last executing test programs: 1m34.979646094s ago: executing program 0 (id=3198): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="0200000002"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) 1m34.833885378s ago: executing program 0 (id=3199): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1m34.101910796s ago: executing program 0 (id=3208): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000000540)='\x00', 0x1, 0xfc77c4484dd0652e, &(0x7f0000000200)={0x11, 0x1, r3}, 0x14) 1m17.801117437s ago: executing program 0 (id=3208): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000000540)='\x00', 0x1, 0xfc77c4484dd0652e, &(0x7f0000000200)={0x11, 0x1, r3}, 0x14) 50.347772697s ago: executing program 0 (id=3208): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000000540)='\x00', 0x1, 0xfc77c4484dd0652e, &(0x7f0000000200)={0x11, 0x1, r3}, 0x14) 21.526488922s ago: executing program 0 (id=3208): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000000540)='\x00', 0x1, 0xfc77c4484dd0652e, &(0x7f0000000200)={0x11, 0x1, r3}, 0x14) 9.145183808s ago: executing program 2 (id=3644): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000000000020000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000086000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000000700000085000000b7000000"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) 8.765873507s ago: executing program 2 (id=3649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0) 7.992944238s ago: executing program 2 (id=3650): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="200603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001480)={0x84, &(0x7f0000001040)={0x40, 0x8, 0x2, "e249"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 6.730892375s ago: executing program 4 (id=3660): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.430462734s ago: executing program 4 (id=3662): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) 6.300349321s ago: executing program 4 (id=3663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1a42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20008090) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 6.062442953s ago: executing program 3 (id=3665): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x7, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(r0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000010000e1250000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000480), &(0x7f00000004c0)=r5}, 0x20) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 5.985110067s ago: executing program 3 (id=3666): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7ff, 0x64, 0x7, 0x3, 0x4}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40041}, 0x4044084) 5.761751513s ago: executing program 3 (id=3667): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="560a0000000000007b113000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.697587466s ago: executing program 1 (id=3668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8c00, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 5.591388925s ago: executing program 3 (id=3669): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x20002, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000200)={{r2}, 0x6, 0x2, 0x4}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100230100003402000006000000080001", @ANYRES32=r4], 0x24}}, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000000200)={0x192a50880, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x2a) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) r9 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r9, 0x4020565a, &(0x7f0000000180)={0x8000000, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) close_range(r1, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002380)={0x44, 0x0, &(0x7f0000001300)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x8100000000000000, &(0x7f0000001380)='r'}) 5.441211885s ago: executing program 1 (id=3670): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000000000020000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000086000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000000700000085000000b7000000"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) 4.535095385s ago: executing program 2 (id=3671): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000191c0)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 4.506903966s ago: executing program 3 (id=3672): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/188, 0xbc) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001d40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000001e80)={0x14, &(0x7f0000001dc0)={0x40, 0xa, 0x37, {0x37, 0x10, "5e6e284b475661719053d54a22eb5ae91ab62eb2bf3f854e2e4a07d1ed792520b9cc4f3805e6ea5b653d922e4ab5244b708f6c4335"}}, &(0x7f0000001e40)={0x0, 0x3, 0x2e, @string={0x2e, 0x3, "b7f02fd2c2733c96580197257036472d7950837c5877b35fa00a69b205452b1604d5a4c884b7ab03d32b9241"}}}, &(0x7f0000002080)={0x34, &(0x7f0000001ec0)={0x20, 0x15, 0x40, "3b533cf59787036591643f1aea5bed2c5c6954d4bfca2e3b26b58c423494599872bfa89c65a7dd5a5b8dd7fd8472fe5f67a38c97945351d8f7a66125f92e1b84"}, &(0x7f0000001f40)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001f80)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001fc0)={0x20, 0x0, 0x2c, {0x2a, "5152f4635cf20f5d30ad0be4531239fe8e4bc904dd9404d1911565bcc96a385fffe2d0eb807c70130cfe"}}, &(0x7f0000002000)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000002040)={0x20, 0x0, 0x1}}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001800)={0x2c, &(0x7f0000001640)={0x20, 0x11, 0x2c, {0x2c, 0xc, "8008ddb854a691d00c0d99a0115746e6e51a4699d9c26718811588ccbacab3124b8e133cef85aec57b65"}}, &(0x7f0000001680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x480a}}, 0x0, &(0x7f0000001780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x1, 0x7, "76aa6780", "96bc452b"}}, 0x0}, &(0x7f0000001c80)={0x84, 0x0, 0x0, &(0x7f00000018c0)={0x0, 0x8, 0x1}, &(0x7f0000001900)={0x20, 0x0, 0x4, {0x2}}, 0x0, &(0x7f0000001980)={0x40, 0x7, 0x2, 0x8482}, &(0x7f00000019c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000001a00)={0x40, 0xb, 0x2, "e052"}, &(0x7f0000001a40)={0x40, 0xf, 0x2, 0xa}, &(0x7f0000001a80)={0x40, 0x13, 0x6}, &(0x7f0000001ac0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, &(0x7f0000001b00)={0x40, 0x19, 0x2, "7bd5"}, 0x0, 0x0, &(0x7f0000001bc0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000001c00)={0x40, 0x21, 0x1, 0x3}}) syz_usb_connect(0x5, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000e2793b10d10501200036a85128010902120001000010000904"], 0x0) syz_usb_disconnect(r0) 4.417222836s ago: executing program 4 (id=3673): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) 4.416335732s ago: executing program 1 (id=3674): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x1000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 4.359013309s ago: executing program 4 (id=3675): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000180)={&(0x7f0000001100)={0x658, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe53}]}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x5bc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ID={0x5ad, 0x3, "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"}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x658}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) 4.249093805s ago: executing program 2 (id=3676): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400008ffffffff000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) 4.190879781s ago: executing program 1 (id=3677): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x3) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4.1480577s ago: executing program 4 (id=3678): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x2], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x400}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 4.04906631s ago: executing program 2 (id=3679): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x20c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x198, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xfff1}}, @TCA_BPF_ACT={0x170, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0xe8, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0xb1, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959e47bf0fe515b70ea5a3584d9cdba83a705d3257305f931866cf9f1faa34fce0e8a7ee76e20f05d4e1adbee4ba00ddd7b896197ea2a0391ef62c651d59ed7e0e8964192a2c1c29308d03650349840a4d759fc9421e3569c90"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x54, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x21, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}]}}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, 0x0) 175.120851ms ago: executing program 1 (id=3680): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0x2c, r1, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x15, 0x1, '\x00'/17}]}, 0x2c}}, 0x0) 174.753825ms ago: executing program 3 (id=3681): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) chdir(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x80, 0x88}, 'port0\x00', 0x87, 0x141c09, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x7, 0x1}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 0s ago: executing program 1 (id=3682): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2002, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): ss `syz.0.924'. [ 158.760522][ T7952] bond_slave_0: entered promiscuous mode [ 158.766265][ T7952] bond_slave_1: entered promiscuous mode [ 158.805712][ T7952] macsec0: entered promiscuous mode [ 158.840185][ T7952] bond0: entered promiscuous mode [ 158.881585][ T7952] bond0: left promiscuous mode [ 158.892917][ T7952] bond_slave_0: left promiscuous mode [ 158.898480][ T7952] bond_slave_1: left promiscuous mode [ 159.042948][ T7960] team_slave_0: entered promiscuous mode [ 159.048775][ T7960] team_slave_1: entered promiscuous mode [ 159.066491][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.935'. [ 159.078594][ T7960] vlan2: entered promiscuous mode [ 159.086104][ T7960] team0: entered promiscuous mode [ 159.783817][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.948'. [ 159.892137][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.950'. [ 160.084102][ T8001] netlink: 24 bytes leftover after parsing attributes in process `syz.4.953'. [ 160.234856][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.953'. [ 160.907797][ T8037] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.968'. [ 160.975803][ T8040] netlink: 24 bytes leftover after parsing attributes in process `syz.0.970'. [ 161.077699][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.970'. [ 161.108751][ T8047] bond_slave_0: entered promiscuous mode [ 161.114494][ T8047] bond_slave_1: entered promiscuous mode [ 161.125105][ T8047] macsec0: entered promiscuous mode [ 161.132890][ T8047] bond0: entered promiscuous mode [ 161.143848][ T8047] bond0: left promiscuous mode [ 161.151954][ T8047] bond_slave_0: left promiscuous mode [ 161.157485][ T8047] bond_slave_1: left promiscuous mode [ 161.336690][ T8052] team_slave_0: entered promiscuous mode [ 161.342493][ T8052] team_slave_1: entered promiscuous mode [ 161.378912][ T8052] vlan2: entered promiscuous mode [ 161.385353][ T8052] team0: entered promiscuous mode [ 161.786136][ T8070] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.173200][ T8086] bond_slave_0: entered promiscuous mode [ 162.179002][ T8086] bond_slave_1: entered promiscuous mode [ 162.185406][ T8086] macsec1: entered promiscuous mode [ 162.192080][ T8086] bond0: entered promiscuous mode [ 162.201238][ T8086] bond0: left promiscuous mode [ 162.206645][ T8086] bond_slave_0: left promiscuous mode [ 162.212236][ T8086] bond_slave_1: left promiscuous mode [ 162.328820][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.603877][ T8145] __nla_validate_parse: 8 callbacks suppressed [ 163.603899][ T8145] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1016'. [ 163.711122][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1016'. [ 163.894495][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1020'. [ 164.586434][ T8183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1032'. [ 164.639743][ T8183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1032'. [ 164.810066][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1035'. [ 165.596466][ T8225] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1049'. [ 165.649233][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1049'. [ 165.755618][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1053'. [ 165.768421][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1052'. [ 165.906123][ T8237] dummy0: entered promiscuous mode [ 165.935472][ T8237] macsec0: entered promiscuous mode [ 165.946432][ T8237] macsec0: entered allmulticast mode [ 165.967362][ T8237] dummy0: entered allmulticast mode [ 167.467591][ T8247] infiniband syz1: set active [ 167.503450][ T8247] infiniband syz1: added macvlan1 [ 167.514677][ T8247] syz1: rxe_create_cq: returned err = -12 [ 167.579745][ T8247] infiniband syz1: Couldn't create ib_mad CQ [ 167.585994][ T8247] infiniband syz1: Couldn't open port 1 [ 167.701425][ T8247] RDS/IB: syz1: added [ 167.705542][ T8247] smc: adding ib device syz1 with port count 1 [ 167.719496][ T8247] smc: ib device syz1 port 1 has pnetid [ 167.753404][ T8303] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 168.920713][ T8341] __nla_validate_parse: 8 callbacks suppressed [ 168.920733][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1095'. [ 169.515125][ T8360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1104'. [ 169.727913][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1107'. [ 169.788553][ T8367] bridge0: entered promiscuous mode [ 169.827592][ T8367] macsec1: entered allmulticast mode [ 169.849897][ T8367] bridge0: entered allmulticast mode [ 169.857941][ T8371] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1109'. [ 169.877360][ T8367] bridge0: left allmulticast mode [ 169.883125][ T8367] bridge0: left promiscuous mode [ 170.796934][ T8396] vlan2: entered promiscuous mode [ 171.374083][ T8414] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1129'. [ 172.223335][ T8444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1142'. [ 172.254377][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1141'. [ 172.321631][ T8441] bridge0: entered promiscuous mode [ 172.347448][ T8441] macsec1: entered allmulticast mode [ 172.357225][ T8441] bridge0: entered allmulticast mode [ 172.366739][ T8441] bridge0: left allmulticast mode [ 172.384697][ T8441] bridge0: left promiscuous mode [ 173.219866][ T8475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 174.067556][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'. [ 174.115989][ T8508] bridge0: entered promiscuous mode [ 174.151869][ T8508] macsec0: entered allmulticast mode [ 174.157290][ T8508] bridge0: entered allmulticast mode [ 174.224334][ T8508] bridge0: left allmulticast mode [ 174.237338][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1173'. [ 174.245627][ T8508] bridge0: left promiscuous mode [ 174.278173][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1173'. [ 174.590985][ T8524] vlan2: entered promiscuous mode [ 175.838157][ T8566] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.977057][ T8566] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.110465][ T8566] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.134528][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1204'. [ 176.153418][ T8580] bridge0: entered promiscuous mode [ 176.159436][ T8580] macsec1: entered allmulticast mode [ 176.164769][ T8580] bridge0: entered allmulticast mode [ 176.179263][ T8580] bridge0: left allmulticast mode [ 176.186098][ T8580] bridge0: left promiscuous mode [ 176.295871][ T8566] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.477518][ T8590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1209'. [ 176.480357][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1208'. [ 176.491932][ T8566] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.528521][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1209'. [ 176.550769][ T8566] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.744599][ T8566] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.821030][ T8566] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.164415][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1218'. [ 177.413425][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1224'. [ 177.505520][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1226'. [ 177.688840][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 179.707532][ T8708] __nla_validate_parse: 1 callbacks suppressed [ 179.707554][ T8708] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1265'. [ 179.812408][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1266'. [ 180.636237][ T8745] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1279'. [ 181.188151][ T8760] macsec0: entered promiscuous mode [ 181.196280][ T8762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1284'. [ 181.460793][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1289'. [ 181.556132][ T8777] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1292'. [ 182.268242][ T8810] vlan2: entered promiscuous mode [ 182.325614][ T8812] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1307'. [ 183.477736][ T8863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1330'. [ 183.557874][ T8865] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1331'. [ 184.033743][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1339'. [ 184.125139][ T8881] macsec1: entered promiscuous mode [ 184.625804][ T8903] dummy0: entered promiscuous mode [ 184.649806][ T8903] macsec0: entered promiscuous mode [ 184.655493][ T8903] macsec0: entered allmulticast mode [ 184.661081][ T8903] dummy0: entered allmulticast mode [ 184.988585][ T8915] __nla_validate_parse: 2 callbacks suppressed [ 185.013105][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1355'. [ 185.849628][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1369'. [ 185.877774][ T8949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1370'. [ 186.150833][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1374'. [ 186.278137][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1377'. [ 186.754673][ T8980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1384'. [ 186.860949][ T8990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1387'. [ 187.162980][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1392'. [ 187.586586][ T9016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1400'. [ 187.870746][ T9029] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1406'. [ 188.240925][ T9043] macsec0: entered promiscuous mode [ 189.479835][ T9087] netlink: 'syz.1.1430': attribute type 17 has an invalid length. [ 190.146941][ T9114] __nla_validate_parse: 4 callbacks suppressed [ 190.146961][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1444'. [ 190.390880][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1447'. [ 190.545227][ T9126] macsec2: entered promiscuous mode [ 190.554354][ T9126] macsec2: entered allmulticast mode [ 190.562411][ T9126] dummy0: entered allmulticast mode [ 191.158349][ T9149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1458'. [ 191.352813][ T9156] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1462'. [ 191.409607][ T9156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'. [ 191.932097][ T9184] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1474'. [ 191.996789][ T9185] dummy0: entered promiscuous mode [ 192.034788][ T9185] macsec1: entered promiscuous mode [ 192.082718][ T9185] macsec1: entered allmulticast mode [ 192.099687][ T9185] dummy0: entered allmulticast mode [ 192.259402][ T9195] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1479'. [ 192.285992][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1481'. [ 192.297792][ T9195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1479'. [ 192.555247][ T9207] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1486'. [ 194.333370][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.341681][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.287225][ T9317] __nla_validate_parse: 13 callbacks suppressed [ 195.287266][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1532'. [ 195.614826][ T9330] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1539'. [ 195.656134][ T9332] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1540'. [ 195.906988][ T9336] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.032916][ T9336] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.063465][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1547'. [ 196.184001][ T9336] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.317667][ T9336] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.415961][ T9360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1554'. [ 196.629326][ T9364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1557'. [ 196.635473][ T9336] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.681722][ T9336] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.732019][ T9336] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.756390][ T9364] vlan2: entered promiscuous mode [ 196.803254][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1558'. [ 196.830676][ T9336] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.841065][ T9371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1559'. [ 197.196343][ T9383] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1565'. [ 197.368574][ T9394] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1568'. [ 200.418004][ T9521] __nla_validate_parse: 20 callbacks suppressed [ 200.418025][ T9521] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1627'. [ 200.471077][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1627'. [ 200.529910][ T9523] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 200.775641][ T9538] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1634'. [ 200.935127][ T9545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1637'. [ 200.945637][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1637'. [ 201.102080][ T9548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1638'. [ 201.179423][ C1] hrtimer: interrupt took 48907011 ns [ 201.200365][ T9548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1638'. [ 201.686275][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1648'. [ 201.772956][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1650'. [ 201.792654][ T9575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1650'. [ 205.414160][ T9706] vlan2: entered promiscuous mode [ 205.792567][ T9720] __nla_validate_parse: 18 callbacks suppressed [ 205.792588][ T9720] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1715'. [ 206.425694][ T9753] netlink: 'syz.2.1728': attribute type 17 has an invalid length. [ 206.436512][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1728'. [ 206.925462][ T9770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1737'. [ 207.230351][ T9781] netlink: 'syz.1.1742': attribute type 17 has an invalid length. [ 207.239938][ T9779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1741'. [ 207.281369][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1742'. [ 207.476218][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1746'. [ 207.812636][ T9807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1754'. [ 208.113122][ T9813] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.202779][ T9813] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.283643][ T9816] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 208.330823][ T9813] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.425883][ T9813] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.530914][ T9813] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.579601][ T9813] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.601404][ T9822] netlink: 'syz.0.1758': attribute type 17 has an invalid length. [ 208.616579][ T9813] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.625485][ T9822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1758'. [ 208.668219][ T9813] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.048938][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 209.305172][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1767'. [ 209.528460][ T9846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1769'. [ 209.761955][ T9852] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.880351][ T9852] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.025399][ T9852] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.194738][ T9852] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.324318][ T9857] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 210.914889][ T9870] __nla_validate_parse: 2 callbacks suppressed [ 210.914909][ T9870] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1779'. [ 210.939066][ T9870] vlan2: entered promiscuous mode [ 210.981881][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1780'. [ 211.071592][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1781'. [ 211.102911][ T9876] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1782'. [ 211.235113][ T9878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1783'. [ 211.440647][ T9888] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1787'. [ 211.865999][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1792'. [ 212.003003][ T9852] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.105645][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1797'. [ 212.130804][ T9852] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.160226][ T9907] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 212.230511][ T9852] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.288317][ T9852] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.875891][ T9935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1806'. [ 213.246447][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1812'. [ 214.509888][ T9987] vlan2: entered promiscuous mode [ 214.687008][ T9992] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.794146][ T9992] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.904544][ T9992] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.008279][ T9992] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.157463][ T9992] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.238008][ T9992] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.284444][ T9992] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.352330][ T9992] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.988136][T10031] __nla_validate_parse: 5 callbacks suppressed [ 215.988157][T10031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1850'. [ 216.664401][T10061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1862'. [ 216.780423][T10066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1864'. [ 216.803557][T10066] vlan2: entered promiscuous mode [ 216.815026][T10066] dummy0: entered promiscuous mode [ 216.890533][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 216.891500][ T5837] Bluetooth: hci3: command 0x0405 tx timeout [ 216.896713][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 216.908829][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 216.908906][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 217.087821][T10075] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1867'. [ 217.123486][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1867'. [ 217.725567][T10100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1878'. [ 218.692233][T10128] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1889'. [ 218.802677][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'. [ 219.116284][T10134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1891'. [ 219.426946][T10139] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1893'. [ 219.661291][T10152] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 220.803801][T10190] Bluetooth: MGMT ver 1.23 [ 221.052453][T10193] __nla_validate_parse: 3 callbacks suppressed [ 221.052473][T10193] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1917'. [ 221.112400][T10195] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1918'. [ 221.145373][T10195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1918'. [ 221.258296][T10201] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1920'. [ 221.524355][T10206] tipc: Started in network mode [ 221.534623][T10206] tipc: Node identity b21352724708, cluster identity 4711 [ 221.565324][T10206] tipc: Enabled bearer , priority 0 [ 221.620052][T10203] syzkaller0: entered promiscuous mode [ 221.625582][T10203] syzkaller0: entered allmulticast mode [ 221.682371][T10206] tipc: Resetting bearer [ 221.758878][T10202] tipc: Resetting bearer [ 221.874498][T10202] tipc: Disabling bearer [ 222.120964][T10220] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.214782][T10220] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.235429][T10225] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1930'. [ 222.282542][T10220] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.360173][T10220] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.392803][T10231] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1933'. [ 222.498209][T10220] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.533948][T10220] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.566473][T10220] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.598191][T10236] netlink: 'syz.2.1935': attribute type 1 has an invalid length. [ 222.604081][T10220] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.082063][T10250] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 223.452645][T10262] netlink: 'syz.0.1947': attribute type 1 has an invalid length. [ 223.663545][T10267] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1949'. [ 223.829098][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1949'. [ 223.893500][T10273] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1951'. [ 224.471224][T10294] netlink: 'syz.3.1960': attribute type 1 has an invalid length. [ 224.877354][T10306] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1966'. [ 225.313907][T10320] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.412919][T10320] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.521835][T10320] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.587389][T10320] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.699213][T10320] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.725512][T10320] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.747845][T10320] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.772394][T10320] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.169772][T10348] __nla_validate_parse: 2 callbacks suppressed [ 226.169794][T10348] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1983'. [ 226.422618][T10357] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1987'. [ 226.591715][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1989'. [ 226.604668][T10361] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1990'. [ 226.835335][T10372] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1994'. [ 227.212332][T10384] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2000'. [ 227.416563][T10388] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2002'. [ 227.441686][T10392] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2004'. [ 227.483492][T10394] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2005'. [ 227.628223][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2006'. [ 229.179856][T10453] netlink: 'syz.1.2032': attribute type 2 has an invalid