last executing test programs: 7m58.012536661s ago: executing program 3 (id=1013): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x5, 0x6, 0x86}, 0x65}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00000000", 0x31}, {&(0x7f0000001300)="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", 0xcde}, {&(0x7f0000000440)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a26954143da754b6b15", 0xb4}, {&(0x7f0000000640)="a5ca8683d601768d303ca112b53e7aa9b7692478467c2525cc9ceb426e1c40e3b29380122d838019715ede6740900e4a5b9097b6713ba207b45f64e07e8d44f24c842b84e2c5c3d4175f2c59ef949b2cfb2b1722cf08388fed3e7ff321bda9f2a0744407b6a38593ab8ff05b41a7bc10f7424c9da00d3b2dea193936dbae3b28e7f3ab2ec79d512847fce7d00e40c1e127d871123a121c8c684d714b81314f94d74e8dd61d5bff0f7a86dc7452ce6fcdb767dc9953058022e5f082d4024350a9e1d65f80844770359a06b0554bd065b79ede8b2138a0eda7a68ba7fd4240630196a25d1f5f1e15a09f29d7eb0203d30f03d926b6d87dd44a55d4794bcc7f6157b9376d046f30af1ac7464b32a655976a27d8baebcb440d211d60baa353b30fc2a967c9827f4fe99c20abfdbff7b2c090ece74acb8e286dc583d0b86fe35e8871164b76e5f17461533959cb2e8516c119112bbf8e7262c0c832593c0f8b75d0bccf88b73433c4a3236455b3941e18378bc11a236b8f82a546e8eaaa6b9f9cbf743e11859eca79a9930c748551db30c8197ff8fdc17da89b97ef13d91daa0c4fb542341af6efb8ee4b44fb6d7601cbb5639b8954cabc5758973f5a66d5403d5944de6bca1498cf6f9ea1850d6423895684bb4a229b14e0801ac4d9fa018e9544c5003f066b4df45a7b01f00eaa6a1e77586209b0ccb9700c2a0eef8cca34f58808e58bc8", 0x203}, {&(0x7f00000008c0)="f60f27117e4a8ca5f38ea69db4650925c916adc0dd9095173532452d876e9f077dddbfab219f37cc4d529aff0800000000000000a8", 0x35}], 0x5}, 0x4005) 7m56.722109973s ago: executing program 3 (id=1018): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000), 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)) sendmsg$nl_route_sched(r2, 0x0, 0xc0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, @bcast, @bpq0, 0x0, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9acf, 0x10007, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}) getsockname(r1, &(0x7f0000000180)=@tipc, &(0x7f0000000080)=0x80) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000180)=0x101, 0x4) 7m55.836998776s ago: executing program 3 (id=1023): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x68}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0, 0x1c}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c34000000ff880000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a141b", 0x3e}], 0x1}, 0x8bb3a301eb085f) 7m53.016353812s ago: executing program 3 (id=1031): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 7m52.432666167s ago: executing program 3 (id=1035): pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) writev(0xffffffffffffffff, &(0x7f0000000e00)=[{&(0x7f0000000a40)='^', 0x1}], 0x1) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 7m51.802660651s ago: executing program 3 (id=1038): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r1, &(0x7f0000002740)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x6, @local, 0x19d}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="380000000000000029000000040000003a030000000000000109000000000000000000c910000000000000000000000000000000000000001400000000000000290000003e0000000a00000000000000140000000000000029000000430000000400000000000000a80000000000000029000000390000003212020a00000000000000000000000000000000000000010000000000000000fc00000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001ff02000000000000000000000000000100"/226], 0x148}}], 0x1, 0x0) close(r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10) setsockopt(r3, 0x4, 0x7f, &(0x7f0000000280)="020000000980", 0x6) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x76, @dev={0xfe, 0x80, '\x00', 0x16}, 0x8}, 0x1c) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0xfffff000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000040000701fc07ffff00000100017c6cd2b8bb3c3f0000040042800c00018006000600800a0000100002800c001780080017007f000001deec26ebf9acf95b4c130451430065356b80e50be63b679e396d8a3ddf4e8680fe621e37534470726763c0f5c62c6113e59bbc43aa03ad8bf831b6e4efa75ccb0ff7934a9fb04a687175f8c1b9eb5e5c000000009553c99de5bf4fe05b92f0e19a0ce3f5000000000000000000000000123543a51fcea93062d31d8d0f9e"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) shutdown(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff86270b501b9e9500005e07c311000091730000000000008f8e3d2efa"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 7m36.173787808s ago: executing program 32 (id=1038): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r1, &(0x7f0000002740)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x6, @local, 0x19d}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="380000000000000029000000040000003a030000000000000109000000000000000000c910000000000000000000000000000000000000001400000000000000290000003e0000000a00000000000000140000000000000029000000430000000400000000000000a80000000000000029000000390000003212020a00000000000000000000000000000000000000010000000000000000fc00000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001ff02000000000000000000000000000100"/226], 0x148}}], 0x1, 0x0) close(r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10) setsockopt(r3, 0x4, 0x7f, &(0x7f0000000280)="020000000980", 0x6) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x76, @dev={0xfe, 0x80, '\x00', 0x16}, 0x8}, 0x1c) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0xfffff000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000040000701fc07ffff00000100017c6cd2b8bb3c3f0000040042800c00018006000600800a0000100002800c001780080017007f000001deec26ebf9acf95b4c130451430065356b80e50be63b679e396d8a3ddf4e8680fe621e37534470726763c0f5c62c6113e59bbc43aa03ad8bf831b6e4efa75ccb0ff7934a9fb04a687175f8c1b9eb5e5c000000009553c99de5bf4fe05b92f0e19a0ce3f5000000000000000000000000123543a51fcea93062d31d8d0f9e"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) shutdown(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff86270b501b9e9500005e07c311000091730000000000008f8e3d2efa"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 23.792956966s ago: executing program 4 (id=3123): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="0a000000120000000000000003"], 0x50) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32, @ANYBLOB="1000a204080001000000000008000f"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f00010000000009000000850000008b0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000580)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet(r1, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000280)="d5fe", 0x2}], 0x1}}], 0x2, 0xc0400d0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="18000000010003", 0x7) 23.358890801s ago: executing program 1 (id=3124): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000200000000100000640001000006020202020202010182"], 0x57) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000080211000001080211000000080211000000200001000000010001"], 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) 23.236545744s ago: executing program 4 (id=3125): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56559, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffe0, 0xb}, {0x9, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x101}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 22.528475605s ago: executing program 4 (id=3128): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r2 = socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d80), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000ec0), r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000f00)={'vxcan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_PMKID={0x14, 0x55, "58812d422be46f9e15800e5108101f1d"}, @NL80211_ATTR_PMKID={0x14, 0x55, "aea4925b53252ab392686f7d1b167440"}]}, 0x58}}, 0x4000018) 21.871847589s ago: executing program 4 (id=3131): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x80000000}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000160001000000000000"], 0x20}}, 0x0) 21.802744242s ago: executing program 1 (id=3132): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000240)=[0x0, 0x6], 0x0, 0x0, 0x2}}, 0x40) 21.348522603s ago: executing program 4 (id=3134): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="0a000000120000000000000003"], 0x50) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32, @ANYBLOB="1000a204080001000000000008000f00"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f00010000000009000000850000008b0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000580)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet(r1, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000280)="d5fe", 0x2}], 0x1}}], 0x2, 0xc0400d0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="18000000010003", 0x7) 21.034586353s ago: executing program 1 (id=3135): r0 = socket$igmp(0x2, 0x3, 0x2) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x4002, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bacf314aabd7c493872f750375ed08a560400000003c48f93b82a0300000046", 0x4b}], 0x1}, 0x0) 20.588702544s ago: executing program 4 (id=3138): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) 19.664414248s ago: executing program 1 (id=3141): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x2, 0xc25, &(0x7f0000002580)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x80000}]) 17.001437634s ago: executing program 1 (id=3149): r0 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xe}}]}}]}, 0x3c}}, 0x0) 15.7959038s ago: executing program 1 (id=3153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56559, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffe0, 0xb}, {0x9, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x101}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 13.835921352s ago: executing program 33 (id=3153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56559, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffe0, 0xb}, {0x9, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x101}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 7.216057509s ago: executing program 5 (id=3171): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}, 0x41}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000e40)=""/251, 0xfb}, {0x0}, {&(0x7f0000003bc0)=""/4085, 0xff5}, {0x0}, {&(0x7f0000000000)=""/166, 0xa6}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3ff}], 0x4, 0x2120, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r5 = gettid() r6 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="089805000750050008001300", @ANYRES32=r5, @ANYBLOB="1400310076657468ada0"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) 6.408585077s ago: executing program 0 (id=3173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048a0}, 0x4880) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="bad330fbc9b55400041900ea0756a85d86dd4e11bce43a5dbf38ff29aabe94b749222147b4d628739944c056f5616c7bfae9e4f631503eeb57da", 0x3a, 0x1840, &(0x7f00000000c0)={0x11, 0x88a8, r5, 0x1, 0xd8}, 0x14) 5.913139183s ago: executing program 5 (id=3175): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xe}}]}}]}, 0x3c}}, 0x0) 5.881786404s ago: executing program 2 (id=3176): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) close(0x4) socket$inet6_sctp(0xa, 0x4, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) 5.220018801s ago: executing program 5 (id=3177): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r2 = socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d80), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000ec0), r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000f00)={'vxcan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_PMKID={0x14, 0x55, "58812d422be46f9e15800e5108101f1d"}, @NL80211_ATTR_PMKID={0x14, 0x55, "aea4925b53252ab392686f7d1b167440"}]}, 0x58}}, 0x4000018) 4.417022698s ago: executing program 2 (id=3178): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x40000c0) 4.291374908s ago: executing program 0 (id=3179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x4800) 4.261360622s ago: executing program 5 (id=3180): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f00000001c0)=0xec) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{0x0}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0xa, 0x7) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x4c) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x58}}, 0x0) 3.840372352s ago: executing program 2 (id=3181): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 3.758227384s ago: executing program 0 (id=3182): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendfile(r0, r1, 0x0, 0xffffffff004) 3.474416411s ago: executing program 5 (id=3183): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}, 0x41}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000e40)=""/251, 0xfb}, {0x0}, {&(0x7f0000003bc0)=""/4085, 0xff5}, {0x0}, {&(0x7f0000000000)=""/166, 0xa6}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3ff}], 0x4, 0x2120, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r5 = gettid() r6 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000304f9ff", @ANYRES32=r4, @ANYBLOB="089805000750050008001300", @ANYRES32=r5, @ANYBLOB="1400310076657468ada0"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) 3.107369929s ago: executing program 2 (id=3184): recvmmsg(0xffffffffffffffff, &(0x7f0000007a40)=[{{0x0, 0x0, &(0x7f0000004940)=[{0x0}, {&(0x7f0000002fc0)=""/43, 0x2b}], 0x2}, 0x2}], 0x1, 0x40002122, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000003080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=""/172, 0xac}, 0x110}], 0x400000000000180, 0x1822b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 2.500840129s ago: executing program 0 (id=3185): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xe}}]}}]}, 0x3c}}, 0x0) 2.37319748s ago: executing program 2 (id=3186): connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000003fc0)='qC', 0x2}, {0x0}], 0x2}}], 0x2, 0x20001000) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) 1.809248927s ago: executing program 2 (id=3187): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, 0x0, 0x40440c0) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) 705.952399ms ago: executing program 0 (id=3188): syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d80), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000f00)={'vxcan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x58, r0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_PMKID={0x14, 0x55, "58812d422be46f9e15800e5108101f1d"}, @NL80211_ATTR_PMKID={0x14, 0x55, "aea4925b53252ab392686f7d1b167440"}]}, 0x58}}, 0x4000018) 585.520018ms ago: executing program 5 (id=3189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff8000, 0xfffffffa, 0xffffffffffffffff, 0x40, 0x1}, 0x5d}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @broadcast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$kcm(r4, &(0x7f0000002180)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0, 0x1b}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a916a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9", 0x94}, {&(0x7f0000001300)="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", 0xc91}, {&(0x7f00000027c0)="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", 0x2d5}], 0x3}, 0x8bb3a301eb005b) 0s ago: executing program 0 (id=3190): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x4800) kernel console output (not intermixed with test programs): [ 486.612318][ T107] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.727729][ T9553] random: crng reseeded on system resumption [ 488.662934][ T9582] netlink: 'syz.4.1206': attribute type 10 has an invalid length. [ 488.717691][ T9588] netlink: 'syz.4.1206': attribute type 10 has an invalid length. [ 488.792071][ T9582] bond0: (slave dummy0): Releasing backup interface [ 488.961994][ T9582] team0: Port device dummy0 added [ 489.112056][ T9588] team0: Port device dummy0 removed [ 489.152841][ T9594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1209'. [ 489.213903][ T9588] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 489.341834][ T9597] random: crng reseeded on system resumption [ 490.564426][ T9618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1216'. [ 490.646488][ T1819] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 490.730469][ T9618] vlan2: entered promiscuous mode [ 490.871162][ T1819] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 490.891602][ T1819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.926468][ T1819] usb 1-1: Product: syz [ 490.948932][ T1819] usb 1-1: Manufacturer: syz [ 490.953707][ T1819] usb 1-1: SerialNumber: syz [ 491.033815][ T1819] usb 1-1: config 0 descriptor?? [ 491.286754][ T1819] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 492.241746][ T9640] random: crng reseeded on system resumption [ 492.659850][ T9644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1222'. [ 492.679032][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 492.689909][ T1819] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 492.728336][ T1819] usb 1-1: USB disconnect, device number 9 [ 492.785750][ T6109] udevd[6109]: setting mode of /dev/bus/usb/001/009 to 020664 failed: No such file or directory [ 492.849016][ T6109] udevd[6109]: setting owner of /dev/bus/usb/001/009 to uid=0, gid=0 failed: No such file or directory [ 492.970394][ T9647] netlink: 'syz.2.1223': attribute type 10 has an invalid length. [ 493.051895][ T9647] netlink: 'syz.2.1223': attribute type 10 has an invalid length. [ 493.349714][ T9654] netlink: 'syz.4.1225': attribute type 2 has an invalid length. [ 493.568603][ T1322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.606903][ T1322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.050899][ T8936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.062900][ T8936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.154154][ T9687] netlink: 'syz.4.1235': attribute type 10 has an invalid length. [ 496.239255][ T9687] bond0: (slave dummy0): Releasing backup interface [ 496.262743][ T9690] netlink: 'syz.4.1235': attribute type 10 has an invalid length. [ 496.509591][ T9687] team0: Port device dummy0 added [ 496.572361][ T9697] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1238'. [ 496.623382][ T9690] team0: Port device dummy0 removed [ 496.696817][ T1819] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 496.711917][ T9690] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 496.889611][ T1819] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 496.926402][ T1819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.934667][ T1819] usb 1-1: Product: syz [ 496.968412][ T1819] usb 1-1: Manufacturer: syz [ 496.973256][ T1819] usb 1-1: SerialNumber: syz [ 497.058630][ T1819] usb 1-1: config 0 descriptor?? [ 497.205510][ T9702] netlink: 'syz.5.1240': attribute type 2 has an invalid length. [ 497.288366][ T1819] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 497.391371][ T9704] Bluetooth: MGMT ver 1.23 [ 498.546387][ T1819] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 498.592324][ T1819] usb 1-1: USB disconnect, device number 10 [ 499.364666][ T9735] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1250'. [ 499.639449][ T9740] netlink: 'syz.0.1253': attribute type 10 has an invalid length. [ 499.723262][ T9741] netlink: 'syz.0.1253': attribute type 10 has an invalid length. [ 499.756826][ T9740] bond0: (slave dummy0): Releasing backup interface [ 499.898134][ T9740] team0: Port device dummy0 added [ 499.960713][ T9746] netlink: 'syz.1.1255': attribute type 2 has an invalid length. [ 499.987829][ T9741] team0: Port device dummy0 removed [ 500.120852][ T9741] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 500.264247][ T9751] syzkaller0: entered promiscuous mode [ 500.370229][ T9751] syzkaller0: entered allmulticast mode [ 500.862889][ T9761] fuse: Unknown parameter 'fd0x0000000000000004' [ 501.712164][ T9777] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1266'. [ 501.926722][ T9769] syzkaller0: entered promiscuous mode [ 502.532609][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1271'. [ 502.544290][ T9786] netlink: 'syz.5.1270': attribute type 10 has an invalid length. [ 502.607255][ T9790] netlink: 'syz.5.1270': attribute type 10 has an invalid length. [ 502.795160][ T9786] team0: Port device dummy0 added [ 503.005209][ T9790] team0: Port device dummy0 removed [ 503.053030][ T9790] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 503.255646][ T9801] netlink: 'syz.4.1274': attribute type 2 has an invalid length. [ 504.392761][ T9821] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1279'. [ 505.107641][ T9832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1284'. [ 505.260531][ T9832] vlan0: entered promiscuous mode [ 505.299072][ T9832] bond0: entered promiscuous mode [ 505.315700][ T9832] bond_slave_0: entered promiscuous mode [ 505.349880][ T9832] bond_slave_1: entered promiscuous mode [ 505.393378][ T9832] dummy0: entered promiscuous mode [ 505.437516][ T9846] netlink: 'syz.0.1287': attribute type 10 has an invalid length. [ 505.582847][ T9850] netlink: 'syz.0.1287': attribute type 10 has an invalid length. [ 505.658854][ T9846] bond0: (slave dummy0): Releasing backup interface [ 505.923089][ T9846] team0: Port device dummy0 added [ 506.249710][ T9851] syzkaller0: entered promiscuous mode [ 506.339771][ T9850] team0: Port device dummy0 removed [ 506.400459][ T9850] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 507.095651][ T9876] netlink: 'syz.0.1292': attribute type 2 has an invalid length. [ 508.648383][ T9897] netlink: 'syz.4.1298': attribute type 25 has an invalid length. [ 508.670961][ T9899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1299'. [ 508.852518][ T9899] vlan2: entered promiscuous mode [ 508.884397][ T9899] bond0: entered promiscuous mode [ 508.917531][ T9899] bond_slave_0: entered promiscuous mode [ 508.967720][ T9899] bond_slave_1: entered promiscuous mode [ 508.998995][ T9899] dummy0: entered promiscuous mode [ 509.243488][ T9910] random: crng reseeded on system resumption [ 510.841195][ T9919] syzkaller0: entered promiscuous mode [ 510.871956][ T9928] netlink: 'syz.1.1309': attribute type 2 has an invalid length. [ 510.902367][ T9919] syzkaller0: entered allmulticast mode [ 511.217837][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.224437][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.627413][ T9958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1315'. [ 513.185861][ T9970] random: crng reseeded on system resumption [ 514.920921][ T9993] netlink: 'syz.4.1325': attribute type 2 has an invalid length. [ 515.384448][ T9991] syzkaller0: entered promiscuous mode [ 515.399784][ T9991] syzkaller0: entered allmulticast mode [ 515.499899][T10005] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 516.092615][T10010] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1329'. [ 516.777155][T10018] tipc: Enabled bearer , priority 0 [ 516.795969][T10018] tipc: Resetting bearer [ 516.881504][T10017] tipc: Disabling bearer [ 517.080936][T10025] random: crng reseeded on system resumption [ 518.467037][T10040] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 518.827043][T10050] netlink: 'syz.4.1341': attribute type 2 has an invalid length. [ 519.152580][T10057] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1343'. [ 520.022246][T10055] syzkaller0: entered promiscuous mode [ 520.090498][T10055] syzkaller0: entered allmulticast mode [ 520.133646][T10074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1346'. [ 520.960656][T10076] tipc: Enabled bearer , priority 0 [ 521.066761][T10093] random: crng reseeded on system resumption [ 521.956694][T10095] tipc: Resetting bearer [ 522.013013][T10073] tipc: Disabling bearer [ 522.472574][T10105] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 522.494450][T10106] netlink: 'syz.0.1352': attribute type 49 has an invalid length. [ 522.964910][T10113] netlink: 'syz.1.1356': attribute type 2 has an invalid length. [ 523.003342][T10114] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1357'. [ 523.456800][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1359'. [ 523.514146][T10123] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1359'. [ 523.537319][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1361'. [ 524.014624][T10128] syzkaller0: entered promiscuous mode [ 524.046477][T10128] syzkaller0: entered allmulticast mode [ 524.256514][T10136] random: crng reseeded on system resumption [ 524.451184][T10138] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 524.544553][T10139] tipc: Enabled bearer , priority 0 [ 524.822983][T10135] tipc: Resetting bearer [ 524.901468][T10134] tipc: Disabling bearer [ 525.461030][T10150] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1371'. [ 525.625394][T10153] netlink: 'syz.0.1370': attribute type 49 has an invalid length. [ 525.971932][T10157] hsr0: entered promiscuous mode [ 525.998487][T10157] hsr0: left promiscuous mode [ 526.062701][T10160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1374'. [ 526.299263][T10165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1376'. [ 526.320008][T10165] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1376'. [ 526.679072][T10167] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 526.807774][T10172] syzkaller0: entered promiscuous mode [ 526.826289][T10172] syzkaller0: entered allmulticast mode [ 526.960134][T10177] random: crng reseeded on system resumption [ 527.941488][T10181] tipc: Enabled bearer , priority 0 [ 527.980215][T10181] tipc: Resetting bearer [ 528.216916][T10179] tipc: Disabling bearer [ 528.485802][T10189] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1385'. [ 529.068523][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1390'. [ 529.224195][T10206] netlink: 'syz.4.1387': attribute type 49 has an invalid length. [ 529.566670][T10213] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 529.597321][T10208] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1392'. [ 529.629098][T10208] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1392'. [ 530.177935][T10218] syzkaller0: entered promiscuous mode [ 530.194315][T10218] syzkaller0: entered allmulticast mode [ 530.647730][T10224] tipc: Started in network mode [ 530.666948][T10224] tipc: Node identity 7264707a8f7d, cluster identity 4711 [ 530.679106][T10229] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1400'. [ 530.711896][T10224] tipc: Enabled bearer , priority 0 [ 530.805633][T10224] tipc: Resetting bearer [ 530.999691][T10223] tipc: Disabling bearer [ 531.167544][T10239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1403'. [ 531.481576][T10244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1405'. [ 531.557125][T10246] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1405'. [ 531.775631][T10249] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 532.441427][T10262] netlink: 'syz.0.1411': attribute type 10 has an invalid length. [ 532.534397][T10262] bond0: (slave dummy0): Releasing backup interface [ 532.564892][T10262] dummy0: left promiscuous mode [ 532.580018][T10265] netlink: 'syz.0.1411': attribute type 10 has an invalid length. [ 532.614333][T10262] team0: Port device dummy0 added [ 532.794232][T10265] team0: Port device dummy0 removed [ 532.862860][T10265] dummy0: entered promiscuous mode [ 532.953825][T10265] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 533.002457][T10275] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1414'. [ 533.663035][T10288] tipc: Enabled bearer , priority 0 [ 533.805623][T10287] tipc: Resetting bearer [ 533.851339][T10291] netlink: 'syz.0.1418': attribute type 2 has an invalid length. [ 533.885231][T10285] tipc: Disabling bearer [ 533.898478][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1418'. [ 533.910953][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1417'. [ 533.966268][T10291] netlink: 'syz.0.1418': attribute type 2 has an invalid length. [ 533.974179][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1418'. [ 534.082836][T10295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1419'. [ 534.128706][T10295] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1419'. [ 535.372048][T10320] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1427'. [ 535.547260][T10324] netlink: 'syz.4.1428': attribute type 10 has an invalid length. [ 535.608387][T10325] netlink: 'syz.4.1428': attribute type 10 has an invalid length. [ 535.768538][T10324] bond0: (slave dummy0): Releasing backup interface [ 535.856886][T10324] team0: Port device dummy0 added [ 535.896868][T10325] team0: Port device dummy0 removed [ 535.952284][T10325] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 536.521079][T10332] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1431'. [ 536.610077][T10330] syzkaller0: entered promiscuous mode [ 536.630999][T10330] syzkaller0: entered allmulticast mode [ 536.835946][T10336] tipc: Enabled bearer , priority 0 [ 536.864213][T10340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1434'. [ 536.898893][T10338] syzkaller0: entered promiscuous mode [ 536.911560][T10340] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1434'. [ 536.930931][T10338] syzkaller0: entered allmulticast mode [ 536.998839][T10336] tipc: Resetting bearer [ 537.037315][T10335] tipc: Resetting bearer [ 537.098156][T10335] tipc: Disabling bearer [ 537.632844][T10345] syzkaller0: entered promiscuous mode [ 537.639001][T10345] syzkaller0: entered allmulticast mode [ 537.830858][T10353] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1439'. [ 538.275942][T10360] netlink: 'syz.2.1442': attribute type 10 has an invalid length. [ 538.338165][T10362] netlink: 'syz.2.1442': attribute type 10 has an invalid length. [ 539.335491][T10375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1445'. [ 539.483850][T10383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1447'. [ 539.586539][T10383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1447'. [ 539.944397][T10386] syzkaller0: entered promiscuous mode [ 539.969743][T10386] syzkaller0: entered allmulticast mode [ 540.739010][T10389] syzkaller0: entered promiscuous mode [ 540.748935][T10402] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1453'. [ 541.062700][T10406] netlink: 'syz.0.1455': attribute type 10 has an invalid length. [ 541.143388][T10407] netlink: 'syz.0.1455': attribute type 10 has an invalid length. [ 541.885404][T10406] bond0: (slave dummy0): Releasing backup interface [ 541.984862][T10406] dummy0: left promiscuous mode [ 542.123512][T10406] team0: Port device dummy0 added [ 542.203567][T10407] team0: Port device dummy0 removed [ 542.264611][T10407] dummy0: entered promiscuous mode [ 542.283989][T10407] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 542.358254][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1458'. [ 542.919156][T10437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1461'. [ 542.978299][T10441] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1461'. [ 543.321381][T10444] syzkaller0: entered promiscuous mode [ 543.376285][T10444] syzkaller0: entered allmulticast mode [ 543.618541][T10449] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1467'. [ 544.105084][T10455] netlink: 'syz.2.1470': attribute type 10 has an invalid length. [ 544.161496][T10455] netlink: 'syz.2.1470': attribute type 10 has an invalid length. [ 544.339981][T10461] random: crng reseeded on system resumption [ 544.896808][T10470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1473'. [ 545.742584][T10473] syzkaller0: entered promiscuous mode [ 545.768466][T10482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1477'. [ 545.799738][T10484] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1475'. [ 545.811878][T10473] syzkaller0: entered allmulticast mode [ 545.812867][T10482] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1477'. [ 546.752132][T10487] syzkaller0: entered promiscuous mode [ 546.784606][T10487] syzkaller0: entered allmulticast mode [ 547.268114][T10502] netlink: 'syz.4.1483': attribute type 10 has an invalid length. [ 547.366994][T10503] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1484'. [ 547.377407][T10504] netlink: 'syz.4.1483': attribute type 10 has an invalid length. [ 547.388543][T10502] bond0: (slave dummy0): Releasing backup interface [ 547.542707][T10502] team0: Port device dummy0 added [ 547.616559][T10511] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1486'. [ 547.712785][T10513] random: crng reseeded on system resumption [ 547.930806][T10504] team0: Port device dummy0 removed [ 548.485149][T10504] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 549.053258][T10521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1489'. [ 549.096691][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1489'. [ 550.166333][ T1819] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 550.426708][ T1819] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 550.443591][T10542] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 550.461924][ T1819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.495253][T10543] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1496'. [ 550.508502][ T1819] usb 2-1: Product: syz [ 550.512850][ T1819] usb 2-1: Manufacturer: syz [ 550.536260][ T1819] usb 2-1: SerialNumber: syz [ 550.613464][T10546] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1498'. [ 550.643502][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1498'. [ 550.756493][T10550] random: crng reseeded on system resumption [ 550.902775][ T1819] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 551.451166][ T1819] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 551.462270][ T1819] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 551.770939][ T1819] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 551.858725][ T1819] usb 2-1: USB disconnect, device number 5 [ 552.334120][T10560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1503'. [ 