] fuse: Unknown parameter '0x0000000000000003' [ 172.691443][ T9280] fuse: Bad value for 'rootmode' [ 172.864208][ T9288] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1356'. [ 172.997000][ T9293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1360'. [ 173.051323][ T9297] fuse: Unknown parameter 'group_id00000000000000000000' [ 173.133604][ T9298] kvm: pic: non byte write [ 173.243871][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805efcc000: rx timeout, send abort [ 173.744010][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805efcc400: rx timeout, send abort [ 173.752509][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805efcc000: abort rx timeout. Force session deactivation [ 173.779773][ T9320] fuse: Unknown parameter 'group_id00000000000000000000' [ 174.014166][ T9329] syzkaller0: entered promiscuous mode [ 174.024353][ T9329] syzkaller0: entered allmulticast mode [ 174.143055][ T9338] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1379'. [ 174.252339][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805efcc400: abort rx timeout. Force session deactivation [ 174.305497][ T9346] fuse: Bad value for 'fd' [ 174.306916][ T9345] fuse: Bad value for 'user_id' [ 174.609007][ T9356] fuse: Bad value for 'fd' [ 174.810829][ T9365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1393'. [ 174.919994][ T9370] fuse: Unknown parameter '0x0000000000000004' [ 175.341906][ T9391] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1403'. [ 176.419580][ T9430] fuse: Unknown parameter '0x0000000000000003' [ 177.373381][ T9461] fuse: Unknown parameter '0x0000000000000003' [ 177.585186][ T787] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 177.787186][ T787] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 177.801830][ T787] usb 4-1: config 0 has no interface number 0 [ 177.808441][ T787] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 177.822826][ T787] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 177.833058][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.841649][ T787] usb 4-1: Product: syz [ 177.846378][ T787] usb 4-1: Manufacturer: syz [ 177.861869][ T787] usb 4-1: SerialNumber: syz [ 177.867430][ T9474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1433'. [ 177.882821][ T787] usb 4-1: config 0 descriptor?? [ 177.893239][ T787] yurex 4-1:0.50: Could not find endpoints [ 178.115124][ T787] usb 4-1: USB disconnect, device number 6 [ 178.426582][ T9483] fuse: Unknown parameter 'user_i00000000000000000000' [ 178.560322][ T9488] fuse: Unknown parameter '0x0000000000000003' [ 178.743167][ T9495] syzkaller0: entered promiscuous mode [ 178.759643][ T9495] syzkaller0: entered allmulticast mode [ 178.766768][ T9497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1443'. [ 178.968253][ T9505] fuse: Unknown parameter 'fd0x0000000000000004' [ 179.072818][ T9510] fuse: Unknown parameter '0x0000000000000003' [ 179.337598][ T9518] kvm: pic: non byte write [ 179.375663][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 179.479843][ T9526] syzkaller0: entered promiscuous mode [ 179.488877][ T9526] syzkaller0: entered allmulticast mode [ 179.554247][ T9530] fuse: Unknown parameter 'fd0x0000000000000004' [ 179.579336][ T9] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 179.596424][ T9] usb 1-1: config 0 has no interface number 0 [ 179.616285][ T9] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 179.634351][ T9532] fuse: Unknown parameter 'user_id00000000000000000000' [ 179.639851][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 179.655925][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.664016][ T9] usb 1-1: Product: syz [ 179.668352][ T9] usb 1-1: Manufacturer: syz [ 179.673527][ T9] usb 1-1: SerialNumber: syz [ 179.685718][ T9] usb 1-1: config 0 descriptor?? [ 179.698610][ T9] yurex 1-1:0.50: Could not find endpoints [ 179.902383][ T787] usb 1-1: USB disconnect, device number 6 [ 180.012129][ T9541] kvm: pic: non byte write [ 180.462607][ T9554] syzkaller0: entered promiscuous mode [ 180.470531][ T9554] syzkaller0: entered allmulticast mode [ 180.667366][ T9559] syzkaller0: entered promiscuous mode [ 180.673116][ T9559] syzkaller0: entered allmulticast mode [ 181.545321][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 181.747397][ T9] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 181.764791][ T9] usb 2-1: config 0 has no interface number 0 [ 181.774174][ T9] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 181.791973][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 181.801445][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.813046][ T9] usb 2-1: Product: syz [ 181.817397][ T9] usb 2-1: Manufacturer: syz [ 181.822218][ T9] usb 2-1: SerialNumber: syz [ 181.831086][ T9] usb 2-1: config 0 descriptor?? [ 181.847458][ T9] yurex 2-1:0.50: Could not find endpoints [ 181.969349][ T9580] syzkaller0: entered promiscuous mode [ 181.974924][ T9580] syzkaller0: entered allmulticast mode [ 182.058107][ T5829] usb 2-1: USB disconnect, device number 5 [ 182.090746][ T9582] fuse: Unknown parameter 'fd0x0000000000000003' [ 182.193587][ T9586] fuse: Unknown parameter '0x0000000000000003' [ 182.622992][ T9596] kvm: pic: non byte write [ 182.852245][ T9605] fuse: Unknown parameter 'fd0x0000000000000003' [ 182.861627][ T9603] syzkaller0: entered promiscuous mode [ 182.867890][ T9603] syzkaller0: entered allmulticast mode [ 182.940525][ T9608] fuse: Unknown parameter '0x0000000000000003' [ 183.104196][ T9614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1493'. [ 183.372899][ T9624] fuse: Unknown parameter 'fd0x0000000000000003' [ 183.398655][ T787] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 183.483373][ T9629] syzkaller0: entered promiscuous mode [ 183.489699][ T9629] syzkaller0: entered allmulticast mode [ 183.569035][ T9626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1499'. [ 183.597276][ T787] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 183.609081][ T787] usb 2-1: config 0 has no interface number 0 [ 183.635243][ T787] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.656597][ T787] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 183.688417][ T787] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 183.712132][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.741276][ T787] usb 2-1: Product: syz [ 183.745777][ T787] usb 2-1: Manufacturer: syz [ 183.750394][ T787] usb 2-1: SerialNumber: syz [ 183.769377][ T787] usb 2-1: config 0 descriptor?? [ 183.788116][ T787] yurex 2-1:0.50: Could not submitting URB [ 183.797397][ T787] yurex: probe of 2-1:0.50 failed with error -5 [ 183.994428][ T787] usb 2-1: USB disconnect, device number 6 [ 184.577944][ T9660] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1512'. [ 184.801201][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1514'. [ 184.918316][ T9676] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.927087][ T9676] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.935401][ T9676] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.943592][ T9676] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.100937][ T9684] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1521'. [ 185.622040][ T9692] binder: 9691:9692 ioctl c0306201 200000000080 returned -14 [ 185.813761][ T9703] syzkaller0: entered promiscuous mode [ 185.819486][ T9703] syzkaller0: entered allmulticast mode [ 185.893156][ T9701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1527'. [ 186.048439][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1531'. [ 186.291269][ T9722] binder: 9721:9722 ioctl c0306201 200000000080 returned -14 [ 186.324713][ T9722] binder: 9721:9722 ioctl 4018620d 0 returned -22 [ 186.712288][ T9739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1543'. [ 187.475192][ T9761] fuse: Unknown parameter 'fd0x0000000000000003' [ 187.566450][ T9765] binder: 9764:9765 ioctl c0306201 200000000080 returned -14 [ 187.580668][ T9765] binder: 9764:9765 ioctl 4018620d 0 returned -22 [ 187.785215][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1558'. [ 187.798119][ T9774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1558'. [ 187.962823][ T9780] fuse: Unknown parameter 'fd0x0000000000000003' [ 188.157519][ T9784] __nla_validate_parse: 2 callbacks suppressed [ 188.157534][ T9784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1563'. [ 188.279155][ T9793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1565'. [ 188.498829][ T9804] fuse: Unknown parameter 'fd0x0000000000000003' [ 188.808348][ T9824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1575'. [ 188.973587][ T9828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1578'. [ 188.985198][ T9830] binder: 9829:9830 ioctl c0306201 200000000080 returned -14 [ 189.009509][ T9830] binder: 9829:9830 ioctl 4018620d 0 returned -22 [ 189.273734][ T9843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1585'. [ 189.542265][ T9851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1588'. [ 189.721094][ T9867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1591'. [ 190.012909][ T9881] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1595'. [ 190.335541][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1598'. [ 190.454663][ T9898] binder: 9897:9898 ioctl c0306201 200000000080 returned -14 [ 190.465738][ T9898] binder: 9897:9898 ioctl c0306201 0 returned -14 [ 190.630475][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1602'. [ 191.265263][ T787] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 191.355207][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 191.355536][ T5086] Bluetooth: hci1: command 0x0406 tx timeout [ 191.365215][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 191.449583][ T787] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 191.461634][ T787] usb 4-1: config 0 has no interface number 0 [ 191.471049][ T787] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 191.507365][ T787] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 191.516865][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.525232][ T787] usb 4-1: Product: syz [ 191.529406][ T787] usb 4-1: Manufacturer: syz [ 191.533985][ T787] usb 4-1: SerialNumber: syz [ 191.554306][ T787] usb 4-1: config 0 descriptor?? [ 191.562580][ T787] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 191.787896][ T5829] usb 4-1: USB disconnect, device number 7 [ 191.806540][ T5829] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 192.188178][ T9943] binder: 9942:9943 ioctl c0306201 200000000080 returned -14 [ 192.200251][ T9943] binder: 9942:9943 ioctl c0306201 0 returned -14 [ 192.883105][ T9968] kvm: pic: non byte write [ 192.997420][ T28] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 193.187967][ T28] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 193.203545][ T28] usb 4-1: config 0 has no interface number 0 [ 193.209787][ T28] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.224773][ T28] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 193.234145][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.235931][ T9978] __nla_validate_parse: 3 callbacks suppressed [ 193.235943][ T9978] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1628'. [ 193.261295][ T28] usb 4-1: Product: syz [ 193.265581][ T28] usb 4-1: Manufacturer: syz [ 193.270199][ T28] usb 4-1: SerialNumber: syz [ 193.282077][ T28] usb 4-1: config 0 descriptor?? [ 193.300439][ T28] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 193.517327][ T8] usb 4-1: USB disconnect, device number 8 [ 193.536305][ T8] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 193.690113][ T9994] binder: 9993:9994 ioctl c0306201 200000000080 returned -14 [ 193.700257][ T9994] binder: 9993:9994 ioctl c0306201 0 returned -14 [ 193.878653][T10000] netlink: 'syz.1.1637': attribute type 1 has an invalid length. [ 193.904134][T10000] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.950062][T10000] bond1: (slave veth11): Enslaving as a backup interface with a down link [ 193.986096][T10000] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 194.008084][T10000] netlink: 'syz.1.1637': attribute type 10 has an invalid length. [ 194.008528][ T2979] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 194.020461][T10000] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1637'. [ 194.047923][T10000] dummy0: entered promiscuous mode [ 194.054884][T10000] bond1: (slave dummy0): Removing an active aggregator [ 194.063065][T10000] bond1: (slave dummy0): Releasing backup interface [ 194.415982][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.422316][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.481041][T10016] kvm: pic: non byte write [ 