last executing test programs: 3.644622565s ago: executing program 3 (id=1407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x70, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x3c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "d103db3ad235baa4f64a51b3736772664771481f01f31a8093c9fadc67394c6246d037b9fb6011ab2292d1e7c533ce0000"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.328646277s ago: executing program 3 (id=1410): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='mm_page_free_batched\x00', r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) 2.79599304s ago: executing program 1 (id=1411): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)="5f82ba33", 0x4}], 0x1}, 0x4000080) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r4}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2c, &(0x7f0000000000)=0x9, 0x4) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 2.161121934s ago: executing program 3 (id=1417): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.157659674s ago: executing program 0 (id=1418): socket$inet6(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x281, 0x7f, 0xfffffffd, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x7, 0x7ed53619, 0x5852, 0x2, 0xa8, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000001, 0x10001, 0x791, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0x80000d, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0x6, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x1, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0x1000, 0x3, 0x1, 0x6, 0x7, 0x1000008, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x6, 0x1d20, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0xff, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xff0, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x7, 0x6, 0x10, 0xab, 0x8, 0x80000001, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x38, 0x3, 0x6, 0x0, 0xffb, 0xff, 0x8000005, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x7fff, 0xac, 0xf, 0xd05, 0x800, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0x235, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x5, 0x5, 0x37f, 0x40, 0x6, 0xc, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x1100, 0xec0, 0x10001, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x3, 0x0, 0x365, 0x8, 0x8, 0x19bb, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x800092, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0x3, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0xd, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1682, 0xa252, 0x2, 0x200, 0x3, 0x4, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0xfff, 0x12, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1fd, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x7, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff9a, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70d, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x6, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x200, 0x5, 0x21ce83b0, 0x2, 0x6, {0x9, 0x1, 0x1000, 0x4, 0x4, 0x401}, {0xe, 0x0, 0xc, 0x1, 0x9, 0x5}, 0x7, 0x80, 0x8}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.802778409s ago: executing program 0 (id=1420): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000800000095"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) 1.773647392s ago: executing program 1 (id=1421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x0) 1.743553545s ago: executing program 3 (id=1422): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x44}}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, 0x0, 0x4) 1.59322246s ago: executing program 0 (id=1424): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x6810) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1", 0x27}], 0x1}, 0x0) 1.564354353s ago: executing program 2 (id=1425): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 1.460027054s ago: executing program 3 (id=1426): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x1, 0x406, 0x0, 0xffffffff, 0x9}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x39, 0x5, 0x6, 0x7}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.320706998s ago: executing program 1 (id=1427): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0x40000018}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0xa396, 0x0, 0x0) 1.211685099s ago: executing program 0 (id=1428): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x20054824) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newlink={0x20, 0x10, 0x4, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}}, 0x20}, 0x1, 0x0, 0x0, 0x40841}, 0x40000000) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000162500000000000000000000000000004470b862bf1b9efc01af92e9ccabd1c3ae2a9485a7a08b8a54aafe30c517fe1a757d14b4e46dcb75a682a236d3f19787ec270930840b20cacf27b9a1b2a3f3cd17d34e037e819b91c9d75985dbdef65efaf31c3879e73888cd573c2973d823225138a2a465a86a9d7e20af63602198b5"], 0x14}}, 0x4000005) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x40, r8, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000003c0)={@remote, @empty}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x5, 0x7a, 0xd, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8, 0x0, 0xfffffff9, 0x8}}) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0x3, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x201, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x16, 0x2}, {0xfff5, 0x7}, {0xffff, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000740)={0x14, r8, 0x400, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20004040) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) 1.172064313s ago: executing program 1 (id=1429): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)="5f82ba33", 0x4}], 0x1}, 0x4000080) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r4}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2c, &(0x7f0000000000)=0x9, 0x4) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 1.09642526s ago: executing program 3 (id=1430): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000480)={0x0, 0x5f, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8844}, 0x4000) 936.913596ms ago: executing program 2 (id=1431): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0xe}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) 741.252966ms ago: executing program 2 (id=1432): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x7) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 542.189105ms ago: executing program 2 (id=1433): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) 382.363332ms ago: executing program 1 (id=1434): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x44}}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, 0x0, 0x4) 323.194798ms ago: executing program 2 (id=1435): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034888a809003200030030"], 0xfdef) 145.171625ms ago: executing program 0 (id=1436): socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x35, &(0x7f0000000040)={0x0, 0x7c}}, 0x20000001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x14, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x4, 0x10, 0xfffff469}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fe}, 0x94) listen(0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0x0) connect$pppl2tp(r1, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x50241, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x81, 0xd, 0x403}, {0x8, 0x0, 0x6, 0x1}]}) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) 84.747981ms ago: executing program 0 (id=1437): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 82.059071ms ago: executing program 1 (id=1438): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0x40000018}) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0xa396, 0x0, 0x0) 0s ago: executing program 2 (id=1439): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.192' (ED25519) to the list of known hosts. [ 82.177579][ T5774] cgroup: Unknown subsys name 'net' [ 82.320123][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.054743][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.758497][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.772656][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.790020][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.798308][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.819614][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.827196][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.835206][ T5798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.843894][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.851912][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.859400][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.868133][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.870991][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.883537][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.891004][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.897032][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.907622][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.914972][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.926155][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.932531][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.935192][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.941530][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.948624][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.954884][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.962454][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.472035][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 86.500054][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 86.621180][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 86.753682][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.760961][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.769589][ T5784] bridge_slave_0: entered allmulticast mode [ 86.777063][ T5784] bridge_slave_0: entered promiscuous mode [ 86.826593][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.833878][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.841077][ T5784] bridge_slave_1: entered allmulticast mode [ 86.849226][ T5784] bridge_slave_1: entered promiscuous mode [ 86.857337][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.864678][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.871954][ T5788] bridge_slave_0: entered allmulticast mode [ 86.879015][ T5788] bridge_slave_0: entered promiscuous mode [ 86.887844][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.895201][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.902724][ T5788] bridge_slave_1: entered allmulticast mode [ 86.909959][ T5788] bridge_slave_1: entered promiscuous mode [ 86.916812][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 86.996324][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.003750][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.011049][ T5783] bridge_slave_0: entered allmulticast mode [ 87.018643][ T5783] bridge_slave_0: entered promiscuous mode [ 87.027505][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.034954][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.042778][ T5783] bridge_slave_1: entered allmulticast mode [ 87.049745][ T5783] bridge_slave_1: entered promiscuous mode [ 87.070033][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.082672][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.123936][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.167807][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.213819][ T5788] team0: Port device team_slave_0 added [ 87.230496][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.265786][ T5784] team0: Port device team_slave_0 added [ 87.279445][ T5788] team0: Port device team_slave_1 added [ 87.349609][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.363111][ T5784] team0: Port device team_slave_1 added [ 87.418194][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.426736][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.434624][ T5785] bridge_slave_0: entered allmulticast mode [ 87.442382][ T5785] bridge_slave_0: entered promiscuous mode [ 87.483481][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.490492][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.517092][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.532129][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.539139][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.573012][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.585433][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.593011][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.600290][ T5785] bridge_slave_1: entered allmulticast mode [ 87.608387][ T5785] bridge_slave_1: entered promiscuous mode [ 87.629957][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.637113][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.674255][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.694229][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.701235][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.728242][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.774363][ T5783] team0: Port device team_slave_0 added [ 87.784480][ T5783] team0: Port device team_slave_1 added [ 87.890627][ T5784] hsr_slave_0: entered promiscuous mode [ 87.897466][ T5784] hsr_slave_1: entered promiscuous mode [ 87.908363][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.918409][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.926028][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.952127][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.965253][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.973261][ T5787] Bluetooth: hci0: command tx timeout [ 87.973281][ T5790] Bluetooth: hci1: command tx timeout [ 87.979051][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.010387][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.038374][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.052121][ T5790] Bluetooth: hci2: command tx timeout [ 88.052143][ T5787] Bluetooth: hci3: command tx timeout [ 88.090389][ T5788] hsr_slave_0: entered promiscuous mode [ 88.097016][ T5788] hsr_slave_1: entered promiscuous mode [ 88.104104][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.112867][ T5788] Cannot create hsr debugfs directory [ 88.205286][ T5783] hsr_slave_0: entered promiscuous mode [ 88.215059][ T5783] hsr_slave_1: entered promiscuous mode [ 88.221265][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.228977][ T5783] Cannot create hsr debugfs directory [ 88.295174][ T5785] team0: Port device team_slave_0 added [ 88.336987][ T5785] team0: Port device team_slave_1 added [ 88.385330][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.392654][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.418860][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.454532][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.461921][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.488077][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.642240][ T5785] hsr_slave_0: entered promiscuous mode [ 88.648844][ T5785] hsr_slave_1: entered promiscuous mode [ 88.655834][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.663514][ T5785] Cannot create hsr debugfs directory [ 88.805633][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.834177][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.847341][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.886080][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.975569][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.994488][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.005089][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.017366][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.115484][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.128276][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.139326][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.151357][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.286423][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.297985][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.310017][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.333093][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.391285][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.433931][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.469796][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.504430][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.535352][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.542712][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.558516][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.565748][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.589515][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.599690][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.606946][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.639742][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.646985][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.687871][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.730477][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.737698][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.774488][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.781727][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.807817][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.898839][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.957589][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.964857][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.044832][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.052163][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.057805][ T5790] Bluetooth: hci1: command tx timeout [ 90.067009][ T5790] Bluetooth: hci0: command tx timeout [ 90.133789][ T5787] Bluetooth: hci2: command tx timeout [ 90.134344][ T5790] Bluetooth: hci3: command tx timeout [ 90.357860][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.438370][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.519681][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.581067][ T5784] veth0_vlan: entered promiscuous mode [ 90.626533][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.642776][ T5788] veth0_vlan: entered promiscuous mode [ 90.660998][ T5784] veth1_vlan: entered promiscuous mode [ 90.697338][ T5788] veth1_vlan: entered promiscuous mode [ 90.774056][ T5784] veth0_macvtap: entered promiscuous mode [ 90.784434][ T5783] veth0_vlan: entered promiscuous mode [ 90.801458][ T5785] veth0_vlan: entered promiscuous mode [ 90.817625][ T5785] veth1_vlan: entered promiscuous mode [ 90.829794][ T5784] veth1_macvtap: entered promiscuous mode [ 90.850760][ T5783] veth1_vlan: entered promiscuous mode [ 90.864632][ T5788] veth0_macvtap: entered promiscuous mode [ 90.884527][ T5788] veth1_macvtap: entered promiscuous mode [ 90.902731][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.934241][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.964333][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.974127][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.985604][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.994531][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.008430][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.019677][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.031213][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.060864][ T5783] veth0_macvtap: entered promiscuous mode [ 91.075143][ T5783] veth1_macvtap: entered promiscuous mode [ 91.083049][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.094972][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.107854][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.120470][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.129643][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.138586][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.147614][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.189218][ T5785] veth0_macvtap: entered promiscuous mode [ 91.208723][ T5785] veth1_macvtap: entered promiscuous mode [ 91.220630][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.234063][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.244200][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.255533][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.267784][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.319882][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.331500][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.342451][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.353224][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.365996][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.410845][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.420147][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.430701][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.440161][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.477589][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.489466][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.503747][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.512984][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.523325][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.534349][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.544326][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.555357][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.569087][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.594365][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.605134][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.631030][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.645790][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.656801][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.667369][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.677358][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.688124][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.699375][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.721211][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.730383][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.740740][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.749666][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.795327][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.804530][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.835312][ T3477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.878869][ T3477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.978245][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.996862][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.024816][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.063476][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.132510][ T5790] Bluetooth: hci0: command tx timeout [ 92.132929][ T5787] Bluetooth: hci1: command tx timeout [ 92.157898][ T2901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.169839][ T2901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.212218][ T5787] Bluetooth: hci3: command tx timeout [ 92.212547][ T5790] Bluetooth: hci2: command tx timeout [ 92.240617][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.296959][ T9] cfg80211: failed to load regulatory.db [ 92.304542][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.896717][ T5857] hid-generic 0005:0007:5507.0001: item fetching failed at offset 0/2 [ 93.198831][ T5857] hid-generic: probe of 0005:0007:5507.0001 failed with error -22 [ 94.247486][ T5790] Bluetooth: hci1: command tx timeout [ 94.248081][ T5787] Bluetooth: hci0: command tx timeout [ 94.291721][ T5787] Bluetooth: hci3: command tx timeout [ 94.297830][ T5787] Bluetooth: hci2: command tx timeout [ 94.454725][ T5899] syzkaller0: entered promiscuous mode [ 94.520050][ T5899] syzkaller0: entered allmulticast mode [ 94.629851][ T5904] 9pnet_virtio: no channels available for device 127.0.0.1 [ 94.703354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.751111][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 94.763999][ T5907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'. [ 94.779051][ T5907] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.788197][ T5907] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.797043][ T5907] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.805855][ T5907] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.820844][ T5903] tipc: Started in network mode [ 94.827505][ T5903] tipc: Node identity 72d5c7a2bba8, cluster identity 4711 [ 94.837352][ T5903] tipc: Enabled bearer , priority 0 [ 94.847671][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 94.864296][ T5907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'. [ 94.890864][ T5907] Zero length message leads to an empty skb [ 94.897595][ T5898] tipc: Resetting bearer [ 94.998815][ T5898] tipc: Disabling bearer [ 95.095540][ T5912] syzkaller0: entered promiscuous mode [ 95.101128][ T5912] syzkaller0: entered allmulticast mode [ 95.349746][ T5921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16'. [ 95.420751][ T5921] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.429728][ T5921] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.439606][ T5921] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.448670][ T5921] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.474080][ T5921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16'. [ 95.763315][ T5926] warning: `syz.3.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.051246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.328288][ T5932] syz_tun: entered allmulticast mode [ 96.386083][ T5931] syz_tun: left allmulticast mode [ 96.562796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.801977][ T787] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.032165][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.089922][ T787] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 97.111922][ T787] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 97.120062][ T787] usb 4-1: Manufacturer: syz [ 97.215809][ T787] usb 4-1: config 0 descriptor?? [ 97.253121][ T787] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 97.477559][ T787] usb 4-1: USB disconnect, device number 2 [ 99.551984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.560875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.569611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.412609][ T5837] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.572061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.671346][ T5837] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 101.712042][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.720125][ T5837] usb 3-1: Product: syz [ 101.728109][ T5837] usb 3-1: Manufacturer: syz [ 101.748757][ T5837] usb 3-1: SerialNumber: syz [ 101.793042][ T5837] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 101.905609][ T23] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 102.291627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 103.021786][ T23] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 103.042460][ T23] ath9k_htc: Failed to initialize the device [ 103.100468][ T23] usb 3-1: ath9k_htc: USB layer deinitialized [ 103.521949][ T9] usb 3-1: USB disconnect, device number 2 [ 105.022578][ T5980] vxcan1: entered promiscuous mode [ 105.154752][ T5982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.30'. [ 105.795045][ T5998] syzkaller0: entered promiscuous mode [ 105.800770][ T5998] syzkaller0: entered allmulticast mode [ 105.916002][ T6002] netlink: 28 bytes leftover after parsing attributes in process `syz.3.39'. [ 106.032111][ T6004] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 106.417814][ T6018] TCP: MD5 Hash mismatch for [fe80::bb]:0->[fe80::aa]:20002 L3 index 0 [ 106.967047][ T6024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.50'. [ 107.417717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.769113][ T6040] bond1: entered allmulticast mode [ 107.775727][ T6040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.784064][ T6040] bridge0: port 3(bond1) entered blocking state [ 107.805819][ T6040] bridge0: port 3(bond1) entered disabled state [ 107.828628][ T6040] bond1: entered promiscuous mode [ 107.835238][ T6040] bridge0: port 3(bond1) entered blocking state [ 107.842198][ T6040] bridge0: port 3(bond1) entered forwarding state [ 107.860774][ T6046] netlink: 95 bytes leftover after parsing attributes in process `syz.3.59'. [ 108.221261][ T6065] netlink: 28 bytes leftover after parsing attributes in process `syz.0.62'. [ 109.264013][ T6069] syz.3.61 (6069) used greatest stack depth: 16336 bytes left [ 109.372278][ T5974] bridge0: port 3(bond1) entered disabled state [ 109.522345][ T6076] tipc: Enabling of bearer rejected, failed to enable media [ 109.832777][ T6089] netlink: 28 bytes leftover after parsing attributes in process `syz.1.73'. [ 