length. [ 231.316830][T10514] __nla_validate_parse: 10 callbacks suppressed [ 231.316853][T10514] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2059'. [ 231.636077][T10526] netlink: 'syz.2.2065': attribute type 1 has an invalid length. [ 231.674916][T10528] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2066'. [ 231.704424][T10526] netlink: 'syz.2.2065': attribute type 1 has an invalid length. [ 231.722677][T10526] netlink: 'syz.2.2065': attribute type 2 has an invalid length. [ 231.748758][T10526] netlink: 198000 bytes leftover after parsing attributes in process `syz.2.2065'. [ 232.590906][T10563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2081'. [ 233.264161][T10592] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2095'. [ 234.709427][T10641] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2118'. [ 235.031616][T10650] xt_CT: No such helper "netbios-ns" [ 235.620960][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2137'. [ 236.578093][T10727] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.627583][T10727] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.688342][T10727] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.747239][T10727] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.837396][T10727] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.856475][T10727] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.880376][T10727] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.900517][T10727] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.106880][T10733] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2159'. [ 237.543650][T10747] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2165'. [ 237.977081][T10770] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2176'. [ 238.077223][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2177'. [ 238.942405][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2193'. [ 239.018488][T10808] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.146732][T10808] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.243885][T10808] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.366205][T10808] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.758241][T10840] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2209'. [ 240.313422][T10808] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.371754][T10808] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.422042][T10808] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.524892][T10808] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.997670][T10881] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2227'. [ 241.157968][T10889] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2231'. [ 241.988205][T10918] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2246'. [ 242.204577][T10926] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2250'. [ 242.824760][T10954] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2262'. [ 244.279746][T11013] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2290'. [ 245.224052][T11041] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2303'. [ 245.843837][T11065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2315'. [ 248.100613][T11147] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2353'. [ 248.604181][T11162] xt_CT: No such helper "netbios-ns" [ 248.911995][T11183] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2368'. [ 249.163384][T11196] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2373'. [ 249.216172][T11197] xt_CT: No such helper "netbios-ns" [ 249.686032][T11216] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2384'. [ 250.061871][T11227] xt_CT: No such helper "netbios-ns" [ 250.408362][T11251] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2398'. [ 250.738889][T11263] tipc: Started in network mode [ 250.751454][T11263] tipc: Node identity 9a16db3481b6, cluster identity 4711 [ 250.760924][T11263] tipc: Enabled bearer , priority 0 [ 250.779366][T11263] syzkaller0: entered promiscuous mode [ 250.784903][T11263] syzkaller0: entered allmulticast mode [ 250.815614][T11260] tipc: Resetting bearer [ 250.836897][T11260] tipc: Disabling bearer [ 251.711514][T11295] tipc: Started in network mode [ 251.716462][T11295] tipc: Node identity 36c1e4ff55e9, cluster identity 4711 [ 251.749861][T11295] tipc: Enabled bearer , priority 0 [ 251.780264][T11295] syzkaller0: entered promiscuous mode [ 251.785807][T11295] syzkaller0: entered allmulticast mode [ 251.823309][T11301] netlink: 'syz.3.2422': attribute type 29 has an invalid length. [ 251.837869][T11291] tipc: Resetting bearer [ 251.865622][T11291] tipc: Disabling bearer [ 251.923272][T11301] netlink: 'syz.3.2422': attribute type 29 has an invalid length. [ 252.907250][T11340] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2438'. [ 253.904382][T11375] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2453'. [ 254.809563][T11400] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.027056][T11400] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.107287][T11407] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2467'. [ 255.223596][T11400] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.248351][T11410] xt_CT: No such helper "netbios-ns" [ 255.408350][T11400] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.665590][T11400] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.786083][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.794603][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.447427][T11446] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2480'. [ 257.022448][T11451] xt_CT: No such helper "netbios-ns" [ 257.999757][T11400] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.177102][T11400] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.434080][T11400] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.900001][T11498] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2502'. [ 259.222551][T11513] netlink: 'syz.0.2507': attribute type 1 has an invalid length. [ 259.355841][T11518] netlink: 'syz.1.2508': attribute type 11 has an invalid length. [ 259.390791][T11513] bond1: entered promiscuous mode [ 259.407996][T11513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 259.472331][T11522] netlink: 'syz.4.2510': attribute type 1 has an invalid length. [ 259.481221][T11522] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.2510'. [ 260.863062][T11539] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2517'. [ 260.981006][T11531] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.123281][T11531] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.343738][T11531] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.469926][T11531] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.553428][T11563] netlink: 'syz.3.2528': attribute type 1 has an invalid length. [ 261.561679][T11563] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2528'. [ 261.635993][T11531] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.682310][T11531] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.745205][T11531] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.768328][T11567] syzkaller0: entered promiscuous mode [ 261.775471][T11567] syzkaller0: entered allmulticast mode [ 261.797287][T11531] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.872175][T11571] netlink: 'syz.4.2532': attribute type 1 has an invalid length. [ 261.916090][T11575] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2533'. [ 261.936297][T11571] bond1 (unregistering): Released all slaves [ 262.096972][T11579] netlink: 'syz.0.2535': attribute type 29 has an invalid length. [ 262.119869][T11579] netlink: 'syz.0.2535': attribute type 29 has an invalid length. [ 262.159911][T11579] netlink: 'syz.0.2535': attribute type 29 has an invalid length. [ 262.174527][T11579] netlink: 'syz.0.2535': attribute type 29 has an invalid length. [ 262.400561][T11591] netlink: 'syz.3.2540': attribute type 1 has an invalid length. [ 262.433374][T11591] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2540'. [ 262.749377][T11605] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2547'. [ 262.790420][T11605] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2547'. [ 262.908037][T11610] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2549'. [ 263.272938][T11628] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2556'. [ 264.032174][T11648] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2564'. [ 264.327046][T11653] xt_CT: No such helper "netbios-ns" [ 264.670434][T11670] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 264.955796][T11679] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2578'. [ 265.110405][T11684] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2580'. [ 265.232337][T11686] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.306613][T11686] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.332053][T11688] xt_CT: No such helper "netbios-ns" [ 265.400842][T11686] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.477557][T11686] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.634817][T11686] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.685710][T11686] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.749685][T11686] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.800506][T11686] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.101173][T11707] netlink: zone id is out of range [ 266.214967][T11710] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2593'. [ 266.262766][T11707] netlink: set zone limit has 4 unknown bytes [ 266.765926][T11737] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2603'. [ 266.781344][T11737] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2603'. [ 267.082589][T11747] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2608'. [ 267.676092][ T6843] syzkaller0: tun_net_xmit 76 [ 267.691888][ T6843] syzkaller0: tun_net_xmit 48 [ 267.699568][ T5838] syzkaller0: tun_net_xmit 76 [ 268.147704][T11782] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 268.538105][T11787] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2623'. [ 269.573692][T11811] netlink: zone id is out of range [ 269.647577][T11811] netlink: set zone limit has 4 unknown bytes [ 269.736245][T11815] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2635'. [ 269.780354][T11817] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 270.342496][T11839] bond1 (unregistering): Released all slaves [ 271.128874][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 272.394552][T11878] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2660'. [ 272.613560][T11886] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 272.627932][T11887] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2665'. [ 273.362985][T11908] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2675'. [ 273.480150][T11911] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2676'. [ 273.499019][T11911] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2676'. [ 273.776033][T11920] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2680'. [ 273.906238][T11924] netlink: 'syz.4.2682': attribute type 1 has an invalid length. [ 273.937636][T11924] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.2682'. [ 273.988385][T11928] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2683'. [ 274.018966][T11928] netlink: zone id is out of range [ 274.024153][T11928] netlink: zone id is out of range [ 274.049540][T11928] netlink: zone id is out of range [ 274.054742][T11928] netlink: zone id is out of range [ 274.188857][T11928] netlink: zone id is out of range [ 274.203715][T11928] netlink: zone id is out of range [ 274.224347][T11928] netlink: zone id is out of range [ 274.256688][T11928] netlink: zone id is out of range [ 274.278337][T11928] netlink: zone id is out of range [ 274.296212][T11928] netlink: zone id is out of range [ 274.590409][T11942] syzkaller0: entered promiscuous mode [ 274.596495][T11942] syzkaller0: entered allmulticast mode [ 274.991473][T11956] netlink: 'syz.2.2696': attribute type 1 has an invalid length. [ 275.018216][T11956] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2696'. [ 275.402731][T11973] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2704'. [ 275.895215][T11988] netlink: 'syz.2.2711': attribute type 1 has an invalid length. [ 276.566710][T12011] netlink: 'syz.3.2723': attribute type 1 has an invalid length. [ 276.823063][T12024] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.927903][T12027] bond1 (unregistering): Released all slaves [ 276.980999][T12024] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.046875][T12024] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.156486][T12024] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.254876][T12024] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.277319][T12024] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.305401][T12024] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.343733][T12024] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.626503][T12044] netlink: 'syz.4.2736': attribute type 1 has an invalid length. [ 277.725215][T12044] __nla_validate_parse: 9 callbacks suppressed [ 277.725235][T12044] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.2736'. [ 278.223668][T12060] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2743'. [ 278.640426][T12079] netlink: 'syz.4.2751': attribute type 1 has an invalid length. [ 278.666142][T12079] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.2751'. [ 279.001772][T12093] bond3 (unregistering): Released all slaves [ 279.312198][T12102] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2758'. [ 279.709408][T12113] netlink: 'syz.2.2764': attribute type 1 has an invalid length. [ 279.757598][T12113] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2764'. [ 280.220932][T12138] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2775'. [ 280.271186][T12138] net_ratelimit: 76 callbacks suppressed [ 280.271206][T12138] netlink: zone id is out of range [ 280.293807][T12138] netlink: zone id is out of range [ 280.316680][T12138] netlink: zone id is out of range [ 280.324344][T12138] netlink: zone id is out of range [ 280.360464][T12138] netlink: zone id is out of range [ 280.374647][T12138] netlink: zone id is out of range [ 280.380269][T12138] netlink: zone id is out of range [ 280.405272][T12138] netlink: zone id is out of range [ 280.438769][T12138] netlink: zone id is out of range [ 280.465056][T12138] netlink: zone id is out of range [ 280.594921][T12149] netlink: 'syz.2.2779': attribute type 1 has an invalid length. [ 280.643753][T12149] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2779'. [ 280.999316][T12159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2786'. [ 281.050577][T12160] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2784'. [ 281.136677][T12159] bond1 (unregistering): Released all slaves [ 281.326298][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 281.344394][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 281.353501][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 281.371731][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 281.381812][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 281.565778][ T12] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.634166][ T12] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.736342][ T12] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.818986][T12182] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 281.871691][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.996424][T12192] tipc: Enabled bearer , priority 0 [ 282.023866][T12186] syzkaller0: entered promiscuous mode [ 282.063081][T12186] syzkaller0: entered allmulticast mode [ 282.105471][T12186] tipc: Resetting bearer [ 282.188152][T12183] tipc: Resetting bearer [ 282.250441][T12183] tipc: Disabling bearer [ 282.496704][T12206] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2803'. [ 