195.074119][T10043] binder: 10042:10043 ioctl c0306201 200000000080 returned -14 [ 195.665447][T10060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1663'. [ 195.805436][T10063] kvm: pic: non byte write [ 196.015412][T10074] netlink: 'syz.1.1669': attribute type 1 has an invalid length. [ 196.040961][T10074] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.067280][T10074] bond2: (slave veth13): Enslaving as a backup interface with a down link [ 196.081682][T10074] netlink: 'syz.1.1669': attribute type 10 has an invalid length. [ 196.090403][T10074] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1669'. [ 196.674066][T10084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1673'. [ 196.834554][T10090] binder: 10089:10090 ioctl c0306201 200000000080 returned -14 [ 197.022525][T10097] syzkaller0: entered promiscuous mode [ 197.030717][T10097] syzkaller0: entered allmulticast mode [ 197.273575][T10106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1682'. [ 197.871710][T10126] syzkaller0: entered promiscuous mode [ 197.878053][T10126] syzkaller0: entered allmulticast mode [ 198.342356][T10144] syzkaller0: entered promiscuous mode [ 198.348557][T10144] syzkaller0: entered allmulticast mode [ 198.672881][T10157] syzkaller0: entered promiscuous mode [ 198.679409][T10157] syzkaller0: entered allmulticast mode [ 198.967445][T10167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1705'. [ 199.464978][T10189] syzkaller0: entered promiscuous mode [ 199.471972][T10189] syzkaller0: entered allmulticast mode [ 199.613643][T10191] warning: `syz.1.1714' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 200.059417][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1722'. [ 200.078849][T10211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1722'. [ 200.138314][T10211] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.147583][T10211] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.157455][T10211] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.166775][T10211] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.188084][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1722'. [ 200.202082][T10211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1722'. [ 200.246716][T10219] syzkaller0: entered promiscuous mode [ 200.252374][T10219] syzkaller0: entered allmulticast mode [ 200.326617][T10221] binder: 10220:10221 ioctl c0306201 200000000080 returned -14 [ 200.846552][T10248] netlink: 'syz.1.1733': attribute type 1 has an invalid length. [ 200.851944][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1734'. [ 201.472972][T10268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1742'. [ 201.482150][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1742'. [ 201.493246][T10268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1742'. [ 201.502468][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1742'. [ 202.122906][T10294] netlink: 'syz.3.1753': attribute type 1 has an invalid length. [ 202.182482][T10294] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.242790][T10294] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 202.273766][T10294] netlink: 'syz.3.1753': attribute type 10 has an invalid length. [ 202.287658][T10294] dummy0: entered promiscuous mode [ 202.294827][T10294] bond1: (slave dummy0): Releasing backup interface [ 202.671002][T10321] ieee802154 phy0 wpan0: encryption failed: -90 [ 202.748694][T10325] netlink: 'syz.3.1767': attribute type 1 has an invalid length. [ 202.796299][T10325] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.832645][T10325] dummy0: left promiscuous mode [ 202.851474][T10325] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 202.863971][T10325] netlink: 'syz.3.1767': attribute type 10 has an invalid length. [ 202.872242][T10325] dummy0: entered promiscuous mode [ 202.880625][T10325] bond2: (slave dummy0): Releasing backup interface [ 203.067621][T10340] netlink: 'syz.0.1771': attribute type 1 has an invalid length. [ 203.589881][T10370] dummy0: left promiscuous mode [ 203.648796][T10363] netlink: 'syz.1.1780': attribute type 10 has an invalid length. [ 203.657316][T10363] dummy0: entered promiscuous mode [ 204.613960][T10408] netlink: 'syz.2.1794': attribute type 10 has an invalid length. [ 204.631740][T10408] __nla_validate_parse: 15 callbacks suppressed [ 204.631754][T10408] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1794'. [ 204.665344][T10408] dummy0: entered promiscuous mode [ 205.547476][T10448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1805'. [ 205.669029][T10453] syzkaller0: entered promiscuous mode [ 205.674609][T10453] syzkaller0: entered allmulticast mode [ 205.813177][T10460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1811'. [ 206.286079][T10483] syzkaller0: entered promiscuous mode [ 206.299367][T10483] syzkaller0: entered allmulticast mode [ 206.407756][T10482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1818'. [ 207.562818][T10517] syzkaller0: entered promiscuous mode [ 207.572908][T10517] syzkaller0: entered allmulticast mode [ 207.708312][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1831'. [ 208.111595][T10536] tipc: Started in network mode [ 208.128438][T10536] tipc: Node identity f274e2016b2a, cluster identity 4711 [ 208.145567][T10536] tipc: Enabled bearer , priority 0 [ 208.165963][T10536] syzkaller0: entered promiscuous mode [ 208.172652][T10536] syzkaller0: entered allmulticast mode [ 208.196107][T10535] tipc: Resetting bearer [ 208.240244][T10535] tipc: Disabling bearer [ 208.389791][T10549] syzkaller0: entered promiscuous mode [ 208.395696][T10549] syzkaller0: entered allmulticast mode [ 209.141534][T10573] syzkaller0: entered promiscuous mode [ 209.150029][T10573] syzkaller0: entered allmulticast mode [ 209.562598][T10595] team0: entered allmulticast mode [ 209.569313][T10595] team_slave_0: entered allmulticast mode [ 209.575507][T10595] team_slave_1: entered allmulticast mode [ 209.585010][T10595] team0: left allmulticast mode [ 209.590284][T10595] team_slave_0: left allmulticast mode [ 209.596253][T10595] team_slave_1: left allmulticast mode [ 209.788660][T10608] syzkaller0: entered promiscuous mode [ 209.799033][T10608] syzkaller0: entered allmulticast mode [ 209.870557][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1865'. [ 210.068181][T10623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1871'. [ 210.534917][T10639] syzkaller0: entered promiscuous mode [ 210.541849][T10639] syzkaller0: entered allmulticast mode [ 210.724890][T10645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1881'. [ 210.796761][T10648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1882'. [ 210.984506][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1883'. [ 211.071368][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1886'. [ 211.081028][T10661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1886'. [ 211.090745][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1886'. [ 211.099846][T10661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1886'. [ 211.235207][T10666] syzkaller0: entered promiscuous mode [ 211.240826][T10666] syzkaller0: entered allmulticast mode [ 211.740735][T10678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1893'. [ 212.054382][T10691] syzkaller0: entered promiscuous mode [ 212.080612][T10691] syzkaller0: entered allmulticast mode [ 214.907188][T10817] __nla_validate_parse: 22 callbacks suppressed [ 214.907205][T10817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1940'. [ 215.118590][T10825] tipc: Started in network mode [ 215.144152][T10825] tipc: Node identity 7ae0241ac93b, cluster identity 4711 [ 215.168757][T10825] tipc: Enabled bearer , priority 0 [ 215.480079][ T1205] hid-generic 0005:4C4A:0006.0004: item fetching failed at offset 0/1 [ 215.527172][ T1205] hid-generic: probe of 0005:4C4A:0006.0004 failed with error -22 [ 215.918484][T10852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1957'. [ 215.931550][T10830] tipc: Disabling bearer [ 216.183860][T10868] netlink: 'syz.1.1960': attribute type 1 has an invalid length. [ 216.269219][T10868] 8021q: adding VLAN 0 to HW filter on device bond3 [ 216.370310][T10868] dummy0: left promiscuous mode [ 216.410852][T10868] netlink: 'syz.1.1960': attribute type 10 has an invalid length. [ 216.429474][T10868] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1960'. [ 216.444236][T10868] dummy0: entered promiscuous mode [ 216.690461][T10885] team0: entered allmulticast mode [ 216.711798][T10885] team_slave_0: entered allmulticast mode [ 216.738475][T10885] team_slave_1: entered allmulticast mode [ 216.761446][T10883] team0: left allmulticast mode [ 216.783745][T10883] team_slave_0: left allmulticast mode [ 216.820422][T10883] team_slave_1: left allmulticast mode [ 216.837730][T10893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1967'. [ 216.974183][T10896] tipc: Started in network mode [ 216.991361][T10896] tipc: Node identity de64902c7745, cluster identity 4711 [ 217.036717][T10896] tipc: Enabled bearer , priority 0 [ 217.154280][T10905] syzkaller0: entered promiscuous mode [ 217.162993][T10905] syzkaller0: entered allmulticast mode [ 217.644562][T10924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1978'. [ 217.741521][T10902] tipc: Disabling bearer [ 217.880659][T10936] dummy0: left promiscuous mode [ 217.908988][T10938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1981'. [ 217.928010][T10935] netlink: 'syz.1.1980': attribute type 10 has an invalid length. [ 217.941140][T10935] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1980'. [ 217.951506][T10935] dummy0: entered promiscuous mode [ 218.135656][T10942] binder: 10941:10942 ioctl c0306201 200000000080 returned -14 [ 218.402799][T10952] raw_sendmsg: syz.2.1986 forgot to set AF_INET. Fix it! [ 218.501498][T10955] tipc: Started in network mode [ 218.506704][T10955] tipc: Node identity 96bffae278ed, cluster identity 4711 [ 218.516806][T10955] tipc: Enabled bearer , priority 0 [ 218.795797][T10961] netlink: 'syz.3.1990': attribute type 10 has an invalid length. [ 218.803897][T10961] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1990'. [ 218.869160][T10961] team0: Port device geneve0 added [ 218.887719][T10959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1988'. [ 219.054622][T10970] netlink: 'syz.0.1992': attribute type 10 has an invalid length. [ 219.064543][T10970] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1992'. [ 219.074570][T10970] dummy0: entered promiscuous mode [ 219.321446][T10955] tipc: Disabling bearer [ 219.506399][T10987] binder: 10985:10987 ioctl c0306201 200000000080 returned -14 [ 220.078040][T11010] syzkaller0: entered promiscuous mode [ 220.083660][T11010] syzkaller0: entered allmulticast mode [ 220.153800][T11014] __nla_validate_parse: 3 callbacks suppressed [ 220.153811][T11014] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2008'. [ 220.406019][T11026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2010'. [ 220.513658][T11030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2012'. [ 220.840831][T11046] syzkaller0: entered promiscuous mode [ 220.855399][T11046] syzkaller0: entered allmulticast mode [ 220.920141][T11051] binder: 11049:11051 ioctl c0306201 200000000080 returned -14 [ 221.139629][T11065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2025'. [ 221.793836][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2037'. [ 221.814506][T11100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2039'. [ 221.826862][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2037'. [ 221.843613][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2037'. [ 221.858671][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2037'. [ 222.098393][T11112] dummy0: left promiscuous mode [ 222.124199][T11112] netlink: 'syz.1.2042': attribute type 10 has an invalid length. [ 222.135433][T11112] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2042'. [ 222.144635][T11112] dummy0: entered promiscuous mode [ 222.450899][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 222.498255][T11124] binder: 11123:11124 ioctl c0306201 200000000080 returned -14 [ 222.734438][T11134] syzkaller0: entered promiscuous mode [ 222.740496][T11134] syzkaller0: entered allmulticast mode [ 222.880341][T11140] dummy0: left promiscuous mode [ 222.889311][T11140] netlink: 'syz.3.2052': attribute type 10 has an invalid length. [ 222.902032][T11140] dummy0: entered promiscuous mode [ 223.697384][T11164] netlink: 'syz.3.2063': attribute type 10 has an invalid length. [ 223.752586][T11166] netlink: 'syz.3.2064': attribute type 1 has an invalid length. [ 223.778482][T11166] 8021q: adding VLAN 0 to HW filter on device bond3 [ 223.807004][T11166] dummy0: left promiscuous mode [ 223.821216][T11166] netlink: 'syz.3.2064': attribute type 10 has an invalid length. [ 223.831131][T11166] dummy0: entered promiscuous mode [ 224.329594][T11178] binder: 11176:11178 ioctl c0306201 200000000080 returned -14 [ 224.349293][T11178] binder: 11176:11178 ioctl c0306201 0 returned -14 [ 224.630888][T11191] netlink: 'syz.3.2074': attribute type 1 has an invalid length. [ 224.666911][T11191] 8021q: adding VLAN 0 to HW filter on device bond4 [ 224.701663][T11191] dummy0: left promiscuous mode [ 224.722900][T11191] netlink: 'syz.3.2074': attribute type 10 has an invalid length. [ 224.731269][T11191] dummy0: entered promiscuous mode [ 225.346301][T11212] __nla_validate_parse: 11 callbacks suppressed [ 225.346376][T11212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2081'. [ 225.366994][T11118] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.572759][T11223] binder: 11222:11223 ioctl c0306201 200000000080 returned -14 [ 225.576200][T11221] syzkaller0: entered promiscuous mode [ 225.590909][T11221] syzkaller0: entered allmulticast mode [ 225.592614][T11223] binder: 11222:11223 ioctl c0306201 0 returned -14 [ 225.607851][T11221] netem: change failed [ 225.620955][T11221] tipc: Enabled bearer , priority 0 [ 225.642614][T11220] tipc: Resetting bearer [ 225.697137][T11220] tipc: Disabling bearer [ 226.680296][T11235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 226.843791][T11269] syzkaller0: entered promiscuous mode [ 226.853693][T11269] syzkaller0: entered allmulticast mode [ 226.919470][T11274] binder: 11273:11274 ioctl c0306201 200000000080 returned -14 [ 226.938476][T11274] binder: 11273:11274 ioctl c0306201 0 returned -14 [ 228.777302][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2117'. [ 228.790031][T11309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2117'. [ 228.962024][T11315] binder: 11314:11315 ioctl c0306201 200000000080 returned -14 [ 229.420452][T11332] netlink: 'syz.3.2126': attribute type 29 has an invalid length. [ 229.429268][T11332] netlink: 'syz.3.2126': attribute type 29 has an invalid length. [ 229.445374][T11332] netlink: 'syz.3.2126': attribute type 29 has an invalid length. [ 229.841697][T11344] netlink: 'syz.0.2131': attribute type 1 has an invalid length. [ 229.897918][T11344] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.974066][T11344] dummy0: left promiscuous mode [ 230.007456][T11344] netlink: 'syz.0.2131': attribute type 10 has an invalid length. [ 230.018047][T11344] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2131'. [ 230.028739][T11344] dummy0: entered promiscuous mode [ 231.152307][T11416] netlink: 'syz.3.2161': attribute type 10 has an invalid length. [ 231.165347][T11416] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2161'. [ 231.298615][T11422] syzkaller0: entered promiscuous mode [ 231.304104][T11422] syzkaller0: entered allmulticast mode [ 231.437092][T11428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2169'. [ 231.538561][T11428] syzkaller0: entered promiscuous mode [ 231.544073][T11428] syzkaller0: entered allmulticast mode [ 231.649021][T11433] tc action pedit 'at' offset 6 out of bounds [ 231.998583][T11446] syzkaller0: entered promiscuous mode [ 232.004225][T11446] syzkaller0: entered allmulticast mode [ 232.166736][T11450] dummy0: left promiscuous mode [ 232.183005][T11450] netlink: 'syz.3.2179': attribute type 10 has an invalid length. [ 232.204214][T11450] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2179'. [ 232.223640][T11450] dummy0: entered promiscuous mode [ 232.481834][T11466] syzkaller0: entered promiscuous mode [ 232.487501][T11466] syzkaller0: entered allmulticast mode [ 232.496952][T11467] netlink: 'syz.1.2185': attribute type 10 has an invalid length. [ 232.504961][T11467] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2185'. [ 232.537026][T11467] team0: Port device geneve0 added [ 232.832961][T11480] dummy0: left promiscuous mode [ 232.845788][T11480] netlink: 'syz.2.2193': attribute type 10 has an invalid length. [ 232.857916][T11480] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2193'. [ 232.871755][T11480] dummy0: entered promiscuous mode [ 233.151701][T11489] syzkaller0: entered promiscuous mode [ 233.158236][T11489] syzkaller0: entered allmulticast mode [ 233.719719][T11510] syzkaller0: entered promiscuous mode [ 233.747654][T11510] syzkaller0: entered allmulticast mode [ 233.979506][T11528] team0: entered allmulticast mode [ 233.984687][T11528] team_slave_0: entered allmulticast mode [ 233.991086][T11528] team_slave_1: entered allmulticast mode [ 233.997949][T11527] team0: left allmulticast mode [ 234.002827][T11527] team_slave_0: left allmulticast mode [ 234.012066][T11527] team_slave_1: left allmulticast mode [ 234.182741][T11536] syzkaller0: entered promiscuous mode [ 234.189206][T11536] syzkaller0: entered allmulticast mode [ 234.420181][T11545] syzkaller0: entered promiscuous mode [ 234.426116][T11545] syzkaller0: entered allmulticast mode [ 234.681453][T11563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2233'. [ 234.693249][T11563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2233'. [ 235.063627][T11586] syzkaller0: entered promiscuous mode [ 235.070693][T11586] syzkaller0: entered allmulticast mode [ 236.937927][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2263'. [ 237.013619][T11665] netlink: 'syz.3.2267': attribute type 10 has an invalid length. [ 237.022627][T11665] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2267'. [ 237.114816][T11666] syzkaller0: entered promiscuous mode [ 237.124531][T11666] syzkaller0: entered allmulticast mode [ 237.465411][T11690] syzkaller0: entered promiscuous mode [ 237.470947][T11690] syzkaller0: entered allmulticast mode [ 237.766476][T11704] syzkaller0: entered promiscuous mode [ 237.774799][T11704] syzkaller0: entered allmulticast mode [ 240.337868][T11774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2305'. [ 241.096764][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2314'. [ 241.204445][T11804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2317'. [ 241.225906][T11803] syzkaller0: entered promiscuous mode [ 241.245334][T11803] syzkaller0: entered allmulticast mode [ 241.714570][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2326'. [ 242.588868][T11852] syzkaller0: entered promiscuous mode [ 242.594418][T11852] syzkaller0: entered allmulticast mode [ 242.846008][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 242.860273][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 242.868285][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 242.878344][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 242.897367][ T5773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 242.907240][ T5773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 244.537443][T11883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2345'. [ 245.037944][ T5780] Bluetooth: hci2: command tx timeout [ 246.197963][ T2979] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.225151][ T2979] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.351273][ T2979] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.352317][T11909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2351'. [ 246.361939][ T2979] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.470816][ T2979] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.482745][ T2979] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.507953][T11913] netlink: 'syz.0.2353': attribute type 1 has an invalid length. [ 246.518108][T11913] netlink: 'syz.0.2353': attribute type 3 has an invalid length. [ 246.537165][T11913] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2353'. [ 246.572712][ T2979] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.596835][ T2979] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.613321][T11921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2354'. [ 246.629450][T11858] chnl_net:caif_netlink_parms(): no params data found [ 246.922609][ T2979] tipc: Left network mode [ 247.004765][T11858] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.025499][T11858] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.032764][T11858] bridge_slave_0: entered allmulticast mode [ 247.055411][T11858] bridge_slave_0: entered promiscuous mode [ 247.078153][T11858] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.102994][T11858] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.113563][T11858] bridge_slave_1: entered allmulticast mode [ 247.120235][ T5780] Bluetooth: hci2: command tx timeout [ 247.130878][T11858] bridge_slave_1: entered promiscuous mode [ 247.355238][T11952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2361'. [ 247.384920][T11858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.477526][T11858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.696376][T11964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2363'. [ 249.195315][ T5780] Bluetooth: hci2: command tx timeout [ 249.242401][T11858] team0: Port device team_slave_0 added [ 249.267898][T11970] netlink: 'syz.0.2362': attribute type 39 has an invalid length. [ 249.304742][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2362'. [ 249.353842][T11974] netlink: 'syz.1.2364': attribute type 1 has an invalid length. [ 249.363094][T11974] netlink: 'syz.1.2364': attribute type 3 has an invalid length. [ 249.376725][T11974] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2364'. [ 249.436849][T11858] team0: Port device team_slave_1 added [ 249.534887][T11858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.567026][T11858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.624643][T11858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.740551][T11858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.767544][T11858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.804649][T11858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.070962][T12004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2370'. [ 250.229749][T11858] hsr_slave_0: entered promiscuous mode [ 250.252437][T11858] hsr_slave_1: entered promiscuous mode [ 250.260993][T11858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.271148][T11858] Cannot create hsr debugfs directory [ 250.458784][T12020] netlink: 'syz.3.2373': attribute type 1 has an invalid length. [ 250.490438][T12017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2371'. [ 250.525182][T12020] netlink: 'syz.3.2373': attribute type 3 has an invalid length. [ 250.532958][T12020] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2373'. [ 250.627693][ T2979] hsr_slave_0: left promiscuous mode [ 250.652119][ T2979] hsr_slave_1: left promiscuous mode [ 250.664387][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.676931][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.696021][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.703442][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.712198][ T2979] bridge_slave_1: left allmulticast mode [ 250.718599][ T2979] bridge_slave_1: left promiscuous mode [ 250.725951][ T2979] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.742428][ T2979] bridge_slave_0: left allmulticast mode [ 250.749572][ T2979] bridge_slave_0: left promiscuous mode [ 250.760479][ T2979] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.789026][ T2979] veth1_macvtap: left promiscuous mode [ 250.794815][ T2979] veth0_macvtap: left promiscuous mode [ 250.801629][ T2979] veth1_vlan: left promiscuous mode [ 250.807190][ T2979] veth0_vlan: left promiscuous mode [ 251.279217][ T5780] Bluetooth: hci2: command tx timeout [ 251.439188][ T2979] team0 (unregistering): Port device team_slave_1 removed [ 251.481162][ T2979] team0 (unregistering): Port device team_slave_0 removed [ 251.518122][ T2979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.554852][ T2979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.833373][ T2979] bond0 (unregistering): Released all slaves [ 251.993301][T12031] dummy0: left promiscuous mode [ 252.013371][T12034] netlink: 'syz.1.2376': attribute type 10 has an invalid length. [ 252.021269][T12034] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2376'. [ 252.031529][T12034] dummy0: entered promiscuous mode [ 252.200977][T12047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2379'. [ 252.494539][T12057] team0: entered allmulticast mode [ 252.507388][T12057] team_slave_0: entered allmulticast mode [ 252.514991][T12057] team_slave_1: entered allmulticast mode [ 252.533383][T12057] geneve0: entered allmulticast mode [ 252.546751][T12056] team0: left allmulticast mode [ 252.555349][T12056] team_slave_0: left