110.181789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 113.283818][ T6111] syz.2.80 uses obsolete (PF_INET,SOCK_PACKET) [ 113.330956][ T6110] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.339895][ T6110] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.594457][ T6117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.84'. [ 113.991118][ T6131] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.007859][ T6131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'. [ 115.058972][ T6139] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.076273][ T8] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 115.248061][ T5790] Bluetooth: hci3: ACL packet for unknown connection handle 1 [ 115.301228][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 115.310944][ T8] usb 3-1: not running at top speed; connect to a high speed hub [ 115.342658][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.361735][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.473765][ T8] usb 3-1: string descriptor 0 read error: -22 [ 115.535889][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.726627][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.856215][ T8] usb 3-1: 0:2 : does not exist [ 115.995452][ T6151] netlink: 28 bytes leftover after parsing attributes in process `syz.0.94'. [ 117.157740][ T8] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 117.174903][ T8] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 117.187731][ T8] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 117.320666][ T8] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 117.345717][ T8] usb 3-1: USB disconnect, device number 3 [ 117.920808][ T6154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.97'. [ 117.951808][ T6154] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 117.958954][ T6154] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 117.972975][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.96'. [ 119.714241][ T6174] netlink: 'syz.3.102': attribute type 10 has an invalid length. [ 119.722223][ T6174] netlink: 40 bytes leftover after parsing attributes in process `syz.3.102'. [ 119.731434][ T6174] dummy0: entered promiscuous mode [ 119.738541][ T6174] bridge0: port 3(dummy0) entered blocking state [ 119.746435][ T6174] bridge0: port 3(dummy0) entered disabled state [ 119.754434][ T6174] dummy0: entered allmulticast mode [ 119.762569][ T6174] bridge0: port 3(dummy0) entered blocking state [ 119.769108][ T6174] bridge0: port 3(dummy0) entered forwarding state [ 119.844351][ T6187] netlink: 28 bytes leftover after parsing attributes in process `syz.1.105'. [ 120.557892][ T6218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.117'. [ 121.031695][ T5172] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 121.224395][ T5172] usb 4-1: config 0 has an invalid interface number: 108 but max is 0 [ 121.239786][ T5172] usb 4-1: config 0 has no interface number 0 [ 121.260500][ T5172] usb 4-1: too many endpoints for config 0 interface 108 altsetting 101: 116, using maximum allowed: 30 [ 121.275636][ T5172] usb 4-1: config 0 interface 108 altsetting 101 has 0 endpoint descriptors, different from the interface descriptor's value: 116 [ 121.289652][ T5172] usb 4-1: config 0 interface 108 has no altsetting 0 [ 121.306386][ T5172] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 121.331816][ T5172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.350150][ T5172] usb 4-1: Product: syz [ 121.366634][ T5172] usb 4-1: Manufacturer: syz [ 121.371451][ T5172] usb 4-1: SerialNumber: syz [ 121.418942][ T5172] usb 4-1: config 0 descriptor?? [ 121.648037][ T5172] i2c-tiny-usb 4-1:0.108: version 6d.cc found at bus 004 address 003 [ 121.662893][ T5172] (null): failure setting delay to 10us [ 121.677078][ T5172] i2c-tiny-usb: probe of 4-1:0.108 failed with error -5 [ 121.712940][ T5172] usb 4-1: USB disconnect, device number 3 [ 121.989205][ T6239] netlink: 48 bytes leftover after parsing attributes in process `syz.0.128'. [ 122.600347][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.136'. [ 122.624789][ T6262] vlan2: entered promiscuous mode [ 122.630101][ T6262] batadv0: entered promiscuous mode [ 122.815662][ T6271] syzkaller0: entered promiscuous mode [ 122.834423][ T6271] syzkaller0: entered allmulticast mode [ 123.341932][ T5172] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 123.557250][ T5172] usb 2-1: config 0 has an invalid interface number: 108 but max is 0 [ 123.579039][ T5172] usb 2-1: config 0 has no interface number 0 [ 123.610419][ T5172] usb 2-1: too many endpoints for config 0 interface 108 altsetting 101: 116, using maximum allowed: 30 [ 123.647495][ T5172] usb 2-1: config 0 interface 108 altsetting 101 has 0 endpoint descriptors, different from the interface descriptor's value: 116 [ 123.689726][ T5172] usb 2-1: config 0 interface 108 has no altsetting 0 [ 123.739830][ T5172] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 123.761225][ T5172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.791894][ T5172] usb 2-1: Product: syz [ 123.811015][ T5172] usb 2-1: Manufacturer: syz [ 123.825237][ T5172] usb 2-1: SerialNumber: syz [ 123.841334][ T5172] usb 2-1: config 0 descriptor?? [ 124.528576][ T5172] i2c-tiny-usb 2-1:0.108: version 6d.cc found at bus 002 address 002 [ 124.552961][ T5172] (null): failure setting delay to 10us [ 124.571940][ T5172] i2c-tiny-usb: probe of 2-1:0.108 failed with error -5 [ 124.599158][ T5172] usb 2-1: USB disconnect, device number 2 [ 125.680254][ T6329] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.555401][ T6323] netlink: 28 bytes leftover after parsing attributes in process `syz.1.157'. [ 126.802365][ T6334] tipc: Started in network mode [ 126.809560][ T6334] tipc: Node identity 623401566a24, cluster identity 4711 [ 126.822808][ T6334] tipc: Enabled bearer , priority 0 [ 126.841481][ T6334] syzkaller0: entered promiscuous mode [ 126.866568][ T6334] syzkaller0: entered allmulticast mode [ 127.189169][ T6352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.167'. [ 127.230070][ T6332] tipc: Resetting bearer [ 127.293685][ T6332] tipc: Disabling bearer [ 127.609611][ T6366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'. [ 127.658910][ T6366] lo: entered promiscuous mode [ 127.670705][ T6366] tunl0: entered promiscuous mode [ 127.685658][ T6366] gre0: entered promiscuous mode [ 127.703047][ T6366] gretap0: entered promiscuous mode [ 127.716012][ T6366] erspan0: entered promiscuous mode [ 127.733980][ T6366] ip_vti0: entered promiscuous mode [ 127.740397][ T6366] ip6_vti0: entered promiscuous mode [ 127.773847][ T6366] sit0: entered promiscuous mode [ 127.792030][ T6366] ip6tnl0: entered promiscuous mode [ 127.804277][ T6366] ip6gre0: entered promiscuous mode [ 127.811040][ T6366] syz_tun: entered promiscuous mode [ 127.820900][ T6366] ip6gretap0: entered promiscuous mode [ 127.829323][ T6366] bridge0: entered promiscuous mode [ 127.838100][ T6366] vcan0: entered promiscuous mode [ 127.846771][ T6366] bond0: entered promiscuous mode [ 127.874181][ T6366] bond_slave_0: entered promiscuous mode [ 127.880135][ T6366] bond_slave_1: entered promiscuous mode [ 127.898089][ T6366] team0: entered promiscuous mode [ 127.920660][ T6366] team_slave_0: entered promiscuous mode [ 127.931094][ T6366] team_slave_1: entered promiscuous mode [ 127.943869][ T6366] dummy0: entered promiscuous mode [ 127.958897][ T6366] nlmon0: entered promiscuous mode [ 127.976657][ T6366] caif0: entered promiscuous mode [ 127.996836][ T6366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.602676][ T6377] syzkaller0: entered promiscuous mode [ 128.609422][ T6377] syzkaller0: entered allmulticast mode [ 128.640369][ T6380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.176'. [ 129.072285][ T6390] pim6reg: entered allmulticast mode [ 129.082570][ T6390] pim6reg: left allmulticast mode [ 129.340886][ T6395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.183'. [ 129.350557][ T8] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 129.559498][ T8] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 129.576414][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 129.584817][ T6402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.186'. [ 129.603893][ T8] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 129.622326][ T8] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 129.646028][ T8] usb 3-1: Product: syz [ 129.650283][ T8] usb 3-1: Manufacturer: syz [ 129.675945][ T8] usb 3-1: SerialNumber: syz [ 129.704950][ T8] usb 3-1: config 0 descriptor?? [ 129.726885][ T8] usb 3-1: selecting invalid altsetting 0 [ 130.378047][ T6417] tipc: Enabled bearer , priority 0 [ 130.404465][ T6414] syzkaller0: entered promiscuous mode [ 130.423613][ T6414] syzkaller0: entered allmulticast mode [ 130.996548][ T6412] tipc: Resetting bearer [ 131.058796][ T6412] tipc: Disabling bearer [ 133.142858][ T5837] usb 3-1: USB disconnect, device number 4 [ 133.150060][ T6460] netlink: 28 bytes leftover after parsing attributes in process `syz.3.198'. [ 133.261337][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.261619][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.628038][ T6477] tipc: Enabling of bearer rejected, failed to enable media [ 133.771719][ T5837] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 133.973353][ T5837] usb 1-1: config 0 has an invalid interface number: 108 but max is 0 [ 134.001846][ T5837] usb 1-1: config 0 has no interface number 0 [ 134.024428][ T5837] usb 1-1: too many endpoints for config 0 interface 108 altsetting 101: 116, using maximum allowed: 30 [ 134.090694][ T5837] usb 1-1: config 0 interface 108 altsetting 101 has 0 endpoint descriptors, different from the interface descriptor's value: 116 [ 134.162326][ T5837] usb 1-1: config 0 interface 108 has no altsetting 0 [ 134.186164][ T5837] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 134.211888][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.243850][ T5837] usb 1-1: Product: syz [ 134.260560][ T5837] usb 1-1: Manufacturer: syz [ 134.278361][ T5837] usb 1-1: SerialNumber: syz [ 134.305759][ T5837] usb 1-1: config 0 descriptor?? [ 134.689328][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.206'. [ 134.728689][ T6494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.202107][ T6494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.460113][ T5837] i2c-tiny-usb 1-1:0.108: version 6d.cc found at bus 001 address 002 [ 135.488671][ T5837] (null): failure setting delay to 10us [ 135.514842][ T5837] i2c-tiny-usb: probe of 1-1:0.108 failed with error -5 [ 135.551506][ T5837] usb 1-1: USB disconnect, device number 2 [ 135.583934][ T6512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.210'. [ 135.587609][ T787] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 135.805241][ T787] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 135.846026][ T787] usb 3-1: config 0 interface 0 has no altsetting 0 [ 135.860389][ T787] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 135.879179][ T787] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 135.888428][ T787] usb 3-1: Product: syz [ 135.893129][ T787] usb 3-1: Manufacturer: syz [ 135.897778][ T787] usb 3-1: SerialNumber: syz [ 135.929370][ T787] usb 3-1: config 0 descriptor?? [ 135.949538][ T787] usb 3-1: selecting invalid altsetting 0 [ 136.730906][ T6545] netlink: 28 bytes leftover after parsing attributes in process `syz.3.219'. [ 136.859118][ T6546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.918732][ T6553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.221'. [ 136.956072][ T6553] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.019883][ T6553] macvlan2: entered promiscuous mode [ 137.025411][ T6553] macvlan2: entered allmulticast mode [ 137.031141][ T6553] bond2: entered promiscuous mode [ 137.040071][ T6553] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 137.050304][ T6553] team0: Port device macvlan2 added [ 137.483198][ T787] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 137.704886][ T787] usb 4-1: config 0 has an invalid interface number: 108 but max is 0 [ 137.748062][ T787] usb 4-1: config 0 has no interface number 0 [ 137.789300][ T787] usb 4-1: too many endpoints for config 0 interface 108 altsetting 101: 116, using maximum allowed: 30 [ 137.859484][ T787] usb 4-1: config 0 interface 108 altsetting 101 has 0 endpoint descriptors, different from the interface descriptor's value: 116 [ 137.912279][ T787] usb 4-1: config 0 interface 108 has no altsetting 0 [ 137.952177][ T787] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 137.981865][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.002118][ T787] usb 4-1: Product: syz [ 138.019886][ T787] usb 4-1: Manufacturer: syz [ 138.059177][ T787] usb 4-1: SerialNumber: syz [ 138.086791][ T787] usb 4-1: config 0 descriptor?? [ 138.389114][ T9] usb 3-1: USB disconnect, device number 5 [ 138.428039][ T787] i2c-tiny-usb 4-1:0.108: version 6d.cc found at bus 004 address 004 [ 138.462578][ T787] (null): failure setting delay to 10us [ 138.491855][ T787] i2c-tiny-usb: probe of 4-1:0.108 failed with error -5 [ 138.528195][ T787] usb 4-1: USB disconnect, device number 4 [ 139.151381][ T6621] tipc: Enabled bearer , priority 0 [ 139.176189][ T6621] syzkaller0: entered promiscuous mode [ 139.196745][ T6621] syzkaller0: entered allmulticast mode [ 139.338279][ T6621] tipc: Resetting bearer [ 139.437657][ T6618] tipc: Resetting bearer [ 139.550497][ T6618] tipc: Disabling bearer [ 139.968759][ T6644] tipc: Started in network mode [ 139.977427][ T6644] tipc: Node identity 7ab93525853c, cluster identity 4711 [ 139.989445][ T6644] tipc: Enabled bearer , priority 0 [ 140.001223][ T6644] syzkaller0: entered promiscuous mode [ 140.029240][ T6644] syzkaller0: entered allmulticast mode [ 140.181638][ T787] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 140.357710][ T6642] tipc: Resetting bearer [ 140.399044][ T787] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 140.418541][ T787] usb 4-1: config 0 interface 0 has no altsetting 0 [ 140.421339][ T787] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 140.421368][ T787] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 140.421396][ T787] usb 4-1: Product: syz [ 140.421411][ T787] usb 4-1: Manufacturer: syz [ 140.421426][ T787] usb 4-1: SerialNumber: syz [ 140.479791][ T787] usb 4-1: config 0 descriptor?? [ 140.511441][ T6642] tipc: Disabling bearer [ 140.514233][ T787] usb 4-1: selecting invalid altsetting 0 [ 140.741775][ T5837] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 