last executing test programs: 2m5.344946855s ago: executing program 2 (id=2745): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', &(0x7f0000000200), 0x6000) 2m5.248998828s ago: executing program 2 (id=2748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000001c00)=r2) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2m4.643415959s ago: executing program 2 (id=2752): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e21, 0x5, @loopback, 0x40}], 0x2c) 2m4.643208364s ago: executing program 2 (id=2753): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000040)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) 2m4.641574191s ago: executing program 2 (id=2755): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x70bd25}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48008}, 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2000000076001f000000000000000000080000000000000005000d"], 0x20}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m4.337644505s ago: executing program 2 (id=2760): socket$inet6_tcp(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x6537) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe7}}}}}}, 0x0) 2m4.337333397s ago: executing program 32 (id=2760): socket$inet6_tcp(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x6537) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe7}}}}}}, 0x0) 1m8.891662622s ago: executing program 3 (id=3531): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x88ca, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m8.747502078s ago: executing program 3 (id=3535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x8000}, 0x4) write$tun(r0, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x5, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0xc, 0x14, 0x65, 0x1200, 0xd, 0x11, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x38}}, "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"}}, 0xfce) 1m8.618181825s ago: executing program 3 (id=3540): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x2, 0x70bd29, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x756c51182137b80d}, {0xfff5, 0x5}, {0x2, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x80}, @TCA_CAKE_MPU={0x8, 0xe, 0x34}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x204c0c5}, 0x14) sendmsg$nl_route(r0, 0x0, 0x4000000) 1m8.57570427s ago: executing program 3 (id=3541): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1m7.77415473s ago: executing program 1 (id=3555): socket(0x400000000010, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m7.732808386s ago: executing program 0 (id=3557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 1m7.645678073s ago: executing program 1 (id=3558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m7.645239964s ago: executing program 3 (id=3559): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0xfd, @private2, 0x800004}}, 0x0, 0x0, 0x26, 0x0, "bb02a3c364ca41d6357e54452401400408949292f4925a1e1ea6324d6193fcf19b49f3eefb1f56c54dc46d8b6d2ccd118aa0cc1dc2767bbe000100060000010100"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00"], 0x78) 1m7.510648323s ago: executing program 1 (id=3561): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0x1, 0xe92}, 0x50) close(r2) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7ffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m7.503070823s ago: executing program 0 (id=3562): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095004160000000006916690000000000bf6700000000000035060500e0ff1f006706000005000000160302000ee60060bf670000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 1m7.369692496s ago: executing program 0 (id=3563): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="83050000000000004000128009000100766c616e00000000300002800400048006000100030000000c000200020000000e0000000c00020008", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 1m7.321010729s ago: executing program 4 (id=3565): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x10000, 0x0, 0x0, 0x3, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1m7.282238335s ago: executing program 0 (id=3566): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.kill\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x5c, r5, 0x1, 0x0, 0x25dfdc01, {}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x5c}, 0x1, 0x400000000000000, 0x0, 0x3000000}, 0x40810) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x2f, 0xf2, 0x3, 0x58e1, 0x24, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, 0x40, 0x700, 0x7ff, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'gretap0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x8, 0x8, 0x8, 0xfffffffc, {{0x3c, 0x4, 0x1, 0x3, 0xf0, 0x64, 0x0, 0xc5, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp_addr={0x44, 0x54, 0x53, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0xd}, 0x8}, {@multicast2, 0x401}, {@empty, 0x8}, {@rand_addr=0x64010100, 0x5}, {@empty, 0x5}, {@local}, {@private=0xa010102, 0xfffd}, {@loopback, 0x3}, {@loopback, 0xff}, {@private=0xa010101, 0x5}]}, @timestamp_prespec={0x44, 0x3c, 0xf2, 0x3, 0x5, [{@remote, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff8}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x42}, {@remote, 0x8}, {@loopback, 0x9}, {@remote, 0x10000}, {@rand_addr=0x64010101, 0x800}]}, @end, @cipso={0x86, 0xe, 0x3, [{0x0, 0x3, "a2"}, {0x0, 0x5, '{%1'}]}, @ssrr={0x89, 0x23, 0x3b, [@private=0xa010100, @remote, @local, @dev={0xac, 0x14, 0x14, 0x1b}, @loopback, @loopback, @multicast1, @empty]}, @rr={0x7, 0x17, 0x95, [@broadcast, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x3d}, @empty]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x93, 0xfffffe01, 0x20, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x3, 0xa9}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r2, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0xd0, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x6a, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000940), &(0x7f0000000980)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a80)={'tunl0\x00', &(0x7f0000000a00)={'syztnl2\x00', 0x0, 0x20, 0x8000, 0xfffffff0, 0xa, {{0xe, 0x4, 0x2, 0xd, 0x38, 0x67, 0x0, 0x1, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@noop, @timestamp_prespec={0x44, 0x1c, 0x6b, 0x3, 0x6, [{@empty, 0x82}, {@multicast1, 0x240000}, {@broadcast, 0x8000}]}, @ra={0x94, 0x4}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000d00)={'erspan0\x00', &(0x7f0000000c00)={'sit0\x00', 0x0, 0x7, 0x40, 0x4a, 0x747, {{0x2b, 0x4, 0x3, 0x11, 0xac, 0x65, 0x0, 0xdf, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @generic={0x82, 0x2}, @cipso={0x86, 0x22, 0x5956d9d5bb15a147, [{0x1, 0x11, "13c9e2c15203dd04d3faf7c3cfe9ed"}, {0x6, 0xb, "be466904cf2051c627"}]}, @timestamp={0x44, 0x28, 0xf2, 0x0, 0x2, [0x8, 0x8, 0x62b, 0x4, 0x9, 0x10, 0x9, 0xfff80000, 0x7]}, @lsrr={0x83, 0x7, 0xfd, [@dev={0xac, 0x14, 0x14, 0x36}]}, @rr={0x7, 0x1b, 0x18, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @rand_addr=0x64010101, @rand_addr=0x64010102]}, @cipso={0x86, 0x10, 0x3, [{0x1, 0xa, "1beff361e066cb47"}]}, @timestamp={0x44, 0x10, 0x72, 0x0, 0x9, [0x6, 0x3, 0x4]}, @end, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'ip6gre0\x00', 0x0, 0x29, 0xd, 0x6, 0x0, 0x41, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private2, 0x8, 0x20, 0x3, 0x2}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000e00)={@empty, @local}, &(0x7f0000000e40)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1m7.195592682s ago: executing program 5 (id=3567): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x40810) 1m7.193139967s ago: executing program 0 (id=3568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)={@val={0x0, 0x8847}, @void, @eth={@multicast, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x15, 0x79, 0x64, 0x0, 0xc2, 0x6, 0x0, @private=0xa010100, @broadcast}, {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0x200, 0x0, 0x4}, {"083137a03a1ae6bc37f16783ecd269aece5ee4284cb423f6cb8ac0e2d14d3bc7cfc7e58aa5832dd3bad02f759f3ad458e8e2fccc1650f5c44f4bcc0650eadff5b52626fd9454fdf22f3f92bede85ebff41"}}}}}}}, 0x8b) 1m7.154021358s ago: executing program 5 (id=3569): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x2, 0x70bd29, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x756c51182137b80d}, {0xfff5, 0x5}, {0x2, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x80}, @TCA_CAKE_MPU={0x8, 0xe, 0x34}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x204c0c5}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000) 1m7.085531349s ago: executing program 1 (id=3570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x4f62b68f6fa20884}, {0xc, 0xb}, {0xa, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfff, 0x7, 0x5, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xfffd, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m7.067332625s ago: executing program 4 (id=3571): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4ea1, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfa}}, 0x10000013}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b702000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d96000100000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1m7.037440822s ago: executing program 4 (id=3572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m7.00776246s ago: executing program 5 (id=3573): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES8=r0], 0x44}}, 0x8000) 1m6.968747084s ago: executing program 1 (id=3574): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fbdbdf25280000000a0001007770616e3100000005002e000800000005002b"], 0x48}, 0x1, 0x0, 0x0, 0x400c00d}, 0x40000) 1m6.937232226s ago: executing program 1 (id=3575): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x488, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x458, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x1, 0x40, 0xdc2, 0x1000, {0x7, 0x1, 0xe, 0x6, 0x6, 0x1}, {0x0, 0x1, 0x94, 0x9, 0x401}, 0x9, 0x5, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x6, 0x5, 0x5, 0x0, 0x1, 0x7, 0x4, 0x4, 0x7, 0x3e97, 0x5, 0x18, 0xd, 0xfff, 0x0, 0x5, 0x8, 0x6, 0x0, 0xfce, 0x9, 0x8, 0x5, 0xfff, 0x6, 0xf, 0x6, 0x0, 0x8, 0x5edaf873, 0x1, 0xffff, 0xf1, 0x7, 0x7fffffff, 0x7ff, 0x8, 0x5, 0x4, 0x963e, 0x3, 0x56, 0xfff, 0x875, 0x29c, 0x1000, 0x400, 0x2, 0x1, 0x9, 0x9, 0xfffffffe, 0x7, 0x400, 0xffffff81, 0x0, 0x9, 0x2000, 0x1e2, 0x5, 0xfffffff8, 0x4, 0x0, 0x0, 0x2, 0x7f, 0x0, 0x621, 0x0, 0xff, 0x1ff, 0x3, 0x0, 0x2, 0x9, 0x8, 0x5, 0x3568, 0x4, 0x10001, 0x4, 0x6, 0x5, 0x7fff, 0x4, 0x5, 0x877, 0x6, 0x7, 0x5, 0x7, 0x1, 0x1ff, 0x200, 0x0, 0x9, 0x8, 0x0, 0x7b, 0x3ff, 0x4e, 0xf, 0x3, 0x400, 0x101, 0xfffffff4, 0x1, 0x3, 0x2332, 0x732d4911, 0x9, 0x7, 0xa48, 0x6, 0x7fff, 0x8, 0x6, 0x8, 0xfffffffd, 0x18b, 0x9, 0x7fffffff, 0x5, 0x51e, 0xfffffff8, 0x5, 0x1, 0x7fffffff, 0x6, 0x5, 0x2, 0x0, 0x7ff, 0xa, 0x80000001, 0xde, 0x7a, 0x5, 0x3, 0x1, 0x2, 0x7, 0x6, 0x2792, 0x7, 0x1, 0x8, 0x5, 0x5, 0xa, 0x5, 0x7, 0x400, 0x7, 0x3, 0x2, 0x5, 0x2, 0x252, 0x1, 0x4, 0x40000, 0x3, 0x6, 0x101, 0x1, 0x10, 0x3, 0x4, 0xc, 0xfffff801, 0x8, 0x0, 0x1, 0x6, 0x80000000, 0x1c, 0xd810, 0x1, 0x8001, 0x80, 0x5, 0x1, 0xfffffff8, 0x800, 0x4, 0x9, 0x9, 0x90000000, 0x5, 0x8, 0x6, 0x3ff, 0x53b2, 0x0, 0x9, 0x7, 0x7f, 0x6, 0x1, 0x4, 0xc7, 0x5, 0x6, 0x5, 0x5, 0x7fff, 0x12bc, 0x3, 0xffffffff, 0x1, 0xd, 0xa64, 0x5, 0xfffffff9, 0x2, 0x8, 0x8, 0x200, 0x8, 0xe512, 0xb5, 0x3, 0x0, 0x9f, 0x0, 0x7f, 0x6, 0x1, 0x3b1c, 0xc7, 0x2, 0xfffffffc, 0xa0, 0x100, 0x2, 0x6, 0x101, 0x3ff, 0x2, 0x8, 0x70, 0xd5, 0xffffffff, 0xf, 0xc, 0x1, 0x401, 0xffffffff, 0x1, 0x19d, 0x10001, 0x8fde, 0x8, 0x9]}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x884}, 0x40) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r6, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c49686ce569fbf520db4cad1ed8e1b28400a1b7ff9", 0x24}], 0x1}, 0x8000) 1m6.933356787s ago: executing program 4 (id=3576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x30}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) 1m6.90186038s ago: executing program 5 (id=3577): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, 0x0, 0x1) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x403, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_virt_wifi\x00'}]}, 0x34}}, 0x8000) sendmmsg$inet(r1, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000740)="11ace8b33a6a7b98a9bea91f9bfa1a4c27", 0x11}, {0x0}, {0x0}], 0x3}}], 0x1, 0x4) 1m6.883577436s ago: executing program 0 (id=3578): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x101, 0x7fdf, 0xff}, 0x50) 1m6.796474695s ago: executing program 5 (id=3579): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x88ca, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m6.771588497s ago: executing program 4 (id=3580): r0 = socket(0x200000000000011, 0x2, 0xd) sendmsg$kcm(r0, 0x0, 0x40000) 1m6.663316665s ago: executing program 4 (id=3581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x40) 1m6.62864038s ago: executing program 5 (id=3582): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x0) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e2']) close_range(r0, 0xffffffffffffffff, 0x0) 1m0.908172819s ago: executing program 3 (id=3583): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000002}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x24040021) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 0s ago: executing program 33 (id=3578): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x101, 0x7fdf, 0xff}, 0x50) kernel console output (not intermixed with test programs): arch=c00000b7 syscall=98 compat=0 ip=0xffff81577fe8 code=0x7ffc0000 [ 76.838489][ T30] audit: type=1326 audit(76.810:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7973 comm="syz.2.1345" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81577fe8 code=0x7ffc0000 [ 76.839466][ T30] audit: type=1326 audit(76.810:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7973 comm="syz.2.1345" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81577fe8 code=0x7ffc0000 [ 76.839943][ T30] audit: type=1326 audit(76.820:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7973 comm="syz.2.1345" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=131 compat=0 ip=0xffff81577fe8 code=0x7ffc0000 [ 76.839965][ T30] audit: type=1326 audit(76.820:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7973 comm="syz.2.1345" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81577fe8 code=0x7ffc0000 [ 76.839987][ T30] audit: type=1326 audit(76.820:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7973 comm="syz.2.1345" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff81577fe8 code=0x7ffc0000 [ 76.840019][ T30] audit: type=1326 audit(76.820:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7973 comm="syz.2.1345" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff81577fe8 code=0x7ffc0000 [ 76.849669][ T7976] loop0: detected capacity change from 0 to 512 [ 76.857436][ T7976] EXT4-fs: Ignoring removed bh option [ 76.873882][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1344'. [ 76.893612][ T7976] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.1346: corrupted in-inode xattr: e_value size too large [ 76.898349][ T7976] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 76.898808][ T7976] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1346: couldn't read orphan inode 15 (err -117) [ 76.902753][ T7976] loop0: lost filesystem error report for type 5 error -117 [ 76.903444][ T7976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.936187][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.040757][ T7997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1352'. [ 77.232830][ T8000] syzkaller0: entered promiscuous mode [ 77.233721][ T8000] syzkaller0: entered allmulticast mode [ 77.322553][ T8010] syzkaller0: entered promiscuous mode [ 77.322591][ T8010] syzkaller0: entered allmulticast mode [ 77.380492][ T8019] syzkaller0: entered promiscuous mode [ 77.380527][ T8019] syzkaller0: entered allmulticast mode [ 77.407102][ T8025] syzkaller0: entered promiscuous mode [ 77.408252][ T8025] syzkaller0: entered allmulticast mode [ 77.496156][ T8040] syzkaller0: entered promiscuous mode [ 77.497329][ T8040] syzkaller0: entered allmulticast mode [ 77.629967][ T8055] syzkaller0: entered promiscuous mode [ 77.630000][ T8055] syzkaller0: entered allmulticast mode [ 77.707054][ T8074] syzkaller0: entered promiscuous mode [ 77.708311][ T8074] syzkaller0: entered allmulticast mode [ 77.877260][ T8086] syzkaller0: entered promiscuous mode [ 77.878084][ T8086] syzkaller0: entered allmulticast mode [ 77.888620][ T8088] syzkaller0: entered promiscuous mode [ 77.888649][ T8088] syzkaller0: entered allmulticast mode [ 77.980201][ T8099] syzkaller0: entered promiscuous mode [ 77.980233][ T8099] syzkaller0: entered allmulticast mode [ 77.989022][ T8101] netlink: 'syz.1.1398': attribute type 13 has an invalid length. [ 78.142219][ T8108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1400'. [ 78.287493][ T8116] loop3: detected capacity change from 0 to 512 [ 78.289164][ T8116] EXT4-fs: Ignoring removed bh option [ 78.293836][ T8116] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.1403: corrupted in-inode xattr: e_value size too large [ 78.296674][ T8116] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.296915][ T8116] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1403: couldn't read orphan inode 15 (err -117) [ 78.301060][ T8116] loop3: lost filesystem error report for type 5 error -117 [ 78.301846][ T8116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.322453][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.486233][ T8133] netlink: 'syz.4.1409': attribute type 1 has an invalid length. [ 78.502555][ T8133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.824000][ T8170] syzkaller0: entered promiscuous mode [ 78.825634][ T8170] syzkaller0: entered allmulticast mode [ 78.924067][ T8103] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 78.982137][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1426'. [ 79.171901][ T8201] syzkaller0: entered promiscuous mode [ 79.173180][ T8201] syzkaller0: entered allmulticast mode [ 79.183679][ T8208] loop0: detected capacity change from 0 to 1024 [ 79.196901][ T8208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.219639][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.720292][ T8234] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1447'. [ 79.840580][ T8246] syzkaller0: entered promiscuous mode [ 79.840613][ T8246] syzkaller0: entered allmulticast mode [ 79.844676][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 79.920896][ T8250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1452'. [ 82.171602][ T8203] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 82.291271][ T8291] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1466'. [ 82.360119][ T8300] netlink: 'syz.1.1467': attribute type 1 has an invalid length. [ 82.374041][ T8300] 8021q: adding VLAN 0 to HW filter on device bond2 [ 82.532379][ T8332] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1479'. [ 82.558942][ T8339] netlink: 'syz.0.1482': attribute type 1 has an invalid length. [ 82.583392][ T8339] 8021q: adding VLAN 0 to HW filter on device bond2 [ 82.669072][ T30] audit: type=1326 audit(82.650:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8324 comm="syz.3.1476" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bd77fe8 code=0x7fc00000 [ 82.789013][ T8378] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1495'. [ 82.799839][ T8380] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1496'. [ 82.860030][ T8389] netlink: 'syz.2.1499': attribute type 1 has an invalid length. [ 83.072160][ T8417] netlink: 'syz.1.1507': attribute type 13 has an invalid length. [ 83.088662][ T8417] syzkaller0: entered promiscuous mode [ 83.089694][ T8417] syzkaller0: entered allmulticast mode [ 83.096613][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1508'. [ 83.096654][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1508'. [ 83.138560][ T8423] loop2: detected capacity change from 0 to 1024 [ 83.140795][ T8423] EXT4-fs: Ignoring removed orlov option [ 83.149679][ T8425] tipc: Enabled bearer , priority 0 [ 83.152912][ T8424] tipc: Disabling bearer [ 83.155408][ T8423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.499209][ T30] audit: type=1326 audit(83.480:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8324 comm="syz.3.1476" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff9cb369e0 code=0x7fc00000 [ 83.703149][ T8464] netlink: 'syz.0.1522': attribute type 1 has an invalid length. [ 83.732411][ T8469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1524'. [ 83.999275][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.116061][ T8499] netlink: 'syz.2.1535': attribute type 1 has an invalid length. [ 84.182973][ T8507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1538'. [ 84.346311][ T8517] fuse: Unknown parameter 'grou00000000000000000000' [ 84.613999][ T8533] netlink: 'syz.2.1547': attribute type 1 has an invalid length. [ 84.663880][ T8539] syzkaller0: entered promiscuous mode [ 84.663912][ T8539] syzkaller0: entered allmulticast mode [ 84.756342][ T8550] fuse: Unknown parameter 'group_i00000000000000000000' [ 84.805717][ T8557] xt_hashlimit: size too large, truncated to 1048576 [ 84.926535][ T8567] netlink: 'syz.2.1560': attribute type 1 has an invalid length. [ 85.113807][ T8582] netlink: 'syz.2.1564': attribute type 13 has an invalid length. [ 85.148716][ T4796] lo speed is unknown, defaulting to 1000 [ 85.153264][ T8582] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 85.155121][ T8582] syzkaller0: entered promiscuous mode [ 85.155134][ T8582] syzkaller0: entered allmulticast mode [ 85.277433][ T8584] loop2: detected capacity change from 0 to 512 [ 85.286068][ T8584] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 85.288050][ T8584] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1565: corrupted in-inode xattr: e_value size too large [ 85.290674][ T8584] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.291409][ T8584] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1565: couldn't read orphan inode 15 (err -117) [ 85.291521][ T8586] fuse: Unknown parameter 'group_i00000000000000000000' [ 85.295412][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 85.295422][ C0] EXT4-fs (loop2): initial error at time 85: ext4_iget_extra_inode:5180: inode 15 [ 85.295439][ C0] EXT4-fs (loop2): last error at time 85: ext4_iget_extra_inode:5180: inode 15 [ 85.304720][ T8584] loop2: lost filesystem error report for type 5 error -117 [ 85.305967][ T8584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.353278][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.745714][ T8627] fuse: Unknown parameter 'group_i00000000000000000000' [ 85.816514][ T8632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1582'. [ 85.825224][ T8638] syzkaller0: entered promiscuous mode [ 85.825257][ T8638] syzkaller0: entered allmulticast mode [ 85.948712][ T8659] fuse: Unknown parameter 'group_id00000000000000000000' [ 85.967995][ T8661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1593'. [ 85.970844][ T8661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1593'. [ 86.156059][ T8689] loop4: detected capacity change from 0 to 256 [ 86.156432][ T8689] vfat: Bad value for 'uni_xlate' [ 86.223477][ T8699] syzkaller0: entered promiscuous mode [ 86.223510][ T8699] syzkaller0: entered allmulticast mode [ 86.315546][ T8708] tipc: Started in network mode [ 86.315586][ T8708] tipc: Node identity 065f995743d9, cluster identity 4711 [ 86.315652][ T8708] tipc: Enabled bearer , priority 0 [ 86.318718][ T8706] tipc: Disabling bearer [ 86.472813][ T8721] loop3: detected capacity change from 0 to 1024 [ 86.478772][ T8721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.481823][ T8721] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #12: block 7: comm syz.3.1621: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 86.494154][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.537942][ T8729] fuse: Unknown parameter 'group_id00000000000000000000' [ 86.660744][ T8739] tipc: Enabled bearer , priority 0 [ 86.662977][ T8738] tipc: Disabling bearer [ 86.751288][ T8745] gretap1: entered promiscuous mode [ 86.770100][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1632'. [ 86.770133][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1632'. [ 86.801624][ T8751] fuse: Bad value for 'user_id' [ 86.801647][ T8751] fuse: Bad value for 'user_id' [ 86.935758][ T8765] tipc: Enabled bearer , priority 0 [ 86.941968][ T8764] tipc: Disabling bearer [ 87.082231][ T8774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1643'. [ 87.082260][ T8774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1643'. [ 87.851748][ T8774] tipc: Started in network mode [ 87.851781][ T8774] tipc: Node identity 1, cluster identity 4711 [ 87.851802][ T8774] tipc: Node number set to 1 [ 87.991206][ T8780] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1645'. [ 88.088282][ T8790] fuse: Bad value for 'user_id' [ 88.088310][ T8790] fuse: Bad value for 'user_id' [ 88.261228][ T8803] tipc: Enabled bearer , priority 0 [ 88.263955][ T8802] tipc: Disabling bearer [ 88.357378][ T8807] netlink: 'syz.3.1656': attribute type 13 has an invalid length. [ 88.382489][ T8807] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 88.387115][ T8807] syzkaller0: entered promiscuous mode [ 88.388292][ T8807] syzkaller0: entered allmulticast mode [ 88.502051][ T8813] loop0: detected capacity change from 0 to 512 [ 88.507037][ T8813] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 88.521467][ T8813] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 88.523340][ T8813] EXT4-fs (loop0): 1 truncate cleaned up [ 88.523901][ T8813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.536642][ T8813] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.1658: Logical block already allocated [ 88.540728][ T8813] EXT4-fs (loop0): Remounting filesystem read-only [ 88.560044][ T8817] fuse: Bad value for 'user_id' [ 88.560068][ T8817] fuse: Bad value for 'user_id' [ 88.562957][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.624718][ T8820] syzkaller0: entered promiscuous mode [ 88.624771][ T8820] syzkaller0: entered allmulticast mode [ 89.071585][ T8839] tipc: Enabling of bearer rejected, failed to enable media [ 89.091377][ T8844] loop2: detected capacity change from 0 to 512 [ 89.094368][ T8844] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.107377][ T8844] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 89.107419][ T8844] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 89.109118][ T8844] EXT4-fs (loop2): 1 truncate cleaned up [ 89.109564][ T8844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.139633][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.155362][ T8853] fuse: Bad value for 'fd' [ 89.180355][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1678'. [ 89.267263][ T8865] syzkaller0: entered promiscuous mode [ 89.267296][ T8865] syzkaller0: entered allmulticast mode [ 89.638173][ T8892] netlink: 'syz.2.1685': attribute type 13 has an invalid length. [ 89.710389][ T8882] tipc: Enabling of bearer rejected, failed to enable media [ 89.718173][ T8884] syzkaller0: entered promiscuous mode [ 89.719788][ T8884] syzkaller0: entered allmulticast mode [ 89.738948][ T8893] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 89.740282][ T8893] syzkaller0: entered promiscuous mode [ 89.740293][ T8893] syzkaller0: entered allmulticast mode [ 89.772369][ T8899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1686'. [ 89.797530][ T8903] fuse: Bad value for 'fd' [ 90.119094][ T8915] syzkaller0: entered promiscuous mode [ 90.119121][ T8915] syzkaller0: entered allmulticast mode [ 90.258288][ T8934] fuse: Bad value for 'fd' [ 90.269962][ T8927] tipc: Enabling of bearer rejected, failed to enable media [ 90.293028][ T8937] syzkaller0: entered promiscuous mode [ 90.294137][ T8937] syzkaller0: entered allmulticast mode [ 90.401430][ T8950] syzkaller0: entered promiscuous mode [ 90.401462][ T8950] syzkaller0: entered allmulticast mode [ 90.801571][ T8978] fuse: Bad value for 'fd' [ 91.054776][ T9015] fuse: Bad value for 'fd' [ 91.099616][ T9021] syzkaller0: entered promiscuous mode [ 91.099650][ T9021] syzkaller0: entered allmulticast mode [ 91.290399][ T9050] ieee802154 phy0 wpan0: encryption failed: -22 [ 91.319207][ T9053] netlink: 'syz.1.1741': attribute type 39 has an invalid length. [ 91.622664][ T9055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.622808][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.628427][ T9055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.628703][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.628788][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.634343][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.634443][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.634527][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.634982][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.635093][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.716050][ T9074] syzkaller0: entered promiscuous mode [ 91.717396][ T9074] syzkaller0: entered allmulticast mode [ 91.864263][ T9090] fuse: Invalid rootmode [ 92.053804][ T9] IPVS: starting estimator thread 0... [ 92.067577][ T9116] syzkaller0: entered promiscuous mode [ 92.067608][ T9116] syzkaller0: entered allmulticast mode [ 92.081659][ T9121] fuse: Invalid rootmode [ 92.160054][ T9135] syzkaller0: entered promiscuous mode [ 92.161135][ T9135] syzkaller0: entered allmulticast mode [ 92.168873][ T9119] IPVS: using max 59 ests per chain, 141600 per kthread [ 92.247397][ T9151] sock: sock_timestamping_bind_phc: sock not bind to device [ 92.276510][ T9156] fuse: Invalid rootmode [ 92.309590][ T9155] syzkaller0: entered promiscuous mode [ 92.309625][ T9155] syzkaller0: entered allmulticast mode [ 92.355328][ T9164] __nla_validate_parse: 3 callbacks suppressed [ 92.356628][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1781'. [ 92.438036][ T9179] syzkaller1: entered promiscuous mode [ 92.439163][ T9179] syzkaller1: entered allmulticast mode [ 92.462055][ T9181] batadv0: entered promiscuous mode [ 92.465476][ T9181] macvtap1: entered promiscuous mode [ 92.466588][ T9181] macvtap1: entered allmulticast mode [ 92.467690][ T9181] batadv0: entered allmulticast mode [ 92.469129][ T9181] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 92.469271][ T9184] fuse: Bad value for 'rootmode' [ 92.478055][ T9181] batadv0: left allmulticast mode [ 92.478156][ T9181] batadv0: left promiscuous mode [ 92.525132][ T9192] syzkaller0: entered promiscuous mode [ 92.525163][ T9192] syzkaller0: entered allmulticast mode [ 92.569188][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1795'. [ 92.621405][ T9211] syzkaller0: entered promiscuous mode [ 92.621440][ T9211] syzkaller0: entered allmulticast mode [ 92.659818][ T9216] fuse: Bad value for 'rootmode' [ 92.718691][ T9226] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1804'. [ 92.833485][ T9241] syzkaller0: entered promiscuous mode [ 92.833517][ T9241] syzkaller0: entered allmulticast mode [ 92.843346][ T9250] syzkaller0: entered promiscuous mode [ 92.843377][ T9250] syzkaller0: entered allmulticast mode [ 92.932144][ T9258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1817'. [ 92.932181][ T9258] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1817'. [ 93.261384][ T9275] syzkaller0: entered promiscuous mode [ 93.262627][ T9275] syzkaller0: entered allmulticast mode [ 93.517527][ T9307] fuse: Unknown parameter 'use00000000000000000000' [ 93.774275][ T9319] syzkaller0: entered promiscuous mode [ 93.774306][ T9319] syzkaller0: entered allmulticast mode [ 94.183971][ T9356] syzkaller0: entered promiscuous mode [ 94.184004][ T9356] syzkaller0: entered allmulticast mode [ 94.192015][ T9359] syzkaller0: entered promiscuous mode [ 94.193151][ T9359] syzkaller0: entered allmulticast mode [ 94.243304][ T9373] fuse: Unknown parameter 'use00000000000000000000' [ 94.608829][ T9385] syzkaller0: entered promiscuous mode [ 94.610385][ T9385] syzkaller0: entered allmulticast mode [ 94.708137][ T9426] fuse: Unknown parameter 'user_i00000000000000000000' [ 94.761441][ T9438] syzkaller0: entered promiscuous mode [ 94.762646][ T9438] syzkaller0: entered allmulticast mode [ 94.870816][ T9453] fuse: Unknown parameter 'user_i00000000000000000000' [ 94.902177][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1875'. [ 94.933846][ T9466] syzkaller0: entered promiscuous mode [ 94.933877][ T9466] syzkaller0: entered allmulticast mode [ 94.989507][ T9472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1880'. [ 95.012531][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1884'. [ 95.036955][ T9485] fuse: Unknown parameter 'user_i00000000000000000000' [ 95.049072][ T9487] syzkaller0: entered promiscuous mode [ 95.050204][ T9487] syzkaller0: entered allmulticast mode [ 95.110932][ T9500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.113384][ T9500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.162296][ T9508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1895'. [ 95.211941][ T9512] fuse: Unknown parameter 'user_id00000000000000000000' [ 95.219374][ T9514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1898'. [ 95.312097][ T9531] syzkaller0: entered promiscuous mode [ 95.312939][ T9531] syzkaller0: entered allmulticast mode [ 95.470003][ T9538] fuse: Unknown parameter 'user_id00000000000000000000' [ 95.493525][ T9540] syzkaller0: entered promiscuous mode [ 95.493552][ T9540] syzkaller0: entered allmulticast mode [ 95.647385][ T9554] netlink: 'syz.4.1914': attribute type 13 has an invalid length. [ 95.932974][ T9573] sock: sock_timestamping_bind_phc: sock not bind to device [ 95.985481][ T9581] syzkaller0: entered promiscuous mode [ 95.986660][ T9581] syzkaller0: entered allmulticast mode [ 95.994009][ T9585] 8021q: adding VLAN 0 to HW filter on device bond3 [ 95.996387][ T9583] syzkaller0: entered promiscuous mode [ 95.996416][ T9583] syzkaller0: entered allmulticast mode [ 96.086539][ T9594] syzkaller0: entered promiscuous mode [ 96.086573][ T9594] syzkaller0: entered allmulticast mode [ 96.116844][ T9600] netlink: 'syz.3.1928': attribute type 13 has an invalid length. [ 96.141100][ T9602] sock: sock_timestamping_bind_phc: sock not bind to device [ 96.224380][ T9614] 8021q: adding VLAN 0 to HW filter on device bond3 [ 96.370259][ T9634] syzkaller0: entered promiscuous mode [ 96.370293][ T9634] syzkaller0: entered allmulticast mode [ 96.427152][ T9642] syzkaller0: entered promiscuous