282.657760][ T12] bridge_slave_1: left allmulticast mode [ 282.674583][ T12] bridge_slave_1: left promiscuous mode [ 282.688614][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.711729][ T12] bridge_slave_0: left allmulticast mode [ 282.717601][ T12] bridge_slave_0: left promiscuous mode [ 282.730889][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.164824][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.176633][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.188105][ T12] bond0 (unregistering): Released all slaves [ 283.272998][ T12] bond1 (unregistering): Released all slaves [ 283.289118][ T12] bond2 (unregistering): Released all slaves [ 283.315382][T12215] netlink: 'syz.3.2806': attribute type 1 has an invalid length. [ 283.348879][T12215] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.2806'. [ 283.414504][ T12] tipc: Left network mode [ 283.451891][ T5143] Bluetooth: hci5: command tx timeout [ 284.028215][T12241] tipc: Enabled bearer , priority 0 [ 284.049649][T12240] syzkaller0: entered promiscuous mode [ 284.068685][T12240] syzkaller0: entered allmulticast mode [ 284.138206][T12240] tipc: Resetting bearer [ 284.222510][T12237] tipc: Resetting bearer [ 284.274095][T12237] tipc: Disabling bearer [ 284.352113][T12171] chnl_net:caif_netlink_parms(): no params data found [ 284.480852][T12260] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2818'. [ 284.665289][T12267] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2820'. [ 284.844005][T12267] bond1 (unregistering): Released all slaves [ 285.034157][ T12] hsr_slave_0: left promiscuous mode [ 285.058455][ T12] hsr_slave_1: left promiscuous mode [ 285.069569][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.077085][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.117489][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.141817][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.227175][ T12] dummy0: left allmulticast mode [ 285.243913][ T12] veth1_vlan: left promiscuous mode [ 285.256785][ T12] veth0_vlan: left promiscuous mode [ 285.517000][T12287] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2829'. [ 285.536299][ T5143] Bluetooth: hci5: command tx timeout [ 285.606813][T12293] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2831'. [ 285.745160][T12300] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2832'. [ 285.992243][ T12] team_slave_1 (unregistering): left promiscuous mode [ 286.001780][ T12] team0 (unregistering): Port device team_slave_1 removed [ 286.039163][ T12] team_slave_0 (unregistering): left promiscuous mode [ 286.048008][ T12] team0 (unregistering): Port device team_slave_0 removed [ 286.476636][T12171] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.489422][T12171] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.498236][T12171] bridge_slave_0: entered allmulticast mode [ 286.506123][T12171] bridge_slave_0: entered promiscuous mode [ 286.534087][T12171] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.548867][T12171] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.566353][T12171] bridge_slave_1: entered allmulticast mode [ 286.600666][T12171] bridge_slave_1: entered promiscuous mode [ 286.810617][T12171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.837350][T12171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.070913][T12171] team0: Port device team_slave_0 added [ 287.137778][T12171] team0: Port device team_slave_1 added [ 287.265579][T12171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.287657][T12171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.329933][T12333] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2841'. [ 287.354883][T12171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.393240][T12171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.430547][T12171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.505313][T12338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2843'. [ 287.520947][T12171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.562485][T12342] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2844'. [ 287.609328][ T5143] Bluetooth: hci5: command tx timeout [ 287.749782][T12171] hsr_slave_0: entered promiscuous mode [ 287.785939][T12171] hsr_slave_1: entered promiscuous mode [ 287.818320][T12171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.839202][T12171] Cannot create hsr debugfs directory [ 288.470864][T12368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2854'. [ 288.553140][T12372] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2855'. [ 288.762355][T12377] sock: sock_timestamping_bind_phc: sock not bind to device [ 289.131903][T12394] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2862'. [ 289.252815][T12399] tap0: tun_chr_ioctl cmd 1074812117 [ 289.585818][T12409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2869'. [ 289.609967][T12410] netlink: 9896 bytes leftover after parsing attributes in process `syz.1.2868'. [ 289.628084][T12171] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 289.688882][ T5143] Bluetooth: hci5: command tx timeout [ 289.766467][T12416] bond1 (unregistering): Released all slaves [ 289.810431][T12171] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 289.836810][T12171] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 289.912439][T12171] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 290.100220][T12428] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2876'. [ 290.295592][T12171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.371732][T12171] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.460650][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.467885][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.542008][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.549368][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.061161][T12456] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 291.501179][T12171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.707606][T12171] veth0_vlan: entered promiscuous mode [ 291.798772][T12171] veth1_vlan: entered promiscuous mode [ 291.956638][T12171] veth0_macvtap: entered promiscuous mode [ 292.007622][T12171] veth1_macvtap: entered promiscuous mode [ 292.073849][T12171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.079924][T12492] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2893'. [ 292.126398][T12171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.181692][T12171] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.201843][T12171] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.227069][T12171] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.254131][T12171] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.640246][ T2135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.658673][ T2135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.823007][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.861929][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.073763][T12530] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2906'. [ 293.099213][T12527] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2906'. [ 293.130793][T12530] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2906'. [ 293.595769][T12545] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2912'. [ 294.278222][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 294.293459][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 294.302579][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 294.312663][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 294.320740][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 296.409175][ T5143] Bluetooth: hci1: command tx timeout [ 298.488786][ T5143] Bluetooth: hci1: command tx timeout [ 298.874070][T12683] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2937'. [ 298.884670][T12683] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2937'. [ 299.205969][T12561] chnl_net:caif_netlink_parms(): no params data found [ 299.486212][T12698] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2942'. [ 299.751861][T12700] bond1: entered promiscuous mode [ 299.763176][T12700] 8021q: adding VLAN 0 to HW filter on device bond1 [ 299.773450][T12711] tipc: Enabling of bearer rejected, failed to enable media [ 299.823718][T12703] 8021q: adding VLAN 0 to HW filter on device bond2 [ 299.832753][T12703] bond2: entered promiscuous mode [ 299.839089][T12703] bond1: (slave bond2): Enslaving as an active interface with an up link [ 299.851402][T12561] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.874002][T12561] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.889598][T12561] bridge_slave_0: entered allmulticast mode [ 299.909407][T12561] bridge_slave_0: entered promiscuous mode [ 299.923468][T12561] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.939612][T12561] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.946898][T12561] bridge_slave_1: entered allmulticast mode [ 299.972177][T12561] bridge_slave_1: entered promiscuous mode [ 300.121336][T12561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.154190][T12561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.249388][T12726] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2949'. [ 300.346966][T12561] team0: Port device team_slave_0 added [ 300.373141][T12561] team0: Port device team_slave_1 added [ 300.514581][T12561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.533166][T12561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.574377][ T5143] Bluetooth: hci1: command tx timeout [ 300.593023][T12561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.608229][T12561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.621446][T12561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.654971][T12561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.736229][T12561] hsr_slave_0: entered promiscuous mode [ 300.745104][T12561] hsr_slave_1: entered promiscuous mode [ 300.751619][T12561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.809439][T12561] Cannot create hsr debugfs directory [ 302.546741][T12761] tipc: Enabling of bearer rejected, failed to enable media [ 302.649850][ T5143] Bluetooth: hci1: command tx timeout [ 303.035063][T12561] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.216593][T12561] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.332697][T12561] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.406191][T12561] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.579791][T12803] tipc: Enabling of bearer rejected, failed to enable media [ 303.806199][T12561] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 303.857636][T12561] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 303.906537][T12561] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 303.935782][T12561] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 304.189165][T12824] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2986'. [ 304.277247][T12561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.353104][T12561] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.414096][ T970] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.421304][ T970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.503412][ T970] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.510698][ T970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.849776][T12837] tipc: Enabled bearer , priority 0 [ 304.908440][T12837] syzkaller0: entered promiscuous mode [ 304.914102][T12837] syzkaller0: entered allmulticast mode [ 304.984410][T12837] tipc: Resetting bearer [ 305.011094][T12836] tipc: Resetting bearer [ 305.097113][T12836] tipc: Disabling bearer [ 305.371021][T12854] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3001'. [ 305.807971][T12561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.998058][T12873] netlink: 'syz.2.3005': attribute type 29 has an invalid length. [ 306.057950][T12875] netlink: 'syz.2.3005': attribute type 29 has an invalid length. [ 306.087018][T12873] netlink: 'syz.2.3005': attribute type 29 has an invalid length. [ 306.108060][T12873] netlink: 'syz.2.3005': attribute type 29 has an invalid length. [ 306.485275][T12884] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3010'. [ 306.941784][T12561] veth0_vlan: entered promiscuous mode [ 306.980273][T12561] veth1_vlan: entered promiscuous mode [ 307.060541][T12561] veth0_macvtap: entered promiscuous mode [ 307.075183][T12561] veth1_macvtap: entered promiscuous mode [ 307.127431][T12561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.181775][T12561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.223053][T12561] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.252383][T12561] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.269463][T12561] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.289223][T12561] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.614919][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.640339][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.685483][T12918] syzkaller0: entered promiscuous mode [ 307.693089][T12918] syzkaller0: entered allmulticast mode [ 307.719413][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.755609][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.589835][T12947] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 308.967776][T12957] tipc: Started in network mode [ 308.999749][T12957] tipc: Node identity 2a5912480cf1, cluster identity 4711 [ 309.022902][T12957] tipc: Enabled bearer , priority 0 [ 309.043432][T12961] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3042'. [ 309.070992][T12960] syzkaller0: entered promiscuous mode [ 309.078807][T12960] syzkaller0: entered allmulticast mode [ 309.100414][T12957] tipc: Resetting bearer [ 309.120383][T12956] tipc: Resetting bearer [ 309.194698][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 309.206087][T12956] tipc: Disabling bearer [ 309.206776][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 309.220799][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 309.231484][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 309.245224][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 309.536895][ T49] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.657531][ T49] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.662148][T12979] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3050'. [ 309.796815][ T49] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.849410][T12983] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3052'. [ 309.948439][ T49] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.958926][T12986] netlink: 'syz.3.3054': attribute type 21 has an invalid length. [ 309.994096][T12986] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3054'. [ 310.360547][ T49] bridge_slave_1: left allmulticast mode [ 310.376969][ T49] bridge_slave_1: left promiscuous mode [ 310.386826][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.405703][ T49] bridge_slave_0: left allmulticast mode [ 310.412567][ T49] bridge_slave_0: left promiscuous mode [ 310.418460][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.916356][T13011] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3063'. [ 311.205771][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.223490][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.237964][ T49] bond0 (unregistering): Released all slaves [ 311.290989][ T5143] Bluetooth: hci0: command tx timeout [ 311.649757][T13030] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3071'. [ 311.850972][T12963] chnl_net:caif_netlink_parms(): no params data found [ 311.915702][T13044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3076'. [ 312.120188][T13045] bond1 (unregistering): Released all slaves [ 312.699969][T13073] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3084'. [ 312.805490][T12963] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.861187][T12963] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.899066][T12963] bridge_slave_0: entered allmulticast mode [ 312.914687][T12963] bridge_slave_0: entered promiscuous mode [ 312.983372][T12963] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.012607][T12963] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.022686][T12963] bridge_slave_1: entered allmulticast mode [ 313.041033][T12963] bridge_slave_1: entered promiscuous mode [ 313.157614][T13090] tipc: Enabled bearer , priority 0 [ 313.224458][T13086] syzkaller0: entered promiscuous mode [ 313.234014][T13086] syzkaller0: entered allmulticast mode [ 313.298461][T12963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.317478][T13086] tipc: Resetting bearer [ 313.335071][T12963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.365004][T13096] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3091'. [ 313.369606][ T5143] Bluetooth: hci0: command tx timeout [ 313.409067][T13085] tipc: Resetting bearer [ 313.426900][T13085] tipc: Disabling bearer [ 313.631337][T12963] team0: Port device team_slave_0 added [ 313.679108][ T49] hsr_slave_0: left promiscuous mode [ 313.698498][ T49] hsr_slave_1: left promiscuous mode [ 313.713876][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.736276][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.759951][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.781760][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.851752][ T49] dummy0: left allmulticast mode [ 313.857623][ T49] veth1_vlan: left promiscuous mode [ 313.866009][ T49] veth0_vlan: left promiscuous mode [ 314.248213][ T3000] smc: removing ib device syz1 [ 314.706039][ T49] team_slave_1 (unregistering): left promiscuous mode [ 314.726484][ T49] team0 (unregistering): Port device team_slave_1 removed [ 314.774425][ T49] team_slave_0 (unregistering): left promiscuous mode [ 314.783649][ T49] team0 (unregistering): Port device team_slave_0 removed [ 315.450380][ T5143] Bluetooth: hci0: command tx timeout [ 315.897987][T12963] team0: Port device team_slave_1 added [ 315.959440][ T10] syz1: Port: 1 Link DOWN [ 315.994338][T13139] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3109'. [ 316.005976][T12963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.017712][T12963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.053710][T12963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.129774][T12963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.136882][T12963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.186696][T12963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.752027][T13156] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3113'. [ 316.784564][T12963] hsr_slave_0: entered promiscuous mode [ 316.820144][T12963] hsr_slave_1: entered promiscuous mode [ 317.212580][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.219114][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.535746][ T5143] Bluetooth: hci0: command tx timeout [ 318.114640][T13186] tipc: Enabling of bearer rejected, failed to enable media [ 318.313524][T13200] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3126'. [ 319.566528][T13217] bond3 (unregistering): Released all slaves [ 320.624355][T12963] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 320.644973][T12963] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 320.679697][T13274] net_ratelimit: 76 callbacks suppressed [ 320.679716][T13274] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 320.723862][T12963] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 320.808173][T12963] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 322.832659][T13300] tipc: Enabling of bearer rejected, failed to enable media [ 323.130696][T12963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.282513][T12963] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.340103][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.347363][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.407076][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.414362][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.526603][T13340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3172'. [ 323.668349][T13340] bond1 (unregistering): Released all slaves [ 323.951899][T13356] tipc: Enabling of bearer rejected, failed to enable media [ 324.023166][T13361] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3177'. [ 324.058718][T13364] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3178'. [ 324.117096][T12963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.392856][T12963] veth0_vlan: entered promiscuous mode [ 324.468244][T12963] veth1_vlan: entered promiscuous mode [ 324.617021][T12963] veth0_macvtap: entered promiscuous mode [ 324.664088][T12963] veth1_macvtap: entered promiscuous mode [ 324.737470][T12963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.794274][T12963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.840034][T12963] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.886636][T12963] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.919975][T12963] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.944057][T12963] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.158527][T13397] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3190'. [ 325.282746][ T2135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.316540][ T2135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.417398][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.438817][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.487960][T13410] netlink: 'syz.4.3193': attribute type 39 has an invalid length. [ 325.569086][T13413] warning: `syz.0.3194' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 326.540107][T13444] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 326.549495][T13444] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 326.558700][T13444] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 326.567809][T13444] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 326.576989][T13444] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 326.586143][T13444] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 326.595317][T13444] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 326.604494][T13444] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 326.613682][T13444] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 326.622841][T13444] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 327.467480][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 327.479372][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 327.488236][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 327.500353][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 327.508115][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 328.125337][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 328.139233][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 328.147676][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 328.159519][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 328.168893][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 328.393044][T13453] chnl_net:caif_netlink_parms(): no params data found [ 328.917379][T13453] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.938874][T13453] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.951801][T13453] bridge_slave_0: entered allmulticast mode [ 328.980386][T13453] bridge_slave_0: entered promiscuous mode [ 329.149293][T13453] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.156490][T13453] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.211723][T13453] bridge_slave_1: entered allmulticast mode [ 329.240615][T13453] bridge_slave_1: entered promiscuous mode [ 329.453534][T13453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.553959][T13453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.612639][ T5143] Bluetooth: hci3: command tx timeout [ 329.905459][T13453] team0: Port device team_slave_0 added [ 330.249154][ T5143] Bluetooth: hci4: command tx timeout [ 331.690922][ T5143] Bluetooth: hci3: command tx timeout [ 332.329171][ T5143] Bluetooth: hci4: command tx timeout [ 332.760263][T13453] team0: Port device team_slave_1 added [ 332.767119][T13476] chnl_net:caif_netlink_parms(): no params data found [ 333.122183][T13453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.145770][T13453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.187138][T13453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.204297][T13453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.213356][T13453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.296209][T13453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.746105][T13453] hsr_slave_0: entered promiscuous mode [ 333.763958][T13453] hsr_slave_1: entered promiscuous mode [ 333.769721][ T5143] Bluetooth: hci3: command tx timeout [ 333.776071][T13453] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.783760][T13453] Cannot create hsr debugfs directory [ 333.909001][T13476] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.917576][T13476] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.925888][T13476] bridge_slave_0: entered allmulticast mode [ 333.934271][T13476] bridge_slave_0: entered promiscuous mode [ 333.972237][T13476] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.979531][T13476] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.986716][T13476] bridge_slave_1: entered allmulticast mode [ 333.996997][T13476] bridge_slave_1: entered promiscuous mode [ 334.019247][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 334.085218][T13476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.112703][T13476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.178302][T13476] team0: Port device team_slave_0 added [ 334.188340][T13476] team0: Port device team_slave_1 added [ 334.214091][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 334.232719][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 334.246225][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 334.257426][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 334.260427][T13476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.278467][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 334.283062][T13476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.287809][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.317295][T13476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.338263][ T10] usb 4-1: config 0 descriptor?? [ 334.372026][T13453] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.393984][T13476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.402124][T13476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.430080][ T5143] Bluetooth: hci4: command tx timeout [ 334.436053][T13476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.470640][T13453] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.541387][T13476] hsr_slave_0: entered promiscuous mode [ 334.548297][T13476] hsr_slave_1: entered promiscuous mode [ 334.556153][T13476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.564112][T13476] Cannot create hsr debugfs directory [ 334.612758][T13453] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.721494][T13453] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.813978][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 334.842546][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 334.865214][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 334.902493][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 334.929667][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 334.962858][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 334.974165][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 334.982010][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 335.016012][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 335.041820][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 335.067886][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 335.082587][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 335.090133][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 335.100421][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 335.107978][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 335.117026][ T10] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 335.180641][ T10] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 335.235284][ T10] usb 4-1: USB disconnect, device number 2 [ 335.437402][T13619] fido_id[13619]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 335.552620][T13476] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.605722][T13453] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 335.645681][T13453] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 335.941045][ T5143] Bluetooth: hci3: command tx timeout [ 336.326449][T13453] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 336.452927][T13476] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.491420][ T5143] Bluetooth: hci4: command tx timeout [ 336.499093][T13453] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 336.584951][T13476] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.747460][T13476] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.900052][T13453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.032760][T13453] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.104070][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.111286][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.130095][T13476] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 337.166695][T13476] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 337.195878][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.203111][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.231632][T13476] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 337.264269][T13476] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 337.445463][T13453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 337.654092][T13476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.876697][T13652] tipc: Started in network mode [ 337.895699][T13652] tipc: Node identity 46c4c6e98edb, cluster identity 4711 [ 337.904193][T13652] tipc: Enabled bearer , priority 0 [ 337.933811][T13652] syzkaller0: entered promiscuous mode [ 337.948945][T13652] syzkaller0: entered allmulticast mode [ 338.196625][T13476] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.311099][T13652] tipc: Resetting bearer [ 338.672438][T13651] tipc: Resetting bearer [ 338.755864][T13651] tipc: Disabling bearer [ 338.776788][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.784038][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.807269][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.814655][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.916572][T13453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.067703][T13453] veth0_vlan: entered promiscuous mode [ 339.103929][T13453] veth1_vlan: entered promiscuous mode [ 339.182513][T13453] veth0_macvtap: entered promiscuous mode [ 339.202604][T13453] veth1_macvtap: entered promiscuous mode [ 339.251946][T13453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.282586][T13453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.333512][T13453] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.363269][T13453] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.388770][T13453] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.397548][T13453] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.561498][T13476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.705988][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.734024][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.846319][T13476] veth0_vlan: entered promiscuous mode [ 339.927885][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.934952][T13476] veth1_vlan: entered promiscuous mode [ 