552.386982][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1503'. [ 553.313255][T10571] syzkaller0: entered promiscuous mode [ 553.372013][T10571] syzkaller0: entered allmulticast mode [ 553.447189][T10579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1512'. [ 553.469992][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1512'. [ 553.598357][T10582] random: crng reseeded on system resumption [ 554.306383][ T5892] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 554.541854][ T5892] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 554.589263][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.633930][ T5892] usb 6-1: Product: syz [ 554.654664][ T5892] usb 6-1: Manufacturer: syz [ 554.665917][ T5892] usb 6-1: SerialNumber: syz [ 554.958131][ T5892] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 554.974182][ T5892] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 554.992696][ T5892] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 555.076463][ T5892] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 555.165790][ T5892] usb 6-1: USB disconnect, device number 2 [ 555.195282][T10592] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1516'. [ 555.199239][T10596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1518'. [ 555.337930][T10598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1518'. [ 556.330253][T10610] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1524'. [ 556.349658][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1524'. [ 556.875730][T10621] random: crng reseeded on system resumption [ 558.720980][T10630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1531'. [ 559.226442][ T1819] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 559.446904][ T1819] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 559.469268][ T1819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.487186][ T1819] usb 6-1: Product: syz [ 559.492154][ T1819] usb 6-1: Manufacturer: syz [ 559.497426][ T1819] usb 6-1: SerialNumber: syz [ 559.644437][T10645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1538'. [ 559.745784][T10646] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1537'. [ 559.788566][ T1819] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 559.877845][ T1819] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 559.906183][ T1819] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 559.996453][ T1819] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 560.068481][ T1819] usb 6-1: USB disconnect, device number 3 [ 560.527941][T10658] random: crng reseeded on system resumption [ 561.412021][T10661] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1543'. [ 562.072290][T10669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1546'. [ 563.058004][T10688] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1551'. [ 563.607198][T10698] netlink: 'syz.5.1556': attribute type 10 has an invalid length. [ 563.626429][ T1819] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 563.634941][T10699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1555'. [ 563.679254][T10698] bond0: (slave dummy0): Releasing backup interface [ 563.747569][T10700] netlink: 'syz.5.1556': attribute type 10 has an invalid length. [ 563.787290][T10698] team0: Port device dummy0 added [ 563.832318][ T1819] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 563.856685][ T1819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.894891][ T1819] usb 5-1: Product: syz [ 563.915411][ T1819] usb 5-1: Manufacturer: syz [ 563.930612][T10700] team0: Port device dummy0 removed [ 563.944491][ T1819] usb 5-1: SerialNumber: syz [ 564.032930][T10704] random: crng reseeded on system resumption [ 564.849767][T10700] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 564.879090][ T1819] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 564.910050][ T1819] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 564.932505][ T1819] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 565.041205][ T1819] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 565.122781][ T1819] usb 5-1: USB disconnect, device number 7 [ 565.532770][T10715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1560'. [ 565.550978][T10711] syzkaller0: entered promiscuous mode [ 566.061278][T10719] syzkaller0: entered promiscuous mode [ 566.092591][T10719] syzkaller0: entered allmulticast mode [ 566.521524][T10724] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1565'. [ 567.909059][T10739] random: crng reseeded on system resumption [ 568.706327][T10732] syzkaller0: entered promiscuous mode [ 568.711996][T10732] syzkaller0: entered allmulticast mode [ 568.982995][T10752] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1574'. [ 569.046775][ T5888] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 569.241129][ T5888] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 569.272733][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.301669][ T5888] usb 6-1: Product: syz [ 569.316628][ T5888] usb 6-1: Manufacturer: syz [ 569.323420][ T5888] usb 6-1: SerialNumber: syz [ 569.501034][T10755] syzkaller0: entered promiscuous mode [ 569.618178][ T5888] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 569.653891][ T5888] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 569.688187][ T5888] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 569.721005][ T5888] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 569.852573][T10756] syzkaller0: entered promiscuous mode [ 569.864306][T10756] syzkaller0: entered allmulticast mode [ 569.871446][ T5888] usb 6-1: USB disconnect, device number 4 [ 569.909427][ T6109] udevd[6109]: setting mode of /dev/bus/usb/006/004 to 020664 failed: No such file or directory [ 569.947812][ T6109] udevd[6109]: setting owner of /dev/bus/usb/006/004 to uid=0, gid=0 failed: No such file or directory [ 569.971954][T10763] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1578'. [ 570.929054][T10767] syzkaller0: entered promiscuous mode [ 571.082543][T10767] syzkaller0: entered allmulticast mode [ 571.882550][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1584'. [ 572.105213][T10783] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1584'. [ 572.106860][T10786] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1586'. [ 572.392930][T10790] random: crng reseeded on system resumption [ 572.649282][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.668373][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.692430][T10802] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1592'. [ 573.799843][T10795] syzkaller0: entered promiscuous mode [ 576.878333][T10835] random: crng reseeded on system resumption [ 578.215348][T10848] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1605'. [ 578.268122][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1604'. [ 578.407474][T10856] netlink: 'syz.2.1607': attribute type 39 has an invalid length. [ 578.490940][T10856] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.772809][T10856] bridge_slave_0 (unregistering): left allmulticast mode [ 578.806575][T10856] bridge_slave_0 (unregistering): left promiscuous mode [ 578.835652][T10856] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.465093][T10862] syzkaller0: entered promiscuous mode [ 579.496733][T10862] syzkaller0: entered allmulticast mode [ 579.547455][T10866] syzkaller0: entered promiscuous mode [ 579.651515][T10875] netlink: 'syz.2.1612': attribute type 2 has an invalid length. [ 580.137727][T10872] lo speed is unknown, defaulting to 1000 [ 580.940117][T10887] random: crng reseeded on system resumption [ 581.705373][T10892] netlink: 'syz.2.1617': attribute type 10 has an invalid length. [ 581.735339][T10893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1619'. [ 581.817304][T10897] netlink: 'syz.2.1617': attribute type 10 has an invalid length. [ 581.893512][T10900] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1620'. [ 582.163223][T10896] bridge2: port 1(erspan0) entered blocking state [ 582.203336][T10896] bridge2: port 1(erspan0) entered disabled state [ 582.227429][T10896] erspan0: entered allmulticast mode [ 582.241607][T10896] erspan0: entered promiscuous mode [ 582.268656][T10896] bridge2: port 1(erspan0) entered blocking state [ 582.275750][T10896] bridge2: port 1(erspan0) entered forwarding state [ 582.602709][T10899] bridge2: port 2(bond3) entered blocking state [ 582.636609][T10899] bridge2: port 2(bond3) entered disabled state [ 582.664368][T10899] bond3: entered allmulticast mode [ 582.711319][T10899] bond3: entered promiscuous mode [ 582.984316][T10908] syzkaller0: entered promiscuous mode [ 583.362019][T10917] netlink: 'syz.1.1627': attribute type 2 has an invalid length. [ 583.589762][T10916] syzkaller0: entered promiscuous mode [ 583.595727][T10916] syzkaller0: entered allmulticast mode [ 584.347768][T10933] random: crng reseeded on system resumption [ 585.067180][ T5784] Bluetooth: hci5: command 0x0406 tx timeout [ 585.372241][T10927] lo speed is unknown, defaulting to 1000 [ 585.937633][T10948] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1637'. [ 586.031631][T10949] netlink: 'syz.1.1636': attribute type 10 has an invalid length. [ 586.109458][T10949] bond0: (slave dummy0): Releasing backup interface [ 586.215809][T10952] netlink: 'syz.1.1636': attribute type 10 has an invalid length. [ 586.254228][T10949] dummy0: left promiscuous mode [ 586.494565][T10949] team0: Port device dummy0 added [ 586.560035][T10952] team0: Port device dummy0 removed [ 586.611471][T10952] dummy0: entered promiscuous mode [ 586.641283][T10952] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 587.343736][T10958] syzkaller0: entered promiscuous mode [ 587.526581][T10973] netlink: 'syz.5.1641': attribute type 2 has an invalid length. [ 587.962628][T10968] syzkaller0: entered promiscuous mode [ 587.968915][T10968] syzkaller0: entered allmulticast mode [ 588.142643][T10983] random: crng reseeded on system resumption [ 589.694204][T10990] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1649'. [ 590.052072][T11001] netlink: 'syz.0.1653': attribute type 10 has an invalid length. [ 590.155543][T11001] bond0: (slave dummy0): Releasing backup interface [ 590.252010][T11003] netlink: 'syz.0.1653': attribute type 10 has an invalid length. [ 590.278268][T11001] dummy0: left promiscuous mode [ 590.472147][T11001] team0: Port device dummy0 added [ 590.592076][T11003] team0: Port device dummy0 removed [ 590.676585][T11003] dummy0: entered promiscuous mode [ 590.715073][T11003] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 591.140620][T11014] netlink: 'syz.2.1657': attribute type 10 has an invalid length. [ 591.327120][T11022] random: crng reseeded on system resumption [ 591.574472][T11017] syzkaller0: entered promiscuous mode [ 591.673723][T11017] syzkaller0: entered allmulticast mode [ 592.345554][T11023] syzkaller0: entered promiscuous mode [ 592.396299][T11023] syzkaller0: entered allmulticast mode [ 593.019176][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1664'. [ 594.079999][T11057] netlink: 'syz.2.1670': attribute type 10 has an invalid length. [ 594.184812][T11059] netlink: 'syz.2.1670': attribute type 10 has an invalid length. [ 594.480432][T11065] random: crng reseeded on system resumption [ 595.551642][T11069] syzkaller0: entered promiscuous mode [ 595.576661][T11069] syzkaller0: entered allmulticast mode [ 595.792750][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1678'. [ 596.444210][T11076] syzkaller0: entered promiscuous mode [ 596.462506][T11076] syzkaller0: entered allmulticast mode [ 596.912749][T11100] netlink: 'syz.2.1684': attribute type 10 has an invalid length. [ 596.993581][T11104] netlink: 'syz.2.1684': attribute type 10 has an invalid length. [ 597.634752][T11113] random: crng reseeded on system resumption [ 599.925551][T11123] syzkaller0: entered promiscuous mode [ 599.953214][T11123] syzkaller0: entered allmulticast mode [ 599.977863][T11126] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1692'. [ 600.919887][T11145] netlink: 'syz.1.1698': attribute type 10 has an invalid length. [ 601.188889][T11141] syzkaller0: entered promiscuous mode [ 601.196456][T11141] syzkaller0: entered allmulticast mode [ 601.306585][T11138] lo speed is unknown, defaulting to 1000 [ 601.684107][T11160] random: crng reseeded on system resumption [ 604.427678][T11183] syzkaller1: entered promiscuous mode [ 604.433351][T11183] syzkaller1: entered allmulticast mode [ 604.527128][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1709'. [ 604.782371][T11191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1711'. [ 605.458836][T11195] syzkaller0: entered promiscuous mode [ 605.488981][T11195] syzkaller0: entered allmulticast mode [ 605.613315][T11204] random: crng reseeded on system resumption [ 607.711178][T11224] netlink: 'syz.2.1723': attribute type 10 has an invalid length. [ 607.912264][T11224] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.982567][T11224] team0: entered promiscuous mode [ 608.015839][T11224] team_slave_0: entered promiscuous mode [ 608.058037][T11224] team_slave_1: entered promiscuous mode [ 608.095856][T11224] bond0: (slave team0): Enslaving as an active interface with an up link [ 608.175437][T11233] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1727'. [ 609.282467][T11246] syzkaller0: entered promiscuous mode [ 609.312427][T11246] syzkaller0: entered allmulticast mode [ 609.892737][T11262] syzkaller0: entered promiscuous mode [ 609.921989][T11262] syzkaller0: entered allmulticast mode [ 610.526982][T11274] netlink: 'syz.2.1742': attribute type 10 has an invalid length. [ 610.749820][T11276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1744'. [ 611.689643][T11289] syzkaller0: entered promiscuous mode [ 611.705678][T11289] syzkaller0: entered allmulticast mode [ 612.134882][T11298] syzkaller0: entered promiscuous mode [ 612.153547][T11298] syzkaller0: entered allmulticast mode [ 612.293432][T11303] syzkaller0: entered promiscuous mode [ 612.299965][T11303] syzkaller0: entered allmulticast mode [ 612.529992][T11308] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 612.585234][T11308] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.594643][T11308] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.925544][T11312] netlink: 'syz.2.1756': attribute type 10 has an invalid length. [ 614.310473][T11330] team_slave_0: entered promiscuous mode [ 614.316572][T11330] team_slave_1: entered promiscuous mode [ 614.373628][T11334] sctp: [Deprecated]: syz.4.1765 (pid 11334) Use of int in maxseg socket option. [ 614.373628][T11334] Use struct sctp_assoc_value instead [ 614.396773][T11330] vlan2: entered promiscuous mode [ 614.413629][T11330] team0: entered promiscuous mode [ 614.431565][ T29] audit: type=1804 audit(1776159343.116:2): pid=11332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1764" name="/newroot/99/cgroup.controllers" dev="tmpfs" ino=516 res=1 errno=0 [ 614.554185][ T29] audit: type=1800 audit(1776159343.116:3): pid=11332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1764" name="cgroup.controllers" dev="tmpfs" ino=516 res=0 errno=0 [ 615.190760][T11348] netlink: 'syz.1.1770': attribute type 10 has an invalid length. [ 615.288830][T11348] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.354036][T11348] team0: entered promiscuous mode [ 615.384714][T11348] team_slave_0: entered promiscuous mode [ 615.408386][T11348] team_slave_1: entered promiscuous mode [ 615.474575][T11348] bond0: (slave team0): Enslaving as an active interface with an up link [ 618.785659][T11404] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1789'. [ 620.900502][T11432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1800'. [ 621.027565][T11436] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1802'. [ 622.212927][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1811'. [ 622.993504][T11469] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1817'. [ 623.046788][T11472] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1816'. [ 624.469124][T11476] ip6erspan0: entered allmulticast mode [ 626.022553][T11510] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1830'. [ 628.123970][T11539] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1842'. [ 628.513485][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1843'. [ 629.358310][T11553] vlan3: entered promiscuous mode [ 629.363630][T11553] team0: entered promiscuous mode [ 629.410980][T11553] team_slave_0: entered promiscuous mode [ 629.458415][T11553] team_slave_1: entered promiscuous mode [ 629.849020][T11574] netlink: 'syz.5.1852': attribute type 49 has an invalid length. [ 632.672502][T11625] netlink: 'syz.5.1868': attribute type 49 has an invalid length. [ 634.089333][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.100774][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.917110][T11655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1882'. [ 635.348688][T11610] lec:lec_atm_close: lec0: Shut down! [ 636.190766][T11676] netlink: 'syz.5.1887': attribute type 49 has an invalid length. [ 639.347881][T11732] vlan3: entered promiscuous mode [ 639.732704][T11753] netlink: 'syz.0.1904': attribute type 49 has an invalid length. [ 640.931853][ T5888] lec:lec_start_xmit: lec0:No lecd attached [ 642.932697][T11814] netlink: 'syz.4.1919': attribute type 49 has an invalid length. [ 646.386062][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5450 ms [ 646.394392][ C0] lec:lec_tx_timeout: lec0 [ 646.403385][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 646.417034][T11885] netlink: 'syz.0.1934': attribute type 49 has an invalid length. [ 649.400424][T11938] netlink: 'syz.4.1950': attribute type 49 has an invalid length. [ 651.426054][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 651.434539][ C0] lec:lec_tx_timeout: lec0 [ 651.440154][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 651.998190][T11975] ip6erspan0: entered allmulticast mode [ 652.639949][T11994] vlan2: entered promiscuous mode [ 653.914759][T12016] netlink: 'syz.1.1968': attribute type 49 has an invalid length. [ 654.061962][T12018] netlink: 'syz.5.1971': attribute type 12 has an invalid length. [ 655.458682][T12030] vlan2: entered promiscuous mode [ 656.466050][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 656.474429][ C0] lec:lec_tx_timeout: lec0 [ 656.479916][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 657.107932][T12063] netlink: 'syz.5.1986': attribute type 49 has an invalid length. [ 657.298802][T12066] netlink: 'syz.0.1987': attribute type 10 has an invalid length. [ 657.307962][T12064] syzkaller0: entered promiscuous mode [ 657.346738][T12064] syzkaller0: entered allmulticast mode [ 657.429247][T12066] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.482181][T12066] bond0: (slave team0): Enslaving as an active interface with an up link [ 659.086994][T12099] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1992'. [ 660.628859][T12120] netlink: 'syz.5.1999': attribute type 10 has an invalid length. [ 660.757924][T12120] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.849169][T12120] bond0: (slave team0): Enslaving as an active interface with an up link [ 661.506162][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 661.514508][ C0] lec:lec_tx_timeout: lec0 [ 661.520371][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 661.858666][T12141] netlink: 'syz.4.2005': attribute type 10 has an invalid length. [ 662.081813][T12139] netlink: 'syz.5.2004': attribute type 1 has an invalid length. [ 662.116539][T12139] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2004'. [ 663.291435][T12165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2013'. [ 663.355753][T12165] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2013'. [ 663.430107][T12168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2013'. [ 663.629494][T12171] netlink: 'syz.5.2014': attribute type 10 has an invalid length. [ 664.310916][T12185] netlink: 'syz.5.2019': attribute type 10 has an invalid length. [ 664.588348][T12181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2017'. [ 666.546021][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 666.554348][ C0] lec:lec_tx_timeout: lec0 [ 666.559872][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 667.290471][T12235] netlink: 'syz.0.2033': attribute type 10 has an invalid length. [ 668.492565][T12254] syzkaller0: entered promiscuous mode [ 668.511347][T12254] syzkaller0: entered allmulticast mode [ 669.569359][T12275] netlink: 'syz.1.2048': attribute type 10 has an invalid length. [ 670.911985][T12300] syzkaller0: entered promiscuous mode [ 670.946576][T12300] syzkaller0: entered allmulticast mode [ 672.386016][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 672.394439][ C0] lec:lec_tx_timeout: lec0 [ 672.400084][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 672.414039][T12325] syzkaller0: entered promiscuous mode [ 672.471973][T12325] syzkaller0: entered allmulticast mode [ 673.845000][T12353] syzkaller0: entered promiscuous mode [ 673.856451][T12353] syzkaller0: entered allmulticast mode [ 674.948619][T12372] syzkaller0: entered promiscuous mode [ 674.985707][T12372] syzkaller0: entered allmulticast mode [ 675.672075][T12380] syzkaller0: entered promiscuous mode [ 675.758505][T12380] syzkaller0: entered allmulticast mode [ 676.214569][T12391] ipvlan2: entered promiscuous mode [ 676.311753][T12391] team0: Device ipvlan2 failed to register rx_handler [ 676.656381][T12401] syzkaller0: entered promiscuous mode [ 676.686566][T12401] syzkaller0: entered allmulticast mode [ 677.065354][T12406] syzkaller0: entered promiscuous mode [ 677.416315][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 677.424603][ C0] lec:lec_tx_timeout: lec0 [ 677.429972][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 679.351449][T12439] syzkaller0: entered promiscuous mode [ 679.380279][T12439] syzkaller0: entered allmulticast mode [ 679.749308][T12444] syzkaller0: entered promiscuous mode [ 679.755016][T12444] syzkaller0: entered allmulticast mode [ 680.584178][T12465] syzkaller0: entered promiscuous mode [ 680.620284][T12465] syzkaller0: entered allmulticast mode [ 680.664881][T12469] syzkaller0: entered promiscuous mode [ 680.867822][T12471] syzkaller0: entered promiscuous mode [ 680.884113][T12471] syzkaller0: entered allmulticast mode [ 682.446032][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 682.454498][ C0] lec:lec_tx_timeout: lec0 [ 682.460373][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 682.794108][T12490] syzkaller0: entered promiscuous mode [ 682.866175][T12490] syzkaller0: entered allmulticast mode [ 684.242242][T12520] syzkaller0: entered promiscuous mode [ 684.474651][T12523] syzkaller0: entered promiscuous mode [ 684.496892][T12523] syzkaller0: entered allmulticast mode [ 684.917323][T12541] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2123'. [ 685.597113][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2125'. [ 686.078239][T12557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2128'. [ 687.074697][T12565] syzkaller0: entered promiscuous mode [ 687.081009][T12565] syzkaller0: entered allmulticast mode [ 687.104553][T12572] syzkaller0: entered promiscuous mode [ 687.127033][T12572] syzkaller0: entered allmulticast mode [ 687.486047][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 687.494265][ C0] lec:lec_tx_timeout: lec0 [ 687.499548][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 687.744781][T12577] syzkaller0: entered promiscuous mode [ 687.769751][T12577] syzkaller0: entered allmulticast mode [ 688.890629][T12606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2139'. [ 689.332295][T12611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2141'. [ 689.937387][T12619] netlink: 'syz.5.2144': attribute type 10 has an invalid length. [ 689.960305][T12620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2145'. [ 690.284200][T12622] syzkaller0: entered promiscuous mode [ 690.329730][T12622] syzkaller0: entered allmulticast mode [ 690.617996][T12627] syzkaller0: entered promiscuous mode [ 691.428143][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2153'. [ 692.070973][T12657] netlink: 'syz.2.2157': attribute type 10 has an invalid length. [ 692.506173][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 692.514465][ C0] lec:lec_tx_timeout: lec0 [ 692.520118][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 692.619236][T12664] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2159'. [ 693.608652][T12677] syzkaller0: entered promiscuous mode [ 695.229884][T12693] syzkaller0: entered promiscuous mode [ 695.256305][T12693] syzkaller0: entered allmulticast mode [ 695.527861][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.534448][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.778087][T12717] syzkaller0: entered promiscuous mode [ 697.246945][T12731] nbd1: detected capacity change from 0 to 63 [ 697.280910][T12734] block nbd1: NBD_DISCONNECT [ 697.320762][T12734] block nbd1: Disconnected due to user request. [ 697.370389][T12734] block nbd1: shutting down sockets [ 697.383792][ T6109] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.404358][ T6109] Buffer I/O error on dev nbd1, logical block 0, async page read [ 697.437289][T12736] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2178'. [ 697.487588][ T1608] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 697.498362][ T1608] Buffer I/O error on dev nbd1, logical block 1, async page read [ 697.511701][ T1608] Buffer I/O error on dev nbd1, logical block 2, async page read [ 697.520368][ T1608] Buffer I/O error on dev nbd1, logical block 3, async page read [ 697.529003][ T6109] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.539009][ T6109] Buffer I/O error on dev nbd1, logical block 0, async page read [ 697.546251][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 697.547393][ T6109] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.554914][ C0] lec:lec_tx_timeout: lec0 [ 697.555588][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 697.582869][ T6109] Buffer I/O error on dev nbd1, logical block 1, async page read [ 697.591683][ T6109] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.601733][ T6109] Buffer I/O error on dev nbd1, logical block 2, async page read [ 697.609905][ T6109] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.619722][ T6109] Buffer I/O error on dev nbd1, logical block 3, async page read [ 697.627860][ T6109] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.669617][ T6109] Buffer I/O error on dev nbd1, logical block 0, async page read [ 697.718974][ T6109] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.756619][ T6109] Buffer I/O error on dev nbd1, logical block 1, async page read [ 697.781725][ T6109] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.816713][ T6109] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.842104][ T6109] ldm_validate_partition_table(): Disk read failed. [ 697.880814][ T6109] Dev nbd1: unable to read RDB block 0 [ 697.899647][T12722] syzkaller0: entered promiscuous mode [ 697.908628][ T6109] nbd1: unable to read partition table [ 697.951078][ T6109] ldm_validate_partition_table(): Disk read failed. [ 697.960170][ T6109] Dev nbd1: unable to read RDB block 0 [ 698.009455][ T6109] nbd1: unable to read partition table [ 698.443153][T12744] netlink: 'syz.4.2182': attribute type 16 has an invalid length. [ 698.470026][T12745] bridge2: port 1(erspan0) entered disabled state [ 698.544492][T12744] netlink: 'syz.4.2182': attribute type 17 has an invalid length. [ 699.087704][T12752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2185'. [ 699.354367][T12756] netlink: 'syz.5.2187': attribute type 10 has an invalid length. [ 699.630228][T12744] bridge2: port 1(erspan0) entered blocking state [ 699.637522][T12744] bridge2: port 1(erspan0) entered forwarding state [ 699.922351][T12744] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 699.985366][T12759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2188'. [ 700.977740][T12773] vlan3: entered promiscuous mode [ 701.016455][T12773] syz_tun: entered promiscuous mode [ 701.088969][T12780] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2194'. [ 701.530368][T12785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2198'. [ 702.051356][T12794] netlink: 'syz.1.2201': attribute type 10 has an invalid length. [ 702.251646][T12801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2205'. [ 702.322434][T12801] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2205'. [ 702.372678][T12801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2205'. [ 702.566094][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 702.574351][ C0] lec:lec_tx_timeout: lec0 [ 702.579790][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 702.731383][T12803] sctp: Trying to GSO but underlying device doesn't support it. [ 702.744350][T12808] netlink: 'syz.5.2209': attribute type 10 has an invalid length. [ 702.808968][T12805] syzkaller0: entered promiscuous mode [ 702.814608][T12805] syzkaller0: entered allmulticast mode [ 703.352101][T12817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2212'. [ 703.386928][T12819] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2211'. [ 703.824718][T12828] netlink: 240 bytes leftover after parsing attributes in process `syz.5.2215'. [ 703.927194][T12830] netlink: 'syz.1.2216': attribute type 10 has an invalid length. [ 703.962660][T12832] netlink: 'syz.1.2216': attribute type 10 has an invalid length. [ 704.646261][T12830] bond0: (slave dummy0): Releasing backup interface [ 704.689065][T12830] dummy0: left promiscuous mode [ 704.776946][T12830] dummy0: entered promiscuous mode [ 704.829736][T12830] team0: Port device dummy0 added [ 704.876815][T12832] dummy0: left promiscuous mode [ 705.040318][T12832] team0: Port device dummy0 removed [ 705.116526][T12832] dummy0: entered promiscuous mode [ 705.134846][T12832] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 705.165555][T12843] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2220'. [ 705.180456][T12840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2220'. [ 705.196967][T12843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2220'. [ 705.584533][T12846] netlink: 'syz.5.2222': attribute type 10 has an invalid length. [ 705.819816][T12849] syzkaller0: entered promiscuous mode [ 705.825494][T12849] syzkaller0: entered allmulticast mode [ 706.013049][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2226'. [ 706.672826][T12865] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2231'. [ 707.057161][T12872] netlink: 'syz.4.2234': attribute type 10 has an invalid length. [ 707.115283][T12872] bond0: (slave dummy0): Releasing backup interface [ 707.157085][T12875] netlink: 'syz.4.2234': attribute type 10 has an invalid length. [ 707.288111][T12872] team0: Port device dummy0 added [ 707.320641][T12879] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2235'. [ 707.414680][T12875] team0: Port device dummy0 removed [ 707.532926][T12875] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 707.585601][T12885] netlink: 'syz.5.2238': attribute type 10 has an invalid length. [ 707.630262][T12874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2235'. [ 708.553645][T12892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2241'. [ 708.695688][T12894] syzkaller0: entered promiscuous mode [ 708.755021][T12894] syzkaller0: entered allmulticast mode [ 708.913791][T12894] tipc: Enabling of bearer rejected, failed to enable media [ 708.946044][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6360 ms [ 708.954370][ C0] lec:lec_tx_timeout: lec0 [ 708.959645][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 710.083110][T12908] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2247'. [ 710.528607][T12915] netlink: 'syz.5.2250': attribute type 10 has an invalid length. [ 710.591854][T12916] netlink: 'syz.5.2250': attribute type 10 has an invalid length. [ 710.722303][T12915] bond0: (slave dummy0): Releasing backup interface [ 710.770035][T12922] netlink: 'syz.1.2252': attribute type 10 has an invalid length. [ 710.806545][T12915] dummy0: entered promiscuous mode [ 710.836614][T12915] team0: Port device dummy0 added [ 710.908768][T12916] dummy0: left promiscuous mode [ 710.942153][T12916] team0: Port device dummy0 removed [ 711.028927][T12916] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 711.895523][T12940] syzkaller0: entered promiscuous mode [ 711.906369][T12940] syzkaller0: entered allmulticast mode [ 711.982608][T12940] tipc: Enabling of bearer rejected, failed to enable media [ 712.517046][T12953] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2262'. [ 712.628993][T12945] netlink: 'syz.4.2259': attribute type 1 has an invalid length. [ 712.650288][T12945] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2259'. [ 712.696974][T12945] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.323849][T12966] netlink: 'syz.0.2267': attribute type 10 has an invalid length. [ 713.341041][T12966] bond0: (slave dummy0): Releasing backup interface [ 713.369958][T12966] dummy0: left promiscuous mode [ 713.472189][T12966] dummy0: entered promiscuous mode [ 713.559753][T12966] team0: Port device dummy0 added [ 713.771019][T12974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2271'. [ 713.949178][T12972] syzkaller0: entered promiscuous mode [ 713.979234][T12972] syzkaller0: entered allmulticast mode [ 714.556718][T12984] syzkaller0: entered promiscuous mode [ 714.573087][T12984] syzkaller0: entered allmulticast mode [ 714.627719][T12982] tipc: Enabling of bearer rejected, failed to enable media [ 714.715991][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 714.724241][ C0] lec:lec_tx_timeout: lec0 [ 714.736709][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 715.342662][T12995] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2277'. [ 716.238497][T13006] netlink: 