mode [ 96.428245][ T9642] syzkaller0: entered allmulticast mode [ 96.486809][ T9647] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.523112][ T9647] bond1: (slave geneve4): Enslaving as an active interface with an up link [ 96.862133][ T9665] fuse: Bad value for 'fd' [ 96.994484][ T9692] fuse: Bad value for 'fd' [ 97.078190][ T9704] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 97.116826][ T9712] netlink: 'syz.3.1975': attribute type 13 has an invalid length. [ 97.117029][ T9711] loop4: detected capacity change from 0 to 512 [ 97.132832][ T9711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.147617][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.217893][ T9727] fuse: Unknown parameter '0x0000000000000004' [ 97.393963][ T26] net_ratelimit: 239 callbacks suppressed [ 97.394004][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.413685][ T9754] fuse: Unknown parameter '0x0000000000000004' [ 97.420324][ T9757] netlink: 'syz.1.1991': attribute type 13 has an invalid length. [ 97.478982][ T9763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.480606][ T9763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.482817][ T9763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.484856][ T9763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.486418][ T9763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.488245][ T9763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.489898][ T9763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.491523][ T9763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.493195][ T9763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.543759][ T9775] __nla_validate_parse: 4 callbacks suppressed [ 97.543800][ T9775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1998'. [ 97.600914][ T9781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1999'. [ 97.601262][ T9781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1999'. [ 97.707533][ T9796] fuse: Unknown parameter '0x0000000000000004' [ 97.772213][ T9813] netlink: 'syz.2.2011': attribute type 13 has an invalid length. [ 97.931886][ T9844] fuse: Unknown parameter '0x0000000000000004' [ 98.104007][ T9881] team0: entered promiscuous mode [ 98.104038][ T9881] team_slave_0: entered promiscuous mode [ 98.104521][ T9881] team_slave_1: entered promiscuous mode [ 98.105253][ T9881] team0: entered allmulticast mode [ 98.105264][ T9881] team_slave_0: entered allmulticast mode [ 98.105275][ T9881] team_slave_1: entered allmulticast mode [ 98.140953][ T9887] netlink: 'syz.1.2032': attribute type 13 has an invalid length. [ 98.149738][ T9889] fuse: Unknown parameter '0x0000000000000004' [ 98.391772][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2043'. [ 98.417775][ T9929] fuse: Unknown parameter '0x0000000000000004' [ 98.503929][ T9948] syzkaller0: entered promiscuous mode [ 98.505694][ T9948] syzkaller0: entered allmulticast mode [ 98.563913][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2053'. [ 98.654093][ T9973] netlink: 'syz.3.2059': attribute type 1 has an invalid length. [ 98.671113][ T9973] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.853502][T10007] syzkaller0: entered promiscuous mode [ 98.854790][T10007] syzkaller0: entered allmulticast mode [ 98.935358][T10017] syzkaller0: entered promiscuous mode [ 98.935388][T10017] syzkaller0: entered allmulticast mode [ 99.148804][T10039] netlink: 'syz.2.2081': attribute type 13 has an invalid length. [ 99.283346][T10049] fuse: Unknown parameter 'fd0x0000000000000004' [ 99.962113][T10074] netlink: 'syz.0.2092': attribute type 13 has an invalid length. [ 99.996462][T10076] fuse: Unknown parameter 'fd0x0000000000000004' [ 100.220642][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2108'. [ 100.553283][T10139] netlink: 'syz.0.2117': attribute type 13 has an invalid length. [ 100.637763][T10154] syzkaller0: entered promiscuous mode [ 100.638875][T10154] syzkaller0: entered allmulticast mode [ 100.958425][T10161] syzkaller0: entered promiscuous mode [ 100.959521][T10161] syzkaller0: entered allmulticast mode [ 101.097634][T10180] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2129'. [ 101.386270][T10189] syzkaller0: entered promiscuous mode [ 101.386303][T10189] syzkaller0: entered allmulticast mode [ 101.411639][T10196] syzkaller0: entered promiscuous mode [ 101.411667][T10196] syzkaller0: entered allmulticast mode [ 101.742435][T10220] netlink: 'syz.0.2137': attribute type 1 has an invalid length. [ 101.750190][T10220] 8021q: adding VLAN 0 to HW filter on device bond4 [ 101.876655][T10238] syzkaller0: entered promiscuous mode [ 101.877765][T10238] syzkaller0: entered allmulticast mode [ 102.149133][T10247] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2148'. [ 102.180574][T10249] syzkaller0: entered promiscuous mode [ 102.182166][T10249] syzkaller0: entered allmulticast mode [ 102.322866][T10283] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2160'. [ 102.333764][T10285] syzkaller0: entered promiscuous mode [ 102.333797][T10285] syzkaller0: entered allmulticast mode [ 102.338206][T10285] tipc: Started in network mode [ 102.338237][T10285] tipc: Node identity 4a2203e62b82, cluster identity 4711 [ 102.338986][T10285] tipc: Enabled bearer , priority 0 [ 102.340200][T10280] tipc: Resetting bearer [ 102.352117][T10280] tipc: Disabling bearer [ 102.402628][T10301] syzkaller0: entered promiscuous mode [ 102.403941][T10301] syzkaller0: entered allmulticast mode [ 102.503085][T10323] syzkaller0: entered promiscuous mode [ 102.504466][T10323] syzkaller0: entered allmulticast mode [ 102.576805][ T24] net_ratelimit: 150 callbacks suppressed [ 102.576844][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.734461][T10370] syzkaller0: entered promiscuous mode [ 102.735647][T10370] syzkaller0: entered allmulticast mode [ 102.886645][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.888825][T10401] syzkaller0: entered promiscuous mode [ 102.889388][T10401] syzkaller0: entered allmulticast mode [ 103.092081][T10432] syzkaller0: entered promiscuous mode [ 103.092107][T10432] syzkaller0: entered allmulticast mode [ 103.270215][T10451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.270355][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.615569][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.844785][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.644817][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.596794][T10340] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 105.643498][T10473] syzkaller0: entered promiscuous mode [ 105.644537][T10473] syzkaller0: entered allmulticast mode [ 105.685243][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.685534][T10478] syzkaller0: entered promiscuous mode [ 105.685546][T10478] syzkaller0: entered allmulticast mode [ 105.772224][T10500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.772368][T10500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.837791][T10507] syzkaller1: entered promiscuous mode [ 105.837829][T10507] syzkaller1: entered allmulticast mode [ 105.863029][T10513] syzkaller0: entered promiscuous mode [ 105.863061][T10513] syzkaller0: entered allmulticast mode [ 105.866556][T10513] tipc: Enabled bearer , priority 0 [ 105.869544][T10511] tipc: Resetting bearer [ 105.879728][T10511] tipc: Disabling bearer [ 105.952366][T10538] syzkaller0: entered promiscuous mode [ 105.952400][T10538] syzkaller0: entered allmulticast mode [ 105.996991][T10544] syzkaller0: entered promiscuous mode [ 105.997028][T10544] syzkaller0: entered allmulticast mode [ 106.088209][T10567] syzkaller1: entered promiscuous mode [ 106.089310][T10567] syzkaller1: entered allmulticast mode [ 106.139669][T10572] syzkaller0: entered promiscuous mode [ 106.140745][T10572] syzkaller0: entered allmulticast mode [ 106.143299][T10572] tipc: Enabled bearer , priority 0 [ 106.146742][T10570] tipc: Resetting bearer [ 106.157454][T10570] tipc: Disabling bearer [ 106.185778][T10582] syzkaller0: entered promiscuous mode [ 106.186882][T10582] syzkaller0: entered allmulticast mode [ 106.558645][T10598] syzkaller0: entered promiscuous mode [ 106.558678][T10598] syzkaller0: entered allmulticast mode [ 106.577742][T10608] syzkaller0: entered promiscuous mode [ 106.577772][T10608] syzkaller0: entered allmulticast mode [ 106.617041][T10614] syzkaller0: entered promiscuous mode [ 106.618202][T10614] syzkaller0: entered allmulticast mode [ 106.718235][T10624] loop2: detected capacity change from 0 to 128 [ 106.819910][T10632] syzkaller1: entered promiscuous mode [ 106.821855][T10632] syzkaller1: entered allmulticast mode [ 106.882201][T10637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2246'. [ 106.892262][T10637] syzkaller0: entered promiscuous mode [ 106.892294][T10637] syzkaller0: entered allmulticast mode [ 106.970690][T10641] syzkaller0: entered promiscuous mode [ 106.970723][T10641] syzkaller0: entered allmulticast mode [ 107.004147][T10644] syzkaller0: entered promiscuous mode [ 107.004183][T10644] syzkaller0: entered allmulticast mode [ 107.091960][T10646] syzkaller0: entered promiscuous mode [ 107.091997][T10646] syzkaller0: entered allmulticast mode [ 107.372243][T10677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2260'. [ 107.701300][T10693] syzkaller0: entered promiscuous mode [ 107.701333][T10693] syzkaller0: entered allmulticast mode [ 107.718403][T10699] syzkaller0: entered promiscuous mode [ 107.719746][T10699] syzkaller0: entered allmulticast mode [ 107.737064][T10709] net_ratelimit: 4 callbacks suppressed [ 107.737101][T10709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.737196][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.775046][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.016168][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.119958][T10731] syzkaller0: entered promiscuous mode [ 108.119991][T10731] syzkaller0: entered allmulticast mode [ 108.137981][T10746] syzkaller0: entered promiscuous mode [ 108.138021][T10746] syzkaller0: entered allmulticast mode [ 108.549136][T10765] syzkaller0: entered promiscuous mode [ 108.549171][T10765] syzkaller0: entered allmulticast mode [ 108.549809][T10769] syzkaller0: entered promiscuous mode [ 108.549823][T10769] syzkaller0: entered allmulticast mode [ 108.550994][T10783] syzkaller0: entered promiscuous mode [ 108.551012][T10783] syzkaller0: entered allmulticast mode [ 108.700804][T10809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2285'. [ 108.805672][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.933620][T10815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.933723][T10815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.935629][T10815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.935706][T10815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.935757][T10815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.969387][T10822] syzkaller0: entered promiscuous mode [ 108.970487][T10822] syzkaller0: entered allmulticast mode [ 108.973607][T10822] tipc: Enabled bearer , priority 0 [ 108.977688][T10821] tipc: Resetting bearer [ 108.981540][T10821] tipc: Disabling bearer [ 109.002515][T10824] syzkaller0: entered promiscuous mode [ 109.002545][T10824] syzkaller0: entered allmulticast mode [ 109.030807][T10826] syzkaller0: entered promiscuous mode [ 109.030838][T10826] syzkaller0: entered allmulticast mode [ 109.079743][T10837] x_tables: duplicate underflow at hook 2 [ 109.155475][T10846] syzkaller0: entered promiscuous mode [ 109.156535][T10846] syzkaller0: entered allmulticast mode [ 109.172709][T10851] syzkaller0: entered promiscuous mode [ 109.176571][T10851] syzkaller0: entered allmulticast mode [ 109.875818][T10864] syzkaller0: entered promiscuous mode [ 109.875851][T10864] syzkaller0: entered allmulticast mode [ 109.877453][T10865] syzkaller0: entered promiscuous mode [ 109.877467][T10865] syzkaller0: entered allmulticast mode [ 109.880869][T10872] tipc: Enabled bearer , priority 0 [ 109.886407][T10860] tipc: Resetting bearer [ 109.890644][T10860] tipc: Disabling bearer [ 110.091052][T10899] syzkaller0: entered promiscuous mode [ 110.092136][T10899] syzkaller0: entered allmulticast mode [ 110.418726][T10906] syzkaller0: entered promiscuous mode [ 110.418758][T10906] syzkaller0: entered allmulticast mode [ 110.419800][T10907] syzkaller0: entered promiscuous mode [ 110.419814][T10907] syzkaller0: entered allmulticast mode [ 110.752767][T10924] syzkaller0: entered promiscuous mode [ 110.752796][T10924] syzkaller0: entered allmulticast mode [ 110.833880][T10931] syzkaller0: entered promiscuous mode [ 110.833908][T10931] syzkaller0: entered allmulticast mode [ 110.878848][T10935] loop2: detected capacity change from 0 to 2048 [ 110.892571][T10935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.945921][T10943] bridge_slave_0: left allmulticast mode [ 110.945959][T10943] bridge_slave_0: left promiscuous mode [ 110.946057][T10943] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.951368][T10943] bridge_slave_1: left allmulticast mode [ 110.951409][T10943] bridge_slave_1: left promiscuous mode [ 110.951470][T10943] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.958422][T10943] bond0: (slave bond_slave_0): Releasing backup interface [ 110.959931][T10944] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2324: bg 0: block 345: padding at end of block bitmap is not set [ 110.963278][T10944] EXT4-fs (loop2): Remounting filesystem read-only [ 110.989402][T10943] bond0: (slave bond_slave_1): Releasing backup interface [ 110.993168][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.016586][T10943] team_slave_0: left promiscuous mode [ 111.016674][T10943] team_slave_0: left allmulticast mode [ 111.019124][T10943] team0: Port device team_slave_0 removed [ 111.019536][T10943] team_slave_1: left promiscuous mode [ 111.019579][T10943] team_slave_1: left allmulticast mode [ 111.021553][T10943] team0: Port device team_slave_1 removed [ 111.021862][T10943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.021872][T10943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.022975][T10943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.022985][T10943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.159093][T10956] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 111.164303][T10954] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 111.233284][T10960] syzkaller0: entered promiscuous mode [ 111.233320][T10960] syzkaller0: entered allmulticast mode [ 111.613557][T10963] syzkaller0: entered promiscuous mode [ 111.613584][T10963] syzkaller0: entered allmulticast mode [ 112.048036][T10969] syzkaller0: entered promiscuous mode [ 112.048066][T10969] syzkaller0: entered allmulticast mode [ 112.227264][T10975] syzkaller0: entered promiscuous mode [ 112.227292][T10975] syzkaller0: entered allmulticast mode [ 112.621966][T10987] syzkaller0: entered promiscuous mode [ 112.621993][T10987] syzkaller0: entered allmulticast mode [ 113.058544][T10894] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 113.122691][T10995] netlink: 'syz.1.2346': attribute type 13 has an invalid length. [ 113.122731][T10995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2346'. [ 113.134670][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.139092][T11000] syzkaller0: entered promiscuous mode [ 113.140284][T11000] syzkaller0: entered allmulticast mode [ 113.146605][T10995] syzkaller0: entered promiscuous mode [ 113.146634][T10995] syzkaller0: entered allmulticast mode [ 113.154516][T10998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2348'. [ 113.203830][T11014] xt_hashlimit: size too large, truncated to 1048576 [ 113.241419][T11014] net_ratelimit: 177 callbacks suppressed [ 113.241454][T11014] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 113.535980][T11025] syzkaller0: entered promiscuous mode [ 113.536017][T11025] syzkaller0: entered allmulticast mode [ 113.633917][T11038] syzkaller0: entered promiscuous mode [ 113.633952][T11038] syzkaller0: entered allmulticast mode [ 113.641193][T11038] tipc: Enabled bearer , priority 0 [ 113.644327][T11037] tipc: Resetting bearer [ 113.652790][T11037] tipc: Disabling bearer [ 113.742287][T11056] syzkaller0: entered promiscuous mode [ 113.742320][T11056] syzkaller0: entered allmulticast mode [ 113.986633][T11079] netlink: 'syz.4.2373': attribute type 13 has an invalid length. [ 113.988494][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2373'. [ 113.991935][T11079] syzkaller0: entered promiscuous mode [ 113.993072][T11079] syzkaller0: entered allmulticast mode [ 114.103376][T11086] syzkaller0: entered promiscuous mode [ 114.103476][T11086] syzkaller0: entered allmulticast mode [ 114.212275][T11088] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2376'. [ 114.511529][T11094] syzkaller0: entered promiscuous mode [ 114.511557][T11094] syzkaller0: entered allmulticast mode [ 114.711201][T11100] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2380'. [ 116.619164][T11042] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 116.667806][T11112] syzkaller0: entered promiscuous mode [ 116.667847][T11112] syzkaller0: entered allmulticast mode [ 117.065133][T11137] syzkaller0: entered promiscuous mode [ 117.065163][T11137] syzkaller0: entered allmulticast mode [ 117.093736][T11152] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2392'. [ 