last executing test programs: 2m6.15845123s ago: executing program 4 (id=4506): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, &(0x7f00000004c0), 0x8c, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000400)={&(0x7f0000000580)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), 0x0, 0x0, 0x2}) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000100)) 2m2.345163604s ago: executing program 4 (id=4516): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7b2d2bff, 0x4, 0x2bfe, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0x5, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x521}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x2200c0c4) 2m1.998749513s ago: executing program 4 (id=4517): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x4, 0x7ff, 0x4}}}}]}, 0x44}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) 2m1.747458122s ago: executing program 4 (id=4522): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000080)={@remote}, 0x14) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100000000000000", @ANYRES64, @ANYRES64, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="ecff000001"], 0x48}}, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000500)='\x00\xe7(\xe0\xd5c\xd0a\x16\xca\x03$\x18i\x15\xc6\xf3Sf\x8dS8\xb4\"\xc5\xaecF\xa4!\t\x1fxd\xae\xb4\x90\xd3\xe6\xa2\xfbli\xd0\xa6H\xd6\x1dO\"\xbc\xda\x80\xbd\xa2\xdb\xff\x00\x00{\\\xd7\xbc*M\xd6\xe1\xdb\xe4\x00\x1a\xa2\x8a\x01\b\xc5\xe2+\xe2\x1e\xe9$d\xac[Z\x17\xb2\xab\x81\a\xbe\x17\x84\xfd\xadL7\xca\xe5\x8f\xb2\x9fv=L', 0xff09) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0000000001"], 0x80}}, 0x0) close(0x4) 2m1.496740925s ago: executing program 4 (id=4527): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) openat$cgroup_devices(r1, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="390902000360000008001b0000000000080004"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) close(0x4) 2m1.11926978s ago: executing program 4 (id=4531): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x5, 0x6, 0x6}, 0x6b}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xd0}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r6, 0x1c}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a141b", 0x3e}], 0x1}, 0x8bb3a301eb085f) 1m46.124677823s ago: executing program 32 (id=4531): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x5, 0x6, 0x6}, 0x6b}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xd0}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r6, 0x1c}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a141b", 0x3e}], 0x1}, 0x8bb3a301eb085f) 1m22.898876325s ago: executing program 1 (id=4654): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, 0x20885}}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 1m22.210353592s ago: executing program 1 (id=4658): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000013c0)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000080204e0000", 0x58}], 0x1) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x98, 0x30, 0x9, 0x0, 0x0, {}, [{0x84, 0x1, [@m_bpf={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x45, 0x0, 0x4, 0x80000000}, {0x80, 0x3}, {0x0, 0xfd}, {0x4, 0x0, 0xfe, 0x10000000}, {0x0, 0x0, 0x0, 0xffffffff}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x1c, 0x2e, 0x9, 0x70bd27, 0x25dfdbff, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000002dc0), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000002e00)={[{0x2b, 'memory'}]}, 0x8) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x11) sendto$inet(r5, &(0x7f0000000180)="8b", 0x1, 0x101, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000011c0)={&(0x7f0000000080), 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9c1d459ef242e2c4}, 0x38) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x7c, 0xfffd, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "d482449a"}}}}}}, 0x0) 1m20.330734388s ago: executing program 1 (id=4665): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xc8, 0x355a, 0x401}}}}]}, 0x44}}, 0x0) 1m18.492411372s ago: executing program 1 (id=4669): unshare(0x26020400) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="180900000000000000000000000100001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f00000002c0)}, 0x20) 1m17.907990869s ago: executing program 1 (id=4670): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40c0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd30, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffd, 0x7, 0x5, 0x9, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) 1m6.202309134s ago: executing program 0 (id=4689): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x444, &(0x7f0000003140)={[{0x96, 0x4e00, "a13f27a944e784dd9360085bd04148578193088de9b31028931d495543d02336ef4ba803947589df000cedc290e6a8febfa5b9b526853e2c73a14c2c0949ffc1e6b53b67c8bd2a2500cf742be2574d3d687b72d07e44dda0614499875e41250c9b9ad8ee51775bcc4746c5d4f738ffd7643faba5f02e001776a8f9ccc194392437870f5e49057cccebac9c34bea978808807ecf485cb"}, {0x1f, 0x4e00, "f9eacd1abc6ef91f01df6e993373e8fcd933e4248dff4f921fac3c413dc99f"}, {0x3d, 0x4e00, "0c24e4b5f15f83f99e925babc89b91eb57ccdbdd86ab46950a24306f9fa0294a8e2c026ba2cb7cd30285c6de3e6d37346bde7aa52c00798552b4aba9ae"}, {0x3d, 0x4e00, "dd83e87fbd275849328a86db9236bd22b4365084d97e7659bcb54741a04b14036c4c73b7e844becfeeb3263cbe7f9da271983bfe547a0e08463055efd2"}, {0xbd, 0x4e00, "579ff1fd5ce2e857fa5e6d8c981e06bbe2590b0d349c16ce5e03cd1cfa33ef73cf340f31278008de8e653a733b10dafadfdd0a6cbb272105aacf4da72e0145ab82bd39bafc8774783a5f80db3692e19e778dccede7202636f3140c10b9f1efd0f321623daa6aaaeca7b786f936c206c1d0f85d4b75b846ea8c25710e0f7ec8bacf22ddc34ca316f8bca4bbee79c8032548883e2502916067289820d31fe1765169f8db719dd9f1e143aa4d75baaaf0d58b3fc2271b302ce4b8f907b047"}, {0xf1, 0x4e00, "e3717bc68dc2a9b0c4eaa4016691fdc5babb6d56b8a5d68b2a5805dd4146367b51ced1e23b94d3e27ea13733cbbe845413088543465a5bdf8aa7103c31a7333f9ad59ab9d3593150f826be289bb6790a5409ec1575de0e75801e304153f9562a25e7f8efad4d5b465bb5e2e1607c038fbfb5188b91c4300df2929f8dce9084661ecb0314fab7632bb57b33af4db31bc4d6912bbcf85fb53d9afe798cf47c82beeae8764fb2a22287eef31e3a0ddf2e1cd227415ecbb81d3a29318458e83dcf4a6402f604f9e54da69762e8f1b955d452c0f2cffa4202f7490627bdbc31967395c4ba81ac76ac12f0aa6ca5650c80bb1635"}, {0x139, 0x4e00, "8ace76acf8cb465f88c4ad44855ec40689ca5f57a0f5e1e32b9d82e2c10de639feebee8d8adfbbefcf0ae99f715fb53b9f751e8504ce79d3328d482dab578d8129de07af11d6d4f50912801574270fc22e5d6451854ea969db9e1d157bc6ba4dde8405a4cf6d9cdb93fdf3d4c6136ebf1099fb5bb167fe75ae8c7aaac077660609108d9d552ef564e94f02779e5c4a60b2e3342f501f2b70021da21d1f7d2202fe9480a54d706435dfd91b75832818db480d38f86b052413833ea144f383834fb9f0e5f2c13a3541cea1ec063672864bc1fbc98f6bf793f917c929420d63c02006535167af8f20ba9a7fd57d2c89f6ca77708366a898f2c377110c52876f9396d248e4bf78b51efd6f8c0a565d1e23ce2377752e33f20109654995a6a1d0d37c4c745685c8af045face56da5c0855a894ff7a79348795884f2"}]}) 1m3.7738355s ago: executing program 1 (id=4693): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000200000000", @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='netdevsim0\x00'}) 1m1.932000769s ago: executing program 0 (id=4695): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000240)='%pB \x00'}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r4, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1m1.755821092s ago: executing program 0 (id=4696): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280)='\a', &(0x7f0000000300)=@udp6=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m1.287287392s ago: executing program 0 (id=4699): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000000)) 1m1.051954745s ago: executing program 0 (id=4701): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000006000000020000002c0084802800018008000100666962001c0002800800024000000001080001400000000008000340000000110900010073797a3000000000090002"], 0x80}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a3100"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1m0.87227659s ago: executing program 0 (id=4702): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f162", 0x11}], 0x1}}], 0x1, 0xc0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp\x00') pread64(r2, &(0x7f0000000000)=""/65, 0x41, 0x7bdb) 47.904827834s ago: executing program 33 (id=4693): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000200000000", @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='netdevsim0\x00'}) 47.167013728s ago: executing program 2 (id=4721): unshare(0x26020400) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000580)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f00000002c0)}, 0x20) 46.642963837s ago: executing program 2 (id=4722): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000040)="9584c7c8329ac91a1d071acd", 0xc}, {&(0x7f0000000080)="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", 0xfc}, {&(0x7f0000000180)="6ff77c505a6b7b006293ebe52424edb8e943ffef44687525ae0a6b2b3c3dac22f6d335639e2be9e99c96311608989ec2bf2994ad33e692208bdb6e13628b4e0d590b2e5fb70140f4dc012df1f6c01a1cffde6462f57eb229c4def8ad746c22b2682b2aed24f10bf1b90abc3df7be3e1bf07fbd48318ee5c1578291af23b32e60f8d0af23596f856b17d1a07e77a8efe64941e51fda15e8edb3d29f9a16558a7412ab3f537271d6359b78f8738793f4d25e282bd53c6bce954d8a4c41274be400d2785bc3873c86ca1f9d0a05459735b454eae5dfa8ad9351b1560d951e806e73412223f6ea46c75a90", 0xe9}, {&(0x7f0000000280)="ae68cc14c87904c5e7afc6bbc2c47edd90a7f64f1c38c35aec4ac4eeb75bdf701f0633c560461552f02eb0938d278560ac8cb53e737392f5e9011b21df50f1e2e5712b8d68706b9cbf2e1b5abdbaae400b76402d69846e0875bede36c519ee8ff527e99c090ef90848bf29", 0x6b}, {&(0x7f0000000300)="0aa85a82541503b1232663caacb642c902368621c7a2c1a5ce8898f5d265d174657de3b2579c1cd80e0df20863450a5019865689f7b376961e74c84ffbaec23fb1527cd19b5f1fa9611fcf07f1236f0766a80480b9ddb9e7088fc1df7112cba468b7fb", 0x63}, {&(0x7f0000000380)="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", 0xfa}, {&(0x7f0000000740)="f68baa96c4a346877f1e8c034a61b1e88a04c951f0cd139722cc5afee54e12d7e3b9cb067789c0fe099cc520145f62d667a860caa08a62089a977964904be53f6f3c18aa37e89aabf81193d5a10f4c6835e5cfa0befe69cf64d2544741ecbc7f98356e9434f1ebd0aebb10cf6b76a3d678491deeef6433e52fd2a98c48e09ee80d2ef078e32e9dfc656974da0c9c2a2863a46a885bc947038181a0fbda7a70a006c729852cb5451d26033014eeea0ddd003a0952bc0f87a3006bec560406507ec2571fbda63e9efe49a00dd208009fd4283578fb14bbd724553df55296cf87734846ee5a302e8bbcddd5ef1c59d820cd8ed54311f270f469ae797b7539dedfb237bf8e16d595939587a6520fa0826bf4a6698144d7a4264ade6dd0ee09ea0a7c7910aab84f19e7816d3e72086f9b328ff43489186c27e8dce1b662c713ad4edf208126e736d42091f78573e21b3f9c97c67c1921c87ad049e35485423249be0b6af6561b0a1b65a1f52a133e256b30ae7733235f1b45357ec3bb7f85624bde408ec22c3c7ffaccd033ca44ba3972eb70ce502cd58560524b9223f4f32cc5a3d4be0b218c73f9732f4077272845", 0x1ad}, {&(0x7f0000000580)="d7003e7421aaf49513ad8b514fd33b1589f1f8affd9601bcdf4db41c8a8da474a027f4d3fa8a800ccf936c827cb84afd969c118776472405da40f26c6c8ed2b87593994c50654d3c3c59e4ef0168c84564402721a15ffdc01b97816ad5f65edac609a411535cbd5f71c808c024ff65535b5b5d28452740e46753fad7b0c772a50b1be5547e82f3512a56513ae080613306a1a5664ef7e62941704d3cbae8593f13baf5dac8f89cf3fbba846927d87a1d129ae1fd30d51bec53d72497ab53de852894c31b6981eaf45a07a28f3a03d623581a42b0be43ff29ee0e248b07a56aeea64f38", 0xe3}], 0x8}, 0x4080) 46.46757658s ago: executing program 2 (id=4723): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r0, 0x0, 0x61000006, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$sock_SIOCETHTOOL(r2, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0xb, "2a16561edfd2f20ab3ed4a"}}) syz_emit_ethernet(0x1e, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@can={0xc, {{0x2, 0x0, 0x1, 0x1}, 0x3, 0x1, 0x0, 0x0, "15dc998c172fbd46"}}}}, 0x0) 45.565358651s ago: executing program 34 (id=4702): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f162", 0x11}], 0x1}}], 0x1, 0xc0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp\x00') pread64(r2, &(0x7f0000000000)=""/65, 0x41, 0x7bdb) 41.546107246s ago: executing program 2 (id=4729): ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000000)) 40.991838993s ago: executing program 2 (id=4730): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000080)={@remote}, 0x14) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64, @ANYRES64, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="ecff000001"], 0x48}}, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000500)='\x00\xe7(\xe0\xd5c\xd0a\x16\xca\x03$\x18i\x15\xc6\xf3Sf\x8dS8\xb4\"\xc5\xaecF\xa4!\t\x1fxd\xae\xb4\x90\xd3\xe6\xa2\xfbli\xd0\xa6H\xd6\x1dO\"\xbc\xda\x80\xbd\xa2\xdb\xff\x00\x00{\\\xd7\xbc*M\xd6\xe1\xdb\xe4\x00\x1a\xa2\x8a\x01\b\xc5\xe2+\xe2\x1e\xe9$d\xac[Z\x17\xb2\xab\x81\a\xbe\x17\x84\xfd\xadL7\xca\xe5\x8f\xb2\x9fv=L', 0xff09) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x80}}, 0x0) close(0x4) 40.107914988s ago: executing program 2 (id=4731): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007af000/0x3000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a4a000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 24.984460859s ago: executing program 35 (id=4731): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007af000/0x3000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a4a000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 22.198185918s ago: executing program 3 (id=4742): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="ae"], 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500070000000a0018"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x4000000, &(0x7f0000000380)={0x11, 0x888e, r8, 0x1, 0xd5, 0x6, @multicast}, 0x14) 20.19669903s ago: executing program 3 (id=4743): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x5c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x5, 0x4, 0xc}]}}}]}}]}, 0x5c}}, 0x110) 18.115561025s ago: executing program 3 (id=4744): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000440)={0x1f, 0x0, @any, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r1, r0, 0x8, 0x0, 0x0, 0x82, 0x8, 0x15c2, 0x5886, 0x801, 0x1, 0xa8, 'syz1\x00'}) 16.911569546s ago: executing program 3 (id=4745): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x42}, 0x48) close(r0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) shutdown(r1, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x10120, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15.776375915s ago: executing program 3 (id=4746): syz_emit_ethernet(0x3b3, &(0x7f0000000000)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x37d, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1700, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00&'}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x1, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x22, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fc07876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 15.659787158s ago: executing program 3 (id=4747): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r3) r4 = inotify_init1(0x80800) fcntl$setstatus(r3, 0x4, 0x2c00) r5 = gettid() fcntl$setown(r3, 0x8, r5) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') socket(0x2b, 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) 0s ago: executing program 36 (id=4747): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r3) r4 = inotify_init1(0x80800) fcntl$setstatus(r3, 0x4, 0x2c00) r5 = gettid() fcntl$setown(r3, 0x8, r5) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') socket(0x2b, 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): .234323][ T6899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.254750][ T6899] bond0 (unregistering): Released all slaves [ 451.260848][ T6899] bond1 (unregistering): Released all slaves [ 451.283587][ T6899] bond2 (unregistering): Released all slaves [ 451.301076][ T6899] bond3 (unregistering): Released all slaves [ 451.321212][ T6899] bond4 (unregistering): Released all slaves [ 451.429768][ T5253] 8021q: adding VLAN 0 to HW filter on device eth1 [ 451.575892][ T6899] tipc: Disabling bearer [ 451.576068][ T6899] tipc: Left network mode [ 451.828556][T15801] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.828670][T15801] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.828837][T15801] bridge_slave_0: entered allmulticast mode [ 451.832850][T15801] bridge_slave_0: entered promiscuous mode [ 451.836356][T15801] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.836464][T15801] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.836621][T15801] bridge_slave_1: entered allmulticast mode [ 451.840519][T15801] bridge_slave_1: entered promiscuous mode [ 451.993523][ T31] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 452.183049][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 452.185114][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 452.185158][ T31] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 452.185180][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.190326][ T31] usb 1-1: config 0 descriptor?? [ 452.463645][ T31] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 452.559691][T15994] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3774'. [ 452.588163][T15801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.722640][T15801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.064351][T15801] team0: Port device team_slave_0 added [ 453.096796][T15801] team0: Port device team_slave_1 added [ 453.497537][T15801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.497553][T15801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.497579][T15801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.551022][T15801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.551037][T15801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.551063][T15801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.763119][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 