141.104734][ T5837] usb 1-1: config 0 has an invalid interface number: 108 but max is 0 [ 141.122292][ T5837] usb 1-1: config 0 has no interface number 0 [ 141.128567][ T5837] usb 1-1: too many endpoints for config 0 interface 108 altsetting 101: 116, using maximum allowed: 30 [ 141.157075][ T5837] usb 1-1: config 0 interface 108 altsetting 101 has 0 endpoint descriptors, different from the interface descriptor's value: 116 [ 141.167100][ T6669] ip6erspan0: entered promiscuous mode [ 141.182189][ T5837] usb 1-1: config 0 interface 108 has no altsetting 0 [ 141.193821][ T5837] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 141.204913][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.213124][ T5837] usb 1-1: Product: syz [ 141.217455][ T5837] usb 1-1: Manufacturer: syz [ 141.222288][ T5837] usb 1-1: SerialNumber: syz [ 141.229748][ T5837] usb 1-1: config 0 descriptor?? [ 141.442909][ T5837] i2c-tiny-usb 1-1:0.108: version 6d.cc found at bus 001 address 003 [ 141.480478][ T5837] (null): failure setting delay to 10us [ 141.501986][ T5837] i2c-tiny-usb: probe of 1-1:0.108 failed with error -5 [ 141.536146][ T5837] usb 1-1: USB disconnect, device number 3 [ 141.698195][ T6685] tipc: Enabled bearer , priority 0 [ 141.706169][ T6685] syzkaller0: entered promiscuous mode [ 141.712083][ T6685] syzkaller0: entered allmulticast mode [ 141.836191][ T6684] tipc: Resetting bearer [ 141.888448][ T6684] tipc: Disabling bearer [ 142.238294][ T6688] syzkaller0: entered promiscuous mode [ 142.258915][ T6688] syzkaller0: entered allmulticast mode [ 142.703388][ T5790] Bluetooth: hci0: ACL packet for unknown connection handle 1 [ 142.978864][ T5875] usb 4-1: USB disconnect, device number 5 [ 143.604286][ T5875] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 143.818297][ T5875] usb 4-1: config 0 has an invalid interface number: 108 but max is 0 [ 143.834034][ T5875] usb 4-1: config 0 has no interface number 0 [ 143.840252][ T5875] usb 4-1: too many endpoints for config 0 interface 108 altsetting 101: 116, using maximum allowed: 30 [ 143.857282][ T5875] usb 4-1: config 0 interface 108 altsetting 101 has 0 endpoint descriptors, different from the interface descriptor's value: 116 [ 143.871297][ T5875] usb 4-1: config 0 interface 108 has no altsetting 0 [ 143.903298][ T5875] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 143.918783][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.927996][ T5875] usb 4-1: Product: syz [ 143.932572][ T5875] usb 4-1: Manufacturer: syz [ 143.938682][ T5875] usb 4-1: SerialNumber: syz [ 143.955223][ T5875] usb 4-1: config 0 descriptor?? [ 144.219662][ T5875] i2c-tiny-usb 4-1:0.108: version 6d.cc found at bus 004 address 006 [ 144.254192][ T5875] (null): failure setting delay to 10us [ 144.281409][ T5875] i2c-tiny-usb: probe of 4-1:0.108 failed with error -5 [ 144.299701][ T5875] usb 4-1: USB disconnect, device number 6 [ 145.038048][ T6711] tipc: Enabled bearer , priority 0 [ 145.059651][ T6711] syzkaller0: entered promiscuous mode [ 145.074712][ T6711] syzkaller0: entered allmulticast mode [ 145.099332][ T6715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.270'. [ 145.281990][ T6710] tipc: Resetting bearer [ 145.403853][ T6710] tipc: Disabling bearer [ 145.790824][ T6727] syzkaller0: entered promiscuous mode [ 145.807052][ T6727] syzkaller0: entered allmulticast mode [ 145.885161][ T6732] wg1 speed is unknown, defaulting to 1000 [ 145.892560][ T6732] wg1 speed is unknown, defaulting to 1000 [ 145.909731][ T6732] wg1 speed is unknown, defaulting to 1000 [ 145.922950][ T28] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 145.936939][ T6732] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 145.959232][ T6732] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 146.014451][ T6731] wg1 speed is unknown, defaulting to 1000 [ 146.035421][ T6732] wg1 speed is unknown, defaulting to 1000 [ 146.056859][ T6732] wg1 speed is unknown, defaulting to 1000 [ 146.068679][ T6732] wg1 speed is unknown, defaulting to 1000 [ 146.082725][ T5837] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 146.085942][ T6732] wg1 speed is unknown, defaulting to 1000 [ 146.113620][ T28] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 146.124077][ T28] usb 1-1: config 0 interface 0 has no altsetting 0 [ 146.147435][ T28] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 146.166864][ T28] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 146.202151][ T28] usb 1-1: Product: syz [ 146.215136][ T28] usb 1-1: Manufacturer: syz [ 146.230039][ T28] usb 1-1: SerialNumber: syz [ 146.238329][ T28] usb 1-1: config 0 descriptor?? [ 146.268024][ T28] usb 1-1: selecting invalid altsetting 0 [ 146.296089][ T5837] usb 3-1: config 0 has an invalid interface number: 108 but max is 0 [ 146.310228][ T5837] usb 3-1: config 0 has no interface number 0 [ 146.317710][ T6742] netlink: 28 bytes leftover after parsing attributes in process `syz.3.280'. [ 146.333701][ T5837] usb 3-1: too many endpoints for config 0 interface 108 altsetting 101: 116, using maximum allowed: 30 [ 146.361711][ T5837] usb 3-1: config 0 interface 108 altsetting 101 has 0 endpoint descriptors, different from the interface descriptor's value: 116 [ 146.395969][ T5837] usb 3-1: config 0 interface 108 has no altsetting 0 [ 146.426787][ T5837] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 146.471717][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.720755][ T5837] usb 3-1: Product: syz [ 146.725947][ T5837] usb 3-1: Manufacturer: syz [ 146.730612][ T5837] usb 3-1: SerialNumber: syz [ 146.742880][ T5837] usb 3-1: config 0 descriptor?? [ 146.819852][ T6753] tipc: Enabled bearer , priority 0 [ 146.834737][ T6753] syzkaller0: entered promiscuous mode [ 146.840530][ T6753] syzkaller0: entered allmulticast mode [ 146.959024][ T6752] tipc: Resetting bearer [ 146.964580][ T5837] i2c-tiny-usb 3-1:0.108: version 6d.cc found at bus 003 address 006 [ 147.001722][ T5837] (null): failure setting delay to 10us [ 147.007536][ T5837] i2c-tiny-usb: probe of 3-1:0.108 failed with error -5 [ 147.060193][ T5837] usb 3-1: USB disconnect, device number 6 [ 147.104524][ T6752] tipc: Disabling bearer [ 147.446632][ T6773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.291'. [ 148.746898][ T28] usb 1-1: USB disconnect, device number 4 [ 148.878187][ T6805] Illegal XDP return value 4294967274 on prog (id 35) dev N/A, expect packet loss! [ 148.980908][ T6809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.306'. [ 150.123514][ T5875] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 150.314255][ T5875] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 150.348147][ T5875] usb 4-1: config 0 interface 0 has no altsetting 0 [ 150.416733][ T5875] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 150.431946][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 150.456615][ T6837] netlink: 28 bytes leftover after parsing attributes in process `syz.1.319'. [ 150.469094][ T5875] usb 4-1: Product: syz [ 150.475399][ T5875] usb 4-1: Manufacturer: syz [ 150.480085][ T5875] usb 4-1: SerialNumber: syz [ 150.509332][ T5875] usb 4-1: config 0 descriptor?? [ 150.543345][ T5875] usb 4-1: selecting invalid altsetting 0 [ 150.809282][ T6846] wg1 speed is unknown, defaulting to 1000 [ 151.611207][ T6867] netlink: 56 bytes leftover after parsing attributes in process `syz.1.328'. [ 151.969190][ T6876] netlink: 28 bytes leftover after parsing attributes in process `syz.0.331'. [ 152.874933][ T28] usb 4-1: USB disconnect, device number 7 [ 153.310478][ T6906] netlink: 28 bytes leftover after parsing attributes in process `syz.2.342'. [ 154.990573][ T6934] netlink: 28 bytes leftover after parsing attributes in process `syz.1.352'. [ 155.128967][ T6938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.354'. [ 155.212565][ T28] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 155.246468][ T6936] wg1 speed is unknown, defaulting to 1000 [ 155.431447][ T28] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 155.450602][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.467102][ T28] usb 1-1: Product: syz [ 155.487707][ T28] usb 1-1: Manufacturer: syz [ 155.502240][ T28] usb 1-1: SerialNumber: syz [ 155.518839][ T28] usb 1-1: config 0 descriptor?? [ 155.532761][ T28] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 005 [ 155.576203][ T5790] Bluetooth: hci1: ACL packet for unknown connection handle 1 [ 155.861371][ T6960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.361'. [ 155.935810][ T28] (null): failure reading functionality [ 155.960526][ T28] i2c i2c-1: failure reading functionality [ 156.001916][ T28] i2c i2c-1: connected i2c-tiny-usb device [ 156.019631][ T28] usb 1-1: USB disconnect, device number 5 [ 157.447952][ T6986] netlink: 28 bytes leftover after parsing attributes in process `syz.1.371'. [ 157.489538][ T5790] Bluetooth: hci1: ACL packet for unknown connection handle 1 [ 157.630755][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.369'. [ 158.401702][ T5172] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 158.615149][ T5172] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 158.629138][ T5172] usb 2-1: config 0 interface 0 has no altsetting 0 [ 158.655525][ T5172] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 158.669895][ T5172] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 158.678565][ T5172] usb 2-1: Product: syz [ 158.687473][ T5172] usb 2-1: Manufacturer: syz [ 158.692563][ T5172] usb 2-1: SerialNumber: syz [ 158.703062][ T5172] usb 2-1: config 0 descriptor?? [ 158.718641][ T5172] usb 2-1: selecting invalid altsetting 0 [ 159.796876][ T7023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.381'. [ 160.041818][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 160.237340][ T23] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 160.255806][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.291771][ T23] usb 1-1: Product: syz [ 160.296018][ T23] usb 1-1: Manufacturer: syz [ 160.300653][ T23] usb 1-1: SerialNumber: syz [ 160.341048][ T23] usb 1-1: config 0 descriptor?? [ 160.367073][ T23] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 006 [ 160.401125][ T7029] syzkaller0: entered promiscuous mode [ 160.407618][ T7029] syzkaller0: entered allmulticast mode [ 160.788406][ T23] (null): failure reading functionality [ 160.810985][ T23] i2c i2c-1: failure reading functionality [ 160.837970][ T23] i2c i2c-1: connected i2c-tiny-usb device [ 160.909808][ T23] usb 1-1: USB disconnect, device number 6 [ 160.988674][ T7036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.387'. [ 161.184141][ T9] usb 2-1: USB disconnect, device number 3 [ 161.510915][ T7041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.390'. [ 161.828234][ T7046] wg1 speed is unknown, defaulting to 1000 [ 162.472197][ T23] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 162.704922][ T23] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 162.716980][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 162.737142][ T23] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 162.794921][ T23] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 162.806831][ T23] usb 3-1: Product: syz [ 162.814033][ T23] usb 3-1: Manufacturer: syz [ 162.819727][ T23] usb 3-1: SerialNumber: syz [ 162.929235][ T23] usb 3-1: config 0 descriptor?? [ 163.018711][ T23] usb 3-1: selecting invalid altsetting 0 [ 163.061065][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 163.470383][ T9] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 163.488370][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.498284][ T9] usb 1-1: Product: syz [ 163.506795][ T9] usb 1-1: Manufacturer: syz [ 163.511450][ T9] usb 1-1: SerialNumber: syz [ 163.525512][ T9] usb 1-1: config 0 descriptor?? [ 163.548189][ T9] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 007 [ 163.961809][ T9] (null): failure reading functionality [ 163.991846][ T9] i2c i2c-1: failure reading functionality [ 164.014333][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 164.045481][ T9] usb 1-1: USB disconnect, device number 7 [ 164.079575][ T6990] Set syz1 is full, maxelem 65536 reached [ 164.182672][ T7068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.401'. [ 164.732673][ T7080] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.868864][ T7090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.411'. [ 165.247539][ T9] usb 3-1: USB disconnect, device number 7 [ 166.216350][ T7111] wg1 speed is unknown, defaulting to 1000 [ 166.240933][ T7115] netlink: 228 bytes leftover after parsing attributes in process `syz.1.418'. [ 166.372684][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 166.475811][ T7122] netlink: 28 bytes leftover after parsing attributes in process `syz.1.421'. [ 166.602266][ T23] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 166.612787][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.620851][ T23] usb 3-1: Product: syz [ 166.626577][ T23] usb 3-1: Manufacturer: syz [ 166.632110][ T23] usb 3-1: SerialNumber: syz [ 166.642805][ T23] usb 3-1: config 0 descriptor?? [ 166.656307][ T23] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 008 [ 166.912943][ T5790] Bluetooth: hci3: ACL packet for unknown connection handle 1 [ 166.961949][ T5837] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 167.103415][ T23] (null): failure reading functionality [ 167.166155][ T23] i2c i2c-1: failure reading functionality [ 167.181770][ T5837] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 167.209472][ T5837] usb 2-1: config 0 interface 0 has no altsetting 0 [ 167.238422][ T5837] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 167.252209][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 167.260487][ T5837] usb 2-1: Product: syz [ 167.265991][ T5837] usb 2-1: Manufacturer: syz [ 167.270715][ T5837] usb 2-1: SerialNumber: syz [ 167.303606][ T23] i2c i2c-1: connected i2c-tiny-usb device [ 167.390143][ T5837] usb 2-1: config 0 descriptor?? [ 167.407762][ T23] usb 3-1: USB disconnect, device number 8 [ 167.555330][ T5837] usb 2-1: selecting invalid altsetting 0 [ 168.476695][ T7147] netlink: 28 bytes leftover after parsing attributes in process `syz.3.431'. [ 169.238285][ T7148] syzkaller0: entered promiscuous mode [ 169.253618][ T7148] syzkaller0: entered allmulticast mode [ 169.773877][ T5875] usb 2-1: USB disconnect, device number 4 [ 171.334789][ T7159] dummy0: left allmulticast mode [ 171.341073][ T7159] bridge0: port 3(dummy0) entered disabled state [ 171.356531][ T7159] bridge_slave_0: left allmulticast mode [ 