'syz.1.2282': attribute type 10 has an invalid length. [ 716.638398][T13006] bond0: (slave dummy0): Releasing backup interface [ 716.729891][T13006] dummy0: left promiscuous mode [ 716.817039][T13006] dummy0: entered promiscuous mode [ 716.875067][T13006] team0: Port device dummy0 added [ 717.566256][T13026] syzkaller0: entered promiscuous mode [ 717.572155][T13026] syzkaller0: entered allmulticast mode [ 717.595342][T13030] netlink: 'syz.1.2287': attribute type 2 has an invalid length. [ 718.228855][T13044] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2291'. [ 718.248545][T13036] batadv_slave_0: entered promiscuous mode [ 718.342159][T13034] batadv_slave_0: left promiscuous mode [ 719.252990][T13058] netlink: 'syz.2.2297': attribute type 10 has an invalid length. [ 719.637464][T13062] syzkaller0: entered promiscuous mode [ 719.643143][T13062] syzkaller0: entered allmulticast mode [ 720.250570][T13075] syzkaller0: entered promiscuous mode [ 720.276739][T13075] syzkaller0: entered allmulticast mode [ 720.466027][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms [ 720.474245][ C0] lec:lec_tx_timeout: lec0 [ 720.482235][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 720.822516][T13085] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2308'. [ 721.269824][T13093] netlink: 'syz.2.2312': attribute type 10 has an invalid length. [ 722.051600][T13101] syzkaller0: entered promiscuous mode [ 722.116148][T13101] syzkaller0: entered allmulticast mode [ 722.357545][T13106] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2318'. [ 722.776151][T13108] lo speed is unknown, defaulting to 1000 [ 723.432512][T13124] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2323'. [ 723.745378][T13111] syzkaller0: entered promiscuous mode [ 723.792719][T13111] syzkaller0: entered allmulticast mode [ 725.496214][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 725.504566][ C0] lec:lec_tx_timeout: lec0 [ 725.509937][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 725.745651][T13152] syzkaller0: entered promiscuous mode [ 725.757198][T13152] syzkaller0: entered allmulticast mode [ 726.109164][T13166] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2333'. [ 728.043311][T13174] syzkaller0: entered promiscuous mode [ 728.076374][T13174] syzkaller0: entered allmulticast mode [ 730.011902][T13213] syzkaller0: entered promiscuous mode [ 730.041101][T13213] syzkaller0: entered allmulticast mode [ 730.526395][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 730.534622][ C0] lec:lec_tx_timeout: lec0 [ 730.540926][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 731.434852][T13235] syzkaller0: entered promiscuous mode [ 731.440844][T13235] syzkaller0: entered allmulticast mode [ 733.103290][T13256] syzkaller0: entered promiscuous mode [ 733.160457][T13256] syzkaller0: entered allmulticast mode [ 735.556134][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 735.564373][ C0] lec:lec_tx_timeout: lec0 [ 735.569513][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 735.885843][T13305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2379'. [ 736.073094][T13305] netlink: 'syz.0.2379': attribute type 27 has an invalid length. [ 737.408591][T13324] syzkaller0: entered promiscuous mode [ 737.414510][T13324] syzkaller0: entered allmulticast mode [ 738.051343][T13326] syzkaller0: entered promiscuous mode [ 738.103855][T13326] syzkaller0: entered allmulticast mode [ 738.462805][T13351] netlink: 240 bytes leftover after parsing attributes in process `syz.5.2390'. [ 738.692520][T13355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2392'. [ 738.887875][T13355] netlink: 'syz.1.2392': attribute type 27 has an invalid length. [ 739.133222][T13359] tipc: Failed to remove unknown binding: 66,0,0/0:1122094342/1122094343 [ 739.183328][T13359] tipc: Failed to remove unknown binding: 66,0,0/0:1122094342/1122094343 [ 739.858884][T13374] block nbd5: NBD_DISCONNECT [ 740.654016][T13386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2402'. [ 740.748712][T13380] syzkaller0: entered promiscuous mode [ 740.771024][T13380] syzkaller0: entered allmulticast mode [ 741.288083][T13400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2406'. [ 741.409862][T13400] netlink: 'syz.0.2406': attribute type 27 has an invalid length. [ 741.471000][T13393] syzkaller0: entered promiscuous mode [ 741.497471][T13393] syzkaller0: entered allmulticast mode [ 741.590301][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6020 ms [ 741.598530][ C0] lec:lec_tx_timeout: lec0 [ 741.603808][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 742.596316][T13417] block nbd0: NBD_DISCONNECT [ 743.292821][T13435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2417'. [ 744.174610][T13440] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2418'. [ 744.298209][T13439] nbd0: detected capacity change from 0 to 63 [ 744.356865][T13444] block nbd0: NBD_DISCONNECT [ 744.362507][T13444] block nbd0: Disconnected due to user request. [ 744.392305][T13444] block nbd0: shutting down sockets [ 744.447153][T13440] netlink: 'syz.5.2418': attribute type 27 has an invalid length. [ 744.792040][T13442] syzkaller0: entered promiscuous mode [ 744.879744][T13442] syzkaller0: entered allmulticast mode [ 746.092401][T13453] syzkaller0: entered promiscuous mode [ 746.124010][T13453] syzkaller0: entered allmulticast mode [ 747.346057][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 747.354334][ C0] lec:lec_tx_timeout: lec0 [ 747.360349][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 747.892513][T13496] nbd2: detected capacity change from 0 to 63 [ 747.932503][T13497] block nbd2: NBD_DISCONNECT [ 747.957633][T13499] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2434'. [ 747.990322][T13497] block nbd2: Disconnected due to user request. [ 748.016667][T13497] block nbd2: shutting down sockets [ 748.044019][ C0] blk_print_req_error: 136 callbacks suppressed [ 748.044090][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 748.060363][ C0] buffer_io_error: 138 callbacks suppressed [ 748.060424][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 748.074328][ C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 748.084070][ C0] Buffer I/O error on dev nbd2, logical block 1, async page read [ 748.092054][ C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 748.101777][ C0] Buffer I/O error on dev nbd2, logical block 2, async page read [ 748.109774][ C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 748.119610][ C0] Buffer I/O error on dev nbd2, logical block 3, async page read [ 748.148679][ T6122] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 748.192951][ T6122] Buffer I/O error on dev nbd2, logical block 0, async page read [ 748.210392][ T6122] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 748.221302][ T6122] Buffer I/O error on dev nbd2, logical block 1, async page read [ 748.241812][ T6122] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 748.272965][ T6122] Buffer I/O error on dev nbd2, logical block 2, async page read [ 748.306354][ T6122] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 748.344720][ T6122] Buffer I/O error on dev nbd2, logical block 3, async page read [ 748.356378][ T6122] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 748.416081][ T6122] Buffer I/O error on dev nbd2, logical block 0, async page read [ 748.424103][ T6122] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 748.489808][ T6122] Buffer I/O error on dev nbd2, logical block 1, async page read [ 748.553529][ T6122] ldm_validate_partition_table(): Disk read failed. [ 748.600772][ T6122] Dev nbd2: unable to read RDB block 0 [ 748.630680][ T6122] nbd2: unable to read partition table [ 749.090966][ T6122] ldm_validate_partition_table(): Disk read failed. [ 749.115257][ T6122] Dev nbd2: unable to read RDB block 0 [ 749.135692][ T6122] nbd2: unable to read partition table [ 749.217789][T13515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2438'. [ 749.347815][T13517] syzkaller0: entered promiscuous mode [ 749.385154][T13517] syzkaller0: entered allmulticast mode [ 749.809824][T13527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2444'. [ 750.794259][T13540] nbd2: detected capacity change from 0 to 63 [ 750.799455][T13546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2450'. [ 750.864256][T13544] block nbd2: NBD_DISCONNECT [ 750.882779][T13544] block nbd2: Disconnected due to user request. [ 750.911414][T13544] block nbd2: shutting down sockets [ 750.934254][ T6109] ldm_validate_partition_table(): Disk read failed. [ 750.968529][ T6109] Dev nbd2: unable to read RDB block 0 [ 750.987096][ T6109] nbd2: unable to read partition table [ 751.052664][ T6109] ldm_validate_partition_table(): Disk read failed. [ 751.113131][ T6109] Dev nbd2: unable to read RDB block 0 [ 751.148643][ T6109] nbd2: unable to read partition table [ 751.730522][T13555] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2453'. [ 751.806099][T13555] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2453'. [ 751.838527][T13558] syzkaller0: entered promiscuous mode [ 751.887247][T13558] syzkaller0: entered allmulticast mode [ 751.936096][T13555] syzkaller0: entered promiscuous mode [ 751.941758][T13555] syzkaller0: entered allmulticast mode [ 752.386246][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 752.394442][ C0] lec:lec_tx_timeout: lec0 [ 752.399754][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 753.277954][T13583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2464'. [ 753.496186][T13585] nbd2: detected capacity change from 0 to 63 [ 753.544376][ T5785] block nbd2: Receive control failed (result -104) [ 753.912003][T13593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2467'. [ 754.184817][T13599] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2470'. [ 754.669219][T13605] syzkaller0: entered promiscuous mode [ 754.674901][T13605] syzkaller0: entered allmulticast mode [ 755.396821][T13618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2478'. [ 755.497422][T13618] netlink: 'syz.5.2478': attribute type 27 has an invalid length. [ 756.074374][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2484'. [ 756.972111][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.979137][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.051186][T13646] syzkaller0: entered promiscuous mode [ 757.093920][T13646] syzkaller0: entered allmulticast mode [ 757.416036][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 757.424471][ C0] lec:lec_tx_timeout: lec0 [ 757.430181][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 757.802313][T13657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2494'. [ 757.861150][T13657] netlink: 'syz.4.2494': attribute type 27 has an invalid length. [ 758.455268][T13664] syzkaller0: entered promiscuous mode [ 758.479373][T13664] syzkaller0: entered allmulticast mode [ 758.538603][T13668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.616173][T13668] netlink: 'syz.4.2499': attribute type 10 has an invalid length. [ 758.670087][T13674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2499'. [ 759.272281][T13687] syzkaller0: entered promiscuous mode [ 759.312540][T13687] syzkaller0: entered allmulticast mode [ 760.080991][T13701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2509'. [ 760.227559][T13701] netlink: 'syz.2.2509': attribute type 27 has an invalid length. [ 761.429217][T13716] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 761.472188][T13716] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 761.682460][T13720] syzkaller0: entered promiscuous mode [ 761.760949][T13720] syzkaller0: entered allmulticast mode [ 762.446005][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 762.454331][ C0] lec:lec_tx_timeout: lec0 [ 762.461326][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 762.633836][T13738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2522'. [ 762.784294][T13738] netlink: 'syz.0.2522': attribute type 27 has an invalid length. [ 763.887274][T13760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2529'. [ 765.906667][T13796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2536'. [ 766.007379][T13796] netlink: 'syz.2.2536': attribute type 27 has an invalid length. [ 766.651592][T13807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2541'. [ 767.028872][T13809] 8021q: adding VLAN 0 to HW filter on device bond1 [ 767.333866][T13815] syzkaller0: entered promiscuous mode [ 767.356257][T13815] syzkaller0: entered allmulticast mode [ 767.476089][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 767.484507][ C0] lec:lec_tx_timeout: lec0 [ 767.489945][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 769.016700][T13845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2550'. [ 769.236877][T13845] netlink: 'syz.1.2550': attribute type 27 has an invalid length. [ 770.686872][T13870] syzkaller0: entered promiscuous mode [ 770.692541][T13870] syzkaller0: entered allmulticast mode [ 771.333190][T13876] syzkaller0: entered promiscuous mode [ 771.339654][T13876] syzkaller0: entered allmulticast mode [ 772.047018][T13884] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2567'. [ 772.178064][T13887] netlink: 'syz.5.2567': attribute type 27 has an invalid length. [ 772.516005][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 772.524254][ C0] lec:lec_tx_timeout: lec0 [ 772.529648][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 773.609146][T13904] syzkaller0: entered promiscuous mode [ 773.639970][T13904] syzkaller0: entered allmulticast mode [ 774.346712][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2581'. [ 774.471100][T13912] syzkaller0: entered promiscuous mode [ 774.477185][T13912] syzkaller0: entered allmulticast mode [ 774.491191][T13915] tipc: Enabled bearer , priority 0 [ 774.561724][T13921] netlink: 'syz.0.2581': attribute type 27 has an invalid length. [ 775.616217][ T24] tipc: Node number set to 3243734147 [ 776.548159][T13952] tipc: Enabling of bearer rejected, already enabled [ 777.140080][T13958] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2596'. [ 777.277838][T13958] netlink: 'syz.5.2596': attribute type 27 has an invalid length. [ 777.545995][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 777.554443][ C0] lec:lec_tx_timeout: lec0 [ 777.559663][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 778.824491][T13983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2606'. [ 778.941188][T13976] 8021q: adding VLAN 0 to HW filter on device bond2 [ 779.730593][T13993] syzkaller0: entered promiscuous mode [ 779.756314][T13993] syzkaller0: entered allmulticast mode [ 779.798167][T13995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2610'. [ 779.864713][T13993] tipc: Enabled bearer , priority 0 [ 779.933930][T13992] tipc: Resetting bearer [ 779.975578][T13998] netlink: 'syz.2.2610': attribute type 27 has an invalid length. [ 780.022807][T13992] tipc: Disabling bearer [ 780.856765][T14006] syzkaller0: entered promiscuous mode [ 780.862432][T14006] syzkaller0: entered allmulticast mode [ 781.146666][T14008] syzkaller0: entered promiscuous mode [ 781.152561][T14008] syzkaller0: entered allmulticast mode [ 781.648166][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2618'. [ 782.291972][T14023] syzkaller0: entered promiscuous mode [ 782.336246][T14023] syzkaller0: entered allmulticast mode [ 782.380005][T14036] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2623'. [ 782.477942][T14036] netlink: 'syz.5.2623': attribute type 27 has an invalid length. [ 782.581925][T14027] 8021q: adding VLAN 0 to HW filter on device bond4 [ 783.355969][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5800 ms [ 783.364252][ C0] lec:lec_tx_timeout: lec0 [ 783.370056][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 783.437569][T14040] tipc: Enabled bearer , priority 0 [ 783.642387][T14039] tipc: Disabling bearer [ 783.828853][ T1522] block nbd2: Possible stuck request ffff888109533c00: control (read@0,1024B). Runtime 30 seconds [ 783.839899][ T1522] block nbd2: Possible stuck request ffff888109533d80: control (read@1024,1024B). Runtime 30 seconds [ 783.851468][ T1522] block nbd2: Possible stuck request ffff888109533f00: control (read@2048,1024B). Runtime 30 seconds [ 783.864386][ T1522] block nbd2: Possible stuck request ffff888109534080: control (read@3072,1024B). Runtime 30 seconds [ 784.483438][T14067] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2632'. [ 784.586595][T14067] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2632'. [ 784.649409][T14071] syzkaller0: entered promiscuous mode [ 784.655080][T14071] syzkaller0: entered allmulticast mode [ 784.967701][T14075] 8021q: adding VLAN 0 to HW filter on device bond6 [ 785.257806][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2636'. [ 785.447406][T14078] netlink: 'syz.5.2636': attribute type 27 has an invalid length. [ 786.143031][T14082] syzkaller0: entered promiscuous mode [ 786.172291][T14082] syzkaller0: entered allmulticast mode [ 786.955231][T14095] tipc: Enabled bearer , priority 0 [ 787.370931][T14094] tipc: Disabling bearer [ 788.302625][T14125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2650'. [ 788.374300][T14122] 8021q: adding VLAN 0 to HW filter on device bond3 [ 788.386006][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 788.394365][ C0] lec:lec_tx_timeout: lec0 [ 788.399736][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 788.426948][T14125] netlink: 'syz.1.2650': attribute type 27 has an invalid length. [ 790.317846][T14148] syzkaller0: entered promiscuous mode [ 790.347650][T14148] syzkaller0: entered allmulticast mode [ 790.984933][T14158] 8021q: adding VLAN 0 to HW filter on device bond7 [ 791.097705][T14164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2664'. [ 793.189470][T14192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2676'. [ 793.416059][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 793.424295][ C0] lec:lec_tx_timeout: lec0 [ 793.429528][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 794.096951][T14201] nbd: nbd2 already in use [ 794.144842][T14201] block nbd2: NBD_DISCONNECT [ 794.170726][T14201] block nbd2: Send disconnect failed -32 [ 794.223219][T14201] block nbd2: shutting down sockets [ 794.277590][ C0] blk_print_req_error: 286 callbacks suppressed [ 794.277659][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 794.293993][ C0] buffer_io_error: 286 callbacks suppressed [ 794.294058][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 794.308063][ C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 794.317778][ C0] Buffer I/O error on dev nbd2, logical block 1, async page read [ 794.325712][ C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 794.335504][ C0] Buffer I/O error on dev nbd2, logical block 2, async page read [ 794.343510][ C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 794.353232][ C0] Buffer I/O error on dev nbd2, logical block 3, async page read [ 794.369669][ T6109] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 794.416105][ T6109] Buffer I/O error on dev nbd2, logical block 0, async page read [ 794.459377][ T6109] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 794.501524][ T6109] Buffer I/O error on dev nbd2, logical block 1, async page read [ 794.556488][ T6109] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 794.596740][ T6109] Buffer I/O error on dev nbd2, logical block 2, async page read [ 794.633118][ T6109] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 794.668669][ T6109] Buffer I/O error on dev nbd2, logical block 3, async page read [ 794.712780][ T6109] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 794.776356][ T6109] Buffer I/O error on dev nbd2, logical block 0, async page read [ 794.795068][ T6109] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 794.823079][T14207] syzkaller0: entered promiscuous mode [ 794.836576][T14207] syzkaller0: entered allmulticast mode [ 794.856095][ T6109] Buffer I/O error on dev nbd2, logical block 1, async page read [ 794.867758][ T6109] ldm_validate_partition_table(): Disk read failed. [ 794.894358][ T6109] Dev nbd2: unable to read RDB block 0 [ 794.934344][ T6109] nbd2: unable to read partition table [ 795.063226][ T6109] ldm_validate_partition_table(): Disk read failed. [ 795.081799][ T6109] Dev nbd2: unable to read RDB block 0 [ 795.108820][ T6109] nbd2: unable to read partition table [ 795.951045][T14223] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2689'. [ 797.308924][T14235] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2694'. [ 797.407703][T14235] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2694'. [ 797.503209][T14235] syzkaller0: entered promiscuous mode [ 797.526356][T14235] syzkaller0: entered allmulticast mode [ 797.704761][T14238] netlink: 'syz.4.2695': attribute type 10 has an invalid length. [ 797.791774][T14238] bond0: (slave dummy0): Releasing backup interface [ 797.941790][T14238] team0: Port device dummy0 added [ 798.435979][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 798.444238][ C0] lec:lec_tx_timeout: lec0 [ 798.450842][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 798.932902][T14259] netlink: 240 bytes leftover after parsing attributes in process `syz.5.2703'. [ 799.628183][T14262] syzkaller0: entered promiscuous mode [ 799.867325][T14277] netlink: 'syz.2.2710': attribute type 10 has an invalid length. [ 800.358400][T14274] syzkaller0: entered promiscuous mode [ 800.380969][T14274] syzkaller0: entered allmulticast mode [ 801.653476][T14301] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2718'. [ 802.064541][T14305] syzkaller0: entered promiscuous mode [ 802.096290][T14305] syzkaller0: entered allmulticast mode [ 802.235795][T14313] netlink: 'syz.1.2724': attribute type 10 has an invalid length. [ 802.572923][T14316] syzkaller0: entered promiscuous mode [ 803.247014][T14332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2730'. [ 803.476020][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 803.484377][ C0] lec:lec_tx_timeout: lec0 [ 803.489801][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 804.009361][T14342] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2734'. [ 804.337293][T14346] erspan0: entered promiscuous mode [ 804.360093][T14346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2736'. [ 804.559348][T14351] netlink: 'syz.4.2739': attribute type 10 has an invalid length. [ 804.701775][T14352] syzkaller0: entered promiscuous mode [ 804.726069][T14352] syzkaller0: entered allmulticast mode [ 805.185115][T14362] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 805.218151][T14362] tipc: Resetting bearer [ 806.098215][T14374] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2749'. [ 806.269978][T14376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2750'. [ 806.445687][T14381] netlink: 'syz.4.2753': attribute type 10 has an invalid length. [ 806.970070][T14384] 8021q: adding VLAN 0 to HW filter on device bond3 [ 807.450122][T14396] syzkaller0: entered promiscuous mode [ 807.467538][T14396] syzkaller0: entered allmulticast mode [ 808.506023][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 808.514380][ C0] lec:lec_tx_timeout: lec0 [ 808.519799][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 808.742476][T14413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2764'. [ 809.218041][T14421] bond1: option mode: unable to set because the bond device is up [ 809.938639][T14431] syzkaller0: entered promiscuous mode [ 809.950225][T14431] syzkaller0: entered allmulticast mode [ 810.908447][T14451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2780'. [ 813.194142][T14494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2794'. [ 813.435191][T14484] syzkaller0: entered promiscuous mode [ 813.513718][T14484] syzkaller0: entered allmulticast mode [ 813.535973][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 813.544322][ C0] lec:lec_tx_timeout: lec0 [ 813.550351][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 814.072827][T14499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2795'. [ 814.495246][T14504] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 814.672214][T14513] bond1: option mode: unable to set because the bond device is up [ 815.986703][ T5785] Bluetooth: hci0: command 0x0406 tx timeout [ 816.449897][T14536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2806'. [ 816.560958][T14539] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 816.617913][T14539] tipc: Resetting bearer [ 817.543419][T14553] bond1: option mode: unable to set because the bond device is up [ 818.342039][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2822'. [ 818.408760][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.424065][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.152888][T14581] syzkaller0: entered promiscuous mode [ 819.196250][T14581] syzkaller0: entered allmulticast mode [ 819.345955][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 819.354355][ C0] lec:lec_tx_timeout: lec0 [ 819.360021][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 819.918734][T14595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2830'. [ 820.041404][T14599] netlink: 'syz.4.2830': attribute type 27 has an invalid length. [ 820.097519][T14600] netlink: 'syz.1.2832': attribute type 10 has an invalid length. [ 820.146802][T14600] vlan1: entered allmulticast mode [ 820.166553][T14600] veth0_vlan: entered allmulticast mode [ 820.238969][T14600] vlan1: entered promiscuous mode [ 820.279464][T14600] team0: Port device vlan1 added [ 820.478972][T14602] syzkaller0: entered promiscuous mode [ 820.484672][T14602] syzkaller0: entered allmulticast mode [ 820.627379][T14607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2835'. [ 820.890857][T14611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2837'. [ 821.641194][T14621] syzkaller0: entered promiscuous mode [ 821.647493][T14621] syzkaller0: entered allmulticast mode [ 822.949555][T14642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2846'. [ 823.057985][T14645] netlink: 'syz.4.2846': attribute type 27 has an invalid length. [ 823.366978][T14648] syzkaller0: entered promiscuous mode [ 823.372725][T14648] syzkaller0: entered allmulticast mode [ 823.707339][T14657] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2852'. [ 824.386021][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 824.394288][ C0] lec:lec_tx_timeout: lec0 [ 824.399600][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 824.983972][T14680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2860'. [ 825.207808][T14686] netlink: 'syz.4.2860': attribute type 27 has an invalid length. [ 825.325755][T14685] syzkaller0: entered promiscuous mode [ 825.338456][T14685] syzkaller0: entered allmulticast mode [ 826.567694][T14704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2870'. [ 827.240174][T12533] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 827.278148][T12533] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 827.300560][T12533] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 827.334899][T12533] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 827.385841][T12533] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 827.733406][T14718] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2875'. [ 827.800693][T14712] lo speed is unknown, defaulting to 1000 [ 827.909132][T14720] netlink: 'syz.5.2875': attribute type 27 has an invalid length. [ 829.172228][T14733] tipc: Enabled bearer , priority 0 [ 829.198557][T14739] syzkaller0: entered promiscuous mode [ 829.204202][T14739] syzkaller0: entered allmulticast mode [ 829.327964][T14733] tipc: Resetting bearer [ 829.371778][T14732] tipc: Resetting bearer [ 829.405979][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 829.414217][ C0] lec:lec_tx_timeout: lec0 [ 829.420636][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 829.506194][T12533] Bluetooth: hci4: command tx timeout [ 829.528043][T14732] tipc: Disabling bearer [ 829.804482][T14712] chnl_net:caif_netlink_parms(): no params data found [ 830.095149][ T1315] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 830.136061][ T1315] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.828698][T14764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2888'. [ 830.977631][T14767] netlink: 'syz.2.2888': attribute type 27 has an invalid length. [ 831.321077][ T1315] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.332780][ T1315] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.373803][T14770] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 831.411075][T14770] tipc: Resetting bearer [ 831.520259][ T1315] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.587375][T12533] Bluetooth: hci4: command tx timeout [ 831.636383][ T1315] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.871260][ T1315] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.932619][ T1315] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.396446][T14712] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.428409][T14712] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.466873][T14712] bridge_slave_0: entered allmulticast mode [ 832.498082][T14712] bridge_slave_0: entered promiscuous mode [ 832.566283][T14712] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.598600][T14712] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.639720][T14712] bridge_slave_1: entered allmulticast mode [ 832.664077][T14712] bridge_slave_1: entered promiscuous mode [ 833.073864][T14795] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2899'. [ 833.248165][T14712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 833.291311][T14795] netlink: 'syz.5.2899': attribute type 27 has an invalid length. [ 833.315344][T14712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 833.668605][T12533] Bluetooth: hci4: command tx timeout [ 834.436044][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 834.444365][ C0] lec:lec_tx_timeout: lec0 [ 834.449880][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 834.480674][T14712] team0: Port device team_slave_0 added [ 834.586478][ T1315] bridge_slave_1: left allmulticast mode [ 834.592375][ T1315] bridge_slave_1: left promiscuous mode [ 834.628046][ T1315] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.672544][ T1315] bridge_slave_0: left allmulticast mode [ 834.696514][ T1315] bridge_slave_0: left promiscuous mode [ 834.702982][ T1315] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.470073][ T1315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.500226][ T1315] bond_slave_0: left promiscuous mode [ 835.521966][ T1315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.533383][ T1315] bond_slave_1: left promiscuous mode [ 835.553252][ T1315] bond0 (unregistering): (slave team0): Releasing backup interface [ 835.569118][ T1315] bond0 (unregistering): Released all slaves [ 835.590264][ T1315] bond1 (unregistering): Released all slaves [ 835.630339][ T1315] bond2 (unregistering): Released all slaves [ 835.668587][ T1315] bond3 (unregistering): Released all slaves [ 835.724946][T14712] team0: Port device team_slave_1 added [ 835.747131][T12533] Bluetooth: hci4: command tx timeout [ 835.767300][T14821] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2906'. [ 835.802552][T14822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2905'. [ 835.866860][T14824] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2906'. [ 836.133392][ T1315] tipc: Left network mode [ 836.191711][T14712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.203364][T14712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.297144][T14712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.320890][T14712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.328046][T14712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.358542][T14712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.676292][T14835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2911'. [ 836.972776][T14837] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2912'. [ 837.112819][T14712] hsr_slave_0: entered promiscuous mode [ 837.129250][T14840] netlink: 'syz.5.2912': attribute type 27 has an invalid length. [ 837.164429][T14712] hsr_slave_1: entered promiscuous mode [ 837.192851][T14712] debugfs: 'hsr0' already exists in 'hsr' [ 837.212560][T14712] Cannot create hsr debugfs directory [ 838.240078][ T1315] hsr_slave_0: left promiscuous mode [ 838.253475][ T1315] hsr_slave_1: left promiscuous mode [ 838.273516][ T1315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 838.326086][ T1315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.348735][ T1315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 838.369922][ T1315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 838.383008][ T1315] batman_adv: batadv0: Interface deactivated: macsec1 [ 838.401212][ T1315] batman_adv: batadv0: Removing interface: macsec1 [ 838.432276][ T1315] veth1_macvtap: left promiscuous mode [ 838.440211][ T1315] veth0_macvtap: left promiscuous mode [ 838.476430][ T1315] veth1_vlan: left promiscuous mode [ 839.168942][ T1315] vlan1 (unregistering): left promiscuous mode [ 839.188200][ T1315] team0 (unregistering): Port device vlan1 removed [ 839.409118][ T1315] team_slave_1 (unregistering): left promiscuous mode [ 839.438505][ T1315] team0 (unregistering): Port device team_slave_1 removed [ 839.463763][ T1315] team_slave_0 (unregistering): left promiscuous mode [ 839.474911][ T1315] team0 (unregistering): Port device team_slave_0 removed [ 839.476380][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 839.490394][ C0] lec:lec_tx_timeout: lec0 [ 839.495720][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 839.643609][ T1315] dummy0 (unregistering): left promiscuous mode [ 839.653711][ T1315] team0 (unregistering): Port device dummy0 removed [ 839.782083][T14861] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2918'. [ 