last executing test programs: 11m2.005831959s ago: executing program 3 (id=317): r0 = open$dir(&(0x7f0000000280)='./file0\x00', 0x88000, 0x4eb20e5605e96b26) mkdirat(r0, &(0x7f00000002c0)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = fsopen(&(0x7f0000000180)='virtiofs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000), 0x0) flock(r2, 0x2) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$XFS_IOC_SWAPEXT(r3, 0xc0c0586d, &(0x7f0000000180)={0x0, r2, r2, 0x8, 0xcb, '\x00', {0xa1b0, 0xf, 0xffff, 0x4, 0x8, 0x9, 0xffff, 0x4, {0x9, 0x6}, {0x490, 0x1}, {0x1ff, 0x7}, 0xc, 0x460d, 0xfffffff9, 0x7, 0x1, 0xed0, 0x6, 0x8, 0x764, 0x3, '\x00', 0x3, 0x4, 0x0, 0x3}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x80) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) syz_open_dev$tty20(0xc, 0x4, 0x0) 11m1.49692534s ago: executing program 3 (id=321): r0 = epoll_create(0xff) r1 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa0000000, 0x1b54c8}) 10m51.104885611s ago: executing program 0 (id=329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8001}, {0xffff, 0xffff}, {0xb, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newtclass={0x38, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x8001}, {0x0, 0x8001}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3e8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x8001}, {0xfff4, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x4}}]}}]}, 0x40}}, 0x0) 10m49.046529797s ago: executing program 3 (id=333): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x218, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0xffe1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1ec, 0x2, [@TCA_BPF_ACT={0x1e8, 0x1, [@m_bpf={0x140, 0x11, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x2, 0xb0, 0x7, 0x1ff}, {0x6, 0x4, 0x0, 0x8}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0xd1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821e712b03d552c87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0xa4, 0x5, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x7, 'raw\x00', 0x7, 0x100}}]}, {0x4d, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeab"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x218}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 10m46.12289692s ago: executing program 3 (id=337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}}, 0x0) 10m46.028902668s ago: executing program 0 (id=338): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x62, 0x33, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x66, 0x36, 0x5, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x42}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x8b, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x31, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000800)={'fscrypt:', @auto=[0x39, 0x34, 0x31, 0x38, 0x30, 0x30, 0x66, 0x65, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3a}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x8, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(0x0, &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x31, 0x34]}, &(0x7f0000001880)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233c45566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3d}, 0x48, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$link(0x8, r0, r1) 10m45.933230448s ago: executing program 0 (id=339): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@loopback, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x2, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x8004850) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 10m45.792656347s ago: executing program 0 (id=340): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff720200000000000018110000", @ANYRES32=r0, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bfa00000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m45.691431261s ago: executing program 0 (id=341): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000e40)={&(0x7f0000000040), 0xc, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0x15}, 0x8000044) 10m45.690047377s ago: executing program 3 (id=342): socket$inet_tcp(0x2, 0x1, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r5, &(0x7f0000000440)}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x9, 0x5c0) 10m40.843831634s ago: executing program 3 (id=348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 10m40.717094535s ago: executing program 0 (id=349): unshare(0x60000600) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) 10m24.543575926s ago: executing program 32 (id=348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 10m24.01464898s ago: executing program 33 (id=349): unshare(0x60000600) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) 40.696618424s ago: executing program 5 (id=3419): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x3c, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0xc, 0x5, 0x0, 0x0, @u64=0xffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000003f000500010000000000000001010000000000000f0001006f76732d73797374656d00000800020000000000080009"], 0x38}}, 0x0) 40.642283978s ago: executing program 5 (id=3420): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 40.444526557s ago: executing program 5 (id=3422): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'wlan0\x00', 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/ieee80211/phy0/netdev:wlan0/flags\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/ieee80211/phy0/reset\x00', 0x1, 0x0) write(r1, &(0x7f0000000300), 0x0) 12.632209678s ago: executing program 2 (id=3490): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x2602, 0x25) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f0000000180), 0x0, 0x8000000000005}]) 10.772031886s ago: executing program 2 (id=3496): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x80000}, 0xc) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0xc0000000}, 0xc) 8.827521624s ago: executing program 6 (id=3503): openat$kvm(0xffffffffffffff9c, 0x0, 0xa02, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffff7fa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf0c, &(0x7f0000000400)={0x0, 0x595d, 0x8, 0x1, 0x1000051}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3208}}) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000040)=0xd) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0xa) fchdir(r6) r7 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) ftruncate(r7, 0x2007ffb) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r9, 0x402, 0x8000003d) fcntl$setsig(r9, 0xa, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 8.337963882s ago: executing program 2 (id=3506): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20129, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x58}, 0x4000010) write(r0, &(0x7f0000000700)="ffffffffffffc011223344554305000f", 0x10) 7.761430215s ago: executing program 2 (id=3508): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) 7.685036106s ago: executing program 4 (id=3509): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "c911cc5408bb328b", "0afe3b56d7f233b1f92e86190f5e8f9dd2562cd7b912c308e32d490587af5ff5", "1c775060", "cce7cfd682baf04c"}, 0x38) shutdown(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0xc0}], 0x1, 0x0, 0x0, 0x0) 7.616581499s ago: executing program 2 (id=3510): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7aaf804d}, {{0x0, 0x0, 0x0}, 0x81}], 0x3, 0x12002, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.921625458s ago: executing program 2 (id=3512): syz_usb_connect(0x5, 0x24, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000240)="ff44000fc75823660f38829d00500f01c3f235000066b8180000000f23d80f21f86635000000400f23f866b9270b000066b840a8000066ba000000000f30672ac466b8019d66710f23d00f21f866353000000a0f23f8660f624d31", 0x5b}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16, @ANYBLOB="010000040000000000000100060001000200000008000300ac1414"], 0x38}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xb, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7d, 0x76, 0x1, 0x0, 0x0, 0x8, 0x14, 0xc, 0x8, 0x0, '\x00', 0x0, 0x7f}) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) write$proc_mixer(r3, &(0x7f0000000840)=ANY=[@ANYBLOB='DIGITAL1\nIGAIN \'Synth Capture Switch\' 00000000000000000000\nSYNTH \'Synth Capture'], 0x9d) dup3(r4, r3, 0x0) r5 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r5, 0x0, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x86, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000900)=ANY=[], 0x0) unshare(0x42040400) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.481253723s ago: executing program 4 (id=3513): r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x10, 0x80000) recvfrom$phonet(r0, &(0x7f00000002c0)=""/121, 0x79, 0xc0002141, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @timestamp, @timestamp, @window={0x3, 0x6, 0xff81}, @window={0x3, 0x6, 0x6}, @timestamp, @sack_perm, @mss={0x2, 0xffff7fff}], 0x8) sendto$inet(r1, &(0x7f0000000000)="b8", 0x1, 0x2400a044, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000120001030000000000000000020d0000000000000000000000000000000000000000000000000000060000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000ffffffff000000001400010007101000"], 0x60}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) 6.42987422s ago: executing program 1 (id=3514): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$can_raw(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@canfd={{0x2, 0x0, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "dbbc2beb785db756e3bd96e22c3dd5e2625456b8b7f5e490237916ded628a60d582adcbf191d71b37297b0ddf86c8d70d53ea92f7eccbd8b8bcd3e75a34ae865"}, 0x48}, 0x1, 0x0, 0x0, 0x44040}, 0x0) close(r0) 6.18396682s ago: executing program 4 (id=3515): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000003c00128009000100766c616e000000002c00028006000100010000000600050088a80000100004800c0001000500000001000000860c05008100000008000500", @ANYRES32=r4], 0x64}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="1c0012800b00010062726964676500000c000280050007000600"], 0x44}, 0x1, 0x0, 0x0, 0x2000c051}, 0x40000) 5.554958305s ago: executing program 1 (id=3516): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a1c000000000a0104000000000000000002000000080001006e61740040000000220a0104"], 0x108}}, 0x0) 5.206266687s ago: executing program 6 (id=3517): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20129, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x58}, 0x4000010) write(r0, &(0x7f0000000700)="ffffffffffffc011223344554305000f", 0x10) 4.941072536s ago: executing program 1 (id=3518): inotify_init1(0x800) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000240)=r1) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@mcast2, 0x0, 0x1, 0x4e22, 0xe, 0xa}, {0xfffffffffffffffc, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0xb5, 0x1}, 0x800, 0x0, 0x1, 0x1}, {{@in=@remote, 0x4d6, 0x32}, 0x2, @in=@multicast1, 0x0, 0x2, 0x3}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x3ff}}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x3506, 0x0, 0x3, 0xd, 0x80000, 0x7, 0x3}}, 0xe4) close(0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='1', 0x1) 4.202879063s ago: executing program 4 (id=3519): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) 4.108480684s ago: executing program 4 (id=3520): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000b000000000000aaaaaaaa"], 0x52) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="852000000200000018"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.860113102s ago: executing program 1 (id=3521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffdf, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24000084) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 3.777672461s ago: executing program 6 (id=3522): socket$nl_generic(0x10, 0x3, 0x10) msgsnd(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x8, 0x800) msgsnd(0x0, &(0x7f00000001c0)={0x1}, 0x8, 0x0) r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000240)={0x0, 0x7, 0x11, "aec4511db2ef242bb5e9a20e4c7bcf37ec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.321460129s ago: executing program 4 (id=3523): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002b40)={0x2020}, 0x2020) 3.139279076s ago: executing program 5 (id=3424): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa0000000000000000000000004e220005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000fffffffffffffffffcffffffffffffff00000000000000000900000000000000000a000000000000000000000080400000000000000000080000000000000000000100000000000044000500fc020000000000000000000000000000000004d36c00000002000000ff0100000000000000000000000000010735000001"], 0xfc}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="bc00000021000100fffffffffefffffffe8000000000000000000000000000aa00000000000000000000000000000001fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000100050001100fc020000000000000000000000000000ff010000000000000000000000000001ff0200"/59], 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 3.035313995s ago: executing program 6 (id=3524): accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x10, 0x80000) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @timestamp, @timestamp, @window={0x3, 0x6, 0xff81}, @window={0x3, 0x6, 0x6}, @timestamp, @sack_perm, @mss={0x2, 0xffff7fff}], 0x8) sendto$inet(r1, &(0x7f0000000000)="b8", 0x1, 0x2400a044, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000120001030000000000000000020d0000000000000000000000000000000000000000000000000000060000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000ffffffff000000001400010007101000"], 0x60}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) 3.005864047s ago: executing program 1 (id=3525): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x42, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) 2.891532225s ago: executing program 6 (id=3526): r0 = io_uring_setup(0x180d, &(0x7f0000000140)={0x0, 0x4178, 0x400, 0x8001002, 0x3d7}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) r3 = dup(r1) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, 0x0, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x20002040) sendto$inet6(r4, 0x0, 0x0, 0x8000, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}], 0x1, 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000640)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x100}}, 0x18) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x5}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) close_range(r0, 0xffffffffffffffff, 0x0) 2.821607895s ago: executing program 5 (id=3527): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a1c000000000a0104000000000000000002000000080001006e61740040000000220a0104"], 0x108}}, 0x0) 2.780257488s ago: executing program 6 (id=3528): mkdirat(0xffffffffffffff9c, 0x0, 0x1df) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000001040)=0xdc, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x8100, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x18015) r1 = socket$inet6(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/block/sda/device/scsi_disk/0:0:0:0/max_write_same_blocks\x00', 0x2, 0x0) write$tun(r2, &(0x7f0000000180)=ANY=[], 0x8) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f", 0x1a, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) 2.722710262s ago: executing program 1 (id=3529): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040), 0x6, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0), 0x6, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[], 0x44}}, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x2, 0x0, 0x1, {0x7, 0x1ff, 0xfffffffe}}) 0s ago: executing program 5 (id=3530): inotify_init1(0x800) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000240)=r1) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@mcast2, 0x0, 0x1, 0x4e22, 0xe, 0xa}, {0xfffffffffffffffc, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0xb5, 0x1}, 0x800, 0x0, 0x1, 0x1}, {{@in=@remote, 0x4d6, 0x32}, 0x2, @in=@multicast1, 0x0, 0x2, 0x3}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x3ff}}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x3506, 0x0, 0x3, 0xd, 0x80000, 0x7, 0x3}}, 0xe4) close(0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='1', 0x1) kernel console output (not intermixed with test programs): port 6081 - 0 [ 602.067443][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 602.067543][ T57] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.067573][ T57] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.067623][ T57] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.067649][ T57] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.067685][ T57] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.067711][ T57] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.186532][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 602.256606][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2240'. [ 602.295942][T12495] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2241'. [ 602.319916][T12494] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 602.348202][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 602.472052][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 602.588156][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 602.707846][ T1738] bond3: (slave gretap1): failed to get link speed/duplex [ 602.826863][ T1738] bond3: (slave gretap1): failed to get link speed/duplex [ 602.916691][T12522] netlink: 'syz.2.2253': attribute type 11 has an invalid length. [ 602.948792][ T1738] bond3: (slave gretap1): failed to get link speed/duplex [ 603.011275][T12518] tipc: Enabling of bearer rejected, failed to enable media [ 603.401681][ T5839] net_ratelimit: 1 callbacks suppressed [ 603.401702][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 603.531251][ T1175] bond3: (slave gretap1): failed to get link speed/duplex [ 603.663156][ T1738] bond3: (slave gretap1): failed to get link speed/duplex [ 603.779818][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 603.911155][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 603.994783][T12556] netlink: 'syz.2.2264': attribute type 11 has an invalid length. [ 604.028031][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 604.440333][ T1175] bond3: (slave gretap1): failed to get link speed/duplex [ 604.480667][T12573] tipc: Enabling of bearer