allmulticast mode [ 252.561863][T12056] team_slave_1: left allmulticast mode [ 252.592220][T12056] geneve0: left allmulticast mode [ 253.028566][T12080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2385'. [ 253.081909][T12083] dummy0: left promiscuous mode [ 253.112580][T12085] netlink: 'syz.1.2386': attribute type 10 has an invalid length. [ 253.136516][T12085] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2386'. [ 253.152437][T12085] dummy0: entered promiscuous mode [ 253.197580][ T2979] IPVS: stop unused estimator thread 0... [ 253.489799][T11858] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 253.512723][T11858] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 253.533208][T11858] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 253.553478][T11858] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 253.645795][T12104] team0: entered allmulticast mode [ 253.650953][T12104] team_slave_0: entered allmulticast mode [ 253.681108][T12104] team_slave_1: entered allmulticast mode [ 253.691186][T12104] geneve0: entered allmulticast mode [ 253.701789][T12103] team0: left allmulticast mode [ 253.706919][T12103] team_slave_0: left allmulticast mode [ 253.713162][T12103] team_slave_1: left allmulticast mode [ 253.720104][T12103] geneve0: left allmulticast mode [ 253.951691][T11858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.992408][T12124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2395'. [ 254.088365][T11858] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.132607][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.139819][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.202929][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.210131][ T4250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.715546][T12155] team0: entered allmulticast mode [ 254.721257][T12155] team_slave_0: entered allmulticast mode [ 254.731636][T12155] team_slave_1: entered allmulticast mode [ 254.738871][T12155] geneve0: entered allmulticast mode [ 254.783465][T12154] team0: left allmulticast mode [ 254.797711][T12154] team_slave_0: left allmulticast mode [ 254.810727][T12154] team_slave_1: left allmulticast mode [ 254.824251][T12154] geneve0: left allmulticast mode [ 255.231224][T11858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.280787][T12185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2407'. [ 255.445982][T11858] veth0_vlan: entered promiscuous mode [ 255.464253][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2410'. [ 255.483018][T11858] veth1_vlan: entered promiscuous mode [ 255.559852][T11858] veth0_macvtap: entered promiscuous mode [ 255.587621][T11858] veth1_macvtap: entered promiscuous mode [ 255.653092][T11858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.674135][T11858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.690448][T11858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.702154][T11858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.717279][T11858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.731530][T11858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.745558][T11858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.752967][T12198] team0: entered allmulticast mode [ 255.760672][T12198] team_slave_0: entered allmulticast mode [ 255.767414][T12198] team_slave_1: entered allmulticast mode [ 255.773267][T12198] geneve0: entered allmulticast mode [ 255.781950][T12194] team0: left allmulticast mode [ 255.787756][T12194] team_slave_0: left allmulticast mode [ 255.793310][T12194] team_slave_1: left allmulticast mode [ 255.799181][T12194] geneve0: left allmulticast mode [ 255.848322][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.854793][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.941251][T11858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.962464][T11858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.974956][T11858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.992632][T11858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.021756][T11858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.116571][T11858] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.145688][T11858] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.154427][T11858] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.179612][T11858] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.380618][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.419293][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.511446][ T4182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.538106][T12228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2421'. [ 256.550422][ T4182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.573645][T12234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2420'. [ 256.849790][T12242] syzkaller0: entered promiscuous mode [ 256.875334][T12242] syzkaller0: entered allmulticast mode [ 257.634908][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 257.657263][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 257.666122][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 257.674193][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 257.682871][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 257.691429][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 257.932330][ T1097] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.964808][ T1097] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.113525][T12287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2432'. [ 258.183261][ T1097] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.204115][ T1097] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.312114][ T1097] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.333164][ T1097] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.349756][T12293] syzkaller0: entered promiscuous mode [ 258.357042][T12293] syzkaller0: entered allmulticast mode [ 258.409132][ T1097] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.420399][ T1097] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.608687][T12265] chnl_net:caif_netlink_parms(): no params data found [ 258.796953][T12310] syzkaller0: entered promiscuous mode [ 258.802471][T12310] syzkaller0: entered allmulticast mode [ 259.758856][ T5773] Bluetooth: hci0: command tx timeout [ 260.432789][T12265] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.451538][T12265] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.477463][T12265] bridge_slave_0: entered allmulticast mode [ 260.484606][T12265] bridge_slave_0: entered promiscuous mode [ 260.518863][T12265] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.546379][T12265] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.553654][T12265] bridge_slave_1: entered allmulticast mode [ 260.586519][T12265] bridge_slave_1: entered promiscuous mode [ 260.633476][ T1097] tipc: Left network mode [ 260.713390][T12265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.880860][T12265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.914279][T12336] netlink: 'syz.3.2447': attribute type 1 has an invalid length. [ 261.003879][T12336] 8021q: adding VLAN 0 to HW filter on device bond5 [ 261.034325][T12341] bond5: (slave veth13): Enslaving as an active interface with an up link [ 261.054562][T12345] dummy0: left promiscuous mode [ 261.128727][T12345] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 261.200710][T12350] netlink: 'syz.3.2447': attribute type 10 has an invalid length. [ 261.217568][T12350] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2447'. [ 261.227466][T12350] dummy0: entered promiscuous mode [ 261.235799][T12350] bond5: (slave dummy0): Releasing backup interface [ 261.459081][T12348] syzkaller0: entered promiscuous mode [ 261.473631][T12348] syzkaller0: entered allmulticast mode [ 261.526377][T12265] team0: Port device team_slave_0 added [ 261.835503][ T5773] Bluetooth: hci0: command tx timeout [ 263.179222][T12265] team0: Port device team_slave_1 added [ 263.325479][T12265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.332464][T12265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.374893][T12265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.499018][T12265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.535314][T12265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.594995][T12265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.646010][T12395] netlink: 'syz.3.2458': attribute type 1 has an invalid length. [ 263.723140][T12395] 8021q: adding VLAN 0 to HW filter on device bond6 [ 263.833238][T12402] bond6: (slave veth15): Enslaving as an active interface with an up link [ 263.883232][T12407] dummy0: left promiscuous mode [ 263.915516][ T5773] Bluetooth: hci0: command tx timeout [ 263.925791][T12407] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 263.965629][T12414] netlink: 'syz.3.2458': attribute type 10 has an invalid length. [ 263.985308][T12414] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2458'. [ 264.005189][T12414] dummy0: entered promiscuous mode [ 264.027301][T12414] bond6: (slave dummy0): Releasing backup interface [ 264.299322][T12265] hsr_slave_0: entered promiscuous mode [ 264.326173][T12265] hsr_slave_1: entered promiscuous mode [ 264.344903][T12265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.358342][T12265] Cannot create hsr debugfs directory [ 264.487003][T12442] syzkaller0: entered promiscuous mode [ 264.494083][T12442] syzkaller0: entered allmulticast mode [ 265.998088][ T5773] Bluetooth: hci0: command tx timeout [ 267.986350][T12459] netlink: 'syz.2.2469': attribute type 1 has an invalid length. [ 268.006859][T12459] netlink: 'syz.2.2469': attribute type 3 has an invalid length. [ 268.014684][T12459] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2469'. [ 268.035991][ T1097] hsr_slave_0: left promiscuous mode [ 268.050889][ T1097] hsr_slave_1: left promiscuous mode [ 268.061218][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.077807][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.101988][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.110854][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.128621][ T1097] bridge_slave_1: left allmulticast mode [ 268.134313][ T1097] bridge_slave_1: left promiscuous mode [ 268.147165][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.168214][ T1097] bridge_slave_0: left allmulticast mode [ 268.173884][ T1097] bridge_slave_0: left promiscuous mode [ 268.192431][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.245019][ T1097] veth1_macvtap: left promiscuous mode [ 268.251385][ T1097] veth0_macvtap: left promiscuous mode [ 268.257289][ T1097] veth1_vlan: left promiscuous mode [ 268.262734][ T1097] veth0_vlan: left promiscuous mode [ 268.563367][ T1097] bond3 (unregistering): Released all slaves [ 268.602346][ T1097] bond2 (unregistering): (slave veth13): Releasing backup interface [ 268.709055][ T1097] bond2 (unregistering): Released all slaves [ 268.740287][ T1097] bond1 (unregistering): (slave veth11): Releasing backup interface [ 268.846073][ T1097] bond1 (unregistering): Released all slaves [ 268.924230][ T1097] team0 (unregistering): Port device geneve0 removed [ 269.272259][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 269.312556][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 269.349228][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.388549][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.661499][ T1097] bond0 (unregistering): Released all slaves [ 269.713594][T12466] syzkaller0: entered promiscuous mode [ 269.719311][T12466] syzkaller0: entered allmulticast mode [ 270.023147][T12486] syzkaller0: entered promiscuous mode [ 270.034055][T12486] syzkaller0: entered allmulticast mode [ 271.952029][T12516] netlink: 'syz.0.2480': attribute type 1 has an invalid length. [ 271.971882][T12516] netlink: 'syz.0.2480': attribute type 3 has an invalid length. [ 271.990958][T12516] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2480'. [ 272.141552][T12524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2482'. [ 272.238640][T12525] dummy0: left promiscuous mode [ 272.291485][T12524] netlink: 'syz.0.2482': attribute type 10 has an invalid length. [ 272.300089][T12524] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2482'. [ 272.309570][T12524] dummy0: entered promiscuous mode [ 272.335766][T12527] syzkaller0: entered promiscuous mode [ 272.341261][T12527] syzkaller0: entered allmulticast mode [ 272.396346][T12529] syzkaller0: entered promiscuous mode [ 272.401866][T12529] syzkaller0: entered allmulticast mode [ 272.409973][T12265] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 