171.363949][ T7159] bridge_slave_0: left promiscuous mode [ 171.369756][ T7159] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.379600][ T7159] bridge_slave_1: left allmulticast mode [ 171.386745][ T7159] bridge_slave_1: left promiscuous mode [ 171.392932][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.406468][ T7159] bond0: (slave bond_slave_0): Releasing backup interface [ 171.420035][ T7159] bond0: (slave bond_slave_1): Releasing backup interface [ 171.455701][ T7159] team0: Port device team_slave_0 removed [ 171.475230][ T7159] team0: Port device team_slave_1 removed [ 171.484723][ T7159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.492416][ T7159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.842027][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 171.939401][ T7184] netlink: 'syz.2.441': attribute type 1 has an invalid length. [ 172.015108][ T7194] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 172.039928][ T7194] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 172.052620][ T7194] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 172.072332][ T7194] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 172.112604][ T7194] bond1: (slave geneve2): making interface the new active one [ 172.148447][ T7194] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 172.163957][ T7189] syzkaller0: entered promiscuous mode [ 172.169770][ T7189] syzkaller0: entered allmulticast mode [ 172.203032][ T7189] tipc: Enabled bearer , priority 0 [ 172.262239][ T7189] tipc: Resetting bearer [ 172.300198][ T7188] tipc: Resetting bearer [ 172.406295][ T23] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 172.462801][ T7188] tipc: Disabling bearer [ 172.594605][ T23] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 172.636737][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 172.666779][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 172.677404][ T23] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 172.692032][ T23] usb 1-1: Product: syz [ 172.697686][ T23] usb 1-1: Manufacturer: syz [ 172.700743][ T7203] wg1 speed is unknown, defaulting to 1000 [ 172.717652][ T23] usb 1-1: SerialNumber: syz [ 172.738848][ T23] usb 1-1: config 0 descriptor?? [ 172.756821][ T23] usb 1-1: selecting invalid altsetting 0 [ 172.854513][ T7205] syzkaller0: entered promiscuous mode [ 172.861825][ T7205] syzkaller0: entered allmulticast mode [ 173.618459][ T7218] tipc: Enabled bearer , priority 0 [ 173.649711][ T7218] syzkaller0: entered promiscuous mode [ 173.661834][ T7218] syzkaller0: entered allmulticast mode [ 173.718446][ T7218] tipc: Resetting bearer [ 173.735804][ T7217] tipc: Resetting bearer [ 173.782951][ T7217] tipc: Disabling bearer [ 174.074973][ T7231] syzkaller0: entered promiscuous mode [ 174.080653][ T7231] syzkaller0: entered allmulticast mode [ 174.089717][ T7230] syzkaller0: entered promiscuous mode [ 174.095715][ T7230] syzkaller0: entered allmulticast mode [ 175.064181][ T7258] Bluetooth: MGMT ver 1.22 [ 175.221814][ T5837] usb 1-1: USB disconnect, device number 8 [ 175.412295][ T5790] Bluetooth: hci3: ACL packet for unknown connection handle 1 [ 176.361613][ T5837] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 176.543990][ T5837] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 176.557388][ T5837] usb 4-1: config 0 interface 0 has no altsetting 0 [ 176.580140][ T5837] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 176.600936][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 176.609901][ T5837] usb 4-1: Product: syz [ 176.619270][ T5837] usb 4-1: Manufacturer: syz [ 176.624356][ T5837] usb 4-1: SerialNumber: syz [ 176.636487][ T5837] usb 4-1: config 0 descriptor?? [ 176.647248][ T5837] usb 4-1: selecting invalid altsetting 0 [ 177.234137][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'. [ 177.794610][ T5790] Bluetooth: hci0: ACL packet for unknown connection handle 1 [ 178.654563][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.498'. [ 178.933633][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'. [ 178.942921][ T7347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.500'. [ 178.952995][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'. [ 178.964311][ T7347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.500'. [ 179.178162][ T5875] usb 4-1: USB disconnect, device number 8 [ 179.352318][ T7355] tipc: Enabled bearer , priority 0 [ 179.412307][ T7355] syzkaller0: entered promiscuous mode [ 179.417870][ T7355] syzkaller0: entered allmulticast mode [ 179.497488][ T7361] tipc: Resetting bearer [ 179.521380][ T7364] netlink: 176 bytes leftover after parsing attributes in process `syz.1.508'. [ 179.541431][ T7364] netlink: 176 bytes leftover after parsing attributes in process `syz.1.508'. [ 179.560566][ T7353] tipc: Resetting bearer [ 179.629680][ T7353] tipc: Disabling bearer [ 179.672022][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'. [ 179.684655][ T7368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.510'. [ 179.858607][ T7370] syzkaller0: entered promiscuous mode [ 179.872775][ T7370] syzkaller0: entered allmulticast mode [ 179.886772][ T7374] Bluetooth: MGMT ver 1.22 [ 179.919189][ T7370] tipc: Enabled bearer , priority 0 [ 179.938214][ T7369] tipc: Resetting bearer [ 180.008685][ T7369] tipc: Disabling bearer [ 180.171780][ T9] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 180.382260][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 180.414203][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 180.435498][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 180.459212][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 180.473598][ T9] usb 3-1: Product: syz [ 180.477937][ T9] usb 3-1: Manufacturer: syz [ 180.484666][ T9] usb 3-1: SerialNumber: syz [ 180.502252][ T9] usb 3-1: config 0 descriptor?? [ 180.529767][ T9] usb 3-1: selecting invalid altsetting 0 [ 180.561035][ T7397] tipc: Enabled bearer , priority 0 [ 180.579665][ T7397] syzkaller0: entered promiscuous mode [ 180.588839][ T7397] syzkaller0: entered allmulticast mode [ 180.628697][ T7397] tipc: Resetting bearer [ 180.655310][ T7396] tipc: Resetting bearer [ 180.699771][ T7396] tipc: Disabling bearer [ 181.871064][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 182.020217][ T7424] wg1 speed is unknown, defaulting to 1000 [ 182.067221][ T9] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 182.076651][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.089174][ T9] usb 4-1: Product: syz [ 182.096780][ T7427] fuse: Bad value for 'fd' [ 182.096799][ T9] usb 4-1: Manufacturer: syz [ 182.110341][ T9] usb 4-1: SerialNumber: syz [ 182.122993][ T9] usb 4-1: config 0 descriptor?? [ 182.134967][ T9] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 009 [ 182.244479][ T7430] tipc: Enabling of bearer rejected, failed to enable media [ 182.553986][ T9] (null): failure reading functionality [ 182.574157][ T9] i2c i2c-1: failure reading functionality [ 182.588093][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 182.609676][ T9] usb 4-1: USB disconnect, device number 9 [ 182.963838][ T9] usb 3-1: USB disconnect, device number 9 [ 183.043194][ T7443] tipc: Enabled bearer , priority 0 [ 183.050931][ T7443] syzkaller0: entered promiscuous mode [ 183.059428][ T7443] syzkaller0: entered allmulticast mode [ 183.084495][ T7443] tipc: Resetting bearer [ 183.105510][ T7442] tipc: Resetting bearer [ 183.146999][ T7442] tipc: Disabling bearer [ 183.400514][ T7452] fuse: Bad value for 'fd' [ 183.448763][ T7454] syzkaller0: entered promiscuous mode [ 183.462463][ T7454] syzkaller0: entered allmulticast mode [ 183.519980][ T7456] tipc: Enabling of bearer rejected, failed to enable media [ 183.654480][ T7458] syzkaller0: entered promiscuous mode [ 183.671391][ T7458] syzkaller0: entered allmulticast mode [ 184.781685][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 184.841668][ T7474] syzkaller0: entered promiscuous mode [ 184.847225][ T7474] syzkaller0: entered allmulticast mode [ 184.991909][ T9] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 185.003200][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.021955][ T9] usb 1-1: Product: syz [ 185.026330][ T9] usb 1-1: Manufacturer: syz [ 185.030977][ T9] usb 1-1: SerialNumber: syz [ 185.039356][ T9] usb 1-1: config 0 descriptor?? [ 185.057103][ T9] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 009 [ 185.166839][ T7483] fuse: Bad value for 'fd' [ 185.287088][ T7486] syzkaller0: entered promiscuous mode [ 185.293011][ T7486] syzkaller0: entered allmulticast mode [ 185.674736][ T9] (null): failure reading functionality [ 185.698525][ T9] i2c i2c-1: failure reading functionality [ 185.723326][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 185.874669][ T9] usb 1-1: USB disconnect, device number 9 [ 186.624811][ T7500] syzkaller0: entered promiscuous mode [ 186.630408][ T7500] syzkaller0: entered allmulticast mode [ 186.650382][ T7502] netlink: set zone limit has 8 unknown bytes [ 186.731889][ T7502] __nla_validate_parse: 6 callbacks suppressed [ 186.731905][ T7502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.560'. [ 187.766469][ T7520] syzkaller0: entered promiscuous mode [ 187.802058][ T7520] syzkaller0: entered allmulticast mode [ 189.036119][ T5790] Bluetooth: hci2: ACL packet for unknown connection handle 1 [ 189.572303][ T7557] netlink: 40 bytes leftover after parsing attributes in process `syz.2.574'. [ 189.730519][ T7561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.576'. [ 189.898238][ T7564] syzkaller0: entered promiscuous mode [ 189.911769][ T7564] syzkaller0: entered allmulticast mode [ 190.057611][ T7569] netlink: 356 bytes leftover after parsing attributes in process `syz.0.581'. [ 190.096591][ T7573] syzkaller0: entered promiscuous mode [ 190.104036][ T7573] syzkaller0: entered allmulticast mode [ 190.121870][ T7573] tipc: Enabled bearer , priority 0 [ 190.157832][ T7573] tipc: Resetting bearer [ 190.179858][ T7570] tipc: Resetting bearer [ 190.246125][ T7570] tipc: Disabling bearer [ 190.320870][ T7576] syzkaller0: entered promiscuous mode [ 190.326568][ T7576] syzkaller0: entered allmulticast mode [ 191.462060][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.591'. [ 191.482135][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.591'. [ 191.506505][ T7600] syzkaller0: entered promiscuous mode [ 191.512552][ T7600] syzkaller0: entered allmulticast mode [ 191.549512][ T7601] syzkaller0: entered promiscuous mode [ 191.556330][ T7601] syzkaller0: entered allmulticast mode [ 191.726979][ T7607] tipc: Enabled bearer , priority 0 [ 191.849350][ T7601] tipc: Resetting bearer [ 191.874306][ T7598] tipc: Resetting bearer [ 192.465706][ T7598] tipc: Disabling bearer [ 192.929921][ T7632] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 192.941493][ T7631] IPVS: stopping master sync thread 7632 ... [ 192.971482][ T7631] netlink: 68 bytes leftover after parsing attributes in process `syz.0.604'. [ 192.986820][ T7634] syzkaller0: entered promiscuous mode [ 192.993261][ T7634] syzkaller0: entered allmulticast mode [ 194.053977][ T7653] syzkaller0: entered promiscuous mode [ 194.085166][ T7653] syzkaller0: entered allmulticast mode [ 194.140616][ T7653] tipc: Enabled bearer , priority 0 [ 194.245734][ T7653] tipc: Resetting bearer [ 194.275731][ T7652] tipc: Resetting bearer [ 194.336606][ T7652] tipc: Disabling bearer [ 194.404458][ T7664] fuse: Bad value for 'fd' [ 194.623259][ T7671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.617'. [ 194.703442][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.728371][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.943400][ T7693] fuse: Bad value for 'fd' [ 196.359379][ T7709] block nbd0: not configured, cannot reconfigure [ 196.362084][ T7711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.630'. [ 196.902878][ T7734] fuse: Bad value for 'fd' [ 197.811090][ T7748] syzkaller0: entered promiscuous mode [ 197.839221][ T7748] syzkaller0: entered allmulticast mode [ 197.897998][ T7748] tipc: Started in network mode [ 197.903030][ T7748] tipc: Node identity da6ead1352a1, cluster identity 4711 [ 197.910466][ T7748] tipc: Enabled bearer , priority 0 [ 197.972345][ T7748] tipc: Resetting bearer [ 198.007091][ T7745] tipc: Resetting bearer [ 198.086489][ T7745] tipc: Disabling bearer [ 198.548644][ T7767] syzkaller0: entered promiscuous mode [ 198.561662][ T7767] syzkaller0: entered allmulticast mode [ 198.598185][ T7767] tipc: Enabled bearer , priority 0 [ 198.629690][ T7766] tipc: Resetting bearer [ 198.703871][ T7766] tipc: Disabling bearer [ 199.394452][ T5790] Bluetooth: hci2: ACL packet for unknown connection handle 1 [ 199.843072][ T7798] netlink: 'syz.0.665': attribute type 13 has an invalid length. [ 199.850890][ T7798] netlink: 'syz.0.665': attribute type 17 has an invalid length. [ 199.922154][ T7798] gretap0: refused to change device tx_queue_len [ 199.929001][ T7798] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 200.308070][ T7812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.671'. [ 200.558463][ T7812] wg1 speed is unknown, defaulting to 1000 [ 200.979752][ T7816] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 201.878226][ T7829] syzkaller0: entered promiscuous mode [ 201.885155][ T7829] syzkaller0: entered allmulticast mode [ 201.897256][ T5954] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 201.917211][ T7829] tipc: Enabled bearer , priority 0 [ 201.943686][ T7829] tipc: Resetting bearer [ 201.967473][ T7828] tipc: Resetting bearer [ 201.995252][ T7828] tipc: Disabling bearer [ 202.098014][ T5954] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 202.114728][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.137279][ T5954] usb 2-1: Product: syz [ 202.147187][ T5954] usb 2-1: Manufacturer: syz [ 202.155600][ T5954] usb 2-1: SerialNumber: syz [ 202.173523][ T5954] usb 2-1: config 0 descriptor?? [ 202.194169][ T5954] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 005 [ 202.202879][ T7837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.679'. [ 202.410801][ T7843] netlink: 332 bytes leftover after parsing attributes in process `syz.0.682'. [ 202.423462][ T7843] netlink: 'syz.0.682': attribute type 9 has an invalid length. [ 202.457400][ T7843] netlink: 108 bytes leftover after parsing attributes in process `syz.0.682'. [ 202.497015][ T7843] netlink: 32 bytes leftover after parsing attributes in process `syz.0.682'. [ 202.549412][ T7845] syzkaller0: entered promiscuous mode [ 202.558449][ T7845] syzkaller0: entered allmulticast