last executing test programs: 14m39.607487483s ago: executing program 0 (id=2621): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r1, 0x0, 0x9}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r4}) 14m39.392705742s ago: executing program 0 (id=2625): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 14m39.174820411s ago: executing program 0 (id=2628): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)={0x60, 0x0, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x60}}, 0x20000000) 14m39.094394746s ago: executing program 0 (id=2629): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005"], 0x100}}, 0x0) sendmsg$nl_generic(r0, 0x0, 0xc000) 14m38.954833168s ago: executing program 0 (id=2631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r0, 0x0, 0x24040884) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000020000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 14m38.731979903s ago: executing program 0 (id=2633): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 14m23.563318751s ago: executing program 32 (id=2633): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 1m19.371960027s ago: executing program 1 (id=9861): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)={@fallback=r1, r1, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)={@cgroup=r1, r1, 0x2f, 0x1c, 0x4, @void, @value=r0}, 0x20) 1m17.121402409s ago: executing program 1 (id=9867): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000040)=0x7f, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="180000001000000000000000e5f30000181100", @ANYRES32, @ANYBLOB="0000000000000000b748000000000080b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/20, 0x14}, 0x7}], 0x4000000000000d4, 0x102, 0x0) 1m16.875268115s ago: executing program 1 (id=9873): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e03fb0520"], 0x7) 1m16.748769316s ago: executing program 1 (id=9877): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="240012800b00010062726964676500"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x1882}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x44}}, 0x884) 1m14.139288597s ago: executing program 1 (id=9882): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000300)="ab", 0x1, 0x40000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="20000000000000008400000002000000060041000500000000000000", @ANYRES32=0x0, @ANYBLOB="30000000000000008400000001000000faff0600040000000900000003000008"], 0x50, 0x4048800}, 0x10) 1m13.944460579s ago: executing program 1 (id=9886): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, &(0x7f0000001880)}, 0x0) 57.554962771s ago: executing program 2 (id=9994): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000"], 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 57.553202898s ago: executing program 2 (id=9995): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = epoll_create1(0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)) writev(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)="943a1fcb24676066260d837c8a6bf0b9beecfdc4658c963ec2657e821760538c4816fa2c38ae206755a9fa86d7a322d0f6acde1d651d13bd821b76d0a9bdf18aa3da42afcf", 0x45}, {0x0}], 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 57.433183952s ago: executing program 2 (id=9996): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendmmsg$inet(r0, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="f0", 0x1}], 0x1}}], 0x1, 0x40) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='illinois', 0x8) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001580)="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", 0x443}], 0x1}}], 0x1, 0x40800) 57.388045476s ago: executing program 2 (id=9997): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000001b00)) 57.342238361s ago: executing program 2 (id=9998): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59dc6d71776a1654}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xa, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 57.306161129s ago: executing program 2 (id=9999): unshare(0x62040200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)={@void, @void, @eth={@multicast, @random="fdb065f649d1", @val={@val={0x88a8, 0x1, 0x1, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0x68, 0x0, 0x9, 0x6, 0x0, @private=0xa010101, @multicast1}}}}}}, 0x2a) 49.11526121s ago: executing program 4 (id=10021): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="f0", 0x1}], 0x1}}], 0x1, 0x40) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='illinois', 0x8) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001580)="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", 0x443}], 0x1}}], 0x1, 0x40800) 47.400975662s ago: executing program 5 (id=10024): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x10e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80, 0x0, 0x7e}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000000)={0x20, 0x25, 0x5, {0x5, 0x3, '\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 47.351991204s ago: executing program 4 (id=10025): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff32, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x2, 0x4, 0x4, 0x3, 0x1014}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 46.680257902s ago: executing program 4 (id=10027): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1241, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 44.975971094s ago: executing program 5 (id=10028): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x0, 0xb4, 0x8c, 0xbb}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f00000009c0)={0x40, 0x11, 0x24, "b9f95dee8a7a52c94ec671db620bb9ed622a10042257c3af1680d08ccae266d38d8d3ac0"}, 0x0, 0x0, 0x0, 0x0}) 43.752709422s ago: executing program 5 (id=10030): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) llistxattr(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)=""/252, 0xfc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004980, 0x0) syz_emit_vhci(&(0x7f0000005fc0)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x81, 0xc8}}}, 0x6) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, 0x0, 0x0, 0x1000000, 0x0, 0x10}]) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)={'wlan1\x00', @random='\rh\x00 \x00'}) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040e04080b200617be8f3cddd038d4a911e1f869eb8ca059e528f1da000000804e8f49c8b4bb7b2d57cf5ef30bd9274e8010a90a3434cc92aa8b74225509e1e78e"], 0x7) 42.935946345s ago: executing program 5 (id=10031): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair(0x22, 0x3, 0x0, &(0x7f0000000180)) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) 42.560872023s ago: executing program 4 (id=10032): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) 42.447022317s ago: executing program 5 (id=10033): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001500010300000000000000010c00000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) 41.721239064s ago: executing program 33 (id=9999): unshare(0x62040200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)={@void, @void, @eth={@multicast, @random="fdb065f649d1", @val={@val={0x88a8, 0x1, 0x1, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0x68, 0x0, 0x9, 0x6, 0x0, @private=0xa010101, @multicast1}}}}}}, 0x2a) 41.720957026s ago: executing program 4 (id=10035): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xaf, &(0x7f0000000a80)=""/175, 0x0, 0xa}, 0x94) 40.473170132s ago: executing program 5 (id=10036): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="0000000a010000001800120008000100736974000c00020008000300"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r4, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010100}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x7}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1ff}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x8005}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3b}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 37.555653765s ago: executing program 4 (id=10038): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040), 0x10) r3 = dup3(r2, r1, 0x80000) write$tun(r3, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f00000001c0)=0x1, 0x4) 33.096709476s ago: executing program 3 (id=10041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, &(0x7f0000001880)}, 0x0) 31.161329353s ago: executing program 3 (id=10042): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)={0x20, 0x3, 0x3, "7e4bd1"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0xb, 0x4, "fab12670"}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x2}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0xf800}, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000600)={0x0, 0x12, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 26.714661223s ago: executing program 3 (id=10043): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r0 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x0, 0x2e9}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 25.942613935s ago: executing program 3 (id=10044): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001500010300000000000000010c00000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) 24.933731346s ago: executing program 34 (id=10036): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="0000000a010000001800120008000100736974000c00020008000300"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r4, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010100}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x7}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1ff}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x8005}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3b}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 21.160058187s ago: executing program 35 (id=10038): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040), 0x10) r3 = dup3(r2, r1, 0x80000) write$tun(r3, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f00000001c0)=0x1, 0x4) 17.382765567s ago: executing program 3 (id=10047): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f27, 0x20, 0x10000, 0x10000004, 0x8, 0xffeffbf9, 0x8, 0x40000000, 0x4800000, 0x100100, 0xfffffff9, 0x1, 0x4, 0xfffffffe, 0x403, 0xf, 0xfffffffc, 0x0, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x0, 0x20001e55, 0x400000b, 0xfff, 0x1, 0x8, 0x7, 0x8000000, 0x1]}) 16.738805585s ago: executing program 3 (id=10048): getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000001000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f00000002c0)="6825731da919", 0x6, r0}, 0x68) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000300)={0xed, 0x0, 0x2b}) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001300)=""/4096) r4 = socket(0x2b, 0x80801, 0x1) bind$netrom(r4, &(0x7f0000000240)={{0x3, @null, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x7, 0x5, 0x7fffffff, 0x9, 0x7fffffffffffffff, 0x3, 0x9, 0x2, 0x4, 0x4, 0x9, 0x0, 0x5, 0x7, 0x0, 0x2], 0x8000000, 0x40002}) 0s ago: executing program 36 (id=10048): getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000001000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f00000002c0)="6825731da919", 0x6, r0}, 0x68) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000300)={0xed, 0x0, 0x2b}) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001300)=""/4096) r4 = socket(0x2b, 0x80801, 0x1) bind$netrom(r4, &(0x7f0000000240)={{0x3, @null, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x7, 0x5, 0x7fffffff, 0x9, 0x7fffffffffffffff, 0x3, 0x9, 0x2, 0x4, 0x4, 0x9, 0x0, 0x5, 0x7, 0x0, 0x2], 0x8000000, 0x40002}) kernel console output (not intermixed with test programs): n table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 886.568215][T26739] tipc: Disabling bearer [ 887.305322][T26770] netlink: 'syz.2.7604': attribute type 1 has an invalid length. [ 887.421529][T26774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7604'. [ 887.481371][T26772] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 887.495208][T26772] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 887.702325][T26770] bond3: (slave bridge2): Enslaving as an active interface with a down link [ 887.722398][T26778] macvlan2: entered promiscuous mode [ 887.722419][T26778] macvlan2: entered allmulticast mode [ 887.735321][T26778] bond3: entered promiscuous mode [ 887.736097][T26778] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 887.866800][T26778] bond3: left promiscuous mode [ 887.995201][T26791] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 896.345321][T26985] netlink: 'syz.3.7688': attribute type 1 has an invalid length. [ 896.409305][T26985] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 896.409996][T26985] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 896.450475][T26989] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7688'. [ 896.529684][T26990] bond4: (slave bridge3): Enslaving as an active interface with a down link [ 896.542176][T26989] macvlan2: entered promiscuous mode [ 896.542194][T26989] macvlan2: entered allmulticast mode [ 896.545279][T26989] bond4: entered promiscuous mode [ 896.548519][T26989] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 896.686742][T26989] bond4: left promiscuous mode [ 897.616254][T27025] netlink: 'syz.3.7703': attribute type 1 has an invalid length. [ 897.751190][T27028] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7703'. [ 897.851536][T27027] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 897.852882][T27027] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 898.070416][T27028] bond5: (slave bridge4): Enslaving as an active interface with a down link [ 899.935633][T27086] netlink: 7 bytes leftover after parsing attributes in process `syz.5.7726'. [ 900.577132][T27102] netlink: 'syz.2.7732': attribute type 1 has an invalid length. [ 900.677407][T27104] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 900.678702][T27104] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 900.710633][T27102] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7732'. [ 900.872791][T27107] bond4: (slave bridge3): Enslaving as an active interface with a down link [ 900.923639][T27102] macvlan2: entered promiscuous mode [ 900.923665][T27102] macvlan2: entered allmulticast mode [ 900.924866][T27102] bond4: entered promiscuous mode [ 900.925919][T27102] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 900.995936][T27102] bond4: left promiscuous mode [ 901.358754][T27113] lo: entered promiscuous mode [ 901.398744][T27113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 901.924442][T27134] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 906.677499][ T5820] Bluetooth: hci1: link tx timeout [ 906.677518][ T5820] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 906.679105][ T5820] Bluetooth: hci1: link tx timeout [ 906.679119][ T5820] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 906.679200][ T5820] Bluetooth: hci1: link tx timeout [ 906.679211][ T5820] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 906.679300][ T5820] Bluetooth: hci1: link tx timeout [ 906.679312][ T5820] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 906.680703][ T5820] Bluetooth: hci1: link tx timeout [ 906.680718][ T5820] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 906.680742][ T5820] Bluetooth: hci1: link tx timeout [ 906.680753][ T5820] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 906.680841][ T5820] Bluetooth: hci1: link tx timeout [ 906.680852][ T5820] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 906.680926][ T5820] Bluetooth: hci1: link tx timeout [ 906.680937][ T5820] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 906.681010][ T5820] Bluetooth: hci1: link tx timeout [ 906.681021][ T5820] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 906.681094][ T5820] Bluetooth: hci1: link tx timeout [ 906.681105][ T5820] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 906.681177][ T5820] Bluetooth: hci1: link tx timeout [ 906.681188][ T5820] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 906.681260][ T5820] Bluetooth: hci1: link tx timeout [ 906.681271][ T5820] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 906.681343][ T5820] Bluetooth: hci1: link tx timeout [ 906.681354][ T5820] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 906.681442][ T5820] Bluetooth: hci1: link tx timeout [ 906.681453][ T5820] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 906.681625][ T5820] Bluetooth: hci1: link tx timeout [ 906.681636][ T5820] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 908.267768][T27259] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 908.675907][T27274] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 908.696695][ T5820] Bluetooth: hci1: command 0x0406 tx timeout [ 909.810485][T27296] tipc: Enabled bearer , priority 0 [ 909.815459][T27296] syzkaller0: entered promiscuous mode [ 909.815482][T27296] syzkaller0: entered allmulticast mode [ 909.844593][T27296] tipc: Resetting bearer [ 909.928355][T27295] tipc: Resetting bearer [ 910.044404][T27295] tipc: Disabling bearer [ 910.208652][T27302] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 910.595982][T27308] batman_adv: batadv0: Adding interface: dummy0 [ 910.596000][T27308] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.596033][T27308] batman_adv: batadv0: Interface activated: dummy0 [ 910.606689][T27308] batadv0: mtu less than device minimum [ 910.615092][T27308] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 910.651920][T27308] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 910.660663][T27308] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 910.669330][T27308] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 910.678010][T27308] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 910.701082][T27308] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 910.713934][T27308] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 910.737491][T27308] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 911.279290][T27328] kernel read not supported for file /eth0 (pid: 27328 comm: syz.2.7819) [ 911.279657][ T37] audit: type=1800 audit(1762697330.427:500): pid=27328 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.7819" name="eth0" dev="mqueue" ino=101103 res=0 errno=0 [ 911.284836][ T5965] kernel read not supported for file /eth0 (pid: 5965 comm: kworker/0:6) [ 912.924676][T27373] usb usb7: usbfs: process 27373 (syz.5.7830) did not claim interface 0 before use [ 915.853819][T27415] usb usb7: usbfs: process 27415 (syz.3.7849) did not claim interface 0 before use [ 916.648697][T27419] tipc: Started in network mode [ 916.648729][T27419] tipc: Node identity 6a0456de1fab, cluster identity 4711 [ 916.666354][T27419] tipc: Enabled bearer , priority 0 [ 916.668679][T27419] syzkaller0: entered promiscuous mode [ 916.668703][T27419] syzkaller0: entered allmulticast mode [ 916.707092][T27419] tipc: Resetting bearer [ 916.807890][T27418] tipc: Resetting bearer [ 916.964076][T27418] tipc: Disabling bearer [ 917.138254][T27429] tipc: Enabled bearer , priority 0 [ 917.138792][T27434] syzkaller0: entered promiscuous mode [ 917.138807][T27434] syzkaller0: entered allmulticast mode [ 917.167193][T27423] tipc: Resetting bearer [ 917.199080][T27421] tipc: Resetting bearer [ 917.318352][T27421] tipc: Disabling bearer [ 918.142291][T27461] usb usb7: usbfs: process 27461 (syz.4.7863) did not claim interface 0 before use [ 919.189879][T27471] tipc: Enabled bearer , priority 0 [ 919.191748][T27471] syzkaller0: entered promiscuous mode [ 919.191771][T27471] syzkaller0: entered allmulticast mode [ 919.320107][T27471] tipc: Resetting bearer [ 919.657134][T27470] tipc: Resetting bearer [ 920.153744][T27470] tipc: Disabling bearer [ 920.212759][ T5965] tipc: Node number set to 3164571167 [ 922.528192][T27543] usb usb7: usbfs: process 27543 (syz.2.7893) did not claim interface 0 before use [ 924.327002][T27574] tipc: Enabled bearer , priority 0 [ 924.327861][T27574] syzkaller0: entered promiscuous mode [ 924.328034][T27574] syzkaller0: entered allmulticast mode [ 924.434403][T27574] tipc: Resetting bearer [ 924.606720][T27573] tipc: Resetting bearer [ 924.823703][T27573] tipc: Disabling bearer [ 925.151354][T27597] tipc: Enabled bearer , priority 0 [ 925.152172][T27597] syzkaller0: entered promiscuous mode [ 925.152196][T27597] syzkaller0: entered allmulticast mode [ 925.188155][T27597] tipc: Resetting bearer [ 925.223465][T27595] tipc: Resetting bearer [ 925.433643][T27595] tipc: Disabling bearer [ 925.839309][T27618] netlink: 7 bytes leftover after parsing attributes in process `syz.3.7923'. [ 926.799930][T27646] tipc: Enabled bearer , priority 0 [ 926.802959][T27646] syzkaller0: entered promiscuous mode [ 926.802983][T27646] syzkaller0: entered allmulticast mode [ 926.834739][T27646] tipc: Resetting bearer [ 926.935036][T27645] tipc: Resetting bearer [ 927.159417][T27645] tipc: Disabling bearer [ 928.425605][T27723] netlink: 7 bytes leftover after parsing attributes in process `syz.5.7968'. [ 928.619133][ T37] audit: type=1800 audit(1762697347.767:501): pid=27733 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.7970" name="bus" dev="overlay" ino=2580 res=0 errno=0 [ 928.817042][T27741] net_ratelimit: 11 callbacks suppressed [ 928.817063][T27741] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 928.817151][T27741] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 929.321607][T27758] netlink: 7 bytes leftover after parsing attributes in process `syz.2.7981'. [ 929.935434][T27782] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 929.935523][T27782] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 930.134856][T27790] netlink: 'syz.2.7995': attribute type 1 has an invalid length. [ 930.259696][T27790] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7995'. [ 930.262361][T27793] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 930.265004][T27793] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 930.378954][T27794] batman_adv: batadv0: Adding interface: dummy0 [ 930.378973][T27794] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.378994][T27794] batman_adv: batadv0: Interface activated: dummy0 [ 930.414118][T27801] batadv0: mtu less than device minimum [ 930.440590][T27801] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 930.502941][T27801] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 930.511231][T27801] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 930.541777][T27801] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 930.587278][T27801] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 930.775131][T27817] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 930.864538][T27803] bond5: (slave bridge4): Enslaving as an active interface with a down link [ 930.870585][T27805] macvlan2: entered promiscuous mode [ 930.870599][T27805] macvlan2: entered allmulticast mode [ 930.871128][T27805] bond5: entered promiscuous mode [ 930.871994][T27805] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 930.900298][T27820] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 930.997696][T27805] bond5: left promiscuous mode [ 931.117044][T27830] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8009'. [ 931.301229][T27836] tipc: Enabled bearer , priority 0 [ 931.305089][T27836] syzkaller0: entered promiscuous mode [ 931.305112][T27836] syzkaller0: entered allmulticast mode [ 931.339230][T27836] tipc: Resetting bearer [ 931.393793][T27835] tipc: Resetting bearer [ 931.519229][ T1321] lec:lec_start_xmit: lec0:No lecd attached [ 931.534334][T27835] tipc: Disabling bearer [ 932.032403][T27870] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8024'. [ 932.308061][T27874] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8026'. [ 932.606331][T27890] tipc: Enabled bearer , priority 0 [ 932.607132][T27890] syzkaller0: entered promiscuous mode [ 932.607154][T27890] syzkaller0: entered allmulticast mode [ 932.617039][T27890] tipc: Resetting bearer [ 932.638985][T27888] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 932.682991][T27887] tipc: Resetting bearer [ 932.871285][T27887] tipc: Disabling bearer [ 933.867070][T27917] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8044'. [ 934.188119][T27930] netlink: 'syz.4.8050': attribute type 1 has an invalid length. [ 934.308419][T27930] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8050'. [ 934.398009][T27933] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 934.400508][T27933] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 934.576349][T27936] bond12: (slave bridge8): Enslaving as an active interface with a down link [ 934.635352][T27941] macvlan2: entered promiscuous mode [ 934.635383][T27941] macvlan2: entered allmulticast