rejected, failed to enable media [ 604.560886][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 604.632561][T12587] __nla_validate_parse: 12 callbacks suppressed [ 604.632586][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2277'. [ 604.698036][T12587] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 604.754229][ T1738] bond3: (slave gretap1): failed to get link speed/duplex [ 604.877778][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 605.027590][T12593] netlink: 'syz.1.2280': attribute type 11 has an invalid length. [ 605.027612][T12593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2280'. [ 605.403937][T12607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2287'. [ 605.403969][T12607] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2287'. [ 605.540769][T12607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2287'. [ 605.540810][T12607] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2287'. [ 605.824081][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2292'. [ 605.922386][T12623] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 605.922933][T12624] tipc: Enabling of bearer rejected, failed to enable media [ 605.950359][T12628] netlink: 'syz.4.2294': attribute type 11 has an invalid length. [ 605.950382][T12628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2294'. [ 606.255514][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2300'. [ 606.255538][T12641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2300'. [ 606.305224][T12634] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 606.635165][T12655] netlink: 'syz.4.2306': attribute type 11 has an invalid length. [ 607.270681][T12685] tipc: Enabling of bearer rejected, failed to enable media [ 607.564419][T12694] tipc: Enabled bearer , priority 0 [ 607.565469][T12694] syzkaller0: entered promiscuous mode [ 607.565495][T12694] syzkaller0: entered allmulticast mode [ 607.719355][T12699] netlink: 'syz.5.2318': attribute type 11 has an invalid length. [ 607.869188][T12698] tipc: Resetting bearer [ 607.974727][T12691] tipc: Resetting bearer [ 608.191029][T12691] tipc: Disabling bearer [ 608.850909][ T57] net_ratelimit: 17 callbacks suppressed [ 608.850932][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 608.984063][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 609.100746][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 609.120953][T12743] netlink: 'syz.1.2332': attribute type 11 has an invalid length. [ 609.220773][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 609.302515][T12746] tipc: Enabling of bearer rejected, failed to enable media [ 609.338605][ T7283] bond3: (slave gretap1): failed to get link speed/duplex [ 609.458598][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 609.598596][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 609.717843][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 609.838427][ T7283] bond3: (slave gretap1): failed to get link speed/duplex [ 609.958572][ T7283] bond3: (slave gretap1): failed to get link speed/duplex [ 610.996486][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880536bc000: rx timeout, send abort [ 610.999507][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880536bf400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 611.541424][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880536bc000: abort rx timeout. Force session deactivation [ 611.728262][T12781] __nla_validate_parse: 17 callbacks suppressed [ 611.728284][T12781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2342'. [ 611.728300][T12781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2342'. [ 611.730994][T12781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2342'. [ 611.731018][T12781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2342'. [ 611.847141][T12786] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2345'. [ 611.900392][T12784] netlink: 'syz.5.2344': attribute type 11 has an invalid length. [ 611.900414][T12784] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2344'. [ 612.448170][T12795] tipc: Enabled bearer , priority 0 [ 615.791298][T12795] tipc: Disabling bearer [ 616.109943][T12831] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2359'. [ 616.590851][ T1175] net_ratelimit: 24 callbacks suppressed [ 616.590874][ T1175] bond3: (slave gretap1): failed to get link speed/duplex [ 616.708236][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 616.827982][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 616.870224][T12843] sctp: [Deprecated]: syz.2.2361 (pid 12843) Use of int in maxseg socket option. [ 616.870224][T12843] Use struct sctp_assoc_value instead [ 616.890339][T12843] netlink: 'syz.2.2361': attribute type 39 has an invalid length. [ 616.947120][ T1175] bond3: (slave gretap1): failed to get link speed/duplex [ 617.019183][T12844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2361'. [ 617.066583][ T7283] bond3: (slave gretap1): failed to get link speed/duplex [ 617.187617][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 617.306303][ T1175] bond3: (slave gretap1): failed to get link speed/duplex [ 617.426594][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 617.547136][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 617.663380][ T7283] bond3: (slave gretap1): failed to get link speed/duplex [ 618.642351][T12859] tipc: Enabled bearer , priority 0 [ 618.803304][T12862] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 618.898527][T12866] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2371'. [ 623.297799][T10323] tipc: Node number set to 2201452505 [ 623.451569][T12859] tipc: Disabling bearer [ 623.681740][T12877] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.681783][T12877] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.839594][ T7283] net_ratelimit: 13 callbacks suppressed [ 623.839613][ T7283] bond3: (slave gretap1): failed to get link speed/duplex [ 624.081745][T12909] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2383'. [ 624.553880][T12877] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 624.553909][T12877] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.641606][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 624.650646][T12926] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2387'. [ 624.764146][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 624.848409][T12933] netlink: 'syz.2.2390': attribute type 32 has an invalid length. [ 624.848433][T12933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2390'. [ 628.134878][T12877] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.134918][T12877] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.185811][T12933] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 628.307165][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 628.451046][T12877] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.451085][T12877] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.555958][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 628.673074][ T1738] bond3: (slave gretap1): failed to get link speed/duplex [ 628.792470][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 628.844523][T12988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2402'. [ 628.845720][T12988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2402'. [ 628.911605][ T1175] bond3: (slave gretap1): failed to get link speed/duplex [ 629.049242][T12995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2404'. [ 629.049266][T12995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2404'. [ 629.155616][ T1738] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.155652][ T1738] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.163714][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 629.431887][ T1738] bond3: (slave gretap1): failed to get link speed/duplex [ 629.443853][ T1738] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.443912][ T1738] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.756880][ T43] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.756928][ T43] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.756975][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 629.758442][ T43] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.758473][ T43] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.878615][ T1738] bond3: (slave gretap1): failed to get link speed/duplex [ 629.886012][T13007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2408'. [ 629.950628][T13007] dummy0: entered promiscuous mode [ 630.031136][T13007] macvlan3: entered promiscuous mode [ 630.074205][T13007] dummy0: left promiscuous mode [ 630.541866][T13030] sctp: [Deprecated]: syz.5.2414 (pid 13030) Use of int in maxseg socket option. [ 630.541866][T13030] Use struct sctp_assoc_value instead [ 630.546191][T13030] netlink: 'syz.5.2414': attribute type 39 has an invalid length. [ 630.687796][T13032] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2414'. [ 632.331107][T13034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2415'. [ 632.331126][T13034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2415'. [ 632.368777][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 632.490594][ T1175] bond3: (slave gretap1): failed to get link speed/duplex [ 632.716725][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 636.296304][T13068] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2428'. [ 636.311991][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 636.553868][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 636.672950][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 636.866511][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 636.985689][ T7283] bond3: (slave gretap1): failed to get link speed/duplex [ 637.097825][T13101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2442'. [ 637.106019][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 637.224027][ T7283] bond3: (slave gretap1): failed to get link speed/duplex [ 637.343505][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 637.462647][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 637.581939][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 640.331636][T13110] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2446'. [ 641.481239][T13142] syzkaller0: entered promiscuous mode [ 641.481261][T13142] syzkaller0: entered allmulticast mode [ 641.526812][T13144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2462'. [ 641.526838][T13144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2462'. [ 642.068580][ T57] net_ratelimit: 32 callbacks suppressed [ 642.068603][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 642.192352][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 642.310353][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 642.412491][T13178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2477'. [ 642.412516][T13178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2477'. [ 642.427668][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 642.546424][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 642.667472][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 643.137887][ T7283] bond3: (slave gretap1): failed to get link speed/duplex [ 643.249964][ T7283] bond3: (slave gretap1): failed to get link speed/duplex [ 643.356411][T13209] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2491'. [ 643.356437][T13209] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2491'. [ 643.390735][ T7282] bond3: (slave gretap1): failed to get link speed/duplex [ 643.510060][ T7282] bond3: (slave gretap1): failed to get link speed/duplex [ 643.576516][T13216] ip6gretap0: entered promiscuous mode [ 643.578062][T13216] vlan2: entered promiscuous mode [ 644.272961][T13227] netlink: 'syz.4.2499': attribute type 6 has an invalid length. [ 644.351910][T13231] netlink: 'syz.2.2500': attribute type 1 has an invalid length. [ 644.553508][T13239] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2504'. [ 644.553541][T13239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2504'. [ 644.556571][T13231] bond3: entered promiscuous mode [ 644.557019][T13231] 8021q: adding VLAN 0 to HW filter on device bond3 [ 644.696450][T13231] bond3: (slave bridge2): making interface the new active one [ 644.696478][T13231] bridge2: entered promiscuous mode [ 644.698791][T13231] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 645.305450][T13264] netlink: 'syz.2.2511': attribute type 32 has an invalid length. [ 645.305478][T13264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2511'. [ 645.849024][T13277] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2518'. [ 645.849057][T13277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2518'. [ 646.021318][T13281] netlink: 'syz.1.2520': attribute type 1 has an invalid length. [ 646.124181][T13281] bond6: entered promiscuous mode [ 646.126048][T13281] 8021q: adding VLAN 0 to HW filter on device bond6 [ 646.392419][T13284] bond6: (slave bridge3): making interface the new active one [ 646.392445][T13284] bridge3: entered promiscuous mode [ 646.401478][T13284] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 647.065566][T13303] bridge_slave_0: left allmulticast mode [ 647.065601][T13303] bridge_slave_0: left promiscuous mode [ 647.065953][T13303] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.143683][T13314] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2531'. [ 647.258964][T13303] bridge_slave_1: left allmulticast mode [ 647.259001][T13303] bridge_slave_1: left promiscuous mode [ 647.259241][T13303] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.478118][T13303] bond0: (slave bond_slave_0): Releasing backup interface [ 647.640925][T13303] team0: Port device team_slave_0 removed [ 647.679387][T13303] team0: Port device team_slave_1 removed [ 647.681944][T13303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 647.681963][T13303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.705608][T13303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 647.705638][T13303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.769870][T13303] net_ratelimit: 15 callbacks suppressed [ 647.769888][T13303] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 647.854487][T13307] team0: Port device xfrm0 added [ 648.340126][T13324] ip6gretap0: entered promiscuous mode [ 648.340578][T13324] vlan2: entered promiscuous mode [ 648.549875][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 648.673885][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 648.788102][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 649.230121][T13350] __nla_validate_parse: 1 callbacks suppressed [ 649.230145][T13350] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2546'. [ 649.308805][ T1175] bond3: (slave gretap1): failed to get link speed/duplex [ 649.386172][T13354] netlink: 'syz.2.2547': attribute type 6 has an invalid length. [ 649.432842][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 649.676664][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 649.806775][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 649.937761][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 650.056663][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 650.280476][T13381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2559'. [ 651.061314][T13399] netlink: 'syz.6.2567': attribute type 1 has an invalid length. [ 651.153475][T13399] bond1: entered promiscuous mode [ 651.153921][T13399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 651.558473][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 651.612876][ T5608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 651.626859][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 651.646018][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 651.657174][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 652.163988][T13423] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2574'. [ 652.205491][T13406] bond1: (slave bridge1): making interface the new active one [ 652.205516][T13406] bridge1: entered promiscuous mode [ 652.207232][T13406] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 653.035902][T13451] Bluetooth: MGMT ver 1.23 [ 653.181491][T13453] netlink: 'syz.2.2585': attribute type 1 has an invalid length. [ 653.990205][ T5596] Bluetooth: hci0: command tx timeout [ 654.109457][T13453] bond4: entered promiscuous mode [ 654.109960][T13453] 8021q: adding VLAN 0 to HW filter on device bond4 [ 654.250001][T13456] bond4: (slave bridge3): making interface the new active one [ 654.250429][T13456] bridge3: entered promiscuous mode [ 654.252013][T13456] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 654.373574][ T1738] net_ratelimit: 12 callbacks suppressed [ 654.373597][ T1738] bond3: (slave gretap1): failed to get link speed/duplex [ 654.595405][T13463] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2586'. [ 654.824620][ T7283] bond3: (slave gretap1): failed to get link speed/duplex [ 655.094509][T13480] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2591'. [ 655.321657][T13405] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.321970][T13405] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.322141][T13405] bridge_slave_0: entered allmulticast mode [ 655.349463][T13405] bridge_slave_0: entered promiscuous mode [ 655.372729][T13405] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.372891][T13405] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.373080][T13405] bridge_slave_1: entered allmulticast mode [ 655.397770][T13405] bridge_slave_1: entered promiscuous mode [ 655.461015][T13405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.474408][T13405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.524556][T13405] team0: Port device team_slave_0 added [ 655.528105][T13405] team0: Port device team_slave_1 added [ 655.580138][T13486] sctp: [Deprecated]: syz.5.2594 (pid 13486) Use of int in maxseg socket option. [ 655.580138][T13486] Use struct sctp_assoc_value instead [ 655.582869][T13405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.582884][T13405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.582911][T13405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.647538][T13405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.647555][T13405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.647584][T13405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.741449][T13486] netlink: 