last executing test programs: 15m12.125191353s ago: executing program 0 (id=129): timer_create(0x3, &(0x7f0000000000)={0x0, 0x39, 0x6}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x10, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1001c}, [@FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000040)={0x0, 0xb}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffffffd9, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 15m11.86227574s ago: executing program 0 (id=132): r0 = timerfd_create(0x1, 0x0) timerfd_create(0x5, 0x1800) timerfd_gettime(r0, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x44, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfffff001}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7ff}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x44}}, 0x8040) 15m11.122559135s ago: executing program 0 (id=135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0182, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a"], 0xfdef) (fail_nth: 4) 15m10.494456079s ago: executing program 0 (id=138): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000040)=""/43, 0x2b}], 0x2}, 0x5}], 0x1, 0x2000, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) syz_io_uring_setup(0x207, &(0x7f0000000340)={0x0, 0x3444, 0x52f, 0x2, 0xa3}, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) 15m9.716780719s ago: executing program 0 (id=141): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000580)={'batadv_slave_1\x00', &(0x7f0000000380)=@ethtool_eeprom={0xb, 0x2, 0x1}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000080000000900030073797a320000040028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005140000001100010000"], 0xe8}}, 0x0) 15m9.40493559s ago: executing program 0 (id=143): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xa, 0x1, 0x0, 0x2}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0x1d, 0x0, 0x6, 0x26}, {0x7}]}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000140)=0xffff) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) socket$qrtr(0x2a, 0x2, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) r6 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x3516, 0x300, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) 14m54.21131188s ago: executing program 32 (id=143): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xa, 0x1, 0x0, 0x2}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0x1d, 0x0, 0x6, 0x26}, {0x7}]}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000140)=0xffff) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) socket$qrtr(0x2a, 0x2, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) r6 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x3516, 0x300, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) 5.799343162s ago: executing program 5 (id=4322): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 5.542190566s ago: executing program 5 (id=4327): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="120000000200000008000000ebd0"], 0x50) 5.50218783s ago: executing program 3 (id=4329): socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a", 0x23}], 0x1}, 0x0) 5.450647871s ago: executing program 2 (id=4330): socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008200)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f00000009c0)=""/4110, 0x100e}], 0x2}, 0x6}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000001f40)=""/223, 0xdf}], 0x2}, 0x80000000}], 0x2, 0x12002, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x10000000000, 0x0, 0x9, 0x0, 0x1, 0x9}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x2, {{@in=@multicast1, @in=@multicast1, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) 5.362430245s ago: executing program 5 (id=4331): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/57, 0x39}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f00000003c0)=""/213, 0xd5}, {&(0x7f00000004c0)=""/11, 0xb}], 0x6}, 0x3}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000900)=""/210, 0xd2}], 0x1}}], 0x2, 0x10100, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 5.354849877s ago: executing program 1 (id=4332): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) socket$kcm(0x10, 0x2, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000480)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 5.330534684s ago: executing program 3 (id=4334): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[], 0xec}}, 0x8000) 5.190775251s ago: executing program 2 (id=4335): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r0, &(0x7f0000000300)="44c33bc286dd6f3a6ae64e449f02db44a5c2b84548b5c70056e3ab97884f6ab99a97f97abfc728ba8c75910da9ff20faa4f9d286ef9fc98d978bfb275ae4a6b362", 0x41, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 5.101377173s ago: executing program 1 (id=4336): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x80801, 0x1) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x10040000}, 0x0) 5.096573694s ago: executing program 5 (id=4337): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6906bb2b0eb2fe32d2f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6000000000000", 0x87}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e2", 0xce}, {&(0x7f0000000180)="0c1928a7397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfdbf169e77257f308b400000000227094d569a4456954e58ea1850000000000000000355c5f42d9f2aa5f1ba0a5c6553eff16", 0x4a}, {&(0x7f0000000b80)="b97edc68d716252c8449bee174f6e06d864889b733fe11", 0x17}], 0x4}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94", 0xd4}, {&(0x7f0000000740)="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", 0x1a3}, {&(0x7f0000000d80)="bd2f6aa36cea0e4bccda9ad762e998d923018ec9f30d63c7059c3c786069915581888508ff589f82857ff546b23b88d6bd61f1efc982005bf6c9abc4fe2caf32ef3ff105b69346a4d09afd7b0b8bd5f8c25f0eab84d8ad1b6576552ee2acbdd9f261b7349aeede1c42e31b1082eec37b959d16afb96240a5d057cab448c3c069f6a67c6ffee04bb1106c7e99752f50c7efdfa8afc8bd11acfc7a82e59dc5ffc88775bf6c9794b3ca2f475d25203ec0e0dd996b25d908e16539ac6e6086da296964d83ba527dcb6e7de403ef2a089ba3a5e094333a951cb48b75ac346a40a3aacc5e1c0783121dbceeef071", 0xeb}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="1713d50800000024ec24681aa099852c4bfae5a0bbdc62896430c2821b43171cca8728132db611681bb875ce88d2f192d5d5e70a6447b32c8bbd6ca61e1888ccee8a9a05c07cdab36ab953eb5d4845932c98", 0x52, 0x10008095, 0x0, 0x0) 5.086628196s ago: executing program 3 (id=4338): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x3, 0x5, 0x3, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = gettid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000009a9d12eed622b5fe45575319efbcd72fa30bd6b4c6f200d5edb737332995e6abe0e0083d4e1f7a1061f62941a6a8860797100000bede5f6c7f5f19fe686bb6e58adf2cd4cd1b81062d63678c", @ANYRES16=r4, @ANYBLOB="8b332400000000000000150000000c00990008"], 0x30}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x800000000004, @tid=r2}, 0x0) ptrace$setregset(0x4205, r2, 0x1, &(0x7f00000002c0)={&(0x7f00000001c0)="6971c9c1cae2b9a955861ace2d1687e7cd3d9d1add69ae47c6e94098ddff6e622c7678ee45495e22f4197454217caa7753ec9cac29b95b07cebcd8c58fc850d48f8afe74f5790188e7ec23305f3b4d25fc70850aaac55212e6efeb9c978dc61cc158580d82ffad0e7008ed9256acc578bff76c", 0x73}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}}}}]}}]}}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000017c0), 0x800, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) readv(r5, &(0x7f00000018c0)=[{&(0x7f0000000400)=""/185, 0xb9}, {&(0x7f0000001680)=""/69, 0x45}, {&(0x7f0000001580)=""/211, 0xd3}, {&(0x7f0000001700)=""/142, 0x7f}, {&(0x7f00000019c0)=""/162, 0xa2}, {&(0x7f0000001a80)=""/196, 0x126}, {&(0x7f0000000180)=""/12, 0xc}], 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x0, 0x2000000}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000010000104000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000044c0), 0x141802) r8 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x3, &(0x7f00000027c0)={0x0, 0x7, 0x1, @thr={0x0, 0x0}}, &(0x7f0000002800)=0x0) timer_settime(r9, 0x0, &(0x7f0000002880)={{}, {0x77359400}}, 0x0) timer_settime(r9, 0x0, &(0x7f0000002980)={{0x0, 0x989680}, {0x77359400}}, &(0x7f00000029c0)) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(r9, 0x1, &(0x7f0000000340)={{}, {r10, r11+10000000}}, &(0x7f0000000380)) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r8, &(0x7f0000000040)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) 4.962502344s ago: executing program 5 (id=4339): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x1b) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x600000000000000, 0x0, 0x0, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'bridge_slave_0\x00', 0x401}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581"], 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x28, 0x2, 0x6, 0x401, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 4.800789511s ago: executing program 1 (id=4341): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x142, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0xd}, 0x1c, &(0x7f00000001c0)}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x100000, @remote, 0x7}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000580)="5894f3d52be7d8ec0db4741465f9193c5907e058e447a3e71a5821f64f72e643af6ca8e89a37f595ae2b00cdae0e6a62d95f7bce699983a50c9c9b995024a990ab95f7ad36ea6000d09a2027b98c9a4d7d6bda0b6d9ecf1136e276396244d02d031b31c34bb99663b775e08e4290a03a94609f57300ac3f46dfeb30ff4773a038aa3cb314f30a8b642bcd6c413f2980ac43cc8c8c49bb90e811ab2e616d46c6047908a6e40fb50d586807bd8fb8d53b0784ff855034f64bb95e8c1f4ab7b99b328ea3da25e", 0xc5}, {&(0x7f0000000400)="bee89d502f91dfc595a775518420c3604c1b873868fa95125b0aeb41c2ab22fcc74d9a54e2875aaed07232d3b4cb63e5805371a38f7581ee4e23498537a685c66269e65d77cb17d2acc3d6e1a250cdd581e4df", 0x53}, {&(0x7f0000000500)="31c091690d55ce3ed0c6000000000000000800000000", 0x16}, {&(0x7f0000000680)="8c1e64aa1d99928514e5792f3e17817b5b3e52b6fb94712931ac068e2f077a4e9da586c9b1021fae096bffa0f58e6939d2cdf54c702f68d155f3e4b49a144fbe8aa682f5662cf59e885f8be147fb6d6251066ac0067b49d3aa4e9aadda528652128144055436a1ed26b05fdba43e29a80b762918a4265b01966d7112c196e842e2a4d7f3ff36a3a809afd511509f24c34f25a7c24044af598b8e121b908b9517f2ea", 0xa2}, {&(0x7f0000000740)="6f9ac74b73084ec3467f19fded6a421aa2181b7e96dff70a5273bdd7260ce20de8012b00f55a7d8f944cb40c100eb119df2a143c898d20407395d7fb96cc36ae351e9ce0ca43ec00ac66d1471690c33ececc1644ff2326009b880084d856d2922f5e2f9dfe1e1c6bb48b1686a57500a7e40dd2e4fcd574eeef5478f005b54a7b34433682c6a0dbba17e0675b521a9a2eab1c5b08114c57853c3251", 0x9b}, {&(0x7f0000000800)="eb9be315ab80c19ccc4ed209e56db5a750a375975777e7db5a4be07e126eeea104112b24d97e404648e3c4b38623ada26cbee1d1ee6b918a6b48430d3adfeeec637be9f78904b19e345d7a2c4cfa5784663590d6dd3d6a4f2d425b6219304ed9b6b7b87eb2e32e59436ac0334b5aafc0e3788e07a58c883cd0125fff8d9b189f5159ee0e78620e214d3705a2484357a1e5de9b3cb2a44fedaf80def8084af4d1035c9479dd3c27c7307e49a4e896e3341c654014e431883f94712170c61e629ec82c3864df714eea65e9abbe85c8d172aab41a890c000f31f1d037177196da1719", 0xe1}], 0x6, &(0x7f0000000980)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}], 0x18}}], 0x2, 0x40) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) r6 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="01000000971bac5544ad77590779467f", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64, @ANYRES64=r4, @ANYBLOB="f0ff005a01500476cf69cca9d7a7d1c9f896282acbddf1dbe93052e8370ec196607dfd1e6b356cad73a64eebfa459573941ff93a8c1e279269af21e8"], 0x80}, 0x1, 0x0, 0x0, 0x8821}, 0x20000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000005a4faa7c70bb7b52ddd5f9c317c052a6a75eaab870433b3f4fd6febbb54ad0ba2f3d66a3ef0018243e32b73e0b9c3f5bc8e4e4ab0aef503840ddfb9c475c06b59ebd34ab5a"], 0x8) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000000)="260f009c0400baf80c66b80cdefb8166efbafc0ced260f086766c7442400070000006766c744240200a000006766c744240600000000670f011c240fc75e0066b9800000c00f326635010000000f30650fd3d40f01c366b83fbf00000f23d80f21f86635800000900f23f866b8010000000f01c1", 0x74}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_usb_connect(0x2, 0x9a2, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 4.738431371s ago: executing program 2 (id=4342): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xc0b, 0x145, 0xd, 0x400007, 0x8, 0x4, 0xfffffffe}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r2, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x10000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) unshare(0x66000080) r4 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x48, 0xb, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x2, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x6, 0x8, 0x6, 0x10, 0x80}, 0x37, &(0x7f0000000380)={0x5, 0xf, 0x37, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "11c39c1edf1c4843838ea4cbfdd3aa5f"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x6, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "d314596653dea6929b41fd40fd134d93"}, @generic={0x3, 0x10, 0xb}]}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x416}}]}) unshare(0x10000400) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r7 = gettid() sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r6, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r7], 0x28}}, 0x0) 2.07445154s ago: executing program 4 (id=4350): setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x4aa4) r0 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x452b}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={r1, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0xf6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8cd}]}, &(0x7f00000002c0)=0x10) r2 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r2, &(0x7f0000000040)={0x2a, 0x0, 0x4001}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x26020480) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x408dc}, 0x4000080) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 1.37371174s ago: executing program 4 (id=4351): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x80801, 0x1) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) 1.242924191s ago: executing program 3 (id=4352): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast1, @in=@private=0xf0, 0x1ffe, 0xff, 0xfffc, 0x41, 0x2}, {0x6, 0x3, 0xfffffffffffffffe, 0x10000000, 0x4, 0x0, 0x80000000000000}, {0x402, 0x3, 0x0, 0x800}, 0x4000008, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0xe}, 0x4d6, 0x32}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe}}, 0xe8) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x20}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) unshare(0x42000000) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x8002, '\x00', '\x00', '\x00', 0x4, 0xfffffffe, 0x100, 0x0, "abd206a1ebd7cedfd17ebd65400ed41b"}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 1.103333074s ago: executing program 5 (id=4353): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="00791000000000e1d367b2000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r0, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f0000000040)=r2, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000200)='\x00', 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r6 = dup2(r5, r2) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0)=r6, 0x4) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = syz_usb_connect(0x2, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)={0x20, 0x11, 0x1, "f8"}, 0x0, 0x0}) syz_usb_control_io$uac1(r8, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x20, 0xc, 0x1, "b2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000700)=ANY=[@ANYBLOB="000f0c000000c2f071ec21724cc1e34548f4"], 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0x9, 0x1, 0xb1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x0, 0x0, 0x2007) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) r9 = fsmount(r7, 0x0, 0x0) fchdir(r9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r11 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r11, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x6}, {0xfe}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0xed}, @raw32}], 0x70) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000c600001c0012800b00010062726964676500000c0002800800130011"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 974.258984ms ago: executing program 4 (id=4354): r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000000c0)=0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000040)={&(0x7f00000006c0)={{@local, 0x64}, {}, 0x400, "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"}, 0x418, 0x7fffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000007, 0x2172, 0xffffffffffffffff, 0x0) socket(0x14, 0x80000, 0x9) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil) preadv(r1, &(0x7f0000000dc0)=[{0x0}, {&(0x7f0000000580)=""/232, 0xe8}, {&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000000180)=""/34, 0x22}, {&(0x7f0000000380)=""/55, 0x37}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000000b00)=""/237, 0xed}, {&(0x7f0000000c80)=""/104, 0x68}, {&(0x7f0000000d00)=""/174, 0xae}], 0x9, 0x8001, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x3, &(0x7f0000006340)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@generic={0x0, r5}, 0x18) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) 603.04755ms ago: executing program 2 (id=4355): socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a", 0x23}], 0x1}, 0x0) 535.217594ms ago: executing program 4 (id=4356): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008200)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f00000009c0)=""/4110, 0x100e}], 0x2}, 0x6}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000001f40)=""/223, 0xdf}], 0x2}, 0x80000000}], 0x2, 0x12002, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x10000000000, 0x0, 0x9, 0x0, 0x1, 0x9}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x2, {{@in=@multicast1, @in=@multicast1, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) 490.980208ms ago: executing program 3 (id=4357): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) socket$kcm(0x10, 0x2, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000480)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 473.808769ms ago: executing program 1 (id=4358): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/57, 0x39}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f00000003c0)=""/213, 0xd5}, {&(0x7f00000004c0)=""/11, 0xb}, {0x0}], 0x7}, 0x3}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000900)=""/210, 0xd2}], 0x1}}], 0x2, 0x10100, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 330.36444ms ago: executing program 2 (id=4359): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4044894) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="64000000190a010400000000000000000200000044000740d3a094ccfc36929da203df447ba6c9c1946569aff2ce4aafd39b142d3cfcffba99971a58fbff9929767d8380263a91a9526c3a4f25aa22299135092377d6452b0900010073797a"], 0x64}, 0x1, 0x0, 0x0, 0x20008840}, 0x8004) 305.1509ms ago: executing program 4 (id=4360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 142.439284ms ago: executing program 1 (id=4361): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(r0, 0x0, r1, 0x0, 0x10cfd, 0xa) 116.870084ms ago: executing program 4 (id=4362): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x3, 0x5, 0x3, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = gettid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000009a9d12eed622b5fe45575319efbcd72fa30bd6b4c6f200d5edb737332995e6abe0e0083d4e1f7a1061f62941a6a8860797100000bede5f6c7f5f19fe686bb6e58adf2cd4cd1b81062d63678c", @ANYRES16=r4, @ANYBLOB="8b332400000000000000150000000c00990008"], 0x30}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x800000000004, @tid=r2}, 0x0) ptrace$setregset(0x4205, r2, 0x1, &(0x7f00000002c0)={&(0x7f00000001c0)="6971c9c1cae2b9a955861ace2d1687e7cd3d9d1add69ae47c6e94098ddff6e622c7678ee45495e22f4197454217caa7753ec9cac29b95b07cebcd8c58fc850d48f8afe74f5790188e7ec23305f3b4d25fc70850aaac55212e6efeb9c978dc61cc158580d82ffad0e7008ed9256acc578bff76c", 0x73}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}}}}]}}]}}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000017c0), 0x800, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) readv(r5, &(0x7f00000018c0)=[{&(0x7f0000000400)=""/185, 0xb9}, {&(0x7f0000001680)=""/69, 0x45}, {&(0x7f0000001580)=""/211, 0xd3}, {&(0x7f0000001700)=""/142, 0x7f}, {&(0x7f00000019c0)=""/162, 0xa2}, {&(0x7f0000001a80)=""/196, 0x126}, {&(0x7f0000000180)=""/12, 0xc}], 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x0, 0x2000000}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000010000104000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000044c0), 0x141802) r8 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x3, &(0x7f00000027c0)={0x0, 0x7, 0x1, @thr={0x0, 0x0}}, &(0x7f0000002800)=0x0) timer_settime(r9, 0x0, &(0x7f0000002880)={{}, {0x77359400}}, 0x0) timer_settime(r9, 0x0, &(0x7f0000002980)={{0x0, 0x989680}, {0x77359400}}, &(0x7f00000029c0)) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(r9, 0x1, &(0x7f0000000340)={{}, {r10, r11+10000000}}, &(0x7f0000000380)) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r8, &(0x7f0000000040)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) 45.200881ms ago: executing program 2 (id=4363): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x1b) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x600000000000000, 0x0, 0x0, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'bridge_slave_0\x00', 0x401}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581"], 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x28, 0x2, 0x6, 0x401, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 1.039847ms ago: executing program 1 (id=4364): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x80801, 0x1) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) 0s ago: executing program 3 (id=4365): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xc0b, 0x145, 0xd, 0x400007, 0x8, 0x4, 0xfffffffe}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r2, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x10000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) unshare(0x66000080) r4 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x48, 0xb, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x2, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x6, 0x8, 0x6, 0x10, 0x80}, 0xab, &(0x7f0000000380)={0x5, 0xf, 0xab, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "11c39c1edf1c4843838ea4cbfdd3aa5f"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x6, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "d314596653dea6929b41fd40fd134d93"}, @generic={0x77, 0x10, 0xb, "42b7b951b049444ece91563be0b48a298a1898f4cb47783d8a2815c1dea1a8efc4c23ca1dc3be95faf274dcc094fb9dfe27217762a36be3194cfa7b8f43118a11a292416869f2c2a2f033a72e0a95d7ca04d8a3e4ea0327aea2b86d09aa802580baf883670c2d6f0ce2bb07f1446df395f793c58"}]}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x416}}]}) unshare(0x10000400) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r7 = gettid() sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r6, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r7], 0x28}}, 0x0) kernel console output (not intermixed with test programs): nk speed/duplex [ 861.436934][ T5915] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 861.486801][T15960] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input41 [ 861.497185][ T5915] visor 6-1:1.0: device disconnected [ 861.512607][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 861.730279][T16564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.790394][T16564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.993488][T16377] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 862.057825][T16377] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 862.116481][T16377] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 862.167046][ T5835] usb 4-1: USB disconnect, device number 110 [ 862.173880][T16584] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 862.223223][T16377] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 862.527513][T16377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 862.666902][T16377] 8021q: adding VLAN 0 to HW filter on device team0 [ 862.822990][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.830138][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 862.989093][T10880] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.996343][T10880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 863.183596][ T5835] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 863.481403][ T5835] usb 2-1: config 0 has no interfaces? [ 863.741104][ T5835] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 863.777600][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.840593][ T5835] usb 2-1: Product: syz [ 863.860824][ T5835] usb 2-1: Manufacturer: syz [ 863.889076][ T5835] usb 2-1: SerialNumber: syz [ 864.021577][ T5901] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 864.038609][ T5835] usb 2-1: config 0 descriptor?? [ 864.065683][T16377] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 864.155686][T16377] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 864.281267][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 864.348704][T16607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.358202][T16607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.511533][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 864.534303][ T5901] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 864.556988][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.588459][ T5901] usb 3-1: Product: syz [ 864.621104][ T5901] usb 3-1: Manufacturer: syz [ 864.630952][ T5901] usb 3-1: SerialNumber: syz [ 864.652087][ T5901] usb 3-1: config 0 descriptor?? [ 864.689675][T16623] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 864.706549][T16377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 864.807252][ T5901] usb 3-1: ucan: probing device on interface #0 [ 864.871938][ T5901] usb 3-1: ucan: invalid EP count (1) [ 864.925865][ T5901] usb 3-1: ucan: probe failed; try to update the device firmware [ 864.967041][T16377] veth0_vlan: entered promiscuous mode [ 865.238829][T16377] veth1_vlan: entered promiscuous mode [ 865.382867][ T3460] net_ratelimit: 19 callbacks suppressed [ 865.382885][ T3460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 865.463242][ T748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 865.505961][T16640] syz.3.3001 (16640): drop_caches: 2 [ 865.594706][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 865.656971][T16377] veth0_macvtap: entered promiscuous mode [ 865.724371][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 865.732095][ T5901] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 865.775225][T16377] veth1_macvtap: entered promiscuous mode [ 865.821990][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 865.857027][T16377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 865.913419][T16377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 865.919243][ T5901] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.978366][ T5901] usb 6-1: config 0 interface 0 has no altsetting 0 [ 865.985183][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 865.985235][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 866.013901][T16377] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.055729][T16377] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.058518][ T5901] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 866.074557][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.092545][ T5901] usb 6-1: Product: syz [ 866.096920][ T5901] usb 6-1: Manufacturer: syz [ 866.105119][ T5901] usb 6-1: SerialNumber: syz [ 866.120437][ T5901] usb 6-1: config 0 descriptor?? [ 866.142505][T16377] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.148496][ T5901] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 866.180816][ T5901] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 866.216563][ T5901] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 866.232769][ T5901] usb 6-1: media controller created [ 866.258323][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 866.287671][T16377] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.341200][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 866.349935][ T5902] usb 2-1: USB disconnect, device number 101 [ 866.385988][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 866.431463][T16651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3005'. [ 866.486159][ T5901] DVB: Unable to find symbol tda10046_attach() [ 866.494689][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 866.534420][ T5901] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 866.567839][ T5901] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 866.725112][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.743996][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.843568][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.862833][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.008796][T16664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.031914][T16664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.087226][T16652] usb 3-1: USB disconnect, device number 125 [ 867.181492][T15960] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 867.261786][T16667] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 867.271158][T11833] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 867.354693][T15960] usb 2-1: Using ep0 maxpacket: 8 [ 867.396191][T15960] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 867.438577][T15960] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 867.511482][T15960] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 867.531217][T15960] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 867.588263][T15960] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 867.642994][T15960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.765785][ T5901] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 867.841978][ T5901] usb 6-1: USB disconnect, device number 93 [ 867.886581][T15960] usb 2-1: GET_CAPABILITIES returned 0 [ 867.921143][T15960] usbtmc 2-1:16.0: can't read capabilities [ 867.984127][T11833] usb 5-1: unable to read config index 0 descriptor/all [ 868.014910][T11833] usb 5-1: can't read configurations, error -71 [ 868.119964][T15960] usb 2-1: USB disconnect, device number 102 [ 868.442913][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 868.453119][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 868.460787][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 868.471412][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 868.479111][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 868.768576][ T1155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.783434][ T1155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 868.922032][ T1155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.941845][ T1155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 869.090040][ T1155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.113766][ T1155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 869.181097][ T5901] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 869.507094][ T5901] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 869.520029][ T5901] usb 2-1: config 0 has no interface number 0 [ 869.553479][ T5901] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 869.568805][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.587628][ T5901] usb 2-1: Product: syz [ 869.601272][ T5901] usb 2-1: Manufacturer: syz [ 869.618143][ T5901] usb 2-1: SerialNumber: syz [ 869.650275][ T5901] usb 2-1: config 0 descriptor?? [ 869.909502][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.051173][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.191385][T16681] chnl_net:caif_netlink_parms(): no params data found [ 870.497631][ T1155] bridge_slave_1: left allmulticast mode [ 870.528753][ T5843] Bluetooth: hci2: command tx timeout [ 870.571046][ T1155] bridge_slave_1: left promiscuous mode [ 870.576894][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.770064][ T1155] bridge_slave_0: left allmulticast mode [ 870.818241][ T1155] bridge_slave_0: left promiscuous mode [ 870.845530][ T5901] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 870.861243][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.900247][ T5901] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 870.938407][ T5901] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 871.011749][ T5901] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 871.044428][ T5901] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 871.343238][ T5901] usb 2-1: USB disconnect, device number 103 [ 871.466738][ T5954] udevd[5954]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 871.482090][ T5901] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 871.530967][ T5901] keyspan 2-1:0.133: device disconnected [ 872.306855][ T1155] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 872.337066][ T1155] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 872.683085][ T5843] Bluetooth: hci2: command tx timeout [ 873.271670][ T10] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 873.417345][T16753] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 873.502792][ T10] usb 3-1: config 0 has an invalid interface number: 84 but max is 0 [ 873.510934][ T10] usb 3-1: config 0 has no interface number 0 [ 873.535962][ T10] usb 3-1: config 0 interface 84 altsetting 253 endpoint 0x7 has invalid maxpacket 1279, setting to 64 [ 873.571173][ T10] usb 3-1: config 0 interface 84 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 873.582718][ T10] usb 3-1: config 0 interface 84 has no altsetting 0 [ 873.589479][ T10] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice= f.05 [ 873.599446][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.626503][ T10] usb 3-1: config 0 descriptor?? [ 873.642547][T16748] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 873.665409][ T10] option 3-1:0.84: GSM modem (1-port) converter detected [ 874.001619][T16748] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3027'. [ 874.010658][T16748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3027'. [ 874.157350][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 874.197860][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 874.242833][ T1155] bond0 (unregistering): Released all slaves [ 874.493270][ T1155] bond1 (unregistering): Released all slaves [ 874.551529][ T36] net_ratelimit: 36 callbacks suppressed [ 874.551547][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 874.655689][T16762] futex_wake_op: syz.4.3030 tries to shift op by -1; fix this program [ 874.761143][ T5843] Bluetooth: hci2: command tx timeout [ 875.033934][ T1155] lm;Ê-: left promiscuous mode [ 875.151187][T16681] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.251353][T16681] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.258646][T16681] bridge_slave_0: entered allmulticast mode [ 875.340610][T16681] bridge_slave_0: entered promiscuous mode [ 875.376433][T16681] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.398464][T16786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 875.408305][T16786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 875.464202][T16681] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.503402][T16784] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 875.543535][T16681] bridge_slave_1: entered allmulticast mode [ 875.672977][T16681] bridge_slave_1: entered promiscuous mode [ 875.970295][T16798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3036'. [ 875.987221][ T1155] _ÐZ`Ô€@ÿÃ: left promiscuous mode [ 876.071689][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 876.123289][T16681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 876.172309][ T1155] tipc: Left network mode [ 876.201464][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 876.238072][T16681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 876.841345][ T5843] Bluetooth: hci2: command tx timeout [ 877.014828][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 877.178520][T16681] team0: Port device team_slave_0 added [ 877.316182][T16681] team0: Port device team_slave_1 added [ 877.481270][ T5920] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 877.731121][ T5920] usb 6-1: Using ep0 maxpacket: 8 [ 877.742959][ T5920] usb 6-1: config 247 has an invalid interface number: 51 but max is 3 [ 877.759369][ T5920] usb 6-1: config 247 has an invalid interface number: 178 but max is 3 [ 877.780902][ T5920] usb 6-1: config 247 has an invalid descriptor of length 1, skipping remainder of the config [ 877.800055][ T5920] usb 6-1: config 247 has 2 interfaces, different from the descriptor's value: 4 [ 877.843772][ T5920] usb 6-1: config 247 has no interface number 0 [ 877.850064][ T5920] usb 6-1: config 247 has no interface number 1 [ 877.919599][ T5920] usb 6-1: config 247 interface 51 altsetting 3 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 877.957451][ T5920] usb 6-1: config 247 interface 51 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 877.974115][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 877.996544][ T5920] usb 6-1: config 247 interface 178 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 878.023723][T16681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 