mode [ 934.637935][T27941] bond12: entered promiscuous mode [ 934.640300][T27941] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 934.746449][T27943] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 934.776295][T27941] bond12: left promiscuous mode [ 936.195154][T27977] netlink: 'syz.4.8068': attribute type 1 has an invalid length. [ 936.311686][T27977] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8068'. [ 936.319821][T27983] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address [ 936.321266][T27983] bond13: (slave vxcan3): Error -95 calling set_mac_address [ 936.473420][T27985] bond13: (slave bridge9): Enslaving as an active interface with a down link [ 936.491575][T27989] macvlan2: entered promiscuous mode [ 936.491598][T27989] macvlan2: entered allmulticast mode [ 936.495411][T27989] bond13: entered promiscuous mode [ 936.496275][T27989] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 936.586582][T27989] bond13: left promiscuous mode [ 936.779826][T27988] tipc: Enabled bearer , priority 0 [ 936.780415][T27992] syzkaller0: entered promiscuous mode [ 936.780437][T27992] syzkaller0: entered allmulticast mode [ 936.852962][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5340 ms [ 936.852995][ C0] lec:lec_tx_timeout: lec0 [ 936.885379][T27994] tipc: Resetting bearer [ 936.963126][T27986] tipc: Resetting bearer [ 937.464169][T28003] usb usb7: usbfs: process 28003 (syz.1.8074) did not claim interface 0 before use [ 937.957730][ T5772] tipc: Node number set to 2608740669 [ 938.389427][T27986] tipc: Disabling bearer [ 938.542991][T28002] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8075'. [ 938.543014][T28002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8075'. [ 938.741818][T28014] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 939.248510][T28030] usb usb7: usbfs: process 28030 (syz.2.8086) did not claim interface 0 before use [ 940.097225][T28032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8087'. [ 940.264089][T28036] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8088'. [ 940.264113][T28036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8088'. [ 940.859192][T28052] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 942.258983][T28079] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8104'. [ 942.259008][T28079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8104'. [ 942.303103][T28081] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8106'. [ 942.303128][T28081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8106'. [ 942.310242][T28081] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8106'. [ 942.310263][T28081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8106'. [ 943.752135][T28101] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 943.752164][T28101] overlayfs: failed to set xattr on upper [ 943.752172][T28101] overlayfs: ...falling back to redirect_dir=nofollow. [ 943.752180][T28101] overlayfs: ...falling back to index=off. [ 943.752187][T28101] overlayfs: ...falling back to uuid=null. [ 943.949238][T28109] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8117'. [ 943.949263][T28109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8117'. [ 944.165363][T28119] net_ratelimit: 14 callbacks suppressed [ 944.165384][T28119] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 944.165468][T28119] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 946.819403][T28160] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 946.819489][T28160] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 947.050012][T28164] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 947.215498][T28170] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8141'. [ 948.980444][T28198] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 948.980529][T28198] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 950.485361][T28248] netlink: 'syz.4.8172': attribute type 1 has an invalid length. [ 950.605958][T28256] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8172'. [ 950.719793][T28253] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address [ 950.720933][T28253] bond14: (slave vxcan3): Error -95 calling set_mac_address [ 951.083051][T28264] usb usb7: usbfs: process 28264 (syz.1.8176) did not claim interface 0 before use [ 952.119910][T28248] bond14: (slave bridge10): Enslaving as an active interface with a down link [ 952.156093][T28261] macvlan2: entered promiscuous mode [ 952.156121][T28261] macvlan2: entered allmulticast mode [ 952.157166][T28261] bond14: entered promiscuous mode [ 952.157997][T28261] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 952.263389][T28261] bond14: left promiscuous mode [ 952.921061][T28289] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8187'. [ 952.921087][T28289] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8187'. [ 952.933795][T28289] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8187'. [ 952.933817][T28289] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8187'. [ 953.627718][T28299] usb usb7: usbfs: process 28299 (syz.5.8188) did not claim interface 0 before use [ 954.693992][T28305] netlink: 'syz.3.8193': attribute type 1 has an invalid length. [ 954.832390][T28305] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8193'. [ 954.853925][T28309] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 954.855029][T28309] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 955.018695][T28313] bond6: (slave bridge6): Enslaving as an active interface with a down link [ 955.047217][T28305] macvlan2: entered promiscuous mode [ 955.047241][T28305] macvlan2: entered allmulticast mode [ 955.048068][T28305] bond6: entered promiscuous mode [ 955.069909][T28316] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 955.069936][T28316] overlayfs: failed to set xattr on upper [ 955.069945][T28316] overlayfs: ...falling back to redirect_dir=nofollow. [ 955.069954][T28316] overlayfs: ...falling back to index=off. [ 955.069962][T28316] overlayfs: ...falling back to uuid=null. [ 955.106267][T28305] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 955.224107][T28305] bond6: left promiscuous mode [ 955.485032][T28321] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8198'. [ 955.499048][T28322] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8198'. [ 956.193288][T28349] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 956.262309][T28353] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 956.262338][T28353] overlayfs: failed to set xattr on upper [ 956.262347][T28353] overlayfs: ...falling back to redirect_dir=nofollow. [ 956.262356][T28353] overlayfs: ...falling back to index=off. [ 956.262363][T28353] overlayfs: ...falling back to uuid=null. [ 958.734883][T28424] tipc: Enabled bearer , priority 0 [ 958.735694][T28424] syzkaller0: entered promiscuous mode [ 958.735717][T28424] syzkaller0: entered allmulticast mode [ 958.787455][T28424] tipc: Resetting bearer [ 958.845543][T28422] tipc: Resetting bearer [ 959.013700][T28422] tipc: Disabling bearer [ 960.157720][T28464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8250'. [ 960.588168][T28474] usb usb7: usbfs: process 28474 (syz.1.8251) did not claim interface 0 before use [ 961.826040][T28498] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8260'. [ 963.184242][T28512] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8265'. [ 963.308277][T28517] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 963.308306][T28517] overlayfs: failed to set xattr on upper [ 963.308316][T28517] overlayfs: ...falling back to redirect_dir=nofollow. [ 963.308323][T28517] overlayfs: ...falling back to index=off. [ 963.308331][T28517] overlayfs: ...falling back to uuid=null. [ 963.714785][T28525] usb usb7: usbfs: process 28525 (syz.4.8268) did not claim interface 0 before use [ 964.637189][T28529] tipc: Enabled bearer , priority 0 [ 964.638226][T28529] syzkaller0: entered promiscuous mode [ 964.638249][T28529] syzkaller0: entered allmulticast mode [ 964.644380][T28529] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 964.790503][T28533] tipc: Resetting bearer [ 964.853233][T28528] tipc: Resetting bearer [ 964.868220][T28544] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8272'. [ 