'syz.5.2594': attribute type 39 has an invalid length. [ 655.787737][T13405] hsr_slave_0: entered promiscuous mode [ 655.811133][T13405] hsr_slave_1: entered promiscuous mode [ 655.812053][T13405] debugfs: 'hsr0' already exists in 'hsr' [ 655.812078][T13405] Cannot create hsr debugfs directory [ 655.857893][T13487] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2594'. [ 656.241268][ T5596] Bluetooth: hci0: command tx timeout [ 656.491364][T13499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2600'. [ 656.886913][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 657.002955][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 657.203779][T13515] sctp: [Deprecated]: syz.2.2607 (pid 13515) Use of int in maxseg socket option. [ 657.203779][T13515] Use struct sctp_assoc_value instead [ 657.207871][T13515] netlink: 'syz.2.2607': attribute type 39 has an invalid length. [ 657.375125][T13522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2607'. [ 657.694903][T13405] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.694931][T13405] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.807502][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 657.926348][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 657.994464][T13527] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2612'. [ 658.196496][T13405] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.196540][T13405] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.260806][ T1738] bond3: (slave gretap1): failed to get link speed/duplex [ 658.381463][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 658.491437][ T5608] Bluetooth: hci0: command tx timeout [ 658.571627][T13550] sctp: [Deprecated]: syz.5.2622 (pid 13550) Use of int in maxseg socket option. [ 658.571627][T13550] Use struct sctp_assoc_value instead [ 658.577159][T13550] netlink: 'syz.5.2622': attribute type 39 has an invalid length. [ 658.710857][T13405] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.710906][T13405] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.730631][T13556] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2622'. [ 659.536625][T13569] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2629'. [ 659.652381][T13405] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 659.652409][T13405] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.738726][T13562] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2626'. [ 659.755862][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 659.875740][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 659.994426][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 660.113384][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 660.244464][ T1738] bond3: (slave gretap1): failed to get link speed/duplex [ 660.569081][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 660.689593][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 660.742147][ T5608] Bluetooth: hci0: command tx timeout [ 660.983318][T13591] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2639'. [ 661.541261][T13603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2641'. [ 661.782649][ T1738] bond3: (slave gretap1): failed to get link speed/duplex [ 661.802118][T13405] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 661.840244][T13405] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 661.842892][T13405] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 661.909729][T13405] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 661.910985][T13405] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 661.978593][T13405] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 662.013669][T13405] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 662.050746][T13405] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 662.324752][ T7283] bond3: (slave gretap1): failed to get link speed/duplex [ 662.551925][ T1738] bond3: (slave gretap1): failed to get link speed/duplex [ 662.584473][T13405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.622710][T13405] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.679983][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.680105][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.764555][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.764736][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.957943][T13639] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2656'. [ 663.267364][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 664.103902][T13668] netlink: 'syz.5.2666': attribute type 1 has an invalid length. [ 664.158695][T13668] bond1: entered promiscuous mode [ 664.159434][T13668] 8021q: adding VLAN 0 to HW filter on device bond1 [ 664.214294][T13668] bond1: (slave bridge1): making interface the new active one [ 664.214321][T13668] bridge1: entered promiscuous mode [ 664.215838][T13668] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 664.407169][T13678] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2669'. [ 664.435011][T13405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.453050][ T36] kauditd_printk_skb: 137 callbacks suppressed [ 664.453132][ T36] audit: type=1326 audit(1790785151.674:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13673 comm="syz.6.2668" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f90d744e159 code=0x0 [ 664.561230][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 664.792171][T13698] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2675'. [ 665.002086][T13405] veth0_vlan: entered promiscuous mode [ 665.031863][T13405] veth1_vlan: entered promiscuous mode [ 665.221756][T13405] veth0_macvtap: entered promiscuous mode [ 665.232884][T13405] veth1_macvtap: entered promiscuous mode [ 665.290483][T13405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.342585][T13405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.501670][ T7283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.502883][ T1738] net_ratelimit: 14 callbacks suppressed [ 665.502899][ T1738] bond3: (slave gretap1): failed to get link speed/duplex [ 665.502928][ T1738] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.502991][ T1738] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.503026][ T1738] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.749690][T13715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2680'. [ 666.151364][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 666.432584][ T1175] bond3: (slave gretap1): failed to get link speed/duplex [ 666.559548][T13724] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2684'. [ 666.683144][ T5942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.683165][ T5942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.793173][ T7283] bond3: (slave gretap1): failed to get link speed/duplex [ 666.883825][T13739] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2690'. [ 666.912118][T13737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 666.942524][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.942545][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.952675][ T1175] bond3: (slave gretap1): failed to get link speed/duplex [ 667.072254][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 667.191414][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 667.297709][T13746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2693'. [ 667.604073][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 667.732534][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 667.885723][ T5596] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 667.928137][ T5596] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 667.931018][ T5596] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 667.932347][ T5596] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 667.969806][ T5596] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 668.009816][T13758] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2697'. [ 668.431883][T13775] Bluetooth: MGMT ver 1.23 [ 668.583084][T13784] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2708'. [ 669.109706][T13800] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2710'. [ 669.141931][T13782] ip6gretap0: entered promiscuous mode [ 669.142257][T13782] vlan2: entered promiscuous mode [ 669.805929][T13817] sctp: [Deprecated]: syz.6.2716 (pid 13817) Use of int in maxseg socket option. [ 669.805929][T13817] Use struct sctp_assoc_value instead [ 669.855335][T13817] netlink: 'syz.6.2716': attribute type 39 has an invalid length. [ 669.995591][T13826] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2716'. [ 670.282620][ T5608] Bluetooth: hci5: command tx timeout [ 670.324116][T13829] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2721'. [ 670.349187][T13831] ip6gretap0: entered promiscuous mode [ 670.374215][T13831] vlan2: entered promiscuous mode [ 670.660928][T13838] mmap: syz.5.2724 (13838) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 671.536736][ T5942] net_ratelimit: 11 callbacks suppressed [ 671.536777][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 671.636461][T13757] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.636688][T13757] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.637142][T13757] bridge_slave_0: entered allmulticast mode [ 671.639899][T13757] bridge_slave_0: entered promiscuous mode [ 671.644326][T13757] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.644551][T13757] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.645741][T13757] bridge_slave_1: entered allmulticast mode [ 671.652573][T13757] bridge_slave_1: entered promiscuous mode [ 671.679890][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 671.799198][T13757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.803234][T13757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.865007][T13757] team0: Port device team_slave_0 added [ 671.868727][T13757] team0: Port device team_slave_1 added [ 671.919811][T13757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.919827][T13757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.919855][T13757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.922103][T13757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.922117][T13757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.922145][T13757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.028034][T13865] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 672.028119][T13865] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 672.729794][T13757] hsr_slave_0: entered promiscuous mode [ 672.731091][T13757] hsr_slave_1: entered promiscuous mode [ 672.732073][T13757] debugfs: 'hsr0' already exists in 'hsr' [ 672.732095][T13757] Cannot create hsr debugfs directory [ 672.970619][ T5608] Bluetooth: hci5: command tx timeout [ 673.902096][T13896] syzkaller0: entered promiscuous mode [ 673.902123][T13896] syzkaller0: entered allmulticast mode [ 674.248715][T13915] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2746'. [ 674.816741][T13874] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 674.816770][T13874] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 675.224536][ T5596] Bluetooth: hci5: command tx timeout [ 675.311351][T13757] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.311391][T13757] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.482642][ T5596] Bluetooth: hci0: command 0x0c24 tx timeout [ 675.512669][ T5608] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 675.630783][T13940] sctp: [Deprecated]: syz.4.2750 (pid 13940) Use of int in maxseg socket option. [ 675.630783][T13940] Use struct sctp_assoc_value instead [ 675.632822][T13940] netlink: 'syz.4.2750': attribute type 39 has an invalid length. [ 676.488645][T13757] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 676.488682][T13757] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.114722][T13987] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2758'. [ 677.321227][T13990] netlink: 'syz.4.2759': attribute type 1 has an invalid length. [ 677.355504][T13757] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.355542][T13757] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.508055][ T5608] Bluetooth: hci5: command tx timeout [ 678.261267][T13874] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 678.261296][T13874] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 678.583515][T13874] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 678.583544][T13874] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 678.721584][T13757] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.740675][T13757] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.794085][T14018] FAULT_INJECTION: forcing a failure. [ 678.794085][T14018] name failslab, interval 1, probability 0, space 0, times 0 [ 678.794120][T14018] CPU: 0 UID: 0 PID: 14018 Comm: syz.4.2765 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 678.794144][T14018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 678.794157][T14018] Call Trace: [ 678.794166][T14018] [ 678.794175][T14018] dump_stack_lvl+0xe8/0x150 [ 678.794217][T14018] should_fail_ex+0x46b/0x600 [ 678.794260][T14018] should_failslab+0xa8/0x100 [ 678.794281][T14018] ? security_inode_alloc+0x39/0x310 [ 678.794348][T14018] kmem_cache_alloc_noprof+0x9e/0x690 [ 678.794379][T14018] ? security_inode_alloc+0x39/0x310 [ 678.794407][T14018] security_inode_alloc+0x39/0x310 [ 678.794431][T14018] inode_init_always_gfp+0x983/0xd40 [ 678.794459][T14018] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 678.794506][T14018] alloc_inode+0x82/0x1b0 [ 678.794529][T14018] new_inode+0x1f/0x170 [ 678.794555][T14018] __debugfs_create_file+0xb8/0x400 [ 678.794587][T14018] debugfs_create_file_full+0x3f/0x60 [ 678.794621][T14018] ref_tracker_dir_debugfs+0x19d/0x370 [ 678.794666][T14018] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 678.794738][T14018] preinit_net+0x1cf/0x780 [ 678.794876][T14018] copy_net_ns+0x2c8/0x780 [ 678.794910][T14018] create_new_namespaces+0x3f0/0x6b0 [ 678.794961][T14018] ? security_capable+0x7e/0x2c0 [ 678.794995][T14018] unshare_nsproxy_namespaces+0x149/0x190 [ 678.795043][T14018] ksys_unshare+0x5a7/0x950 [ 678.795093][T14018] ? __pfx_ksys_unshare+0x10/0x10 [ 678.795125][T14018] ? rcu_is_watching+0x16/0xb0 [ 678.795169][T14018] __x64_sys_unshare+0x38/0x50 [ 678.795203][T14018] do_syscall_64+0x166/0x520 [ 678.795229][T14018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.795251][T14018] ? clear_bhb_loop+0x70/0xc0 [ 678.795275][T14018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.795294][T14018] RIP: 0033:0x7f81cea1e159 [ 678.795315][T14018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.795334][T14018] RSP: 002b:00007f81ccc76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 678.795356][T14018] RAX: ffffffffffffffda RBX: 00007f81ceca5fa0 RCX: 00007f81cea1e159 [ 678.795372][T14018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 678.795386][T14018] RBP: 00007f81ceab506b R08: 0000000000000000 R09: 0000000000000000 [ 678.795401][T14018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.795414][T14018] R13: 00007f81ceca6038 R14: 00007f81ceca5fa0 R15: 00007ffe693c9bd8 [ 678.795447][T14018] [ 678.795629][T14018] debugfs: out of free dentries, can not create file 'net_refcnt@ffff8880390d8380' [ 679.635456][ T1098] bond3: (slave gretap1): failed to get link speed/duplex [ 679.895366][ T7282] vlan2: left promiscuous mode [ 679.895646][ T7282] bridge0: port 3(vlan2) entered disabled state [ 680.001750][ T7282] bridge_slave_1: left allmulticast mode [ 680.001775][ T7282] bridge_slave_1: left promiscuous mode [ 680.007946][ T7282] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.098314][ T5818] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 680.121044][ T7282] bridge_slave_0: left promiscuous mode [ 680.121199][ T7282] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.260815][ T5818] usb 6-1: Using ep0 maxpacket: 8 [ 680.261631][ T5818] usb 6-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 680.262868][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.262900][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.262916][ T5818] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 680.262946][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.268188][ T5818] usb 6-1: config 0 descriptor?? [ 681.154890][ T5818] sony 0003:054C:042F.0002: can't set operational mode: step 1 [ 681.155024][ T5818] sony 0003:054C:042F.0002: Failed to set controller into operational mode [ 681.237940][ T5818] sony 0003:054C:042F.0002: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.5-1/input0 [ 681.237977][ T5818] sony 0003:054C:042F.0002: failed to claim input [ 681.280422][ T5818] usb 6-1: USB disconnect, device number 2 [ 681.400961][T14038] fido_id[14038]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 681.704016][ T7282] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 681.803394][T14040] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2768'. [ 682.006265][ T7282] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 682.006313][ T7282] bridge2 (unregistering): left promiscuous mode [ 682.055059][T14048] netlink: 'syz.5.2772': attribute type 30 has an invalid length. [ 682.055080][T14048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2772'. [ 682.288301][ T7282] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 682.288334][ T7282] bridge3 (unregistering): left promiscuous mode [ 682.645851][ T7282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.711617][ T7282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.755668][ T7282] bond0 (unregistering): Released all slaves [ 682.763254][ T7282] bond1 (unregistering): Released all slaves [ 682.791615][ T7282] bond2 (unregistering): Released all slaves [ 682.814349][ T7282] bond3 (unregistering): Released all slaves [ 682.840211][ T7282] bond4 (unregistering): Released all slaves [ 683.012426][T14048] bond0: option arp_missed_max: invalid value (0) [ 683.012455][T14048] bond0: option arp_missed_max: allowed values 1 - 255 [ 683.433524][ T7282] tipc: Left network mode [ 683.435754][T13874] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 683.435785][T13874] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 683.453864][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 684.404309][T13874] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 684.404334][T13874] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 684.499075][ T998] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 684.670437][T14064] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2778'. [ 684.784331][ T998] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 684.789711][ T998] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 684.789738][ T998] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.789758][ T998] usb 6-1: config 0 has no interface number 0 [ 684.789802][ T998] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 684.789826][ T998] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 684.897676][ T998] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.897721][ T998] usb 6-1: Product: syz [ 684.897735][ T998] usb 6-1: Manufacturer: syz [ 684.897750][ T998] usb 6-1: SerialNumber: syz [ 684.951488][ T998] usb 6-1: config 0 descriptor?? [ 685.165585][ T7283] bond3: (slave gretap1): failed to get link speed/duplex [ 685.283102][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 685.668949][T13757] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 685.711041][T13757] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 685.786655][T13757] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 685.849659][T13757] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 685.861732][T13757] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 685.922590][T13757] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 685.925612][T13757] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 686.029717][T13757] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 686.035402][T14090] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2788'. [ 687.826369][T10323] usb 6-1: USB disconnect, device number 3 [ 688.038715][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 688.231128][T14122] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2798'. [ 689.132296][T13757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.186442][T13757] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.257883][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.261400][ T5840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.325208][T10323] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 690.535035][T10323] usb 6-1: Using ep0 maxpacket: 32 [ 690.535896][T10323] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 690.537519][T10323] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.537570][T10323] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 690.537613][T10323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.619712][T10323] usb 6-1: config 0 descriptor?? [ 690.644673][T10323] hub 6-1:0.0: bad descriptor, ignoring hub [ 690.644712][T10323] hub 6-1:0.0: probe with driver hub failed with error -5 [ 690.648927][T10323] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 690.706862][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.715501][ T5840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.903542][ T7282] hsr_slave_0: left promiscuous mode [ 690.957685][ T7282] hsr_slave_1: left promiscuous mode [ 690.980860][T10323] usb 6-1: USB disconnect, device number 4 [ 691.263543][ T7282] veth1_macvtap: left promiscuous mode [ 691.263666][ T7282] veth0_macvtap: left promiscuous mode [ 691.289038][ T7282] veth1_vlan: left promiscuous mode [ 691.289174][ T7282] veth0_vlan: left promiscuous mode [ 693.349289][ T7282] team0 (unregistering): Port device team_slave_1 removed [ 693.407672][ T7282] team0 (unregistering): Port device team_slave_0 removed [ 694.035598][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 694.108827][T14203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.208866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 694.230533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 694.241382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 694.252203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 694.263048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 694.273887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 694.284724][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 694.295566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 694.306396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 694.317233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 694.377527][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 694.513840][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 694.631667][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 694.758803][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 696.955871][ T6223] bond3: (slave gretap1): failed to get link speed/duplex [ 698.003342][ T1738] bond3: (slave gretap1): failed to get link speed/duplex [ 698.305754][ T1738] bond3: (slave gretap1): failed to get link speed/duplex [ 698.428228][ T6223] bond3: (slave gretap1): failed to get link speed/duplex [ 698.607283][ T7282] IPVS: stop unused estimator thread 0... [ 698.869238][T10323] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 699.032640][T10323] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 699.034204][T10323] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.067991][T10323] usb 7-1: config 0 descriptor?? [ 699.073979][T13757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.081630][ T5818] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 699.123213][T10323] cp210x 7-1:0.0: cp210x converter detected [ 699.234142][T14245] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2843'. [ 699.296660][ T5818] usb 5-1: Using ep0 maxpacket: 16 [ 699.298387][ T5818] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 699.302039][ T5818] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.302088][ T5818] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 699.347125][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.347155][ T5818] usb 5-1: Product: syz [ 699.347171][ T5818] usb 5-1: Manufacturer: syz [ 699.347187][ T5818] usb 5-1: SerialNumber: syz [ 699.397536][T10323] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 699.397612][T10323] cp210x 7-1:0.0: querying part number failed [ 699.455572][T10323] usb 7-1: cp210x converter now attached to ttyUSB0 [ 699.478858][ T7282] bridge_slave_1: left allmulticast mode [ 699.478894][ T7282] bridge_slave_1: left promiscuous mode [ 699.479165][ T7282] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.642243][T14239] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 699.664934][ T7282] bridge_slave_0: left allmulticast mode [ 699.679938][ T7282] bridge_slave_0: left promiscuous mode [ 699.680203][ T7282] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.733363][T14254] net_ratelimit: 6 callbacks suppressed [ 699.733377][T14254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 699.883988][ T5818] cdc_ncm 5-1:1.0: bind() failure [ 699.935969][ T5818] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 699.950929][ T5818] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 699.969022][ T5818] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 700.006278][ T5818] usb 5-1: USB disconnect, device number 4 [ 701.344592][T14269] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2849'. [ 701.556997][ T10] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 701.731355][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 701.732740][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.738795][ T10] usb 2-1: config 0 descriptor?? [ 701.766208][ T10] cp210x 2-1:0.0: cp210x converter detected [ 701.980314][ T7282] bond1 (unregistering): (slave gretap1): Releasing active interface [ 702.196990][ T10] usb 2-1: cp210x converter now attached to ttyUSB1 [ 702.411993][ T998] usb 2-1: USB disconnect, device number 8 [ 702.473706][ T998] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 702.610173][ T7282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.690035][ T998] cp210x 2-1:0.0: device disconnected [ 702.715450][ T7282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.728594][ T5966] usb 7-1: USB disconnect, device number 3 [ 702.762096][ T7282] bond0 (unregistering): Released all slaves [ 702.795240][ T5966] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 702.797996][ T5966] cp210x 7-1:0.0: device disconnected [ 702.891741][ T7282] bond1 (unregistering): Released all slaves [ 703.071417][ T7282] ovs-system: left promiscuous mode [ 703.257233][T13757] veth0_vlan: entered promiscuous mode [ 703.257936][T14281] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2854'. [ 703.292296][T13757] veth1_vlan: entered promiscuous mode [ 703.324799][ T69] bond3: (slave gretap1): failed to get link speed/duplex [ 703.461478][T13757] veth0_macvtap: entered promiscuous mode [ 703.493105][T13757] veth1_macvtap: entered promiscuous mode [ 703.579048][T13757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.137467][ T7282] tipc: Left network mode [ 704.140778][T13757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.651618][ T7283] bond3: (slave gretap1): failed to get link speed/duplex [ 704.651666][ T7283] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.652101][ T7283] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.652542][ T7283] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.699458][T14309] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2864'. [ 705.028311][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.028360][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 705.164460][ T5840] bond3: (slave gretap1): failed to get link speed/duplex [ 705.844483][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.844505][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.861339][ T7282] rxrpc: Call ffff88805c36b480 still in use (1,Complete,181d,0)! [ 705.935465][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 706.025414][ T7283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.025438][ T7283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.060454][ T1098] bond3: (slave gretap1): failed to get link speed/duplex [ 706.198417][ T6223] bond3: (slave gretap1): failed to get link speed/duplex [ 706.456115][ T6223] bond3: (slave gretap1): failed to get link speed/duplex [ 706.493108][T14349] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2878'. [ 706.627694][ T5840] bond3: (slave gretap1): failed to get link speed/duplex [ 706.737718][ T1738] bond3: (slave gretap1): failed to get link speed/duplex [ 706.859391][ T7283] bond3: (slave gretap1): failed to get link speed/duplex [ 706.977251][ T1098] bond3: (slave gretap1): failed to get link speed/duplex [ 707.096178][ T5840] bond3: (slave gretap1): failed to get link speed/duplex [ 708.576089][ T5596] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 708.621548][ T5596] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 708.631376][ T5596] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 708.645841][ T5596] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 708.646781][ T5596] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 709.201848][T14382] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2891'. [ 710.630897][ T6223] net_ratelimit: 15 callbacks suppressed [ 710.630919][ T6223] bond3: (slave gretap1): failed to get link speed/duplex [ 711.116083][ T5608] Bluetooth: hci4: command tx timeout [ 711.289618][ T5840] bond3: (slave gretap1): failed to get link speed/duplex [ 711.289866][T10323] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 711.419328][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 711.462671][T10323] usb 7-1: Using ep0 maxpacket: 16 [ 711.463534][T10323] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 711.467795][T10323] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.467858][T10323] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 711.473080][T10323] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.473108][T10323] usb 7-1: Product: syz [ 711.473125][T10323] usb 7-1: Manufacturer: syz [ 711.473142][T10323] usb 7-1: SerialNumber: syz [ 711.544736][T14417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2903'. [ 711.806892][T14403] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 711.810286][ T7283] bond3: (slave gretap1): failed to get link speed/duplex [ 711.928718][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 712.049475][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 712.365779][T10323] cdc_ncm 7-1:1.0: failed GET_NTB_PARAMETERS [ 712.365885][T10323] cdc_ncm 7-1:1.0: bind() failure [ 712.405546][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 713.053453][T10323] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 713.056990][T10323] cdc_ncm 7-1:1.1: bind() failure [ 713.103162][T10323] usb 7-1: USB disconnect, device number 4 [ 713.439869][ T5608] Bluetooth: hci4: command tx timeout [ 713.497812][T14446] FAULT_INJECTION: forcing a failure. [ 713.497812][T14446] name failslab, interval 1, probability 0, space 0, times 0 [ 713.497848][T14446] CPU: 0 UID: 0 PID: 14446 Comm: syz.6.2912 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 713.497872][T14446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 713.497885][T14446] Call Trace: [ 713.497893][T14446] [ 713.497903][T14446] dump_stack_lvl+0xe8/0x150 [ 713.497938][T14446] should_fail_ex+0x46b/0x600 [ 713.497971][T14446] should_failslab+0xa8/0x100 [ 713.497993][T14446] __kmalloc_cache_noprof+0xa1/0x680 [ 713.498023][T14446] ? alloc_pipe_info+0xe8/0x4c0 [ 713.498049][T14446] ? alloc_pipe_info+0xe8/0x4c0 [ 713.498077][T14446] ? futex_unqueue+0x211/0x240 [ 713.498112][T14446] alloc_pipe_info+0xe8/0x4c0 [ 713.498142][T14446] splice_direct_to_actor+0xa52/0xcc0 [ 713.498167][T14446] ? __lock_acquire+0x747/0x2de0 [ 713.498198][T14446] ? __pfx_futex_wake_mark+0x10/0x10 [ 713.498229][T14446] ? try_to_wake_up+0x84b/0x1430 [ 713.498253][T14446] ? __pfx_direct_splice_actor+0x10/0x10 [ 713.498277][T14446] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 713.498312][T14446] do_splice_direct+0x19b/0x2a0 [ 713.498340][T14446] ? __pfx_do_splice_direct+0x10/0x10 [ 713.498366][T14446] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 713.498399][T14446] ? rw_verify_area+0x209/0x4d0 [ 713.498427][T14446] do_sendfile+0x540/0x7e0 [ 713.498466][T14446] ? __pfx_do_sendfile+0x10/0x10 [ 713.498502][T14446] ? __se_sys_futex+0x3a8/0x450 [ 713.498538][T14446] __se_sys_sendfile64+0x144/0x1a0 [ 713.498573][T14446] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 713.498615][T14446] do_syscall_64+0x166/0x520 [ 713.498636][T14446] ? trace_irq_disable+0x3b/0x140 [ 713.498664][T14446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.498685][T14446] ? clear_bhb_loop+0x70/0xc0 [ 713.498712][T14446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.498733][T14446] RIP: 0033:0x7f90d744e159 [ 713.498753][T14446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.498770][T14446] RSP: 002b:00007f90d56a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 713.498792][T14446] RAX: ffffffffffffffda RBX: 00007f90d76d5fa0 RCX: 00007f90d744e159 [ 713.498808][T14446] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 713.498820][T14446] RBP: 00007f90d74e506b R08: 0000000000000000 R09: 0000000000000000 [ 713.498834][T14446] R10: 0000000000008112 R11: 0000000000000246 R12: 0000000000000000 [ 713.498846][T14446] R13: 00007f90d76d6038 R14: 00007f90d76d5fa0 R15: 00007ffe2bda1e28 [ 713.498879][T14446] [ 713.629957][T14449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2914'. [ 713.849578][T14364] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.849809][T14364] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.849979][T14364] bridge_slave_0: entered allmulticast mode [ 713.853006][T14364] bridge_slave_0: entered promiscuous mode [ 713.856677][T14364] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.856905][T14364] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.857092][T14364] bridge_slave_1: entered allmulticast mode [ 713.868095][T14364] bridge_slave_1: entered promiscuous mode [ 714.069360][T14459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 714.228980][T14364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.232837][T14364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.295401][T14364] team0: Port device team_slave_0 added [ 714.298817][T14364] team0: Port device team_slave_1 added [ 715.238049][T14472] program syz.5.2923 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 715.238616][T14472] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 715.624348][ T5608] Bluetooth: hci4: command tx timeout [ 716.197352][ T10] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 716.513948][T14480] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7630] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[14480] [ 716.613341][T14364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.613360][T14364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.613390][T14364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.620563][T14364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.620580][T14364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.620611][T14364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.796048][ T1098] bond3: (slave gretap1): failed to get link speed/duplex [ 716.813796][T14364] hsr_slave_0: entered promiscuous mode [ 716.814958][T14364] hsr_slave_1: entered promiscuous mode [ 716.815800][T14364] debugfs: 'hsr0' already exists in 'hsr' [ 716.815823][T14364] Cannot create hsr debugfs directory [ 716.832809][ T10] usb 5-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 716.855067][ T10] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 716.855093][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.855113][ T10] usb 5-1: config 0 has no interface number 0 [ 716.855159][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.916635][T14482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2926'. [ 716.923199][ T10] usb 5-1: config 0 descriptor?? [ 716.943183][ T6223] bond3: (slave gretap1): failed to get link speed/duplex [ 717.042919][ T10] hub 5-1:0.3: bad descriptor, ignoring hub [ 717.042959][ T10] hub 5-1:0.3: probe with driver hub failed with error -5 [ 717.061637][ T10] sierra 5-1:0.3: Sierra USB modem converter detected [ 717.273278][ T7283] bond3: (slave gretap1): failed to get link speed/duplex [ 717.373973][ T10] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 717.513128][ T10] usb 5-1: USB disconnect, device number 5 [ 717.711227][ T10] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 