878.052296][T16681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 878.054327][ T5920] usb 6-1: config 247 interface 51 has no altsetting 0 [ 878.140451][ T5920] usb 6-1: config 247 interface 178 has no altsetting 0 [ 878.385121][T16681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 878.405674][ T5920] usb 6-1: New USB device found, idVendor=114f, idProduct=68a2, bcdDevice= 4.0e [ 878.461353][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.691231][ T5920] usb 6-1: Product: 誓ᩛåžê¡¦ã»®ç°¾ê¨¦ç‰´è¬•à¹™á¬ç±¾Ü›æ°¨ê¿‡å¯¾ëœ¨ê´‘ì¡…ï¶î’ѡ휈ë¦ã°§è”´Þ©å¼°íœ—纒⧨옦묀疢毕盄쯊â«ï“‡é™è·›æ€”狲⢓曆졼멑鿚à¸ä›³ïž—হ䳾︰ꚹ䛲å½ä‹¸é´¯î›´ì¯»î²¡æšŽãŽ“㬕 [ 878.818149][ T5920] usb 6-1: Manufacturer: Й [ 878.825530][ T5920] usb 6-1: SerialNumber: â° [ 878.868306][T16681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 878.897432][T16681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 878.986166][T16681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.176285][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 879.244337][ T5920] usb 6-1: USB disconnect, device number 94 [ 879.405980][T16776] delete_channel: no stack [ 879.438155][ T1155] hsr_slave_0: left promiscuous mode [ 879.496642][ T1155] hsr_slave_1: left promiscuous mode [ 879.562345][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 879.570087][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 879.635545][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 879.649438][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 879.685214][ T1155] veth1_macvtap: left promiscuous mode [ 879.692332][ T1155] veth0_macvtap: left promiscuous mode [ 879.703111][ T1155] veth1_vlan: left promiscuous mode [ 879.708495][ T1155] veth0_vlan: left promiscuous mode [ 881.427813][T16863] futex_wake_op: syz.4.3047 tries to shift op by -1; fix this program [ 882.193130][ T1155] team0 (unregistering): Port device team_slave_1 removed [ 882.405324][ T1155] team0 (unregistering): Port device team_slave_0 removed [ 883.431253][T16884] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 883.437821][T16884] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 883.447701][T16884] vhci_hcd vhci_hcd.0: Device attached [ 883.468659][T16884] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8) [ 883.475238][T16884] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 883.496213][T16884] vhci_hcd vhci_hcd.0: Device attached [ 883.539106][T16890] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 883.545779][T16890] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 883.559689][T16890] vhci_hcd vhci_hcd.0: Device attached [ 883.685359][ T5920] usb 35-1: new low-speed USB device number 5 using vhci_hcd [ 884.019523][T16884] syz_tun: entered promiscuous mode [ 884.030640][T16884] syz_tun: left promiscuous mode [ 884.215521][T16887] vhci_hcd: connection closed [ 884.215835][T16885] vhci_hcd: connection reset by peer [ 884.226042][T10880] vhci_hcd: stop threads [ 884.230332][T10880] vhci_hcd: release socket [ 884.234873][T16891] vhci_hcd: connection closed [ 884.248402][T10880] vhci_hcd: disconnect device [ 884.290461][T16900] FAULT_INJECTION: forcing a failure. [ 884.290461][T16900] name failslab, interval 1, probability 0, space 0, times 0 [ 884.343923][T10880] vhci_hcd: stop threads [ 884.348247][T10880] vhci_hcd: release socket [ 884.353749][T16900] CPU: 0 UID: 0 PID: 16900 Comm: syz.5.3051 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 884.353774][T16900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 884.353787][T16900] Call Trace: [ 884.353795][T16900] [ 884.353804][T16900] dump_stack_lvl+0x189/0x250 [ 884.353840][T16900] ? __pfx____ratelimit+0x10/0x10 [ 884.353868][T16900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 884.353897][T16900] ? __pfx__printk+0x10/0x10 [ 884.353920][T16900] ? __pfx___might_resched+0x10/0x10 [ 884.353950][T16900] ? fs_reclaim_acquire+0x7d/0x100 [ 884.353976][T16900] should_fail_ex+0x414/0x560 [ 884.354005][T16900] should_failslab+0xa8/0x100 [ 884.354027][T16900] __kmalloc_noprof+0xcb/0x4f0 [ 884.354045][T16900] ? tomoyo_encode+0x28b/0x550 [ 884.354076][T16900] tomoyo_encode+0x28b/0x550 [ 884.354108][T16900] tomoyo_realpath_from_path+0x58d/0x5d0 [ 884.354137][T16900] ? tomoyo_domain+0xd9/0x130 [ 884.354171][T16900] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 884.354193][T16900] tomoyo_path_number_perm+0x1e8/0x5a0 [ 884.354218][T16900] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 884.354257][T16900] ? __lock_acquire+0xab9/0xd20 [ 884.354304][T16900] ? __fget_files+0x2a/0x420 [ 884.354336][T16900] ? __fget_files+0x2a/0x420 [ 884.354356][T16900] ? __fget_files+0x3a0/0x420 [ 884.354376][T16900] ? __fget_files+0x2a/0x420 [ 884.354402][T16900] security_file_ioctl+0xcb/0x2d0 [ 884.354425][T16900] __se_sys_ioctl+0x47/0x170 [ 884.354475][T16900] do_syscall_64+0xfa/0x3b0 [ 884.354504][T16900] ? lockdep_hardirqs_on+0x9c/0x150 [ 884.354533][T16900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.354554][T16900] ? clear_bhb_loop+0x60/0xb0 [ 884.354579][T16900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.354599][T16900] RIP: 0033:0x7f8bf6f8e929 [ 884.354618][T16900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 884.354637][T16900] RSP: 002b:00007f8bf4df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 884.354658][T16900] RAX: ffffffffffffffda RBX: 00007f8bf71b5fa0 RCX: 00007f8bf6f8e929 [ 884.354674][T16900] RDX: 0000200000000480 RSI: 000000004004ae99 RDI: 0000000000000005 [ 884.354687][T16900] RBP: 00007f8bf4df6090 R08: 0000000000000000 R09: 0000000000000000 [ 884.354700][T16900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.354712][T16900] R13: 0000000000000000 R14: 00007f8bf71b5fa0 R15: 00007f8bf72dfa28 [ 884.354743][T16900] [ 884.354764][T16900] ERROR: Out of memory at tomoyo_realpath_from_path. [ 884.368170][T10880] vhci_hcd: disconnect device [ 884.642886][T16681] hsr_slave_0: entered promiscuous mode [ 884.682062][T16681] hsr_slave_1: entered promiscuous mode [ 884.722093][ T3460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 884.775340][T10880] vhci_hcd: stop threads [ 884.805942][T10880] vhci_hcd: release socket [ 884.814813][T10880] vhci_hcd: disconnect device [ 885.001388][ T5901] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 885.171497][ T5901] usb 5-1: device descriptor read/64, error -71 [ 885.291210][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 885.411317][ T5901] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 885.523182][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 885.625328][ T5901] usb 5-1: device descriptor read/64, error -71 [ 885.771580][ T5901] usb usb5-port1: attempt power cycle [ 885.771762][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 885.789512][ T5915] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 885.944176][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 885.987108][ T5915] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 886.018649][ T5915] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 886.029208][ T5915] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 886.047233][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.073329][T16921] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 886.099861][ T5915] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 886.101253][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 886.127710][ T5901] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 886.172872][ T5901] usb 5-1: device descriptor read/8, error -71 [ 886.251704][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 886.325847][T16921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.363737][T16921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.396333][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 886.399337][T11833] usb 2-1: USB disconnect, device number 104 [ 886.419980][T16681] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 886.427703][ T5901] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 886.467797][T16681] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 886.474281][ T5901] usb 5-1: device descriptor read/8, error -71 [ 886.521466][T16681] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 886.572236][T16681] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 886.601559][ T5901] usb usb5-port1: unable to enumerate USB device [ 886.652770][T16945] FAULT_INJECTION: forcing a failure. [ 886.652770][T16945] name failslab, interval 1, probability 0, space 0, times 0 [ 886.704001][T16945] CPU: 1 UID: 0 PID: 16945 Comm: syz.2.3059 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 886.704032][T16945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 886.704047][T16945] Call Trace: [ 886.704056][T16945] [ 886.704066][T16945] dump_stack_lvl+0x189/0x250 [ 886.704105][T16945] ? __pfx____ratelimit+0x10/0x10 [ 886.704137][T16945] ? __pfx_dump_stack_lvl+0x10/0x10 [ 886.704172][T16945] ? __pfx__printk+0x10/0x10 [ 886.704202][T16945] ? __pfx___might_resched+0x10/0x10 [ 886.704241][T16945] should_fail_ex+0x414/0x560 [ 886.704274][T16945] should_failslab+0xa8/0x100 [ 886.704299][T16945] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 886.704321][T16945] ? __alloc_skb+0x112/0x2d0 [ 886.704350][T16945] __alloc_skb+0x112/0x2d0 [ 886.704385][T16945] netlink_sendmsg+0x5c6/0xb30 [ 886.704421][T16945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 886.704450][T16945] ? aa_sock_msg_perm+0x94/0x160 [ 886.704479][T16945] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 886.704507][T16945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 886.704533][T16945] __sock_sendmsg+0x21c/0x270 [ 886.704569][T16945] ____sys_sendmsg+0x505/0x830 [ 886.704601][T16945] ? __pfx_____sys_sendmsg+0x10/0x10 [ 886.704642][T16945] ? import_iovec+0x74/0xa0 [ 886.704666][T16945] ___sys_sendmsg+0x21f/0x2a0 [ 886.704695][T16945] ? __pfx____sys_sendmsg+0x10/0x10 [ 886.704760][T16945] ? __fget_files+0x2a/0x420 [ 886.704784][T16945] ? __fget_files+0x3a0/0x420 [ 886.704819][T16945] __x64_sys_sendmsg+0x19b/0x260 [ 886.704849][T16945] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 886.704886][T16945] ? __pfx_ksys_write+0x10/0x10 [ 886.704904][T16945] ? rcu_is_watching+0x15/0xb0 [ 886.704943][T16945] ? do_syscall_64+0xbe/0x3b0 [ 886.704980][T16945] do_syscall_64+0xfa/0x3b0 [ 886.705011][T16945] ? lockdep_hardirqs_on+0x9c/0x150 [ 886.705041][T16945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.705063][T16945] ? clear_bhb_loop+0x60/0xb0 [ 886.705089][T16945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.705110][T16945] RIP: 0033:0x7f7ed698e929 [ 886.705130][T16945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 886.705150][T16945] RSP: 002b:00007f7ed781b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 886.705173][T16945] RAX: ffffffffffffffda RBX: 00007f7ed6bb5fa0 RCX: 00007f7ed698e929 [ 886.705190][T16945] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 886.705204][T16945] RBP: 00007f7ed781b090 R08: 0000000000000000 R09: 0000000000000000 [ 886.705218][T16945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.705231][T16945] R13: 0000000000000000 R14: 00007f7ed6bb5fa0 R15: 00007f7ed6cdfa28 [ 886.705264][T16945] [ 887.009928][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 887.267921][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 887.374539][T16681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 887.437402][T16681] 8021q: adding VLAN 0 to HW filter on device team0 [ 887.459498][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.466736][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 887.578799][T16961] tipc: Enabling of bearer rejected, already enabled [ 887.650548][T10880] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.657874][T10880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 887.921735][T11833] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 887.981136][ T5915] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 888.041512][T16973] netlink: 'syz.2.3065': attribute type 9 has an invalid length. [ 888.115084][T11833] usb 6-1: config 0 has no interfaces? [ 888.132576][T11833] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 888.142196][T11833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.150233][T11833] usb 6-1: Product: syz [ 888.171445][ T5915] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 888.180546][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.188587][T11833] usb 6-1: Manufacturer: syz [ 888.188608][T11833] usb 6-1: SerialNumber: syz [ 888.203888][T16681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.221569][T11833] usb 6-1: config 0 descriptor?? [ 888.320375][ T5915] usb 2-1: config 0 descriptor?? [ 888.349912][ T5915] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 888.378153][T16681] veth0_vlan: entered promiscuous mode [ 888.450436][T16963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.466859][T16963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.492349][T16681] veth1_vlan: entered promiscuous mode [ 888.573917][T16681] veth0_macvtap: entered promiscuous mode [ 888.603262][T16681] veth1_macvtap: entered promiscuous mode [ 888.805071][ T5915] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 888.831226][ T5920] vhci_hcd: vhci_device speed not set [ 888.868638][T16681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 888.914699][T16681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 889.038677][T16681] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.120965][T16681] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.181201][ T5902] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 889.230571][T16681] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.339112][T16681] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.361182][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 889.369451][ T5902] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.380573][ T5902] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 889.487194][ T5902] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 889.497618][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 889.659474][ T5902] usb 5-1: Product: syz [ 889.680242][ T5915] gspca_cpia1: usb_control_msg 03, error -71 [ 889.686692][ T5915] cpia1 2-1:0.0: unexpected systemstate: 00 [ 889.700728][ T5915] usb 2-1: USB disconnect, device number 105 [ 889.726224][ T5902] usb 5-1: Manufacturer: syz [ 889.759179][ T5902] usb 5-1: SerialNumber: syz [ 889.794068][ T5902] appletouch 5-1:1.0: Could not find int-in endpoint [ 889.806457][ T5902] appletouch 5-1:1.0: probe with driver appletouch failed with error -5 [ 889.826071][ T5902] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 889.834382][ T12] net_ratelimit: 10 callbacks suppressed [ 889.834393][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 890.021242][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 890.066198][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.084510][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.093192][T15960] usb usb36-port1: attempt power cycle [ 890.284642][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 890.448055][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.466403][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.481222][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 890.602070][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 890.662384][T15960] usb usb36-port1: unable to enumerate USB device [ 890.735880][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 890.882032][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 890.905906][ T5916] usb 6-1: USB disconnect, device number 95 [ 891.156379][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 891.321496][ T3460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 891.481759][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 891.588149][T15960] usb 5-1: USB disconnect, device number 9 [ 892.709271][T17023] tipc: Started in network mode [ 892.731464][T17023] tipc: Node identity 7f000001, cluster identity 4711 [ 892.738378][T17023] tipc: Enabling of bearer rejected, failed to enable media [ 892.893335][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 892.904970][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 892.915269][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 892.926398][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 892.934530][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 893.025958][T17036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.035561][T17036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.053926][T17036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.063280][T17036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.737456][ T5915] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 893.975928][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 893.997644][T17041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3084'. [ 894.033406][T17041] bridge0: entered promiscuous mode [ 894.040373][T17041] macvlan2: entered promiscuous mode [ 894.503152][ T3460] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.728349][T17062] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3090'. [ 894.873354][ T3460] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.962047][ T13] net_ratelimit: 18 callbacks suppressed [ 894.962069][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 895.001771][ T5843] Bluetooth: hci0: command tx timeout [ 895.026746][T17063] futex_wake_op: syz.4.3091 tries to shift op by -1; fix this program [ 895.410785][ T3460] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.803628][T17035] chnl_net:caif_netlink_parms(): no params data found [ 896.462260][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 896.515847][T17035] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.528819][T17035] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.548322][T17035] bridge_slave_0: entered allmulticast mode [ 896.569162][T17035] bridge_slave_0: entered promiscuous mode [ 896.646453][T17035] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.654850][T17035] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.672538][T17035] bridge_slave_1: entered allmulticast mode [ 896.696521][T17035] bridge_slave_1: entered promiscuous mode [ 896.731390][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 897.081296][ T5843] Bluetooth: hci0: command tx timeout [ 897.239162][ T3460] batadv1: left allmulticast mode [ 897.256557][ T3460] batadv1: left promiscuous mode [ 897.282338][ T3460] bridge0: port 3(batadv1) entered disabled state [ 897.403533][ T3460] bridge_slave_1: left allmulticast mode [ 897.446361][ T3460] bridge_slave_1: left promiscuous mode [ 897.510411][ T3460] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.809256][ T5915] usb 4-1: unable to get BOS descriptor or descriptor too short [ 