272.421141][T12265] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 272.449998][T12265] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 272.478418][T12265] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 272.517019][ T1097] IPVS: stop unused estimator thread 0... [ 274.228307][T12540] syzkaller0: entered promiscuous mode [ 274.233791][T12540] syzkaller0: entered allmulticast mode [ 275.703739][T12559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2489'. [ 275.880049][T12265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.931242][T12265] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.968043][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.975212][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.024969][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.032169][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.156966][T12577] syzkaller0: entered promiscuous mode [ 276.162464][T12577] syzkaller0: entered allmulticast mode [ 276.329846][T12582] syzkaller0: entered promiscuous mode [ 276.336332][T12582] syzkaller0: entered allmulticast mode [ 278.340868][T12265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.430162][T12265] veth0_vlan: entered promiscuous mode [ 278.464293][T12265] veth1_vlan: entered promiscuous mode [ 278.581157][T12265] veth0_macvtap: entered promiscuous mode [ 278.619474][T12641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2500'. [ 278.683856][T12265] veth1_macvtap: entered promiscuous mode [ 278.771558][T12265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.789046][T12265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.823744][T12265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.852530][T12265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.875447][T12265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.890321][T12265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.903095][T12265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.005419][T12265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.023529][T12265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.047466][T12265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.062892][T12265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.095981][T12265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.180656][T12265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.205126][T12265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.229556][T12265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.249201][T12265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.280950][T12664] syzkaller0: entered promiscuous mode [ 279.289744][T12664] syzkaller0: entered allmulticast mode [ 279.291737][T12670] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2508'. [ 279.688334][T12673] syzkaller0: entered promiscuous mode [ 279.705210][T12673] syzkaller0: entered allmulticast mode [ 281.414916][T12701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2513'. [ 281.434644][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.475121][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.550947][ T4182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.593565][ T4182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.664757][T12718] netlink: 'syz.0.2517': attribute type 1 has an invalid length. [ 281.672655][T12718] netlink: 'syz.0.2517': attribute type 3 has an invalid length. [ 281.694103][T12718] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2517'. [ 281.913836][T12731] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2520'. [ 282.236586][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2522'. [ 282.693414][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.705906][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.716373][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.729671][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.737524][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 282.744881][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 283.003131][T12758] syzkaller0: entered promiscuous mode [ 283.018477][T12758] syzkaller0: entered allmulticast mode [ 283.101916][T11899] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.113297][T11899] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.129956][T12780] netlink: 'syz.2.2527': attribute type 1 has an invalid length. [ 283.141519][T12780] netlink: 'syz.2.2527': attribute type 3 has an invalid length. [ 283.151262][T12780] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2527'. [ 284.674778][T11899] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.685183][T11899] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.796010][ T5780] Bluetooth: hci1: command tx timeout [ 284.800488][T11899] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.818188][T11899] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.857953][T12794] syzkaller0: entered promiscuous mode [ 284.863481][T12794] syzkaller0: entered allmulticast mode [ 284.928336][T11899] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.943736][T11899] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.113917][T12808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2531'. [ 285.370100][T12821] netlink: 'syz.3.2535': attribute type 1 has an invalid length. [ 285.380425][T12755] chnl_net:caif_netlink_parms(): no params data found [ 285.387483][T12821] netlink: 'syz.3.2535': attribute type 3 has an invalid length. [ 285.395414][T12821] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2535'. [ 285.499516][T12820] syzkaller0: entered promiscuous mode [ 285.505040][T12820] syzkaller0: entered allmulticast mode [ 285.574593][T11899] tipc: Left network mode [ 286.885285][ T5780] Bluetooth: hci1: command tx timeout [ 287.313702][T12755] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.362621][T12755] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.406053][T12755] bridge_slave_0: entered allmulticast mode [ 287.413362][T12755] bridge_slave_0: entered promiscuous mode [ 287.515325][T12846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2541'. [ 287.531693][T12755] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.561952][T12755] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.569388][T12755] bridge_slave_1: entered allmulticast mode [ 287.581535][T12755] bridge_slave_1: entered promiscuous mode [ 287.811932][T12755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.861080][T12755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.113242][T12755] team0: Port device team_slave_0 added [ 288.122845][T12755] team0: Port device team_slave_1 added [ 288.227661][T12884] syzkaller0: entered promiscuous mode [ 288.233268][T12884] syzkaller0: entered allmulticast mode [ 288.956437][ T5780] Bluetooth: hci1: command tx timeout [ 289.697174][T12755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.704142][T12755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.745160][T12755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.777285][T12755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.789325][T12755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.816383][T12755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.960969][T12755] hsr_slave_0: entered promiscuous mode [ 289.992028][T12755] hsr_slave_1: entered promiscuous mode [ 290.010353][T12755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.025294][T12755] Cannot create hsr debugfs directory [ 290.137765][T12902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2552'. [ 290.559188][T12917] syzkaller0: entered promiscuous mode [ 290.582454][T12917] syzkaller0: entered allmulticast mode [ 290.608165][T11899] hsr_slave_0: left promiscuous mode [ 290.636217][T11899] hsr_slave_1: left promiscuous mode [ 290.657008][T11899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.664486][T11899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.687893][T11899] bridge_slave_1: left allmulticast mode [ 290.693577][T11899] bridge_slave_1: left promiscuous mode [ 290.699391][T11899] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.714100][T11899] bridge_slave_0: left allmulticast mode [ 290.721589][T11899] bridge_slave_0: left promiscuous mode [ 290.730519][T11899] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.773497][T11899] veth1_macvtap: left promiscuous mode [ 290.782567][T11899] veth0_macvtap: left promiscuous mode [ 290.791514][T11899] veth1_vlan: left promiscuous mode [ 290.800429][T11899] veth0_vlan: left promiscuous mode [ 291.032423][T11899] bond1 (unregistering): Released all slaves [ 291.040566][ T5780] Bluetooth: hci1: command tx timeout [ 291.451319][T11899] team0 (unregistering): Port device team_slave_1 removed [ 291.490283][T11899] team0 (unregistering): Port device team_slave_0 removed [ 291.529031][T11899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.568746][T11899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.846438][T11899] bond0 (unregistering): Released all slaves [ 294.056889][T12959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2564'. [ 294.403943][T12978] syzkaller0: entered promiscuous mode [ 294.429412][T12978] syzkaller0: entered allmulticast mode [ 294.450402][T12755] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 294.480675][T12755] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 295.909252][T12755] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 295.918878][T12755] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 296.207623][T12755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.252500][T12755] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.282676][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.289872][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.330114][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.337316][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.450259][T12755] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 296.485185][T12755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.548429][T13012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2576'. [ 297.133190][T12755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.393180][T13051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2588'. [ 297.472959][T12755] veth0_vlan: entered promiscuous mode [ 297.477511][T13054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2589'. [ 297.499743][T12755] veth1_vlan: entered promiscuous mode [ 297.616076][T12755] veth0_macvtap: entered promiscuous mode [ 297.647745][T12755] veth1_macvtap: entered promiscuous mode [ 297.705552][T12755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.728884][T12755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.745338][T12755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.766168][T12755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.777216][T12755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.788327][T12755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.800447][T12755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.833017][T12755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.875723][T12755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.905098][T12755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.920989][T12755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.935418][T12755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.950260][T12755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.961825][T12755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.981626][T12755] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.998939][T12755] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.014293][T12755] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.024354][T12755] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.246585][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.254426][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.338778][ T4182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.359500][ T4182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.670035][T13095] syzkaller0: entered promiscuous mode [ 298.682688][T13095] syzkaller0: entered allmulticast mode [ 299.376830][T13118] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2603'. [ 299.386475][ T5773] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.412190][ T5773] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.435769][ T5773] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.455715][ T5773] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.472071][ T5773] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 299.484407][ T5773] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.679956][T13133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2604'. [ 