717.712020][ T10] sierra 5-1:0.3: device disconnected [ 717.815582][T14490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 717.887593][ T5608] Bluetooth: hci4: command tx timeout [ 718.109209][ T6223] bond3: (slave gretap1): failed to get link speed/duplex [ 718.287760][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 718.399495][ T6698] bond3: (slave gretap1): failed to get link speed/duplex [ 718.523178][ T5840] bond3: (slave gretap1): failed to get link speed/duplex [ 718.637485][ T6223] bond3: (slave gretap1): failed to get link speed/duplex [ 720.330728][T14364] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.330766][T14364] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.794011][ T5840] bond3: (slave gretap1): failed to get link speed/duplex [ 720.907441][T14520] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[13757] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[14520] [ 721.512895][T14522] sd 0:0:1:0: device reset [ 721.825565][T14364] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.825601][T14364] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.237475][ T5839] net_ratelimit: 5 callbacks suppressed [ 722.237498][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 722.779368][ T6223] bond3: (slave gretap1): failed to get link speed/duplex [ 722.927781][ T6698] bond3: (slave gretap1): failed to get link speed/duplex [ 723.038665][ T6223] bond3: (slave gretap1): failed to get link speed/duplex [ 723.273964][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 723.385715][ T6223] bond3: (slave gretap1): failed to get link speed/duplex [ 723.503575][ T6223] bond3: (slave gretap1): failed to get link speed/duplex [ 723.624878][ T6223] bond3: (slave gretap1): failed to get link speed/duplex [ 723.753998][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 723.808605][T14543] syz.5.2952 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 723.850982][T14364] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.851021][T14364] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.001985][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 724.124804][T14557] syz_tun: entered allmulticast mode [ 724.194906][T14364] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.200032][T14364] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.487420][T14571] wlan0 speed is unknown, defaulting to 1000 [ 724.487574][T14571] wlan0 speed is unknown, defaulting to 1000 [ 724.508118][T14571] wlan0 speed is unknown, defaulting to 1000 [ 724.519070][T14571] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 724.519157][T14571] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 724.519205][T14571] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 724.608474][T14571] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 724.642609][T14571] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 725.387553][T14571] wlan0 speed is unknown, defaulting to 1000 [ 725.405555][T14571] wlan0 speed is unknown, defaulting to 1000 [ 725.408524][T14571] wlan0 speed is unknown, defaulting to 1000 [ 725.426896][T14571] wlan0 speed is unknown, defaulting to 1000 [ 725.446197][T14571] wlan0 speed is unknown, defaulting to 1000 [ 725.451068][T14571] wlan0 speed is unknown, defaulting to 1000 [ 725.475091][T14571] wlan0 speed is unknown, defaulting to 1000 [ 726.154869][T14572] smbdirect: ib_dev[syz0] removed [ 727.699907][ T6223] net_ratelimit: 15 callbacks suppressed [ 727.699930][ T6223] bond3: (slave gretap1): failed to get link speed/duplex [ 727.818438][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 727.819573][T14364] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 728.038170][T14364] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 728.044263][T14364] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 728.184954][T14364] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 728.264109][T14364] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 728.345349][T14364] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 728.357783][T14364] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 728.390234][T14364] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 728.437260][T14635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.467188][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 728.586993][ T5840] bond3: (slave gretap1): failed to get link speed/duplex [ 728.591081][T14641] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2988'. [ 728.670512][T14641] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2988'. [ 728.716478][ T6223] bond3: (slave gretap1): failed to get link speed/duplex [ 728.745300][T14364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.832915][T14364] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.838598][ T5840] bond3: (slave gretap1): failed to get link speed/duplex [ 728.864290][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.866095][ T5840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.909388][ T1738] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.945219][ T1738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.149933][ T1738] bond3: (slave gretap1): failed to get link speed/duplex [ 729.420954][ T6698] bond3: (slave gretap1): failed to get link speed/duplex [ 729.540287][ T1738] bond3: (slave gretap1): failed to get link speed/duplex [ 729.867672][T14664] block nbd6: Device being setup by another task [ 730.757413][T14661] block nbd6: shutting down sockets [ 730.858720][T14683] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[13757] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[14683] [ 731.686767][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 731.759069][T14364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.904791][T14687] syzkaller0: entered promiscuous mode [ 731.904818][T14687] syzkaller0: entered allmulticast mode [ 731.912306][T14687] tipc: Started in network mode [ 731.912336][T14687] tipc: Node identity c64c34b8db47, cluster identity 4711 [ 731.912629][T14687] tipc: Enabled bearer , priority 0 [ 731.989861][T14686] tipc: Resetting bearer [ 732.022453][T14697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3005'. [ 732.092465][T14700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.199045][T14686] tipc: Disabling bearer [ 732.389878][T14364] veth0_vlan: entered promiscuous mode [ 732.408893][T14364] veth1_vlan: entered promiscuous mode [ 732.479769][T14364] veth0_macvtap: entered promiscuous mode [ 732.486383][T14364] veth1_macvtap: entered promiscuous mode [ 732.523993][T14364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.548954][T14364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.836542][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.837137][ T1175] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.837178][ T1175] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.837215][ T1175] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.424871][T14714] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7630] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[14714] [ 734.030279][ T6223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.030304][ T6223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.484702][ T5840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.484725][ T5840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.569772][ T5942] net_ratelimit: 13 callbacks suppressed [ 734.569795][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 734.688064][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 734.801289][T14729] Bluetooth: hci0: unsupported parameter 255 [ 734.801312][T14729] Bluetooth: hci0: unsupported parameter 255 [ 734.808992][ T6698] bond3: (slave gretap1): failed to get link speed/duplex [ 734.926464][ T5840] bond3: (slave gretap1): failed to get link speed/duplex [ 735.055411][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 735.169565][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 735.286063][ T5840] bond3: (slave gretap1): failed to get link speed/duplex [ 735.707061][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 735.776767][T14750] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7630] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[14750] [ 736.673816][ T6698] bond3: (slave gretap1): failed to get link speed/duplex [ 736.794795][ T5840] bond3: (slave gretap1): failed to get link speed/duplex [ 737.098980][T14769] Bluetooth: hci0: unsupported parameter 255 [ 737.099018][T14769] Bluetooth: hci0: unsupported parameter 255 [ 737.165229][T14773] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.166178][T14773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 737.166581][T14773] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.166735][T14773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.476688][T14777] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7630] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[14777] [ 738.433406][ T36] audit: type=1326 audit(1790785219.936:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14780 comm="syz.6.3037" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90d744e159 code=0x0 [ 738.870888][T14793] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[14364] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[14793] [ 740.286615][ T5942] net_ratelimit: 15 callbacks suppressed [ 740.286637][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 740.401567][ T6698] bond3: (slave gretap1): failed to get link speed/duplex [ 740.410843][T14815] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[14364] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[14815] [ 740.522431][ T6223] bond3: (slave gretap1): failed to get link speed/duplex [ 740.601947][ T1175] IPVS: starting estimator thread 0... [ 740.671505][T14817] IPVS: Scheduler module ip_vs_mh not found [ 740.734963][T14818] IPVS: using max 10 ests per chain, 24000 per kthread [ 740.929662][ T1738] bond3: (slave gretap1): failed to get link speed/duplex [ 741.087746][ T5840] bond3: (slave gretap1): failed to get link speed/duplex [ 741.205142][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 741.283825][T14829] FAULT_INJECTION: forcing a failure. [ 741.283825][T14829] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 741.283855][T14829] CPU: 1 UID: 0 PID: 14829 Comm: syz.1.3052 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 741.283874][T14829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 741.283884][T14829] Call Trace: [ 741.283891][T14829] [ 741.283898][T14829] dump_stack_lvl+0xe8/0x150 [ 741.283929][T14829] should_fail_ex+0x46b/0x600 [ 741.283958][T14829] prepare_alloc_pages+0x223/0x650 [ 741.283990][T14829] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 741.284021][T14829] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 741.284085][T14829] ? __pfx_policy_nodemask+0x10/0x10 [ 741.284112][T14829] alloc_pages_mpol+0xd4/0x280 [ 741.284132][T14829] alloc_pages_noprof+0xd2/0x2f0 [ 741.284152][T14829] pte_alloc_one+0x22/0x380 [ 741.284193][T14829] __pte_alloc+0x25/0x1a0 [ 741.284222][T14829] do_pte_missing+0x1bda/0x28f0 [ 741.284257][T14829] ? rt_spin_unlock+0x165/0x200 [ 741.284284][T14829] ? __pmd_alloc+0x41b/0x5e0 [ 741.284310][T14829] handle_mm_fault+0xf64/0x28c0 [ 741.284337][T14829] ? handle_mm_fault+0xeb/0x28c0 [ 741.284368][T14829] ? __pfx_handle_mm_fault+0x10/0x10 [ 741.284405][T14829] ? lock_mm_and_find_vma+0xa7/0x340 [ 741.284433][T14829] do_user_addr_fault+0x746/0x1340 [ 741.284476][T14829] exc_page_fault+0x6a/0xc0 [ 741.284529][T14829] asm_exc_page_fault+0x26/0x30 [ 741.284546][T14829] RIP: 0010:rep_movs_alternative+0x33/0xa0 [ 741.284586][T14829] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 741.284601][T14829] RSP: 0018:ffffc9000ec27dc8 EFLAGS: 00050246 [ 741.284628][T14829] RAX: 0000000600000005 RBX: 0000000000000008 RCX: 0000000000000008 [ 741.284638][T14829] RDX: 0000000000000000 RSI: ffffc9000ec27e40 RDI: 0000000000000000 [ 741.284648][T14829] RBP: ffffc9000ec27ed0 R08: ffffc9000ec27e47 R09: 1ffff92001d84fc8 [ 741.284659][T14829] R10: dffffc0000000000 R11: fffff52001d84fc9 R12: 0000000000000008 [ 741.284669][T14829] R13: 00007ffffffff000 R14: ffffc9000ec27e40 R15: 0000000000000000 [ 741.284692][T14829] _copy_to_user+0x8a/0xb0 [ 741.284726][T14829] do_pipe2+0xd4/0x190 [ 741.284755][T14829] ? __pfx_do_pipe2+0x10/0x10 [ 741.284777][T14829] ? rcu_is_watching+0x16/0xb0 [ 741.284810][T14829] __x64_sys_pipe+0x3a/0x50 [ 741.284832][T14829] do_syscall_64+0x166/0x520 [ 741.284848][T14829] ? trace_irq_disable+0x3b/0x140 [ 741.284869][T14829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.284887][T14829] ? clear_bhb_loop+0x70/0xc0 [ 741.284905][T14829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.284919][T14829] RIP: 0033:0x7ff7acece159 [ 741.284933][T14829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.284945][T14829] RSP: 002b:00007ff7ab126028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 741.284960][T14829] RAX: ffffffffffffffda RBX: 00007ff7ad155fa0 RCX: 00007ff7acece159 [ 741.284971][T14829] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 741.284979][T14829] RBP: 00007ff7acf6506b R08: 0000000000000000 R09: 0000000000000000 [ 741.284988][T14829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.284997][T14829] R13: 00007ff7ad156038 R14: 00007ff7ad155fa0 R15: 00007ffe923ff528 [ 741.285020][T14829] [ 741.667623][ T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 741.733381][ T7283] bond3: (slave gretap1): failed to get link speed/duplex [ 741.886200][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 741.887498][ T31] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 741.891816][ T31] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 741.926590][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.926620][ T31] usb 5-1: Product: syz [ 741.926638][ T31] usb 5-1: Manufacturer: syz [ 741.926655][ T31] usb 5-1: SerialNumber: syz [ 741.995424][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 742.063870][ T31] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 742.064687][ T31] imon 5-1:155.0: unable to initialize intf0, err -19 [ 742.064747][ T31] imon:imon_probe: failed to initialize context! [ 742.064811][ T31] imon 5-1:155.0: unable to register, err -19 [ 742.109198][T14841] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[13757] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[14841] [ 742.187448][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 742.349072][ T6698] bond3: (slave gretap1): failed to get link speed/duplex [ 742.731455][ T31] usb 5-1: USB disconnect, device number 6 [ 743.070541][T14852] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3060'. [ 743.594699][T14869] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[13757] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[14869] [ 744.578580][T14882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3071'. [ 744.963988][T14886] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7616] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[14886] [ 745.459505][T14888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 745.959268][ T5942] net_ratelimit: 6 callbacks suppressed [ 745.959287][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 746.087594][ T1175] bond3: (slave gretap1): failed to get link speed/duplex [ 746.168387][T14902] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3077'. [ 746.197672][ T6223] bond3: (slave gretap1): failed to get link speed/duplex [ 746.324982][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 747.248733][ T1175] bond3: (slave gretap1): failed to get link speed/duplex [ 747.357383][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 748.229736][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 748.358335][ T6698] bond3: (slave gretap1): failed to get link speed/duplex [ 748.475792][ T6223] bond3: (slave gretap1): failed to get link speed/duplex [ 748.599544][ T6223] bond3: (slave gretap1): failed to get link speed/duplex [ 751.043575][T10323] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 751.205848][T10323] usb 3-1: Using ep0 maxpacket: 16 [ 751.206720][T10323] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 751.208139][T10323] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 751.208167][T10323] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 751.210790][T10323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 751.210814][T10323] usb 3-1: SerialNumber: syz [ 751.460559][T10323] usb 3-1: 0:2 : does not exist [ 752.542344][T10323] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 753.854918][ T1175] net_ratelimit: 15 callbacks suppressed [ 753.854961][ T1175] bond3: (slave gretap1): failed to get link speed/duplex [ 755.148048][ T6223] bond3: (slave gretap1): failed to get link speed/duplex [ 755.264739][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 755.378954][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 755.618184][ T6223] bond3: (slave gretap1): failed to get link speed/duplex [ 756.512880][ T5840] bond3: (slave gretap1): failed to get link speed/duplex [ 756.623871][ T5840] bond3: (slave gretap1): failed to get link speed/duplex [ 756.660121][T10323] usb 3-1: USB disconnect, device number 6 [ 756.757524][ T1175] bond3: (slave gretap1): failed to get link speed/duplex [ 756.889360][ T5840] bond3: (slave gretap1): failed to get link speed/duplex [ 757.003272][ T1175] bond3: (slave gretap1): failed to get link speed/duplex [ 757.607137][T15027] faux_driver vgem: [drm] Unknown color mode 11173; guessing buffer size. [ 758.800175][T15036] netlink: 'syz.1.3117': attribute type 1 has an invalid length. [ 760.239320][T15053] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3123'. [ 760.239347][T15053] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3123'. [ 760.239362][T15053] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 760.239392][T15053] iwpm_hello_cb: Unable to parse nlmsg [ 760.427664][ T6223] net_ratelimit: 14 callbacks suppressed [ 760.427688][ T6223] bond3: (slave gretap1): failed to get link speed/duplex [ 760.489923][T15056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3124'. [ 760.546837][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 760.666183][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 760.931192][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 761.047019][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 