965.013500][T28528] tipc: Disabling bearer [ 965.157867][T28547] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8278'. [ 965.984220][T28575] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8290'. [ 967.355023][ T37] audit: type=1800 audit(1762697386.497:502): pid=28615 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.8303" name="bus" dev="overlay" ino=2488 res=0 errno=0 [ 970.022482][T28680] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 970.033043][T28680] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 970.493467][T28704] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8334'. [ 970.494310][T28704] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8334'. [ 971.809417][T28726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8341'. [ 971.909976][T28733] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 972.050436][T28739] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 972.050521][T28739] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 972.175280][T28746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8349'. [ 972.341673][T28753] netlink: 'syz.5.8352': attribute type 1 has an invalid length. [ 972.406600][T28753] bond9: (slave vxcan7): The slave device specified does not support setting the MAC address [ 972.407706][T28753] bond9: (slave vxcan7): Error -95 calling set_mac_address [ 972.606156][T28757] bond9: (slave bridge12): Enslaving as an active interface with a down link [ 972.612263][T28766] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 972.647173][T28760] macvlan2: entered promiscuous mode [ 972.647197][T28760] macvlan2: entered allmulticast mode [ 972.650636][T28760] bond9: entered promiscuous mode [ 972.655504][T28760] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 972.775621][T28760] bond9: left promiscuous mode [ 972.781914][T28773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8360'. [ 972.977009][T28777] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 972.977100][T28777] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 974.078164][T28806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8372'. [ 974.109028][T28807] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 975.374605][ T37] audit: type=1800 audit(1762697394.527:503): pid=28845 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.8386" name="bus" dev="overlay" ino=2578 res=0 errno=0 [ 975.546439][T28849] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 976.730327][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 976.758400][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 976.763006][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 976.800369][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 976.803049][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 976.959391][ T37] audit: type=1800 audit(1762697396.107:504): pid=28871 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.8397" name="bus" dev="overlay" ino=1251 res=0 errno=0 [ 977.041708][T28875] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 977.490837][T28889] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8402'. [ 977.643784][T28891] overlayfs: failed to resolve './file0': -2 [ 978.356343][T25273] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.599664][T28916] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8413'. [ 978.649514][T28918] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 978.726406][T25273] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.853131][ T5820] Bluetooth: hci0: command tx timeout [ 979.037796][T25273] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.100605][T28934] tipc: Enabled bearer , priority 0 [ 979.111972][T28928] syzkaller0: entered promiscuous mode [ 979.111996][T28928] syzkaller0: entered allmulticast mode [ 979.123375][T28928] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 979.200606][T28931] tipc: Resetting bearer [ 979.317167][T25273] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.403928][T28926] tipc: Resetting bearer [ 979.508013][T28943] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8423'. [ 979.573792][T28926] tipc: Disabling bearer [ 980.021103][T28864] chnl_net:caif_netlink_parms(): no params data found [ 980.317335][T28970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8433'. [ 980.317356][T28970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8433'. [ 980.363986][T25273] bridge_slave_1: left allmulticast mode [ 980.364011][T25273] bridge_slave_1: left promiscuous mode [ 980.364226][T25273] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.444945][T25273] bridge_slave_0: left allmulticast mode [ 980.444972][T25273] bridge_slave_0: left promiscuous mode [ 980.445234][T25273] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.933079][ T5820] Bluetooth: hci0: command tx timeout [ 980.949656][T28995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8443'. [ 980.949670][T28995] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8443'. [ 982.683201][T25273] bond1 (unregistering): (slave bridge1): Releasing active interface [ 982.683223][T25273] bond1 (unregistering): (slave bridge1): the permanent HWaddr of slave - da:51:a9:35:41:be - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 982.853505][T25273] bond1 (unregistering): (slave bridge2): Releasing active interface [ 983.013079][ T5820] Bluetooth: hci0: command tx timeout [ 983.147997][T25273] bond2 (unregistering): (slave bridge4): Releasing active interface [ 983.155442][T29032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8454'. [ 983.155460][T29032] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8454'. [ 983.353405][T25273] bond3 (unregistering): (slave bridge5): Releasing active interface [ 983.353428][T25273] bond3 (unregistering): (slave bridge5): the permanent HWaddr of slave - 86:1a:8c:55:0b:59 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 983.544566][T25273] bond3 (unregistering): (slave bridge6): Releasing active interface [ 983.794615][T25273] bond6 (unregistering): (slave bridge8): Releasing active interface [ 984.023438][T25273] bond7 (unregistering): (slave bridge10): Releasing active interface [ 984.216685][T25273] bond8 (unregistering): (slave bridge11): Releasing active interface [ 984.435095][T25273] bond9 (unregistering): (slave bridge12): Releasing active interface [ 985.092995][ T5820] Bluetooth: hci0: command tx timeout [ 985.663286][T25273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 985.723423][T25273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 985.767659][T25273] bond0 (unregistering): Released all slaves [ 985.784781][T25273] bond1 (unregistering): Released all slaves [ 985.798306][T25273] bond2 (unregistering): Released all slaves [ 985.815524][T25273] bond3 (unregistering): Released all slaves [ 986.398676][T29072] netlink: 27 bytes leftover after parsing attributes in process `syz.3.8468'. [ 986.585560][T25273] bond4 (unregistering): Released all slaves [ 987.197431][T29091] overlayfs: failed to resolve './file1': -2 [ 987.423184][T25273] bond5 (unregistering): Released all slaves [ 987.432431][T25273] bond6 (unregistering): Released all slaves [ 987.449670][T25273] bond7 (unregistering): Released all slaves [ 987.465801][T25273] bond8 (unregistering): Released all slaves [ 987.508144][T25273] bond9 (unregistering): Released all slaves [ 987.673067][T28864] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.674577][T28864] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.674819][T28864] bridge_slave_0: entered allmulticast mode [ 987.677669][T28864] bridge_slave_0: entered promiscuous mode [ 987.751330][T29099] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 987.752153][T29099] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8480'. [ 987.884435][T28864] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.884567][T28864] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.884809][T28864] bridge_slave_1: entered allmulticast mode [ 987.891595][T28864] bridge_slave_1: entered promiscuous mode [ 987.920497][T25273] tipc: Left network mode [ 988.032281][T25273] IPVS: stopping master sync thread 22205 ... [ 988.115295][T29108] capability: warning: `syz.3.8485' uses deprecated v2 capabilities in a way that may be