454.277883][ T5253] 8021q: adding VLAN 0 to HW filter on device eth2 [ 454.325138][T16036] syzkaller0: entered promiscuous mode [ 454.347030][T16036] syzkaller0: entered allmulticast mode [ 454.481113][T16048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3785'. [ 454.533474][T16049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3785'. [ 454.687158][ T5705] usb 1-1: USB disconnect, device number 17 [ 454.732177][T15801] hsr_slave_0: entered promiscuous mode [ 454.735760][T15801] hsr_slave_1: entered promiscuous mode [ 455.091866][T16055] bridge_slave_0 (unregistering): left allmulticast mode [ 455.091897][T16055] bridge_slave_0 (unregistering): left promiscuous mode [ 455.092000][T16055] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.473005][ T5725] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 455.656955][ T5725] usb 1-1: Using ep0 maxpacket: 8 [ 455.673911][ T5725] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 455.673947][ T5725] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 455.673959][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.677990][ T5725] usb 1-1: config 0 descriptor?? [ 455.904266][ T5725] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 456.912403][T16130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3810'. [ 457.080013][T16134] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3811'. [ 457.092672][ T5253] 8021q: adding VLAN 0 to HW filter on device eth3 [ 457.160116][T16137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3812'. [ 458.315555][ T5712] usb 1-1: USB disconnect, device number 18 [ 458.456812][T16167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3819'. [ 458.811282][T16181] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3822'. [ 458.867356][ T6899] hsr_slave_0: left promiscuous mode [ 458.933813][ T6899] hsr_slave_1: left promiscuous mode [ 458.934813][ T6899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.934832][ T6899] batadv0: mtu less than device minimum [ 458.980278][ T6899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 459.000305][ T6899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 459.021956][ T6899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 459.040367][ T6899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 459.059718][ T6899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 459.081001][ T6899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 459.101498][ T6899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 459.120218][ T6899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 459.138638][ T6899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 459.271204][ T6899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.306072][ T6899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.494555][ T6899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.534226][ T6899] batman_adv: batadv0: Interface deactivated: dummy0 [ 459.534248][ T6899] batman_adv: batadv0: Removing interface: dummy0 [ 459.629010][ T6899] veth1_macvtap: left promiscuous mode [ 459.629083][ T6899] veth0_macvtap: left promiscuous mode [ 459.648186][ T6899] veth1_vlan: left promiscuous mode [ 459.648283][ T6899] veth0_vlan: left promiscuous mode [ 460.493945][ T6899] team0 (unregistering): Port device team_slave_1 removed [ 460.533557][ T6899] team0 (unregistering): Port device team_slave_0 removed [ 460.764250][T16183] netlink: 'syz.4.3823': attribute type 4 has an invalid length. [ 460.765164][T16189] netlink: 'syz.4.3823': attribute type 4 has an invalid length. [ 460.769589][T16194] tipc: Started in network mode [ 460.769615][T16194] tipc: Node identity ac14140f, cluster identity 4711 [ 460.769915][T16194] tipc: New replicast peer: 255.255.255.255 [ 460.770641][T16194] tipc: Enabled bearer , priority 10 [ 461.088589][T16229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3831'. [ 461.592725][T16243] netlink: 'syz.0.3835': attribute type 1 has an invalid length. [ 461.592837][T16243] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3835'. [ 461.963087][ T5725] tipc: Node number set to 2886997007 [ 461.970775][T16259] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3838'. [ 462.313217][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 463.258309][T16306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3853'. [ 463.453105][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 463.462391][T16316] netlink: 'syz.4.3855': attribute type 4 has an invalid length. [ 463.462720][T16320] netlink: 'syz.4.3855': attribute type 4 has an invalid length. [ 463.509663][T16316] tipc: Enabling of bearer rejected, already enabled [ 463.605836][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 463.618808][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 463.618852][ T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 463.618874][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.671425][ T10] usb 2-1: config 0 descriptor?? [ 463.940407][T16334] netlink: 'syz.0.3860': attribute type 10 has an invalid length. [ 463.996505][T16334] team0: Port device dummy0 added [ 464.007929][ T10] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 464.059727][T15801] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 464.097014][T16335] netlink: 'syz.0.3860': attribute type 10 has an invalid length. [ 464.133457][T15801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 464.871992][T16338] Can't find ip_set type has [ 465.797774][T16335] team0: Port device dummy0 removed [ 465.834968][T16335] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 465.863255][T15801] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 465.912530][T15801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 465.924060][T15801] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 465.983285][T15801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 466.010965][T16347] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 466.011319][T16347] net_ratelimit: 30 callbacks suppressed [ 466.011334][T16347] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 466.023654][T15801] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 466.078944][T15801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 466.221455][T16361] netlink: 'syz.4.3865': attribute type 4 has an invalid length. [ 466.227473][T16361] netlink: 'syz.4.3865': attribute type 4 has an invalid length. [ 466.296477][ T5727] usb 2-1: USB disconnect, device number 21 [ 466.356575][T16361] tipc: Enabling of bearer rejected, already enabled [ 467.505998][T16389] Can't find ip_set type hash:m [ 468.919281][T15801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.101873][T15801] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.143159][ T6740] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.143290][ T6740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.200009][ T6744] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.200179][ T6744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.272998][ T5725] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 469.423805][ T5725] usb 4-1: Using ep0 maxpacket: 8 [ 469.441070][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 469.441117][ T5725] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 469.441138][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.480405][ T5725] usb 4-1: config 0 descriptor?? [ 469.682031][T16434] netlink: 'syz.0.3886': attribute type 10 has an invalid length. [ 469.794383][ T5725] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 470.609391][T16442] Can't find ip_set type hash:m [ 471.574320][T16436] bond0: (slave bond_slave_0): Releasing backup interface [ 471.655163][T16436] bond0: (slave bond_slave_1): Releasing backup interface [ 471.709717][T16436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.709745][T16436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.739801][T16436] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 471.969099][T16459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3891'. [ 472.086895][ T5712] usb 4-1: USB disconnect, device number 9 [ 473.249529][T16489] Can't find ip_set type hash:m [ 474.785809][T15801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.855274][T16519] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 474.855310][T16519] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 474.860882][T16519] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 474.922134][T16519] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 475.015322][T16527] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3911'. [ 475.070101][T15801] veth0_vlan: entered promiscuous mode [ 475.119365][T15801] veth1_vlan: entered promiscuous mode [ 475.214141][T16519] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 475.252620][T15801] veth0_macvtap: entered promiscuous mode [ 475.289174][T15801] veth1_macvtap: entered promiscuous mode [ 475.379531][T15801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.436160][T15801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.509815][ T6746] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.510067][ T6746] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.510105][ T6746] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.510139][ T6746] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.437825][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.437845][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.750976][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.750992][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.121599][T16525] smbdirect: ib_dev[syz1] removed [ 477.396466][T16578] netlink: 'syz.1.3935': attribute type 1 has an invalid length. [ 477.396486][T16578] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3935'. [ 477.501383][T16580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3713'. [ 477.742589][T16577] vlan2: entered promiscuous mode [ 477.742611][T16577] bridge0: entered promiscuous mode [ 477.860806][ T4908] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 477.914025][ T4908] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 477.920888][ T4908] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 477.936467][ T4908] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 477.943895][ T4908] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 478.323303][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 478.556688][ T5593] syz_tun (unregistering): left allmulticast mode [ 478.788197][T16606] tipc: Enabled bearer , priority 0 [ 478.791305][T16606] syzkaller0: entered promiscuous mode [ 478.791328][T16606] syzkaller0: entered allmulticast mode [ 479.030978][ T56] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.089447][T16610] team0: entered promiscuous mode [ 479.089466][T16610] team_slave_0: entered promiscuous mode [ 479.089592][T16610] team_slave_1: entered promiscuous mode [ 479.090353][T16610] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 479.177696][T16608] tipc: Resetting bearer [ 479.243177][T16605] tipc: Resetting bearer [ 479.423752][T16605] tipc: Disabling bearer [ 479.757328][ T56] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.802828][T16629] netlink: 'syz.0.3954': attribute type 1 has an invalid length. [ 479.863998][T16631] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3954'. [ 479.865733][T16629] bond1: entered promiscuous mode [ 479.866181][T16629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 479.933765][T16631] bond1: entered allmulticast mode [ 480.000058][T16631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3954'. [ 480.000078][T16631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3954'. [ 480.083264][ T5599] Bluetooth: hci3: command tx timeout [ 480.193617][ T56] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.305018][T16636] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 480.542313][ T56] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.653955][T16654] tipc: Started in network mode [ 480.653984][T16654] tipc: Node identity be53d8d573cb, cluster identity 4711 [ 480.654161][T16654] tipc: Enabled bearer , priority 0 [ 480.717893][T16648] tipc: Resetting bearer [ 480.839192][T16657] syzkaller0: entered promiscuous mode [ 480.839216][T16657] syzkaller0: entered allmulticast mode [ 480.903497][T16647] tipc: Resetting bearer [ 481.064695][T16647] tipc: Disabling bearer [ 481.370077][T16675] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3967'. [ 481.370717][T16674] netlink: 'syz.4.3969': attribute type 1 has an invalid length. [ 481.422156][T16671] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3967'. [ 481.430864][T16672] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.433495][T16677] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3969'. [ 481.465705][T16672] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.619417][T16683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3969'. [ 481.727422][T16674] bond2: entered promiscuous mode [ 481.727850][T16674] 8021q: adding VLAN 0 to HW filter on device bond2 [ 481.759585][T16677] bond2: entered allmulticast mode [ 481.925124][T16696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3975'. [ 481.925145][T16696] netlink: 'syz.0.3975': attribute type 1 has an invalid length. [ 482.094075][T16682] team0: entered promiscuous mode [ 482.094096][T16682] team_slave_0: entered promiscuous mode [ 482.094272][T16682] team_slave_1: entered promiscuous mode [ 482.096415][T16682] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 482.153812][ T5599] Bluetooth: hci3: command tx timeout [ 482.239187][T16702] tipc: Enabled bearer , priority 0 [ 482.384356][T16697] tipc: Resetting bearer [ 482.384686][T16704] syzkaller0: entered promiscuous mode [ 482.384707][T16704] syzkaller0: entered allmulticast mode [ 482.424189][T16717] netlink: 'syz.0.3981': attribute type 4 has an invalid length. [ 482.463235][T16695] tipc: Resetting bearer [ 482.512148][T16720] __nla_validate_parse: 1 callbacks suppressed [ 482.512164][T16720] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3982'. [ 482.564768][T16721] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3982'. [ 482.584015][T16695] tipc: Disabling bearer [ 482.768174][T16717] tipc: Enabling of bearer rejected, already enabled [ 482.953653][ T5599] Bluetooth: hci5: command 0x0406 tx timeout [ 483.108564][T16735] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3983'. [ 483.108660][T16735] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 484.232958][ T4908] Bluetooth: hci3: command tx timeout [ 484.356723][ T56] bond3 (unregistering): (slave bridge0): Releasing backup interface [ 484.356819][ T56] bridge0 (unregistering): left promiscuous mode [ 484.356894][ T56] bridge0 (unregistering): left allmulticast mode [ 484.514004][ T56] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 484.533414][ T56] bridge1 (unregistering): left promiscuous mode [ 484.533451][ T56] bridge1 (unregistering): left allmulticast mode [ 484.633924][ T56] bond7 (unregistering): (slave bridge2): Releasing backup interface [ 484.633948][ T56] bridge2 (unregistering): left promiscuous mode [ 484.763332][ T56] bond8 (unregistering): (slave bridge3): Releasing backup interface [ 484.763354][ T56] bridge3 (unregistering): left promiscuous mode [ 484.918301][ T56] bond0 (unregistering): Released all slaves [ 484.925746][ T56] bond1 (unregistering): Released all slaves [ 484.940423][ T56] bond2 (unregistering): Released all slaves [ 484.955450][ T56] bond3 (unregistering): Released all slaves [ 484.970143][ T56] bond4 (unregistering): Released all slaves [ 484.988712][ T56] bond5 (unregistering): Released all slaves [ 485.002758][ T56] bond6 (unregistering): Released all slaves [ 485.020117][ T56] bond7 (unregistering): Released all slaves [ 485.036319][ T56] bond8 (unregistering): Released all slaves [ 485.050967][ T56] bond9 (unregistering): Released all slaves [ 485.093503][T16736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3986'. [ 485.169588][T16751] team0: entered promiscuous mode [ 485.169609][T16751] team_slave_0: entered promiscuous mode [ 485.169753][T16751] team_slave_1: entered promiscuous mode [ 485.170753][T16751] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 485.255086][ T5253] 8021q: adding VLAN 0 to HW filter on device eth1 [ 485.432793][T16768] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3993'. [ 485.490310][T16771] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3993'. [ 485.935790][T16773] netlink: 'syz.2.3994': attribute type 4 has an invalid length. [ 485.941070][T16774] tipc: Started in network mode [ 485.941096][T16774] tipc: Node identity ac14140f, cluster identity 4711 [ 485.959399][T16774] tipc: New replicast peer: 255.255.255.255 [ 485.960164][T16774] tipc: Enabled bearer , priority 10 [ 486.314209][ T4908] Bluetooth: hci3: command tx timeout [ 486.604383][T16584] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.604688][T16584] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.604858][T16584] bridge_slave_0: entered allmulticast mode [ 486.606462][T16584] bridge_slave_0: entered promiscuous mode [ 486.607924][T16798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4000'. [ 486.626372][T16809] team0: entered promiscuous mode [ 486.626389][T16809] team_slave_0: entered promiscuous mode [ 486.626518][T16809] team_slave_1: entered promiscuous mode [ 486.627734][T16809] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 486.656319][ T5253] 8021q: adding VLAN 0 to HW filter on device eth2 [ 486.673094][T16584] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.673202][T16584] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.673377][T16584] bridge_slave_1: entered allmulticast mode [ 486.676020][T16584] bridge_slave_1: entered promiscuous mode [ 