761.165879][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 761.327244][ T6698] bond3: (slave gretap1): failed to get link speed/duplex [ 761.448431][ T5840] bond3: (slave gretap1): failed to get link speed/duplex [ 761.519145][T15092] netlink: 'syz.4.3139': attribute type 1 has an invalid length. [ 761.600288][T15092] bond1: entered promiscuous mode [ 761.600833][T15092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 761.738745][T15098] bond1: (slave bridge1): making interface the new active one [ 761.738770][T15098] bridge1: entered promiscuous mode [ 761.753752][T15098] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 761.795148][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 761.895155][T15104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3143'. [ 761.957085][ T5840] bond3: (slave gretap1): failed to get link speed/duplex [ 764.483265][T15140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3155'. [ 765.893285][ T6223] net_ratelimit: 17 callbacks suppressed [ 765.893306][ T6223] bond3: (slave gretap1): failed to get link speed/duplex [ 766.009690][ T6223] bond3: (slave gretap1): failed to get link speed/duplex [ 766.145583][ T6698] bond3: (slave gretap1): failed to get link speed/duplex [ 766.275190][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 766.390433][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 766.511361][ T1098] bond3: (slave gretap1): failed to get link speed/duplex [ 766.631725][ T1098] bond3: (slave gretap1): failed to get link speed/duplex [ 766.754996][ T1098] bond3: (slave gretap1): failed to get link speed/duplex [ 766.882982][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 766.996802][ T1098] bond3: (slave gretap1): failed to get link speed/duplex [ 767.309604][T10323] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 767.493939][T10323] usb 2-1: Using ep0 maxpacket: 8 [ 767.494796][T10323] usb 2-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 767.496428][T10323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.496464][T10323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.496490][T10323] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 767.496535][T10323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.559754][T10323] usb 2-1: config 0 descriptor?? [ 768.033284][ T10] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 768.199346][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 768.200973][ T10] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 768.201008][ T10] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 768.201039][ T10] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 34063, setting to 64 [ 768.201068][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 768.204468][ T10] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 768.204521][ T10] usb 6-1: Product: syz [ 768.204539][ T10] usb 6-1: Manufacturer: syz [ 768.204556][ T10] usb 6-1: SerialNumber: syz [ 768.296642][ T10] usb 6-1: config 0 descriptor?? [ 768.304774][T15180] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 768.363718][ T10] usb 6-1: selecting invalid altsetting 0 [ 768.477296][T10323] sony 0003:054C:042F.0003: can't set operational mode: step 1 [ 768.477358][T10323] sony 0003:054C:042F.0003: Failed to set controller into operational mode [ 768.505132][T10323] sony 0003:054C:042F.0003: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.1-1/input0 [ 768.505157][T10323] sony 0003:054C:042F.0003: failed to claim input [ 768.717612][T10323] usb 2-1: USB disconnect, device number 9 [ 768.749153][ T10] usb 6-1: USB disconnect, device number 5 [ 768.941070][T15202] batman_adv: batadv0: Adding interface: syzkaller0 [ 768.941091][T15202] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 768.941145][T15202] batman_adv: batadv0: Interface activated: syzkaller0 [ 768.993932][T15200] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 769.243783][T15200] batman_adv: batadv0: Removing interface: syzkaller0 [ 771.402553][ T1175] net_ratelimit: 18 callbacks suppressed [ 771.402576][ T1175] bond3: (slave gretap1): failed to get link speed/duplex [ 771.517077][ T6698] bond3: (slave gretap1): failed to get link speed/duplex [ 771.634001][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 771.938826][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 772.203509][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 772.573942][ T998] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 773.570747][ T6223] bond3: (slave gretap1): failed to get link speed/duplex [ 773.585754][ T998] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 773.593424][ T998] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 773.593454][ T998] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 773.606098][ T998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.606127][ T998] usb 5-1: Product: syz [ 773.606145][ T998] usb 5-1: Manufacturer: syz [ 773.606170][ T998] usb 5-1: SerialNumber: syz [ 773.693126][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 773.812529][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 774.029873][ T1098] bond3: (slave gretap1): failed to get link speed/duplex [ 774.138880][ T998] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 774.164114][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 774.194366][ T998] usb 5-1: USB disconnect, device number 7 [ 774.238684][ T998] usblp0: removed [ 776.828272][ T1175] net_ratelimit: 17 callbacks suppressed [ 776.828295][ T1175] bond3: (slave gretap1): failed to get link speed/duplex [ 776.955337][ T6223] bond3: (slave gretap1): failed to get link speed/duplex [ 777.075928][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 777.312512][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 777.422375][ T5840] bond3: (slave gretap1): failed to get link speed/duplex [ 777.542552][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 777.661194][ T1175] bond3: (slave gretap1): failed to get link speed/duplex [ 777.779143][ T6698] bond3: (slave gretap1): failed to get link speed/duplex [ 777.835210][T15342] tipc: Enabled bearer , priority 0 [ 778.132615][T15341] tipc: Disabling bearer [ 778.334061][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 778.450817][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 778.797664][T10323] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 779.015883][T10323] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 779.019730][T10323] usb 1-1: Dual-Role OTG device on HNP port [ 779.020202][T10323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.154662][T10323] gspca_main: spca501-2.14.0 probing 0000:0000 [ 779.161827][T10323] gspca_spca501: reg write: error -32 [ 779.161842][T10323] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 779.162096][T10323] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 779.164221][T10323] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 779.697590][ T998] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 779.881534][ T998] usb 5-1: Using ep0 maxpacket: 8 [ 779.899487][ T998] usb 5-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 779.913916][ T998] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.913948][ T998] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.913972][ T998] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 779.914013][ T998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.970584][ T998] usb 5-1: config 0 descriptor?? [ 781.354153][ T998] sony 0003:054C:042F.0004: can't set operational mode: step 1 [ 781.354228][ T998] sony 0003:054C:042F.0004: Failed to set controller into operational mode [ 781.406477][ T998] sony 0003:054C:042F.0004: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.4-1/input0 [ 781.406534][ T998] sony 0003:054C:042F.0004: failed to claim input [ 781.434739][ T998] usb 5-1: USB disconnect, device number 8 [ 781.651772][T15398] fido_id[15398]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 782.149334][T14249] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 782.740057][ T5839] net_ratelimit: 23 callbacks suppressed [ 782.740257][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 782.878255][ T1738] bond3: (slave gretap1): failed to get link speed/duplex [ 783.004066][ T7283] bond3: (slave gretap1): failed to get link speed/duplex [ 783.354149][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 783.447100][T14249] usb 2-1: Using ep0 maxpacket: 16 [ 783.448317][T14249] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 783.488648][ T5840] bond3: (slave gretap1): failed to get link speed/duplex [ 783.583363][T14249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 783.583404][T14249] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 783.583451][T14249] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.604260][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 783.654293][T14249] usb 2-1: config 0 descriptor?? [ 783.718261][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 783.837948][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 783.925096][T15424] lo speed is unknown, defaulting to 1000 [ 783.942305][T15424] lo speed is unknown, defaulting to 1000 [ 783.956500][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 784.077102][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 784.159058][T14249] hid (null): bogus close delimiter [ 784.159135][T14249] hid (null): report_id 0 is invalid [ 784.285552][T14249] hid_parser_main: 8 callbacks suppressed [ 784.285580][T14249] corsair-psu 0003:1B1C:1C0C.0005: unknown main item tag 0x0 [ 784.285613][T14249] corsair-psu 0003:1B1C:1C0C.0005: unknown main item tag 0x0 [ 784.285642][T14249] corsair-psu 0003:1B1C:1C0C.0005: unknown main item tag 0x0 [ 784.285670][T14249] corsair-psu 0003:1B1C:1C0C.0005: unknown main item tag 0x0 [ 784.285698][T14249] corsair-psu 0003:1B1C:1C0C.0005: unknown main item tag 0x0 [ 784.287777][T14249] corsair-psu 0003:1B1C:1C0C.0005: unknown main item tag 0x0 [ 784.287811][T14249] corsair-psu 0003:1B1C:1C0C.0005: unknown main item tag 0x0 [ 784.287838][T14249] corsair-psu 0003:1B1C:1C0C.0005: unknown main item tag 0x0 [ 784.287864][T14249] corsair-psu 0003:1B1C:1C0C.0005: unknown main item tag 0x0 [ 784.287890][T14249] corsair-psu 0003:1B1C:1C0C.0005: unknown main item tag 0x0 [ 784.290869][T14249] corsair-psu 0003:1B1C:1C0C.0005: collection stack underflow [ 784.290899][T14249] corsair-psu 0003:1B1C:1C0C.0005: item 0 1 0 12 parsing failed [ 784.291778][T15424] lo speed is unknown, defaulting to 1000 [ 784.341387][T14249] corsair-psu 0003:1B1C:1C0C.0005: probe with driver corsair-psu failed with error -22 [ 784.490110][T15424] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 784.490294][T15424] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 784.490341][T15424] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 784.615302][T14249] usb 2-1: USB disconnect, device number 10 [ 784.640161][T15424] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 784.858064][T15424] lo speed is unknown, defaulting to 1000 [ 784.860933][T15424] lo speed is unknown, defaulting to 1000 [ 784.863929][T15424] lo speed is unknown, defaulting to 1000 [ 784.868127][T15424] lo speed is unknown, defaulting to 1000 [ 784.873770][T15424] lo speed is unknown, defaulting to 1000 [ 784.897599][T15424] lo speed is unknown, defaulting to 1000 [ 784.907730][T15424] lo speed is unknown, defaulting to 1000 [ 785.975373][T15457] netlink: 'syz.5.3274': attribute type 1 has an invalid length. [ 786.102434][T15458] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3274'. [ 786.622308][T15460] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3274'. [ 786.964072][T15457] bond2: entered promiscuous mode [ 787.015419][T15457] 8021q: adding VLAN 0 to HW filter on device bond2 [ 787.734507][T15461] bond2: (slave bridge2): making interface the new active one [ 787.734537][T15461] bridge2: entered promiscuous mode [ 787.848497][T15461] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 788.486607][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 788.606780][ T1175] net_ratelimit: 14 callbacks suppressed [ 788.606805][ T1175] bond3: (slave gretap1): failed to get link speed/duplex [ 788.729035][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 788.846307][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 788.969245][ T1098] bond3: (slave gretap1): failed to get link speed/duplex [ 789.083724][ T1098] bond3: (slave gretap1): failed to get link speed/duplex [ 789.215547][ T1098] bond3: (slave gretap1): failed to get link speed/duplex [ 789.429737][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 789.553062][ T1175] bond3: (slave gretap1): failed to get link speed/duplex [ 789.681364][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 789.799214][ T6223] bond3: (slave gretap1): failed to get link speed/duplex [ 790.173409][T15511] netlink: 'syz.5.3287': attribute type 1 has an invalid length. [ 790.175354][T15512] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3288'. [ 790.216178][T15511] bond3: entered promiscuous mode [ 790.216631][T15511] 8021q: adding VLAN 0 to HW filter on device bond3 [ 790.237937][T15511] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3287'. [ 790.252171][T15511] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3287'. [ 790.290299][T15511] bond3: (slave bridge3): making interface the new active one [ 790.290323][T15511] bridge3: entered promiscuous mode [ 790.313616][T15511] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 790.405070][ T1175] IPVS: starting estimator thread 0... [ 790.503712][T15518] IPVS: using max 12 ests per chain, 28800 per kthread [ 790.589152][T14249] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 790.751841][T14249] usb 2-1: Using ep0 maxpacket: 8 [ 790.752852][T14249] usb 2-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 790.758369][T14249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.758401][T14249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.758424][T14249] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 790.758466][T14249] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.828057][T14249] usb 2-1: config 0 descriptor?? [ 791.979617][T15543] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3299'. [ 792.133521][T14249] sony 0003:054C:042F.0006: can't set operational mode: step 1 [ 792.133559][T14249] sony 0003:054C:042F.0006: Failed to set controller into operational mode [ 792.163255][T14249] sony 0003:054C:042F.0006: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.1-1/input0 [ 792.163287][T14249] sony 0003:054C:042F.0006: failed to claim input [ 792.270292][T14249] usb 2-1: USB disconnect, device number 11 [ 792.423787][T15547] fido_id[15547]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 792.455625][ T43] IPVS: starting estimator thread 0... [ 792.778419][T15550] IPVS: using max 9 ests per chain, 21600 per kthread [ 793.015133][T15568] syz.2.3309 (15568): /proc/15567/oom_adj is deprecated, please use /proc/15567/oom_score_adj instead. [ 793.502683][T15574] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3311'. [ 794.583573][ T6223] net_ratelimit: 31 callbacks suppressed [ 794.583850][ T6223] bond3: (slave gretap1): failed to get link speed/duplex [ 795.052657][ T6698] bond3: (slave gretap1): failed to get link speed/duplex [ 795.228441][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 795.359870][ T1175] bond3: (slave gretap1): failed to get link speed/duplex [ 795.500078][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 795.618315][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 795.766611][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 795.930152][ T64] bond3: (slave gretap1): failed to get link speed/duplex [ 796.047524][ T1046] bond3: (slave gretap1): failed to get link speed/duplex [ 796.167111][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 797.586209][T15585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3315'. [ 797.609837][T15585] vlan2: entered promiscuous mode [ 797.609853][T15585] bridge0: entered promiscuous mode [ 797.789393][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 798.505377][T15610] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3325'. [ 798.930844][T15616] tipc: Started in network mode [ 798.930873][T15616] tipc: Node identity 2000004, cluster identity 4711 [ 798.930887][T15616] tipc: Node number set to 33554436 [ 800.416015][ T5840] net_ratelimit: 17 callbacks suppressed [ 800.416041][ T5840] bond3: (slave gretap1): failed to get link speed/duplex [ 800.464639][T10323] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 800.528794][ T5840] bond3: (slave gretap1): failed to get link speed/duplex [ 800.552272][T15637] openvswitch: netlink: Flow actions attr not present in new flow. [ 800.671071][ T1098] bond3: (slave gretap1): failed to get link speed/duplex [ 800.787695][ T69] bond3: (slave gretap1): failed to get link speed/duplex [ 800.961181][ T7283] bond3: (slave gretap1): failed to get link speed/duplex [ 801.080408][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 801.091069][T10323] usb 7-1: Using ep0 maxpacket: 8 [ 801.099771][T10323] usb 7-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 801.287470][ T7283] bond3: (slave gretap1): failed to get link speed/duplex [ 801.368258][T10323] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.368297][T10323] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.368323][T10323] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 801.368445][T10323] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.427742][ T6698] bond3: (slave gretap1): failed to get link speed/duplex [ 801.568024][ T1046] bond3: (slave gretap1): failed to get link speed/duplex [ 803.728560][T10323] usb 7-1: config 0 descriptor?? [ 803.792448][T10323] usb 7-1: can't set config #0, error -71 [ 803.904011][T10323] usb 7-1: USB disconnect, device number 5 [ 804.218190][T15660] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3337'. [ 804.606159][T15665] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3340'. [ 805.847029][ T5839] net_ratelimit: 22 callbacks suppressed [ 805.847130][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 806.184693][ T7283] bond3: (slave gretap1): failed to get link speed/duplex [ 806.303937][ T1098] bond3: (slave gretap1): failed to get link speed/duplex [ 806.451919][ T7283] bond3: (slave gretap1): failed to get link speed/duplex [ 806.565629][ T5840] bond3: (slave gretap1): failed to get link speed/duplex [ 806.592169][T15678] openvswitch: netlink: Flow actions attr not present in new flow. [ 806.719438][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 806.836972][ T69] bond3: (slave gretap1): failed to get link speed/duplex [ 806.954752][ T69] bond3: (slave gretap1): failed to get link speed/duplex [ 806.974611][T15684] l2tp_ppp: sess 2/0: no socket in recv [ 807.076894][ T6698] bond3: (slave gretap1): failed to get link speed/duplex [ 807.398536][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 807.560777][T15699] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3351'. [ 807.777761][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 807.781728][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 807.809442][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.809481][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.809504][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 807.809544][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.776344][ T10] usb 2-1: config 0 descriptor?? [ 810.966155][ T10] sony 0003:054C:042F.0007: can't set operational mode: step 1 [ 810.966221][ T10] sony 0003:054C:042F.0007: Failed to set controller into operational mode [ 810.993130][ T10] sony 0003:054C:042F.0007: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.1-1/input0 [ 810.993173][ T10] sony 0003:054C:042F.0007: failed to claim input [ 811.078517][ T10] usb 2-1: USB disconnect, device number 12 [ 811.356052][ T43] net_ratelimit: 11 callbacks suppressed [ 811.356077][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 811.475340][ T7283] bond3: (slave gretap1): failed to get link speed/duplex [ 811.592669][ T7283] bond3: (slave gretap1): failed to get link speed/duplex [ 811.713087][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 811.722908][T15735] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3365'. [ 811.743642][ T5818] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 811.842998][ T5840] bond3: (slave gretap1): failed to get link speed/duplex [ 811.907905][ T5818] usb 6-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.00 [ 811.910518][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.910560][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.083963][ T5840] bond3: (slave gretap1): failed to get link speed/duplex [ 812.170845][ T5818] usb 6-1: config 0 descriptor?? [ 812.201567][ T1046] bond3: (slave gretap1): failed to get link speed/duplex [ 812.331347][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 812.743843][ T64] bond3: (slave gretap1): failed to get link speed/duplex [ 812.862279][ T64] bond3: (slave gretap1): failed to get link speed/duplex [ 813.795087][ T5818] wacom 0003:056A:0303.0008: unbalanced collection at end of report description [ 813.797588][ T5818] wacom 0003:056A:0303.0008: parse failed [ 813.797692][ T5818] wacom 0003:056A:0303.0008: probe with driver wacom failed with error -22 [ 814.000942][ T5818] usb 6-1: USB disconnect, device number 6 [ 814.243482][T15762] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 814.818794][T15773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3378'. [ 816.837307][ T5942] net_ratelimit: 20 callbacks suppressed [ 816.837330][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 816.948479][ T6698] bond3: (slave gretap1): failed to get link speed/duplex [ 817.078184][ T69] bond3: (slave gretap1): failed to get link speed/duplex [ 817.197231][ T6698] bond3: (slave gretap1): failed to get link speed/duplex [ 817.316276][ T69] bond3: (slave gretap1): failed to get link speed/duplex [ 817.464580][T15809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3390'. [ 817.661954][ T1046] bond3: (slave gretap1): failed to get link speed/duplex [ 817.782460][ T1046] bond3: (slave gretap1): failed to get link speed/duplex [ 817.900398][ T1046] bond3: (slave gretap1): failed to get link speed/duplex [ 818.021198][ T1046] bond3: (slave gretap1): failed to get link speed/duplex [ 818.132017][T15821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 820.317599][T15839] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3401'. [ 821.959249][T15853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3406'. [ 822.367806][ T1738] net_ratelimit: 14 callbacks suppressed [ 822.367828][ T1738] bond3: (slave gretap1): failed to get link speed/duplex [ 822.485361][ T1738] bond3: (slave gretap1): failed to get link speed/duplex [ 822.493229][T15867] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3412'. [ 822.605416][ T6698] bond3: (slave gretap1): failed to get link speed/duplex [ 822.723112][ T6698] bond3: (slave gretap1): failed to get link speed/duplex [ 822.842290][ T1046] bond3: (slave gretap1): failed to get link speed/duplex [ 822.907295][T15471] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 822.961830][ T1738] bond3: (slave gretap1): failed to get link speed/duplex [ 823.069905][T15471] usb 6-1: Using ep0 maxpacket: 32 [ 823.070839][T15471] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 823.072579][T15471] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.072610][T15471] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 823.091995][ T1046] bond3: (slave gretap1): failed to get link speed/duplex [ 823.130441][T15471] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 823.130469][T15471] usb 6-1: Product: syz [ 823.130494][T15471] usb 6-1: Manufacturer: syz [ 823.130511][T15471] usb 6-1: SerialNumber: syz [ 823.200162][T15471] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input14 [ 823.222656][ T6698] bond3: (slave gretap1): failed to get link speed/duplex [ 823.352564][ T1738] bond3: (slave gretap1): failed to get link speed/duplex [ 823.476701][ T6698] bond3: (slave gretap1): failed to get link speed/duplex [ 823.528852][T15471] usb 6-1: USB disconnect, device number 7 [ 823.529037][ C1] appletouch 6-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 824.000751][T15471] appletouch 6-1:1.0: input: appletouch disconnected [ 825.050312][ T5596] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 825.065127][ T5596] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 825.091928][ T5596] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 825.093672][ T5596] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 825.094340][ T5596] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 825.229206][T10323] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 825.519264][T10323] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 825.530134][T10323] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.530218][T10323] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 825.530280][T10323] usb 7-1: config 0 interface 0 has no altsetting 0 [ 825.530369][T10323] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.641158][T10323] usb 7-1: config 0 descriptor?? [ 826.125684][T10323] hid-multitouch 0003:0EEF:72C4.0009: collection stack underflow [ 826.125716][T10323] hid-multitouch 0003:0EEF:72C4.0009: item 0 4 0 12 parsing failed [ 826.130934][T10323] hid-multitouch 0003:0EEF:72C4.0009: probe with driver hid-multitouch failed with error -22 [ 826.320173][T10323] usb 7-1: USB disconnect, device number 6 [ 826.802330][T15895] lo speed is unknown, defaulting to 1000 [ 827.043378][T15919] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3429'. [ 827.134609][T15919] vlan2: entered promiscuous mode [ 827.556914][ T5608] Bluetooth: hci2: command tx timeout [ 827.960102][ T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 828.005737][T15895] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.005953][T15895] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.006081][T15895] bridge_slave_0: entered allmulticast mode [ 828.036918][T15895] bridge_slave_0: entered promiscuous mode [ 828.061677][T15895] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.061837][T15895] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.062009][T15895] bridge_slave_1: entered allmulticast mode [ 828.064930][T15895] bridge_slave_1: entered promiscuous mode [ 828.121589][ T31] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 828.123283][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 828.123302][ T31] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 828.125693][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.125708][ T31] usb 2-1: Product: syz [ 828.125718][ T31] usb 2-1: Manufacturer: syz [ 828.125727][ T31] usb 2-1: SerialNumber: syz [ 828.355269][T15895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.389623][T15895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.447922][T15895] team0: Port device team_slave_0 added [ 828.451758][T15895] team0: Port device team_slave_1 added [ 828.533360][T15895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.533379][T15895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.533407][T15895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.539206][T15895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.539223][T15895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.539249][T15895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.656104][ T31] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 828.712470][ T31] usb 2-1: USB disconnect, device number 13 [ 828.812016][ T31] usblp0: removed [ 828.864048][T15942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3437'. [ 829.016703][T15895] hsr_slave_0: entered promiscuous mode [ 829.018135][T15895] hsr_slave_1: entered promiscuous mode [ 829.019084][T15895] debugfs: 'hsr0' already exists in 'hsr' [ 829.019108][T15895] Cannot create hsr debugfs directory [ 829.344924][ T6698] net_ratelimit: 27 callbacks suppressed [ 829.344945][ T6698] bond3: (slave gretap1): failed to get link speed/duplex [ 829.465539][ T92] bond3: (slave gretap1): failed to get link speed/duplex [ 829.703869][T15954] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input15 [ 829.811100][ T5596] Bluetooth: hci2: command tx timeout [ 832.082334][ T5596] Bluetooth: hci2: command tx timeout [ 834.330704][ T5596] Bluetooth: hci2: command tx timeout [ 841.528165][T15998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3449'. [ 842.166871][ T1046] bond3: (slave gretap1): failed to get link speed/duplex [ 842.263520][T15471] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 842.468773][T15471] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 842.502790][T15471] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 842.502820][T15471] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 842.523649][T15471] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.523679][T15471] usb 2-1: Product: syz [ 842.523694][T15471] usb 2-1: Manufacturer: syz [ 842.523710][T15471] usb 2-1: SerialNumber: syz [ 842.755981][ T69] bond3: (slave gretap1): failed to get link speed/duplex [ 842.884856][T15471] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 842.924809][T15471] usb 2-1: USB disconnect, device number 14 [ 842.961133][T15471] usblp0: removed [ 844.100778][T15895] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.100817][T15895] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.340002][T16028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3459'. [ 844.506976][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 844.627246][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 844.745392][ T69] bond3: (slave gretap1): failed to get link speed/duplex [ 845.177192][T15895] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 845.177231][T15895] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.538458][T16049] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3468'. [ 846.594805][T16050] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3468'. [ 846.847196][T15895] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 846.847226][T15895] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.889539][T16058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3470'. [ 847.842596][T15895] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 847.842632][T15895] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.375302][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 849.503754][ T7283] bond3: (slave gretap1): failed to get link speed/duplex [ 849.575908][T16098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3482'. [ 849.633963][ T7283] bond3: (slave gretap1): failed to get link speed/duplex [ 849.947587][ T1738] bond3: (slave gretap1): failed to get link speed/duplex [ 850.052069][T15895] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 850.128454][T15895] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 850.130796][T15895] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 850.183093][T16107] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3485'. [ 850.232300][T15895] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 850.234029][T15895] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 850.254128][T16107] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3485'. [ 850.277167][T15895] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 850.280587][T15895] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 850.337415][T15895] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 850.351474][T16110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3486'. [ 852.516451][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 854.238399][T15895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.269385][ T69] bond3: (slave gretap1): failed to get link speed/duplex [ 854.520552][T15895] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.529556][ T57] bond3: (slave gretap1): failed to get link speed/duplex [ 854.583760][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.584006][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 854.609605][ T7283] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.609696][ T7283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.874059][ T43] bond3: (slave gretap1): failed to get link speed/duplex [ 855.727823][T16168] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3500'. [ 856.007216][T16172] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3501'. [ 856.026607][T16172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3501'. [ 856.455147][ T1046] bond3: (slave gretap1): failed to get link speed/duplex [ 856.580396][ T1046] bond3: (slave gretap1): failed to get link speed/duplex [ 856.703465][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 856.954282][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 857.067927][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 857.257675][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 857.372348][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 857.491794][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 857.543351][T15895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 857.621263][ T5942] bond3: (slave gretap1): failed to get link speed/duplex [ 858.117384][T15895] veth0_vlan: entered promiscuous mode [ 858.133885][T15895] veth1_vlan: entered promiscuous mode [ 858.232268][T15895] veth0_macvtap: entered promiscuous mode [ 858.281252][T15895] veth1_macvtap: entered promiscuous mode [ 858.380693][T15895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 858.491466][T15895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 858.905214][T16229] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3515'. [ 859.032759][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3515'. [ 860.655387][T16219] lo speed is unknown, defaulting to 1000 [ 861.008572][ T7283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.008595][ T7283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.360549][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.360574][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.436969][ T1098] net_ratelimit: 5 callbacks suppressed [ 861.436992][ T1098] bond3: (slave gretap1): failed to get link speed/duplex [ 861.437047][ T1098] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.870558][ T7283] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.870611][ T7283] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.870651][ T7283] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.906480][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 861.938630][T16266] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3424'. [ 862.059180][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 862.174063][ T5839] bond3: (slave gretap1): failed to get link speed/duplex [ 864.507182][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 865.013993][ T37] INFO: task kworker/u8:18:7282 blocked for more than 143 seconds. [ 865.014228][ T37] Not tainted syzkaller #0 [ 865.014241][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 865.014393][ T37] task:kworker/u8:18 state:D stack:22080 pid:7282 tgid:7282 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 865.015009][ T37] Workqueue: netns cleanup_net [ 865.015427][ T37] Call Trace: [ 865.015587][ T37] [ 865.015646][ T37] __schedule+0x16d9/0x5700 [ 865.015821][ T37] ? __lock_acquire+0x747/0x2de0 [ 865.016206][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 865.016442][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 865.016798][ T37] ? __pfx___schedule+0x10/0x10 [ 865.016955][ T37] ? lock_acquire+0x115/0x350 [ 865.017255][ T37] ? schedule+0x90/0x2b0 [ 865.017840][ T37] schedule+0x164/0x2b0 [ 865.017893][ T37] rxrpc_destroy_all_calls+0x443/0x570 [ 865.018106][ T37] ? __pfx_rxrpc_destroy_all_calls+0x10/0x10 [ 865.018191][ T37] ? __pfx_var_wake_function+0x10/0x10 [ 865.018346][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 865.018374][ T37] ? __timer_delete_sync+0x552/0x620 [ 865.018525][ T37] rxrpc_exit_net+0x6f/0xc0 [ 865.018884][ T37] ops_undo_list+0x43d/0x8d0 [ 865.019582][ T37] ? __pfx_ops_undo_list+0x10/0x10 [ 865.019724][ T37] ? idr_destroy+0x22a/0x2a0 [ 865.506185][ T37] cleanup_net+0x575/0x810 [ 865.506312][ T37] ? __pfx_cleanup_net+0x10/0x10 [ 865.506347][ T37] ? rcu_is_watching+0x16/0xb0 [ 865.506387][ T37] ? process_scheduled_works+0x97a/0x1630 [ 865.506486][ T37] process_scheduled_works+0xc3d/0x1630 [ 865.506556][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 865.506666][ T37] ? assign_work+0x3cf/0x5d0 [ 865.568214][ T37] worker_thread+0xa47/0xfb0 [ 865.568277][ T37] ? __kthread_parkme+0x71/0x1f0 [ 865.568389][ T37] kthread+0x38b/0x470 [ 865.568416][ T37] ? __pfx_worker_thread+0x10/0x10 [ 865.568448][ T37] ? __pfx_kthread+0x10/0x10 [ 865.568474][ T37] ret_from_fork+0x514/0xb70 [ 865.568593][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 865.568618][ T37] ? __switch_to+0xc89/0x1420 [ 865.568671][ T37] ? __pfx_kthread+0x10/0x10 [ 865.568790][ T37] ret_from_fork_asm+0x1a/0x30 [ 865.568837][ T37] [ 865.568991][ T37] [ 865.568991][ T37] Showing all locks held in the system: [ 865.569008][ T37] locks held by kworker/1:0/31: 3, last CPU#1: [ 865.569025][ T37] #0: ffff88805348e938 ((wq_completion)wg-crypt-wg0#11){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 865.569156][ T37] #1: ffffc90000a5fc40 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 865.569217][ T37] #2: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 865.569515][ T37] locks held by khungtaskd/37: 1, last CPU#0: [ 865.569531][ T37] #0: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 865.569663][ T37] locks held by kworker/u8:2/43: 10, last CPU#0: [ 865.569679][ T37] #0: ffff88802fb2e938 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 865.569747][ T37] #1: ffffc90000b57c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 865.569885][ T37] #2: ffffffff8e059540 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 865.569945][ T37] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 865.570423][ T37] #4: ffff88803376c238 (&peer->endpoint_lock){++..