839.803853][T14862] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2918'. [ 839.831314][T14869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2919'. [ 841.002322][T14886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2926'. [ 841.132730][ T1315] IPVS: stop unused estimator thread 0... [ 841.153029][T14889] netlink: 'syz.2.2926': attribute type 27 has an invalid length. [ 843.075820][T14896] lo speed is unknown, defaulting to 1000 [ 843.552734][T14923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2932'. [ 844.506000][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 844.514297][ C0] lec:lec_tx_timeout: lec0 [ 844.521245][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 844.740639][T14712] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 844.862550][T14712] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 844.963929][T14941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2938'. [ 844.985358][T14712] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 845.105780][T14712] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 845.108543][T14941] netlink: 'syz.4.2938': attribute type 27 has an invalid length. [ 846.767287][T14712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 847.053119][T14712] 8021q: adding VLAN 0 to HW filter on device team0 [ 847.167677][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.175260][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.485680][T14974] 8021q: adding VLAN 0 to HW filter on device bond5 [ 847.533026][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.540644][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.646411][T14979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2945'. [ 848.413675][T14990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2949'. [ 848.505195][T14993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2950'. [ 848.668575][T14993] netlink: 'syz.2.2950': attribute type 27 has an invalid length. [ 849.536067][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 849.544327][ C0] lec:lec_tx_timeout: lec0 [ 849.549572][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 849.919291][T15020] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2954'. [ 850.046469][T14712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 850.581120][T15025] 8021q: adding VLAN 0 to HW filter on device bond6 [ 850.922894][T14712] veth0_vlan: entered promiscuous mode [ 851.163328][T14712] veth1_vlan: entered promiscuous mode [ 851.345031][T15041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2962'. [ 851.486509][T15044] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2961'. [ 851.597659][T15045] netlink: 'syz.4.2962': attribute type 27 has an invalid length. [ 851.661576][T14712] veth0_macvtap: entered promiscuous mode [ 851.780361][T14712] veth1_macvtap: entered promiscuous mode [ 852.037486][T14712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 852.202367][T15051] sctp: [Deprecated]: syz.0.2964 (pid 15051) Use of struct sctp_assoc_value in delayed_ack socket option. [ 852.202367][T15051] Use struct sctp_sack_info instead [ 852.234045][T14712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 852.440802][ T8936] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.485509][ T8936] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.541505][ T8936] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.585191][ T8936] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.933796][T15064] syz_tun: entered allmulticast mode [ 852.959786][T15065] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2967'. [ 852.993081][T15063] syz_tun: left allmulticast mode [ 853.013774][T15068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2967'. [ 853.197995][T15071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2969'. [ 853.924156][T15088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2974'. [ 854.066544][T15078] 8021q: adding VLAN 0 to HW filter on device bond4 [ 854.556043][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 854.564294][ C0] lec:lec_tx_timeout: lec0 [ 854.569547][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 854.691789][T15097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2975'. [ 854.753565][T15099] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2977'. [ 854.796113][T15099] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 854.867078][T15099] 0ªî{X¹¦: entered allmulticast mode [ 854.880141][T15099] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 854.953383][T15105] netlink: 'syz.2.2975': attribute type 27 has an invalid length. [ 856.290134][T15129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2982'. [ 856.356521][T15129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2982'. [ 856.479957][T15131] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2983'. [ 857.082615][T15142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2985'. [ 857.318545][T15147] nbd: must specify at least one socket [ 857.468635][T15150] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 857.478803][T15150] tipc: Resetting bearer [ 857.828039][T15156] netlink: 'syz.0.2989': attribute type 27 has an invalid length. [ 858.669433][T15173] __nla_validate_parse: 1 callbacks suppressed [ 858.669508][T15173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2994'. [ 858.823646][T15176] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2994'. [ 859.022167][T15182] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2996'. [ 859.646236][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.655353][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.333784][T15194] syzkaller0: entered promiscuous mode [ 860.339846][T15194] syzkaller0: entered allmulticast mode [ 860.455446][T15209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3002'. [ 860.608280][T15209] netlink: 'syz.2.3002': attribute type 27 has an invalid length. [ 860.626544][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6060 ms [ 860.634951][ C0] lec:lec_tx_timeout: lec0 [ 860.646545][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 860.815739][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.830495][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.592660][T15224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3009'. [ 861.669541][T15227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3008'. [ 861.766695][T15229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3008'. [ 861.894492][T15231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2866'. [ 862.812850][T15242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3013'. [ 862.937790][T15243] netlink: 212924 bytes leftover after parsing attributes in process `syz.5.3014'. [ 863.488420][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 863.502117][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 863.512129][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 863.536471][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 863.572458][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 863.589055][T15246] netlink: 'syz.4.3015': attribute type 27 has an invalid length. [ 863.875626][T15250] lo speed is unknown, defaulting to 1000 [ 864.253471][T15263] __nla_validate_parse: 2 callbacks suppressed [ 864.253554][T15263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3020'. [ 864.890764][T15266] 8021q: adding VLAN 0 to HW filter on device bond7 [ 864.999273][T15276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3022'. [ 865.677207][ T5785] Bluetooth: hci2: command tx timeout [ 865.816843][T15288] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3026'. [ 866.320938][T15250] chnl_net:caif_netlink_parms(): no params data found [ 866.385933][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 866.394154][ C0] lec:lec_tx_timeout: lec0 [ 866.401343][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 866.711191][T15299] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3030'. [ 866.959393][T15299] netlink: 'syz.5.3030': attribute type 27 has an invalid length. [ 867.147721][ T1322] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.350919][T15312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3032'. [ 867.549594][ T1322] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.746332][ T5785] Bluetooth: hci2: command tx timeout [ 867.781065][ T1322] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.091929][ T1322] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.660890][T15323] 8021q: adding VLAN 0 to HW filter on device bond8 [ 868.800252][T15337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3039'. [ 868.838812][T15328] mac80211_hwsim hwsim12 ªªªªª;: renamed from wlan0 (while UP) [ 869.165169][T15250] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.197332][T15250] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.226570][T15250] bridge_slave_0: entered allmulticast mode [ 869.276556][T15250] bridge_slave_0: entered promiscuous mode [ 869.398253][T15250] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.405759][T15250] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.460553][T15250] bridge_slave_1: entered allmulticast mode [ 869.498331][T15250] bridge_slave_1: entered promiscuous mode [ 869.707018][T15354] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3043'. [ 869.826770][ T5785] Bluetooth: hci2: command tx timeout [ 869.881166][T15348] syzkaller0: entered promiscuous mode [ 870.746719][T15250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.136659][T15250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.416036][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 871.424295][ C0] lec:lec_tx_timeout: lec0 [ 871.432384][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 871.443261][ T1322] bridge_slave_1: left allmulticast mode [ 871.456068][ T1322] bridge_slave_1: left promiscuous mode [ 871.462533][ T1322] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.910972][ T5785] Bluetooth: hci2: command tx timeout [ 872.232741][T15389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3051'. [ 872.521420][ T1322] bond2 (unregistering): (slave geneve2): Releasing active interface [ 872.745569][ T1322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 872.761105][ T1322] bond_slave_0: left promiscuous mode [ 872.784129][ T1322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 872.807402][ T1322] bond_slave_1: left promiscuous mode [ 872.825789][ T1322] bond0 (unregistering): (slave team0): Releasing backup interface [ 872.841572][ T1322] bond0 (unregistering): Released all slaves [ 872.862969][ T1322] bond1 (unregistering): Released all slaves [ 872.904867][ T1322] bond2 (unregistering): Released all slaves [ 872.949144][ T1322] bond3 (unregistering): Released all slaves [ 873.012590][ T1322] bond4 (unregistering): Released all slaves [ 873.039508][ T1322] bond5 (unregistering): Released all slaves [ 873.129165][ T1322] bond6 (unregistering): Released all slaves [ 873.155569][ T1322] bond7 (unregistering): Released all slaves [ 873.281877][T15387] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 873.289584][T15392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3052'. [ 873.385432][T15250] team0: Port device team_slave_0 added [ 873.462282][T15250] team0: Port device team_slave_1 added [ 873.775200][ T1322] tipc: Left network mode [ 873.787381][T15250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 873.808924][T15250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.916086][T15250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 873.965707][T15405] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3055'. [ 874.036450][T15250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.075064][T15250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.109727][T15405] netlink: 'syz.5.3055': attribute type 27 has an invalid length. [ 874.126089][T15409] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3056'. [ 874.180551][T15250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.527886][ T1322] hsr_slave_0: left promiscuous mode [ 874.596453][ T1322] hsr_slave_1: left promiscuous mode [ 874.628004][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 874.635580][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 874.701433][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 874.756131][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 874.798257][ T1322] batman_adv: batadv0: Interface deactivated: macsec1 [ 874.831889][ T1322] batman_adv: batadv0: Removing interface: macsec1 [ 874.947140][ T1322] veth1_macvtap: left promiscuous mode [ 874.952917][ T1322] veth0_macvtap: left promiscuous mode [ 874.970110][ T1322] veth1_vlan: left promiscuous mode [ 874.981663][ T1322] veth0_vlan: left promiscuous mode [ 875.404466][T15428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3062'. [ 876.453325][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 876.461720][ C0] lec:lec_tx_timeout: lec0 [ 876.921812][ T1322] team_slave_1 (unregistering): left promiscuous mode [ 876.955272][ T1322] team0 (unregistering): Port device team_slave_1 removed [ 877.033507][ T1322] team_slave_0 (unregistering): left promiscuous mode [ 877.086203][ T1322] team0 (unregistering): Port device team_slave_0 removed [ 877.633857][ T5892] lo speed is unknown, defaulting to 1000 [ 877.640065][ T5892] infiniband syz2: ib_query_port failed (-19) [ 877.827180][T15250] hsr_slave_0: entered promiscuous mode [ 877.850758][T15250] hsr_slave_1: entered promiscuous mode [ 877.891410][T15250] debugfs: 'hsr0' already exists in 'hsr' [ 877.920845][T15250] Cannot create hsr debugfs directory [ 878.487784][T15461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3067'. [ 878.678480][T15463] netlink: 'syz.1.3067': attribute type 27 has an invalid length. [ 879.841757][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.848795][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 879.870944][ T1286] lec:lec_start_xmit: lec0:No lecd attached [ 879.887381][ T1286] eth8 selects TX queue 0, but real number of TX queues is 0 [ 880.168946][T15480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3073'. [ 881.012014][T15250] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 881.050410][T15491] loop1: detected capacity change from 0 to 8 [ 881.082449][T15250] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 881.125101][T15491] ======================================================= [ 881.125101][T15491] WARNING: The mand mount option has been deprecated and [ 881.125101][T15491] and is ignored by this kernel. Remove the mand [ 881.125101][T15491] option from the mount to silence this warning. [ 881.125101][T15491] ======================================================= [ 881.214448][T15250] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 881.276869][T15491] unable to read xattr id index table [ 881.365820][T15250] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 882.708921][T15508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3081'. [ 882.908927][T15250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.062130][T15250] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.158929][ T1315] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.166580][ T1315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.261589][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.269069][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.631178][T15522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3085'. [ 885.356361][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5480 ms [ 885.364716][ C0] lec:lec_tx_timeout: lec0 [ 885.393709][T15553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3093'. [ 885.800206][T15250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 886.271614][T15562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3098'. [ 886.435676][T15250] veth0_vlan: entered promiscuous mode [ 886.589348][T15250] veth1_vlan: entered promiscuous mode [ 886.917521][T15250] veth0_macvtap: entered promiscuous mode [ 887.007659][T15250] veth1_macvtap: entered promiscuous mode [ 887.298096][T15572] syzkaller0: entered promiscuous mode [ 887.312868][T15572] syzkaller0: entered allmulticast mode [ 887.345335][T15250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 887.497481][T15250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 887.633048][ T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.678156][ T34] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.779504][ T34] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.830813][ T34] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.373155][T15590] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3109'. [ 888.435667][T15590] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3109'. [ 889.121924][T15597] tipc: Started in network mode [ 889.134682][T15597] tipc: Node identity 522217e887dc, cluster identity 4711 [ 889.189049][T15597] tipc: Enabled bearer , priority 0 [ 889.293385][T15596] tipc: Disabling bearer [ 889.760694][T15609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3114'. [ 