insecure [ 988.400839][T29119] netlink: 'syz.1.8488': attribute type 1 has an invalid length. [ 988.970567][T29122] usb usb7: usbfs: process 29122 (syz.3.8487) did not claim interface 0 before use [ 989.315967][T29125] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8488'. [ 989.479360][T28864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 989.608532][T29124] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 989.609647][T29124] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 989.701925][T29126] bond4: (slave bridge6): Enslaving as an active interface with a down link [ 989.725071][T29127] macvlan2: entered promiscuous mode [ 989.725099][T29127] macvlan2: entered allmulticast mode [ 989.726158][T29127] bond4: entered promiscuous mode [ 989.727073][T29127] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 989.730621][T29139] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 989.731498][T29139] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8494'. [ 989.866232][T29127] bond4: left promiscuous mode [ 990.026798][T28864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 990.747266][T29160] usb usb7: usbfs: process 29160 (syz.2.8500) did not claim interface 0 before use [ 991.730384][T28864] team0: Port device team_slave_0 added [ 991.810202][T28864] team0: Port device team_slave_1 added [ 991.957570][T29178] overlayfs: failed to resolve './file0': -2 [ 991.957873][T25273] hsr_slave_0: left promiscuous mode [ 991.994697][T25273] hsr_slave_1: left promiscuous mode [ 991.995678][T25273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 991.995703][T25273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 992.044303][T25273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 992.044329][T25273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.185297][T25273] veth1_macvtap: left promiscuous mode [ 992.186884][T25273] veth0_macvtap: left promiscuous mode [ 992.189961][T25273] veth1_vlan: left promiscuous mode [ 992.190162][T25273] veth0_vlan: left promiscuous mode [ 992.622054][T29194] usb usb7: usbfs: process 29194 (syz.1.8513) did not claim interface 0 before use [ 993.329007][ T1321] lec:lec_start_xmit: lec0:No lecd attached [ 995.186424][T29230] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 995.186521][T29230] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 996.331851][T29244] netlink: 27 bytes leftover after parsing attributes in process `syz.1.8532'. [ 996.373578][T25273] team0 (unregistering): Port device team_slave_1 removed [ 996.604263][T25273] team0 (unregistering): Port device team_slave_0 removed [ 998.852685][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5530 ms [ 998.852716][ C0] lec:lec_tx_timeout: lec0 [ 999.048819][T28864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.048835][T28864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.048860][T28864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.186866][T28864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.186882][T28864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.186908][T28864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.511728][T28864] hsr_slave_0: entered promiscuous mode [ 999.521642][T28864] hsr_slave_1: entered promiscuous mode [ 999.529951][T28864] debugfs: 'hsr0' already exists in 'hsr' [ 999.529974][T28864] Cannot create hsr debugfs directory [ 999.545437][T29268] netlink: 27 bytes leftover after parsing attributes in process `syz.4.8543'. [ 999.841658][T29280] netlink: 'syz.2.8549': attribute type 1 has an invalid length. [ 999.887730][T29283] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 999.887816][T29283] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 999.960558][T29291] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8549'. [ 1000.045806][T29285] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1000.046643][T29285] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 1000.160777][T29280] bond6: (slave bridge5): Enslaving as an active interface with a down link [ 1000.229643][T29293] macvlan2: entered promiscuous mode [ 1000.229669][T29293] macvlan2: entered allmulticast mode [ 1000.230795][T29293] bond6: entered promiscuous mode [ 1000.231981][T29293] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1000.366354][T29293] bond6: left promiscuous mode [ 1002.141690][T28864] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1002.217656][T28864] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1002.266150][T29332] 9pnet_fd: Insufficient options for proto=fd [ 1002.340810][T28864] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1002.479863][T28864] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1003.200204][T28864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1003.319730][T28864] 8021q: adding VLAN 0 to HW filter on device team0 [ 1003.354485][T25273] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.360919][T25273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1003.406934][ T8062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.407076][ T8062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.578427][T28864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1005.604622][T28864] veth0_vlan: entered promiscuous mode [ 1005.629194][T28864] veth1_vlan: entered promiscuous mode [ 1005.681639][T28864] veth0_macvtap: entered promiscuous mode [ 1005.696751][T28864] veth1_macvtap: entered promiscuous mode [ 1005.764090][T28864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1005.787511][T28864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1005.829709][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.845888][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.847367][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.847586][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.213644][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.213662][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.289655][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.289674][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1009.918185][T29487] ======================================================= [ 1009.918185][T29487] WARNING: The mand mount option has been deprecated and [ 1009.918185][T29487] and is ignored by this kernel. Remove the mand [ 1009.918185][T29487] option from the mount to silence this warning. [ 1009.918185][T29487] ======================================================= [ 1009.969969][T29488] overlayfs: overlapping lowerdir path [ 1011.060661][T29527] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1011.061053][T29527] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1011.616764][T29547] fuse: Bad value for 'user_id' [ 1011.616776][T29547] fuse: Bad value for 'user_id' [ 1012.175935][T29574] fuse: Bad value for 'user_id' [ 1012.175948][T29574] fuse: Bad value for 'user_id' [ 1012.397732][T29585] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1012.398291][T29585] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1012.798460][T29609] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8674'. [ 1013.028970][T29621] netlink: 27 bytes leftover after parsing attributes in process `syz.3.8679'. [ 1013.647071][T29651] fuse: Bad value for 'fd' [ 1013.801443][T29658] fuse: Bad value for 'fd' [ 1014.304717][T29681] 9pnet_fd: Insufficient options for proto=fd [ 1015.206141][T29711] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1015.261939][T29715] 9pnet_fd: Insufficient options for proto=fd [ 1015.979874][T29748] IPv6: sit1: Disabled Multicast RS [ 1016.318625][T29765] overlayfs: overlapping lowerdir path [ 1017.692407][T29816] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1017.692502][T29816] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1017.898549][T29827] 9pnet_fd: Insufficient options for proto=fd [ 1018.526286][T29855] overlayfs: missing 'lowerdir' [ 1018.643585][T29861] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8781'. [ 1019.497907][T29894] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8794'. [ 