}-{3:3}, at: wg_socket_send_skb_to_peer+0x6e/0x200 [ 865.712513][ T37] #5: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x279/0x4b0 [ 865.712639][ T37] #6: ffffffff8e059540 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 865.712708][ T37] #7: ffffffff8e1c3d20 (rcu_read_lock_bh){....}-{1:3}, at: send4+0x217/0xec0 [ 865.713084][ T37] #8: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: ip_route_output_key_hash+0xd8/0x2a0 [ 865.713339][ T37] #9: ffff88801b7dd358 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x580 [ 865.713443][ T37] locks held by kworker/u8:4/64: 5, last CPU#0: [ 865.713492][ T37] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 865.713555][ T37] #1: ffffc900013afc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 865.713684][ T37] #2: ffff88806f0ee310 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 865.713845][ T37] #3: ffff88803497ed20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 865.722804][ T37] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 865.722960][ T37] locks held by kworker/u8:5/69: 8, last CPU#1: [ 865.722988][ T37] #0: ffff8880b863c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 865.734041][ T37] #1: ffff8880b8724548 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x57/0x790 [ 865.734130][ T37] #2: ffff888040ff08f8 (_T->lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbe/0x460 [ 865.734212][ T37] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: ieee80211_sta_active_ibss+0xc7/0x330 [ 865.734377][ T37] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 865.734505][ T37] #5: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 865.735383][ T37] #6: ffff888057cb2268 (_T->lock){....}-{2:2}, at: rt_mutex_slowunlock+0xb ** replaying previous printk message ** [ 865.735383][ T37] #6: ffff888057cb2268 (_T->lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbf/0xa30 [ 865.735467][ T37] #7: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 865.735762][ T37] locks held by kworker/u8:6/92: 3, on CPU#0: [ 865.735780][ T37] #0: ffff88802a631138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 865.735869][ T37] #1: ffffc9000372fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 865.735962][ T37] #2: ffffffff8f5d5a38 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x123/0x16e0 [ 865.736130][ T37] locks held by kworker/u8:7/1046: 4, last CPU#1: [ 865.736148][ T37] #0: ffff888032ae0138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 865.759400][ T37] #1: ffffc90006237c40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 865.759709][ T37] #2: ffff8880383fe1c0 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xcf/0xf90 [ 865.759902][ T37] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: batadv_iv_ogm_schedule+0x3f4/0xf90 [ 865.760006][ T37] locks held by kworker/u8:9/1175: 9, last CPU#1: [ 865.760036][ T37] #0: ffff88805fcf4938 ((wq_completion)wg-kex-wg0#17){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 865.760142][ T37] #1: ffffc900065b7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 865.760289][ T37] #2: ffffffff8e059540 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 865.762654][ T37] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 865.762961][ T37] #4: ffff88805eefcce0 (&peer->endpoint_lock){++..}-{3:3}, at: wg_socket_send_skb_to_peer+0x6e/0x200 [ 865.763054][ T37] #5: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x279/0x4b0 [ 865.763179][ T37] #6: ffffffff8e059540 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 865.763302][ T37] #7: ffffffff8e1c3d20 (rcu_read_lock_bh){....}-{1:3}, at: send6+0x255/0x920 [ 865.763371][ T37] #8: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x11e/0x540 [ 865.768492][ T37] locks held by kworker/u8:10/1738: 6, last CPU#0: [ 865.768538][ T37] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 865.768625][ T37] #1: ffffc900074b7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 865.768745][ T37] #2: ffff88803d624310 (&devlink->lock_key#12){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 865.768877][ T37] #3: ffff888032d25120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 865.768959][ T37] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 865.769072][ T37] #5: ffff8880b8640e98 ((&pcs->lock)){+.+.}-{3:3}, at: __kmalloc_node_track_caller_noprof+0x32a/0x7b0 [ 865.772862][ T37] locks held by klogd/4936: 1, last CPU#0: [ 865.772883][ T37] #0: ffffffff8e3119f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 865.773020][ T37] locks held by getty/5339: 2, on CPU#0: [ 865.773037][ T37] #0: ffff8880365290a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 865.773111][ T37] #1: ffffc900044ce2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 865.773237][ T37] locks held by kworker/u8:11/5839: 3, last CPU#0: [ 865.773254][ T37] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 865.773402][ T37] #1: ffffc90006417c40 ((work_completion)(&port->bc_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 865.773510][ T37] #2: ffffffff8e059540 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 865.793630][ T37] locks held by kworker/u8:13/5942: 6, last CPU#0: [ 865.793648][ T37] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 865.793776][ T37] #1: ffffc900065c7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 865.793853][ T37] #2: ffff888039fea310 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 865.793972][ T37] #3: ffff888060f7fd20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 865.794063][ T37] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 865.794327][ T37] #5: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 865.794455][ T37] locks held by kworker/u8:14/5975: 6, last CPU#0: [ 865.794490][ T37] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 865.794611][ T37] #1: ffffc90006617c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 865.794702][ T37] #2: ffff88803b29a310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 865.799789][ T37] #3: ffff88805cf9d920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 865.799888][ T37] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 865.805215][ T37] #5: ffff8880b8637350 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x15b/0x5d0 [ 865.805381][ T37] locks held by kworker/u8:18/7282: 3, on CPU#1: [ 865.805397][ T37] #0: ffff88801aeb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 865.805517][ T37] #1: ffffc90006ad7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 865.805600][ T37] #2: ffffffff8f5c71a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 865.805722][ T37] locks held by kworker/u8:19/7283: 6, last CPU#0: [ 865.805738][ T37] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 865.805868][ T37] #1: ffffc90006ab7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 865.805960][ T37] #2: ffff88802bf9c310 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 865.807389][ T37] #3: ffff88805f3d9520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 865.807460][ T37] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 865.807601][ T37] #5: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 865.807714][ T37] locks held by syz-executor/13405: 4, last CPU#0: [ 865.807753][ T37] #0: ffff888064aea510 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 865.817177][ T37] #1: ffff888061c96c90 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 865.817267][ T37] #2: ffff8880b863da18 ((lock)#5){+.+.}-{3:3}, at: trylock_stock+0x107/0x360 [ 865.817336][ T37] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 865.817404][ T37] locks held by kworker/0:3/15470: 3, last CPU#0: [ 865.817439][ T37] #0: ffff88805e361938 ((wq_completion)wg-crypt-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 865.817560][ T37] #1: ffffc900049c7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 865.817702][ T37] #2: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 865.817786][ T37] locks held by kworker/0:6/15471: 12, last CPU#0: [ 865.817815][ T37] #0: ffff88803258f138 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 865.817899][ T37] #1: ffffc90004357c40 ((work_completion)(&(&idev->mc_dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 865.819997][ T37] #2: ffff88805dbee628 (&idev->mc_lock){+.+.}-{4:4}, at: mld_dad_work+0x35/0x480 [ 865.821585][ T37] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x206/0xe10 [ 865.821648][ T37] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x11e/0x540 [ 865.821804][ T37] #5: ffffffff8e059540 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 865.821924][ T37] #6: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 865.822022][ T37] #7: ffffffff8e1c3d20 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x294/0x3880 [ 865.827462][ T37] #8: ffff888057c32328 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#6){+...}-{3:3}, at: __dev_queue_xmit+0x1140/0x3880 [ 865.827602][ T37] #9: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 865.827701][ T37] #10: ffffffff8e059540 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 865.829182][ T37] #11: ffffffff8e1c3d20 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x294/0x3880 [ 865.829302][ T37] locks held by syz-executor/15895: 9, last CPU#1: [ 865.829331][ T37] #0: ffffffff8e29f550 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 865.829403][ T37] #1: ffff888011a56bb8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x18e/0x1d80 [ 865.834826][ T37] #2: ffff88801217b7b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x27d/0x1d80 [ 865.834991][ T37] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 865.835118][ T37] #4: ffff8880704bb598 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 865.835194][ T37] #5: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 865.843227][ T37] #6: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 865.843317][ T37] #7: ffff888032540e98 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x569/0x58f0 [ 865.843440][ T37] #8: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock_nested+0x1e0/0x400 [ 865.843566][ T37] locks held by syz.2.3512/16219: 2, on CPU#1: [ 865.843582][ T37] #0: ffffffff8f5c71a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 865.843703][ T37] #1: ffffffff8f5d5a38 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x19/0x120 [ 865.843885][ T37] locks held by syz.6.3528/16277: 4, last CPU#1: [ 865.843902][ T37] #0: ffff888024d16bb8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 865.844699][ T37] #1: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 865.844765][ T37] #2: ffff88802a2687d8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 865.844831][ T37] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 865.844895][ T37] locks held by syz.1.3529/16280: 5, last CPU#1: [ 865.844911][ T37] #0: ffffffff8f6474c0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 865.848529][ T37] #1: ffffffff8f5d5a38 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x890 [ 865.848665][ T37] #2: ffff888037200938 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_pre_doit+0x3c0/0x890 [ 865.848734][ T37] #3: ffff88807285f9c8 (&sb->s_type->i_mutex_key#3/1){+.+.}-{4:4}, at: start_dirop+0x4f/0x90 [ 865.854403][ T37] #4: ffffffff8e0795c0 (sched_map-wait-type-override){+.+.}-{3:3}, at: rt_mutex_pre_schedule+0x7b/0x1d0 [ 865.854458][ T37] locks held by syz.1.3529/16283: 1, on CPU#0: [ 865.854482][ T37] #0: ffff8880612d9db8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 865.854633][ T37] [ 865.854640][ T37] ============================================= [ 865.854640][ T37] [ 865.854651][ T37] NMI backtrace for cpu 1 [ 865.854667][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 865.854692][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 865.854709][ T37] Call Trace: [ 865.854739][ T37] [ 865.854768][ T37] dump_stack_lvl+0xe8/0x150 [ 865.854830][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 865.854912][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 865.854979][ T37] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 865.855024][ T37] sys_info+0x135/0x170 [ 865.855060][ T37] watchdog+0xfd7/0x1030 [ 865.855157][ T37] ? watchdog+0x1c7/0x1030 [ 865.855196][ T37] kthread+0x38b/0x470 [ 865.855221][ T37] ? __pfx_watchdog+0x10/0x10 [ 865.855281][ T37] ? __pfx_kthread+0x10/0x10 [ 865.855336][ T37] ret_from_fork+0x514/0xb70 [ 865.855363][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 865.855387][ T37] ? __switch_to+0xc89/0x1420 [ 865.855472][ T37] ? __pfx_kthread+0x10/0x10 [ 865.855521][ T37] ret_from_fork_asm+0x1a/0x30 [ 865.855562][ T37] [ 865.855614][ T37] Sending NMI from CPU 1 to CPUs 0: [ 865.855692][ C0] NMI backtrace for cpu 0 [ 865.855706][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 865.855726][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 865.855737][ C0] RIP: 0010:sysvec_apic_timer_interrupt+0x5/0xc0 [ 865.855758][ C0] Code: e8 f0 27 00 00 65 c6 05 16 64 4d 07 00 eb 9a cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 55 <53> 48 89 fb e8 82 0f 00 00 89 c5 48 c7 c7 40 0b 69 8b e8 b4 27 00 [ 865.855773][ C0] RSP: 0018:ffffc900001677f8 EFLAGS: 00000006 [ 865.855812][ C0] RAX: ffffc90000167808 RBX: 0000000000000000 RCX: ffffffff8100178a [ 865.855825][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000167808 [ 865.855837][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 865.855847][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 865.855860][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 865.855871][ C0] FS: 0000000000000000(0000) GS:ffff888125bc4000(0000) knlGS:0000000000000000 [ 865.855885][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 865.855915][ C0] CR2: 0000555558ebca78 CR3: 0000000035906000 CR4: 00000000003526f0 [ 865.855932][ C0] Call Trace: [ 865.855939][ C0] [ 865.855946][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 865.855967][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 865.856033][ C0] Code: e8 8e 9f 64 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 df 88 d0 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 865.856049][ C0] RSP: 0018:ffffc900001678b8 EFLAGS: 00000202 [ 865.856066][ C0] RAX: 1ffffffff33d5200 RBX: 00000000000003fd RCX: 0000000000000000 [ 865.856078][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 865.856089][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 865.856100][ C0] R10: dffffc0000000000 R11: ffffffff85622430 R12: dffffc0000000000 [ 865.856114][ C0] R13: 0000000000000000 R14: ffffffff99ea9420 R15: 0000000000000000 [ 865.856129][ C0] ? __pfx_io_serial_in+0x10/0x10 [ 865.856161][ C0] ? io_serial_in+0x52/0xc0 [ 865.856187][ C0] wait_for_lsr+0x190/0x300 [ 865.856214][ C0] __serial8250_console_fifo_write+0xd0/0x3f0 [ 865.856273][ C0] serial8250_console_write+0xac5/0x1230 [ 865.856306][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 865.856341][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 865.856378][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 865.856408][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 865.856447][ C0] nbcon_kthread_func+0x679/0x880 [ 865.856477][ C0] ? nbcon_kthread_func+0x163/0x880 [ 865.856502][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 865.856532][ C0] ? __kthread_parkme+0x71/0x1f0 [ 865.856560][ C0] ? __kthread_parkme+0x199/0x1f0 [ 865.856590][ C0] kthread+0x38b/0x470 [ 865.856609][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 865.856633][ C0] ? __pfx_kthread+0x10/0x10 [ 865.856652][ C0] ret_from_fork+0x514/0xb70 [ 865.856671][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 865.856689][ C0] ? __switch_to+0xc89/0x1420 [ 865.856716][ C0] ? __pfx_kthread+0x10/0x10 [ 865.856735][ C0] ret_from_fork_asm+0x1a/0x30 [ 865.856761][ C0] [ 865.991569][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 867.534606][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 867.544266][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 867.554322][ T37] Call Trace: [ 867.557628][ T37] [ 867.560573][ T37] vpanic+0x56d/0xa60 [ 867.564573][ T37] ? __pfx___schedule+0x10/0x10 [ 867.569463][ T37] ? __pfx_vpanic+0x10/0x10 [ 867.573978][ T37] panic+0xc5/0xd0 [ 867.577727][ T37] ? __pfx_panic+0x10/0x10 [ 867.582157][ T37] ? preempt_schedule_common+0x7f/0xd0 [ 867.587626][ T37] ? preempt_schedule_thunk+0x16/0x40 [ 867.593009][ T37] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 867.599184][ T37] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 867.605366][ T37] watchdog+0x1030/0x1030 [ 867.609727][ T37] ? watchdog+0x1c7/0x1030 [ 867.614168][ T37] kthread+0x38b/0x470 [ 867.618251][ T37] ? __pfx_watchdog+0x10/0x10 [ 867.622941][ T37] ? __pfx_kthread+0x10/0x10 [ 867.627538][ T37] ret_from_fork+0x514/0xb70 [ 867.632142][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 867.637268][ T37] ? __switch_to+0xc89/0x1420 [ 867.641967][ T37] ? __pfx_kthread+0x10/0x10 [ 867.646567][ T37] ret_from_fork_asm+0x1a/0x30 [ 867.651452][ T37] [ 867.654942][ T37] Kernel Offset: disabled [ 867.659311][ T37] Rebooting in 86400 seconds..