890.943969][T15632] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3121'. [ 891.008265][T15632] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3121'. [ 891.735713][T15647] tipc: Enabling of bearer rejected, already enabled [ 891.797156][T15643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 891.886135][T15648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 892.190962][T15653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3127'. [ 893.290897][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.352001][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.690034][ T8936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.721400][ T8936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 895.097546][T15688] tipc: Enabled bearer , priority 0 [ 895.168052][T15687] tipc: Disabling bearer [ 895.439143][T15693] loop1: detected capacity change from 0 to 2048 [ 895.528110][T15693] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 895.847158][T15693] loop1: detected capacity change from 2048 to 64 [ 896.033308][T12533] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 896.067787][T12533] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 896.081862][T15697] syz.1.3141: attempt to access beyond end of device [ 896.081862][T15697] loop1: rw=8390657, sector=1438, nr_sectors = 1 limit=64 [ 896.097118][T12533] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 896.149359][T12533] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 896.159713][T15697] buffer_io_error: 138 callbacks suppressed [ 896.159783][T15697] Buffer I/O error on dev loop1, logical block 1438, lost async page write [ 896.191482][T12533] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 896.201534][T15697] syz.1.3141: attempt to access beyond end of device [ 896.201534][T15697] loop1: rw=8390657, sector=1439, nr_sectors = 1 limit=64 [ 896.281095][T15697] Buffer I/O error on dev loop1, logical block 1439, lost async page write [ 896.366114][T15697] syz.1.3141: attempt to access beyond end of device [ 896.366114][T15697] loop1: rw=8390657, sector=1441, nr_sectors = 1 limit=64 [ 896.476703][T15697] Buffer I/O error on dev loop1, logical block 1441, lost async page write [ 896.546602][T15697] syz.1.3141: attempt to access beyond end of device [ 896.546602][T15697] loop1: rw=8390657, sector=1442, nr_sectors = 1 limit=64 [ 896.606263][T15697] Buffer I/O error on dev loop1, logical block 1442, lost async page write [ 896.647158][T15697] syz.1.3141: attempt to access beyond end of device [ 896.647158][T15697] loop1: rw=8390657, sector=1443, nr_sectors = 1 limit=64 [ 896.673353][T15697] Buffer I/O error on dev loop1, logical block 1443, lost async page write [ 896.683475][T15697] syz.1.3141: attempt to access beyond end of device [ 896.683475][T15697] loop1: rw=8390657, sector=1444, nr_sectors = 1 limit=64 [ 896.716825][T15697] Buffer I/O error on dev loop1, logical block 1444, lost async page write [ 896.750865][T15697] syz.1.3141: attempt to access beyond end of device [ 896.750865][T15697] loop1: rw=8390657, sector=1445, nr_sectors = 1 limit=64 [ 896.793586][T15697] Buffer I/O error on dev loop1, logical block 1445, lost async page write [ 896.816290][T15697] syz.1.3141: attempt to access beyond end of device [ 896.816290][T15697] loop1: rw=8390657, sector=1446, nr_sectors = 1 limit=64 [ 896.874007][T15697] Buffer I/O error on dev loop1, logical block 1446, lost async page write [ 896.935569][T15697] syz.1.3141: attempt to access beyond end of device [ 896.935569][T15697] loop1: rw=2049, sector=1447, nr_sectors = 48 limit=64 [ 896.988372][T15697] UDF-fs: warning (device loop1): udf_truncate_tail_extent: Too long extent after EOF in inode 1436: i_size: 552960 lbcount: 557056 extent 129+31744 [ 897.223444][T15714] bridge0: port 3(syz_tun) entered blocking state [ 897.250663][T15714] bridge0: port 3(syz_tun) entered disabled state [ 897.344076][T15714] syz_tun: entered allmulticast mode [ 897.678201][T14712] syz-executor: attempt to access beyond end of device [ 897.678201][T14712] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=64 [ 897.706365][T14712] Buffer I/O error on dev loop1, logical block 128, lost sync page write [ 897.772650][T15710] syzkaller0: entered promiscuous mode [ 897.817028][T15710] syzkaller0: entered allmulticast mode [ 898.307265][T12533] Bluetooth: hci3: command tx timeout [ 898.534516][ T57] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.967929][ T57] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.251506][ T57] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.461715][ T57] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.778466][T15700] chnl_net:caif_netlink_parms(): no params data found [ 900.241319][ T57] bridge_slave_1: left allmulticast mode [ 900.259869][ T57] bridge_slave_1: left promiscuous mode [ 900.276910][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.300787][ T57] bridge_slave_0: left allmulticast mode [ 900.326540][ T57] bridge_slave_0: left promiscuous mode [ 900.333099][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.386956][T12533] Bluetooth: hci3: command tx timeout [ 900.887760][T15746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3156'. [ 900.974879][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 901.031660][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 901.091887][ T57] bond0 (unregistering): Released all slaves [ 901.384903][ T57] tipc: Left network mode [ 901.583332][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 901.596925][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 901.628990][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 901.652630][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 901.663797][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 902.466182][ T5784] Bluetooth: hci3: command tx timeout [ 902.601995][T15765] syzkaller0: entered promiscuous mode [ 902.632710][T15765] syzkaller0: entered allmulticast mode [ 902.761083][T15700] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.782115][T15700] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.806504][T15700] bridge_slave_0: entered allmulticast mode [ 902.837266][T15700] bridge_slave_0: entered promiscuous mode [ 903.208970][T15700] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.236520][T15700] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.276705][T15700] bridge_slave_1: entered allmulticast mode [ 903.315135][T15700] bridge_slave_1: entered promiscuous mode [ 903.505035][ T57] hsr_slave_0: left promiscuous mode [ 903.574500][ T57] hsr_slave_1: left promiscuous mode [ 903.631393][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 903.736456][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 903.746165][ T5784] Bluetooth: hci1: command tx timeout [ 903.776597][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 903.801428][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 903.923104][ T57] veth1_macvtap: left promiscuous mode [ 903.929230][ T57] veth0_macvtap: left promiscuous mode [ 903.935601][ T57] veth1_vlan: left promiscuous mode [ 903.950247][ T57] veth0_vlan: left promiscuous mode [ 904.546873][ T5784] Bluetooth: hci3: command tx timeout [ 905.254239][ T57] team0 (unregistering): Port device team_slave_1 removed [ 905.321020][ T57] team0 (unregistering): Port device team_slave_0 removed [ 905.831226][ T5784] Bluetooth: hci1: command tx timeout [ 906.339982][T15700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 906.484474][T11882] lec:lec_start_xmit: lec0:No lecd attached [ 906.689035][T15700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.005585][T15804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3168'. [ 907.052111][T15805] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3169'. [ 907.193878][T15700] team0: Port device team_slave_0 added [ 907.224024][T15700] team0: Port device team_slave_1 added [ 907.758490][T15700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 907.787050][T15816] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 907.793554][T15700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 907.846546][T15816] block device autoloading is deprecated and will be removed. [ 907.872508][T15700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.916296][ T5784] Bluetooth: hci1: command tx timeout [ 907.943602][T15700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 907.956325][T15700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 907.983159][T15700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.080033][ T57] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.273970][ T57] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.470086][ T57] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.713168][ T57] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.958521][T15700] hsr_slave_0: entered promiscuous mode [ 908.975156][T15700] hsr_slave_1: entered promiscuous mode [ 909.014399][T15700] debugfs: 'hsr0' already exists in 'hsr' [ 909.030733][T15700] Cannot create hsr debugfs directory [ 909.351640][T15828] syzkaller0: entered promiscuous mode [ 909.358547][T15828] syzkaller0: entered allmulticast mode [ 909.882704][T15753] chnl_net:caif_netlink_parms(): no params data found [ 909.988848][ T5784] Bluetooth: hci1: command tx timeout [ 910.578720][T15854] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3180'. [ 911.026751][ T57] bridge_slave_1: left allmulticast mode [ 911.032579][ T57] bridge_slave_1: left promiscuous mode [ 911.073195][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.150150][ T57] bridge_slave_0: left allmulticast mode [ 911.162140][ T57] bridge_slave_0: left promiscuous mode [ 911.168785][T15862] nbd: must specify an index to disconnect [ 911.184726][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.282463][ T57] bond3: left allmulticast mode [ 911.307390][ T57] bond3: left promiscuous mode [ 911.329139][ T57] bridge2: port 2(bond3) entered disabled state [ 911.379006][ T57] erspan0: left allmulticast mode [ 911.384283][ T57] erspan0: left promiscuous mode [ 911.409991][ T57] bridge2: port 1(erspan0) entered disabled state [ 911.495969][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 911.504302][ C0] lec:lec_tx_timeout: lec0 [ 911.967857][T15873] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3183'. [ 913.089355][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 913.123261][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 913.143882][ T57] bond0 (unregistering): Released all slaves [ 913.162017][ T57] bond1 (unregistering): Released all slaves [ 913.215537][ T57] bond2 (unregistering): Released all slaves [ 913.238004][ T57] bond3 (unregistering): Released all slaves [ 913.297559][ T57] bond4 (unregistering): Released all slaves [ 913.323112][ T57] bond5 (unregistering): Released all slaves [ 913.381376][ T57] bond6 (unregistering): Released all slaves [ 913.404797][ T57] bond7 (unregistering): Released all slaves [ 913.469784][ T57] bond8 (unregistering): Released all slaves [ 913.915316][ T57] tipc: Disabling bearer [ 914.050851][ T57] tipc: Left network mode [ 914.680648][T15906] ===================================================== [ 914.688145][T15906] BUG: KMSAN: uninit-value in lec_atm_send+0x2207/0x55e0 [ 914.695380][T15906] lec_atm_send+0x2207/0x55e0 [ 914.700577][T15906] vcc_sendmsg+0x104e/0x11b0 [ 914.705359][T15906] ____sys_sendmsg+0xf37/0xfd0 [ 914.710606][T15906] ___sys_sendmsg+0x271/0x3b0 [ 914.715519][T15906] __sys_sendmsg+0x1aa/0x300 [ 914.720487][T15906] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 914.726390][T15906] ia32_sys_call+0x1e4a/0x4360 [ 914.731294][T15906] __do_fast_syscall_32+0x17f/0x3f0 [ 914.736871][T15906] do_fast_syscall_32+0x37/0x80 [ 914.741865][T15906] do_SYSENTER_32+0x1f/0x30 [ 914.748360][T15906] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 914.754928][T15906] [ 914.758558][T15906] Uninit was created at: [ 914.763085][T15906] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 914.769409][T15906] __alloc_skb+0x855/0x1190 [ 914.774073][T15906] vcc_sendmsg+0x601/0x11b0 [ 914.778968][T15906] ____sys_sendmsg+0xf37/0xfd0 [ 914.783928][T15906] ___sys_sendmsg+0x271/0x3b0 [ 914.789143][T15906] __sys_sendmsg+0x1aa/0x300 [ 914.793938][T15906] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 914.799841][T15906] ia32_sys_call+0x1e4a/0x4360 [ 914.804748][T15906] __do_fast_syscall_32+0x17f/0x3f0 [ 914.810229][T15906] do_fast_syscall_32+0x37/0x80 [ 914.815254][T15906] do_SYSENTER_32+0x1f/0x30 [ 914.820235][T15906] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 914.826969][T15906] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 914.829427][T15906] CPU: 1 UID: 0 PID: 15906 Comm: syz.2.3187 Tainted: G W syzkaller #0 PREEMPT(full) [ 914.840720][T15906] Tainted: [W]=WARN [ 914.844626][T15906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 914.856950][T15906] ===================================================== [ 914.864016][T15906] Disabling lock debugging due to kernel taint [ 914.902440][T15906] Kernel panic - not syncing: kmsan.panic set ... [ 914.909044][T15906] CPU: 0 UID: 0 PID: 15906 Comm: syz.2.3187 Tainted: G B W syzkaller #0 PREEMPT(full) [ 914.920207][T15906] Tainted: [B]=BAD_PAGE, [W]=WARN [ 914.925343][T15906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 914.935549][T15906] Call Trace: [ 914.938939][T15906] [ 914.941959][T15906] __dump_stack+0x26/0x30 [ 914.946467][T15906] dump_stack_lvl+0x50/0x1c0 [ 914.951230][T15906] ? dump_stack+0x12/0x25 [ 914.955735][T15906] dump_stack+0x1e/0x25 [ 914.960092][T15906] vpanic+0x7b4/0x1430 [ 914.964384][T15906] panic+0x15d/0x160 [ 914.968501][T15906] kmsan_report+0x31a/0x320 [ 914.973155][T15906] ? ia32_sys_call+0x1e4a/0x4360 [ 914.978249][T15906] ? __msan_warning+0x1b/0x30 [ 914.983169][T15906] ? lec_atm_send+0x2207/0x55e0 [ 914.988206][T15906] ? vcc_sendmsg+0x104e/0x11b0 [ 914.993203][T15906] ? ____sys_sendmsg+0xf37/0xfd0 [ 914.998327][T15906] ? ___sys_sendmsg+0x271/0x3b0 [ 915.003365][T15906] ? __sys_sendmsg+0x1aa/0x300 [ 915.008301][T15906] ? __ia32_compat_sys_sendmsg+0xa4/0x100 [ 915.014219][T15906] ? ia32_sys_call+0x1e4a/0x4360 [ 915.019295][T15906] ? __do_fast_syscall_32+0x17f/0x3f0 [ 915.024835][T15906] ? do_fast_syscall_32+0x37/0x80 [ 915.030123][T15906] ? do_SYSENTER_32+0x1f/0x30 [ 915.034952][T15906] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 915.041713][T15906] ? __alloc_skb+0x855/0x1190 [ 915.046593][T15906] ? kmsan_get_metadata+0xf1/0x160 [ 915.051893][T15906] ? kmsan_get_metadata+0xf1/0x160 [ 915.057178][T15906] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 915.063195][T15906] ? should_fail_ex+0x45/0x8c0 [ 915.068176][T15906] ? kmsan_get_metadata+0xf1/0x160 [ 915.073440][T15906] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 915.079989][T15906] ? kmsan_get_metadata+0xf1/0x160 [ 915.085281][T15906] __msan_warning+0x1b/0x30 [ 915.090031][T15906] lec_atm_send+0x2207/0x55e0 [ 915.094939][T15906] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 915.101550][T15906] ? kmsan_get_metadata+0xf1/0x160 [ 915.106834][T15906] ? kmsan_get_metadata+0xf1/0x160 [ 915.112423][T15906] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 915.118452][T15906] ? __pfx_lec_atm_send+0x10/0x10 [ 915.123662][T15906] vcc_sendmsg+0x104e/0x11b0 [ 915.128461][T15906] ? __pfx_autoremove_wake_function+0x10/0x10 [ 915.134749][T15906] ? __pfx_vcc_sendmsg+0x10/0x10 [ 915.139890][T15906] ____sys_sendmsg+0xf37/0xfd0 [ 915.144932][T15906] ___sys_sendmsg+0x271/0x3b0 [ 915.149836][T15906] ? kmsan_get_metadata+0xf1/0x160 [ 915.155158][T15906] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 915.161173][T15906] ? __rcu_read_unlock+0x6c/0xd0 [ 915.166311][T15906] ? __fget_files+0x3b4/0x4a0 [ 915.171150][T15906] ? __fget_files+0x3b9/0x4a0 [ 915.176008][T15906] ? kmsan_get_metadata+0xf1/0x160 [ 915.181318][T15906] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 915.187328][T15906] __sys_sendmsg+0x1aa/0x300 [ 915.192143][T15906] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 915.197916][T15906] ia32_sys_call+0x1e4a/0x4360 [ 915.202834][T15906] __do_fast_syscall_32+0x17f/0x3f0 [ 915.208232][T15906] do_fast_syscall_32+0x37/0x80 [ 915.213245][T15906] do_SYSENTER_32+0x1f/0x30 [ 915.217911][T15906] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 915.224441][T15906] RIP: 0023:0xf7f66f6c [ 915.228623][T15906] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 915.248388][T15906] RSP: 002b:00000000f53e450c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 915.256951][T15906] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800003c0 [ 915.265094][T15906] RDX: 0000000000008040 RSI: 0000000000000000 RDI: 0000000000000000 [ 915.273199][T15906] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 915.281282][T15906] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 915.289360][T15906] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 915.297571][T15906] [ 915.301266][T15906] Kernel Offset: disabled [ 915.305656][T15906] Rebooting in 86400 seconds..