1021.246048][T29960] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1021.246150][T29960] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1023.127590][T30000] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1023.127900][T30000] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1024.157476][T22075] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1024.163963][T22075] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1024.172830][T22075] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1024.191673][T22075] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1024.200508][T22075] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1024.499971][T30029] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1024.500063][T30029] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1025.020346][T30039] overlayfs: failed to resolve './file0': -2 [ 1025.514648][ T1113] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.868682][ T1113] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.126111][T30068] netlink: 91 bytes leftover after parsing attributes in process `syz.2.8867'. [ 1026.162435][ T1113] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.293642][ T5820] Bluetooth: hci3: command tx timeout [ 1026.476485][ T1113] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.586468][T30022] chnl_net:caif_netlink_parms(): no params data found [ 1026.808633][T30093] support for the xor transformation has been removed. [ 1026.950420][T30097] netlink: 91 bytes leftover after parsing attributes in process `syz.5.8877'. [ 1027.049529][T30022] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.050138][T30022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.050325][T30022] bridge_slave_0: entered allmulticast mode [ 1027.073731][T30022] bridge_slave_0: entered promiscuous mode [ 1027.101552][T30022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.101996][T30022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.102176][T30022] bridge_slave_1: entered allmulticast mode [ 1027.125301][T30022] bridge_slave_1: entered promiscuous mode [ 1027.424253][T30022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1027.429602][T30022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1027.504825][T30117] netlink: 91 bytes leftover after parsing attributes in process `syz.3.8888'. [ 1027.554834][ T1113] bridge_slave_1: left allmulticast mode [ 1027.554860][ T1113] bridge_slave_1: left promiscuous mode [ 1027.555103][ T1113] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.647020][ T1113] bridge_slave_0: left allmulticast mode [ 1027.647048][ T1113] bridge_slave_0: left promiscuous mode [ 1027.647289][ T1113] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.792936][T30129] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 1028.372746][ T5820] Bluetooth: hci3: command tx timeout [ 1030.234829][ T1113] bond3 (unregistering): (slave bridge1): Releasing active interface [ 1030.445100][ T1113] bond6 (unregistering): (slave bridge2): Releasing active interface [ 1030.452801][ T5820] Bluetooth: hci3: command tx timeout [ 1030.644286][ T1113] bond7 (unregistering): (slave bridge3): Releasing active interface [ 1030.644307][ T1113] bond7 (unregistering): (slave bridge3): the permanent HWaddr of slave - 26:33:0a:d0:55:6c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1030.873520][ T1113] bond7 (unregistering): (slave bridge4): Releasing active interface [ 1031.063415][ T1113] bond8 (unregistering): (slave bridge5): Releasing active interface [ 1031.215599][ T1113] bond9 (unregistering): (slave bridge6): Releasing active interface [ 1031.393494][ T1113] bond10 (unregistering): (slave bridge7): Releasing active interface [ 1031.573563][ T1113] bond12 (unregistering): (slave bridge8): Releasing active interface [ 1031.743370][ T1113] bond13 (unregistering): (slave bridge9): Releasing active interface [ 1031.923226][ T1113] bond14 (unregistering): (slave bridge10): Releasing active interface [ 1032.532801][ T5820] Bluetooth: hci3: command tx timeout [ 1032.673293][ T1113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1032.733255][ T1113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1032.755438][ T1113] bond0 (unregistering): Released all slaves [ 1032.768038][ T1113] bond1 (unregistering): Released all slaves [ 1033.523264][ T1113] bond2 (unregistering): Released all slaves [ 1033.533624][ T1113] bond3 (unregistering): Released all slaves [ 1034.304650][ T1113] bond4 (unregistering): Released all slaves [ 1035.103276][ T1113] bond5 (unregistering): Released all slaves [ 1035.112303][ T1113] bond6 (unregistering): Released all slaves [ 1035.128259][ T1113] bond7 (unregistering): Released all slaves [ 1035.140643][ T1113] bond8 (unregistering): Released all slaves [ 1035.156403][ T1113] bond9 (unregistering): Released all slaves [ 1035.178164][ T1113] bond10 (unregistering): Released all slaves [ 1035.953345][ T1113] bond11 (unregistering): Released all slaves [ 1035.962339][ T1113] bond12 (unregistering): Released all slaves [ 1035.979251][ T1113] bond13 (unregistering): Released all slaves [ 1035.991080][ T1113] bond14 (unregistering): Released all slaves [ 1036.245046][T30022] team0: Port device team_slave_0 added [ 1036.245630][ T1113] tipc: Left network mode [ 1036.275867][T30022] team0: Port device team_slave_1 added [ 1036.488975][T30184] netlink: 7 bytes leftover after parsing attributes in process `syz.1.8913'. [ 1036.723702][T30022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1036.723718][T30022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1036.723751][T30022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1036.816148][T30022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1036.816162][T30022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1036.816185][T30022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1037.399822][T30022] hsr_slave_0: entered promiscuous mode [ 1037.401256][T30022] hsr_slave_1: entered promiscuous mode [ 1037.402255][T30022] debugfs: 'hsr0' already exists in 'hsr' [ 1037.402277][T30022] Cannot create hsr debugfs directory [ 1037.450494][T30208] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1037.543481][ T1113] hsr_slave_0: left promiscuous mode [ 1037.583858][ T1113] hsr_slave_1: left promiscuous mode [ 1037.584810][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1037.584830][ T1113] batadv0: mtu less than device minimum [ 1037.608290][ T1113] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1037.647175][ T1113] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1037.684262][ T1113] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1037.706623][ T1113] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1037.729980][ T1113] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1037.793026][ T1113] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1037.847799][ T1113] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1037.898813][ T1113] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1037.937134][ T1113] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1038.025317][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1038.047840][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1038.231477][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1038.246933][ T1113] batman_adv: batadv0: Interface deactivated: dummy0 [ 1038.246958][ T1113] batman_adv: batadv0: Removing interface: dummy0 [ 1038.357117][ T1113] veth1_macvtap: left promiscuous mode [ 1038.357246][ T1113] veth0_macvtap: left promiscuous mode [ 1038.357537][ T1113] veth1_vlan: left promiscuous mode [ 1038.357720][ T1113] veth0_vlan: left promiscuous mode [ 1038.559287][T30239] fuse: Bad value for 'fd' [ 1038.919233][T30250] netlink: 'syz.3.8941': attribute type 1 has an invalid length. [ 1039.052372][T30252] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8941'. [ 1039.376654][T30265] fuse: Bad value for 'fd' [ 1042.103444][ T1113] team0 (unregistering): Port device team_slave_1 removed [ 1042.314056][ T1113] team0 (unregistering): Port device team_slave_0 removed [ 1044.403735][T30250] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1044.746338][T30298] net_ratelimit: 30 callbacks suppressed [ 1044.746357][T30298] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 1044.747177][T30298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8960'. [ 1044.865155][T30304] fuse: Bad value for 'fd' [ 