117.121534][T11154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.121637][T11154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.124213][T11154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.124622][T11153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.138668][T11158] loop3: detected capacity change from 0 to 512 [ 117.177860][T11158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.213908][T11168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2398'. [ 117.228175][T11173] syzkaller0: entered promiscuous mode [ 117.229263][T11173] syzkaller0: entered allmulticast mode [ 117.265327][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.280152][T11183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2402'. [ 117.609344][T11194] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2405'. [ 117.637221][T11196] syzkaller1: entered promiscuous mode [ 117.637255][T11196] syzkaller1: entered allmulticast mode [ 117.657232][T11198] netlink: 'syz.1.2407': attribute type 13 has an invalid length. [ 117.657262][T11198] netlink: 'syz.1.2407': attribute type 27 has an invalid length. [ 117.659296][T11198] syzkaller0: entered promiscuous mode [ 117.659307][T11198] syzkaller0: entered allmulticast mode [ 117.708883][T11204] syzkaller0: entered promiscuous mode [ 117.709972][T11204] syzkaller0: entered allmulticast mode [ 117.769711][T11208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2412'. [ 117.832286][T11219] syzkaller0: entered promiscuous mode [ 117.833348][T11219] syzkaller0: entered allmulticast mode [ 117.915047][T11237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.915156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.931113][T11239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.931246][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.931280][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.957873][T11241] syzkaller1: entered promiscuous mode [ 117.959106][T11241] syzkaller1: entered allmulticast mode [ 117.998306][T11245] netlink: 'syz.0.2425': attribute type 13 has an invalid length. [ 117.998340][T11245] netlink: 'syz.0.2425': attribute type 27 has an invalid length. [ 118.001673][T11245] syzkaller0: entered promiscuous mode [ 118.001702][T11245] syzkaller0: entered allmulticast mode [ 118.071253][T11253] syzkaller0: entered promiscuous mode [ 118.072360][T11253] syzkaller0: entered allmulticast mode [ 118.141626][T11261] syzkaller0: entered promiscuous mode [ 118.142825][T11261] syzkaller0: entered allmulticast mode [ 118.192803][T11270] syzkaller0: entered promiscuous mode [ 118.193842][T11270] syzkaller0: entered allmulticast mode [ 118.236307][T11271] __nla_validate_parse: 2 callbacks suppressed [ 118.236341][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2429'. [ 118.418291][T11277] net_ratelimit: 20 callbacks suppressed [ 118.418333][T11277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.418470][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.418490][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.419290][T11277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.419368][T11277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.419592][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.419660][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.419675][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.419908][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.419923][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.529786][T11284] syzkaller1: entered promiscuous mode [ 118.529821][T11284] syzkaller1: entered allmulticast mode [ 118.553693][T11288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2441'. [ 118.560283][T11290] netlink: 'syz.3.2442': attribute type 1 has an invalid length. [ 118.567723][T11290] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.611234][T11295] netlink: 'syz.3.2444': attribute type 13 has an invalid length. [ 118.613706][T11295] netlink: 'syz.3.2444': attribute type 27 has an invalid length. [ 118.622953][T11297] syzkaller0: entered promiscuous mode [ 118.623831][T11297] syzkaller0: entered allmulticast mode [ 118.632324][T11295] syzkaller0: entered promiscuous mode [ 118.632354][T11295] syzkaller0: entered allmulticast mode [ 118.726448][T11307] syzkaller0: entered promiscuous mode [ 118.726481][T11307] syzkaller0: entered allmulticast mode [ 118.765844][T11315] syzkaller0: entered promiscuous mode [ 118.767232][T11315] syzkaller0: entered allmulticast mode [ 118.815557][T11321] netlink: 'syz.3.2455': attribute type 1 has an invalid length. [ 118.821422][T11321] 8021q: adding VLAN 0 to HW filter on device bond4 [ 118.843061][T11324] loop1: detected capacity change from 0 to 4096 [ 118.851270][T11324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.004298][ T4719] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.013929][T11345] syzkaller0: entered promiscuous mode [ 119.013961][T11345] syzkaller0: entered allmulticast mode [ 119.067038][T11351] netlink: 'syz.3.2465': attribute type 13 has an invalid length. [ 119.067073][T11351] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2465'. [ 119.070044][T11351] syzkaller0: entered promiscuous mode [ 119.070056][T11351] syzkaller0: entered allmulticast mode [ 119.102707][T11355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2467'. [ 119.116671][T11359] syzkaller0: entered promiscuous mode [ 119.116710][T11359] syzkaller0: entered allmulticast mode [ 119.518376][T11371] syzkaller0: entered promiscuous mode [ 119.518408][T11371] syzkaller0: entered allmulticast mode [ 119.562746][T11394] syzkaller0: entered promiscuous mode [ 119.562776][T11394] syzkaller0: entered allmulticast mode [ 119.619132][T11402] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2476'. [ 119.670671][T11412] syzkaller0: entered promiscuous mode [ 119.670709][T11412] syzkaller0: entered allmulticast mode [ 119.673092][T11408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2479'. [ 119.704679][T11416] netlink: 'syz.3.2481': attribute type 13 has an invalid length. [ 119.704705][T11416] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2481'. [ 119.718493][T11416] syzkaller0: entered promiscuous mode [ 119.718523][T11416] syzkaller0: entered allmulticast mode [ 119.724399][T11418] syzkaller0: entered promiscuous mode [ 119.725540][T11418] syzkaller0: entered allmulticast mode [ 119.758883][T11420] syzkaller0: entered promiscuous mode [ 119.759980][T11420] syzkaller0: entered allmulticast mode [ 119.831638][T11426] syzkaller0: entered promiscuous mode [ 119.832952][T11426] syzkaller0: entered allmulticast mode [ 119.864815][T11430] netlink: 'syz.3.2489': attribute type 1 has an invalid length. [ 119.887862][T11430] 8021q: adding VLAN 0 to HW filter on device bond5 [ 119.907638][T11435] syzkaller0: entered promiscuous mode [ 119.907668][T11435] syzkaller0: entered allmulticast mode [ 119.977414][T11442] syzkaller0: entered promiscuous mode [ 119.978472][T11442] syzkaller0: entered allmulticast mode [ 119.983423][T11447] netlink: 'syz.2.2496': attribute type 13 has an invalid length. [ 119.983454][T11447] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2496'. [ 119.985605][T11447] syzkaller0: entered promiscuous mode [ 119.985616][T11447] syzkaller0: entered allmulticast mode [ 120.011904][T11451] loop1: detected capacity change from 0 to 512 [ 120.030958][T11451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.049285][ T4719] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.050383][T11455] syzkaller0: entered promiscuous mode [ 120.050401][T11455] syzkaller0: entered allmulticast mode [ 120.126228][T11467] netlink: 'syz.2.2505': attribute type 1 has an invalid length. [ 120.142056][T11467] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.144333][T11471] lo: entered allmulticast mode [ 120.181429][T11479] syzkaller0: entered promiscuous mode [ 120.181462][T11479] syzkaller0: entered allmulticast mode [ 120.219269][T11485] loop0: detected capacity change from 0 to 512 [ 120.230401][T11485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.234035][T11476] syzkaller0: entered promiscuous mode [ 120.238926][T11476] syzkaller0: entered allmulticast mode [ 120.267273][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.408403][T11516] syzkaller0: entered promiscuous mode [ 120.408434][T11516] syzkaller0: entered allmulticast mode [ 120.477799][T11514] lo: Caught tx_queue_len zero misconfig [ 120.546597][T11530] syzkaller0: entered promiscuous mode [ 120.546628][T11530] syzkaller0: entered allmulticast mode [ 120.547364][T11534] loop4: detected capacity change from 0 to 512 [ 120.568458][T11534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.578384][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.370961][T11506] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 123.426838][T11562] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2537'. [ 123.430821][T11556] net_ratelimit: 123 callbacks suppressed [ 123.430866][T11556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.488941][T11564] syzkaller0: entered promiscuous mode [ 123.488983][T11564] syzkaller0: entered allmulticast mode [ 123.489844][T11557] syzkaller0: entered promiscuous mode [ 123.489859][T11557] syzkaller0: entered allmulticast mode [ 123.506642][ T4710] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.510849][ T4710] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.512566][ T4710] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 123.521392][ T4710] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.521665][ T4710] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 123.902821][T11586] syzkaller0: entered promiscuous mode [ 123.904449][T11586] syzkaller0: entered allmulticast mode [ 123.955560][T11568] lo speed is unknown, defaulting to 1000 [ 124.052040][T11615] loop0: detected capacity change from 0 to 128 [ 124.052547][T11615] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 124.054062][T11616] loop4: detected capacity change from 0 to 128 [ 124.058575][T11615] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 124.074186][T11618] xt_hashlimit: size too large, truncated to 1048576 [ 124.116258][ T39] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 124.660343][T11568] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.662229][T11568] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.664216][T11568] bridge_slave_0: entered allmulticast mode [ 124.666576][T11568] bridge_slave_0: entered promiscuous mode [ 124.669182][T11646] syzkaller0: entered promiscuous mode [ 124.669205][T11646] syzkaller0: entered allmulticast mode [ 124.675433][T11568] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.676909][T11568] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.678269][T11568] bridge_slave_1: entered allmulticast mode [ 124.680195][T11568] bridge_slave_1: entered promiscuous mode [ 124.700453][T11568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.703395][T11568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.712322][T11568] team0: Port device team_slave_0 added [ 124.714311][T11568] team0: Port device team_slave_1 added [ 124.722045][T11568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.723306][T11568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.728279][T11568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.730852][T11568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.732163][T11568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.738070][T11568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.756224][T11568] hsr_slave_0: entered promiscuous mode [ 124.760790][T11568] hsr_slave_1: entered promiscuous mode [ 124.762187][T11568] debugfs: 'hsr0' already exists in 'hsr' [ 124.763300][T11568] Cannot create hsr debugfs directory [ 124.798288][T11650] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2560'. [ 124.847356][T11568] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.852148][T11654] lo: Caught tx_queue_len zero misconfig [ 124.869129][T11658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.869313][T11658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.924523][T11568] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.986516][T11568] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.031120][T11669] netlink: 'syz.4.2569': attribute type 13 has an invalid length. [ 125.057276][T11669] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 125.058609][T11669] syzkaller0: entered promiscuous mode [ 125.058633][T11669] syzkaller0: entered allmulticast mode [ 125.099571][T11568] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.176616][T11568] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 125.183679][T11568] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 125.184031][T11568] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 125.185815][T11568] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 125.186148][T11568] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 125.188142][T11568] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 125.189357][T11568] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 125.192688][T11568] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 125.246743][T11568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.251774][T11568] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.257456][ T1282] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.257499][ T1282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.258152][ T1282] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.258172][ T1282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.298950][T11568] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 125.298987][T11568] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.307747][T11694] syzkaller0: entered promiscuous mode [ 125.307781][T11694] syzkaller0: entered allmulticast mode [ 125.320084][T11698] syzkaller0: entered promiscuous mode [ 125.320113][T11698] syzkaller0: entered allmulticast mode [ 125.392314][T11710] syzkaller0: entered promiscuous mode [ 125.393538][T11710] syzkaller0: entered allmulticast mode [ 125.447061][T11715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2583'. [ 125.451074][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2583'. [ 125.487502][T11568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.497461][T11722] loop4: detected capacity change from 0 to 2048 [ 125.515123][T11568] veth0_vlan: entered promiscuous mode [ 125.519327][T11568] veth1_vlan: entered promiscuous mode [ 125.526687][T11722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.538102][T11568] veth0_macvtap: entered promiscuous mode [ 125.547570][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.549562][T11568] veth1_macvtap: entered promiscuous mode [ 125.550231][T11728] syzkaller0: entered promiscuous mode [ 125.550242][T11728] syzkaller0: entered allmulticast mode [ 125.559615][T11568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.573455][T11568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.597162][ T1282] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.597203][ T1282] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.597221][ T1282] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.597235][ T1282] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.604853][ T4710] Bluetooth: hci5: command tx timeout [ 125.695996][T11738] lo: Caught tx_queue_len zero misconfig [ 125.712202][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.712231][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.716764][T11740] syzkaller0: entered promiscuous mode [ 125.716795][T11740] syzkaller0: entered allmulticast mode [ 125.740574][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.740601][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.741476][T11744] netlink: 'syz.3.2592': attribute type 1 has an invalid length. [ 125.745432][T11742] syzkaller0: entered promiscuous mode [ 125.745460][T11742] syzkaller0: entered allmulticast mode [ 125.756208][T11744] 8021q: adding VLAN 0 to HW filter on device bond6 [ 125.789549][T11744] bond6: (slave dummy0): making interface the new active one [ 125.793285][T11747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2594'. [ 125.795244][T11744] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 125.799378][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2594'. [ 125.855773][T11755] loop4: detected capacity change from 0 to 2048 [ 125.884314][T11751] syzkaller0: entered promiscuous mode [ 125.886222][T11751] syzkaller0: entered allmulticast mode [ 125.926419][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.926468][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.932924][T11755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.225725][ T4720] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.373099][T11786] syzkaller0: entered promiscuous mode [ 126.373136][T11786] syzkaller0: entered allmulticast mode [ 126.382403][T11782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2606'. [ 126.390494][T11782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2606'. [ 126.433244][T11790] syzkaller0: entered promiscuous mode [ 126.433278][T11790] syzkaller0: entered allmulticast mode [ 126.442438][T11792] syzkaller0: entered promiscuous mode [ 126.443677][T11792] syzkaller0: entered allmulticast mode [ 