486.836600][T16584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.859418][T16584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.974890][T16817] netlink: 'syz.4.4004': attribute type 1 has an invalid length. [ 486.974911][T16817] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4004'. [ 487.041899][T16821] netlink: 'syz.0.4006': attribute type 10 has an invalid length. [ 487.095743][T16825] netlink: 'syz.0.4006': attribute type 10 has an invalid length. [ 487.444323][T16821] bond0: (slave dummy0): Releasing backup interface [ 487.524602][T16821] dummy0: entered promiscuous mode [ 487.526407][T16821] team0: Port device dummy0 added [ 487.527079][ T5712] tipc: Node number set to 2886997007 [ 487.552818][T16825] dummy0: left promiscuous mode [ 487.652606][T16825] team0: Port device dummy0 removed [ 487.664891][T16825] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 487.807577][T16584] team0: Port device team_slave_0 added [ 488.184530][T16584] team0: Port device team_slave_1 added [ 488.188817][ T5253] 8021q: adding VLAN 0 to HW filter on device eth3 [ 488.506759][T16871] netlink: 'syz.2.4016': attribute type 1 has an invalid length. [ 488.506773][T16871] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4016'. [ 488.646399][T16861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4014'. [ 488.648976][T16870] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 488.652165][T16584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.652178][T16584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.652202][T16584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.679418][T16584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.679431][T16584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.679455][T16584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.439839][T16584] hsr_slave_0: entered promiscuous mode [ 489.450053][T16584] hsr_slave_1: entered promiscuous mode [ 489.464740][T16584] debugfs: 'hsr0' already exists in 'hsr' [ 489.464763][T16584] Cannot create hsr debugfs directory [ 489.685727][T16908] netlink: 'syz.0.4026': attribute type 1 has an invalid length. [ 489.685762][T16908] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4026'. [ 489.722153][T16910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4027'. [ 490.077445][T16912] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4027'. [ 490.082348][ T8815] block nbd64: NBD_DISCONNECT [ 490.133411][T16912] nbd: nbd64 already in use [ 490.405280][T16922] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 490.537370][ T5253] 8021q: adding VLAN 0 to HW filter on device eth4 [ 490.541684][T16938] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4034'. [ 490.715093][T16946] netlink: 'syz.0.4036': attribute type 1 has an invalid length. [ 490.775438][T16948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4036'. [ 490.941897][T16952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4036'. [ 490.992084][T16936] bridge_slave_0: left allmulticast mode [ 490.992103][T16936] bridge_slave_0: left promiscuous mode [ 490.996237][T16936] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.065926][T16936] bridge_slave_1: left allmulticast mode [ 491.065946][T16936] bridge_slave_1: left promiscuous mode [ 491.066102][T16936] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.195540][T16936] bond0: (slave bond_slave_0): Releasing backup interface [ 491.273772][T16936] bond0: (slave bond_slave_1): Releasing backup interface [ 491.318133][T16936] team_slave_0: left promiscuous mode [ 491.335632][T16936] team0: Port device team_slave_0 removed [ 491.336315][T16936] team_slave_1: left promiscuous mode [ 491.374996][T16936] team0: Port device team_slave_1 removed [ 491.375429][T16936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.375444][T16936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.415084][T16936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.415099][T16936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.464542][T16936] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 491.502093][T16946] bond2: entered promiscuous mode [ 491.502622][T16946] 8021q: adding VLAN 0 to HW filter on device bond2 [ 491.505538][T16948] bond2: entered allmulticast mode [ 491.527842][T16947] team0: Mode changed to "activebackup" [ 492.094472][T16971] netlink: 'syz.3.4043': attribute type 4 has an invalid length. [ 492.099753][T16975] tipc: New replicast peer: 255.255.255.255 [ 492.100416][T16975] tipc: Enabled bearer , priority 10 [ 492.104559][T16988] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 492.280059][T16981] syzkaller0: entered promiscuous mode [ 492.280083][T16981] syzkaller0: entered allmulticast mode [ 492.387999][T17002] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4049'. [ 492.525375][T17010] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4051'. [ 493.526032][ T5816] tipc: Node number set to 3449346261 [ 493.549784][T17028] netlink: 'syz.2.4056': attribute type 4 has an invalid length. [ 493.576311][T17032] tipc: Enabling of bearer rejected, already enabled [ 494.356675][T17040] syzkaller0: entered promiscuous mode [ 494.356699][T17040] syzkaller0: entered allmulticast mode [ 494.664010][T17055] tipc: Enabled bearer , priority 0 [ 494.664331][T17058] syzkaller0: entered promiscuous mode [ 494.664345][T17058] syzkaller0: entered allmulticast mode [ 495.303257][T17050] tipc: Resetting bearer [ 495.455644][T17050] tipc: Disabling bearer [ 496.181663][T17096] netlink: 'syz.4.4069': attribute type 4 has an invalid length. [ 496.188809][T17139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4074'. [ 496.189647][T17099] tipc: Enabling of bearer rejected, already enabled [ 497.244171][T17149] bridge_slave_1: left allmulticast mode [ 497.244192][T17149] bridge_slave_1: left promiscuous mode [ 497.244346][T17149] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.363547][T17149] bond0: (slave bond_slave_0): Releasing backup interface [ 497.424129][T17149] bond0: (slave bond_slave_1): Releasing backup interface [ 497.474156][T17149] team_slave_0: left promiscuous mode [ 497.517763][T17149] team0: Port device team_slave_0 removed [ 497.518375][T17149] team_slave_1: left promiscuous mode [ 497.565330][T17149] team0: Port device team_slave_1 removed [ 497.565651][T17149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.586612][T17149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.603799][T17149] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 497.604072][T17154] team0: Mode changed to "activebackup" [ 497.968725][T17176] netlink: 'syz.3.4084': attribute type 4 has an invalid length. [ 498.196922][ T56] hsr_slave_0: left promiscuous mode [ 498.238241][ T56] hsr_slave_1: left promiscuous mode [ 498.670684][ T56] veth1_macvtap: left promiscuous mode [ 498.670814][ T56] veth0_macvtap: left promiscuous mode [ 498.712600][ T56] veth1_vlan: left promiscuous mode [ 498.712773][ T56] veth0_vlan: left promiscuous mode [ 500.298173][T17257] netlink: 'syz.2.4103': attribute type 10 has an invalid length. [ 500.359517][T17258] netlink: 'syz.2.4103': attribute type 10 has an invalid length. [ 500.967737][T17283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4107'. [ 501.047913][T17257] dummy0: entered promiscuous mode [ 501.049188][T17257] team0: Failed to send options change via netlink (err -105) [ 501.049208][T17257] team0: Port device dummy0 added [ 501.071283][T17258] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 501.071685][T17258] dummy0: left promiscuous mode [ 501.087452][T17258] team0: Failed to send options change via netlink (err -105) [ 501.087683][T17258] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 501.091747][T17258] team0: Port device dummy0 removed [ 501.127363][T17258] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 501.139236][T17283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.227873][T17283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.354793][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.208898][T17324] tipc: Enabled bearer , priority 0 [ 502.209206][T17321] syzkaller0: entered promiscuous mode [ 502.209226][T17321] syzkaller0: entered allmulticast mode [ 502.278543][T17320] tipc: Resetting bearer [ 502.464373][T17320] tipc: Disabling bearer [ 502.584666][T17334] netlink: 'syz.3.4122': attribute type 10 has an invalid length. [ 502.636228][T17336] netlink: 'syz.3.4122': attribute type 10 has an invalid length. [ 502.835178][T17331] bond0: (slave dummy0): Releasing backup interface [ 502.970314][T17331] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 503.021505][T17334] dummy0: entered promiscuous mode [ 503.022732][T17334] team0: Failed to send options change via netlink (err -105) [ 503.022753][T17334] team0: Port device dummy0 added [ 503.029545][T17336] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 503.050180][T17336] dummy0: left promiscuous mode [ 503.073252][T17336] team0: Failed to send options change via netlink (err -105) [ 503.073577][T17336] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 503.075346][T17336] team0: Port device dummy0 removed [ 503.081452][T17336] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 503.081628][T17335] team0: Unable to change to the same mode the team is in [ 503.092354][T17349] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 503.606714][T17369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4127'. [ 503.606755][T17369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4127'. [ 503.606995][T17369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4127'. [ 503.607010][T17369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4127'. [ 503.797188][T17367] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 503.798816][T17361] syzkaller0: entered promiscuous mode [ 503.798841][T17361] syzkaller0: entered allmulticast mode [ 504.250846][T17392] tipc: Enabled bearer , priority 0 [ 504.274929][T17395] syzkaller0: entered promiscuous mode [ 504.274952][T17395] syzkaller0: entered allmulticast mode [ 504.309873][T16584] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 504.379052][T16584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 504.613312][T17384] tipc: Resetting bearer [ 504.745980][T17384] tipc: Disabling bearer [ 504.903112][T17401] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 504.903453][T16584] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 504.939927][T16584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 504.940541][T17417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4139'. [ 504.940559][T17417] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4139'. [ 504.940904][T17417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4139'. [ 504.940920][T17417] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4139'. [ 504.941673][T16584] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 505.092748][T16584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 505.101236][T16584] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 505.134493][T16584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 505.246401][T17423] netlink: 'syz.0.4142': attribute type 10 has an invalid length. [ 505.297108][T17424] netlink: 'syz.0.4142': attribute type 10 has an invalid length. [ 505.325803][T17423] bond0: (slave dummy0): Releasing backup interface [ 505.374624][T17423] dummy0: entered promiscuous mode [ 505.378780][T17423] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 505.378925][T17423] team0: Failed to send options change via netlink (err -105) [ 505.378940][T17423] team0: Port device dummy0 added [ 505.380025][T17424] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 505.380529][T17424] dummy0: left promiscuous mode [ 505.433872][T17424] team0: Failed to send options change via netlink (err -105) [ 505.434101][T17424] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 505.435832][T17424] team0: Port device dummy0 removed [ 505.459790][T17424] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 505.556967][T17433] syzkaller0: entered promiscuous mode [ 505.556982][T17433] syzkaller0: entered allmulticast mode [ 505.887456][T17443] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 505.887485][T17443] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 505.887505][T17443] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 505.918326][T17443] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 507.474498][T17407] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 507.716251][T17450] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 507.893956][T17461] netlink: 'syz.4.4155': attribute type 10 has an invalid length. [ 507.949476][T17466] netlink: 'syz.4.4155': attribute type 10 has an invalid length. [ 508.146375][T17461] dummy0: entered promiscuous mode [ 508.147109][T17461] team0: Failed to send options change via netlink (err -105) [ 508.147122][T17461] team0: Port device dummy0 added [ 508.150513][T17466] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 508.156534][T17466] dummy0: left promiscuous mode [ 508.214803][T17466] team0: Failed to send options change via netlink (err -105) [ 508.215026][T17466] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 508.229278][T17466] team0: Port device dummy0 removed [ 508.235844][T17466] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 508.236057][T17470] syz_tun: entered allmulticast mode [ 508.322123][T16584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.435602][T17486] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4162'. [ 508.625819][T16584] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.855795][T17492] syzkaller0: entered promiscuous mode [ 508.855813][T17492] syzkaller0: entered allmulticast mode [ 508.861012][ T6742] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.861243][ T6742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.897005][ T6742] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.897169][ T6742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.217385][T17503] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4167'. [ 509.217516][T17503] netlink: Unknown conntrack attr (0) [ 509.569404][T17518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4172'. [ 509.921312][T17528] syz_tun: entered allmulticast mode [ 509.933329][T16584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.017083][T16584] veth0_vlan: entered promiscuous mode [ 510.048112][T16584] veth1_vlan: entered promiscuous mode [ 510.097709][T16584] veth0_macvtap: entered promiscuous mode [ 510.109785][T16584] veth1_macvtap: entered promiscuous mode [ 510.150439][T16584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.170246][T16584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.191286][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.191329][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.191363][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.191396][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.212286][T17538] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4179'. [ 511.206751][T17477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 511.262818][T17550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4184'. [ 511.580870][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.580891][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.847237][T17568] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4189'. [ 511.867000][T17569] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4190'. [ 511.867076][T17569] netlink: Unknown conntrack attr (0) [ 512.105602][ T121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.105622][ T121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.338765][T17582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4196'. [ 512.741715][T17593] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.4200'. [ 512.741842][T17593] netlink: Unknown conntrack attr (0) [ 512.965526][T17602] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4204'. [ 513.147480][T17609] gretap0: entered promiscuous mode [ 513.148880][T17609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4208'. [ 513.148928][T17609] gretap0: left promiscuous mode [ 513.322019][T17616] netlink: Unknown conntrack attr (0) [ 513.674222][T17561] Bluetooth: hci4: command 0x0406 tx timeout [ 514.416545][T17658] __nla_validate_parse: 3 callbacks suppressed [ 514.416557][T17658] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4226'. [ 514.416629][T17658] netlink: Unknown conntrack attr (0) [ 514.614588][T17648] tipc: Enabled bearer , priority 0 [ 514.783794][T17674] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4233'. [ 514.896075][T17646] tipc: Disabling bearer [ 515.312627][T17687] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4238'. [ 515.312742][T17687] netlink: Unknown conntrack attr (0) [ 515.431688][T17561] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 515.994820][T17561] Bluetooth: hci3: command 0x0405 tx timeout [ 516.236623][T17708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4243'. [ 516.525915][T17714] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4246'. [ 516.751222][T17724] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4250'. [ 516.751358][T17724] netlink: Unknown conntrack attr (0) [ 516.847230][T17728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4252'. [ 516.847262][T17728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4252'. [ 517.001347][T17736] netlink: 'syz.2.4256': attribute type 10 has an invalid length. [ 517.012515][T17561] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 517.053322][T17737] netlink: 'syz.2.4256': attribute type 10 has an invalid length. [ 517.076523][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.076701][T17728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4252'. [ 517.076728][T17728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4252'. [ 