299.848544][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.876005][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.070041][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.095347][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.249487][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.274811][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.493733][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.518610][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.564957][T13174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2614'. [ 300.803591][T13119] chnl_net:caif_netlink_parms(): no params data found [ 301.607770][ T5780] Bluetooth: hci4: command tx timeout [ 302.479549][T13194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2617'. [ 302.674907][T13119] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.699884][T13119] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.709134][T13119] bridge_slave_0: entered allmulticast mode [ 302.727609][T13119] bridge_slave_0: entered promiscuous mode [ 302.787560][T13119] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.805882][T13219] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2622'. [ 302.822454][T13119] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.855365][T13119] bridge_slave_1: entered allmulticast mode [ 302.865463][T13119] bridge_slave_1: entered promiscuous mode [ 303.008000][T13119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.046510][T13119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.125531][ T42] tipc: Left network mode [ 303.157661][T13232] netlink: 'syz.0.2624': attribute type 29 has an invalid length. [ 303.172476][T13119] team0: Port device team_slave_0 added [ 303.180462][T13232] netlink: 'syz.0.2624': attribute type 29 has an invalid length. [ 303.209451][T13119] team0: Port device team_slave_1 added [ 303.221280][T13232] netlink: 'syz.0.2624': attribute type 29 has an invalid length. [ 303.309381][T13232] netlink: 'syz.0.2624': attribute type 29 has an invalid length. [ 303.370372][T13119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.396678][T13119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.454305][T13119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.500736][T13119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.510653][T13119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.573373][T13119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.611078][T13245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2628'. [ 303.675493][ T5780] Bluetooth: hci4: command tx timeout [ 303.813453][T13119] hsr_slave_0: entered promiscuous mode [ 303.833246][T13119] hsr_slave_1: entered promiscuous mode [ 303.851048][T13119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.873565][T13119] Cannot create hsr debugfs directory [ 303.881718][T13257] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2630'. [ 304.556724][T13281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2639'. [ 305.105763][ T42] hsr_slave_0: left promiscuous mode [ 305.181281][ T42] hsr_slave_1: left promiscuous mode [ 305.222871][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.256674][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.297243][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.332945][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.360726][ T42] bridge_slave_1: left promiscuous mode [ 305.375551][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.385846][ T42] bridge_slave_0: left allmulticast mode [ 305.391522][ T42] bridge_slave_0: left promiscuous mode [ 305.406724][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.454219][ T42] veth1_macvtap: left promiscuous mode [ 305.460398][ T42] veth0_macvtap: left promiscuous mode [ 305.466993][ T42] veth1_vlan: left promiscuous mode [ 305.473242][ T42] veth0_vlan: left promiscuous mode [ 305.592421][ T42] bond6 (unregistering): (slave veth15): Releasing backup interface [ 305.696066][ T42] bond6 (unregistering): Released all slaves [ 305.719221][ T42] bond5 (unregistering): (slave veth13): Releasing backup interface [ 305.766746][ T5780] Bluetooth: hci4: command tx timeout [ 305.830448][ T42] bond5 (unregistering): Released all slaves [ 305.947692][ T42] bond4 (unregistering): Released all slaves [ 306.058518][ T42] bond3 (unregistering): Released all slaves [ 306.160498][ T42] bond2 (unregistering): Released all slaves [ 306.268371][ T42] bond1 (unregistering): Released all slaves [ 306.322645][ T42] team0 (unregistering): Port device geneve0 removed [ 306.711791][ T42] team0 (unregistering): Port device team_slave_1 removed [ 306.748432][ T42] team0 (unregistering): Port device team_slave_0 removed [ 306.788101][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.827046][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.095277][ T42] bond0 (unregistering): Released all slaves [ 307.419486][T13119] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 307.429187][T13329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2647'. [ 307.479677][T13119] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 307.539772][T13119] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 307.578766][T13119] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 307.589143][T13337] binder: 13334:13337 ioctl c0306201 200000000080 returned -14 [ 307.855195][ T5780] Bluetooth: hci4: command tx timeout [ 307.970092][T13119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.037287][T13119] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.130462][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.137664][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.174322][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.181526][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.508285][T13379] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2657'. [ 308.699915][T13386] binder: 13383:13386 ioctl c0306201 200000000080 returned -14 [ 308.858582][T13119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.982566][T13119] veth0_vlan: entered promiscuous mode [ 309.024324][T13119] veth1_vlan: entered promiscuous mode [ 309.106344][T13119] veth0_macvtap: entered promiscuous mode [ 309.134472][T13119] veth1_macvtap: entered promiscuous mode [ 309.173656][T13406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2665'. [ 309.333468][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.366912][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.398430][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.415233][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.438490][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.465104][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.490062][T13119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.510288][T13416] netlink: 'syz.0.2665': attribute type 10 has an invalid length. [ 309.533137][T13416] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2665'. [ 309.569999][T13416] dummy0: entered promiscuous mode [ 309.676611][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.715741][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.735177][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.748198][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.759135][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.774526][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.797162][T13119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.833274][T13119] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.844386][T13119] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.858303][T13119] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.868737][T13435] binder: 13434:13435 ioctl c0306201 200000000080 returned -14 [ 309.871568][T13119] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.930684][ T42] IPVS: stop unused estimator thread 0... [ 310.052564][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.080636][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.096664][T13439] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2671'. [ 310.134688][T13439] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2671'. [ 310.171275][ T4182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.181691][ T4182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.348159][T13452] syzkaller0: entered promiscuous mode [ 310.353775][T13452] syzkaller0: entered allmulticast mode [ 310.542273][T13460] binder: 13459:13460 ioctl c0306201 200000000080 returned -14 [ 310.659542][T13465] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2681'. [ 310.689498][T13465] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2681'. [ 311.165203][T13488] binder: 13487:13488 ioctl c0306201 200000000080 returned -14 [ 311.248481][T13492] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2690'. [ 311.258211][T13492] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2690'. [ 311.830878][T13527] binder: 13525:13527 ioctl c0306201 200000000080 returned -14 [ 312.677241][T13568] binder: 13567:13568 ioctl c0306201 200000000080 returned -14 [ 312.820363][T13570] syzkaller0: entered promiscuous mode [ 312.837688][T13570] syzkaller0: entered allmulticast mode [ 314.504923][T13597] syzkaller0: entered promiscuous mode [ 314.520887][T13597] syzkaller0: entered allmulticast mode [ 314.671128][T13607] netlink: 'syz.1.2717': attribute type 10 has an invalid length. [ 314.684510][T13607] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2717'. [ 314.731871][T13611] binder: 13610:13611 ioctl c0306201 200000000080 returned -14 [ 314.749950][T13607] team0: Port device geneve0 added [ 315.451379][T13646] syzkaller0: entered promiscuous mode [ 315.458171][T13646] syzkaller0: entered allmulticast mode [ 315.555819][T13650] binder: 13649:13650 ioctl c0306201 200000000080 returned -14 [ 316.052003][T13679] syzkaller0: entered promiscuous mode [ 316.066306][T13679] syzkaller0: entered allmulticast mode [ 316.487340][T13702] binder: 13701:13702 ioctl c0306201 200000000080 returned -14 [ 316.502670][T13690] syzkaller0: entered promiscuous mode [ 316.513877][T13690] syzkaller0: entered allmulticast mode [ 317.290266][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.296722][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.505725][T13745] binder: 13742:13745 ioctl c0306201 200000000080 returned -14 [ 318.741902][T13755] syzkaller0: entered promiscuous mode [ 318.748143][T13755] syzkaller0: entered allmulticast mode [ 318.894732][T13767] netlink: 'syz.1.2757': attribute type 10 has an invalid length. [ 318.911276][T13767] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2757'. [ 318.955453][T13767] dummy0: entered promiscuous mode [ 319.123338][T13766] syzkaller0: entered promiscuous mode [ 319.149098][T13766] syzkaller0: entered allmulticast mode [ 319.211625][T13782] binder: 13781:13782 ioctl c0306201 200000000080 returned -14 [ 321.069519][T13811] dummy0: left promiscuous mode [ 321.072574][T13814] binder: 13813:13814 ioctl c0306201 200000000080 returned -14 [ 321.084475][T13811] netlink: 'syz.1.2770': attribute type 10 has an invalid length. [ 321.118339][T13811] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2770'. [ 321.168059][T13811] dummy0: entered promiscuous mode [ 321.936442][T13854] binder: 13853:13854 ioctl c0306201 200000000080 returned -14 [ 322.770110][T13908] binder: 13907:13908 ioctl c0306201 200000000080 returned -14 [ 323.256160][T13937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2806'. [ 323.496756][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f2f3000: rx timeout, send abort [ 323.547602][T13952] binder: 13951:13952 ioctl c0306201 200000000080 returned -14 [ 323.996929][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b93d400: rx timeout, send abort [ 324.005351][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f2f3000: abort rx timeout. Force session deactivation [ 324.161067][T13987] binder: 13983:13987 ioctl c0306201 200000000080 returned -14 [ 324.178061][T13985] netlink: 'syz.2.2819': attribute type 1 has an invalid length. [ 324.505558][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b93d400: abort rx timeout. Force session deactivation [ 324.556047][T14006] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2826'. [ 324.681822][T14017] netlink: 'syz.2.2826': attribute type 10 has an invalid length. [ 324.709575][T14017] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2826'. [ 324.730358][T14017] dummy0: entered promiscuous mode [ 324.756823][T14019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2828'. [ 325.015584][T14034] binder: 14033:14034 ioctl c0306201 200000000080 returned -14 [ 