126.539076][T11798] loop3: detected capacity change from 0 to 2048 [ 126.554323][T11798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.570672][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.921261][ T12] bridge_slave_1: left allmulticast mode [ 126.921304][ T12] bridge_slave_1: left promiscuous mode [ 126.921790][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.926313][ T12] bridge_slave_0: left allmulticast mode [ 126.926343][ T12] bridge_slave_0: left promiscuous mode [ 126.926411][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.929704][ T12] lo: left allmulticast mode [ 127.001149][ T12] bond1 (unregistering): (slave geneve2): Releasing active interface [ 127.040020][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.069144][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.095819][ T12] bond0 (unregistering): Released all slaves [ 127.109768][ T12] bond1 (unregistering): Released all slaves [ 127.118559][ T12] bond2 (unregistering): Released all slaves [ 127.125955][ T12] bond3 (unregistering): Released all slaves [ 127.199929][T11817] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.200132][T11817] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.267307][T11817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.269436][T11817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.448219][T11817] vlan2: left promiscuous mode [ 127.448253][T11817] bond_slave_1: left promiscuous mode [ 127.457992][ T12] tipc: Left network mode [ 127.464485][ T1282] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.464542][ T1282] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.464589][ T1282] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.464607][ T1282] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.485044][T11838] syzkaller0: entered promiscuous mode [ 127.485071][T11838] syzkaller0: entered allmulticast mode [ 127.507677][T11848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2632'. [ 127.538377][T11848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2632'. [ 127.638783][T11867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.684780][ T4710] Bluetooth: hci5: command tx timeout [ 128.197353][T11896] bond2 (unregistering): Released all slaves [ 128.386289][T11914] lo speed is unknown, defaulting to 1000 [ 128.412537][T11916] syzkaller0: entered promiscuous mode [ 128.414236][T11916] syzkaller0: entered allmulticast mode [ 128.440770][ T12] hsr_slave_0: left promiscuous mode [ 128.443431][ T12] hsr_slave_1: left promiscuous mode [ 128.445146][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.445169][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.447030][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.447041][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.462606][ T12] veth1_macvtap: left promiscuous mode [ 128.462673][ T12] veth0_macvtap: left promiscuous mode [ 128.462724][ T12] veth1_vlan: left promiscuous mode [ 128.462745][ T12] veth0_vlan: left promiscuous mode [ 128.651960][ T12] team0 (unregistering): Port device team_slave_1 removed [ 128.660411][ T12] team0 (unregistering): Port device team_slave_0 removed [ 128.912193][T11932] syzkaller0: entered promiscuous mode [ 128.913339][T11932] syzkaller0: entered allmulticast mode [ 128.989593][T11937] syzkaller0: entered promiscuous mode [ 128.989629][T11937] syzkaller0: entered allmulticast mode [ 129.047008][T11940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2654'. [ 129.101913][T11946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2654'. [ 129.116244][T11950] netlink: 'syz.0.2658': attribute type 1 has an invalid length. [ 129.129098][T11948] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2657'. [ 129.129127][T11948] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 129.160195][T11950] 8021q: adding VLAN 0 to HW filter on device bond5 [ 129.279674][T11964] syzkaller0: entered promiscuous mode [ 129.279707][T11964] syzkaller0: entered allmulticast mode [ 129.352529][T11970] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2667'. [ 129.423124][T11979] loop2: detected capacity change from 0 to 2048 [ 129.425042][T11976] syzkaller0: entered promiscuous mode [ 129.425077][T11976] syzkaller0: entered allmulticast mode [ 129.453062][T11979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.467833][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.556542][T11985] netlink: 'syz.2.2673': attribute type 1 has an invalid length. [ 129.572085][T11985] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.578875][T11991] loop4: detected capacity change from 0 to 128 [ 129.590967][T11991] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 129.593922][T11987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2674'. [ 129.601403][T11987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2674'. [ 129.629463][ T4720] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.661382][T11997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.661519][T11997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.661608][T11997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.664589][T11997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.764688][ T4710] Bluetooth: hci5: command tx timeout [ 129.836975][T12010] syzkaller0: entered promiscuous mode [ 129.837010][T12010] syzkaller0: entered allmulticast mode [ 129.863995][T12015] syzkaller0: entered promiscuous mode [ 129.865425][T12015] syzkaller0: entered allmulticast mode [ 129.884681][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.884723][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.885046][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.885068][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.885115][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.557977][T12039] Driver unsupported XDP return value 0 on prog (id 280) dev N/A, expect packet loss! [ 130.860611][T12064] lo speed is unknown, defaulting to 1000 [ 131.175179][ T15] Bluetooth: hci4: Frame reassembly failed (-84) [ 131.194140][ T50] Bluetooth: hci4: unexpected event 0x04 length: 1 < 10 [ 131.854638][ T50] Bluetooth: hci5: command tx timeout [ 132.993738][T12082] syzkaller0: entered promiscuous mode [ 132.994681][T12082] syzkaller0: entered allmulticast mode [ 133.204655][ T50] Bluetooth: hci4: command 0x1003 tx timeout [ 133.205207][ T4710] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 133.257389][T12027] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.304246][T12090] loop0: detected capacity change from 0 to 512 [ 133.321029][T12094] netlink: 'syz.4.2717': attribute type 1 has an invalid length. [ 133.335014][T12090] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 133.335084][T12090] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.2715: corrupted in-inode xattr: e_value size too large [ 133.335104][T12090] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 133.339307][T12090] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.2715: couldn't read orphan inode 15 (err -117) [ 133.339347][T12090] loop0: lost filesystem error report for type 5 error -117 [ 133.342022][T12090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.363769][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.440864][T12094] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.455251][T12098] syzkaller0: entered promiscuous mode [ 133.456362][T12098] syzkaller0: entered allmulticast mode [ 133.528312][T12114] loop3: detected capacity change from 0 to 512 [ 133.528702][T12114] ext4: Bad value for 'mb_optimize_scan' [ 133.668707][T12135] loop4: detected capacity change from 0 to 2048 [ 133.726482][T12135] Alternate GPT is invalid, using primary GPT. [ 133.726728][T12135] loop4: p2 p3 p7 [ 133.740484][T12139] syzkaller0: entered promiscuous mode [ 133.740522][T12139] syzkaller0: entered allmulticast mode [ 133.773689][ T4710] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 133.779002][ T4710] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 133.781119][ T4710] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 133.789422][ T4710] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 133.791312][ T4710] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 133.815450][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 133.817005][ T4699] udevd[4699]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 133.823125][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 133.897934][T12162] loop2: detected capacity change from 0 to 1024 [ 133.918679][T12162] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 133.918728][T12162] System zones: 0-1, 3-36 [ 133.919877][T12162] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.2745: bad orphan inode 134217728 [ 133.919898][T12162] loop2: lost filesystem error report for type 5 error -117 [ 133.920604][T12162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.940458][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.315049][T12144] lo speed is unknown, defaulting to 1000 [ 134.406746][T12192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2751'. [ 134.410915][T12196] loop2: detected capacity change from 0 to 512 [ 134.432499][T12196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.447448][T12201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2754'. [ 134.464851][ T4714] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 134.472585][ T4714] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 134.474930][ T4714] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 134.475193][ T4714] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 134.475400][ T4714] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 134.475630][ T4714] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 134.475831][ T4714] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 134.476048][ T4714] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 134.476503][ T4714] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 134.476719][ T4714] EXT4-fs error (device loop2): ext4_empty_dir:3085: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 134.492276][ T1282] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.550921][T12144] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.552516][T12144] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.552793][T12144] bridge_slave_0: entered allmulticast mode [ 134.553257][T12144] bridge_slave_0: entered promiscuous mode [ 134.554342][T12144] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.554364][T12144] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.554472][T12144] bridge_slave_1: entered allmulticast mode [ 134.557566][T12144] bridge_slave_1: entered promiscuous mode [ 134.566175][T12144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.568372][T12144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.580191][ T1282] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.583425][T12144] team0: Port device team_slave_0 added [ 134.585850][T12144] team0: Port device team_slave_1 added [ 134.593907][T12144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.593931][T12144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.593950][T12144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.594484][T12144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.594496][T12144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.594520][T12144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.607475][T12144] hsr_slave_0: entered promiscuous mode [ 134.607884][T12144] hsr_slave_1: entered promiscuous mode [ 134.608107][T12144] debugfs: 'hsr0' already exists in 'hsr' [ 134.608118][T12144] Cannot create hsr debugfs directory [ 134.659629][ T1282] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.729964][ T1282] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.794882][T12214] netlink: 'syz.1.2758': attribute type 13 has an invalid length. [ 134.832521][T12216] syzkaller0: entered promiscuous mode [ 134.833636][T12216] syzkaller0: entered allmulticast mode [ 134.917281][ T4710] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 134.921381][ T4710] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 134.923397][ T4710] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 134.923873][ T4710] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 134.924112][ T4710] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 135.247255][ T1282] bridge_slave_1: left allmulticast mode [ 135.247287][ T1282] bridge_slave_1: left promiscuous mode [ 135.247382][ T1282] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.253092][ T1282] bridge_slave_0: left allmulticast mode [ 135.253116][ T1282] bridge_slave_0: left promiscuous mode [ 135.253194][ T1282] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.359136][T12235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2764'. [ 135.386607][ T1282] bond1 (unregistering): (slave geneve4): Releasing backup interface [ 135.433240][ T1282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.438115][ T1282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.466203][ T1282] bond0 (unregistering): Released all slaves [ 135.470738][ T1282] bond1 (unregistering): Released all slaves [ 135.477552][ T1282] bond2 (unregistering): Released all slaves [ 135.481600][ T1282] bond3 (unregistering): Released all slaves [ 135.487817][ T1282] bond4 (unregistering): Released all slaves [ 135.493559][ T1282] bond5 (unregistering): Released all slaves [ 135.500469][ T1282] bond6 (unregistering): (slave dummy0): Releasing active interface [ 135.528468][ T1282] bond6 (unregistering): Released all slaves [ 135.636461][ T4399] 8021q: adding VLAN 0 to HW filter on device eth0 [ 135.651382][T12219] lo speed is unknown, defaulting to 1000 [ 135.654769][ T1282] tipc: Left network mode [ 135.674346][T12262] syzkaller1: entered promiscuous mode [ 135.675613][T12262] syzkaller1: entered allmulticast mode [ 135.845953][ T4710] Bluetooth: hci4: command tx timeout [ 135.856843][ T4399] 8021q: adding VLAN 0 to HW filter on device eth1 [ 135.871353][T12284] loop0: detected capacity change from 0 to 2048 [ 135.897956][T12284] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.910759][T12287] syzkaller0: entered promiscuous mode [ 135.910794][T12287] syzkaller0: entered allmulticast mode [ 135.926204][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.130941][T12219] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.132586][T12219] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.134176][T12219] bridge_slave_0: entered allmulticast mode [ 136.140221][T12219] bridge_slave_0: entered promiscuous mode [ 136.151447][ T1282] hsr_slave_0: left promiscuous mode [ 136.153742][ T1282] hsr_slave_1: left promiscuous mode [ 136.155215][ T1282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.156777][ T1282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.159272][ T1282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.159299][ T1282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.169944][ T1282] veth1_macvtap: left promiscuous mode [ 136.171860][ T1282] veth0_macvtap: left promiscuous mode [ 136.171933][ T1282] veth1_vlan: left promiscuous mode [ 136.171975][ T1282] veth0_vlan: left promiscuous mode [ 136.287291][ T1282] team0 (unregistering): Port device team_slave_1 removed [ 136.292477][ T1282] team0 (unregistering): Port device team_slave_0 removed [ 136.349474][T12219] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.349521][T12219] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.349605][T12219] bridge_slave_1: entered allmulticast mode [ 136.350071][T12219] bridge_slave_1: entered promiscuous mode [ 136.354107][T12329] syzkaller1: entered promiscuous mode [ 136.354122][T12329] syzkaller1: entered allmulticast mode [ 136.391821][T12219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.396124][T12219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.418894][T12219] team0: Port device team_slave_0 added [ 136.421055][T12219] team0: Port device team_slave_1 added [ 136.449298][T12144] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 136.463398][T12144] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 136.463739][T12144] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 136.467169][T12144] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 136.468490][T12219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.468498][T12219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.468510][T12219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.471813][T12144] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 136.497824][T12144] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 136.498203][T12144] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 136.517803][T12144] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 136.518338][T12219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.518346][T12219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.518359][T12219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.533321][T12351] loop0: detected capacity change from 0 to 2048 [ 136.552317][T12351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.601444][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.611879][T12219] hsr_slave_0: entered promiscuous mode [ 136.619041][T12219] hsr_slave_1: entered promiscuous mode [ 136.621877][T12219] debugfs: 'hsr0' already exists in 'hsr' [ 