517.081034][T17736] dummy0: entered promiscuous mode [ 517.082449][T17736] team0: Failed to send options change via netlink (err -105) [ 517.082467][T17736] team0: Port device dummy0 added [ 517.129101][T17737] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 517.144079][T17737] dummy0: left promiscuous mode [ 517.195043][T17737] team0: Failed to send options change via netlink (err -105) [ 517.195265][T17737] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 517.197410][T17737] team0: Port device dummy0 removed [ 517.208895][T17737] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 517.209522][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.220189][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.220451][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.693069][ T5816] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 517.842942][ T5816] usb 1-1: Using ep0 maxpacket: 8 [ 517.846990][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 517.847035][ T5816] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 517.847057][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.887934][ T5816] usb 1-1: config 0 descriptor?? [ 518.117550][ T5816] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 518.174959][ T6746] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.176039][ T6746] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.176080][ T6746] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.176111][ T6746] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.219778][T17766] syz_tun: entered allmulticast mode [ 519.011121][T17561] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 519.258894][T17792] netlink: 'syz.1.4280': attribute type 10 has an invalid length. [ 519.287740][T17792] team0: Failed to send options change via netlink (err -105) [ 519.287763][T17792] team0: Port device dummy0 added [ 519.296999][T17792] netlink: 'syz.1.4280': attribute type 10 has an invalid length. [ 519.298539][T17792] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 519.379078][T17792] team0: Failed to send options change via netlink (err -105) [ 519.379308][T17792] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 519.381314][T17792] team0: Port device dummy0 removed [ 519.409998][T17792] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 519.510736][T17799] __nla_validate_parse: 6 callbacks suppressed [ 519.510746][T17799] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4283'. [ 519.528102][T17800] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 520.443799][T17834] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4293'. [ 520.494815][ T9] usb 1-1: USB disconnect, device number 19 [ 520.599118][T17838] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 521.025121][T17858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4302'. [ 521.412655][T17867] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4306'. [ 521.749904][T17880] netlink: 388 bytes leftover after parsing attributes in process `syz.4.4312'. [ 525.037976][T17890] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 525.311144][T17925] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4327'. [ 525.311272][T17925] netlink: Unknown conntrack attr (0) [ 525.383428][T17561] Bluetooth: hci5: unexpected event for opcode 0x1009 [ 525.605413][T17931] team0: entered promiscuous mode [ 525.605435][T17931] team_slave_0: entered promiscuous mode [ 525.622054][T17931] team_slave_1: entered promiscuous mode [ 525.625719][T17931] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 525.943036][T17957] netlink: 276 bytes leftover after parsing attributes in process `syz.1.4338'. [ 526.125814][T17961] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4341'. [ 526.125952][T17961] netlink: Unknown conntrack attr (0) [ 526.289693][T17967] tipc: Enabling of bearer rejected, already enabled [ 526.734251][T17990] netlink: 'syz.4.4353': attribute type 1 has an invalid length. [ 527.049071][T17996] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 527.049095][T17996] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 527.052366][T17996] bond3: (slave vcan1): making interface the new active one [ 527.091122][T17996] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 527.121559][T18001] bond3: (slave vcan2): The slave device specified does not support setting the MAC address [ 527.144187][T18001] bond3: (slave vcan2): Enslaving as a backup interface with an up link [ 527.161664][T18008] 8021q: adding VLAN 0 to HW filter on device bond3 [ 527.198180][T18011] tipc: Enabling of bearer rejected, already enabled [ 527.743678][T17561] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 527.787035][ T4908] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 527.863208][ T4908] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 527.864629][ T4908] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 527.865743][ T4908] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 527.866728][ T4908] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 527.977305][ T5324] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 528.126409][ T5324] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 528.126434][ T5324] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 528.126468][ T5324] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 528.126488][ T5324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.162623][T17561] Bluetooth: hci0: command tx timeout [ 531.243227][ T31] usb 2-1: USB disconnect, device number 22 [ 531.249269][ T8534] syz_tun (unregistering): left allmulticast mode [ 531.532068][T18056] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 532.126186][T18081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4381'. [ 532.234342][T17561] Bluetooth: hci0: command tx timeout [ 532.353271][T17545] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 532.508773][T17545] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 532.508797][T17545] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 532.508828][T17545] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 532.508849][T17545] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.334268][T17561] Bluetooth: hci0: command tx timeout [ 535.439574][ T56] bridge_slave_1: left allmulticast mode [ 535.439605][ T56] bridge_slave_1: left promiscuous mode [ 535.439866][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.585072][ T5816] usb 5-1: USB disconnect, device number 17 [ 536.392986][T17561] Bluetooth: hci0: command tx timeout [ 536.533407][ T56] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 536.583282][ T56] bridge1 (unregistering): left promiscuous mode [ 536.583315][ T56] bridge1 (unregistering): left allmulticast mode [ 536.703752][ T56] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 536.703781][ T56] bridge2 (unregistering): left promiscuous mode [ 536.863432][ T56] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 536.863458][ T56] bridge3 (unregistering): left promiscuous mode [ 537.024006][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.103503][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.183424][ T56] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 537.254116][ T56] bond0 (unregistering): Released all slaves [ 537.259969][ T56] bond1 (unregistering): Released all slaves [ 537.276194][ T56] bond2 (unregistering): Released all slaves [ 537.289562][ T56] bond3 (unregistering): Released all slaves [ 537.306300][ T56] bond4 (unregistering): Released all slaves [ 537.352240][ T5253] 8021q: adding VLAN 0 to HW filter on device eth1 [ 537.352624][T18106] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 537.374957][T18111] tipc: Enabling of bearer rejected, already enabled [ 537.648173][ T56] tipc: Disabling bearer [ 537.648341][ T56] tipc: Left network mode [ 538.473586][T17545] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 538.624665][T17545] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 538.624691][T17545] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 538.624724][T17545] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 538.624745][T17545] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.859473][ T5253] 8021q: adding VLAN 0 to HW filter on device eth2 [ 539.308991][T17561] Bluetooth: hci2: command 0x0406 tx timeout [ 540.534578][T18117] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 541.811013][T18170] tipc: Enabling of bearer rejected, already enabled [ 541.904493][ T5816] usb 2-1: USB disconnect, device number 23 [ 542.267407][T18187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4405'. [ 542.395641][T18031] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.395755][T18031] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.395905][T18031] bridge_slave_0: entered allmulticast mode [ 542.397674][T18031] bridge_slave_0: entered promiscuous mode [ 542.430955][T18031] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.431145][T18031] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.431312][T18031] bridge_slave_1: entered allmulticast mode [ 542.458682][T18031] bridge_slave_1: entered promiscuous mode [ 542.841579][T18031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.013034][T17545] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 543.018830][T18031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.164819][T17545] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 543.164843][T17545] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 543.164872][T17545] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 543.164892][T17545] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.352283][ T5816] usb 5-1: USB disconnect, device number 18 [ 546.392495][ T5253] 8021q: adding VLAN 0 to HW filter on device eth3 [ 546.536361][T18236] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4417'. [ 546.615931][T18031] team0: Port device team_slave_0 added [ 546.651970][T18031] team0: Port device team_slave_1 added [ 546.950027][T18031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.950043][T18031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.950069][T18031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.121203][T18031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.121220][T18031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.121245][T18031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.363021][ T5727] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 547.539861][ T5727] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 547.539889][ T5727] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 547.539923][ T5727] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 547.539944][ T5727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.721665][T18031] hsr_slave_0: entered promiscuous mode [ 547.733144][T18031] hsr_slave_1: entered promiscuous mode [ 547.734031][T18031] debugfs: 'hsr0' already exists in 'hsr' [ 547.734053][T18031] Cannot create hsr debugfs directory [ 548.042129][ T5253] 8021q: adding VLAN 0 to HW filter on device eth4 [ 549.007116][T18278] vlan2: entered promiscuous mode [ 549.007139][T18278] bridge0: entered promiscuous mode [ 550.597446][ T5705] usb 5-1: USB disconnect, device number 19 [ 550.813940][T18286] bond0: (slave dummy0): Releasing backup interface [ 550.911010][T18286] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 550.973487][T18293] team0: Unable to change to the same mode the team is in [ 551.399820][ T4908] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 551.932966][ T5580] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 552.090410][ T5580] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 552.090427][ T5580] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 552.090447][ T5580] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 552.090459][ T5580] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.220610][T18327] vlan2: entered promiscuous mode [ 552.339482][T18331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4443'. [ 555.800461][ T5727] usb 2-1: USB disconnect, device number 24 [ 556.113590][T18340] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4445'. [ 556.254765][T18342] siw: device registration error -23 [ 556.828152][T18365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4448'. [ 557.404428][T18354] bond3: option mode: unable to set because the bond device has slaves [ 558.154962][T18405] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4455'. [ 558.155080][T18405] netlink: ct family unspecified [ 558.395538][T18392] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 558.437803][T18408] vlan2: entered promiscuous mode [ 558.728969][T18424] siw: device registration error -23 [ 558.863001][ T5816] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 559.017248][ T5816] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 559.017273][ T5816] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 559.017308][ T5816] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 559.017330][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.499796][T18439] syzkaller0: entered promiscuous mode [ 560.500522][T18439] syzkaller0: entered allmulticast mode [ 562.428501][T17544] usb 2-1: USB disconnect, device number 25 [ 562.530056][T17561] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 562.593873][ T56] hsr_slave_0: left promiscuous mode [ 562.613119][ T56] hsr_slave_1: left promiscuous mode [ 562.614033][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.614057][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.701489][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.701512][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.790432][ T56] veth1_macvtap: left promiscuous mode [ 562.790528][ T56] veth0_macvtap: left promiscuous mode [ 562.795050][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.817327][ T56] veth1_vlan: left promiscuous mode [ 562.817486][ T56] veth0_vlan: left promiscuous mode [ 562.901596][T18480] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 563.743182][ T56] team_slave_1 (unregistering): left promiscuous mode [ 563.783966][ T56] team0 (unregistering): Port device team_slave_1 removed [ 563.792665][ T56] team_slave_0 (unregistering): left promiscuous mode [ 563.827851][ T56] team0 (unregistering): Port device team_slave_0 removed [ 564.283355][T18489] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 564.453616][T18501] netlink: 'syz.4.4470': attribute type 10 has an invalid length. [ 564.551178][T18501] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 565.072964][ T5580] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 565.226677][ T5580] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 565.226702][ T5580] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 565.226736][ T5580] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 565.226757][ T5580] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.404157][T18527] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4478'. [ 565.423303][T18031] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 565.473781][T18031] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 565.479957][T18031] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 566.675055][T18031] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 568.621307][T17545] usb 5-1: USB disconnect, device number 20 [ 568.671309][T18532] bond0: (slave dummy0): Releasing backup interface [ 568.741789][T18532] bridge_slave_1: left allmulticast mode [ 568.741818][T18532] bridge_slave_1: left promiscuous mode [ 568.754775][T18532] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.884882][T18532] bond0: (slave bond_slave_0): Releasing backup interface [ 568.899522][T18570] siw: device registration error -23 [ 568.963454][T18532] bond0: (slave bond_slave_1): Releasing backup interface [ 569.005639][T18532] team_slave_0: left promiscuous mode [ 569.030217][T18532] team0: Port device team_slave_0 removed [ 569.030816][T18532] team_slave_1: left promiscuous mode [ 569.086580][T18532] team0: Port device team_slave_1 removed [ 569.087555][T18532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.087577][T18532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.144348][T18532] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 569.144822][T18031] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 569.211877][T18031] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 569.212633][T18562] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 569.263663][T18031] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 569.271840][ T5816] syz1: Port: 1 Link DOWN [ 569.339822][T18031] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 569.603369][T18599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4488'. [ 569.622965][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 569.772995][T18031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.774407][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 569.776469][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 569.776511][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 569.776533][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.827259][ T9] usb 1-1: config 0 descriptor?? [ 569.871102][T18031] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.978273][ T6742] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.979992][ T6742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.035080][ T6758] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.035214][ T6758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.066720][ T9] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 570.082847][T17561] Bluetooth: hci1: command 0x0406 tx timeout [ 570.263173][ T5725] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 570.426523][ T5725] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 570.426550][ T5725] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 