897.829583][ T5915] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 897.873182][ T3460] bridge_slave_0: left allmulticast mode [ 897.878881][ T3460] bridge_slave_0: left promiscuous mode [ 897.911331][ T5915] usb 4-1: can't read configurations, error -71 [ 897.919744][T17087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.928487][ T3460] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.091885][T17087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.171149][ T5843] Bluetooth: hci0: command tx timeout [ 900.034754][ T3460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.060360][ T3460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 900.090327][ T3460] bond0 (unregistering): (slave team0): Releasing backup interface [ 900.118291][ T3460] bond0 (unregistering): Released all slaves [ 900.499055][ T3460] bond1 (unregistering): (slave vlan2): Releasing active interface [ 900.538462][ T3460] bond1 (unregistering): Released all slaves [ 901.212936][ T3460] bond2 (unregistering): Released all slaves [ 901.243766][ T5843] Bluetooth: hci0: command tx timeout [ 901.475000][T16652] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 901.942983][T16652] usb 4-1: config 0 has no interfaces? [ 902.023740][T16652] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 902.066756][T16652] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.075042][T17126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.083600][T16652] usb 4-1: Product: syz [ 902.087897][T16652] usb 4-1: Manufacturer: syz [ 902.094700][T16652] usb 4-1: SerialNumber: syz [ 902.117188][T16652] usb 4-1: config 0 descriptor?? [ 902.171339][T17126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.248721][ T3460] bond3 (unregistering): Released all slaves [ 902.333993][T17129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.371634][T17129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.393810][T17118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.426284][T17118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.658828][ T3460] bond4 (unregistering): Released all slaves [ 902.747145][T17035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.807580][T17035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 902.861250][ T3460] _ÐZ`Ô€@ÿÃ: left promiscuous mode [ 903.163869][T17035] team0: Port device team_slave_0 added [ 903.215133][T17035] team0: Port device team_slave_1 added [ 903.580208][T17142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3106'. [ 903.694586][T17035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 903.704067][T17035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 903.741790][T17035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 903.767184][T17142] bridge0: port 4(batadv2) entered blocking state [ 903.784113][T17142] bridge0: port 4(batadv2) entered disabled state [ 903.801039][T17142] batadv2: entered allmulticast mode [ 903.822290][T17142] batadv2: entered promiscuous mode [ 903.992416][T17035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 904.006595][T17035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 904.034634][T17035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 904.296994][ T1155] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 904.306782][ T1155] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 904.345654][ T3460] hsr_slave_0: left promiscuous mode [ 904.364379][ T3460] hsr_slave_1: left promiscuous mode [ 904.385617][ T3460] batman_adv: batadv0: Interface deactivated: dummy0 [ 904.408079][ T3460] batman_adv: batadv0: Removing interface: dummy0 [ 904.436784][ T3460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 904.453637][ T3460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 904.462672][ T3460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 904.470197][ T3460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 904.498085][ T3460] veth0_macvtap: left promiscuous mode [ 904.504733][ T3460] veth1_vlan: left promiscuous mode [ 904.511816][ T3460] veth0_vlan: left promiscuous mode [ 904.891656][ T5915] usb 4-1: USB disconnect, device number 113 [ 905.000216][T15960] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 905.022297][T15960] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 905.223708][T17169] fido_id[17169]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 906.744111][ T3460] team0 (unregistering): Port device team_slave_1 removed [ 906.908422][ T3460] team0 (unregistering): Port device team_slave_0 removed [ 907.713036][T17035] hsr_slave_0: entered promiscuous mode [ 907.719757][T17035] hsr_slave_1: entered promiscuous mode [ 907.726239][T17035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 907.734662][T17035] Cannot create hsr debugfs directory [ 907.931836][T17209] FAULT_INJECTION: forcing a failure. [ 907.931836][T17209] name failslab, interval 1, probability 0, space 0, times 0 [ 907.988311][T17209] CPU: 1 UID: 0 PID: 17209 Comm: syz.3.3111 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 907.988344][T17209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 907.988357][T17209] Call Trace: [ 907.988366][T17209] [ 907.988376][T17209] dump_stack_lvl+0x189/0x250 [ 907.988414][T17209] ? __pfx____ratelimit+0x10/0x10 [ 907.988445][T17209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 907.988478][T17209] ? __pfx__printk+0x10/0x10 [ 907.988507][T17209] ? __pfx___might_resched+0x10/0x10 [ 907.988545][T17209] should_fail_ex+0x414/0x560 [ 907.988576][T17209] should_failslab+0xa8/0x100 [ 907.988602][T17209] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 907.988625][T17209] ? __alloc_skb+0x112/0x2d0 [ 907.988652][T17209] __alloc_skb+0x112/0x2d0 [ 907.988680][T17209] tcp_stream_alloc_skb+0x3d/0x340 [ 907.988716][T17209] tcp_sendmsg_locked+0x1fa8/0x56f0 [ 907.988752][T17209] ? aa_label_sk_perm+0x413/0x560 [ 907.988831][T17209] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 907.988863][T17209] ? __local_bh_enable_ip+0x12d/0x1c0 [ 907.988900][T17209] ? __local_bh_enable_ip+0x12d/0x1c0 [ 907.988947][T17209] tcp_sendmsg+0x2f/0x50 [ 907.988968][T17209] __sock_sendmsg+0x19c/0x270 [ 907.989004][T17209] __sys_sendto+0x3bd/0x520 [ 907.989030][T17209] ? __pfx___sys_sendto+0x10/0x10 [ 907.989050][T17209] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 907.989098][T17209] ? __fget_files+0x3a0/0x420 [ 907.989135][T17209] ? ksys_write+0x22a/0x250 [ 907.989157][T17209] ? __pfx_ksys_write+0x10/0x10 [ 907.989174][T17209] ? rcu_is_watching+0x15/0xb0 [ 907.989220][T17209] __x64_sys_sendto+0xde/0x100 [ 907.989248][T17209] do_syscall_64+0xfa/0x3b0 [ 907.989280][T17209] ? lockdep_hardirqs_on+0x9c/0x150 [ 907.989310][T17209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.989337][T17209] ? clear_bhb_loop+0x60/0xb0 [ 907.989363][T17209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.989383][T17209] RIP: 0033:0x7f6b2478e929 [ 907.989403][T17209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 907.989423][T17209] RSP: 002b:00007f6b2566e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 907.989445][T17209] RAX: ffffffffffffffda RBX: 00007f6b249b5fa0 RCX: 00007f6b2478e929 [ 907.989461][T17209] RDX: 000000000000000d RSI: 0000200000000580 RDI: 0000000000000003 [ 907.989475][T17209] RBP: 00007f6b2566e090 R08: 0000000000000000 R09: 0000000000000000 [ 907.989488][T17209] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001 [ 907.989501][T17209] R13: 0000000000000000 R14: 00007f6b249b5fa0 R15: 00007f6b24adfa28 [ 907.989534][T17209] [ 908.250320][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 908.509559][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 908.560664][T17218] fuse: Bad value for 'fd' [ 908.574012][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3114'. [ 908.815334][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 908.954107][T17226] loop8: detected capacity change from 0 to 7 [ 908.962802][T17226] Dev loop8: unable to read RDB block 7 [ 908.968530][T17226] loop8: unable to read partition table [ 908.974398][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 908.975656][T17226] loop8: partition table beyond EOD, truncated [ 909.021196][ T5915] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 909.064674][T17226] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 909.064674][T17226] ) failed (rc=-5) [ 909.174105][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 909.300037][ T5915] usb 6-1: Using ep0 maxpacket: 16 [ 909.373911][T17222] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3113'. [ 909.467158][T17222] macvlan2: entered promiscuous mode [ 909.500733][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 909.518517][T17239] futex_wake_op: syz.4.3117 tries to shift op by -1; fix this program [ 909.671415][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 909.698048][ T3460] IPVS: stop unused estimator thread 0... [ 909.813396][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 909.951161][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 910.105974][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 910.970397][T17035] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 911.466438][T17035] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 911.665950][ T5915] usb 6-1: unable to get BOS descriptor or descriptor too short [ 911.694869][T17035] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 911.708350][ T5915] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 911.856492][ T5915] usb 6-1: can't read configurations, error -71 [ 911.884734][T17035] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 912.399662][T17035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.786036][T17035] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.876357][T10880] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.883646][T10880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.960150][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.967401][ T3544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 913.025036][T17284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3128'. [ 913.161337][T17284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3128'. [ 913.197043][T17292] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3130'. [ 913.221128][T17284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3128'. [ 913.407393][ T13] net_ratelimit: 7 callbacks suppressed [ 913.407424][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 913.581691][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 913.650163][T17035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.755146][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 913.886015][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 914.024220][T17035] veth0_vlan: entered promiscuous mode [ 914.061783][T17317] netlink: 'syz.4.3138': attribute type 4 has an invalid length. [ 914.115948][T17035] veth1_vlan: entered promiscuous mode [ 914.427448][T17035] veth0_macvtap: entered promiscuous mode [ 914.475609][T17035] veth1_macvtap: entered promiscuous mode [ 914.512347][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 914.682115][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 914.741766][T17330] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3142'. [ 914.773997][T17035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 914.796554][T17035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 915.089451][T17035] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.109852][T17035] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.130349][T17342] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 915.148716][T17035] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.168193][T17035] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.311704][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 915.371297][T16652] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 915.432162][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 915.452196][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.467126][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.535702][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.556573][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.581573][T16652] usb 5-1: Using ep0 maxpacket: 16 [ 915.592054][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 915.724044][ T748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 916.301387][ T30] kauditd_printk_skb: 280 callbacks suppressed [ 916.301409][ T30] audit: type=1804 audit(1751033389.702:2914): pid=17355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3150" name="/newroot/635/file1" dev="fuse" ino=1 res=1 errno=0 [ 917.626550][T17370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.669019][T17370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.729418][T17370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.770458][T17370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.928704][T17374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3156'. [ 918.154368][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 918.184516][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 918.193359][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 918.211319][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 918.228764][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 918.365958][T16652] usb 5-1: unable to get BOS descriptor or descriptor too short [ 918.397852][T16652] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 918.413484][T16652] usb 5-1: can't read configurations, error -71 [ 918.493015][ T5902] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 918.501549][ T13] net_ratelimit: 15 callbacks suppressed [ 918.501570][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 918.657266][ T5902] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 918.815390][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.893802][ T5902] usb 4-1: config 0 descriptor?? [ 918.933975][ T5902] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 918.996715][T17395] futex_wake_op: syz.4.3162 tries to shift op by -1; fix this program [ 919.163053][ T5915] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 919.324173][ T5915] usb 2-1: config 0 has no interfaces? [ 919.335340][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.348074][ T5915] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 919.363084][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.383307][ T5915] usb 2-1: Product: syz [ 919.388452][ T5915] usb 2-1: Manufacturer: syz [ 919.388455][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 919.419745][ T5915] usb 2-1: SerialNumber: syz [ 919.473135][ T5915] usb 2-1: config 0 descriptor?? [ 919.583541][ T3460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 919.805830][T17392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.816678][T17392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.914961][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.940689][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 920.021840][T17392] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.301992][ T5843] Bluetooth: hci3: command tx timeout [ 920.315268][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.335474][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 920.571984][ T3460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 920.972202][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 921.325297][ T5902] usb 4-1: USB disconnect, device number 114 [ 921.761493][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 921.800308][ T12] batadv4: left allmulticast mode [ 921.810034][ T12] batadv4: left promiscuous mode [ 921.829345][ T12] bridge0: port 6(batadv4) entered disabled state [ 921.856652][ T12] batadv3: left allmulticast mode [ 921.867588][ T12] batadv3: left promiscuous mode [ 921.889332][ T12] bridge0: port 5(batadv3) entered disabled state [ 921.945023][ T12] batadv2: left allmulticast mode [ 921.959608][ T12] batadv2: left promiscuous mode [ 921.999876][ T12] bridge0: port 4(batadv2) entered disabled state [ 922.054628][ T12] batadv1: left allmulticast mode [ 922.075560][ T12] batadv1: left promiscuous mode [ 922.104783][T16652] usb 2-1: USB disconnect, device number 106 [ 922.115409][ T12] bridge0: port 3(batadv1) entered disabled state [ 922.199964][ T12] bridge_slave_1: left allmulticast mode [ 922.227426][ T12] bridge_slave_1: left promiscuous mode [ 922.247964][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.284785][ T12] bridge_slave_0: left allmulticast mode [ 922.291310][ T12] bridge_slave_0: left promiscuous mode [ 922.297144][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.371531][ T5843] Bluetooth: hci3: command tx timeout [ 923.882862][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.895457][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 923.906057][ T12] bond0 (unregistering): Released all slaves [ 923.964311][T17382] chnl_net:caif_netlink_parms(): no params data found [ 924.112978][ T12] _ÐZ`Ô€@ÿÃ: left promiscuous mode [ 924.153103][T17439] xt_TCPMSS: Only works on TCP SYN packets [ 924.375482][T17447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.441445][ T5843] Bluetooth: hci3: command tx timeout [ 924.447666][T17447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.470925][ T12] tipc: Left network mode [ 924.642934][T17447] netlink: 'syz.2.3171': attribute type 4 has an invalid length. [ 925.139762][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 925.422936][T17382] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.440476][T17382] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.477164][T17382] bridge_slave_0: entered allmulticast mode [ 925.503254][T17382] bridge_slave_0: entered promiscuous mode [ 925.793004][ T748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 925.811402][T17382] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.818653][T17382] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.846609][T17382] bridge_slave_1: entered allmulticast mode [ 925.888298][T17382] bridge_slave_1: entered promiscuous mode [ 926.212318][ T12] hsr_slave_0: left promiscuous mode [ 926.278091][ T12] hsr_slave_1: left promiscuous mode [ 926.314893][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 926.348822][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.454147][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 926.494853][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.521622][ T5843] Bluetooth: hci3: command tx timeout [ 926.686216][ T12] veth1_macvtap: left promiscuous mode [ 926.711406][ T12] veth0_macvtap: left promiscuous mode [ 926.737445][ T12] veth1_vlan: left promiscuous mode [ 926.781894][ T12] veth0_vlan: left promiscuous mode [ 927.168736][T17492] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3178'. [ 927.631636][ T5835] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 927.824039][ T5835] usb 5-1: config 0 has no interfaces? [ 927.835762][ T5835] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 927.846243][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.869169][ T5835] usb 5-1: Product: syz [ 927.942225][ T5835] usb 5-1: Manufacturer: syz [ 927.973350][ T5835] usb 5-1: SerialNumber: syz [ 928.018444][ T5835] usb 5-1: config 0 descriptor?? [ 928.309187][T17493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.319871][T17493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.327478][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.333990][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.476524][T17382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.513515][T17382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.863396][T17382] team0: Port device team_slave_0 added [ 931.917074][T17382] team0: Port device team_slave_1 added [ 932.265712][ T5902] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 932.287445][T17382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.310265][T17382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 932.346660][T17382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.360191][T17382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.373068][T17382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 932.516182][T17382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 932.547466][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 932.561206][ T5902] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 932.593794][ T5902] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 932.736737][ T5902] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 932.799721][T17382] hsr_slave_0: entered promiscuous mode [ 932.808377][ T5835] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 932.820903][T17382] hsr_slave_1: entered promiscuous mode [ 932.830373][T17382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 932.840419][T17382] Cannot create hsr debugfs directory [ 932.857810][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.046226][ T5835] usb 4-1: Using ep0 maxpacket: 16 [ 933.119242][T17567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3185'. [ 933.312106][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 933.329691][ T5902] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 933.341630][ T5915] usb 5-1: USB disconnect, device number 12 [ 933.451206][T17567] macvlan3: entered promiscuous mode [ 933.549582][T17548] delete_channel: no stack [ 933.583114][ T12] IPVS: stop unused estimator thread 0... [ 933.585267][ T5902] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 933.629641][T17573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3187'. [ 933.730425][ T5902] usb 2-1: USB disconnect, device number 107 [ 933.776995][T17574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3187'. [ 933.946767][T17573] syz_tun: entered promiscuous mode [ 933.972593][T17573] macvtap1: entered promiscuous mode [ 933.987417][T17573] macvtap1: entered allmulticast mode [ 934.007908][T17573] syz_tun: entered allmulticast mode [ 934.047039][ T3460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 934.093217][T17574] syz_tun: left allmulticast mode [ 934.161725][T17574] syz_tun: left promiscuous mode [ 934.251286][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 934.381732][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 934.687944][T17578] netlink: 'syz.2.3188': attribute type 1 has an invalid length. [ 934.714281][ T3460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 934.730289][T17578] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3188'. [ 934.788586][T17584] No such timeout policy "syz0" [ 935.132030][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 935.254349][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 935.431758][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 935.826834][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 936.331692][T16652] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 936.493649][T16652] usb 2-1: Using ep0 maxpacket: 16 [ 936.500888][T16652] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 936.572082][T16652] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 936.646629][T16652] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 936.731778][T16652] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.801258][T16652] usb 2-1: Product: syz [ 936.841823][T16652] usb 2-1: Manufacturer: syz [ 936.846553][T16652] usb 2-1: SerialNumber: syz [ 936.867819][ T5835] usb 4-1: unable to get BOS descriptor or descriptor too short [ 936.918819][ T5835] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 936.961450][ T5835] usb 4-1: can't read configurations, error -71 [ 937.269101][T17382] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 937.397390][T17382] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 937.464221][T17382] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 937.542270][T17382] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 937.681240][ T3544] net_ratelimit: 6 callbacks suppressed [ 937.681273][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 937.848851][T17382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.048803][T17382] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.131659][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 938.166133][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.173446][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.345922][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.353218][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 938.522374][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 938.661167][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 938.961232][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 939.110427][T17382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.163491][ T5915] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 939.188922][T16652] usb 2-1: 0:2 : does not exist [ 939.201733][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 939.306959][T16652] usb 2-1: USB disconnect, device number 108 [ 939.410803][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 939.467068][ T5915] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 939.477898][ T3460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 939.497113][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 939.543842][T17382] veth0_vlan: entered promiscuous mode [ 939.549993][ T5915] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 939.573124][T17657] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3202'. [ 939.583514][ T5915] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 939.612837][T17382] veth1_vlan: entered promiscuous mode [ 939.628216][ T5915] usb 4-1: Product: syz [ 939.643440][ T5915] usb 4-1: Manufacturer: syz [ 939.665159][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 939.703383][ T5915] usb 4-1: SerialNumber: syz [ 939.831307][T16652] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 939.976085][ T5915] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 939.984425][T17382] veth0_macvtap: entered promiscuous mode [ 939.999112][T17382] veth1_macvtap: entered promiscuous mode [ 940.011241][T16652] usb 2-1: Using ep0 maxpacket: 16 [ 940.049543][ T5915] usb 4-1: Handspring Visor / Palm OS: port 109, is for unknown use [ 940.065165][T17655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3201'. [ 940.086889][ T5915] usb 4-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 940.112622][ T5915] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 940.222305][ T5915] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 940.230760][ T5915] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 940.261451][T17655] bridge0: entered promiscuous mode [ 940.267007][T17655] macvlan2: entered promiscuous mode [ 940.321816][ T5915] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 940.362380][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 940.395784][T17667] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 940.451309][T17382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 940.550199][ T5915] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB2 [ 940.571322][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 940.623647][T17382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 940.647515][T17382] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.668758][T17382] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.682875][ T5915] usb 4-1: USB disconnect, device number 117 [ 940.717409][T17382] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.728021][ T5915] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 940.749756][T17382] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.801380][ T5915] visor ttyUSB2: Handspring Visor / Palm OS converter now disconnected from ttyUSB2 [ 940.872597][ T5915] visor 4-1:1.0: device disconnected [ 941.333756][ T748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 941.483186][ T748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.954886][T10880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.034638][T10880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.731271][ T3544] net_ratelimit: 10 callbacks suppressed [ 942.731295][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 942.923577][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 943.152803][ T748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 943.261547][ T748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 943.392898][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 943.617166][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 943.803722][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 943.956677][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 944.132387][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 944.282562][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 944.454237][T16652] usb 2-1: unable to get BOS descriptor or descriptor too short [ 944.494282][ T5916] usb 3-1: USB disconnect, device number 126 [ 944.500428][T16652] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 944.511317][ T5916] option 3-1:0.84: device disconnected [ 944.551322][T16652] usb 2-1: can't read configurations, error -71 [ 945.781171][T16935] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 945.923430][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 945.935624][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 945.944937][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 945.963619][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 945.977240][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 945.991732][T16935] usb 4-1: Using ep0 maxpacket: 8 [ 946.051086][ T5902] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 946.075800][T16935] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 946.258897][T16935] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 946.279047][T16935] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 946.294720][T16935] usb 4-1: Product: syz [ 946.309288][T16935] usb 4-1: Manufacturer: syz [ 946.314848][T16935] usb 4-1: SerialNumber: syz [ 946.420680][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.435477][ T5902] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 946.465228][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.476961][T15960] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 946.526781][ T5902] usb 2-1: config 0 descriptor?? [ 946.549366][T16935] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 946.571498][ T5916] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 946.581200][T16935] usb 4-1: Handspring Visor / Palm OS: port 109, is for unknown use [ 946.610490][T16935] usb 4-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 946.645283][T16935] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 946.665259][T15960] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.682398][T15960] usb 5-1: config 0 has no interfaces? [ 946.696532][T15960] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 946.721087][T15960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.765223][T16935] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 946.776259][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.784164][ T5902] usbhid 2-1:0.0: can't add hid device: -71 [ 946.796134][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.831757][ T5916] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 946.848765][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.849471][ T5902] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 946.868011][T15960] usb 5-1: config 0 descriptor?? [ 946.925136][T16935] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 946.942263][ T5916] usb 6-1: config 0 descriptor?? [ 947.062493][T16935] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 947.090680][ T5902] usb 2-1: USB disconnect, device number 111 [ 947.122503][T16935] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 947.179095][T17736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3215'. [ 947.214645][T16935] usb 4-1: USB disconnect, device number 118 [ 947.261546][T16935] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 947.302763][T16935] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 947.324173][T16935] visor 4-1:1.0: device disconnected [ 947.417157][ T5916] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 947.441150][ T5902] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 947.608578][ T5916] cp2112 0003:10C4:EA90.0015: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 947.715269][ T5916] cp2112 0003:10C4:EA90.0015: Part Number: 0x82 Device Version: 0xFE [ 947.718497][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 947.742193][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 947.777209][ T5902] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 947.833991][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.849229][ T5902] usb 2-1: config 0 descriptor?? [ 948.060671][ T5829] Bluetooth: hci4: command tx timeout [ 948.075601][ T5916] cp2112 0003:10C4:EA90.0015: error requesting SMBus config [ 948.126379][ T5916] cp2112 0003:10C4:EA90.0015: probe with driver cp2112 failed with error -32 [ 948.332617][ T3460] net_ratelimit: 16 callbacks suppressed [ 948.332640][ T3460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 948.417930][ T5902] mcp2221 0003:04D8:00DD.0016: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 948.539916][ T5916] usb 6-1: USB disconnect, device number 98 [ 948.611556][ T748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 948.746902][ T5902] usb 2-1: USB disconnect, device number 112 [ 948.768022][ T748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 948.920207][T17737] chnl_net:caif_netlink_parms(): no params data found [ 949.504288][T17780] team0: Port device team_slave_0 removed [ 949.586252][T17780] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 949.622002][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 949.629728][T17737] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.649476][ T5916] usb 5-1: USB disconnect, device number 13 [ 949.677070][T17737] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.709559][T17737] bridge_slave_0: entered allmulticast mode [ 949.749439][T17737] bridge_slave_0: entered promiscuous mode [ 949.797557][T17737] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.831643][T17737] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.859530][T17737] bridge_slave_1: entered allmulticast mode [ 949.943015][T17737] bridge_slave_1: entered promiscuous mode [ 950.121530][ T5829] Bluetooth: hci4: command tx timeout [ 950.129862][T17803] netlink: 'syz.4.3230': attribute type 33 has an invalid length. [ 950.163870][T17737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 950.215024][T17809] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3231'. [ 950.224555][T17737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.475402][T17737] team0: Port device team_slave_0 added [ 950.513366][T17818] netlink: 'syz.3.3236': attribute type 29 has an invalid length. [ 950.550798][T17737] team0: Port device team_slave_1 added [ 950.645011][T17818] netlink: 'syz.3.3236': attribute type 29 has an invalid length. [ 950.716568][T17737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 950.745807][T17737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.839855][T17737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 951.023633][T17737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 951.051244][T17737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 951.131843][T17737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 951.191896][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 951.348108][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 951.447991][T17856] netlink: 'syz.4.3249': attribute type 29 has an invalid length. [ 951.470738][T17859] netlink: 'syz.4.3249': attribute type 29 has an invalid length. [ 951.523938][T17737] hsr_slave_0: entered promiscuous mode [ 951.530902][T17737] hsr_slave_1: entered promiscuous mode [ 951.563268][T17737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 951.588989][T17737] Cannot create hsr debugfs directory [ 951.650142][T17863] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3250'. [ 951.732555][T17866] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3250'. [ 951.822398][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 951.831099][T17870] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3252'. [ 952.211725][ T5829] Bluetooth: hci4: command tx timeout [ 952.442517][T17887] futex_wake_op: syz.3.3256 tries to shift op by -1; fix this program [ 952.552048][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 952.591559][ T5835] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 952.792512][ T5835] usb 6-1: Using ep0 maxpacket: 16 [ 952.817249][T17889] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3257'. [ 952.841645][T17737] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.859907][T17737] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 952.942915][T17898] netlink: 'syz.1.3261': attribute type 29 has an invalid length. [ 952.957866][T17899] netlink: 'syz.1.3261': attribute type 29 has an invalid length. [ 953.066819][T17889] bridge0: entered promiscuous mode [ 953.073272][T17889] macvlan2: entered promiscuous mode [ 953.103206][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 953.501736][T17737] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.577645][T17737] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 953.673585][ T36] net_ratelimit: 1 callbacks suppressed [ 953.673612][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 