136.621917][T12219] Cannot create hsr debugfs directory [ 136.656850][T12368] syzkaller0: entered promiscuous mode [ 136.656883][T12368] syzkaller0: entered allmulticast mode [ 136.678947][T12372] syzkaller1: entered promiscuous mode [ 136.680035][T12372] syzkaller1: entered allmulticast mode [ 136.964755][ T4710] Bluetooth: hci1: command tx timeout [ 137.037348][ T1282] IPVS: stop unused estimator thread 0... [ 137.044502][T12387] syzkaller0: entered promiscuous mode [ 137.048236][T12387] syzkaller0: entered allmulticast mode [ 137.102283][T12144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.122287][T12144] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.125515][ T3685] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.125557][ T3685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.127820][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.127851][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.153225][T12144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.162925][T12219] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 137.168214][T12219] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 137.169137][T12219] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 137.173559][T12219] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 137.174002][T12219] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 137.177202][T12219] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 137.177610][T12219] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 137.189061][T12219] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 137.232117][T12219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.241419][T12219] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.247639][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.247683][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.248572][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.248592][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.262612][T12219] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 137.264439][T12219] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.324147][T12144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.346082][T12144] veth0_vlan: entered promiscuous mode [ 137.349261][T12144] veth1_vlan: entered promiscuous mode [ 137.358046][T12144] veth0_macvtap: entered promiscuous mode [ 137.359971][T12144] veth1_macvtap: entered promiscuous mode [ 137.365759][T12144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.367068][T12144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.370578][ T259] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.370640][ T259] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.370665][ T259] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.370687][ T259] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.400143][ T259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.400172][ T259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.410280][ T259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.410310][ T259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.416417][T12219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.461058][T12435] netlink: 'syz.3.2733': attribute type 1 has an invalid length. [ 137.500006][T12219] veth0_vlan: entered promiscuous mode [ 137.502477][T12219] veth1_vlan: entered promiscuous mode [ 137.517493][T12219] veth0_macvtap: entered promiscuous mode [ 137.526341][T12219] veth1_macvtap: entered promiscuous mode [ 137.530268][T12219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.531302][T12219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.539323][ T3685] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.539410][ T3685] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.539521][ T3685] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.539669][ T3685] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.581686][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.583512][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.599893][ T259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.599925][ T259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.739841][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2804'. [ 137.741623][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2804'. [ 137.837938][T12469] syzkaller0: entered promiscuous mode [ 137.837969][T12469] syzkaller0: entered allmulticast mode [ 137.876449][T12473] syzkaller0: entered promiscuous mode [ 137.877765][T12473] syzkaller0: entered allmulticast mode [ 137.886825][T12475] syzkaller0: entered promiscuous mode [ 137.887927][T12475] syzkaller0: entered allmulticast mode [ 137.925037][ T4710] Bluetooth: hci4: command tx timeout [ 137.973087][T12398] 9pnet_fd: p9_fd_create_tcp (12398): problem connecting socket to 127.0.0.1 [ 137.997660][T12481] netlink: 'syz.3.2815': attribute type 1 has an invalid length. [ 138.420307][T12484] 8021q: VLANs not supported on vxcan1 [ 138.429685][T12510] vlan2: entered promiscuous mode [ 138.430701][T12510] bridge0: entered promiscuous mode [ 138.522147][T12527] net_ratelimit: 6608 callbacks suppressed [ 138.522181][T12527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.522270][T12527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.567465][T12534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.569109][T12534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.571038][T12534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.573518][T12534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.576217][T12533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.576300][T12533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.593729][T12536] netlink: 'syz.0.2837': attribute type 1 has an invalid length. [ 138.618755][T12536] 8021q: adding VLAN 0 to HW filter on device bond6 [ 138.641829][T12541] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2838'. [ 138.643822][T12541] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 138.669465][T12545] loop3: detected capacity change from 0 to 2048 [ 138.688772][T12545] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 138.696947][T12545] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.2841: inline data xattr refers to an external xattr inode [ 138.701101][T12545] EXT4-fs (loop3): Remounting filesystem read-only [ 138.718356][T12144] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 139.014386][T12578] veth0_virt_wifi: entered promiscuous mode [ 139.044732][ T4710] Bluetooth: hci1: command tx timeout [ 139.516088][T12605] syzkaller1: entered promiscuous mode [ 139.516121][T12605] syzkaller1: entered allmulticast mode [ 139.608353][T12611] syzkaller0: entered promiscuous mode [ 139.608388][T12611] syzkaller0: entered allmulticast mode [ 139.710650][T12616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.779919][T12622] loop3: detected capacity change from 0 to 512 [ 139.782528][T12622] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 139.797934][T12625] netlink: 'syz.0.2873': attribute type 4 has an invalid length. [ 139.797967][T12625] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2873'. [ 139.815440][T12622] EXT4-fs (loop3): failed to open journal device unknown-block(238,156) -ENXIO [ 139.839658][T12622] loop3: detected capacity change from 0 to 544 [ 139.884045][T12634] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2877'. [ 140.005464][ T4710] Bluetooth: hci4: command tx timeout [ 140.129505][T12670] vlan1: entered allmulticast mode [ 140.129542][T12670] veth0_vlan: entered allmulticast mode [ 140.290089][T12695] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2907'. [ 140.457015][T12714] lo speed is unknown, defaulting to 1000 [ 140.662244][T12729] syzkaller0: entered promiscuous mode [ 140.662289][T12729] syzkaller0: entered allmulticast mode [ 140.873020][T12742] syzkaller0: entered promiscuous mode [ 140.873054][T12742] syzkaller0: entered allmulticast mode [ 140.997935][T12753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2933'. [ 141.126572][ T4710] Bluetooth: hci1: command tx timeout [ 141.203257][T12776] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2944'. [ 141.306964][T12783] loop0: detected capacity change from 0 to 512 [ 141.311870][T12783] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 141.338671][T12783] EXT4-fs (loop0): failed to open journal device unknown-block(238,156) -ENXIO [ 142.053841][T12823] loop3: detected capacity change from 0 to 512 [ 142.057600][T12823] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 142.084805][ T4710] Bluetooth: hci4: command tx timeout [ 142.090981][T12823] EXT4-fs (loop3): failed to open journal device unknown-block(238,156) -ENXIO [ 142.099205][T12823] loop3: detected capacity change from 0 to 512 [ 142.101349][T12823] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 142.122330][T12823] EXT4-fs (loop3): failed to open journal device unknown-block(238,156) -ENXIO [ 142.150401][T12829] syzkaller0: entered promiscuous mode [ 142.150431][T12829] syzkaller0: entered allmulticast mode [ 142.663509][T12855] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2971'. [ 143.205219][ T4710] Bluetooth: hci1: command tx timeout [ 144.305997][T12785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.481893][T12898] team0: Mode "ac" not found [ 144.483161][T12902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2987'. [ 144.511730][T12906] syzkaller0: entered promiscuous mode [ 144.512883][T12906] syzkaller0: entered allmulticast mode [ 144.532348][T12908] 9pnet_fd: p9_fd_create_tcp (12908): problem connecting socket to 127.0.0.1 [ 144.578612][T12915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2994'. [ 144.591016][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2994'. [ 144.593655][T12913] syzkaller0: entered promiscuous mode [ 144.593683][T12913] syzkaller0: entered allmulticast mode [ 144.710901][T12928] net_ratelimit: 155 callbacks suppressed [ 144.710936][T12928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.714007][T12928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.716579][T12928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.718867][T12928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.720632][T12928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.722474][T12928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.724426][T12928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.727400][T12928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.729051][T12928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.730880][T12928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.757073][T12933] syzkaller0: entered promiscuous mode [ 144.757106][T12933] syzkaller0: entered allmulticast mode [ 144.767091][T12933] tipc: Started in network mode [ 144.767120][T12933] tipc: Node identity e6d03f0c73b7, cluster identity 4711 [ 144.767233][T12933] tipc: Enabled bearer , priority 0 [ 144.772558][T12933] tipc: Resetting bearer [ 144.775255][T12932] tipc: Resetting bearer [ 144.794845][T12932] tipc: Disabling bearer [ 144.843519][T12942] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3007'. [ 144.937856][T12948] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3010'. [ 144.939750][T12948] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3010'. [ 145.453671][T12990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.583397][T12999] syzkaller0: entered promiscuous mode [ 145.586906][T12999] syzkaller0: entered allmulticast mode [ 145.599607][T12998] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3032'. [ 145.763295][T13016] netlink: 'syz.5.3035': attribute type 13 has an invalid length. [ 145.837771][T13016] syzkaller0: entered promiscuous mode [ 145.837804][T13016] syzkaller0: entered allmulticast mode [ 150.245262][ C0] net_ratelimit: 13508 callbacks suppressed [ 150.245309][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 150.887311][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.604687][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 153.604726][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 156.646065][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.646118][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.765461][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.765507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.768476][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.768498][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.605320][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.381783][T13034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3041'. [ 171.342397][T13038] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 171.375111][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.423293][T13094] syzkaller0: entered promiscuous mode [ 171.423332][T13094] syzkaller0: entered allmulticast mode [ 171.591204][T13116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3074'. [ 172.005702][ T4794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.006420][ T3685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.006450][ T3685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.006471][ T3685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.006485][ T3685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.008752][ T4524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.008779][ T4524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.008798][ T4524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.009246][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.015447][T13185] loop3: detected capacity change from 0 to 512 [ 173.018891][T13185] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 173.039474][T13185] EXT4-fs (loop3): failed to open journal device unknown-block(238,156) -ENXIO [ 173.048066][T13185] loop3: detected capacity change from 0 to 512 [ 173.072054][T13185] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -ENXIO [ 173.153635][T13197] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3106'. [ 173.373398][T13205] syzkaller0: entered promiscuous mode [ 173.373426][T13205] syzkaller0: entered allmulticast mode [ 173.531935][T13211] syzkaller0: entered promiscuous mode [ 173.531963][T13211] syzkaller0: entered allmulticast mode [ 174.556680][T13118] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 174.661518][T13227] syzkaller0: entered promiscuous mode [ 174.666925][T13227] syzkaller0: entered allmulticast mode [ 174.672716][T13229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3121'. [ 174.682856][T13227] tipc: Enabled bearer , priority 0 [ 174.686852][T13224] tipc: Resetting bearer [ 174.695333][T13224] tipc: Disabling bearer [ 174.698196][T13230] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 174.730746][T13234] syzkaller0: entered promiscuous mode [ 174.730778][T13234] syzkaller0: entered allmulticast mode [ 174.752560][T13239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.768826][T13236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3126'. [ 174.827989][T13247] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3129'. [ 175.062127][T13280] syzkaller0: entered promiscuous mode [ 175.063473][T13280] syzkaller0: entered allmulticast mode [ 175.367394][T13288] syzkaller0: entered promiscuous mode [ 175.367430][T13288] syzkaller0: entered allmulticast mode [ 175.370499][T13288] tipc: Enabled bearer , priority 0 [ 175.372778][T13287] tipc: Resetting bearer [ 175.379006][T13287] tipc: Disabling bearer [ 175.504469][ T4524] IPVS: starting estimator thread 0... [ 175.523995][T13309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3155'. [ 175.551708][T13311] syzkaller0: entered promiscuous mode [ 175.551735][T13311] syzkaller0: entered allmulticast mode [ 175.597266][T13307] IPVS: using max 61 ests per chain, 146400 per kthread [ 175.766194][T13334] bridge0: port 3(vlan2) entered blocking state [ 175.766877][T13334] bridge0: port 3(vlan2) entered disabled state [ 175.767334][T13334] vlan2: entered allmulticast mode [ 175.767509][T13334] geneve0: entered allmulticast mode [ 175.777214][T13334] vlan2: entered promiscuous mode [ 175.777246][T13334] geneve0: entered promiscuous mode [ 175.909329][T13349] 9pnet_fd: p9_fd_create_tcp (13349): problem connecting socket to 127.0.0.1 [ 176.052432][T13368] syzkaller1: entered promiscuous mode [ 176.052472][T13368] syzkaller1: entered allmulticast mode [ 176.074150][T13370] syzkaller0: entered promiscuous mode [ 176.074186][T13370] syzkaller0: entered allmulticast mode [ 176.164986][T13383] syzkaller0: entered promiscuous mode [ 176.165026][T13383] syzkaller0: entered allmulticast mode [ 176.166337][T13383] tipc: Started in network mode [ 176.166350][T13383] tipc: Node identity c21352effd94, cluster identity 4711 [ 176.166834][T13383] tipc: Enabled bearer , priority 0 [ 176.183189][T13382] tipc: Resetting bearer [ 176.196768][T13382] tipc: Disabling bearer [ 176.208222][T13389] syzkaller0: entered promiscuous mode [ 176.208259][T13389] syzkaller0: entered allmulticast mode [ 176.221425][T13395] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3196'. [ 176.288573][T13399] syzkaller0: entered promiscuous mode [ 176.288606][T13399] syzkaller0: entered allmulticast mode [ 176.341572][T13412] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3204'. [ 