325.333439][T14052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2840'. [ 325.431266][T14059] dummy0: left promiscuous mode [ 325.476122][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2841'. [ 325.489631][T14059] netlink: 'syz.0.2840': attribute type 10 has an invalid length. [ 325.498980][T14059] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2840'. [ 325.517687][T14059] dummy0: entered promiscuous mode [ 325.691745][T14067] binder: 14066:14067 ioctl c0306201 200000000080 returned -14 [ 325.971518][T14079] syzkaller0: entered promiscuous mode [ 325.978357][T14079] syzkaller0: entered allmulticast mode [ 327.771918][T14102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2855'. [ 327.783583][T14105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2854'. [ 327.864945][T14110] dummy0: left promiscuous mode [ 327.905382][T14112] netlink: 'syz.0.2855': attribute type 10 has an invalid length. [ 327.913238][T14112] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2855'. [ 327.923519][T14112] dummy0: entered promiscuous mode [ 328.089071][T14118] binder: 14115:14118 ioctl c0306201 200000000080 returned -14 [ 328.422814][T14131] syzkaller0: entered promiscuous mode [ 328.429393][T14131] syzkaller0: entered allmulticast mode [ 328.454468][T14140] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2867'. [ 328.812406][T14156] binder: 14155:14156 ioctl c0306201 200000000080 returned -14 [ 330.230790][T14143] dummy0: left promiscuous mode [ 330.244432][T14140] netlink: 'syz.0.2867': attribute type 10 has an invalid length. [ 330.252722][T14140] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2867'. [ 330.261955][T14140] dummy0: entered promiscuous mode [ 330.270515][T14153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2868'. [ 330.435293][T14173] binder: 14172:14173 ioctl c0306201 200000000080 returned -14 [ 330.592537][T14183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2885'. [ 330.665979][T14187] dummy0: left promiscuous mode [ 330.760663][T14188] syzkaller0: entered promiscuous mode [ 330.773004][T14188] syzkaller0: entered allmulticast mode [ 330.781059][T14183] netlink: 'syz.1.2885': attribute type 10 has an invalid length. [ 330.793762][T14183] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2885'. [ 330.805675][T14183] dummy0: entered promiscuous mode [ 330.844103][T14200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2887'. [ 334.123734][T14226] binder: 14225:14226 ioctl c0306201 200000000080 returned -14 [ 334.402337][T14245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2899'. [ 334.622198][T14256] binder: 14255:14256 ioctl c0306201 200000000080 returned -14 [ 334.663370][T14256] binder: 14255:14256 ioctl c0306201 0 returned -14 [ 335.091214][T14279] syzkaller0: entered promiscuous mode [ 335.104345][T14279] syzkaller0: entered allmulticast mode [ 335.143484][T14285] binder: 14282:14285 ioctl c0306201 200000000080 returned -14 [ 335.194577][T14285] binder: 14282:14285 ioctl c0306201 0 returned -14 [ 335.209743][T14289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2914'. [ 335.720152][T14312] binder: 14311:14312 ioctl c0306201 200000000080 returned -14 [ 335.738742][T14312] binder: 14311:14312 ioctl c0306201 0 returned -14 [ 335.907392][T14325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2928'. [ 336.223925][T14341] binder: 14339:14341 ioctl c0306201 200000000080 returned -14 [ 336.611398][T14364] binder: 14363:14364 ioctl c0306201 200000000080 returned -14 [ 336.715772][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f50a800: rx timeout, send abort [ 337.033676][T14388] binder: 14386:14388 ioctl c0306201 200000000080 returned -14 [ 337.215924][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026aac800: rx timeout, send abort [ 337.224246][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f50a800: abort rx timeout. Force session deactivation [ 337.509852][T14413] binder: 14412:14413 ioctl c0306201 200000000080 returned -14 [ 337.724206][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026aac800: abort rx timeout. Force session deactivation [ 337.778721][T14402] syzkaller0: entered promiscuous mode [ 337.784324][T14402] syzkaller0: entered allmulticast mode [ 339.789179][T14458] binder: 14457:14458 ioctl c0306201 200000000080 returned -14 [ 340.283135][T14480] binder: 14479:14480 ioctl c0306201 200000000080 returned -14 [ 340.363189][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e88d000: rx timeout, send abort [ 340.544791][T14492] netlink: 'syz.0.2997': attribute type 1 has an invalid length. [ 340.581663][T14492] 8021q: adding VLAN 0 to HW filter on device bond1 [ 340.602602][T14492] dummy0: left promiscuous mode [ 340.627758][T14492] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 340.639833][T14492] netlink: 'syz.0.2997': attribute type 10 has an invalid length. [ 340.647874][T14492] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2997'. [ 340.657098][T14492] dummy0: entered promiscuous mode [ 340.664394][T14492] bond1: (slave dummy0): Releasing backup interface [ 340.863619][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e88f000: rx timeout, send abort [ 340.871961][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e88d000: abort rx timeout. Force session deactivation [ 341.371851][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e88f000: abort rx timeout. Force session deactivation [ 341.465985][T14534] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3015'. [ 341.528567][T14536] syzkaller0: entered promiscuous mode [ 341.534087][T14536] syzkaller0: entered allmulticast mode [ 342.161118][T14571] syzkaller0: entered promiscuous mode [ 342.174120][T14571] syzkaller0: entered allmulticast mode [ 342.895015][T14609] syzkaller0: entered promiscuous mode [ 342.900778][T14609] syzkaller0: entered allmulticast mode [ 344.335571][T14620] syzkaller0: entered promiscuous mode [ 344.341143][T14620] syzkaller0: entered allmulticast mode [ 344.348665][T14621] syzkaller0: entered promiscuous mode [ 344.354162][T14621] syzkaller0: entered allmulticast mode [ 345.101622][T14654] syzkaller0: entered promiscuous mode [ 345.125264][T14654] syzkaller0: entered allmulticast mode [ 345.134726][T14657] syzkaller0: entered promiscuous mode [ 345.160763][T14657] syzkaller0: entered allmulticast mode [ 346.760154][T14683] netlink: 'syz.2.3060': attribute type 1 has an invalid length. [ 346.835974][T14683] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.858527][T14685] netlink: 'syz.1.3059': attribute type 10 has an invalid length. [ 346.870919][T14685] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3059'. [ 346.908618][T14686] dummy0: left promiscuous mode [ 346.922864][T14686] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 346.937614][ T4250] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 346.943204][T14691] netlink: 'syz.2.3060': attribute type 10 has an invalid length. [ 346.955944][T14691] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3060'. [ 346.964910][T14691] dummy0: entered promiscuous mode [ 346.976351][ T4250] bond1: (slave dummy0): link status up again after 0 ms [ 346.996604][T14691] bond1: (slave dummy0): Removing an active aggregator [ 347.004295][T14691] bond1: (slave dummy0): Releasing backup interface [ 347.092827][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880266b0400: rx timeout, send abort [ 347.592950][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880266b1800: rx timeout, send abort [ 347.601417][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880266b0400: abort rx timeout. Force session deactivation [ 348.101254][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880266b1800: abort rx timeout. Force session deactivation [ 350.426139][T14728] netlink: 'syz.0.3074': attribute type 1 has an invalid length. [ 350.450845][T14728] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 350.461353][T14729] dummy0: left promiscuous mode [ 350.490835][T14730] netlink: 'syz.0.3074': attribute type 10 has an invalid length. [ 350.505245][T14730] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3074'. [ 350.528391][T14730] dummy0: entered promiscuous mode [ 350.876998][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020e3bc00: rx timeout, send abort [ 351.379896][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ee04800: rx timeout, send abort [ 351.388303][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020e3bc00: abort rx timeout. Force session deactivation [ 351.890674][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ee04800: abort rx timeout. Force session deactivation [ 352.501110][T14771] netlink: 'syz.0.3088': attribute type 1 has an invalid length. [ 352.591969][T14771] 8021q: adding VLAN 0 to HW filter on device bond2 [ 352.636208][T14775] dummy0: left promiscuous mode [ 352.649435][T14775] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 352.695631][ T4250] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 352.709025][T14771] netlink: 'syz.0.3088': attribute type 10 has an invalid length. [ 352.719117][T14771] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3088'. [ 352.730669][T14771] dummy0: entered promiscuous mode [ 352.741201][T14771] bond2: (slave dummy0): Removing an active aggregator [ 352.751553][T14771] bond2: (slave dummy0): Releasing backup interface [ 352.877249][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802115a800: rx timeout, send abort [ 353.380009][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021159800: rx timeout, send abort [ 353.388519][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802115a800: abort rx timeout. Force session deactivation [ 353.888316][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021159800: abort rx timeout. Force session deactivation [ 354.728846][T14814] netlink: 'syz.2.3104': attribute type 1 has an invalid length. [ 354.764466][T14814] 8021q: adding VLAN 0 to HW filter on device bond2 [ 354.772529][T14816] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.3103'. [ 354.800150][T14814] dummy0: left promiscuous mode [ 354.811662][T14814] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 354.832493][T14814] netlink: 'syz.2.3104': attribute type 10 has an invalid length. [ 354.857205][T14814] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3104'. [ 354.885834][T13364] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 354.902188][T14814] dummy0: entered promiscuous mode [ 354.921468][T13364] bond2: (slave dummy0): link status up again after 0 ms [ 354.936611][T14814] bond2: (slave dummy0): Removing an active aggregator [ 354.958091][T14814] bond2: (slave dummy0): Releasing backup interface [ 357.161684][T14873] syzkaller0: entered promiscuous mode [ 357.169351][T14873] syzkaller0: entered allmulticast mode [ 358.804627][T14887] netlink: 'syz.2.3129': attribute type 1 has an invalid length. [ 358.834480][T14887] 8021q: adding VLAN 0 to HW filter on device bond3 [ 358.874961][T14891] dummy0: left promiscuous mode [ 358.902923][T14891] bond3: (slave dummy0): Enslaving as a backup interface with an up link [ 358.913333][T14894] netlink: 'syz.2.3129': attribute type 10 has an invalid length. [ 358.926370][T14894] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3129'. [ 358.936893][ T1097] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 358.938903][T14894] dummy0: entered promiscuous mode [ 358.961817][T14894] bond3: (slave dummy0): Removing an active aggregator [ 358.970690][T14894] bond3: (slave dummy0): Releasing backup interface [ 359.344892][T14922] syzkaller0: entered promiscuous mode [ 359.353088][T14922] syzkaller0: entered allmulticast mode [ 359.455198][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 359.468147][T14928] netlink: 'syz.0.3146': attribute type 1 has an invalid length. [ 359.500122][T14928] 8021q: adding VLAN 0 to HW filter on device bond3 [ 359.540768][T14928] dummy0: left promiscuous mode [ 359.569210][T14928] bond3: (slave dummy0): Enslaving as a backup interface with an up link [ 359.586738][T14928] netlink: 'syz.0.3146': attribute type 10 has an invalid length. [ 359.594590][T14928] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3146'. [ 359.615296][ T2979] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 359.643701][T14928] dummy0: entered promiscuous mode [ 359.662163][T14928] bond3: (slave dummy0): Removing an active aggregator [ 359.670008][T14928] bond3: (slave dummy0): Releasing backup interface [ 359.679803][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.697250][ T8] usb 4-1: config 0 has no interfaces? [ 359.703311][ T8] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 359.721688][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.766626][ T8] usb 4-1: config 0 descriptor?? [ 360.100302][T14943] loop0: detected capacity change from 0 to 32768 [ 360.159303][T14943] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 360.204848][T14943] XFS (loop0): Ending clean mount [ 360.285821][T14961] syzkaller0: entered promiscuous mode [ 360.291350][T14961] syzkaller0: entered allmulticast mode [ 360.319910][T12755] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 360.584185][T14967] syzkaller0: entered promiscuous mode [ 360.594105][T14967] syzkaller0: entered allmulticast mode [ 360.708929][ T5829] usb 4-1: USB disconnect, device number 9 [ 361.529496][ T5829] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 361.721417][ T5829] usb 1-1: config 86 has no interfaces? [ 361.733641][ T5829] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a44, bcdDevice= a.45 [ 361.744355][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.760265][ T5829] usb 1-1: Product: syz [ 361.764809][ T5829] usb 1-1: Manufacturer: syz [ 361.772686][ T5829] usb 1-1: SerialNumber: syz [ 362.020580][ T5829] usb 1-1: USB disconnect, device number 7 [ 362.806761][T15000] syzkaller0: entered promiscuous mode [ 362.812937][T15000] syzkaller0: entered allmulticast mode [ 364.742528][T15029] syzkaller0: entered promiscuous mode [ 364.751226][T15029] syzkaller0: entered allmulticast mode [ 365.449836][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 366.544034][T15064] syzkaller0: entered promiscuous mode [ 366.556450][T15064] syzkaller0: entered allmulticast mode [ 366.798790][T15076] netlink: 'syz.3.3196': attribute type 1 has an invalid length. [ 366.838689][T15076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 366.888407][T15076] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 366.905963][T15076] netlink: 'syz.3.3196': attribute type 10 has an invalid length. [ 366.913832][T15076] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3196'. [ 366.923268][T15076] dummy0: entered promiscuous mode [ 366.930318][T15076] bond1: (slave dummy0): Releasing backup interface [ 367.011666][T15085] syzkaller0: entered promiscuous mode [ 367.017570][T15085] syzkaller0: entered allmulticast mode [ 369.284314][T15131] syzkaller0: entered promiscuous mode [ 369.290291][T15131] syzkaller0: entered allmulticast mode [ 369.506121][T15140] syzkaller0: entered promiscuous mode [ 369.519731][T15140] syzkaller0: entered allmulticast mode [ 369.964009][T15160] syzkaller0: entered promiscuous mode [ 369.969720][T15160] syzkaller0: entered allmulticast mode [ 370.074676][T15164] syzkaller0: entered promiscuous mode [ 370.080700][T15164] syzkaller0: entered allmulticast mode [ 370.126055][T15168] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3229'. [ 370.523499][T15190] loop2: detected capacity change from 0 to 1024 [ 370.547888][T15190] hfsplus: unable to parse mount options [ 370.679941][T15192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3241'. [ 370.811407][T15196] syzkaller0: entered promiscuous mode [ 370.820154][T15196] syzkaller0: entered allmulticast mode [ 371.744292][T15237] netlink: 'syz.3.3260': attribute type 1 has an invalid length. [ 371.876612][T15237] 8021q: adding VLAN 0 to HW filter on device bond2 [ 371.879914][T15235] loop2: detected capacity change from 0 to 32768 [ 371.900366][T15235] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.3259 (15235) [ 371.941007][T15235] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 371.951596][T15235] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 371.960661][T15235] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 371.971343][T15235] BTRFS info (device loop2): trying to use backup root at mount time [ 371.979526][T15235] BTRFS info (device loop2): enabling disk space caching [ 371.986613][T15235] BTRFS info (device loop2): allowing degraded mounts [ 371.993741][T15235] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 372.003705][T15235] BTRFS info (device loop2): use lzo compression, level 0 [ 372.012213][T15235] BTRFS info (device loop2): force zlib compression, level 3 [ 372.019935][T15235] BTRFS error (device loop2): cannot disable free space tree [ 372.033610][T15235] BTRFS error (device loop2): open_ctree failed: -22 [ 372.079808][T14915] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (14915) [ 372.095960][T15242] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 372.146204][T15237] netlink: 'syz.3.3260': attribute type 10 has an invalid length. [ 372.175171][T15237] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3260'. [ 372.826348][T15274] netlink: 'syz.1.3275': attribute type 1 has an invalid length. [ 372.948278][T15274] 8021q: adding VLAN 0 to HW filter on device bond1 [ 373.110523][T15282] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 373.135385][T15284] netlink: 'syz.1.3275': attribute type 10 has an invalid length. [ 373.185530][T15284] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3275'. [ 373.304487][T15287] loop3: detected capacity change from 0 to 32768 [ 373.324875][T15287] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 373.335200][T15287] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 373.344407][T15287] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 373.355089][T15287] BTRFS info (device loop3): trying to use backup root at mount time [ 373.363186][T15287] BTRFS info (device loop3): enabling disk space caching [ 373.370280][T15287] BTRFS info (device loop3): allowing degraded mounts [ 373.377513][T15287] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 373.387576][T15287] BTRFS info (device loop3): use lzo compression, level 0 [ 373.395184][T15287] BTRFS info (device loop3): force zlib compression, level 3 [ 373.404118][T15287] BTRFS error (device loop3): cannot disable free space tree [ 373.413956][T15287] BTRFS error (device loop3): open_ctree failed: -22 [ 373.568986][T14915] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (14915) [ 374.292072][T15326] loop1: detected capacity change from 0 to 1024 [ 374.577935][T15334] syzkaller0: entered promiscuous mode [ 374.587804][T15334] syzkaller0: entered allmulticast mode [ 375.500673][T15361] syzkaller0: entered promiscuous mode [ 375.518874][T15361] syzkaller0: entered allmulticast mode [ 377.127275][ T28] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 377.318469][ T28] usb 4-1: Using ep0 maxpacket: 32 [ 377.347984][ T28] usb 4-1: unable to get BOS descriptor or descriptor too short [ 377.364800][ T28] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.381816][ T28] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 377.394794][ T28] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 377.404090][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.416467][ T28] usb 4-1: Product: syz [ 377.420703][ T28] usb 4-1: Manufacturer: syz [ 377.427476][ T28] usb 4-1: SerialNumber: syz [ 377.680640][ T28] usb 4-1: unit 4 not found! [ 377.687348][ T28] usb 4-1: unit 0 not found! [ 377.843352][ T28] usb 4-1: USB disconnect, device number 10 [ 378.736609][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.745247][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.984175][T15407] syzkaller0: entered promiscuous mode [ 379.005849][T15407] syzkaller0: entered allmulticast mode [ 380.818495][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 384.126881][T15527] sd 0:0:1:0: device reset [ 384.169076][T15527] comedi comedi3: pcl724: I/O port conflict (0x100,4) [ 386.887926][T15569] loop0: detected capacity change from 0 to 1024 [ 387.981919][T15601] syzkaller0: entered promiscuous mode [ 388.012993][T15601] syzkaller0: entered allmulticast mode [ 388.089627][T15605] syzkaller0: entered promiscuous mode [ 388.097853][T15605] syzkaller0: entered allmulticast mode [ 388.175550][ T11] ------------[ cut here ]------------ [ 388.181578][ T11] WARNING: CPU: 1 PID: 11 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3a7/0x820 [ 388.192362][ T11] Modules linked in: [ 388.196800][ T11] CPU: 1 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 388.204196][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 388.214549][ T11] Workqueue: iou_exit io_ring_exit_work [ 388.220527][ T11] RIP: 0010:io_ring_exit_work+0x3a7/0x820 [ 388.226634][ T11] Code: 78 23 e8 dc 9f 07 f7 48 8b 7c 24 30 48 8b 74 24 08 e8 bd fa 10 00 48 85 c0 75 1d e8 c3 9f 07 f7 e9 b9 fd ff ff e8 b9 9f 07 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00 [ 388.246635][ T11] RSP: 0018:ffffc90000107a40 EFLAGS: 00010293 [ 388.252730][ T11] RAX: ffffffff8a7f8c37 RBX: ffff88807f614000 RCX: ffff88801a273c00 [ 388.261045][ T11] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: 0000000000000000 [ 388.269335][ T11] RBP: ffffc90000107bb0 R08: ffffc900001079c7 R09: 1ffff92000020f38 [ 388.277629][ T11] R10: dffffc0000000000 R11: fffff52000020f39 R12: dffffc0000000000 [ 388.285920][ T11] R13: ffff88807f614288 R14: 00000001000021af R15: 00000001000021b2 [ 388.294106][ T11] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 388.304114][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 388.311000][ T11] CR2: 0000001b31423ffc CR3: 000000002bc71000 CR4: 00000000003506e0 [ 388.319059][ T11] Call Trace: [ 388.322378][ T11] [ 388.325407][ T11] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 388.331260][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 388.336529][ T11] ? process_scheduled_works+0x96f/0x15d0 [ 388.342279][ T11] ? process_scheduled_works+0x96f/0x15d0 [ 388.348089][ T11] process_scheduled_works+0xa5d/0x15d0 [ 388.353687][ T11] ? worker_attach_to_pool+0x380/0x380 [ 388.359244][ T11] ? assign_work+0x3d2/0x5d0 [ 388.363867][ T11] worker_thread+0xa55/0xfc0 [ 388.368577][ T11] kthread+0x2fa/0x390 [ 388.372681][ T11] ? pr_cont_work+0x560/0x560 [ 388.377442][ T11] ? kthread_blkcg+0xd0/0xd0 [ 388.382050][ T11] ret_from_fork+0x48/0x80 [ 388.386582][ T11] ? kthread_blkcg+0xd0/0xd0 [ 388.391196][ T11] ret_from_fork_asm+0x11/0x20 [ 388.397125][ T11] [ 388.400168][ T11] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 388.407466][ T11] CPU: 1 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 388.414849][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 388.424907][ T11] Workqueue: iou_exit io_ring_exit_work [ 388.430455][ T11] Call Trace: [ 388.433723][ T11] [ 388.436668][ T11] dump_stack_lvl+0x18c/0x250 [ 388.441356][ T11] ? show_regs_print_info+0x20/0x20 [ 388.446543][ T11] ? load_image+0x420/0x420 [ 388.451039][ T11] panic+0x2dc/0x730 [ 388.454931][ T11] ? bpf_jit_dump+0xd0/0xd0 [ 388.459438][ T11] ? ret_from_fork_asm+0x11/0x20 [ 388.464383][ T11] __warn+0x2e0/0x470 [ 388.468360][ T11] ? io_ring_exit_work+0x3a7/0x820 [ 388.473469][ T11] ? io_ring_exit_work+0x3a7/0x820 [ 388.478579][ T11] report_bug+0x2be/0x4f0 [ 388.482902][ T11] ? io_ring_exit_work+0x3a7/0x820 [ 388.488010][ T11] ? io_ring_exit_work+0x3a7/0x820 [ 388.493115][ T11] ? io_ring_exit_work+0x3a9/0x820 [ 388.498221][ T11] handle_bug+0xcf/0x120 [ 388.502458][ T11] exc_invalid_op+0x1a/0x50 [ 388.506957][ T11] asm_exc_invalid_op+0x1a/0x20 [ 388.511812][ T11] RIP: 0010:io_ring_exit_work+0x3a7/0x820 [ 388.517529][ T11] Code: 78 23 e8 dc 9f 07 f7 48 8b 7c 24 30 48 8b 74 24 08 e8 bd fa 10 00 48 85 c0 75 1d e8 c3 9f 07 f7 e9 b9 fd ff ff e8 b9 9f 07 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00 [ 388.537131][ T11] RSP: 0018:ffffc90000107a40 EFLAGS: 00010293 [ 388.543194][ T11] RAX: ffffffff8a7f8c37 RBX: ffff88807f614000 RCX: ffff88801a273c00 [ 388.551590][ T11] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: 0000000000000000 [ 388.559551][ T11] RBP: ffffc90000107bb0 R08: ffffc900001079c7 R09: 1ffff92000020f38 [ 388.567513][ T11] R10: dffffc0000000000 R11: fffff52000020f39 R12: dffffc0000000000 [ 388.575475][ T11] R13: ffff88807f614288 R14: 00000001000021af R15: 00000001000021b2 [ 388.583446][ T11] ? io_ring_exit_work+0x3a7/0x820 [ 388.588577][ T11] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 388.594389][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 388.599585][ T11] ? process_scheduled_works+0x96f/0x15d0 [ 388.605303][ T11] ? process_scheduled_works+0x96f/0x15d0 [ 388.611021][ T11] process_scheduled_works+0xa5d/0x15d0 [ 388.616578][ T11] ? worker_attach_to_pool+0x380/0x380 [ 388.622032][ T11] ? assign_work+0x3d2/0x5d0 [ 388.626620][ T11] worker_thread+0xa55/0xfc0 [ 388.631220][ T11] kthread+0x2fa/0x390 [ 388.635280][ T11] ? pr_cont_work+0x560/0x560 [ 388.639953][ T11] ? kthread_blkcg+0xd0/0xd0 [ 388.644536][ T11] ret_from_fork+0x48/0x80 [ 388.648946][ T11] ? kthread_blkcg+0xd0/0xd0 [ 388.653529][ T11] ret_from_fork_asm+0x11/0x20 [ 388.658296][ T11] [ 388.661632][ T11] Kernel Offset: disabled [ 388.666016][ T11] Rebooting in 86400 seconds..