570.426584][ T5725] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 570.426607][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.354814][ T31] usb 3-1: USB disconnect, device number 17 [ 574.462797][ T5324] usb 1-1: USB disconnect, device number 20 [ 574.649223][T18636] bond0: (slave dummy0): Releasing backup interface [ 574.849608][T18649] siw: device registration error -23 [ 574.874374][T18636] bridge_slave_0: left allmulticast mode [ 574.874401][T18636] bridge_slave_0: left promiscuous mode [ 574.874683][T18636] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.949308][T18636] bridge_slave_1: left allmulticast mode [ 574.949337][T18636] bridge_slave_1: left promiscuous mode [ 574.949547][T18636] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.085475][T18636] bond0: (slave bond_slave_0): Releasing backup interface [ 575.163717][T18636] bond0: (slave bond_slave_1): Releasing backup interface [ 575.212433][T18636] team_slave_0: left promiscuous mode [ 575.250446][T18636] team0: Port device team_slave_0 removed [ 575.251870][T18636] team_slave_1: left promiscuous mode [ 575.299034][T18636] team0: Port device team_slave_1 removed [ 575.299830][T18636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.299983][T18636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.346400][T18636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.346422][T18636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.398661][T18636] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 575.429337][T18639] team0: Mode changed to "activebackup" [ 575.431601][T18644] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 576.046937][T18031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.147463][T18031] veth0_vlan: entered promiscuous mode [ 576.179981][T18031] veth1_vlan: entered promiscuous mode [ 576.217397][ T5725] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 576.268660][T18031] veth0_macvtap: entered promiscuous mode [ 576.280951][T18031] veth1_macvtap: entered promiscuous mode [ 576.345455][T18031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.365848][T18031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.383196][ T5324] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 576.384880][ T6748] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.407715][ T5725] usb 1-1: Using ep0 maxpacket: 8 [ 576.407846][ T6746] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.413663][ T6746] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.413982][ T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.415936][ T5725] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 576.415978][ T5725] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 576.415998][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.446532][ T5725] usb 1-1: config 0 descriptor?? [ 576.555397][ T5324] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 576.555422][ T5324] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 576.555455][ T5324] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 576.555507][ T5324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.618998][T18695] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 576.669193][T18699] tipc: Enabled bearer , priority 0 [ 576.689975][ T5725] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 576.731715][T18695] team0: Unable to change to the same mode the team is in [ 579.563718][ T5580] usb 1-1: USB disconnect, device number 21 [ 579.797359][ T9] usb 5-1: USB disconnect, device number 21 [ 579.946604][T18696] tipc: Disabling bearer [ 580.134897][ T6746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.134917][ T6746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.251722][ T6746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.251741][ T6746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.349533][T18723] bridge0: port 1(syz_tun) entered blocking state [ 580.349670][T18723] bridge0: port 1(syz_tun) entered disabled state [ 580.360580][T18723] syz_tun: entered promiscuous mode [ 580.449626][T18723] bridge0: port 1(syz_tun) entered blocking state [ 580.449695][T18723] bridge0: port 1(syz_tun) entered forwarding state [ 580.724196][T18733] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 580.779175][T18733] team0: Mode changed to "activebackup" [ 580.973072][ T5324] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 581.020885][T18756] netlink: 276 bytes leftover after parsing attributes in process `syz.1.4530'. [ 581.155346][ T5324] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 581.155362][ T5324] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 581.155381][ T5324] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 581.155393][ T5324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.351990][T18759] syzkaller0: entered promiscuous mode [ 581.583171][T18775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4532'. [ 585.130750][ T5324] usb 3-1: USB disconnect, device number 18 [ 587.536617][T18805] netlink: 276 bytes leftover after parsing attributes in process `syz.0.4543'. [ 596.210596][T17561] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 596.241521][T17561] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 596.242664][T17561] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 596.271437][T17561] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 596.272065][T17561] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 598.251873][T18785] bridge_slave_0: left allmulticast mode [ 598.251894][T18785] bridge_slave_0: left promiscuous mode [ 598.252038][T18785] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.316012][T18785] bridge_slave_1: left allmulticast mode [ 598.316042][T18785] bridge_slave_1: left promiscuous mode [ 598.316258][T18785] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.393466][ T4908] Bluetooth: hci5: command tx timeout [ 598.456213][T18785] bond0: (slave bond_slave_0): Releasing backup interface [ 598.513369][T18785] bond0: (slave bond_slave_1): Releasing backup interface [ 598.601862][T18785] team0: Port device team_slave_0 removed [ 598.641339][T18785] team0: Port device team_slave_1 removed [ 598.642227][T18785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.642251][T18785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.694242][T18785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.694257][T18785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.748741][T18785] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 598.749022][T18786] team0: Mode changed to "activebackup" [ 599.116923][T18758] syz_tun (unregistering): left allmulticast mode [ 599.406855][ T4908] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 599.484902][ T5725] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 599.534723][T18838] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 599.649134][ T5725] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 599.649161][ T5725] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 599.649193][ T5725] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 599.649205][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.730053][ T6740] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.873045][T18846] team0: Unable to change to the same mode the team is in [ 601.049455][ T6740] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.309911][ T6740] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.337567][ T5324] usb 4-1: USB disconnect, device number 10 [ 603.376758][ T4908] Bluetooth: hci5: command tx timeout [ 603.591063][T18861] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4558'. [ 603.752350][ T6740] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.979741][ T37] audit: type=1326 audit(1777722556.684:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18868 comm="syz.2.4562" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3f2adcdd9 code=0x0 [ 604.091036][T18876] misc userio: Invalid payload size [ 604.091447][T18876] misc userio: No port type given on /dev/userio [ 604.091865][T18876] misc userio: No port type given on /dev/userio [ 604.303747][ T4908] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 604.815400][T18898] netlink: 'syz.2.4574': attribute type 1 has an invalid length. [ 604.966522][T18901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 605.095791][T18909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4576'. [ 605.192007][T18910] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 605.434129][ T4908] Bluetooth: hci5: command tx timeout [ 605.535292][ T37] audit: type=1326 audit(1777722558.284:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18928 comm="syz.1.4583" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf68aecdd9 code=0x0 [ 606.132439][T18957] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 606.148279][T18957] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4589'. [ 606.327531][T18965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4591'. [ 606.933318][ T6740] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 606.976348][ T6740] bond0 (unregistering): Released all slaves [ 606.993408][ T6740] bond1 (unregistering): Released all slaves [ 607.006072][ T6740] bond2 (unregistering): Released all slaves [ 607.053941][ T6740] bond3 (unregistering): (slave vcan1): Releasing backup interface [ 607.113775][ T6740] bond3 (unregistering): (slave vcan2): Releasing backup interface [ 607.134219][ T6740] bond3 (unregistering): Released all slaves [ 607.185218][ T5253] 8021q: adding VLAN 0 to HW filter on device eth1 [ 607.442623][ T6740] tipc: Disabling bearer [ 607.443692][ T6740] tipc: Left network mode [ 607.456316][T18807] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.456512][T18807] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.456668][T18807] bridge_slave_0: entered allmulticast mode [ 607.459604][T18807] bridge_slave_0: entered promiscuous mode [ 607.494623][T18807] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.494760][T18807] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.494921][T18807] bridge_slave_1: entered allmulticast mode [ 607.497410][T18807] bridge_slave_1: entered promiscuous mode [ 607.514604][ T4908] Bluetooth: hci5: command tx timeout [ 607.643750][T18992] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4600'. [ 607.676333][T18807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.681310][T18807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.839049][ T37] audit: type=1326 audit(1777722560.584:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18996 comm="syz.2.4602" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3f2adcdd9 code=0x0 [ 608.006747][T18807] team0: Port device team_slave_0 added [ 608.248886][T18807] team0: Port device team_slave_1 added [ 608.405292][T19017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4605'. [ 609.258282][ T5253] 8021q: adding VLAN 0 to HW filter on device eth2 [ 609.260638][T19022] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 609.587616][ T4908] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 609.650833][T19037] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4612'. [ 609.861464][T19047] misc userio: Invalid payload size [ 609.895665][T18807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.895680][T18807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.895703][T18807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.276550][T18807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.276566][T18807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.276592][T18807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.756296][T19055] netlink: 'syz.1.4617': attribute type 4 has an invalid length. [ 610.758498][T19056] netlink: 'syz.1.4617': attribute type 4 has an invalid length. [ 610.760627][T19057] tipc: Started in network mode [ 610.760653][T19057] tipc: Node identity ac14140f, cluster identity 4711 [ 610.761063][T19057] tipc: New replicast peer: 255.255.255.255 [ 610.841466][T19057] tipc: Enabled bearer , priority 10 [ 612.183760][T19071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4621'. [ 613.148032][ T5727] tipc: Node number set to 2886997007 [ 613.822474][ T37] audit: type=1326 audit(1777722566.564:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19085 comm="syz.1.4628" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf68aecdd9 code=0x0 [ 613.844153][ T4908] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 613.933964][T19075] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 614.123507][T18807] hsr_slave_0: entered promiscuous mode [ 614.128782][T18807] hsr_slave_1: entered promiscuous mode [ 614.135963][T18807] debugfs: 'hsr0' already exists in 'hsr' [ 614.135987][T18807] Cannot create hsr debugfs directory [ 614.772920][ T6740] hsr_slave_0: left promiscuous mode [ 614.893910][ T6740] hsr_slave_1: left promiscuous mode [ 614.945833][T19113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4634'. [ 616.300459][T19131] siw: device registration error -23 [ 617.672031][ T5253] 8021q: adding VLAN 0 to HW filter on device eth3 [ 619.259368][T19157] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 619.473464][T19161] team0: Unable to change to the same mode the team is in [ 619.761696][T19179] netlink: 'syz.1.4654': attribute type 1 has an invalid length. [ 621.487733][T18807] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 621.867468][T18807] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 621.868469][T18807] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 622.106684][T18807] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 622.142743][T18807] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 623.066205][T18807] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 623.094109][ T5253] 8021q: adding VLAN 0 to HW filter on device eth4 [ 623.207948][T18807] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 623.641236][T19229] netlink: 'syz.2.4667': attribute type 1 has an invalid length. [ 624.237789][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.396526][T18807] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 625.055223][T19251] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 625.058311][T19251] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4672'. [ 625.608608][T19253] netlink: 'syz.0.4671': attribute type 10 has an invalid length. [ 626.223151][T19257] siw: device registration error -23 [ 626.313742][ T4908] Bluetooth: hci3: command 0x0405 tx timeout [ 633.950920][ T37] audit: type=1326 audit(1777722586.694:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19276 comm="syz.3.4681" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe15294cdd9 code=0x0 [ 635.323351][T18807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.486214][T18807] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.779779][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.779920][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.094854][T19305] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 636.242604][ T6744] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.242755][ T6744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.923012][ T5727] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 636.941687][ T37] audit: type=1326 audit(1777722589.684:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19316 comm="syz.3.4690" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe15294cdd9 code=0x0 [ 637.252891][ T5727] usb 1-1: Using ep0 maxpacket: 8 [ 637.255256][ T5727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 637.255300][ T5727] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 637.255322][ T5727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.824786][ T5727] usb 1-1: config 0 descriptor?? [ 638.244422][ T5727] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 640.107681][ T5580] usb 1-1: USB disconnect, device number 22 [ 641.204397][T19367] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4701'. [ 645.516880][ T37] audit: type=1326 audit(1777722598.264:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19393 comm="syz.3.4710" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe15294cdd9 code=0x0 [ 651.724846][T19412] rdma_rxe: rxe_newlink: failed to add syz_tun [ 655.289915][ T4908] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 655.382007][ T4908] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 655.396948][ T4908] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 655.419047][ T4908] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 655.432330][ T4908] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 657.632949][T19333] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 657.642706][T17561] Bluetooth: hci4: command tx timeout [ 657.776484][T19333] bond0: (slave netdevsim0): Error: Slave does not support XDP [ 657.822386][ T5599] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 657.931263][ T5599] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 657.932618][T19453] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 657.961485][ T5599] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 657.965089][ T5599] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 658.008850][ T5599] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 658.028072][ T5599] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 658.037817][T17561] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 658.038845][T17561] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 658.040299][T17561] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 659.672993][ T4908] Bluetooth: hci4: command tx timeout [ 660.166371][ T4908] Bluetooth: hci6: command tx timeout [ 660.233395][ T4908] Bluetooth: hci7: command tx timeout [ 660.295415][ T6746] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.314155][ T6746] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.316501][ T6746] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.577700][ T6746] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.753003][ T4908] Bluetooth: hci4: command tx timeout [ 662.232977][ T4908] Bluetooth: hci6: command tx timeout [ 662.313402][ T4908] Bluetooth: hci7: command tx timeout [ 663.430956][T19333] syz_tun (unregistering): left allmulticast mode [ 663.853811][ T4908] Bluetooth: hci4: command tx timeout [ 664.312888][ T4908] Bluetooth: hci6: command tx timeout [ 664.393181][ T4908] Bluetooth: hci7: command tx timeout [ 666.263040][T19513] netlink: 'syz.3.4732': attribute type 10 has an invalid length. [ 666.263136][T19512] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4732'. [ 666.267514][T19369] syz_tun (unregistering): left allmulticast mode [ 666.392953][ T4908] Bluetooth: hci6: command tx timeout [ 666.473259][ T4908] Bluetooth: hci7: command tx timeout [ 670.219689][T19512] vxlan0: entered promiscuous mode [ 670.311002][ T121] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.372069][ T121] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.437802][ T121] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.518665][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.762867][T19526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.766113][T19537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4734'. [ 674.846134][T19542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4735'. [ 675.098464][T19542] syz_tun: entered promiscuous mode [ 678.523555][T17561] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 678.852060][T17561] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 678.871196][T17561] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 678.888340][T17561] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 678.889056][T17561] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 681.042926][ T4908] Bluetooth: hci2: command tx timeout [ 682.730349][T19586] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 683.112889][ T4908] Bluetooth: hci2: command tx timeout [ 683.412188][T19588] team0: Mode changed to "loadbalance" [ 685.193916][T17561] Bluetooth: hci2: command tx timeout [ 685.675589][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.273221][T17561] Bluetooth: hci2: command 0x0419 tx timeout [ 687.394438][T19448] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.394567][T19448] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.394751][T19448] bridge_slave_0: entered allmulticast mode [ 687.423480][T19448] bridge_slave_0: entered promiscuous mode [ 688.194322][T19448] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.194453][T19448] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.194629][T19448] bridge_slave_1: entered allmulticast mode [ 688.276204][T19448] bridge_slave_1: entered promiscuous mode [ 689.353277][ T4908] Bluetooth: hci2: command 0x0419 tx timeout [ 690.496779][T19449] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.520317][T19449] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.536834][T19449] bridge_slave_0: entered allmulticast mode [ 690.542107][T19449] bridge_slave_0: entered promiscuous mode [ 690.644983][T19434] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.645107][T19434] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.645275][T19434] bridge_slave_0: entered allmulticast mode [ 690.654158][T19434] bridge_slave_0: entered promiscuous mode [ 691.355309][T19449] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.355431][T19449] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.355592][T19449] bridge_slave_1: entered allmulticast mode [ 691.358334][T19449] bridge_slave_1: entered promiscuous mode [ 691.513442][T19434] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.513559][T19434] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.513748][T19434] bridge_slave_1: entered allmulticast mode [ 691.594673][T19434] bridge_slave_1: entered promiscuous mode [ 692.036006][T19448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.668454][T19448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.070273][T19497] bridge0: port 1(syz_tun) entered disabled state [ 694.679820][T19497] syz_tun (unregistering): left allmulticast mode [ 694.679852][T19497] syz_tun (unregistering): left promiscuous mode [ 694.679958][T19497] bridge0: port 1(syz_tun) entered disabled state [ 695.877144][T19449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.939997][T19434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.460180][T19449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.557162][T19434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.561254][T19448] team0: Port device team_slave_0 added [ 698.163874][T19448] team0: Port device team_slave_1 added [ 698.450468][T19449] team0: Port device team_slave_0 added [ 698.457177][T19434] team0: Port device team_slave_0 added [ 698.727062][T19449] team0: Port device team_slave_1 added [ 698.753735][T19434] team0: Port device team_slave_1 added [ 698.784354][T19448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.784367][T19448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.784392][T19448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.208634][T19448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.208649][T19448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 699.208675][T19448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.242994][T19449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.243012][T19449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.243037][T19449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.334041][T19434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.334057][T19434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.334082][T19434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.352410][T19449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.352425][T19449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.352451][T19449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.667819][T19434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.667835][T19434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.667862][T19434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.983070][T19448] hsr_slave_0: entered promiscuous mode [ 701.989157][T19448] hsr_slave_1: entered promiscuous mode [ 701.990062][T19448] debugfs: 'hsr0' already exists in 'hsr' [ 701.990086][T19448] Cannot create hsr debugfs directory [ 703.788884][T19449] hsr_slave_0: entered promiscuous mode [ 703.790117][T19449] hsr_slave_1: entered promiscuous mode [ 703.790994][T19449] debugfs: 'hsr0' already exists in 'hsr' [ 703.791015][T19449] Cannot create hsr debugfs directory [ 703.811227][T19434] hsr_slave_0: entered promiscuous mode [ 703.812417][T19434] hsr_slave_1: entered promiscuous mode [ 703.850028][T17561] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 703.965213][T17561] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 703.986542][T19434] debugfs: 'hsr0' already exists in 'hsr' [ 703.986566][T19434] Cannot create hsr debugfs directory [ 704.004458][T17561] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 704.005484][T17561] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 704.006475][T17561] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 706.073820][ T4908] Bluetooth: hci1: command tx timeout [ 708.285066][ T4908] Bluetooth: hci1: command tx timeout [ 710.313108][ T4908] Bluetooth: hci1: command tx timeout [ 712.392943][ T4908] Bluetooth: hci1: command tx timeout [ 712.861964][T19558] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.863022][T19558] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.863217][T19558] bridge_slave_0: entered allmulticast mode [ 712.868377][T19558] bridge_slave_0: entered promiscuous mode [ 713.580141][T19558] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.580258][T19558] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.580461][T19558] bridge_slave_1: entered allmulticast mode [ 713.588009][T19558] bridge_slave_1: entered promiscuous mode [ 716.908398][T17561] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 716.948399][T17561] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 717.045820][T17561] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 717.100462][T17561] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 717.110005][T17561] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 719.195234][ T4908] Bluetooth: hci3: command tx timeout [ 720.816155][T17561] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 721.017661][T17561] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 721.022312][T17561] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 721.028389][T17561] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 721.029051][T17561] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 721.222648][T17561] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 721.271013][T17561] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 721.279321][T17561] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 721.304231][T17561] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 721.318988][T17561] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 721.361392][T17561] Bluetooth: hci3: command tx timeout [ 723.112936][ T4908] Bluetooth: hci0: command tx timeout [ 723.442168][ T4908] Bluetooth: hci3: command tx timeout [ 723.513032][ T4908] Bluetooth: hci4: command tx timeout [ 723.710813][T19558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.377698][T19625] syz_tun (unregistering): left promiscuous mode [ 725.193109][ T4908] Bluetooth: hci0: command tx timeout [ 725.512997][ T4908] Bluetooth: hci3: command tx timeout [ 725.592981][ T4908] Bluetooth: hci4: command tx timeout [ 727.273743][ T4908] Bluetooth: hci0: command tx timeout [ 727.673059][ T4908] Bluetooth: hci4: command tx timeout [ 728.317942][T19558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.370277][ T4908] Bluetooth: hci0: command tx timeout [ 730.132862][ T4908] Bluetooth: hci4: command tx timeout [ 733.198502][T19558] team0: Port device team_slave_0 added [ 733.279471][T19558] team0: Port device team_slave_1 added [ 734.476617][T19558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.476633][T19558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.476657][T19558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.489349][T19558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.489361][T19558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.489386][T19558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.086982][T19558] hsr_slave_0: entered promiscuous mode [ 736.088256][T19558] hsr_slave_1: entered promiscuous mode [ 736.089141][T19558] debugfs: 'hsr0' already exists in 'hsr' [ 736.089164][T19558] Cannot create hsr debugfs directory [ 742.150125][T17561] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 742.166043][T17561] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 742.194526][T17561] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 742.238209][T17561] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 742.246322][T17561] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 744.395401][ T4908] Bluetooth: hci5: command tx timeout [ 746.504667][ T4908] Bluetooth: hci5: command tx timeout [ 747.132567][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.348760][T19651] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.348886][T19651] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.349075][T19651] bridge_slave_0: entered allmulticast mode [ 747.352461][T19651] bridge_slave_0: entered promiscuous mode [ 747.511002][T19651] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.511128][T19651] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.511314][T19651] bridge_slave_1: entered allmulticast mode [ 747.526913][T19651] bridge_slave_1: entered promiscuous mode [ 748.552890][ T4908] Bluetooth: hci5: command tx timeout [ 750.632950][ T4908] Bluetooth: hci5: command tx timeout [ 750.659415][T19651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.079407][T19651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.190918][T19651] team0: Port device team_slave_0 added [ 755.387112][T19651] team0: Port device team_slave_1 added [ 756.626120][T19651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.626137][T19651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.626161][T19651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.366587][T19651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.366605][T19651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.366630][T19651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.126376][T19668] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.126571][T19668] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.126786][T19668] bridge_slave_0: entered allmulticast mode [ 762.132348][T19668] bridge_slave_0: entered promiscuous mode [ 762.958619][T19668] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.958736][T19668] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.958989][T19668] bridge_slave_1: entered allmulticast mode [ 762.988242][T19668] bridge_slave_1: entered promiscuous mode [ 763.727833][T17561] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 763.743548][T17561] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 763.772404][T17561] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 763.812493][T17561] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 763.832531][T17561] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 764.386259][T19676] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.386444][T19676] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.386670][T19676] bridge_slave_0: entered allmulticast mode [ 764.391394][T19676] bridge_slave_0: entered promiscuous mode [ 764.755529][T19668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 764.926103][T19676] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.926224][T19676] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.926434][T19676] bridge_slave_1: entered allmulticast mode [ 764.931993][T19676] bridge_slave_1: entered promiscuous mode [ 765.070949][T19668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.992990][ T4908] Bluetooth: hci2: command tx timeout [ 768.072893][ T4908] Bluetooth: hci2: command tx timeout [ 768.439461][T19680] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.439580][T19680] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.439825][T19680] bridge_slave_0: entered allmulticast mode [ 768.472366][T19680] bridge_slave_0: entered promiscuous mode [ 769.740744][T19680] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.740935][T19680] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.741158][T19680] bridge_slave_1: entered allmulticast mode [ 769.749932][T19680] bridge_slave_1: entered promiscuous mode [ 769.770010][T19676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 770.124783][T19668] team0: Port device team_slave_0 added [ 770.213117][ T4908] Bluetooth: hci2: command tx timeout [ 770.322861][T19676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 770.329034][T19668] team0: Port device team_slave_1 added [ 771.760872][T19680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.272791][T17561] Bluetooth: hci2: command tx timeout [ 774.625261][T19680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.631805][T19676] team0: Port device team_slave_0 added [ 774.638221][T19668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.638235][T19668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.638259][T19668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.690964][T19676] team0: Port device team_slave_1 added [ 774.696977][T19668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.696992][T19668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.697016][T19668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.745707][T19680] team0: Port device team_slave_0 added [ 776.537043][T19680] team0: Port device team_slave_1 added [ 776.539783][T19676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.539797][T19676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.539823][T19676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.678881][ T4908] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 776.822039][ T4908] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 776.832905][ T4908] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 776.851800][ T4908] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 776.855404][ T4908] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 777.028073][T19676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.028088][T19676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.028113][T19676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 778.065449][T19680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.065466][T19680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 778.065492][T19680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 778.216351][T19680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 778.216366][T19680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 778.216392][T19680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.136273][T17561] Bluetooth: hci1: command tx timeout [ 779.689541][ T4908] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 779.747283][ T4908] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 779.748718][ T4908] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 779.794949][ T4908] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 779.796313][ T4908] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 781.192837][ T4908] Bluetooth: hci1: command tx timeout [ 781.400248][T17561] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 