176.341745][T13409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.346092][T13412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3204'. [ 176.346127][T13412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3204'. [ 176.349618][T13412] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3204'. [ 176.349638][T13412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3204'. [ 176.353043][T13413] 9pnet_fd: p9_fd_create_tcp (13413): problem connecting socket to 127.0.0.1 [ 176.524062][T13435] syzkaller0: entered promiscuous mode [ 176.524097][T13435] syzkaller0: entered allmulticast mode [ 176.559969][T13443] Bluetooth: MGMT ver 1.23 [ 176.574227][T13445] syzkaller0: entered promiscuous mode [ 176.574258][T13445] syzkaller0: entered allmulticast mode [ 176.637733][T13455] ip6tnl0: Caught tx_queue_len zero misconfig [ 176.827768][T13484] syzkaller0: entered promiscuous mode [ 176.828887][T13484] syzkaller0: entered allmulticast mode [ 176.834194][T13486] netlink: 'syz.3.3234': attribute type 13 has an invalid length. [ 176.876848][ C0] net_ratelimit: 11 callbacks suppressed [ 176.876888][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 176.905264][T13486] syzkaller0: entered promiscuous mode [ 176.905297][T13486] syzkaller0: entered allmulticast mode [ 176.945810][ T4712] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 176.947392][ T4712] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 176.951909][ T4712] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 176.953674][ T4712] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 176.959775][ T4712] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.034094][T13508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.034229][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.138985][T13496] lo speed is unknown, defaulting to 1000 [ 177.245072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 177.480405][T13496] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.484959][T13496] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.489212][T13496] bridge_slave_0: entered allmulticast mode [ 177.489727][T13496] bridge_slave_0: entered promiscuous mode [ 177.490774][T13496] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.496995][T13496] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.497122][T13496] bridge_slave_1: entered allmulticast mode [ 177.497616][T13496] bridge_slave_1: entered promiscuous mode [ 177.519735][T13496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.520720][T13496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.572132][T13496] team0: Port device team_slave_0 added [ 177.576888][T13496] team0: Port device team_slave_1 added [ 177.614114][T13496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.614142][T13496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.614156][T13496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.618801][T13496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.618812][T13496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.618831][T13496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.725084][T13496] hsr_slave_0: entered promiscuous mode [ 177.727771][T13496] hsr_slave_1: entered promiscuous mode [ 177.728015][T13496] debugfs: 'hsr0' already exists in 'hsr' [ 177.728027][T13496] Cannot create hsr debugfs directory [ 177.785831][T13570] bridge0: entered promiscuous mode [ 177.785880][T13570] bridge0: entered allmulticast mode [ 178.087050][T13594] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 178.277699][T13614] netlink: 'syz.5.3284': attribute type 14 has an invalid length. [ 178.615619][T13643] syzkaller1: entered promiscuous mode [ 178.616885][T13643] syzkaller1: entered allmulticast mode [ 178.833744][T13656] syzkaller0: entered promiscuous mode [ 178.833778][T13656] syzkaller0: entered allmulticast mode [ 179.054742][ T4712] Bluetooth: hci2: command tx timeout [ 179.204798][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.901893][T13681] 9pnet_virtio: no channels available for device 127.0.0.1 [ 181.083486][T13594] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 181.090201][T13496] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 181.108006][T13496] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 181.108398][T13496] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 181.117172][T13496] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 181.127723][T13496] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 181.130799][T13496] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 181.134754][ T4712] Bluetooth: hci2: command tx timeout [ 181.138452][T13496] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 181.140776][T13496] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 181.154246][T13697] syzkaller0: entered promiscuous mode [ 181.161864][T13697] syzkaller0: entered allmulticast mode [ 181.240374][T13496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.247143][T13496] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.248873][ T1435] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.248907][ T1435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.251102][ T259] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.251141][ T259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.259931][T13496] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 181.259945][T13496] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.439377][T13496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.537509][T13496] veth0_vlan: entered promiscuous mode [ 181.545604][T13496] veth1_vlan: entered promiscuous mode [ 181.572289][T13496] veth0_macvtap: entered promiscuous mode [ 181.581249][T13496] veth1_macvtap: entered promiscuous mode [ 181.590067][T13496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.607994][T13496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.618302][ T1069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.626887][ T1435] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.640297][ T259] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.640357][ T259] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.640375][ T259] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.708982][ T3685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.709017][ T3685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.712325][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.712353][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.737304][T13785] __nla_validate_parse: 7 callbacks suppressed [ 181.738637][T13785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3350'. [ 181.863244][T13808] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3355'. [ 181.990247][T13829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3365'. [ 181.990284][T13829] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3365'. [ 182.192961][T13856] syzkaller0: entered promiscuous mode [ 182.193007][T13856] syzkaller0: entered allmulticast mode [ 182.201500][T13856] tipc: Enabled bearer , priority 0 [ 182.215925][T13856] tipc: Resetting bearer [ 182.236206][T13854] tipc: Resetting bearer [ 182.243338][T13854] tipc: Disabling bearer [ 182.254643][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 182.471157][T13888] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 182.471193][T13888] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 182.535062][T13895] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3392'. [ 182.541471][T13895] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3392'. [ 182.542012][T13895] netlink: 508 bytes leftover after parsing attributes in process `syz.3.3392'. [ 182.711912][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 182.713557][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 182.716458][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 182.726590][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 182.728728][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 182.884641][T13912] lo speed is unknown, defaulting to 1000 [ 183.025763][ T3685] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.050274][T13943] syzkaller0: entered promiscuous mode [ 183.050305][T13943] syzkaller0: entered allmulticast mode [ 183.056056][T13943] tipc: Started in network mode [ 183.056096][T13943] tipc: Node identity f6e37e7fd8a1, cluster identity 4711 [ 183.056610][T13943] tipc: Enabled bearer , priority 0 [ 183.068975][T13912] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.070853][T13912] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.072563][T13912] bridge_slave_0: entered allmulticast mode [ 183.076970][T13912] bridge_slave_0: entered promiscuous mode [ 183.079571][T13912] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.081022][T13912] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.082447][T13912] bridge_slave_1: entered allmulticast mode [ 183.087656][T13912] bridge_slave_1: entered promiscuous mode [ 183.093445][T13943] tipc: Resetting bearer [ 183.102868][T13942] tipc: Resetting bearer [ 183.109708][T13942] tipc: Disabling bearer [ 183.118887][ T3685] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.125782][T13912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.130751][T13912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.143349][T13912] team0: Port device team_slave_0 added [ 183.155371][T13912] team0: Port device team_slave_1 added [ 183.177446][T13912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.177471][T13912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.177486][T13912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.178031][T13912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.178037][T13912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.178051][T13912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.193052][T13912] hsr_slave_0: entered promiscuous mode [ 183.193386][T13912] hsr_slave_1: entered promiscuous mode [ 183.193597][T13912] debugfs: 'hsr0' already exists in 'hsr' [ 183.193608][T13912] Cannot create hsr debugfs directory [ 183.204702][ T4710] Bluetooth: hci2: command tx timeout [ 183.228429][ T3685] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.389828][ T3685] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.391983][T13958] 9p: Bad value for 'port' [ 183.491660][T13972] syzkaller0: entered promiscuous mode [ 183.492790][T13972] syzkaller0: entered allmulticast mode [ 183.640485][ T3685] bond0 (unregistering): Released all slaves [ 183.644476][ T3685] bond1 (unregistering): Released all slaves [ 183.650047][ T3685] bond2 (unregistering): Released all slaves [ 183.658925][ T3685] bond3 (unregistering): Released all slaves [ 183.681240][ T3685] bond4 (unregistering): Released all slaves [ 183.687027][ T3685] bond5 (unregistering): Released all slaves [ 183.694068][ T3685] bond6 (unregistering): Released all slaves [ 183.706094][ T4399] 8021q: adding VLAN 0 to HW filter on device eth0 [ 183.721231][T13999] netlink: set zone limit has 8 unknown bytes [ 183.786361][ T3685] tipc: Left network mode [ 183.837354][T14017] 9p: Bad value for 'port' [ 183.942494][ T4399] 8021q: adding VLAN 0 to HW filter on device eth1 [ 184.023844][T14039] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3431'. [ 184.026354][T14039] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3431'. [ 184.119851][ T3685] hsr_slave_0: left promiscuous mode [ 184.121263][ T3685] hsr_slave_1: left promiscuous mode [ 184.126495][ T3685] veth1_macvtap: left promiscuous mode [ 184.126534][ T3685] veth0_macvtap: left promiscuous mode [ 184.126585][ T3685] veth1_vlan: left promiscuous mode [ 184.126620][ T3685] veth0_vlan: left promiscuous mode [ 184.346112][T14063] syzkaller0: entered promiscuous mode [ 184.346142][T14063] syzkaller0: entered allmulticast mode [ 184.374219][T14083] syzkaller0: entered promiscuous mode [ 184.374251][T14083] syzkaller0: entered allmulticast mode [ 184.376140][T14083] tipc: Started in network mode [ 184.376155][T14083] tipc: Node identity 128a97b1a13a, cluster identity 4711 [ 184.376265][T14083] tipc: Enabled bearer , priority 0 [ 184.388754][T14083] tipc: Resetting bearer [ 184.400174][T14082] tipc: Resetting bearer [ 184.405566][T14082] tipc: Disabling bearer [ 184.429781][T13912] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 184.433972][T13912] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 184.436239][T13912] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 184.439941][T13912] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 184.441933][T13912] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 184.445217][T13912] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 184.447172][T13912] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 184.453335][T13912] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 184.504050][T13912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.511373][T13912] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.522957][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.523003][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.535036][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.535078][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.809050][ T4710] Bluetooth: hci3: command tx timeout [ 185.112517][T14106] lo speed is unknown, defaulting to 1000 [ 185.123820][T13912] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 185.140588][T13912] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.201882][T14121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3449'. [ 185.294631][ T4710] Bluetooth: hci2: command 0x0419 tx timeout [ 185.354493][T14101] 9pnet_fd: p9_fd_create_tcp (14101): problem connecting socket to 127.0.0.1 [ 185.502068][T13912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.531008][T13912] veth0_vlan: entered promiscuous mode [ 185.681614][T13912] veth1_vlan: entered promiscuous mode [ 185.692164][ T3685] IPVS: stop unused estimator thread 0... [ 185.723838][T13912] veth0_macvtap: entered promiscuous mode [ 185.741396][T13912] veth1_macvtap: entered promiscuous mode [ 185.757074][T13912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.770341][T13912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.787232][ T1282] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.787340][ T1282] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.787422][ T1282] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.787462][ T1282] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.040564][T14164] syzkaller0: entered promiscuous mode [ 186.040599][T14164] syzkaller0: entered allmulticast mode [ 186.059856][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.059883][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.885820][ T4712] Bluetooth: hci3: command tx timeout [ 186.950453][T14198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3467'. [ 186.956260][T14198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3467'. [ 186.993732][T14189] syzkaller0: entered promiscuous mode [ 186.995574][T14189] syzkaller0: entered allmulticast mode [ 187.365439][ T4712] Bluetooth: hci2: command 0x0419 tx timeout [ 187.366802][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.368058][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.800564][ T259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.800594][ T259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.986134][T14209] bond0: (slave gre0): Error: Device can not be enslaved while up [ 188.039076][T14219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3475'. [ 188.040823][T14219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3475'. [ 188.046678][T14219] vxlan0: entered promiscuous mode [ 188.048412][ T1435] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.050697][ T1435] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.052373][ T1435] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.052418][ T1435] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.202673][T14235] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3477'. [ 188.309604][T14238] syzkaller0: entered promiscuous mode [ 188.310923][T14238] syzkaller0: entered allmulticast mode [ 188.317811][T14238] tipc: Enabled bearer , priority 0 [ 188.323351][T14238] tipc: Resetting bearer [ 188.330804][T14237] tipc: Resetting bearer [ 188.356506][T14237] tipc: Disabling bearer [ 188.458494][T14246] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 188.526418][T14248] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 188.678713][T14258] syzkaller0: entered promiscuous mode [ 188.680003][T14258] syzkaller0: entered allmulticast mode [ 188.766855][T14256] syzkaller0: entered promiscuous mode [ 188.769201][T14256] syzkaller0: entered allmulticast mode [ 188.772193][T14260] syzkaller0: entered promiscuous mode [ 188.772223][T14260] syzkaller0: entered allmulticast mode [ 188.965021][ T4712] Bluetooth: hci3: command tx timeout [ 189.001851][T14267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3491'. [ 189.436071][T14290] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 189.823757][T14317] netlink: 596 bytes leftover after parsing attributes in process `syz.1.3514'. [ 189.864130][T14322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3516'. [ 189.866888][T14322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3516'. [ 189.868977][T14322] netlink: 'syz.1.3516': attribute type 14 has an