339.971261][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.992296][T13476] veth0_macvtap: entered promiscuous mode [ 340.064423][T13476] veth1_macvtap: entered promiscuous mode [ 340.138666][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 340.159093][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 340.208990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 340.217658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 340.226568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 340.227400][T13695] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 340.256893][T13476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.260428][T13692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.334016][T13688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.346822][T13476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.364062][ T9] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 340.404900][T13476] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.413139][ T9] usb 4-1: config 0 has no interface number 0 [ 340.424342][T13476] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.434962][T13476] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.444449][ T9] usb 4-1: config 0 interface 128 has no altsetting 0 [ 340.447405][ T9] usb 4-1: New USB device found, idVendor=04e2, idProduct=1411, bcdDevice=46.25 [ 340.472193][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.486836][T13476] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.497718][ T9] usb 4-1: Product: syz [ 340.506928][ T5143] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 340.517528][ T5143] Bluetooth: hci1: Injecting HCI hardware error event [ 340.529546][ T5143] Bluetooth: hci1: hardware error 0x00 [ 340.538224][ T9] usb 4-1: Manufacturer: syz [ 340.562242][ T9] usb 4-1: SerialNumber: syz [ 340.590374][ T9] usb 4-1: config 0 descriptor?? [ 340.768771][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.796995][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.858061][ T5938] usb 4-1: USB disconnect, device number 3 [ 340.874385][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.887265][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.289593][T13719] netlink: 452 bytes leftover after parsing attributes in process `syz.4.3290'. [ 342.616242][T13729] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3293'. [ 342.649952][ T5143] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 343.146988][T13745] Bluetooth: MGMT ver 1.23 [ 343.451099][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.399982][T13761] netlink: 'syz.3.3308': attribute type 1 has an invalid length. [ 344.408012][T13761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3308'. [ 344.482241][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.805370][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.030784][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.140970][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 345.162235][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 345.176823][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 345.185690][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 345.193703][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 345.555725][ T59] bridge_slave_1: left allmulticast mode [ 345.575216][ T59] bridge_slave_1: left promiscuous mode [ 345.595789][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.632673][ T59] bridge_slave_0: left allmulticast mode [ 345.640900][ T59] bridge_slave_0: left promiscuous mode [ 345.663731][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.098823][T13800] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3322'. [ 346.478682][ T30] audit: type=1326 audit(1749056280.854:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13802 comm="syz.3.3323" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8e6d8e929 code=0x0 [ 347.308068][ T5143] Bluetooth: hci4: command tx timeout [ 347.748671][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.762219][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.781671][ T59] bond0 (unregistering): Released all slaves [ 347.999827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 348.556892][T13782] chnl_net:caif_netlink_parms(): no params data found [ 349.267261][ T59] hsr_slave_0: left promiscuous mode [ 349.310781][ T59] hsr_slave_1: left promiscuous mode [ 349.330746][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.370566][ T5143] Bluetooth: hci4: command tx timeout [ 349.385053][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.452855][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.480156][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.821609][T13874] netlink: 'syz.2.3340': attribute type 1 has an invalid length. [ 350.444911][ T59] veth1_macvtap: left promiscuous mode [ 350.496770][ T59] veth0_macvtap: left promiscuous mode [ 350.527547][ T59] veth1_vlan: left promiscuous mode [ 350.561127][ T59] veth0_vlan: left promiscuous mode [ 351.299515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 351.308863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 351.540619][ T5143] Bluetooth: hci4: command tx timeout [ 352.598092][ T59] team0 (unregistering): Port device team_slave_1 removed [ 352.636848][ T59] team0 (unregistering): Port device team_slave_0 removed [ 353.081289][T13874] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 353.091283][T13875] gretap1: entered allmulticast mode [ 353.553363][T13782] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.576994][T13782] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.618993][ T5143] Bluetooth: hci4: command tx timeout [ 353.638994][T13782] bridge_slave_0: entered allmulticast mode [ 353.665018][T13782] bridge_slave_0: entered promiscuous mode [ 353.728084][T13782] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.781786][T13782] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.808460][T13782] bridge_slave_1: entered allmulticast mode [ 353.827219][T13782] bridge_slave_1: entered promiscuous mode [ 353.959238][ T5883] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 354.058058][T13782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.128793][ T5883] usb 5-1: Using ep0 maxpacket: 16 [ 354.136889][ T5883] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 354.146567][ T5883] usb 5-1: config 1 has no interface number 0 [ 354.156038][ T5883] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 354.170071][ T5883] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 354.180759][ T5883] usb 5-1: config 1 interface 105 has no altsetting 0 [ 354.191245][ T5883] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 354.218640][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.227680][ T5883] usb 5-1: Product: syz [ 354.232251][ T5883] usb 5-1: Manufacturer: syz [ 354.236895][ T5883] usb 5-1: SerialNumber: syz [ 354.264984][T13923] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 354.283031][T13923] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 354.921311][ T30] audit: type=1326 audit(1749056289.304:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13922 comm="syz.4.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffacdb8e929 code=0x7ffc0000 [ 355.369006][ T30] audit: type=1326 audit(1749056289.314:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13922 comm="syz.4.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffacdb8e52b code=0x7ffc0000 [ 355.434000][ T30] audit: type=1326 audit(1749056289.314:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13922 comm="syz.4.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffacdb8e52b code=0x7ffc0000 [ 355.524221][ T30] audit: type=1326 audit(1749056289.314:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13922 comm="syz.4.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ffacdbc11e5 code=0x7ffc0000 [ 356.055241][ T30] audit: type=1326 audit(1749056289.654:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13922 comm="syz.4.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffacdb8e929 code=0x7ffc0000 [ 356.160360][ T30] audit: type=1326 audit(1749056289.664:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13922 comm="syz.4.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffacdb8e929 code=0x7ffc0000 [ 356.772077][ T5883] aqc111 5-1:1.105: probe with driver aqc111 failed with error -71 [ 356.801982][ T5883] usb 5-1: USB disconnect, device number 2 [ 357.986242][T13782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.238810][T13782] team0: Port device team_slave_0 added [ 358.270871][T13782] team0: Port device team_slave_1 added [ 358.471867][T13782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.504683][T13782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.547699][T13782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.616332][T13782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.676639][T13782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.759109][T13782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.183504][T13782] hsr_slave_0: entered promiscuous mode [ 359.199824][T13782] hsr_slave_1: entered promiscuous mode [ 359.219504][T13782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.236262][T13782] Cannot create hsr debugfs directory [ 362.975860][T13782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 363.043661][T13782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 363.078395][T13782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 363.128085][T13782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 363.533722][T13782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.601145][T13782] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.657032][ T970] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.664251][ T970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.794999][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.802244][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.169104][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 365.219289][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 365.511768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 366.047177][T13782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.038408][T13782] veth0_vlan: entered promiscuous mode [ 367.147156][T13782] veth1_vlan: entered promiscuous mode [ 367.374569][T13782] veth0_macvtap: entered promiscuous mode [ 367.414117][T13782] veth1_macvtap: entered promiscuous mode [ 367.482895][T13782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.581010][T13782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.612883][T13782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.656077][T13782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.688939][T13782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.718718][T13782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.332698][ T6843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.393394][ T6843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.700846][T14202] binder: 14196:14202 ioctl c0306201 200000002380 returned -14 [ 368.738870][ T970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.867434][ T970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.821092][T14211] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3448'. [ 371.374935][T14257] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3461'. [ 371.433868][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.792296][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.038288][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 372.040902][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.057616][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 372.068965][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 372.093825][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 372.101793][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 372.456019][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.939981][ T36] syzkaller0: tun_net_xmit 76 [ 372.951961][ T36] syzkaller0: tun_net_xmit 48 [ 372.969030][ T5838] syzkaller0: tun_net_xmit 76 [ 373.138384][T14327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3483'. [ 374.185402][ T5143] Bluetooth: hci4: command tx timeout [ 376.150457][ T59] bridge_slave_1: left allmulticast mode [ 376.178040][ T59] bridge_slave_1: left promiscuous mode [ 376.219310][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.248755][ T5143] Bluetooth: hci4: command tx timeout [ 376.273225][ T59] bridge_slave_0: left allmulticast mode [ 376.320990][ T59] bridge_slave_0: left promiscuous mode [ 376.370041][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.124013][T14427] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 377.979469][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.003651][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.042048][ T59] bond0 (unregistering): Released all slaves [ 378.329490][ T5143] Bluetooth: hci4: command tx timeout [ 378.488386][T14281] chnl_net:caif_netlink_parms(): no params data found [ 378.522846][T14437] syzkaller0: entered promiscuous mode [ 378.530369][T14437] syzkaller0: entered allmulticast mode [ 378.663060][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.679306][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.397655][ T59] hsr_slave_0: left promiscuous mode [ 380.411854][ T5143] Bluetooth: hci4: command tx timeout [ 380.418465][ T59] hsr_slave_1: left promiscuous mode [ 380.449441][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.456914][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.743538][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.812418][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.345218][ T59] veth1_macvtap: left promiscuous mode [ 381.385674][ T59] veth0_macvtap: left promiscuous mode [ 381.399249][ T59] veth1_vlan: left promiscuous mode [ 381.418872][ T59] veth0_vlan: left promiscuous mode [ 382.129861][ T59] team0 (unregistering): Port device team_slave_1 removed [ 382.173647][ T59] team0 (unregistering): Port device team_slave_0 removed [ 382.592440][T14478] 8021q: VLANs not supported on ipvlan1 [ 384.086360][T14281] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.115627][T14281] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.137496][T14281] bridge_slave_0: entered allmulticast mode [ 384.146087][T14281] bridge_slave_0: entered promiscuous mode [ 384.857307][T14281] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.989723][T14281] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.997149][T14281] bridge_slave_1: entered allmulticast mode [ 385.005178][T14281] bridge_slave_1: entered promiscuous mode [ 385.286114][T14281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.321922][T14281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.957064][T14281] team0: Port device team_slave_0 added [ 386.001559][T14281] team0: Port device team_slave_1 added [ 386.189345][T14559] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 386.196135][T14559] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 386.241661][T14281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.243829][T14559] vhci_hcd vhci_hcd.0: Device attached [ 386.263507][T14281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.292658][T14562] vhci_hcd: connection closed [ 386.321329][ T970] vhci_hcd: stop threads [ 386.343078][ T970] vhci_hcd: release socket [ 386.347587][ T970] vhci_hcd: disconnect device [ 386.377970][T14281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.415859][T14281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.445347][T14281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.526551][T14281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.109825][ T59] bridge_slave_1: left allmulticast mode [ 387.115950][ T59] bridge_slave_1: left promiscuous mode [ 387.140710][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.152123][ T59] bridge_slave_0: left allmulticast mode [ 387.157828][ T59] bridge_slave_0: left promiscuous mode [ 387.184143][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.816330][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.827950][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.841279][ T59] bond0 (unregistering): Released all slaves [ 387.848836][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 387.880567][T14281] hsr_slave_0: entered promiscuous mode [ 387.887724][T14281] hsr_slave_1: entered promiscuous mode [ 387.899485][T14281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.907225][T14281] Cannot create hsr debugfs directory [ 388.021689][ T10] usb 4-1: device descriptor read/64, error -71 [ 388.076040][ T59] tipc: Left network mode [ 388.298710][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 388.388912][T14607] netlink: 'syz.2.3552': attribute type 27 has an invalid length. [ 388.458693][ T10] usb 4-1: device descriptor read/64, error -71 [ 388.502589][T14611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3552'. [ 388.513479][T14611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3552'. [ 388.535831][T14611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3552'. [ 388.582535][ T10] usb usb4-port1: attempt power cycle [ 388.682652][T14607] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.691221][T14607] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.693950][T14611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3552'. [ 388.724528][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 388.747843][T14611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3552'. [ 388.780386][T14611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3552'. [ 388.890243][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 388.906085][T14607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.918258][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 388.936158][T14607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.947106][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 388.958725][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 388.979233][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 388.998715][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 389.009778][ T10] usb 4-1: device descriptor read/8, error -71 [ 389.018310][T14611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3552'. [ 389.036375][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 389.055919][T14611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3552'. [ 389.066291][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 389.075905][T14611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3552'. [ 389.086258][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.203256][T14607] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.219891][T14607] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.234887][T14607] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.246152][T14607] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.269124][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 389.318365][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 389.336554][ T9] usbtmc 5-1:16.0: can't read capabilities [ 389.370359][ T10] usb 4-1: device descriptor read/8, error -71 [ 389.496852][T14628] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.552520][ T10] usb usb4-port1: unable to enumerate USB device [ 389.714697][T14610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.766942][T14610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.851577][T14607] gretap1: left allmulticast mode [ 389.998794][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 390.153169][ T9] usb 5-1: USB disconnect, device number 3 [ 390.174661][T14610] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 390.208674][ T10] usb 2-1: device descriptor read/64, error -71 [ 390.329547][T14629] usbtmc 5-1:16.0: usb_control_msg returned -19 [ 390.539595][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 390.830885][ T10] usb 2-1: device descriptor read/64, error -71 [ 391.054830][ T10] usb usb2-port1: attempt power cycle [ 391.548956][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 391.714347][ T10] usb 2-1: device descriptor read/8, error -71 [ 392.058928][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 392.192237][ T10] usb 2-1: device descriptor read/8, error -71 [ 392.400845][ T10] usb usb2-port1: unable to enumerate USB device [ 393.480756][ T59] hsr_slave_0: left promiscuous mode [ 393.501897][ T59] hsr_slave_1: left promiscuous mode [ 393.512443][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.524720][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.553287][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.572260][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.625636][ T59] veth1_vlan: left promiscuous mode [ 393.632435][ T59] veth0_vlan: left promiscuous mode [ 393.639091][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 393.798783][ T10] usb 3-1: device descriptor read/64, error -71 [ 393.845629][ T5143] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 394.008779][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 394.068660][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 394.206767][ T59] team0 (unregistering): Port device team_slave_1 removed [ 394.218685][ T10] usb 3-1: device descriptor read/64, error -71 [ 394.267385][ T59] team0 (unregistering): Port device team_slave_0 removed [ 394.349126][ T10] usb usb3-port1: attempt power cycle [ 394.698778][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 394.729617][ T10] usb 3-1: device descriptor read/8, error -71 [ 394.969978][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 394.983275][T14281] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 395.016372][T14281] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 395.036796][ T10] usb 3-1: device descriptor read/8, error -71 [ 395.072832][T14281] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 395.112853][T14281] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 395.179040][ T10] usb usb3-port1: unable to enumerate USB device [ 395.318671][ T5883] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 395.374869][T14281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.411002][T14281] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.426470][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.433736][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.478925][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.486107][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.501106][ T5883] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.537517][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 395.581272][ T5883] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 395.601382][ T5883] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 395.615539][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.628346][ T5883] usb 5-1: Product: syz [ 395.636619][ T5883] usb 5-1: Manufacturer: syz [ 395.648276][ T5883] usb 5-1: SerialNumber: syz [ 395.661375][ T5883] usb 5-1: config 0 descriptor?? [ 396.138644][ T43] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 396.318795][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 396.342850][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.434533][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 396.486351][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 396.706129][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 396.873396][ T43] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 397.007229][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.067955][ T43] usb 4-1: config 0 descriptor?? [ 397.087420][T14281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.220182][T14281] veth0_vlan: entered promiscuous mode [ 397.254630][T14281] veth1_vlan: entered promiscuous mode [ 397.304752][T14281] veth0_macvtap: entered promiscuous mode [ 397.317503][T14281] veth1_macvtap: entered promiscuous mode [ 397.351526][ T10] usb 4-1: USB disconnect, device number 8 [ 397.386897][T14281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.425645][T14281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.454908][T14281] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.471489][T14281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.480860][T14281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.489901][T14281] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.519566][ T978] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 397.646363][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.672399][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.688776][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 397.711223][ T978] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 397.726951][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.729205][ T978] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.743531][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.763061][ T978] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 397.790875][ T978] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 397.806249][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.815409][ T978] usb 2-1: Product: syz [ 397.820087][ T978] usb 2-1: Manufacturer: syz [ 397.824831][ T978] usb 2-1: SerialNumber: syz [ 397.859586][ T5143] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 397.869124][ T5143] Bluetooth: hci2: Injecting HCI hardware error event [ 397.878024][ T5831] Bluetooth: hci2: hardware error 0x00 [ 398.226320][ T43] usb 5-1: USB disconnect, device number 4 [ 398.255312][ T978] usb 2-1: 0:2 : does not exist [ 398.669171][ T5879] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 398.838766][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 398.851130][ T5879] usb 4-1: config 6 has an invalid interface number: 127 but max is 0 [ 398.868578][ T5879] usb 4-1: config 6 has no interface number 0 [ 398.882156][ T5879] usb 4-1: config 6 interface 127 has no altsetting 0 [ 398.902076][ T5879] usb 4-1: New USB device found, idVendor=0545, idProduct=8002, bcdDevice= 3.0a [ 398.918734][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.936190][ T5879] usb 4-1: Product: syz [ 398.958679][ T5879] usb 4-1: Manufacturer: syz [ 398.969337][ T5879] usb 4-1: SerialNumber: syz [ 399.089173][T14775] mmap: syz.2.3597 (14775) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 399.300874][ T978] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 399.320794][ T5879] usb 4-1: USB disconnect, device number 9 [ 399.545660][ T978] usb 2-1: USB disconnect, device number 6 [ 399.603735][T14631] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.741965][T13909] udevd[13909]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 399.909475][ T43] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 399.928866][ T5831] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 400.006976][T14631] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.050078][ T43] usb 5-1: device descriptor read/64, error -71 [ 400.093744][T14631] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.171056][T14631] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.298829][ T43] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 400.342581][T14631] bridge_slave_1: left allmulticast mode [ 400.352143][T14631] bridge_slave_1: left promiscuous mode [ 400.358029][T14631] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.369394][T14631] bridge_slave_0: left allmulticast mode [ 400.375085][T14631] bridge_slave_0: left promiscuous mode [ 400.381390][T14631] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.464631][ T43] usb 5-1: device descriptor read/64, error -71 [ 400.918647][ T43] usb usb5-port1: attempt power cycle [ 401.711878][ T43] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 401.872300][ T5143] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 401.881020][ T5143] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 401.892503][ T5143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 401.901757][ T5143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 401.915593][ T5143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 401.938686][ T43] usb 5-1: device not accepting address 7, error -71 [ 403.868037][T14830] ubi31: attaching mtd0 [ 403.885130][T14830] ubi31: scanning is finished [ 403.890000][T14830] ubi31: empty MTD device detected [ 404.009906][ T5143] Bluetooth: hci4: command tx timeout [ 404.466741][T14631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.475847][T14830] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 404.511298][T14631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.533186][T14631] bond0 (unregistering): Released all slaves [ 404.559703][T14830] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 404.567054][T14830] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 404.574748][T14830] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 404.588985][T14830] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 404.596805][T14830] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 404.612717][T14830] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3773524845 [ 404.634253][T14830] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 404.684294][T14839] ubi31: background thread "ubi_bgt31d" started, PID 14839 [ 404.756016][T14844] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 404.775662][T14844] cramfs: wrong magic [ 405.496586][T14631] hsr_slave_0: left promiscuous mode [ 405.558905][T14631] hsr_slave_1: left promiscuous mode [ 405.580856][T14631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.633457][T14631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.704248][T14631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.601840][ T5143] Bluetooth: hci4: command tx timeout [ 406.746793][T14631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.857905][T14631] veth1_macvtap: left promiscuous mode [ 406.864865][T14631] veth0_macvtap: left promiscuous mode [ 406.871599][T14631] veth1_vlan: left promiscuous mode [ 406.877111][T14631] veth0_vlan: left promiscuous mode [ 407.351516][T14631] team0 (unregistering): Port device team_slave_1 removed [ 407.392164][T14631] team0 (unregistering): Port device team_slave_0 removed [ 408.415562][T14821] chnl_net:caif_netlink_parms(): no params data found [ 408.658727][ T5831] Bluetooth: hci4: command tx timeout [ 410.729362][ T5831] Bluetooth: hci4: command tx timeout [ 410.894739][T14821] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.910718][T14821] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.918363][T14821] bridge_slave_0: entered allmulticast mode [ 410.926930][T14821] bridge_slave_0: entered promiscuous mode [ 410.936581][T14821] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.954537][T14821] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.973795][T14821] bridge_slave_1: entered allmulticast mode [ 411.110839][T14821] bridge_slave_1: entered promiscuous mode [ 411.263269][T14821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.318379][T14821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.438291][T14821] team0: Port device team_slave_0 added [ 411.487858][T14821] team0: Port device team_slave_1 added [ 411.896795][T14821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.952542][T14821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.029502][T14821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.042451][T14821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.051174][T14821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.078797][T14821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.954337][T14821] hsr_slave_0: entered promiscuous mode [ 412.967683][T14821] hsr_slave_1: entered promiscuous mode [ 412.977734][T14821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.995398][T14821] Cannot create hsr debugfs