781.455944][T17561] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 781.458818][T17561] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 781.514770][T17561] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 781.515590][T17561] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 781.913635][T17561] Bluetooth: hci3: command tx timeout [ 783.355019][T17561] Bluetooth: hci1: command tx timeout [ 783.672881][T17561] Bluetooth: hci8: command tx timeout [ 783.993461][T17561] Bluetooth: hci3: command tx timeout [ 784.262988][T19709] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.263183][T19709] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.263460][T19709] bridge_slave_0: entered allmulticast mode [ 784.294516][T19709] bridge_slave_0: entered promiscuous mode [ 785.062794][T17561] Bluetooth: hci7: command 0x0406 tx timeout [ 785.062828][T17561] Bluetooth: hci6: command 0x0406 tx timeout [ 785.433139][T19453] Bluetooth: hci1: command tx timeout [ 785.842925][T17561] Bluetooth: hci8: command tx timeout [ 786.072865][T19453] Bluetooth: hci3: command tx timeout [ 788.091273][ T5599] Bluetooth: hci8: command tx timeout [ 788.153487][T19453] Bluetooth: hci3: command tx timeout [ 788.853076][T19709] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.853197][T19709] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.853462][T19709] bridge_slave_1: entered allmulticast mode [ 788.859958][T19709] bridge_slave_1: entered promiscuous mode [ 790.163074][ T4908] Bluetooth: hci8: command tx timeout [ 790.798736][T19709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.824490][T19709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.079570][T19709] team0: Port device team_slave_0 added [ 791.419300][T19709] team0: Port device team_slave_1 added [ 795.461652][T19709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.461668][T19709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.461694][T19709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.642627][T19709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.642643][T19709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.642668][T19709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.285558][T19709] hsr_slave_0: entered promiscuous mode [ 800.300157][T19709] hsr_slave_1: entered promiscuous mode [ 800.301101][T19709] debugfs: 'hsr0' already exists in 'hsr' [ 800.301124][T19709] Cannot create hsr debugfs directory [ 802.731595][T19453] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 802.767486][T19453] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 802.808692][ T5599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 802.811438][ T5599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 802.812161][ T5599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 805.204238][ T5599] Bluetooth: hci0: command tx timeout [ 807.273338][ T5599] Bluetooth: hci0: command tx timeout [ 808.512471][T19749] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.554870][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.625953][T19749] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.626251][T19749] bridge_slave_0: entered allmulticast mode [ 808.647455][T19749] bridge_slave_0: entered promiscuous mode [ 809.321101][T19749] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.321216][T19749] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.321760][T19749] bridge_slave_1: entered allmulticast mode [ 809.371322][T19749] bridge_slave_1: entered promiscuous mode [ 809.434244][ T4908] Bluetooth: hci0: command tx timeout [ 811.513115][ T4908] Bluetooth: hci0: command tx timeout [ 813.985705][T19749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.805912][T19749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.426273][T19749] team0: Port device team_slave_0 added [ 817.500199][T19749] team0: Port device team_slave_1 added [ 818.490934][T19749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.490952][T19749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.490977][T19749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 821.358604][T19749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 821.358621][T19749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.358647][T19749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.928757][ T5599] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 823.970861][ T5599] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 823.992623][ T5599] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 824.014117][ T5599] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 824.038371][ T5599] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 826.553437][ T4908] Bluetooth: hci4: command tx timeout [ 827.987707][T19776] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.987828][T19776] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.988049][T19776] bridge_slave_0: entered allmulticast mode [ 828.003439][T19776] bridge_slave_0: entered promiscuous mode [ 828.010250][T19766] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.010374][T19766] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.010582][T19766] bridge_slave_0: entered allmulticast mode [ 828.019704][T19766] bridge_slave_0: entered promiscuous mode [ 828.172689][T19776] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.172964][T19776] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.173513][T19776] bridge_slave_1: entered allmulticast mode [ 828.247128][T19776] bridge_slave_1: entered promiscuous mode [ 828.248716][T19766] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.248832][T19766] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.249039][T19766] bridge_slave_1: entered allmulticast mode [ 828.282446][T19766] bridge_slave_1: entered promiscuous mode [ 828.632823][ T4908] Bluetooth: hci4: command tx timeout [ 829.493360][T19783] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.538280][T19783] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.555495][T19783] bridge_slave_0: entered allmulticast mode [ 829.949593][T19783] bridge_slave_0: entered promiscuous mode [ 830.712876][ T4908] Bluetooth: hci4: command tx timeout [ 832.796704][ T4908] Bluetooth: hci4: command tx timeout [ 835.142517][T19783] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.177105][T19783] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.346868][T19783] bridge_slave_1: entered allmulticast mode [ 835.362628][T19783] bridge_slave_1: entered promiscuous mode [ 835.387515][T19776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.414238][T19766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.537426][T19776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.572349][T19766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 837.480082][T19783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 838.847913][ T5599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 838.864329][T19783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 838.931029][ T5599] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 838.942634][ T5599] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 838.959120][ T5599] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 838.976185][ T5599] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 840.655484][ T5599] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 840.726298][ T5599] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 840.729963][ T5599] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 840.787697][ T5599] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 840.882862][ T5599] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 841.265547][ T4908] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 841.370477][ T4908] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 841.372883][ T4908] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 841.380863][ T4908] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 841.388465][ T4908] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 841.593289][ T4908] Bluetooth: hci2: command tx timeout [ 843.112994][ T4908] Bluetooth: hci5: command tx timeout [ 843.683216][ T5599] Bluetooth: hci2: command tx timeout [ 843.696337][ T4908] Bluetooth: hci9: command tx timeout [ 845.315579][ T4908] Bluetooth: hci5: command tx timeout [ 845.757343][ T4908] Bluetooth: hci9: command tx timeout [ 845.757370][ T4908] Bluetooth: hci2: command tx timeout [ 847.367348][ T5599] Bluetooth: hci5: command tx timeout [ 847.833240][ T5599] Bluetooth: hci2: command tx timeout [ 847.833270][ T5599] Bluetooth: hci9: command tx timeout [ 848.387391][T19810] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.390992][T19810] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.391214][T19810] bridge_slave_0: entered allmulticast mode [ 848.424049][T19810] bridge_slave_0: entered promiscuous mode [ 848.451482][T19810] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.451675][T19810] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.451886][T19810] bridge_slave_1: entered allmulticast mode [ 848.485314][T19810] bridge_slave_1: entered promiscuous mode [ 848.784962][T19810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.810659][T19810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.432809][ T4908] Bluetooth: hci5: command tx timeout [ 849.912786][ T4908] Bluetooth: hci9: command tx timeout [ 851.021392][T19810] team0: Port device team_slave_0 added [ 851.121473][T19810] team0: Port device team_slave_1 added [ 853.634734][T19810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 853.634751][T19810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.634775][T19810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 854.326385][T19810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 854.326401][T19810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.326427][T19810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 854.819974][T19842] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.820096][T19842] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.820305][T19842] bridge_slave_0: entered allmulticast mode [ 854.828045][T19842] bridge_slave_0: entered promiscuous mode [ 855.007748][T19842] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.007947][T19842] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.008385][T19842] bridge_slave_1: entered allmulticast mode [ 855.012673][T19842] bridge_slave_1: entered promiscuous mode [ 860.099229][T19810] hsr_slave_0: entered promiscuous mode [ 860.109864][T19810] hsr_slave_1: entered promiscuous mode [ 860.112456][T19810] debugfs: 'hsr0' already exists in 'hsr' [ 860.112479][T19810] Cannot create hsr debugfs directory [ 860.127518][T19842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 860.750072][T19842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 861.424551][T19842] team0: Port device team_slave_0 added [ 861.487776][T19842] team0: Port device team_slave_1 added [ 861.805821][ T5599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 861.847816][ T5599] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 861.849234][ T5599] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 861.850620][ T5599] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 861.851401][ T5599] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 863.173351][T19842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 863.173368][T19842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.173394][T19842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 863.407115][T19842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 863.407131][T19842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.407157][T19842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 864.242875][ T5599] Bluetooth: hci1: command tx timeout [ 866.312923][ T5599] Bluetooth: hci1: command tx timeout [ 868.421793][ T5599] Bluetooth: hci1: command tx timeout [ 869.998951][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.553423][ T5599] Bluetooth: hci1: command tx timeout [ 871.364817][T19842] hsr_slave_0: entered promiscuous mode [ 871.397324][T19842] hsr_slave_1: entered promiscuous mode [ 871.399932][T19842] debugfs: 'hsr0' already exists in 'hsr' [ 871.399956][T19842] Cannot create hsr debugfs directory [ 876.678529][T19876] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.678648][T19876] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.678873][T19876] bridge_slave_0: entered allmulticast mode [ 876.945849][T19876] bridge_slave_0: entered promiscuous mode [ 879.676042][T19876] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.676257][T19876] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.676558][T19876] bridge_slave_1: entered allmulticast mode [ 880.019305][T19876] bridge_slave_1: entered promiscuous mode [ 880.233724][ T38] INFO: task kworker/u8:6:18543 blocked for more than 143 seconds. [ 880.233758][ T38] Not tainted syzkall[ 880.233758][ T38] Not tainted syzkaller #0 [ 880.233769][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 880.233777][ T38] task:kworker/u8:6 state:D stack:20440 pid:18543 tgid:18543 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 880.233839][ T38] Workqueue: netns cleanup_net [ 880.233956][ T38] Call Trace: [ 880.233962][ T38] [ 880.233973][ T38] __schedule+0x1681/0x54c0 [ 880.234013][ T38] ? __pfx___schedule+0x10/0x10 [ 880.234038][ T38] rt_mutex_schedule+0x76/0xf0 [ 880.234092][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 880.234134][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 880.234163][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 880.234191][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 880.234229][ T38] ? rcu_barrier+0x4c/0x580 [ 880.234302][ T38] ? rcu_barrier+0x4c/0x580 [ 880.234325][ T38] ? rcu_barrier+0x4c/0x580 [ 880.234342][ T38] mutex_lock_nested+0x168/0x1d0 [ 880.234368][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 880.234400][ T38] rcu_barrier+0x4c/0x580 [ 880.234428][ T38] netdev_run_todo+0x2e0/0xde0 [ 880.234518][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 880.234543][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 880.234592][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 880.234619][ T38] ? nsim_destroy+0x423/0x830 [ 880.234681][ T38] nsim_destroy+0x44d/0x830 [ 880.234717][ T38] __nsim_dev_port_del+0x14f/0x200 [ 880.234768][ T38] nsim_dev_reload_destroy+0x288/0x490 [ 880.234797][ T38] nsim_dev_reload_down+0x8a/0xc0 [ 880.234822][ T38] devlink_reload+0x1eb/0x8d0 [ 880.234895][ T38] ? __pfx_devlink_reload+0x10/0x10 [ 880.234923][ T38] ? xa_get_mark+0x6fc/0x7b0 [ 880.234960][ T38] devlink_pernet_pre_exit+0x1ff/0x420 [ 880.234990][ T38] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 880.235027][ T38] ? class_remove_file_ns+0x124/0x160 [ 880.235107][ T38] ops_undo_list+0x187/0x940 [ 880.235133][ T38] ? rt_spin_unlock+0x160/0x200 [ 880.235161][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 880.235181][ T38] ? rt_spin_unlock+0x14f/0x200 [ 880.235211][ T38] ? idr_destroy+0x21b/0x2a0 [ 880.235230][ T38] ? rt_spin_unlock+0x160/0x200 [ 880.235261][ T38] cleanup_net+0x56e/0x800 [ 880.235285][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 880.235314][ T38] ? process_scheduled_works+0xa70/0x1860 [ 880.235335][ T38] ? process_scheduled_works+0xa70/0x1860 [ 880.235358][ T38] process_scheduled_works+0xb5d/0x1860 [ 880.235410][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 880.235438][ T38] ? assign_work+0x3d5/0x5e0 [ 880.235464][ T38] worker_thread+0xa53/0xfc0 [ 880.235518][ T38] kthread+0x388/0x470 [ 880.235545][ T38] ? __pfx_worker_thread+0x10/0x10 [ 880.235565][ T38] ? __pfx_kthread+0x10/0x10 [ 880.235593][ T38] ret_from_fork+0x514/0xb70 [ 880.235618][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 880.235641][ T38] ? __switch_to+0xc79/0x1410 [ 880.235673][ T38] ? __pfx_kthread+0x10/0x10 [ 880.235701][ T38] ret_from_fork_asm+0x1a/0x30 [ 880.235758][ T38] [ 880.235791][ T38] INFO: task syz-executor:19434 blocked for more than 143 seconds. [ 880.235805][ T38] Not tainted syzkaller #0 [ 880.235815][ T38] Blocked by coredump. [ 880.235821][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 880.235830][ T38] task:syz-executor state:D stack:18392 pid:19434 tgid:19434 ppid:1 task_flags:0x40054c flags:0x00080003 [ 880.235881][ T38] Call Trace: [ 880.235888][ T38] [ 880.235899][ T38] __schedule+0x1681/0x54c0 [ 880.235918][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 880.236029][ T38] ? __pfx___schedule+0x10/0x10 [ 880.236064][ T38] rt_mutex_schedule+0x76/0xf0 [ 880.236083][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 880.236128][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 880.236158][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 880.236186][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 880.236224][ T38] ? rcu_barrier+0x4c/0x580 [ 880.236248][ T38] ? rcu_barrier+0x4c/0x580 [ 880.236273][ T38] ? rcu_barrier+0x4c/0x580 [ 880.236290][ T38] mutex_lock_nested+0x168/0x1d0 [ 880.236316][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 880.236348][ T38] rcu_barrier+0x4c/0x580 [ 880.236377][ T38] netdev_run_todo+0x2e0/0xde0 [ 880.236410][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 880.236435][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 880.236453][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 880.236481][ T38] ? netdev_state_change+0x1ca/0x220 [ 880.236537][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 880.236608][ T38] tun_chr_close+0x13f/0x1c0 [ 880.236631][ T38] __fput+0x461/0xa70 [ 880.236719][ T38] task_work_run+0x1d9/0x270 [ 880.236749][ T38] ? __pfx_task_work_run+0x10/0x10 [ 880.236778][ T38] ? do_exit+0x70a/0x22c0 [ 880.236802][ T38] ? kmem_cache_free+0x187/0x6c0 [ 880.236848][ T38] ? put_net+0x191/0x260 [ 880.236868][ T38] ? do_exit+0x70a/0x22c0 [ 880.236897][ T38] do_exit+0x70f/0x22c0 [ 880.236926][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 880.237054][ T38] ? __pfx_do_exit+0x10/0x10 [ 880.237079][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 880.237104][ T38] ? reacquire_held_locks+0x104/0x190 [ 880.237134][ T38] ? rt_spin_lock+0x1e0/0x400 [ 880.237173][ T38] do_group_exit+0x21b/0x2d0 [ 880.237201][ T38] ? rt_spin_unlock+0x160/0x200 [ 880.237231][ T38] get_signal+0x125c/0x1310 [ 880.237272][ T38] arch_do_signal_or_restart+0xbc/0x830 [ 880.237307][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 880.237354][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.237377][ T38] exit_to_user_mode_loop+0x86/0x480 [ 880.237452][ T38] ? rcu_is_watching+0x15/0xb0 [ 880.237572][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.237595][ T38] do_syscall_64+0x33e/0xf80 [ 880.237618][ T38] ? clear_bhb_loop+0x40/0x90 [ 880.237642][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.237669][ T38] RIP: 0033:0x7efe7e03d60e [ 880.237687][ T38] RSP: 002b:00007fff8433fb58 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 880.237708][ T38] RAX: 0000000000000060 RBX: 000055556e022500 RCX: 00007efe7e03d60e [ 880.237721][ T38] RDX: 0000000000000060 RSI: 00007efe7ee24670 RDI: 0000000000000003 [ 880.237733][ T38] RBP: 0000000000000001 R08: 00007fff8433fbd4 R09: 000000000000000c [ 880.237744][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 880.237756][ T38] R13: 0000000000000000 R14: 00007efe7ee24670 R15: 0000000000000000 [ 880.237786][ T38] [ 880.237796][ T38] INFO: task syz-executor:19449 blocked for more than 143 seconds. [ 880.237810][ T38] Not tainted syzkaller #0 [ 880.237819][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 880.237828][ T38] task:syz-executor state:D stack:18816 pid:19449 tgid:19449 ppid:1 task_flags:0x400140 flags:0x00080002 [ 880.237878][ T38] Call Trace: [ 880.237884][ T38] [ 880.237896][ T38] __schedule+0x1681/0x54c0 [ 880.237930][ T38] ? arch_scale_cpu_capacity+0x18/0xb0 [ 880.237968][ T38] ? __pfx___schedule+0x10/0x10 [ 880.237984][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 880.238025][ T38] rt_mutex_schedule+0x76/0xf0 [ 880.238046][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 880.238085][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 880.238115][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 880.238144][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 880.238173][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 880.238212][ T38] ? del_device_store+0xd7/0x370 [ 880.238236][ T38] ? del_device_store+0xd7/0x370 [ 880.238260][ T38] ? del_device_store+0xd7/0x370 [ 880.238277][ T38] mutex_lock_nested+0x168/0x1d0 [ 880.238308][ T38] del_device_store+0xd7/0x370 [ 880.238326][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 880.238429][ T38] ? __pfx_del_device_store+0x10/0x10 [ 880.238448][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 880.238476][ T38] ? sysfs_kf_write+0x166/0x260 [ 880.238515][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 880.238542][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 880.238573][ T38] vfs_write+0x629/0xba0 [ 880.238603][ T38] ? __pfx_vfs_write+0x10/0x10 [ 880.238629][ T38] ? do_sys_openat2+0x14c/0x200 [ 880.238682][ T38] ? kmem_cache_free+0x187/0x6c0 [ 880.238720][ T38] ksys_write+0x156/0x270 [ 880.238745][ T38] ? __pfx_ksys_write+0x10/0x10 [ 880.238774][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.238797][ T38] do_syscall_64+0x15f/0xf80 [ 880.238817][ T38] ? trace_irq_disable+0x3b/0x140 [ 880.238888][ T38] ? clear_bhb_loop+0x40/0x90 [ 880.238913][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.238932][ T38] RIP: 0033:0x7f491a83d60e [ 880.238949][ T38] RSP: 002b:00007ffe95691ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 880.238969][ T38] RAX: ffffffffffffffda RBX: 000055557528e500 RCX: 00007f491a83d60e [ 880.238983][ T38] RDX: 0000000000000001 RSI: 00007ffe95691d70 RDI: 0000000000000005 [ 880.238996][ T38] RBP: 00007f491a9135ec R08: 0000000000000000 R09: 0000000000000000 [ 880.239008][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.239020][ T38] R13: 00007ffe95691d70 R14: 00007f491b624620 R15: 0000000000000003 [ 880.239050][ T38] [ 880.239065][ T38] INFO: task syz.3.4747:19625 blocked for more than 143 seconds. [ 880.239080][ T38] Not tainted syzkaller #0 [ 880.239089][ T38] Blocked by coredump. [ 880.239095][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 880.239103][ T38] task:syz.3.4747 state:D stack:21696 pid:19625 tgid:19625 ppid:18031 task_flags:0x40044c flags:0x00080003 [ 880.239157][ T38] Call Trace: [ 880.239163][ T38] [ 880.239174][ T38] __schedule+0x1681/0x54c0 [ 880.239193][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 880.239249][ T38] ? __pfx___schedule+0x10/0x10 [ 880.239283][ T38] rt_mutex_schedule+0x76/0xf0 [ 880.239303][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 880.239349][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 880.239379][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 880.239408][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 880.239446][ T38] ? rcu_barrier+0x4c/0x580 [ 880.239469][ T38] ? rcu_barrier+0x4c/0x580 [ 880.239509][ T38] ? rcu_barrier+0x4c/0x580 [ 880.239526][ T38] mutex_lock_nested+0x168/0x1d0 [ 880.239551][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 880.243517][ T38] rcu_barrier+0x4c/0x580 [ 880.243550][ T38] netdev_run_todo+0x2e0/0xde0 [ 880.243575][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 880.243593][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 880.243607][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 880.243627][ T38] ? netdev_state_change+0x1ca/0x220 [ 880.243644][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 880.243659][ T38] tun_chr_close+0x13f/0x1c0 [ 880.243675][ T38] __fput+0x461/0xa70 [ 880.243703][ T38] task_work_run+0x1d9/0x270 [ 880.243726][ T38] ? __pfx_task_work_run+0x10/0x10 [ 880.243748][ T38] ? do_exit+0x70a/0x22c0 [ 880.243767][ T38] ? kmem_cache_free+0x187/0x6c0 [ 880.243783][ T38] ? put_net+0x191/0x260 [ 880.243797][ T38] ? do_exit+0x70a/0x22c0 [ 880.243819][ T38] do_exit+0x70f/0x22c0 [ 880.243841][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 880.243862][ T38] ? __pfx_do_exit+0x10/0x10 [ 880.243880][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 880.243903][ T38] ? reacquire_held_locks+0x104/0x190 [ 880.243925][ T38] ? rt_spin_lock+0x1e0/0x400 [ 880.243953][ T38] do_group_exit+0x21b/0x2d0 [ 880.243972][ T38] ? rt_spin_unlock+0x160/0x200 [ 880.243993][ T38] get_signal+0x125c/0x1310 [ 880.244024][ T38] arch_do_signal_or_restart+0xbc/0x830 [ 880.244050][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 880.244084][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.244100][ T38] exit_to_user_mode_loop+0x86/0x480 [ 880.244118][ T38] ? rcu_is_watching+0x15/0xb0 [ 880.244138][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.244154][ T38] do_syscall_64+0x33e/0xf80 [ 880.244170][ T38] ? trace_irq_disable+0x3b/0x140 [ 880.244188][ T38] ? clear_bhb_loop+0x40/0x90 [ 880.244207][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.244223][ T38] RIP: 0033:0x7fe15294cdd9 [ 880.244236][ T38] RSP: 002b:00007fff9fad3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 880.244252][ T38] RAX: 0000000000000000 RBX: 00007fe152bc7da0 RCX: 00007fe15294cdd9 [ 880.244261][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 880.244270][ T38] RBP: 00007fe152bc7da0 R08: 00007fe152bc6128 R09: 0000000000000000 [ 880.244279][ T38] R10: 00000000005ed8cc R11: 0000000000000246 R12: 00000000000a7cd4 [ 880.244288][ T38] R13: 00007fe152bc5fac R14: 00000000000a7b9e R15: 00007fe152bc5fa0 [ 880.244311][ T38] [ 880.244374][ T38] [ 880.244374][ T38] Showing all locks held in the system: [ 880.244383][ T38] 4 locks held by rcuc/1/28: [ 880.244392][ T38] 8 locks held by ksoftirqd/1/30: [ 880.244401][ T38] 1 lock held by khungtaskd/38: [ 880.244409][ T38] #0: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 880.244455][ T38] 4 locks held by kworker/u8:5/121: [ 880.244483][ T38] 2 locks held by getty/5347: [ 880.244498][ T38] #0: ffff888032d4a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 880.244588][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 880.244665][ T38] 13 locks held by kworker/u8:14/6742: [ 880.244674][ T38] 3 locks held by kworker/u8:16/6746: [ 880.244681][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 880.244714][ T38] #1: ffffc9000daf7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 880.244747][ T38] #2: ffffffff8f356b38 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 880.244846][ T38] 6 locks held by kworker/u8:6/18543: [ 880.244855][ T38] #0: ffff88801b290938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 880.244889][ T38] #1: ffffc90006c1fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 880.244925][ T38] #2: ffffffff8f347de0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 880.244963][ T38] #3: ffff88801fe91160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 880.245001][ T38] #4: ffff8880391ce310 (&devlink->lock_key#10){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 880.245040][ T38] #5: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 880.245076][ T38] 3 locks held by kworker/0:14/19358: [ 880.245084][ T38] 3 locks held by kworker/1:9/19397: [ 880.245092][ T38] #0: ffff88801a037938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 880.245125][ T38] #1: ffffc900047f7c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 880.245158][ T38] #2: ffffffff8f356b38 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 880.245229][ T38] 3 locks held by kworker/1:11/19399: [ 880.245239][ T38] 1 lock held by syz-executor/19434: [ 880.245247][ T38] #0: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 880.245278][ T38] 7 locks held by syz-executor/19448: [ 880.245287][ T38] #0: ffff888037422480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 880.245325][ T38] #1: ffff88806114a878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 880.245364][ T38] #2: ffff888024b5ae18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 880.245401][ T38] #3: ffffffff8ebcf0f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 880.245433][ T38] #4: ffff8880535db160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 880.245468][ T38] #5: ffff888025218310 (&devlink->lock_key#12){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 880.245517][ T38] #6: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 880.245558][ T38] 4 locks held by syz-executor/19449: [ 880.245569][ T38] #0: ffff888037422480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 880.245614][ T38] #1: ffff888038c96878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 880.245654][ T38] #2: ffff888024b5ae18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 880.245699][ T38] #3: ffffffff8ebcf0f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 880.245742][ T38] 1 lock held by syz-executor/19558: [ 880.245753][ T38] #0: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 880.245793][ T38] 1 lock held by syz.3.4747/19625: [ 880.245803][ T38] #0: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 880.245845][ T38] 1 lock held by syz-executor/19651: [ 880.245856][ T38] #0: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 880.245897][ T38] 1 lock held by syz-executor/19668: [ 880.245908][ T38] #0: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 880.245949][ T38] 1 lock held by syz-executor/19676: [ 880.245959][ T38] #0: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 880.246000][ T38] 1 lock held by syz-executor/19680: [ 880.246010][ T38] #0: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 880.246051][ T38] 1 lock held by syz-executor/19709: [ 880.246062][ T38] #0: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 880.246104][ T38] 1 lock held by syz-executor/19749: [ 880.246114][ T38] #0: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 880.246156][ T38] 1 lock held by syz-executor/19766: [ 880.246166][ T38] #0: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 880.246208][ T38] 1 lock held by syz-executor/19776: [ 880.246218][ T38] #0: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 880.246260][ T38] 1 lock held by syz-executor/19783: [ 880.246270][ T38] #0: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 880.246311][ T38] 1 lock held by syz-executor/19810: [ 880.246321][ T38] #0: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 880.255348][ T38] 2 locks held by syz-executor/19867: [ 880.255359][ T38] #0: ffffffff8eabf548 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 880.255409][ T38] #1: ffffffff8f356b38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 880.255452][ T38] 2 locks held by syz-executor/19876: [ 880.255463][ T38] #0: ffffffff8eabf548 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 880.255521][ T38] #1: ffffffff8f356b38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 880.255562][ T38] 3 locks held by syz-executor/19882: [ 880.255574][ T38] 2 locks held by syz-executor/19919: [ 880.255585][ T38] #0: ffffffff8f347de0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 880.255625][ T38] #1: ffffffff8f356b38 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d7/0x840 [ 880.255711][ T38] [ 880.255716][ T38] ============================================= [ 880.255716][ T38] [ 880.255732][ T38] NMI backtrace for cpu 1 [ 880.255753][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 880.255774][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 880.255785][ T38] Call Trace: [ 880.255792][ T38] [ 880.255799][ T38] dump_stack_lvl+0xe8/0x150 [ 880.255821][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 880.255847][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 880.255869][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 880.255898][ T38] sys_info+0x135/0x170 [ 880.255920][ T38] watchdog+0xfd3/0x1030 [ 880.255972][ T38] ? watchdog+0x1c9/0x1030 [ 880.255997][ T38] kthread+0x388/0x470 [ 880.256022][ T38] ? __pfx_watchdog+0x10/0x10 [ 880.256040][ T38] ? __pfx_kthread+0x10/0x10 [ 880.256065][ T38] ret_from_fork+0x514/0xb70 [ 880.256089][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 880.256109][ T38] ? __switch_to+0xc79/0x1410 [ 880.256138][ T38] ? __pfx_kthread+0x10/0x10 [ 880.256164][ T38] ret_from_fork_asm+0x1a/0x30 [ 880.256199][ T38] [ 880.256206][ T38] Sending NMI from CPU 1 to CPUs 0: [ 880.256231][ C0] NMI backtrace for cpu 0 [ 880.256244][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 880.256263][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 880.256274][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 880.256355][ C0] Code: e8 1e 4a 90 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 8f 53 f7 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 1a f2 eb 05 cc 44 89 f9 80 e1 07 [ 880.256370][ C0] RSP: 0018:ffffc900001679d0 EFLAGS: 00000202 [ 880.256385][ C0] RAX: 1ffffffff3362c00 RBX: 00000000000003fd RCX: 0000000000000000 [ 880.256397][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 880.256408][ C0] RBP: ffffffff99b16930 R08: 0000000000000000 R09: 0000000000000000 [ 880.256419][ C0] R10: dffffc0000000000 R11: ffffffff853426c0 R12: dffffc0000000000 [ 880.256432][ C0] R13: 0000000000000000 R14: ffffffff99b166a0 R15: 0000000000000000 [ 880.256444][ C0] FS: 0000000000000000(0000) GS:ffff888126179000(0000) knlGS:0000000000000000 [ 880.256458][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 880.256470][ C0] CR2: 00007f44f64c25e5 CR3: 00000000b01d0000 CR4: 00000000003526f0 [ 880.256485][ C0] Call Trace: [ 880.256490][ C0] [ 880.256498][ C0] wait_for_lsr+0x1aa/0x2f0 [ 880.256523][ C0] serial8250_console_write+0x120d/0x1b90 [ 880.256553][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 880.256576][ C0] ? console_flush_one_record+0xfa/0xb90 [ 880.256624][ C0] ? console_flush_one_record+0x48f/0xb90 [ 880.256648][ C0] console_flush_one_record+0x68b/0xb90 [ 880.256674][ C0] ? console_flush_one_record+0xfa/0xb90 [ 880.256698][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 880.256721][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 880.256747][ C0] legacy_kthread_func+0x1b6/0x250 [ 880.256769][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 880.256791][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 880.256836][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 880.256860][ C0] kthread+0x388/0x470 [ 880.256883][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 880.256903][ C0] ? __pfx_kthread+0x10/0x10 [ 880.256925][ C0] ret_from_fork+0x514/0xb70 [ 880.256945][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 880.256963][ C0] ? __switch_to+0xc79/0x1410 [ 880.256990][ C0] ? __pfx_kthread+0x10/0x10 [ 880.257013][ C0] ret_from_fork_asm+0x1a/0x30 [ 880.257041][ C0] [ 880.257234][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 880.257247][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 880.257268][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 880.257277][ T38] Call Trace: [ 880.257284][ T38] [ 880.257291][ T38] vpanic+0x56c/0xa60 [ 880.257317][ T38] ? __pfx_vpanic+0x10/0x10 [ 880.257347][ T38] panic+0xc5/0xd0 [ 880.257368][ T38] ? __pfx_panic+0x10/0x10 [ 880.257399][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 880.257428][ T38] watchdog+0x102c/0x1030 [ 880.257455][ T38] ? watchdog+0x1c9/0x1030 [ 880.257480][ T38] kthread+0x388/0x470 [ 880.257510][ T38] ? __pfx_watchdog+0x10/0x10 [ 880.257528][ T38] ? __pfx_kthread+0x10/0x10 [ 880.257553][ T38] ret_from_fork+0x514/0xb70 [ 880.257575][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 880.257599][ T38] ? __switch_to+0xc79/0x1410 [ 880.257628][ T38] ? __pfx_kthread+0x10/0x10 [ 880.257653][ T38] ret_from_fork_asm+0x1a/0x30 [ 880.257689][ T38] [ 880.258021][ T38] Kernel Offset: disabled