mode [ 202.591342][ T5954] (null): failure reading functionality [ 202.613699][ T5954] i2c i2c-1: failure reading functionality [ 202.625311][ T5954] i2c i2c-1: connected i2c-tiny-usb device [ 202.635524][ T5954] usb 2-1: USB disconnect, device number 5 [ 202.780493][ T7849] 0: reclassify loop, rule prio 0, protocol 800 [ 202.797582][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.684'. [ 203.448565][ T7865] syzkaller0: entered promiscuous mode [ 203.467544][ T7865] syzkaller0: entered allmulticast mode [ 203.606933][ T7872] syzkaller0: entered promiscuous mode [ 203.621551][ T7872] syzkaller0: entered allmulticast mode [ 203.803247][ T7875] syzkaller0: entered promiscuous mode [ 203.808809][ T7875] syzkaller0: entered allmulticast mode [ 203.843365][ T7875] tipc: Enabled bearer , priority 0 [ 203.860727][ T7874] tipc: Resetting bearer [ 203.948573][ T7874] tipc: Disabling bearer [ 204.428109][ T7889] tipc: Enabled bearer , priority 0 [ 204.519874][ T7889] tipc: Resetting bearer [ 204.719694][ T7888] tipc: Disabling bearer [ 205.210082][ T7902] vlan0: entered promiscuous mode [ 205.587122][ T7920] 0: reclassify loop, rule prio 0, protocol 800 [ 205.894397][ T7925] wg1 speed is unknown, defaulting to 1000 [ 206.548483][ T7931] syzkaller0: entered promiscuous mode [ 206.574577][ T7931] syzkaller0: entered allmulticast mode [ 206.598951][ T7931] tipc: Enabled bearer , priority 0 [ 206.617021][ T7931] tipc: Resetting bearer [ 206.627394][ T7930] tipc: Resetting bearer [ 206.657853][ T7930] tipc: Disabling bearer [ 206.745907][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 207.043824][ T23] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 207.053676][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.064698][ T23] usb 2-1: Product: syz [ 207.069022][ T23] usb 2-1: Manufacturer: syz [ 207.077054][ T23] usb 2-1: SerialNumber: syz [ 207.158179][ T23] usb 2-1: config 0 descriptor?? [ 207.196555][ T23] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 006 [ 207.778454][ T23] (null): failure reading functionality [ 207.791271][ T23] i2c i2c-1: failure reading functionality [ 208.189816][ T23] i2c i2c-1: connected i2c-tiny-usb device [ 208.528481][ T23] usb 2-1: USB disconnect, device number 6 [ 209.693378][ T7978] syzkaller0: entered promiscuous mode [ 209.698936][ T7978] syzkaller0: entered allmulticast mode [ 210.048825][ T7994] syzkaller0: entered promiscuous mode [ 210.112296][ T7994] syzkaller0: entered allmulticast mode [ 210.845895][ T8005] wg1 speed is unknown, defaulting to 1000 [ 210.972541][ T5844] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 211.200139][ T5844] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 211.220868][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.257262][ T5844] usb 1-1: Product: syz [ 211.280810][ T5844] usb 1-1: Manufacturer: syz [ 211.304138][ T5844] usb 1-1: SerialNumber: syz [ 211.356983][ T5844] usb 1-1: config 0 descriptor?? [ 211.408668][ T5844] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 010 [ 211.612754][ T8012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.742'. [ 211.792353][ T5844] (null): failure reading functionality [ 211.803333][ T5844] i2c i2c-1: failure reading functionality [ 211.837887][ T5844] i2c i2c-1: connected i2c-tiny-usb device [ 211.859642][ T5844] usb 1-1: USB disconnect, device number 10 [ 212.132424][ T5796] Bluetooth: hci2: command 0x0406 tx timeout [ 212.144796][ T5796] Bluetooth: hci1: command 0x0406 tx timeout [ 212.144811][ T5797] Bluetooth: hci0: command 0x0406 tx timeout [ 212.296993][ T8028] macvlan2: entered promiscuous mode [ 212.305281][ T8028] macvlan2: entered allmulticast mode [ 212.310722][ T8028] bond0: entered allmulticast mode [ 212.331242][ T8028] bond_slave_0: entered allmulticast mode [ 212.344293][ T8028] bond_slave_1: entered allmulticast mode [ 212.355749][ T8028] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 212.379298][ T8028] bond0: left allmulticast mode [ 212.397612][ T8028] bond_slave_0: left allmulticast mode [ 212.403744][ T8028] bond_slave_1: left allmulticast mode [ 212.583652][ T8038] syzkaller0: entered promiscuous mode [ 212.589440][ T8038] syzkaller0: entered allmulticast mode [ 212.630685][ T8038] tipc: Enabled bearer , priority 0 [ 212.648174][ T8038] tipc: Resetting bearer [ 212.678310][ T8037] tipc: Resetting bearer [ 212.732798][ T8037] tipc: Disabling bearer [ 212.927859][ T5794] Bluetooth: hci1: ACL packet for unknown connection handle 1 [ 214.919577][ T8090] wg1 speed is unknown, defaulting to 1000 [ 215.067518][ T8097] syzkaller0: entered promiscuous mode [ 215.080530][ T8097] syzkaller0: entered allmulticast mode [ 215.160906][ T8097] tipc: Enabled bearer , priority 0 [ 215.206173][ T8097] tipc: Resetting bearer [ 215.256794][ T8096] tipc: Resetting bearer [ 215.320159][ T8096] tipc: Disabling bearer [ 215.407401][ T8087] netlink: 32 bytes leftover after parsing attributes in process `syz.0.760'. [ 215.431257][ T8087] netlink: 32 bytes leftover after parsing attributes in process `syz.0.760'. [ 216.580575][ T8129] syzkaller0: entered promiscuous mode [ 216.587304][ T8129] syzkaller0: entered allmulticast mode [ 216.688214][ T8131] syzkaller0: entered promiscuous mode [ 216.693985][ T8131] syzkaller0: entered allmulticast mode [ 216.788399][ T8133] sit0: left promiscuous mode [ 216.878406][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.781'. [ 217.567513][ T8163] syzkaller0: entered promiscuous mode [ 217.573557][ T8163] syzkaller0: entered allmulticast mode [ 218.326482][ T8172] syzkaller0: entered promiscuous mode [ 218.341661][ T8172] syzkaller0: entered allmulticast mode [ 218.367354][ T8172] tipc: Enabled bearer , priority 0 [ 218.410045][ T8171] tipc: Resetting bearer [ 218.449569][ T8171] tipc: Disabling bearer [ 218.632966][ T8179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.796'. [ 218.767819][ T8183] tipc: Enabled bearer , priority 0 [ 218.783692][ T8182] tipc: Disabling bearer [ 219.299435][ T8198] syzkaller0: entered promiscuous mode [ 219.305278][ T8198] syzkaller0: entered allmulticast mode [ 219.326259][ T8198] tipc: Enabled bearer , priority 0 [ 219.366853][ T8197] tipc: Resetting bearer [ 219.392401][ T8197] tipc: Disabling bearer [ 219.751628][ T5875] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 219.769490][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'. [ 219.779281][ T8211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.810'. [ 219.797911][ T8211] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.806959][ T8211] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.815865][ T8211] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.824674][ T8211] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.865169][ T8213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.811'. [ 219.873542][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'. [ 219.883384][ T8211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.810'. [ 219.951646][ T5875] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 219.966251][ T5875] usb 2-1: config 0 interface 0 has no altsetting 0 [ 219.977658][ T5875] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 219.996754][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 220.005599][ T5875] usb 2-1: Product: syz [ 220.009849][ T5875] usb 2-1: Manufacturer: syz [ 220.016917][ T5875] usb 2-1: SerialNumber: syz [ 220.027237][ T5875] usb 2-1: config 0 descriptor?? [ 220.053136][ T5875] usb 2-1: selecting invalid altsetting 0 [ 220.233144][ T8221] syzkaller0: entered promiscuous mode [ 220.238975][ T8221] syzkaller0: entered allmulticast mode [ 220.334978][ T8221] tipc: Enabled bearer , priority 0 [ 220.470544][ T8220] tipc: Resetting bearer [ 220.509420][ T8225] siw: device registration error -23 [ 220.544105][ T8220] tipc: Disabling bearer [ 220.580282][ T8225] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 222.292187][ T8266] netlink: 32 bytes leftover after parsing attributes in process `syz.3.829'. [ 222.301288][ T8266] netlink: 32 bytes leftover after parsing attributes in process `syz.3.829'. [ 222.600844][ T5844] usb 2-1: USB disconnect, device number 7 [ 222.962780][ T5794] Bluetooth: hci2: ACL packet for unknown connection handle 1 [ 222.992297][ T8272] wg1 speed is unknown, defaulting to 1000 [ 223.668707][ T8288] syzkaller0: entered promiscuous mode [ 223.695925][ T8288] syzkaller0: entered allmulticast mode [ 223.781643][ T8292] syzkaller0: entered promiscuous mode [ 223.788237][ T8292] syzkaller0: entered allmulticast mode [ 223.806390][ T8293] tipc: Enabled bearer , priority 0 [ 223.816284][ T8293] syzkaller0: entered promiscuous mode [ 223.824454][ T8293] syzkaller0: entered allmulticast mode [ 223.852327][ T8292] tipc: Enabled bearer , priority 0 [ 223.935117][ T8291] tipc: Resetting bearer [ 223.980198][ T8291] tipc: Disabling bearer [ 223.993525][ T8293] tipc: Resetting bearer [ 224.016944][ T8290] tipc: Resetting bearer [ 224.055177][ T8290] tipc: Disabling bearer [ 224.084054][ T8305] netlink: 32 bytes leftover after parsing attributes in process `syz.0.849'. [ 224.178487][ T5844] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 224.285941][ T8315] netlink: 144 bytes leftover after parsing attributes in process `syz.3.853'. [ 224.403475][ T5844] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 224.424431][ T5794] Bluetooth: hci0: ACL packet for unknown connection handle 1 [ 224.476760][ T5844] usb 3-1: config 0 interface 0 has no altsetting 0 [ 224.710449][ T5844] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 224.749569][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 224.774055][ T5844] usb 3-1: Product: syz [ 224.778414][ T5844] usb 3-1: Manufacturer: syz [ 224.783790][ T5844] usb 3-1: SerialNumber: syz [ 224.835846][ T5844] usb 3-1: config 0 descriptor?? [ 224.885963][ T5844] usb 3-1: selecting invalid altsetting 0 [ 226.000663][ T8326] syzkaller0: entered promiscuous mode [ 226.006298][ T8326] syzkaller0: entered allmulticast mode [ 227.039324][ T5837] usb 3-1: USB disconnect, device number 10 [ 227.108494][ T8336] netlink: 32 bytes leftover after parsing attributes in process `syz.2.860'. [ 229.351993][ T8359] netlink: 124 bytes leftover after parsing attributes in process `syz.1.870'. [ 229.432850][ T5794] Bluetooth: hci0: ACL packet for unknown connection handle 1 [ 229.724227][ T9] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 230.006106][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 230.030399][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 230.046620][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 230.066426][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 230.085107][ T9] usb 3-1: Product: syz [ 230.089372][ T9] usb 3-1: Manufacturer: syz [ 230.104610][ T9] usb 3-1: SerialNumber: syz [ 230.122205][ T9] usb 3-1: config 0 descriptor?? [ 230.144633][ T9] usb 3-1: selecting invalid altsetting 0 [ 230.150893][ T8366] syzkaller0: entered promiscuous mode [ 230.176290][ T8366] syzkaller0: entered allmulticast mode [ 230.849685][ T8370] netlink: 32 bytes leftover after parsing attributes in process `syz.1.872'. [ 232.674477][ T5837] usb 3-1: USB disconnect, device number 11 [ 233.257816][ T5794] Bluetooth: hci1: ACL packet for unknown connection handle 1 [ 233.736453][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.883'. [ 233.990297][ T8423] tipc: Enabled bearer , priority 0 [ 234.004011][ T8423] syzkaller0: entered promiscuous mode [ 234.009551][ T8423] syzkaller0: entered allmulticast mode [ 234.063622][ T8423] tipc: Resetting bearer [ 234.101988][ T8421] tipc: Resetting bearer [ 234.167302][ T8421] tipc: Disabling bearer [ 234.359159][ T8433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.891'. [ 235.261371][ T8450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.895'. [ 235.297556][ T8452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.896'. [ 235.470303][ T5794] Bluetooth: hci0: ACL packet for unknown connection handle 1 [ 236.066848][ T8461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.901'. [ 236.201101][ T8464] tipc: Enabling of bearer rejected, failed to enable media [ 237.277621][ T8485] tipc: Enabled bearer , priority 0 [ 237.290604][ T8484] tipc: Disabling bearer [ 237.436135][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.911'. [ 237.460286][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.912'. [ 237.665172][ T5794] Bluetooth: hci1: ACL packet for unknown connection handle 1 [ 238.387131][ T8510] tipc: Enabling of bearer rejected, failed to enable media [ 238.720899][ T8528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.923'. [ 239.201942][ T5794] Bluetooth: hci2: ACL packet for unknown connection handle 1 [ 239.836566][ T8555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.931'. [ 239.933848][ T8560] tipc: Enabling of bearer rejected, failed to enable media [ 240.099374][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.934'. [ 240.733011][ T5794] Bluetooth: hci3: ACL packet for unknown connection handle 1 [ 241.501788][ T8597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.943'. [ 241.650220][ T8594] netlink: 32 bytes leftover after parsing attributes in process `syz.2.937'. [ 241.696268][ T8594] netlink: 32 bytes leftover after parsing attributes in process `syz.2.937'. [ 241.713033][ T5794] Bluetooth: hci3: link tx timeout [ 241.719215][ T5794] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 242.310072][ T5787] Bluetooth: hci0: ACL packet for unknown connection handle 1 [ 243.732613][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 244.182242][ T8655] netlink: 32 bytes leftover after parsing attributes in process `syz.3.958'. [ 244.191948][ T8655] netlink: 32 bytes leftover after parsing attributes in process `syz.3.958'. [ 244.198663][ T8668] wg1 speed is unknown, defaulting to 1000 [ 244.240769][ T8674] Set syz1 is full, maxelem 14 reached [ 244.396737][ T5794] Bluetooth: hci2: ACL packet for unknown connection handle 1 [ 245.225418][ T8686] tipc: Enabled bearer , priority 0 [ 245.249955][ T8684] tipc: Disabling bearer [ 245.339881][ T8683] syzkaller0: entered promiscuous mode [ 245.350224][ T8683] syzkaller0: entered allmulticast mode [ 247.916093][ T8710] tipc: Enabling of bearer rejected, failed to enable media [ 248.141400][ T5794] Bluetooth: hci1: ACL packet for unknown connection handle 1 [ 248.406176][ T8733] tipc: Enabled bearer , priority 0 [ 248.664795][ T8737] syzkaller0: entered promiscuous mode [ 248.696923][ T8737] syzkaller0: entered allmulticast mode [ 248.730629][ T8740] tipc: Resetting bearer [ 248.757086][ T8731] tipc: Resetting bearer [ 248.820493][ T8731] tipc: Disabling bearer [ 249.233363][ T8760] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 3, id = 0 [ 249.863125][ T8769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.990'. [ 250.477333][ T5794] Bluetooth: hci3: ACL packet for unknown connection handle 1 [ 250.617696][ T8771] syzkaller0: entered promiscuous mode [ 250.626669][ T8771] syzkaller0: entered allmulticast mode [ 250.844375][ T8776] syzkaller0: entered promiscuous mode [ 250.850079][ T8776] syzkaller0: entered allmulticast mode [ 254.609928][ T8789] tipc: Enabling of bearer rejected, failed to enable media [ 254.824719][ T8806] netlink: 48 bytes leftover after parsing attributes in process `syz.0.998'. [ 254.851972][ T8806] netlink: 48 bytes leftover after parsing attributes in process `syz.0.998'. [ 255.718521][ T8837] syzkaller0: entered promiscuous mode [ 255.724295][ T8837] syzkaller0: entered allmulticast mode [ 256.152601][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.159080][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.531763][ T8859] tipc: Enabling of bearer rejected, failed to enable media [ 259.938984][ T8885] tipc: Enabling of bearer rejected, failed to enable media [ 261.570901][ T8915] syzkaller0: entered promiscuous mode [ 261.576781][ T8915] syzkaller0: entered allmulticast mode [ 262.585584][ T8929] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1025'. [ 264.356191][ T8917] tipc: Enabled bearer , priority 0 [ 264.365228][ T8921] syzkaller0: entered promiscuous mode [ 264.370726][ T8921] syzkaller0: entered allmulticast mode [ 264.385088][ T8925] tipc: Resetting bearer [ 264.391322][ T8916] tipc: Resetting bearer [ 264.415773][ T8916] tipc: Disabling bearer [ 264.679611][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1029'. [ 264.690309][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1029'. [ 264.862366][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1029'. [ 264.883088][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1029'. [ 266.220415][ T8962] wg1 speed is unknown, defaulting to 1000 [ 266.261370][ T8964] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1035'. [ 266.482667][ T8965] syzkaller0: entered promiscuous mode [ 266.501588][ T8965] syzkaller0: entered allmulticast mode [ 268.658058][ T8968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1035'. [ 268.751646][ T8968] hsr_slave_1 (unregistering): left promiscuous mode [ 269.182099][ T8959] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.190492][ T8959] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.615383][ T8959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.655483][ T8959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.925657][ T8959] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.935802][ T8959] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.945279][ T8959] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.960101][ T8959] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.025038][ T8959] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.034177][ T8959] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.043338][ T8959] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.052405][ T8959] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.157519][ T8994] tipc: Enabling of bearer rejected, failed to enable media [ 270.693432][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1045'. [ 271.561841][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1048'. [ 271.570877][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1048'. [ 271.677728][ T9046] tipc: Enabled bearer , priority 0 [ 271.705530][ T9046] syzkaller0: entered promiscuous mode [ 271.726047][ T9046] syzkaller0: entered allmulticast mode [ 271.752132][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1048'. [ 271.761207][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1048'. [ 271.796879][ T9046] tipc: Resetting bearer [ 271.831924][ T9045] tipc: Resetting bearer [ 271.900787][ T9045] tipc: Disabling bearer [ 272.428842][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'. [ 273.376543][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'. [ 273.395464][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1061'. [ 273.485974][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'. [ 273.496512][ T9081] tipc: Enabled bearer , priority 0 [ 273.509043][ T9081] syzkaller0: entered promiscuous mode [ 273.515629][ T9081] syzkaller0: entered allmulticast mode [ 273.560455][ T9081] tipc: Resetting bearer [ 273.598616][ T9080] tipc: Resetting bearer [ 273.655427][ T9080] tipc: Disabling bearer [ 274.257518][ T9092] __nla_validate_parse: 1 callbacks suppressed [ 274.257537][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 274.328892][ T9093] syzkaller0: entered promiscuous mode [ 274.336225][ T9093] syzkaller0: entered allmulticast mode [ 275.419190][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'. [ 275.428916][ T9114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1074'. [ 275.553807][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'. [ 275.576532][ T9114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1074'. [ 275.721144][ T9123] pim6reg1: entered promiscuous mode [ 275.741695][ T9123] pim6reg1: entered allmulticast mode [ 276.021340][ T9131] syzkaller0: entered promiscuous mode [ 276.028960][ T9131] syzkaller0: entered allmulticast mode [ 276.630682][ T9138] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1081'. [ 278.051763][ T9154] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1087'. [ 278.065388][ T9154] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1087'. [ 278.090085][ T9154] team0: entered promiscuous mode [ 278.099366][ T9154] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 278.144514][ T9153] wg1 speed is unknown, defaulting to 1000 [ 278.146303][ T9156] tipc: Enabled bearer , priority 0 [ 278.187682][ T9155] tipc: Disabling bearer [ 278.891233][ T9174] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1095'. [ 279.579482][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1097'. [ 279.599379][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1097'. [ 279.789763][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1097'. [ 279.807265][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1097'. [ 280.543980][ T9196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1101'. [ 282.214407][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 282.232981][ T9222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1110'. [ 282.347076][ T9225] syzkaller0: entered promiscuous mode [ 282.355960][ T9225] syzkaller0: entered allmulticast mode [ 282.365744][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 282.379983][ T9222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1110'. [ 284.457984][ T9240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1113'. [ 284.764876][ T9253] wg1 speed is unknown, defaulting to 1000 [ 285.055189][ T9257] syzkaller0: entered promiscuous mode [ 285.060897][ T9257] syzkaller0: entered allmulticast mode [ 285.191930][ T9263] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1121'. [ 287.438370][ T9275] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1124'. [ 287.481090][ T9277] syzkaller0: entered promiscuous mode [ 287.490762][ T9277] syzkaller0: entered allmulticast mode [ 287.543117][ T9274] tipc: Enabled bearer , priority 0 [ 287.636220][ T9273] tipc: Disabling bearer [ 287.805216][ T9282] tipc: Enabled bearer , priority 0 [ 287.840677][ T9282] tipc: Resetting bearer [ 287.937729][ T9281] tipc: Disabling bearer [ 287.956559][ T9287] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1125'. [ 287.988226][ T9287] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1125'. [ 288.525558][ T9298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1136'. [ 288.616403][ T9299] syzkaller0: entered promiscuous mode [ 288.622350][ T9299] syzkaller0: entered allmulticast mode [ 288.639324][ T9302] syzkaller0: entered promiscuous mode [ 288.646381][ T9302] syzkaller0: entered allmulticast mode [ 290.656329][ T9312] tipc: Enabling of bearer rejected, failed to enable media [ 291.549967][ T9323] syzkaller0: entered promiscuous mode [ 291.558083][ T9323] syzkaller0: entered allmulticast mode [ 292.448330][ T9343] syzkaller0: entered promiscuous mode [ 292.454182][ T9343] syzkaller0: entered allmulticast mode [ 292.598468][ T9345] syzkaller0: entered promiscuous mode [ 292.604503][ T9345] syzkaller0: entered allmulticast mode [ 292.634455][ T9345] tipc: Enabled bearer , priority 0 [ 292.658072][ T9344] tipc: Resetting bearer [ 292.716919][ T9344] tipc: Disabling bearer [ 293.170176][ T5787] Bluetooth: hci3: ACL packet for unknown connection handle 1 [ 293.571738][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 294.167131][ T9376] syzkaller0: entered promiscuous mode [ 294.172947][ T9376] syzkaller0: entered allmulticast mode [ 294.757680][ T9386] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1166'. [ 294.770577][ T9386] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1166'. [ 295.262120][ T5787] Bluetooth: hci3: ACL packet for unknown connection handle 1 [ 295.851401][ T9401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1171'. [ 295.891331][ T9401] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1171'. [ 296.492775][ T9420] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1180'. [ 297.756462][ T9449] netlink: 'syz.0.1186': attribute type 3 has an invalid length. [ 297.816624][ T9448] syz_tun: entered allmulticast mode [ 297.849150][ T9448] siw: device registration error -23 [ 297.901299][ T9448] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.908653][ T9448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.917549][ T9448] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.924867][ T9448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.076468][ T9448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 298.533837][ T9447] syz_tun: left allmulticast mode [ 298.924692][ T9472] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1193'. [ 300.688493][ T9512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1204'. [ 300.848545][ T9518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1205'. [ 301.076987][ T9524] syzkaller0: entered promiscuous mode [ 301.083034][ T9524] syzkaller0: entered allmulticast mode [ 301.395735][ T9537] syzkaller0: entered promiscuous mode [ 301.403589][ T9537] syzkaller0: entered allmulticast mode [ 303.982936][ T9554] ip6erspan0: entered allmulticast mode [ 304.008918][ T9553] wg1 speed is unknown, defaulting to 1000 [ 304.480390][ T9582] syzkaller0: entered promiscuous mode [ 304.495044][ T9582] syzkaller0: entered allmulticast mode [ 304.999768][ T9593] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1231'. [ 305.009127][ T9593] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1231'. [ 305.180624][ T9596] syzkaller0: entered promiscuous mode [ 305.186302][ T9596] syzkaller0: entered allmulticast mode [ 308.054186][ T9648] syzkaller0: entered promiscuous mode [ 308.059755][ T9648] syzkaller0: entered allmulticast mode [ 308.983653][ T9662] syzkaller0: entered promiscuous mode [ 308.989222][ T9662] syzkaller0: entered allmulticast mode [ 309.000392][ T9665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1248'. [ 310.777267][ T9692] syzkaller0: entered promiscuous mode [ 310.803976][ T9692] syzkaller0: entered allmulticast mode [ 310.821871][ T9698] tipc: Enabling of bearer rejected, failed to enable media [ 310.951195][ T9696] syzkaller0: entered promiscuous mode [ 310.965051][ T9696] syzkaller0: entered allmulticast mode [ 311.584150][ T9728] tipc: Enabled bearer , priority 0 [ 311.623025][ T9728] tipc: Resetting bearer [ 311.951921][ T9727] tipc: Disabling bearer [ 313.166038][ T9751] syzkaller0: entered promiscuous mode [ 313.194150][ T9751] syzkaller0: entered allmulticast mode [ 313.428690][ T9761] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1271'. [ 314.495248][ T9774] wg1 speed is unknown, defaulting to 1000 [ 315.012718][ T8991] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 315.203972][ T8991] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 315.231804][ T8991] usb 4-1: config 0 interface 0 has no altsetting 0 [ 315.258286][ T8991] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 315.281658][ T8991] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 315.290679][ T8991] usb 4-1: Product: syz [ 315.309565][ T8991] usb 4-1: Manufacturer: syz [ 315.312497][ T9807] syzkaller0: entered promiscuous mode [ 315.322016][ T8991] usb 4-1: SerialNumber: syz [ 315.335299][ T8991] usb 4-1: config 0 descriptor?? [ 315.350432][ T9807] syzkaller0: entered allmulticast mode [ 315.363441][ T8991] usb 4-1: selecting invalid altsetting 0 [ 315.628862][ T9819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1282'. [ 315.671529][ T9819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1282'. [ 317.579105][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.585984][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.769297][ T9860] tipc: Enabling of bearer rejected, failed to enable media [ 317.799390][ T5900] usb 4-1: USB disconnect, device number 10 [ 318.576746][ T9883] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1299'. [ 321.295188][ T9909] tipc: Enabling of bearer rejected, failed to enable media [ 321.881028][ T9924] tipc: Enabling of bearer rejected, failed to enable media [ 322.821200][ T9952] syzkaller0: entered promiscuous mode [ 322.839834][ T9952] syzkaller0: entered allmulticast mode [ 322.942342][ T9956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1315'. [ 322.960222][ T9954] tipc: Enabled bearer , priority 0 [ 322.993767][ T9954] tipc: Resetting bearer [ 323.088761][ T9953] tipc: Disabling bearer [ 323.555922][ T9969] tipc: Enabled bearer , priority 0 [ 323.606861][ T9969] tipc: Resetting bearer [ 323.689049][ T9968] tipc: Disabling bearer [ 323.837501][ T9975] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1324'. [ 323.963006][ T9977] syzkaller0: entered promiscuous mode [ 323.988213][ T9977] syzkaller0: entered allmulticast mode [ 324.403097][ T9987] tipc: Enabled bearer , priority 0 [ 324.467182][ T9987] tipc: Resetting bearer [ 324.511792][ T9986] tipc: Disabling bearer [ 325.053102][ T9998] tipc: Enabled bearer , priority 0 [ 326.185751][ T8991] tipc: Node number set to 2295311635 [ 327.100996][T10002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1335'. [ 327.130923][T10013] tipc: Resetting bearer [ 327.230676][ T9997] tipc: Disabling bearer [ 327.330037][T10026] syzkaller0: entered promiscuous mode [ 327.360308][T10026] syzkaller0: entered allmulticast mode [ 327.522072][T10029] wg1 speed is unknown, defaulting to 1000 [ 327.931135][T10037] syzkaller0: entered promiscuous mode [ 327.937057][T10037] syzkaller0: entered allmulticast mode [ 328.789332][T10046] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1345'. [ 329.115034][ T36] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 332.472797][T10094] syzkaller0: entered promiscuous mode [ 332.478463][T10094] syzkaller0: entered allmulticast mode [ 335.293158][T10107] tipc: New replicast peer: 255.255.255.32 [ 335.299519][T10107] tipc: Enabled bearer , priority 10 [ 335.325527][T10108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1356'. [ 335.350657][T10108] tipc: Disabling bearer [ 336.054233][ T5787] Bluetooth: hci1: ACL packet for unknown connection handle 1 [ 336.200617][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1362'. [ 338.373594][T10143] syzkaller0: entered promiscuous mode [ 338.379165][T10143] syzkaller0: entered allmulticast mode [ 338.570369][T10155] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 339.936320][ T5787] Bluetooth: hci1: ACL packet for unknown connection handle 1 [ 343.074819][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1394'. [ 344.002566][T10242] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1397'. [ 345.424838][T10273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1408'. [ 345.673123][T10277] syzkaller0: entered promiscuous mode [ 345.678783][T10277] syzkaller0: entered allmulticast mode [ 346.555055][T10305] netlink: 83 bytes leftover after parsing attributes in process `syz.3.1417'. [ 346.587429][T10306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1419'. [ 346.883144][T10312] syzkaller0: entered promiscuous mode [ 346.889101][T10312] syzkaller0: entered allmulticast mode [ 346.972136][T10313] syzkaller0: entered promiscuous mode [ 346.977913][T10313] syzkaller0: entered allmulticast mode [ 347.207501][T10323] tipc: Enabled bearer , priority 0 [ 347.225249][T10323] tipc: Resetting bearer [ 347.272530][T10322] tipc: Disabling bearer [ 347.519549][T10333] (null): rxe_set_mtu: Set mtu to 1024 [ 347.831197][T10339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1432'. [ 347.918209][T10333] infiniband syz2: set active [ 347.924854][T10333] infiniband syz2: added veth1_virt_wifi [ 348.004180][T10333] RDS/IB: syz2: added [ 348.012451][T10333] smc: adding ib device syz2 with port count 1 [ 348.018975][T10333] smc: ib device syz2 port 1 has pnetid [ 348.200296][T10346] syzkaller0: entered promiscuous mode [ 348.208134][T10346] syzkaller0: entered allmulticast mode [ 348.757621][ T1320] [ 348.760023][ T1320] ============================================ [ 348.766168][ T1320] WARNING: possible recursive locking detected [ 348.772327][ T1320] syzkaller #0 Not tainted [ 348.776736][ T1320] -------------------------------------------- [ 348.782878][ T1320] kworker/u4:5/1320 is trying to acquire lock: [ 348.789023][ T1320] ffffc9000419b0d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x1c8/0x5a0 [ 348.798614][ T1320] [ 348.798614][ T1320] but task is already holding lock: [ 348.805979][ T1320] ffffc90004e110d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x1c8/0x5a0 [ 348.815641][ T1320] [ 348.815641][ T1320] other info that might help us debug this: [ 348.823703][ T1320] Possible unsafe locking scenario: [ 348.823703][ T1320] [ 348.831147][ T1320] CPU0 [ 348.834421][ T1320] ---- [ 348.837696][ T1320] lock(&rb->spinlock); [ 348.841939][ T1320] lock(&rb->spinlock); [ 348.846206][ T1320] [ 348.846206][ T1320] *** DEADLOCK *** [ 348.846206][ T1320] [ 348.854611][ T1320] May be due to missing lock nesting notation [ 348.854611][ T1320] [ 348.862931][ T1320] 7 locks held by kworker/u4:5/1320: [ 348.868206][ T1320] #0: ffff888017871538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 348.879865][ T1320] #1: ffffc90004f8fd00 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 348.894566][ T1320] #2: ffff88807e061250 (&devlink->lock_key#4){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x57/0xb00 [ 348.905454][ T1320] #3: ffff88805eb418e0 (&nsim_trap_data->trap_lock){+.+.}-{2:2}, at: nsim_dev_trap_report_work+0x1a5/0xb00 [ 348.916941][ T1320] #4: ffffffff8cd2fee0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0xf4/0x400 [ 348.926251][ T1320] #5: ffffc90004e110d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x1c8/0x5a0 [ 348.936264][ T1320] #6: ffffffff8cd2fee0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0xde/0x3c0 [ 348.945575][ T1320] [ 348.945575][ T1320] stack backtrace: [ 348.951469][ T1320] CPU: 0 PID: 1320 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 348.959015][ T1320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 348.969076][ T1320] Workqueue: events_unbound nsim_dev_trap_report_work [ 348.975879][ T1320] Call Trace: [ 348.979162][ T1320] [ 348.982114][ T1320] dump_stack_lvl+0x16c/0x230 [ 348.986806][ T1320] ? show_regs_print_info+0x20/0x20 [ 348.992031][ T1320] ? print_deadlock_bug+0x435/0x5d0 [ 348.997240][ T1320] __lock_acquire+0x5d40/0x7c80 [ 349.002110][ T1320] ? verify_lock_unused+0x140/0x140 [ 349.007317][ T1320] ? mark_lock+0x94/0x320 [ 349.011657][ T1320] ? mark_lock+0x94/0x320 [ 349.015991][ T1320] ? __lock_acquire+0x1260/0x7c80 [ 349.021022][ T1320] lock_acquire+0x197/0x410 [ 349.025538][ T1320] ? __bpf_ringbuf_reserve+0x1c8/0x5a0 [ 349.031014][ T1320] ? read_lock_is_recursive+0x20/0x20 [ 349.036383][ T1320] ? __lock_acquire+0x1334/0x7c80 [ 349.041497][ T1320] ? verify_lock_unused+0x140/0x140 [ 349.046700][ T1320] _raw_spin_lock_irqsave+0xa8/0xf0 [ 349.051901][ T1320] ? __bpf_ringbuf_reserve+0x1c8/0x5a0 [ 349.057365][ T1320] ? _raw_spin_lock+0x40/0x40 [ 349.062077][ T1320] __bpf_ringbuf_reserve+0x1c8/0x5a0 [ 349.067372][ T1320] ? bpf_ringbuf_notify+0x30/0x30 [ 349.072501][ T1320] ? __cant_sleep+0x210/0x210 [ 349.077188][ T1320] bpf_ringbuf_reserve+0x5c/0x70 [ 349.082136][ T1320] bpf_prog_fe0ed97373b08409+0x2d/0x4a [ 349.087607][ T1320] bpf_trace_run2+0x1d1/0x3c0 [ 349.092290][ T1320] ? deref_stack_reg+0x1bd/0x240 [ 349.097235][ T1320] ? bpf_trace_run2+0xde/0x3c0 [ 349.102020][ T1320] ? bpf_trace_run1+0x3b0/0x3b0 [ 349.106871][ T1320] ? __bpf_trace_contention_end+0xce/0x130 [ 349.112708][ T1320] __bpf_trace_contention_end+0xdd/0x130 [ 349.118374][ T1320] ? __bpf_trace_contention_begin+0x130/0x130 [ 349.124457][ T1320] ? verify_lock_unused+0x140/0x140 [ 349.129660][ T1320] trace_contention_end+0xe6/0x110 [ 349.134774][ T1320] __pv_queued_spin_lock_slowpath+0x7ec/0x9d0 [ 349.140875][ T1320] ? __pv_queued_spin_unlock_slowpath+0x2a0/0x2a0 [ 349.147301][ T1320] do_raw_spin_lock+0x24e/0x2c0 [ 349.152175][ T1320] ? __rwlock_init+0x150/0x150 [ 349.156943][ T1320] ? kasan_save_free_info+0x2e/0x50 [ 349.162144][ T1320] ? slab_free_freelist_hook+0x130/0x1b0 [ 349.167779][ T1320] ? __kmem_cache_free+0xba/0x1f0 [ 349.172813][ T1320] _raw_spin_lock_irqsave+0xb4/0xf0 [ 349.178021][ T1320] ? _raw_spin_lock+0x40/0x40 [ 349.182730][ T1320] __bpf_ringbuf_reserve+0x1c8/0x5a0 [ 349.188032][ T1320] ? bpf_ringbuf_notify+0x30/0x30 [ 349.193069][ T1320] ? __cant_sleep+0x210/0x210 [ 349.197749][ T1320] ? lockdep_hardirqs_on+0x98/0x150 [ 349.202951][ T1320] bpf_ringbuf_reserve+0x5c/0x70 [ 349.207901][ T1320] bpf_prog_fe0ed97373b08409+0x2d/0x4a [ 349.213473][ T1320] bpf_trace_run3+0x1e7/0x400 [ 349.218199][ T1320] ? skb_release_data+0x634/0x800 [ 349.223242][ T1320] ? bpf_trace_run3+0xf4/0x400 [ 349.228030][ T1320] ? bpf_trace_run2+0x3c0/0x3c0 [ 349.232882][ T1320] ? nsim_dev_trap_report_work+0x76f/0xb00 [ 349.238694][ T1320] ? skb_release_data+0x634/0x800 [ 349.243726][ T1320] ? nsim_dev_trap_report_work+0x76f/0xb00 [ 349.249536][ T1320] kmem_cache_free+0x1e0/0x280 [ 349.254347][ T1320] nsim_dev_trap_report_work+0x76f/0xb00 [ 349.259988][ T1320] ? process_scheduled_works+0x957/0x15b0 [ 349.265711][ T1320] process_scheduled_works+0xa45/0x15b0 [ 349.271273][ T1320] ? assign_work+0x400/0x400 [ 349.275960][ T1320] ? assign_work+0x39e/0x400 [ 349.280567][ T1320] worker_thread+0xa55/0xfc0 [ 349.285175][ T1320] kthread+0x2fa/0x390 [ 349.289245][ T1320] ? pr_cont_work+0x560/0x560 [ 349.293926][ T1320] ? kthread_blkcg+0xd0/0xd0 [ 349.298512][ T1320] ret_from_fork+0x48/0x80 [ 349.302932][ T1320] ? kthread_blkcg+0xd0/0xd0 [ 349.307521][ T1320] ret_from_fork_asm+0x11/0x20 [ 349.312328][ T1320] [ 349.369121][T10352] syz.0.1437: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 349.387315][T10352] CPU: 0 PID: 10352 Comm: syz.0.1437 Not tainted syzkaller #0 [ 349.394831][T10352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 349.404921][T10352] Call Trace: [ 349.408231][T10352] [ 349.411191][T10352] dump_stack_lvl+0x16c/0x230 [ 349.415913][T10352] ? load_image+0x3b0/0x3b0 [ 349.420641][T10352] ? show_regs_print_info+0x20/0x20 [ 349.425897][T10352] ? load_image+0x3b0/0x3b0 [ 349.430442][T10352] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 349.436925][T10352] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 349.443390][T10352] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 349.449944][T10352] warn_alloc+0x210/0x300 [ 349.454321][T10352] ? zone_watermark_ok_safe+0x230/0x230 [ 349.459909][T10352] ? _raw_spin_unlock+0x28/0x40 [ 349.464814][T10352] __vmalloc_node_range+0x662/0x1320 [ 349.470172][T10352] ? __alloc_pages+0xa1/0x460 [ 349.474914][T10352] ? free_vm_area+0x50/0x50 [ 349.479464][T10352] ? packet_set_ring+0x712/0x2380 [ 349.484538][T10352] vzalloc+0x79/0x90 [ 349.488471][T10352] ? packet_set_ring+0x712/0x2380 [ 349.493551][T10352] packet_set_ring+0x712/0x2380 [ 349.498445][T10352] ? packet_mmap+0x4e0/0x4e0 [ 349.503061][T10352] ? __lock_acquire+0x7c80/0x7c80 [ 349.508137][T10352] ? __local_bh_enable_ip+0x12e/0x1c0 [ 349.513540][T10352] ? lockdep_hardirqs_on+0x98/0x150 [ 349.518762][T10352] ? __might_fault+0xaa/0x120 [ 349.523468][T10352] ? __might_fault+0xc6/0x120 [ 349.528172][T10352] ? __might_fault+0xaa/0x120 [ 349.532873][T10352] ? _copy_from_user+0xa5/0xe0 [ 349.537675][T10352] packet_setsockopt+0xc58/0x12a0 [ 349.542739][T10352] ? packet_ioctl+0x340/0x340 [ 349.547459][T10352] ? aa_sk_perm+0x7fc/0x930 [ 349.552005][T10352] ? aa_af_perm+0x2b0/0x2b0 [ 349.556549][T10352] ? __fget_files+0x28/0x4d0 [ 349.561172][T10352] ? aa_sock_opt_perm+0x74/0x100 [ 349.566142][T10352] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 349.571743][T10352] ? security_socket_setsockopt+0x7e/0xa0 [ 349.577514][T10352] ? packet_ioctl+0x340/0x340 [ 349.582232][T10352] do_sock_setsockopt+0x175/0x1a0 [ 349.587314][T10352] ? __fdget+0x180/0x210 [ 349.591598][T10352] __x64_sys_setsockopt+0x184/0x200 [ 349.596847][T10352] do_syscall_64+0x55/0xb0 [ 349.601304][T10352] ? clear_bhb_loop+0x40/0x90 [ 349.606016][T10352] ? clear_bhb_loop+0x40/0x90 [ 349.610731][T10352] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 349.616667][T10352] RIP: 0033:0x7fe1d3d8f6c9 [ 349.621112][T10352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.640749][T10352] RSP: 002b:00007fe1d4bbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 349.649210][T10352] RAX: ffffffffffffffda RBX: 00007fe1d3fe5fa0 RCX: 00007fe1d3d8f6c9 [ 349.657221][T10352] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 [ 349.665239][T10352] RBP: 00007fe1d3e11f91 R08: 000000000000001c R09: 0000000000000000 [ 349.673247][T10352] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 349.681254][T10352] R13: 00007fe1d3fe6038 R14: 00007fe1d3fe5fa0 R15: 00007ffde5afa678 [ 349.689322][T10352] [ 349.722425][T10352] Mem-Info: [ 349.725702][T10352] active_anon:7693 inactive_anon:0 isolated_anon:0 [ 349.725702][T10352] active_file:1240 inactive_file:39993 isolated_file:0 [ 349.725702][T10352] unevictable:1443 dirty:51 writeback:0 [ 349.725702][T10352] slab_reclaimable:9926 slab_unreclaimable:100114 [ 349.725702][T10352] mapped:24306 shmem:1361 pagetables:559 [ 349.725702][T10352] sec_pagetables:0 bounce:0 [ 349.725702][T10352] kernel_misc_reclaimable:0 [ 349.725702][T10352] free:1346490 free_pcp:11901 free_cma:0 [ 349.793590][T10352] Node 0 active_anon:30672kB inactive_anon:0kB active_file:4960kB inactive_file:159772kB unevictable:2436kB isolated(anon):0kB isolated(file):0kB mapped:97224kB dirty:200kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12144kB pagetables:2236kB sec_pagetables:0kB all_unreclaimable? no [ 349.830672][T10352] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 349.864117][T10352] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 349.896536][T10352] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 349.902709][T10352] Node 0 DMA32 free:1505608kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:21024kB inactive_anon:0kB active_file:4960kB inactive_file:158452kB unevictable:2436kB writepending:200kB present:3129332kB managed:2589600kB mlocked:952kB bounce:0kB free_pcp:7628kB local_pcp:7436kB free_cma:0kB [ 349.936192][T10352] lowmem_reserve[]: 0 0 1 1 1 [ 349.941014][T10352] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 349.968468][T10352] lowmem_reserve[]: 0 0 0 0 0 [ 349.973289][T10352] Node 1 Normal free:3895500kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19744kB local_pcp:8992kB free_cma:0kB [ 350.006147][T10352] lowmem_reserve[]: 0 0 0 0 0 [ 350.011042][T10352] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 350.024155][T10352] Node 0 DMA32: 651*4kB (UME) 632*8kB (UME) 308*16kB (UME) 387*32kB (UME) 99*64kB (UME) 54*128kB (UME) 19*256kB (UM) 12*512kB (UME) 4*1024kB (UME) 11*2048kB (UME) 349*4096kB (UM) = 1505356kB [ 350.043875][T10352] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 350.057347][T10352] Node 1 Normal: 277*4kB (UME) 61*8kB (UME) 37*16kB (UME) 124*32kB (UME) 33*64kB (UME) 9*128kB (UME) 4*256kB (UME) 2*512kB (UE) 1*1024kB (U) 2*2048kB (UE) 947*4096kB (M) = 3895500kB [ 350.075590][T10352] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 350.085202][T10352] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 350.094545][T10352] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 350.104156][T10352] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 350.113546][T10352] 42594 total pagecache pages [ 350.118264][T10352] 0 pages in swap cache [ 350.122453][T10352] Free swap = 124996kB [ 350.126624][T10352] Total swap = 124996kB [ 350.130775][T10352] 2097051 pages RAM [ 350.134641][T10352] 0 pages HighMem/MovableOnly [ 350.139328][T10352] 416137 pages reserved [ 350.143608][T10352] 0 pages cma reserved