953.829595][T17737] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.913782][T17737] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 954.027520][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 954.285989][ T5829] Bluetooth: hci4: command tx timeout [ 954.652388][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 954.811238][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 955.011500][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 955.691255][ T3460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 955.715595][T17737] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 955.789691][T17737] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 955.841436][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 955.866552][T17737] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 955.932982][T17737] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 956.197719][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 956.341390][ T3460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 956.584362][T17737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 956.626189][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 956.749091][T17737] 8021q: adding VLAN 0 to HW filter on device team0 [ 956.812083][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.819321][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 956.902379][ T5835] usb 6-1: unable to get BOS descriptor or descriptor too short [ 956.932416][ T5835] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 956.940531][ T5835] usb 6-1: can't read configurations, error -71 [ 956.956610][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.963857][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 957.243251][T17957] tipc: Started in network mode [ 957.248222][T17957] tipc: Node identity ca34b0dc84b7, cluster identity 4711 [ 957.272135][T17957] tipc: Enabled bearer , priority 0 [ 957.294410][T17957] syzkaller0: entered promiscuous mode [ 957.299990][T17957] syzkaller0: entered allmulticast mode [ 957.434954][T17957] tipc: Resetting bearer [ 957.504002][T17956] tipc: Resetting bearer [ 957.609499][T17956] tipc: Disabling bearer [ 957.634949][T17975] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3283'. [ 957.654343][T17737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 957.685835][T17975] 8021q: VLANs not supported on gre0 [ 957.942460][T17737] veth0_vlan: entered promiscuous mode [ 957.975903][T17737] veth1_vlan: entered promiscuous mode [ 958.139712][T17737] veth0_macvtap: entered promiscuous mode [ 958.195488][T17737] veth1_macvtap: entered promiscuous mode [ 958.270613][T17989] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3287'. [ 958.290591][T17737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 958.368420][T17737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 958.397531][T17737] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.410469][T17737] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.436488][T17737] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.458430][T17737] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.791261][T10880] net_ratelimit: 8 callbacks suppressed [ 958.791284][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 958.805457][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.827649][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.964704][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 958.977015][T10880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.007641][T10880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.101397][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 959.211417][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 959.322985][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 959.534929][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 959.704906][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 959.853450][ T3460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 959.898152][T18052] pim6reg1: entered allmulticast mode [ 960.001525][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 960.158078][ T3460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 961.196771][T18088] pim6reg1: entered allmulticast mode [ 961.452051][T18095] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 961.738744][T18107] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3329'. [ 962.326235][T18130] pim6reg1: entered allmulticast mode [ 963.051115][T16652] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 963.241416][T16652] usb 4-1: Using ep0 maxpacket: 16 [ 963.477792][T18169] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3351'. [ 963.934351][ T748] net_ratelimit: 27 callbacks suppressed [ 963.934376][ T748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 964.028602][T18176] pim6reg1: entered allmulticast mode [ 964.194222][ T748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 964.342869][ T748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 964.481242][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 964.631487][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 964.785276][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 965.001793][ T748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 965.184049][ T3460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 965.361118][ T748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 965.375757][T18215] pim6reg1: entered allmulticast mode [ 965.541061][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 965.549704][T18219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3371'. [ 966.017111][T16652] usb 4-1: unable to get BOS descriptor or descriptor too short [ 966.076819][T16652] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 966.125859][T16652] usb 4-1: can't read configurations, error -71 [ 966.171370][T18235] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 966.789151][T18262] tipc: Started in network mode [ 966.798661][T18262] tipc: Node identity 7f000001, cluster identity 4711 [ 966.810694][T18262] tipc: Enabled bearer , priority 10 [ 967.908652][T18307] syzkaller1: entered promiscuous mode [ 967.921622][T16652] tipc: Node number set to 2130706433 [ 967.951725][T18307] syzkaller1: entered allmulticast mode [ 968.283128][T18327] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3410'. [ 968.550710][T18340] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 969.133302][T10880] net_ratelimit: 23 callbacks suppressed [ 969.133328][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 969.246710][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 969.274017][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 969.413980][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 969.565169][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 969.714727][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 969.841968][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 969.982047][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 970.091395][T18404] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3444'. [ 970.101736][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 970.167633][T18404] vlan2: entered promiscuous mode [ 970.175683][T18404] gretap0: entered promiscuous mode [ 970.212177][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 970.373653][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 970.659993][T18429] tipc: Started in network mode [ 970.674989][T18429] tipc: Node identity 8e33b7d6e3c9, cluster identity 4711 [ 970.708300][T18429] tipc: Enabled bearer , priority 0 [ 970.741729][T18434] syzkaller0: entered promiscuous mode [ 970.754047][T18434] syzkaller0: entered allmulticast mode [ 970.764771][T18432] netlink: 'syz.2.3455': attribute type 13 has an invalid length. [ 970.777668][T18432] netlink: 'syz.2.3455': attribute type 17 has an invalid length. [ 970.797836][T18429] tipc: Resetting bearer [ 970.806115][T18428] tipc: Resetting bearer [ 970.910535][T18428] tipc: Disabling bearer [ 971.258823][T18444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 971.429027][T18444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 971.562181][T18444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 972.545540][T18479] tipc: Enabling of bearer rejected, failed to enable media [ 973.208218][T18506] tipc: Enabled bearer , priority 0 [ 973.228999][T18506] syzkaller0: entered promiscuous mode [ 973.247475][T18506] syzkaller0: entered allmulticast mode [ 973.284626][T18506] tipc: Resetting bearer [ 973.318346][T18505] tipc: Resetting bearer [ 973.411972][T18505] tipc: Disabling bearer [ 973.585568][T18527] tipc: Enabled bearer , priority 10 [ 974.179575][ T3544] net_ratelimit: 18 callbacks suppressed [ 974.179601][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 974.365870][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 974.520751][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 974.661161][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 974.701320][ T5920] tipc: Node number set to 1317253340 [ 974.795434][ T748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 974.953649][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 975.081579][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 975.220467][T18575] tipc: Started in network mode [ 975.247570][T18575] tipc: Node identity fe720ca01105, cluster identity 4711 [ 975.263933][T18575] tipc: Enabled bearer , priority 0 [ 975.303313][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 975.315875][T18579] syzkaller0: entered promiscuous mode [ 975.339348][T18579] syzkaller0: entered allmulticast mode [ 975.370173][T18575] tipc: Resetting bearer [ 975.388347][T18574] tipc: Resetting bearer [ 975.441518][T18574] tipc: Disabling bearer [ 975.501139][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 975.736177][T18597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 975.783369][T18597] netlink: 'syz.4.3522': attribute type 4 has an invalid length. [ 976.249805][T18615] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 976.608611][T18621] tipc: Enabled bearer , priority 10 [ 977.281759][T18648] netlink: 83 bytes leftover after parsing attributes in process `syz.4.3547'. [ 977.639365][T18660] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 977.730348][ T5902] tipc: Node number set to 1845147606 [ 977.899766][T18669] vlan2: entered promiscuous mode [ 977.907590][T18669] bond0: entered promiscuous mode [ 977.913502][T18669] bond_slave_0: entered promiscuous mode [ 977.919732][T18669] bond_slave_1: entered promiscuous mode [ 978.715603][T18697] pimreg: entered allmulticast mode [ 978.960907][T18705] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3573'. [ 979.069958][T18709] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3574'. [ 979.219579][ T3460] net_ratelimit: 27 callbacks suppressed [ 979.219606][ T3460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 979.371402][ T748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 979.493940][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 979.611766][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 979.694746][T18733] bridge_slave_0: left allmulticast mode [ 979.700503][T18733] bridge_slave_0: left promiscuous mode [ 979.709297][T18733] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.752848][T18733] bridge_slave_1: left allmulticast mode [ 979.758720][T18733] bridge_slave_1: left promiscuous mode [ 979.772951][T18733] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.798565][T18733] bond0: (slave bond_slave_0): Releasing backup interface [ 979.809856][T18742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3588'. [ 979.822727][T18733] bond_slave_0: left promiscuous mode [ 979.838407][T18733] bond0: (slave bond_slave_1): Releasing backup interface [ 979.907731][T18733] bond_slave_1: left promiscuous mode [ 979.984000][T18733] team0: Port device team_slave_0 removed [ 980.015400][T18733] team0: Port device team_slave_1 removed [ 980.023725][T18733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 980.034379][T18733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 980.046671][T18733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 980.056199][T18733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 980.081922][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 980.104370][T18739] tipc: Enabling of bearer rejected, already enabled [ 980.138538][T18748] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3590'. [ 980.192046][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 980.301752][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 980.412146][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 980.592811][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 980.704066][ T748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 980.894834][T18774] bridge_slave_0: left allmulticast mode [ 980.900709][T18774] bridge_slave_0: left promiscuous mode [ 980.952611][T18774] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.000845][T18774] bridge_slave_1: left allmulticast mode [ 981.015592][T18780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3606'. [ 981.031265][T18774] bridge_slave_1: left promiscuous mode [ 981.046380][T18774] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.198048][T18774] bond0: (slave bond_slave_0): Releasing backup interface [ 981.268588][T18774] bond0: (slave bond_slave_1): Releasing backup interface [ 981.400774][T18774] team0: Port device team_slave_0 removed [ 981.440387][T18774] team0: Port device team_slave_1 removed [ 981.448469][T18774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.456407][T18774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.475043][T18774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.496688][T18774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.569013][T18777] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3604'. [ 982.728936][T18846] tipc: Enabling of bearer rejected, already enabled [ 983.197550][T18868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3638'. [ 983.218855][T18868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3638'. [ 983.253355][T18869] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 983.309177][T18868] netlink: 'syz.2.3638': attribute type 10 has an invalid length. [ 983.361603][T18868] bridge0: port 1(team0) entered blocking state [ 983.368051][T18868] bridge0: port 1(team0) entered disabled state [ 983.402504][T18868] team0: entered allmulticast mode [ 983.560284][T18881] bridge_slave_0: left allmulticast mode [ 983.602271][T18881] bridge_slave_0: left promiscuous mode [ 983.608212][T18881] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.752967][T18881] bridge_slave_1: left allmulticast mode [ 983.800500][T18881] bridge_slave_1: left promiscuous mode [ 983.841654][T18881] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.921966][T18881] bond0: (slave bond_slave_0): Releasing backup interface [ 984.002767][T18881] bond0: (slave bond_slave_1): Releasing backup interface [ 984.099641][T18881] team0: Port device team_slave_0 removed [ 984.120427][T18881] team0: Port device team_slave_1 removed [ 984.132098][T18881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 984.152026][T18881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 984.161965][T18881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 984.170646][T18881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 984.250751][ T12] net_ratelimit: 18 callbacks suppressed [ 984.250777][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 984.424258][ T3460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 984.451449][T18912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3658'. [ 984.581415][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 984.698837][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 984.832020][ T3460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 984.864397][T18927] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3665'. [ 984.875960][T18929] netlink: 'syz.2.3666': attribute type 10 has an invalid length. [ 984.901449][T18927] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3665'. [ 984.975012][ T3460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 985.091213][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 985.211596][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 985.332613][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 985.451210][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 985.831759][T18951] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3676'. [ 986.283671][T18966] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3682'. [ 986.335461][T18966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3682'. [ 986.434083][T18972] netlink: 'syz.3.3684': attribute type 10 has an invalid length. [ 986.480731][T18972] bridge0: port 3(team0) entered blocking state [ 986.511203][T18972] bridge0: port 3(team0) entered disabled state [ 986.531979][T18972] team0: entered allmulticast mode [ 986.537291][T18972] team_slave_0: entered allmulticast mode [ 986.551151][T18972] team_slave_1: entered allmulticast mode [ 986.609118][T18972] team0: entered promiscuous mode [ 986.628445][T18972] team_slave_0: entered promiscuous mode [ 986.646283][T18972] team_slave_1: entered promiscuous mode [ 986.662146][T18972] bridge0: port 3(team0) entered blocking state [ 986.668632][T18972] bridge0: port 3(team0) entered forwarding state [ 986.720791][T18984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3691'. [ 988.025313][T19019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3707'. [ 988.804582][T19045] syzkaller0: entered promiscuous mode [ 988.810162][T19045] syzkaller0: entered allmulticast mode [ 989.090312][T19053] __nla_validate_parse: 2 callbacks suppressed [ 989.090337][T19053] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3723'. [ 989.122398][T19053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3723'. [ 989.263286][T10880] net_ratelimit: 29 callbacks suppressed [ 989.263311][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 989.413160][ T748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 989.451421][T19061] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3727'. [ 989.471132][T19061] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3727'. [ 989.511480][T19061] netlink: 'syz.5.3727': attribute type 10 has an invalid length. [ 989.519590][T19061] bridge0: port 3(team0) entered blocking state [ 989.539410][T19061] bridge0: port 3(team0) entered disabled state [ 989.562633][T19061] team0: entered allmulticast mode [ 989.582845][T19061] team_slave_1: entered allmulticast mode [ 989.612033][T19061] team0: entered promiscuous mode [ 989.617176][T19061] team_slave_1: entered promiscuous mode [ 989.631896][T19061] bridge0: port 3(team0) entered blocking state [ 