directory [ 413.160950][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 413.348822][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 413.372824][ T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 413.441131][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.468587][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 413.498360][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 413.512943][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.541651][ T10] usb 3-1: Product: syz [ 413.556122][ T10] usb 3-1: Manufacturer: syz [ 413.566529][ T10] usb 3-1: SerialNumber: syz [ 414.007853][ T10] usb 3-1: 0:2 : does not exist [ 414.622862][T14821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 414.634974][T14821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 414.649555][T14821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 414.664854][T14821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 414.857881][T14821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.903648][T14821] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.927765][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.935089][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.992009][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.999510][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.034135][ T10] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 415.159714][ T10] usb 3-1: USB disconnect, device number 6 [ 415.245365][T14964] udevd[14964]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 415.462184][T15054] binder: 15052:15054 ioctl c0306201 200000002380 returned -14 [ 416.558588][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 416.660978][T14821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.812789][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 416.821461][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 416.836420][ T10] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 416.845894][ T10] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 416.854651][ T10] usb 4-1: Product: syz [ 416.859825][ T10] usb 4-1: Manufacturer: syz [ 416.870238][ T10] usb 4-1: SerialNumber: syz [ 416.879959][ C1] vkms_vblank_simulate: vblank timer overrun [ 416.880790][ T10] usb 4-1: config 0 descriptor?? [ 416.899421][T15060] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 416.909557][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 416.915630][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 417.210550][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.107888][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.670954][ T10] usb 4-1: USB disconnect, device number 10 [ 420.698744][T15090] netlink: 'syz.1.3680': attribute type 1 has an invalid length. [ 496.059948][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.066316][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 601.108447][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 601.115448][ C0] rcu: 1-...!: (1 GPs behind) idle=b0cc/1/0x4000000000000000 softirq=75327/75328 fqs=0 [ 601.126027][ C0] rcu: hardirqs softirqs csw/system [ 601.132452][ C0] rcu: number: 13 21 19 [ 601.138872][ C0] rcu: cputime: 0 79 0 ==> 105150(ms) [ 601.146771][ C0] rcu: (detected by 0, t=10505 jiffies, g=69857, q=1495 ncpus=2) [ 601.154598][ C0] Sending NMI from CPU 0 to CPUs 1: [ 601.154633][ C1] NMI backtrace for cpu 1 [ 601.154664][ C1] CPU: 1 UID: 0 PID: 15085 Comm: rm Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 601.154683][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 601.154696][ C1] RIP: 0010:kasan_check_range+0x79/0x2c0 [ 601.154732][ C1] Code: 00 49 89 ff 49 c1 ef 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 17 49 ff c8 4d 89 c1 49 c1 e9 03 48 bb 01 00 00 00 00 fc ff df <4d> 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 [ 601.154746][ C1] RSP: 0018:ffffc90000a08cd0 EFLAGS: 00000807 [ 601.154764][ C1] RAX: ffffffff81ae9001 RBX: dffffc0000000001 RCX: ffffffff81ae9047 [ 601.154776][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8f9fcbf0 [ 601.154786][ C1] RBP: 0000000000000000 R08: ffffffff8f9fcbf7 R09: 1ffffffff1f3f97e [ 601.154798][ C1] R10: dffffc0000000000 R11: fffffbfff1f3f97e R12: dffffc0000000000 [ 601.154809][ C1] R13: 0000000000000001 R14: ffff8880b8727bc0 R15: 1ffffffff1f3f97e [ 601.154820][ C1] FS: 0000000000000000(0000) GS:ffff888125d90000(0000) knlGS:0000000000000000 [ 601.154833][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 601.154843][ C1] CR2: 00007f8c66b799a0 CR3: 000000002f476000 CR4: 00000000003526f0 [ 601.154857][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 601.154867][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 601.154876][ C1] Call Trace: [ 601.154887][ C1] [ 601.154898][ C1] enqueue_hrtimer+0x77/0x3a0 [ 601.154926][ C1] __hrtimer_run_queues+0x656/0xc60 [ 601.154959][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 601.154982][ C1] ? read_tsc+0x9/0x20 [ 601.155005][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 601.155043][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 601.155070][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 601.155093][ C1] [ 601.155098][ C1] [ 601.155105][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 601.155122][ C1] RIP: 0010:in_gate_area_no_mm+0x20/0x60 [ 601.155147][ C1] Code: 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 53 48 89 fb e8 72 c6 8c 00 8b 2d fc 9a 84 0c bf 02 00 00 00 89 ee e8 a0 ca 8c 00 <83> fd 02 40 0f 95 c5 48 81 e3 00 f0 ff ff 48 c7 c7 00 00 60 ff 48 [ 601.155179][ C1] RSP: 0018:ffffc900037374c0 EFLAGS: 00000293 [ 601.155193][ C1] RAX: ffffffff81338510 RBX: 00007ff6d4d4c6c5 RCX: 0000000000000000 [ 601.155205][ C1] RDX: ffff888068f29e00 RSI: 0000000000000001 RDI: 0000000000000002 [ 601.155215][ C1] RBP: 0000000000000001 R08: 0000000000000022 R09: ffffffff81728e15 [ 601.155226][ C1] R10: ffffc90003737578 R11: ffffffff81ace620 R12: ffff888068f29e00 [ 601.155239][ C1] R13: 1ffff920006e6f24 R14: dffffc0000000000 R15: 1ffff920006e6eae [ 601.155254][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 601.155273][ C1] ? unwind_next_frame+0xa5/0x2390 [ 601.155297][ C1] ? in_gate_area_no_mm+0x20/0x60 [ 601.155322][ C1] kernel_text_address+0x2d/0xe0 [ 601.155345][ C1] __kernel_text_address+0xd/0x40 [ 601.155364][ C1] unwind_get_return_address+0x4d/0x90 [ 601.155390][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 601.155409][ C1] arch_stack_walk+0xfc/0x150 [ 601.155442][ C1] stack_trace_save+0x9c/0xe0 [ 601.155459][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 601.155475][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 601.155503][ C1] ? kernel_text_address+0xa5/0xe0 [ 601.155526][ C1] kasan_save_stack+0x3e/0x60 [ 601.155545][ C1] ? kasan_save_stack+0x3e/0x60 [ 601.155562][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 601.155587][ C1] ? call_rcu+0x142/0x990 [ 601.155612][ C1] ? kmem_cache_free+0x309/0x400 [ 601.155632][ C1] ? exit_mmap+0x53f/0xb50 [ 601.155652][ C1] ? __mmput+0x118/0x420 [ 601.155675][ C1] ? exit_mm+0x1da/0x2c0 [ 601.155691][ C1] ? do_exit+0x640/0x22e0 [ 601.155707][ C1] ? do_group_exit+0x21c/0x2d0 [ 601.155724][ C1] ? __x64_sys_exit_group+0x3f/0x40 [ 601.155742][ C1] ? x64_sys_call+0x21ba/0x21c0 [ 601.155757][ C1] ? do_syscall_64+0xfa/0x3b0 [ 601.155782][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.155826][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 601.155852][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 601.155868][ C1] call_rcu+0x142/0x990 [ 601.155899][ C1] ? __pfx_call_rcu+0x10/0x10 [ 601.155933][ C1] ? exit_mmap+0x53f/0xb50 [ 601.155954][ C1] kmem_cache_free+0x309/0x400 [ 601.155978][ C1] exit_mmap+0x53f/0xb50 [ 601.155999][ C1] ? uprobe_clear_state+0x20f/0x290 [ 601.156024][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 601.156044][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 601.156077][ C1] ? __pfx_exit_aio+0x10/0x10 [ 601.156104][ C1] ? uprobe_clear_state+0x274/0x290 [ 601.156125][ C1] ? mm_update_next_owner+0xa7/0x870 [ 601.156151][ C1] __mmput+0x118/0x420 [ 601.156176][ C1] exit_mm+0x1da/0x2c0 [ 601.156196][ C1] ? __pfx_exit_mm+0x10/0x10 [ 601.156212][ C1] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 601.156238][ C1] ? rcu_is_watching+0x15/0xb0 [ 601.156265][ C1] do_exit+0x640/0x22e0 [ 601.156287][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 601.156307][ C1] ? __pfx_do_exit+0x10/0x10 [ 601.156330][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 601.156352][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 601.156377][ C1] do_group_exit+0x21c/0x2d0 [ 601.156401][ C1] __x64_sys_exit_group+0x3f/0x40 [ 601.156420][ C1] x64_sys_call+0x21ba/0x21c0 [ 601.156436][ C1] do_syscall_64+0xfa/0x3b0 [ 601.156460][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 601.156484][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.156500][ C1] ? clear_bhb_loop+0x60/0xb0 [ 601.156520][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.156536][ C1] RIP: 0033:0x7ff6d4d4c6c5 [ 601.156554][ C1] Code: Unable to access opcode bytes at 0x7ff6d4d4c69b. [ 601.156563][ C1] RSP: 002b:00007ffe6fb92c68 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 601.156579][ C1] RAX: ffffffffffffffda RBX: 00007ff6d4e4dfe8 RCX: 00007ff6d4d4c6c5 [ 601.156591][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 601.156602][ C1] RBP: 0000000000000001 R08: 00007ffe6fb92bf8 R09: 0000000000000000 [ 601.156613][ C1] R10: 00007ffe6fb92a90 R11: 0000000000000202 R12: 0000000000000000 [ 601.156623][ C1] R13: 0000000000000000 R14: 00007ff6d4e4c680 R15: 00007ff6d4e4e000 [ 601.156645][ C1] [ 601.157621][ C0] rcu: rcu_preempt kthread starved for 10505 jiffies! g69857 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 601.779382][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 601.789371][ C0] rcu: RCU grace-period kthread stack dump: [ 601.795283][ C0] task:rcu_preempt state:R running task stack:27192 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 601.808807][ C0] Call Trace: [ 601.812102][ C0] [ 601.815052][ C0] __schedule+0x16a2/0x4cb0 [ 601.819590][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 601.824818][ C0] ? schedule+0x165/0x360 [ 601.829170][ C0] ? __lock_acquire+0xab9/0xd20 [ 601.834040][ C0] ? __pfx___schedule+0x10/0x10 [ 601.838925][ C0] ? schedule+0x91/0x360 [ 601.843192][ C0] schedule+0x165/0x360 [ 601.847376][ C0] schedule_timeout+0x12b/0x270 [ 601.852267][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 601.857668][ C0] ? __pfx_process_timeout+0x10/0x10 [ 601.862981][ C0] ? prepare_to_swait_event+0x341/0x380 [ 601.868546][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 601.873424][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 601.878380][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 601.883604][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 601.888912][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 601.894135][ C0] ? finish_swait+0xcd/0x1f0 [ 601.898744][ C0] rcu_gp_kthread+0x99/0x390 [ 601.903378][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 601.908601][ C0] ? __kthread_parkme+0x7b/0x200 [ 601.913587][ C0] ? __kthread_parkme+0x1a1/0x200 [ 601.918643][ C0] kthread+0x711/0x8a0 [ 601.922727][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 601.927943][ C0] ? __pfx_kthread+0x10/0x10 [ 601.932552][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 601.937779][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 601.942996][ C0] ? __pfx_kthread+0x10/0x10 [ 601.947692][ C0] ret_from_fork+0x3f9/0x770 [ 601.952304][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 601.957448][ C0] ? __switch_to_asm+0x39/0x70 [ 601.962227][ C0] ? __switch_to_asm+0x33/0x70 [ 601.967005][ C0] ? __pfx_kthread+0x10/0x10 [ 601.971614][ C0] ret_from_fork_asm+0x1a/0x30 [ 601.976411][ C0] [ 601.979450][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 601.985794][ C0] CPU: 0 UID: 0 PID: 14973 Comm: udevd Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 601.997094][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 602.007163][ C0] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 602.013875][ C0] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 50 78 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 fb 73 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 e0 73 0b [ 602.033500][ C0] RSP: 0018:ffffc900043ff5a0 EFLAGS: 00000293 [ 602.039610][ C0] RAX: ffffffff81b4d790 RBX: ffff8880b863c9c0 RCX: ffff888030fa8000 [ 602.047594][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 602.055572][ C0] RBP: ffffc900043ff700 R08: ffffffff8f9fcbf7 R09: 1ffffffff1f3f97e [ 602.063558][ C0] R10: dffffc0000000000 R11: fffffbfff1f3f97f R12: 1ffff110170e825d [ 602.071555][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b87412e8 [ 602.079548][ C0] FS: 0000000000000000(0000) GS:ffff888125c90000(0000) knlGS:0000000000000000 [ 602.088504][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 602.095109][ C0] CR2: 000055ade9623a08 CR3: 000000000df38000 CR4: 00000000003526f0 [ 602.103099][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 602.111097][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 602.119092][ C0] Call Trace: [ 602.122387][ C0] [ 602.125345][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 602.131709][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 602.136927][ C0] ? rcu_is_watching+0x15/0xb0 [ 602.141727][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 602.146940][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 602.152084][ C0] flush_tlb_mm_range+0x6b1/0x12c0 [ 602.157219][ C0] ? free_pgd_range+0x144b/0x14c0 [ 602.162283][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 602.167888][ C0] tlb_flush_mmu+0x1a7/0x680 [ 602.172510][ C0] tlb_finish_mmu+0xc3/0x1d0 [ 602.177132][ C0] ? free_pgd_range+0x144b/0x14c0 [ 602.182183][ C0] free_ldt_pgtables+0x17b/0x320 [ 602.187152][ C0] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 602.192661][ C0] ? down_read+0x1ad/0x2e0 [ 602.197093][ C0] exit_mmap+0x17c/0xb50 [ 602.201367][ C0] ? uprobe_clear_state+0x20f/0x290 [ 602.206589][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 602.211382][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 602.217056][ C0] ? __pfx_exit_aio+0x10/0x10 [ 602.221767][ C0] ? uprobe_clear_state+0x274/0x290 [ 602.226995][ C0] ? mm_update_next_owner+0xa7/0x870 [ 602.232304][ C0] __mmput+0x118/0x420 [ 602.236423][ C0] exit_mm+0x1da/0x2c0 [ 602.240538][ C0] ? __pfx_exit_mm+0x10/0x10 [ 602.245138][ C0] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 602.250622][ C0] ? rcu_is_watching+0x15/0xb0 [ 602.255413][ C0] do_exit+0x640/0x22e0 [ 602.259591][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 602.264986][ C0] ? __pfx_do_exit+0x10/0x10 [ 602.269605][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 602.274822][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 602.280056][ C0] do_group_exit+0x21c/0x2d0 [ 602.284670][ C0] __x64_sys_exit_group+0x3f/0x40 [ 602.289722][ C0] x64_sys_call+0x21ba/0x21c0 [ 602.294420][ C0] do_syscall_64+0xfa/0x3b0 [ 602.298943][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 602.304160][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.310242][ C0] ? clear_bhb_loop+0x60/0xb0 [ 602.314942][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.320849][ C0] RIP: 0033:0x7f59bf0f16c5 [ 602.325277][ C0] Code: Unable to access opcode bytes at 0x7f59bf0f169b. [ 602.332331][ C0] RSP: 002b:00007ffe45ffa3e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 602.340762][ C0] RAX: ffffffffffffffda RBX: 000055ade9648380 RCX: 00007f59bf0f16c5 [ 602.348768][ C0] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 602.356767][ C0] RBP: 000055ade961a910 R08: 0000000000000000 R09: 0000000000000000 [ 602.364757][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.372746][ C0] R13: 00007ffe45ffa430 R14: 0000000000000000 R15: 0000000000000000 [ 602.380750][ C0]