invalid length. [ 189.911098][T14325] syzkaller0: entered promiscuous mode [ 189.913422][T14325] syzkaller0: entered allmulticast mode [ 190.161130][T14341] syzkaller0: entered promiscuous mode [ 190.162365][T14341] syzkaller0: entered allmulticast mode [ 190.228154][T14344] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3525'. [ 190.397344][T14361] syzkaller0: entered promiscuous mode [ 190.397378][T14361] syzkaller0: entered allmulticast mode [ 190.407382][T14361] tipc: Enabled bearer , priority 0 [ 190.422422][T14361] tipc: Resetting bearer [ 190.437132][T14360] tipc: Resetting bearer [ 190.454199][T14360] tipc: Disabling bearer [ 190.461627][T14365] Bluetooth: MGMT ver 1.23 [ 191.044819][ T4710] Bluetooth: hci3: command tx timeout [ 191.077553][T14401] syzkaller0: entered promiscuous mode [ 191.079011][T14401] syzkaller0: entered allmulticast mode [ 191.803148][T14429] syzkaller0: entered promiscuous mode [ 191.803181][T14429] syzkaller0: entered allmulticast mode [ 192.121153][T14448] syzkaller0: entered promiscuous mode [ 192.122407][T14448] syzkaller0: entered allmulticast mode [ 192.130713][T14448] tipc: Enabled bearer , priority 0 [ 192.136238][T14448] tipc: Resetting bearer [ 192.143190][T14447] tipc: Resetting bearer [ 192.179614][T14447] tipc: Disabling bearer [ 192.236634][T14455] __nla_validate_parse: 3 callbacks suppressed [ 192.238155][T14455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3573'. [ 192.397310][T14462] veth0_virt_wifi: entered promiscuous mode [ 192.485872][ T4710] Bluetooth: hci2: command 0x0419 tx timeout [ 192.487239][ T4712] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 192.610274][T14465] syzkaller0: entered promiscuous mode [ 192.610308][T14465] syzkaller0: entered allmulticast mode [ 195.686586][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.734568][ C1] sched: DL replenish lagged too much [ 207.916491][T14475] 9pnet_fd: p9_fd_create_tcp (14475): problem connecting socket to 127.0.0.1 [ 246.047913][ T4710] Bluetooth: hci5: command 0x0406 tx timeout [ 251.206031][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 251.209580][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.176179][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 259.048112][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 271.205593][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 37s! [ 271.205679][ C0] Showing busy workqueues and worker pools: [ 271.205689][ C0] workqueue events: flags=0x100 [ 271.205731][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=7 refcnt=8 [ 271.205752][ C0] pending: vmstat_shepherd, nsim_dev_hwstats_traffic_work, 4*ovs_dp_masks_rebalance, psi_avgs_work [ 271.205802][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=15 refcnt=16 [ 271.205819][ C0] pending: 5*nsim_dev_hwstats_traffic_work, 4*psi_avgs_work, 4*ovs_dp_masks_rebalance, debugfs_reap_work, psi_avgs_work [ 271.205867][ C0] workqueue events_long: flags=0x100 [ 271.205875][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=7 refcnt=8 [ 271.205891][ C0] in-flight: 1069:defense_work_handler for 2s [ 271.205909][ C0] pending: 6*defense_work_handler [ 271.205924][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 271.205940][ C0] pending: defense_work_handler [ 271.205955][ C0] workqueue events_unbound: flags=0x2 [ 271.205962][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=23 refcnt=24 [ 271.205977][ C0] in-flight: 40:cfg80211_wiphy_work for 78s cfg80211_wiphy_work ,3685:cfg80211_wiphy_work for 74s cfg80211_wiphy_work ,259:linkwatch_event for 71s ,15:cfg80211_wiphy_work for 19s ,14477:nsim_dev_trap_report_work for 2s ,12:cfg80211_wiphy_work for 73s cfg80211_wiphy_work [ 271.206077][ C0] pending: 3*macvlan_process_broadcast, nsim_dev_trap_report_work, 3*macvlan_process_broadcast, toggle_allocation_gate, nsim_dev_trap_report_work, cfg80211_wiphy_work, 2*nsim_dev_trap_report_work, macvlan_process_broadcast, flush_memcg_stats_dwork [ 271.206148][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=6 refcnt=7 [ 271.206162][ C0] in-flight: 1282:nsim_dev_trap_report_work for 11s ,39:cfg80211_wiphy_work for 45s cfg80211_wiphy_work [ 271.206195][ C0] pending: macvlan_process_broadcast, cfg80211_wiphy_work, macvlan_process_broadcast [ 271.206222][ C0] workqueue events_power_efficient: flags=0x82 [ 271.206230][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=11 refcnt=12 [ 271.206244][ C0] in-flight: 1435:neigh_periodic_work for 2s [ 271.206261][ C0] pending: 2*neigh_managed_work, reg_check_chans_work, neigh_periodic_work, fb_flashcursor, 2*check_lifetime, gc_worker, check_lifetime, wg_ratelimiter_gc_entries [ 271.206325][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 271.206339][ C0] pending: check_lifetime [ 271.206357][ C0] workqueue netns: flags=0x6000a [ 271.206365][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=7 MAYDAY [ 271.206379][ C0] in-flight: 8(RESCUER):cleanup_net for 32s [ 271.206395][ C0] pending: mayday_cursor_func [ 271.206405][ C0] inactive: cleanup_net [ 271.206418][ C0] workqueue mm_percpu_wq: flags=0x108 [ 271.206426][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 271.206442][ C0] pending: vmstat_update [ 271.206456][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 271.206472][ C0] pending: vmstat_update [ 271.206493][ C0] workqueue kblockd: flags=0x118 [ 271.206501][ C0] pwq 7: cpus=1 node=0 flags=0x0 nice=-20 active=1 refcnt=2 [ 271.206517][ C0] in-flight: 4359:blk_mq_timeout_work for 0s [ 271.206541][ C0] workqueue tc_filter_workqueue: flags=0x20002 [ 271.206550][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4 [ 271.206564][ C0] pending: flow_destroy_filter_work [ 271.206606][ C0] workqueue ipv6_addrconf: flags=0x6000a [ 271.206614][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=7 MAYDAY [ 271.206628][ C0] in-flight: 2819(RESCUER):addrconf_verify_work for 22s [ 271.206645][ C0] pending: mayday_cursor_func [ 271.206655][ C0] inactive: addrconf_verify_work [ 271.206668][ C0] workqueue krxrpcd: flags=0x2001a [ 271.206676][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 271.206693][ C0] pending: rxrpc_peer_keepalive_worker [ 271.206708][ C0] workqueue l2tp: flags=0x2 [ 271.206716][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 271.206730][ C0] pending: l2tp_tunnel_del_work [ 271.206746][ C0] workqueue bat_events: flags=0x6000a [ 271.206754][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=60 MAYDAY [ 271.206767][ C0] in-flight: 2851(RESCUER):batadv_dat_purge for 2s [ 271.206785][ C0] pending: mayday_cursor_func [ 271.206795][ C0] inactive: batadv_bla_periodic_work, batadv_purge_orig, 2*batadv_iv_send_outstanding_bat_ogm_packet, batadv_mcast_mla_update, batadv_purge_orig, batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, 7*batadv_iv_send_outstanding_bat_ogm_packet, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, 2*batadv_tt_purge, 2*batadv_iv_send_outstanding_bat_ogm_packet, batadv_dat_purge, 2*batadv_bla_periodic_work, batadv_dat_purge, 2*batadv_tt_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_purge_orig, 6*batadv_mcast_mla_update, batadv_purge_orig, batadv_tt_purge, 3*batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, 4*batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, 2*batadv_iv_send_outstanding_bat_ogm_packet, batadv_tt_purge [ 271.207024][ C0] workqueue wg-kex-wg0: flags=0x6 [ 271.207032][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=2 refcnt=3 [ 271.207046][ C0] pending: 2*wg_packet_handshake_send_worker [ 271.207065][ C0] workqueue wg-kex-wg1: flags=0x6 [ 271.207073][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=2 refcnt=3 [ 271.207086][ C0] pending: 2*wg_packet_handshake_send_worker [ 271.207104][ C0] workqueue wg-kex-wg2: flags=0x6 [ 271.207113][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=2 refcnt=3 [ 271.207126][ C0] pending: 2*wg_packet_handshake_send_worker [ 271.207147][ C0] workqueue loop2: flags=0x6 [ 271.207155][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 271.207169][ C0] pending: loop_rootcg_workfn [ 271.207193][ C0] workqueue wg-kex-wg0: flags=0x6 [ 271.207201][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 271.207215][ C0] pending: wg_packet_handshake_send_worker [ 271.207232][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 271.207241][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 271.207257][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 271.207279][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 271.207288][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 271.207304][ C0] pending: wg_packet_tx_worker, wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 271.207332][ C0] workqueue wg-kex-wg2: flags=0x6 [ 271.207340][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 271.207354][ C0] pending: wg_packet_handshake_send_worker [ 271.207371][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 271.207380][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 271.207396][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 271.207425][ C0] workqueue bond2: flags=0x2000a [ 271.207432][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=5 [ 271.207447][ C0] pending: bond_mii_monitor [ 271.207460][ C0] inactive: bond_alb_monitor [ 271.207472][ C0] workqueue bond2: flags=0x2000a [ 271.207480][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=5 [ 271.207495][ C0] pending: bond_alb_monitor [ 271.207505][ C0] inactive: bond_mii_monitor [ 271.207519][ C0] workqueue hci4: flags=0x20012 [ 271.207527][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 271.207544][ C0] in-flight: 4710:hci_cmd_sync_work for 17s [ 271.207565][ C0] workqueue wg-kex-wg0: flags=0x6 [ 271.207573][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=2 refcnt=3 [ 271.207587][ C0] pending: 2*wg_packet_handshake_send_worker [ 271.207605][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 271.207613][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 271.207629][ C0] pending: wg_packet_encrypt_worker [ 271.207643][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 271.207659][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 271.207680][ C0] workqueue wg-kex-wg1: flags=0x6 [ 271.207688][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 271.207703][ C0] pending: wg_packet_handshake_send_worker [ 271.207719][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 271.207728][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 271.207744][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 271.207772][ C0] workqueue wg-kex-wg2: flags=0x124 [ 271.207781][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 271.207798][ C0] pending: wg_packet_handshake_receive_worker [ 271.207813][ C0] workqueue wg-kex-wg2: flags=0x6 [ 271.207821][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 271.207835][ C0] pending: wg_packet_handshake_send_worker [ 271.207851][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 271.207860][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 271.207876][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 271.207899][ C0] workqueue wg-kex-wg0: flags=0x124 [ 271.207908][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 271.207924][ C0] pending: wg_packet_handshake_receive_worker [ 271.207939][ C0] workqueue wg-kex-wg0: flags=0x6 [ 271.207947][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 271.207961][ C0] pending: wg_packet_handshake_send_worker [ 271.207977][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 271.207986][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 271.208004][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 271.208027][ C0] workqueue wg-kex-wg1: flags=0x124 [ 271.208036][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 271.208052][ C0] pending: wg_packet_handshake_receive_worker [ 271.208067][ C0] workqueue wg-kex-wg1: flags=0x6 [ 271.208075][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 271.208089][ C0] pending: wg_packet_handshake_send_worker [ 271.208106][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 271.208114][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 271.208130][ C0] pending: wg_packet_encrypt_worker [ 271.208144][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 271.208160][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 271.208181][ C0] workqueue wg-kex-wg2: flags=0x124 [ 271.208190][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 271.208206][ C0] pending: wg_packet_handshake_receive_worker [ 271.208221][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 271.208229][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 271.208245][ C0] pending: wg_packet_encrypt_worker [ 271.208259][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 271.208275][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 271.208297][ C0] workqueue krds_cp_wq#2/0: flags=0x20002 [ 271.208305][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4 [ 271.208320][ C0] pending: rds_send_worker [ 271.208333][ C0] workqueue krds_cp_wq#2/1: flags=0x20002 [ 271.208341][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4 [ 271.208355][ C0] pending: rds_send_worker [ 271.208369][ C0] workqueue krds_cp_wq#2/6: flags=0x20002 [ 271.208376][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4 [ 271.208391][ C0] pending: rds_send_worker [ 271.208404][ C0] workqueue krds_cp_wq#3/0: flags=0x20002 [ 271.208411][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=4 [ 271.208426][ C0] pending: rds_send_worker [ 271.208440][ C0] workqueue wg-kex-wg0: flags=0x124 [ 271.208449][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 271.208465][ C0] pending: wg_packet_handshake_receive_worker [ 271.208480][ C0] workqueue wg-kex-wg0: flags=0x6 [ 271.208488][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 271.208502][ C0] pending: wg_packet_handshake_send_worker [ 271.208519][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 271.208528][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 271.208544][ C0] pending: wg_packet_tx_worker, wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 271.208572][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 271.208581][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 271.208597][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker [ 271.208625][ C0] workqueue wg-kex-wg2: flags=0x124 [ 271.208634][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 271.208650][ C0] pending: wg_packet_handshake_receive_worker [ 271.208665][ C0] workqueue wg-kex-wg2: flags=0x6 [ 271.208674][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 271.208688][ C0] pending: wg_packet_handshake_send_worker [ 271.208704][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 271.208712][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 271.208728][ C0] pending: wg_packet_encrypt_worker [ 271.208742][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 271.208757][ C0] in-flight: 867:wg_packet_encrypt_worker for 39s [ 271.208775][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 271.208797][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 271.208806][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 271.208822][ C0] pending: wg_packet_tx_worker, wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 271.208851][ C0] workqueue wg-kex-wg1: flags=0x6 [ 271.208860][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 271.208874][ C0] pending: wg_packet_handshake_send_worker [ 271.208889][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 271.208898][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 271.208914][ C0] pending: wg_packet_decrypt_worker, wg_packet_tx_worker, wg_packet_encrypt_worker [ 271.208943][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 271.208951][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 271.208967][ C0] pending: wg_packet_encrypt_worker [ 271.208981][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 271.208996][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 271.209026][ C0] pool 2: cpus=0 node=0 flags=0x0 nice=0 hung=2s workers=7 idle: 4809 4844 11 9 4794 4823 [ 271.209077][ C0] pool 6: cpus=1 node=0 flags=0x0 nice=0 hung=37s workers=7 idle: 4796 24 4524 4816 4795 26 [ 271.209123][ C0] pool 7: cpus=1 node=0 flags=0x0 nice=-20 hung=0s workers=2 idle: 25 [ 271.209148][ C0] pool 8: cpus=0-1 flags=0x6 nice=0 hung=0s workers=10 manager: 14478 [ 271.209169][ C0] pool 9: cpus=0-1 node=0 flags=0x4 nice=-20 hung=0s workers=6 idle: 4712 50 4722 4724 4715 [ 271.209211][ C0] Showing backtraces of busy workers in stalled worker pools: [ 271.209220][ C0] pool 6: [ 271.209225][ C0] task:kworker/1:2 state:R running task stack:0 pid:867 tgid:867 ppid:2 task_flags:0x4208060 flags:0x00000010 [ 271.209239][ C0] Workqueue: wg-crypt-wg2 wg_packet_encrypt_worker [ 271.209251][ C0] Call trace: [ 271.209254][ C0] __switch_to+0x2b0/0x6e0 (T) [ 271.209268][ C0] __schedule+0x1370/0x2d80 [ 271.209277][ C0] preempt_schedule_common+0xd4/0x190 [ 271.209286][ C0] preempt_schedule+0x60/0x78 [ 271.209295][ C0] __local_bh_enable_ip+0x20c/0x35c [ 271.209304][ C0] _raw_spin_unlock_bh+0x3c/0x4c [ 271.209314][ C0] wg_packet_encrypt_worker+0x25c/0x1290 [ 271.209325][ C0] process_scheduled_works+0x788/0x10b8 [ 271.209334][ C0] worker_thread+0x798/0xbd0 [ 271.209343][ C0] kthread+0x304/0x3d4 [ 271.209352][ C0] ret_from_fork+0x10/0x20