989.638385][T19061] bridge0: port 3(team0) entered forwarding state [ 989.661539][ T748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 989.773791][ T748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 989.922844][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 990.122703][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 990.302189][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 990.356391][T19086] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3736'. [ 990.376396][T19086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3736'. [ 990.454004][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 990.521671][T11833] IPVS: starting estimator thread 0... [ 990.591425][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 990.643313][T19091] IPVS: using max 28 ests per chain, 67200 per kthread [ 990.708610][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 990.939369][T19105] tipc: Failed to remove unknown binding: 66,1,1/2130706433:900775608/900775610 [ 991.146676][T19109] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3748'. [ 991.209393][T19109] vlan2: entered promiscuous mode [ 991.236098][T19109] gretap0: entered promiscuous mode [ 991.534097][T19123] team0: left allmulticast mode [ 991.567350][T19123] team_slave_1: left allmulticast mode [ 991.608309][T19123] team0: left promiscuous mode [ 991.641346][T19123] team_slave_1: left promiscuous mode [ 991.647344][T19123] bridge0: port 3(team0) entered disabled state [ 991.799865][T19123] bridge_slave_0: left allmulticast mode [ 991.811216][T19123] bridge_slave_0: left promiscuous mode [ 991.823214][T19123] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.869578][T19123] bridge_slave_1: left allmulticast mode [ 991.880903][T19131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3757'. [ 991.883396][T19123] bridge_slave_1: left promiscuous mode [ 991.913635][T19131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3757'. [ 991.927261][T19123] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.969299][T19135] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 992.009626][T19123] bond0: (slave bond_slave_0): Releasing backup interface [ 992.047606][T19123] bond0: (slave bond_slave_1): Releasing backup interface [ 992.114969][T19123] team0: Port device team_slave_1 removed [ 992.136094][T19123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 992.156645][T19123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 992.173818][T19123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 992.182021][T19123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.542771][T19155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3766'. [ 992.563262][T19155] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 992.571604][T19155] IPv6: NLM_F_CREATE should be set when creating new route [ 992.771554][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.782376][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.406882][ T12] net_ratelimit: 20 callbacks suppressed [ 994.406905][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 994.467140][T19248] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 994.532020][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 994.641445][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 994.773086][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 994.819820][T19263] netlink: 'syz.2.3817': attribute type 10 has an invalid length. [ 994.844991][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 994.903794][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 995.044965][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 995.171728][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 995.301083][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 995.411186][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 995.499525][T19292] netlink: 'syz.3.3831': attribute type 10 has an invalid length. [ 996.969842][T19363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3865'. [ 996.981331][T19365] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3866'. [ 997.234812][T19378] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3871'. [ 997.280880][T19378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3871'. [ 997.300817][T19379] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 997.718183][T19395] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3879'. [ 997.999300][T19409] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3886'. [ 998.318177][T19428] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3894'. [ 998.342629][T19424] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode [ 999.319517][T19471] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 999.484875][ T3544] net_ratelimit: 36 callbacks suppressed [ 999.484908][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 999.559475][T19482] team0: left allmulticast mode [ 999.565184][T19482] bridge0: port 1(team0) entered disabled state [ 999.666608][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 999.792219][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 999.931107][T10880] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1000.045610][T19502] netlink: 'syz.1.3928': attribute type 1 has an invalid length. [ 1000.082307][T19505] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 1000.109597][T19502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1000.125774][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1000.263332][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1000.304030][T19502] bond1: (slave gretap1): making interface the new active one [ 1000.314883][T19502] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1000.355825][T19502] syz.1.3928 (19502) used greatest stack depth: 20040 bytes left [ 1000.381739][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1000.511833][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1000.523409][T19520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3934'. [ 1000.641107][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1000.771133][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1001.213126][T19549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3948'. [ 1001.453927][T19561] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3955'. [ 1002.217129][T19592] __nla_validate_parse: 2 callbacks suppressed [ 1002.217151][T19592] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3970'. [ 1003.149184][T19636] syzkaller0: create flow: hash 2866279261 index 1 [ 1003.538218][T19641] syzkaller0: delete flow: hash 2866279261 index 1 [ 1003.955949][T19665] netlink: 'syz.2.4004': attribute type 10 has an invalid length. [ 1006.842835][T19665] bridge0: port 1(team0) entered blocking state [ 1006.849333][T19665] bridge0: port 1(team0) entered disabled state [ 1006.869818][T19665] team0: entered allmulticast mode [ 1006.923940][ T3460] net_ratelimit: 21 callbacks suppressed [ 1006.923967][ T3460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1007.092763][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1007.221698][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1007.254649][T19682] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4012'. [ 1007.295249][T19687] netlink: 136 bytes leftover after parsing attributes in process `syz.5.4015'. [ 1007.306879][T19682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4012'. [ 1007.313466][T19689] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 1007.341842][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1007.453797][T19693] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4017'. [ 1007.456860][ T3460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1007.560333][T15960] IPVS: starting estimator thread 0... [ 1007.561081][T19696] netlink: 'syz.5.4018': attribute type 10 has an invalid length. [ 1007.598456][T19696] bridge0: port 1(team0) entered blocking state [ 1007.608467][T19701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4020'. [ 1007.635338][T19696] bridge0: port 1(team0) entered disabled state [ 1007.655124][T19696] team0: entered allmulticast mode [ 1007.661905][T19699] IPVS: using max 25 ests per chain, 60000 per kthread [ 1007.684927][T19696] team0: entered promiscuous mode [ 1007.725373][T19701] vlan2: entered promiscuous mode [ 1007.877478][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1008.001520][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1008.131258][ T3460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1008.189939][T19728] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4029'. [ 1008.253233][ T3460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1008.361362][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1008.371304][T19735] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4030'. [ 1008.383661][T19736] netlink: 'syz.2.4033': attribute type 10 has an invalid length. [ 1008.401072][T19735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4030'. [ 1008.417128][T19737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4031'. [ 1008.443390][T19735] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 1008.643584][T19746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4037'. [ 1008.688069][T19746] vlan2: entered promiscuous mode [ 1008.706445][T19746] team0: entered promiscuous mode [ 1008.962479][T19759] netlink: 'syz.4.4046': attribute type 10 has an invalid length. [ 1008.982580][T19759] bridge0: port 1(team0) entered blocking state [ 1008.989136][T19759] bridge0: port 1(team0) entered disabled state [ 1009.017290][T19759] team0: entered allmulticast mode [ 1009.206218][T19769] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 1009.969147][T19805] bridge_slave_0: entered promiscuous mode [ 1010.350703][T19780] netlink: 'syz.2.4054': attribute type 4 has an invalid length. [ 1010.945430][T19824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1010.973239][T19824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1010.989262][T19824] bond0 (unregistering): Released all slaves [ 1011.127792][T19836] veth1_to_bond: entered allmulticast mode [ 1011.302245][T19838] veth1_to_bond (unregistering): left allmulticast mode [ 1011.649812][T19864] netlink: 'syz.1.4089': attribute type 29 has an invalid length. [ 1011.663810][T19864] netlink: 'syz.1.4089': attribute type 29 has an invalid length. [ 1011.956868][ T36] net_ratelimit: 16 callbacks suppressed [ 1011.956900][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1012.278639][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1012.421079][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1012.561590][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1012.672160][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1012.785746][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1012.903727][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1012.978673][T19899] netlink: 'syz.5.4103': attribute type 29 has an invalid length. [ 1013.037325][T19907] netlink: 'syz.5.4103': attribute type 29 has an invalid length. [ 1013.071453][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1013.221177][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1013.238577][T19913] __nla_validate_parse: 9 callbacks suppressed [ 1013.238601][T19913] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4110'. [ 1013.349961][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1013.772013][T19934] netlink: 'syz.3.4119': attribute type 29 has an invalid length. [ 1013.788697][T19937] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4121'. [ 1013.831503][T19934] netlink: 'syz.3.4119': attribute type 29 has an invalid length. [ 1013.893656][T19939] syz.5.4118 (19939) used obsolete PPPIOCDETACH ioctl [ 1014.591612][T19963] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4132'. [ 1014.653566][T19965] netlink: 'syz.1.4133': attribute type 29 has an invalid length. [ 1014.693194][T19965] netlink: 'syz.1.4133': attribute type 29 has an invalid length. [ 1014.732854][T19965] netlink: 'syz.1.4133': attribute type 29 has an invalid length. [ 1015.324474][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 1015.347577][T19992] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4146'. [ 1016.151688][T20019] netlink: 'syz.1.4158': attribute type 2 has an invalid length. [ 1016.811471][T20046] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4171'. [ 1016.972291][ T3544] net_ratelimit: 34 callbacks suppressed [ 1016.972316][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1017.062016][T20054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4175'. [ 1017.124967][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1017.147270][T20057] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4177'. [ 1017.253256][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1017.363371][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1017.490355][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1017.645724][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1017.740252][T20081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4189'. [ 1017.782032][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1017.891944][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1018.001304][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1018.015986][T20088] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4192'. [ 1018.112136][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1018.502408][T20109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4203'. [ 1018.708262][T20116] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4206'. [ 1019.165321][T20140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4217'. [ 1019.227673][T20140] vlan2: entered promiscuous mode [ 1019.561293][T20152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4223'. [ 1019.639405][T20129] netlink: 'syz.2.4213': attribute type 4 has an invalid length. [ 1021.015763][T20218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4254'. [ 1021.578132][T20249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4270'. [ 1021.601930][T20249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4270'. [ 1021.630561][T20249] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 1021.778490][T20260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4272'. [ 1021.913274][T20264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4269'. [ 1022.336911][ T36] net_ratelimit: 28 callbacks suppressed [ 1022.336936][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1022.613778][ T3460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1022.751192][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1022.891624][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1022.937691][T20280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4280'. [ 1023.012427][ T3460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1023.131377][ T3460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1023.200090][T20284] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 1023.252015][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1023.385132][ T3460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1023.512844][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1023.634832][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1023.684377][T20306] __nla_validate_parse: 3 callbacks suppressed [ 1023.684401][T20306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4295'. [ 1023.793169][T20309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4296'. [ 1023.861149][T20309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4296'. [ 1023.865774][T20313] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 1023.936124][T20321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4300'. [ 1024.325135][T20339] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4309'. [ 1024.548709][T20349] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4314'. [ 1024.591905][T20349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4314'. [ 1024.628204][T20349] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 1025.072906][T20376] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4326'. [ 1025.272117][T20386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4332'. [ 1025.281707][T20386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4332'. [ 1025.294121][T20386] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 1025.971148][T16935] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1026.173544][T20416] futex_wake_op: syz.1.4341 tries to shift op by -1; fix this program [ 1026.313806][T16652] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1026.341406][T16935] usb 4-1: Using ep0 maxpacket: 16 [ 1026.491840][T16652] usb 6-1: Using ep0 maxpacket: 32 [ 1026.502147][T16652] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1026.521723][ T5835] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1026.638511][T20403] macvlan4: entered promiscuous mode [ 1026.644601][T16652] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1026.856794][T16652] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1026.902166][T16652] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1026.915557][ T5835] usb 3-1: config 0 has no interfaces? [ 1027.034100][ T5835] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1027.057795][T16652] usb 6-1: Product: syz [ 1027.066662][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.078370][T16652] usb 6-1: Manufacturer: syz [ 1027.090554][T16652] usb 6-1: SerialNumber: syz [ 1027.131383][ T5835] usb 3-1: Product: syz [ 1027.138038][ T5835] usb 3-1: Manufacturer: syz [ 1027.155523][ T5835] usb 3-1: SerialNumber: syz [ 1027.191984][T16652] appletouch 6-1:1.0: Could not find int-in endpoint [ 1027.200853][ T5835] usb 3-1: config 0 descriptor?? [ 1027.223441][T16652] appletouch 6-1:1.0: probe with driver appletouch failed with error -5 [ 1027.281635][T16652] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 1027.368483][ T12] net_ratelimit: 26 callbacks suppressed [ 1027.368507][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1027.451290][T20418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.462790][T20418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.551888][T20432] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 1027.576075][T20418] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.651464][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1027.771522][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1027.942238][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1028.061460][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1028.190298][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1028.302073][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1028.462940][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1028.581212][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1028.702364][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1028.732947][ T5835] usb 6-1: USB disconnect, device number 101 [ 1029.274166][T16935] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1029.291150][T16935] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1029.298827][T16935] usb 4-1: can't read configurations, error -71 [ 1029.811359][T11833] usb 6-1: new full-speed USB device number 102 using dummy_hcd [ 1029.923391][T16652] usb 3-1: USB disconnect, device number 127 [ 1030.023423][T11833] usb 6-1: config 0 has an invalid interface number: 230 but max is 0 [ 1030.066047][T11833] usb 6-1: config 0 has no interface number 0 [ 1030.099487][T11833] usb 6-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1030.140986][T11833] usb 6-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1030.172292][T20461] __nla_validate_parse: 4 callbacks suppressed [ 1030.172317][T20461] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4357'. [ 1030.180007][T11833] usb 6-1: config 0 interface 230 has no altsetting 0 [ 1030.216894][T11833] usb 6-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1030.240019][T11833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.248780][T11833] usb 6-1: Product: syz [ 1030.264431][T20461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4357'. [ 1030.264774][T20464] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 1030.301526][T11833] usb 6-1: Manufacturer: syz [ 1030.306262][T11833] usb 6-1: SerialNumber: syz [ 1030.342989][T11833] usb 6-1: config 0 descriptor?? [ 1030.350835][T20448] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1030.359854][T20448] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1030.381696][T11833] ums-usbat 6-1:0.230: USB Mass Storage device detected [ 1030.404170][T11833] ums-usbat 6-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 1030.973249][T16935] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1031.191109][T16935] usb 5-1: Using ep0 maxpacket: 16 [ 1031.208798][T20479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4362'. [ 1031.312996][T15960] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1031.371612][T20479] bridge0: entered promiscuous mode [ 1031.376983][T20479] team0: entered promiscuous mode [ 1031.382120][T20479] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:579 [ 1031.391453][T20479] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 20479, name: syz.4.4362 [ 1031.400644][T20479] preempt_count: 201, expected: 0 [ 1031.405772][T20479] RCU nest depth: 0, expected: 0 [ 1031.410750][T20479] 3 locks held by syz.4.4362/20479: [ 1031.416034][T20479] #0: ffffffff8ec80480 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1031.425773][T20479] #1: ffffffff8f50fcc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1031.434961][T20479] #2: ffff88802f9f8368 (&dev_addr_list_lock_key#6/1){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 1031.445294][T20479] Preemption disabled at: [ 1031.445313][T20479] [] dev_uc_add+0x56/0x120 [ 1031.455747][T20479] CPU: 0 UID: 0 PID: 20479 Comm: syz.4.4362 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 1031.455782][T20479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1031.455798][T20479] Call Trace: [ 1031.455813][T20479] [ 1031.455825][T20479] dump_stack_lvl+0x189/0x250 [ 1031.455871][T20479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1031.455898][T20479] ? __pfx__printk+0x10/0x10 [ 1031.455923][T20479] ? print_lock_name+0xde/0x100 [ 1031.455947][T20479] ? dev_uc_add+0x56/0x120 [ 1031.455978][T20479] __might_resched+0x495/0x610 [ 1031.456019][T20479] ? dev_uc_add+0x56/0x120 [ 1031.456038][T20479] ? __pfx___might_resched+0x10/0x10 [ 1031.456061][T20479] ? console_unlock+0x21b/0x270 [ 1031.456087][T20479] ? __pfx_console_unlock+0x10/0x10 [ 1031.456121][T20479] __mutex_lock+0x106/0xe80 [ 1031.456160][T20479] ? __pfx__printk+0x10/0x10 [ 1031.456185][T20479] ? team_change_rx_flags+0x38/0x220 [ 1031.456208][T20479] ? __netdev_printk+0x365/0x4d0 [ 1031.456241][T20479] ? __pfx___mutex_lock+0x10/0x10 [ 1031.456277][T20479] ? netdev_info+0x10a/0x160 [ 1031.456310][T20479] ? __pfx_netdev_info+0x10/0x10 [ 1031.456342][T20479] team_change_rx_flags+0x38/0x220 [ 1031.456370][T20479] ? __pfx_team_change_rx_flags+0x10/0x10 [ 1031.456403][T20479] __dev_set_promiscuity+0x534/0x740 [ 1031.456433][T20479] ? netdev_info+0x10a/0x160 [ 1031.456464][T20479] netif_set_promiscuity+0x50/0xe0 [ 1031.456490][T20479] dev_set_promiscuity+0x126/0x260 [ 1031.456511][T20479] br_manage_promisc+0x180/0x560 [ 1031.456536][T20479] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 1031.456565][T20479] __dev_set_promiscuity+0x534/0x740 [ 1031.456594][T20479] ? __hw_addr_add_ex+0x3c5/0x770 [ 1031.456623][T20479] __dev_set_rx_mode+0x17c/0x260 [ 1031.456649][T20479] dev_uc_add+0xc8/0x120 [ 1031.456679][T20479] macvlan_open+0x446/0x8e0 [ 1031.456716][T20479] __dev_open+0x470/0x880 [ 1031.456744][T20479] ? __pfx___dev_open+0x10/0x10 [ 1031.456776][T20479] __dev_change_flags+0x1ea/0x6d0 [ 1031.456805][T20479] ? __pfx___dev_change_flags+0x10/0x10 [ 1031.456832][T20479] rtnl_newlink_create+0x555/0xb00 [ 1031.456877][T20479] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1031.456901][T20479] ? rtnl_newlink+0x8db/0x1c70 [ 1031.456939][T20479] ? __pfx___mutex_lock+0x10/0x10 [ 1031.456974][T20479] ? ns_capable+0x8a/0xf0 [ 1031.457007][T20479] rtnl_newlink+0x16d6/0x1c70 [ 1031.457031][T20479] ? netlink_sendmsg+0x805/0xb30 [ 1031.457070][T20479] ? __pfx_rtnl_newlink+0x10/0x10 [ 1031.457113][T20479] ? kasan_quarantine_put+0xdd/0x220 [ 1031.457140][T20479] ? lockdep_hardirqs_on+0x9c/0x150 [ 1031.457180][T20479] ? __pfx_do_softirq+0x10/0x10 [ 1031.457222][T20479] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1031.457255][T20479] ? lockdep_hardirqs_on+0x9c/0x150 [ 1031.457279][T20479] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1031.457302][T20479] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1031.457344][T20479] ? __dev_queue_xmit+0x27e/0x3a70 [ 1031.457388][T20479] ? __lock_acquire+0xab9/0xd20 [ 1031.457436][T20479] ? __pfx_rtnl_newlink+0x10/0x10 [ 1031.457451][T20479] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1031.457478][T20479] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1031.457501][T20479] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1031.457520][T20479] ? ref_tracker_free+0x63a/0x7d0 [ 1031.457546][T20479] ? __copy_skb_header+0xa7/0x550 [ 1031.457573][T20479] ? __pfx_ref_tracker_free+0x10/0x10 [ 1031.457593][T20479] ? __skb_clone+0x63/0x7a0 [ 1031.457625][T20479] netlink_rcv_skb+0x205/0x470 [ 1031.457652][T20479] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1031.457683][T20479] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1031.457721][T20479] ? netlink_deliver_tap+0x2e/0x1b0 [ 1031.457738][T20479] ? netlink_deliver_tap+0x2e/0x1b0 [ 1031.457760][T20479] netlink_unicast+0x758/0x8d0 [ 1031.457796][T20479] netlink_sendmsg+0x805/0xb30 [ 1031.457834][T20479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1031.457863][T20479] ? aa_sock_msg_perm+0x94/0x160 [ 1031.457888][T20479] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1031.457909][T20479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1031.457935][T20479] __sock_sendmsg+0x21c/0x270 [ 1031.457974][T20479] ____sys_sendmsg+0x505/0x830 [ 1031.458007][T20479] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1031.458041][T20479] ? import_iovec+0x74/0xa0 [ 1031.458059][T20479] ___sys_sendmsg+0x21f/0x2a0 [ 1031.458085][T20479] ? __pfx____sys_sendmsg+0x10/0x10 [ 1031.458154][T20479] ? __fget_files+0x2a/0x420 [ 1031.458179][T20479] ? __fget_files+0x3a0/0x420 [ 1031.458206][T20479] __x64_sys_sendmsg+0x19b/0x260 [ 1031.458227][T20479] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1031.458270][T20479] ? rcu_is_watching+0x15/0xb0 [ 1031.458310][T20479] ? do_syscall_64+0xbe/0x3b0 [ 1031.458345][T20479] do_syscall_64+0xfa/0x3b0 [ 1031.458370][T20479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.458390][T20479] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1031.458411][T20479] ? clear_bhb_loop+0x60/0xb0 [ 1031.458435][T20479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.458461][T20479] RIP: 0033:0x7f6da858e929 [ 1031.458484][T20479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1031.458505][T20479] RSP: 002b:00007f6da63d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1031.458533][T20479] RAX: ffffffffffffffda RBX: 00007f6da87b6160 RCX: 00007f6da858e929 [ 1031.458549][T20479] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000009 [ 1031.458562][T20479] RBP: 00007f6da8610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1031.458575][T20479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1031.458596][T20479] R13: 0000000000000000 R14: 00007f6da87b6160 R15: 00007f6da88dfa28 [ 1031.458628][T20479] [ 1031.458683][T20479] [ 1032.003170][T20479] ============================= [ 1032.008045][T20479] [ BUG: Invalid wait context ] [ 1032.012928][T20479] 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 Tainted: G W [ 1032.021626][T20479] ----------------------------- [ 1032.026531][T20479] syz.4.4362/20479 is trying to lock: [ 1032.031936][T20479] ffff888029ce0e00 (team->team_lock_key#6){+.+.}-{4:4}, at: team_change_rx_flags+0x38/0x220 [ 1032.042120][T20479] other info that might help us debug this: [ 1032.048042][T20479] context-{5:5} [ 1032.051533][T20479] 3 locks held by syz.4.4362/20479: [ 1032.056752][T20479] #0: ffffffff8ec80480 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1032.066305][T20479] #1: ffffffff8f50fcc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1032.075437][T20479] #2: ffff88802f9f8368 (&dev_addr_list_lock_key#6/1){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 1032.085709][T20479] stack backtrace: [ 1032.089467][T20479] CPU: 0 UID: 0 PID: 20479 Comm: syz.4.4362 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 1032.089502][T20479] Tainted: [W]=WARN [ 1032.089510][T20479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1032.089525][T20479] Call Trace: [ 1032.089538][T20479] [ 1032.089547][T20479] dump_stack_lvl+0x189/0x250 [ 1032.089576][T20479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1032.089606][T20479] ? __pfx__printk+0x10/0x10 [ 1032.089632][T20479] ? print_lock_name+0xde/0x100 [ 1032.089656][T20479] __lock_acquire+0xbcb/0xd20 [ 1032.089699][T20479] ? team_change_rx_flags+0x38/0x220 [ 1032.089723][T20479] lock_acquire+0x120/0x360 [ 1032.089743][T20479] ? team_change_rx_flags+0x38/0x220 [ 1032.089785][T20479] __mutex_lock+0x182/0xe80 [ 1032.089817][T20479] ? team_change_rx_flags+0x38/0x220 [ 1032.089849][T20479] ? __pfx__printk+0x10/0x10 [ 1032.089866][T20479] ? team_change_rx_flags+0x38/0x220 [ 1032.089888][T20479] ? __netdev_printk+0x365/0x4d0 [ 1032.089920][T20479] ? __pfx___mutex_lock+0x10/0x10 [ 1032.089954][T20479] ? netdev_info+0x10a/0x160 [ 1032.089982][T20479] ? __pfx_netdev_info+0x10/0x10 [ 1032.090010][T20479] team_change_rx_flags+0x38/0x220 [ 1032.090035][T20479] ? __pfx_team_change_rx_flags+0x10/0x10 [ 1032.090059][T20479] __dev_set_promiscuity+0x534/0x740 [ 1032.090087][T20479] ? netdev_info+0x10a/0x160 [ 1032.090114][T20479] netif_set_promiscuity+0x50/0xe0 [ 1032.090138][T20479] dev_set_promiscuity+0x126/0x260 [ 1032.090163][T20479] br_manage_promisc+0x180/0x560 [ 1032.090180][T20479] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 1032.090200][T20479] __dev_set_promiscuity+0x534/0x740 [ 1032.090225][T20479] ? __hw_addr_add_ex+0x3c5/0x770 [ 1032.090252][T20479] __dev_set_rx_mode+0x17c/0x260 [ 1032.090276][T20479] dev_uc_add+0xc8/0x120 [ 1032.090303][T20479] macvlan_open+0x446/0x8e0 [ 1032.090323][T20479] __dev_open+0x470/0x880 [ 1032.090338][T20479] ? __pfx___dev_open+0x10/0x10 [ 1032.090355][T20479] __dev_change_flags+0x1ea/0x6d0 [ 1032.090385][T20479] ? __pfx___dev_change_flags+0x10/0x10 [ 1032.090414][T20479] rtnl_newlink_create+0x555/0xb00 [ 1032.090444][T20479] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1032.090465][T20479] ? rtnl_newlink+0x8db/0x1c70 [ 1032.090498][T20479] ? __pfx___mutex_lock+0x10/0x10 [ 1032.090535][T20479] ? ns_capable+0x8a/0xf0 [ 1032.090569][T20479] rtnl_newlink+0x16d6/0x1c70 [ 1032.090589][T20479] ? netlink_sendmsg+0x805/0xb30 [ 1032.090617][T20479] ? __pfx_rtnl_newlink+0x10/0x10 [ 1032.090639][T20479] ? kasan_quarantine_put+0xdd/0x220 [ 1032.090668][T20479] ? lockdep_hardirqs_on+0x9c/0x150 [ 1032.090711][T20479] ? __pfx_do_softirq+0x10/0x10 [ 1032.090746][T20479] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1032.090773][T20479] ? lockdep_hardirqs_on+0x9c/0x150 [ 1032.090795][T20479] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1032.090822][T20479] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1032.090858][T20479] ? __dev_queue_xmit+0x27e/0x3a70 [ 1032.090891][T20479] ? __lock_acquire+0xab9/0xd20 [ 1032.090933][T20479] ? __pfx_rtnl_newlink+0x10/0x10 [ 1032.090952][T20479] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1032.090975][T20479] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1032.090994][T20479] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1032.091014][T20479] ? ref_tracker_free+0x63a/0x7d0 [ 1032.091039][T20479] ? __copy_skb_header+0xa7/0x550 [ 1032.091066][T20479] ? __pfx_ref_tracker_free+0x10/0x10 [ 1032.091086][T20479] ? __skb_clone+0x63/0x7a0 [ 1032.091107][T20479] netlink_rcv_skb+0x205/0x470 [ 1032.091129][T20479] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1032.091151][T20479] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1032.091179][T20479] ? netlink_deliver_tap+0x2e/0x1b0 [ 1032.091201][T20479] ? netlink_deliver_tap+0x2e/0x1b0 [ 1032.091225][T20479] netlink_unicast+0x758/0x8d0 [ 1032.091243][T20479] netlink_sendmsg+0x805/0xb30 [ 1032.091263][T20479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1032.091289][T20479] ? aa_sock_msg_perm+0x94/0x160 [ 1032.091317][T20479] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1032.091344][T20479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1032.091368][T20479] __sock_sendmsg+0x21c/0x270 [ 1032.091392][T20479] ____sys_sendmsg+0x505/0x830 [ 1032.091412][T20479] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1032.091442][T20479] ? import_iovec+0x74/0xa0 [ 1032.091465][T20479] ___sys_sendmsg+0x21f/0x2a0 [ 1032.091490][T20479] ? __pfx____sys_sendmsg+0x10/0x10 [ 1032.091528][T20479] ? __fget_files+0x2a/0x420 [ 1032.091545][T20479] ? __fget_files+0x3a0/0x420 [ 1032.091566][T20479] __x64_sys_sendmsg+0x19b/0x260 [ 1032.091594][T20479] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1032.091626][T20479] ? rcu_is_watching+0x15/0xb0 [ 1032.091661][T20479] ? do_syscall_64+0xbe/0x3b0 [ 1032.091695][T20479] do_syscall_64+0xfa/0x3b0 [ 1032.091719][T20479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.091742][T20479] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1032.091766][T20479] ? clear_bhb_loop+0x60/0xb0 [ 1032.091789][T20479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.091810][T20479] RIP: 0033:0x7f6da858e929 [ 1032.091829][T20479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1032.091844][T20479] RSP: 002b:00007f6da63d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1032.091860][T20479] RAX: ffffffffffffffda RBX: 00007f6da87b6160 RCX: 00007f6da858e929 [ 1032.091872][T20479] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000009 [ 1032.091889][T20479] RBP: 00007f6da8610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1032.091903][T20479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1032.091917][T20479] R13: 0000000000000000 R14: 00007f6da87b6160 R15: 00007f6da88dfa28 [ 1032.091940][T20479] [ 1033.014247][T20479] macvlan2: entered promiscuous mode [ 1033.061012][ T5835] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1033.221958][T11833] ums-usbat 6-1:0.230: probe with driver ums-usbat failed with error -5 [ 1033.264523][T11833] usb 6-1: USB disconnect, device number 102 [ 1033.281503][T15960] usb 3-1: Using ep0 maxpacket: 32 [ 1033.305817][ T5835] usb 4-1: config 0 has no interfaces? [ 1033.315672][T15960] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.315731][ T5835] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1033.354302][T15960] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1033.356006][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.378491][ T5835] usb 4-1: Product: syz [ 1033.412908][ T1155] net_ratelimit: 14 callbacks suppressed [ 1033.412931][ T1155] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1033.487204][T15960] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1033.496729][T15960] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1033.522642][ T5835] usb 4-1: Manufacturer: syz [ 1033.536138][ T5835] usb 4-1: SerialNumber: syz [ 1033.547306][ T5835] usb 4-1: config 0 descriptor?? [ 1033.728058][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1033.834555][T15960] usb 3-1: Product: syz [ 1033.841539][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1033.854789][T15960] usb 3-1: Manufacturer: syz [ 1033.863389][T15960] usb 3-1: SerialNumber: syz [ 1034.031062][ T3460] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1034.085334][ T5835] usb 4-1: can't set config #0, error -71 [ 1034.124320][ T5835] usb 4-1: USB disconnect, device number 123 [ 1034.141223][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1034.459850][T15960] usb 3-1: can't set config #1, error -71 [ 1034.475665][T15960] usb 3-1: USB disconnect, device number 2 [ 1034.574408][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1034.691099][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1034.801598][ T3544] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1034.911315][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1035.006240][T16935] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1035.021945][T16935] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1035.040274][T16935] usb 5-1: can't read configurations, error -71 [ 1035.044334][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1038.481443][ T13] net_ratelimit: 30 callbacks suppressed [ 1038.481468][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1038.602133][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1038.711233][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1038.832616][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1038.941432][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1039.061230][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1039.171344][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1039.281803][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1039.391442][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1039.511344][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1040.921344][ T5843] Bluetooth: hci3: command 0x0406 tx timeout