1045.329181][T30327] netlink: 'syz.2.8970': attribute type 1 has an invalid length. [ 1045.449415][T30331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8970'. [ 1045.552074][T30330] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1045.565522][T30330] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 1045.675836][T30341] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8974'. [ 1045.725959][T30331] bond7: (slave bridge6): Enslaving as an active interface with a down link [ 1045.743781][T30336] macvlan2: entered promiscuous mode [ 1045.743806][T30336] macvlan2: entered allmulticast mode [ 1045.745015][T30336] bond7: entered promiscuous mode [ 1045.746040][T30336] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1045.840731][T30346] fuse: Bad value for 'fd' [ 1045.905807][T30336] bond7: left promiscuous mode [ 1045.941613][T30349] fuse: Bad value for 'group_id' [ 1045.941631][T30349] fuse: Bad value for 'group_id' [ 1046.666075][T30374] overlayfs: missing 'workdir' [ 1046.792086][T30377] fuse: Bad value for 'group_id' [ 1046.792106][T30377] fuse: Bad value for 'group_id' [ 1047.130335][T30387] netlink: 'syz.2.8993': attribute type 1 has an invalid length. [ 1047.145112][T30384] overlayfs: failed to clone upperpath [ 1047.278378][T30391] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1047.302564][T30387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8993'. [ 1047.316588][T30390] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1047.317653][T30390] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 1047.562129][T30387] bond8: (slave bridge7): Enslaving as an active interface with a down link [ 1047.629968][T30392] macvlan2: entered promiscuous mode [ 1047.629996][T30392] macvlan2: entered allmulticast mode [ 1047.631005][T30392] bond8: entered promiscuous mode [ 1047.636636][T30392] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1047.736725][T30392] bond8: left promiscuous mode [ 1048.075756][T30399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1048.174626][T30022] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1048.211839][T30022] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1048.253234][T30022] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1048.320169][T30022] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1048.906010][T30022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.001758][T30022] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.067387][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.067530][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.105932][T25273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.106074][T25273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.360412][T30435] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1050.000787][T30022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1050.299605][T30471] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1050.383720][T30473] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1050.383802][T30473] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1050.613032][T30022] veth0_vlan: entered promiscuous mode [ 1050.640368][T30022] veth1_vlan: entered promiscuous mode [ 1050.783038][T30022] veth0_macvtap: entered promiscuous mode [ 1050.808896][T30022] veth1_macvtap: entered promiscuous mode [ 1050.857068][T30022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1050.886306][T30022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1050.911743][T29161] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.911996][T29161] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.912033][T29161] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.912067][T29161] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.294533][T25273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.294553][T25273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.364896][T29161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.364914][T29161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.570697][T30517] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1051.570786][T30517] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1051.953252][T30513] syz.2.9035 (30513) used greatest stack depth: 14808 bytes left [ 1052.665207][T30552] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1052.665277][T30552] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1052.989289][T30562] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 1052.989360][T30562] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1054.446603][ T1321] lec:lec_start_xmit: lec0:No lecd attached [ 1054.488873][T30580] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1055.716711][T30649] fuse: Bad value for 'fd' [ 1055.967174][T30660] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1058.117963][T30695] kvm: apic: phys broadcast and lowest prio [ 1058.381599][T30702] netlink: 'syz.1.9112': attribute type 1 has an invalid length. [ 1058.532095][T30711] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9112'. [ 1058.567049][T30706] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1058.568167][T30706] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1058.706119][T30711] bond5: (slave bridge7): Enslaving as an active interface with a down link [ 1058.778604][T30720] macvlan2: entered promiscuous mode [ 1058.778630][T30720] macvlan2: entered allmulticast mode [ 1058.779644][T30720] bond5: entered promiscuous mode [ 1058.780592][T30720] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1058.926244][T30720] bond5: left promiscuous mode [ 1060.132665][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5690 ms [ 1060.132697][ C0] lec:lec_tx_timeout: lec0 [ 1061.151191][T30812] netlink: 268 bytes leftover after parsing attributes in process `syz.4.9156'. [ 1061.636796][T30833] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.9166'. [ 1066.064237][T30919] kvm: pic: non byte read [ 1066.064653][T30919] kvm: pic: level sensitive irq not supported [ 1066.064717][T30919] kvm: pic: non byte read [ 1066.067447][T30919] kvm: pic: level sensitive irq not supported [ 1066.067504][T30919] kvm: pic: non byte read [ 1066.067719][T30919] kvm: pic: level sensitive irq not supported [ 1066.067769][T30919] kvm: pic: non byte read [ 1066.067979][T30919] kvm: pic: level sensitive irq not supported [ 1066.068028][T30919] kvm: pic: non byte read [ 1066.068773][T30919] kvm: pic: level sensitive irq not supported [ 1066.068823][T30919] kvm: pic: non byte read [ 1066.069033][T30919] kvm: pic: level sensitive irq not supported [ 1066.069081][T30919] kvm: pic: non byte read [ 1066.069291][T30919] kvm: pic: level sensitive irq not supported [ 1066.069344][T30919] kvm: pic: non byte read [ 1066.069722][T30919] kvm: pic: level sensitive irq not supported [ 1066.069777][T30919] kvm: pic: non byte read [ 1066.070037][T30919] kvm: pic: level sensitive irq not supported [ 1066.070086][T30919] kvm: pic: non byte read [ 1066.070350][T30919] kvm: pic: level sensitive irq not supported [ 1067.989081][T30955] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1068.447482][T30981] netlink: 'syz.4.9227': attribute type 6 has an invalid length. [ 1068.447504][T30981] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9227'. [ 1069.176067][T31009] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9239'. [ 1069.178256][T31009] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9239'. [ 1069.203529][T31009] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9239'. [ 1069.267474][T31014] netlink: 'syz.5.9242': attribute type 1 has an invalid length. [ 1069.415268][T31020] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9242'. [ 1069.476443][T31024] ip6_tunnel: non-ECT from 2001:0000:0000:0000:0000:0000:0000:0001 with DS=0x7 [ 1069.611239][T31014] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1069.612303][T31014] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1069.864548][T31020] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 1069.958362][T31025] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 1073.688023][T31192] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9323'. [ 1073.688048][T31192] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1074.748817][T31247] IPv6: sit1: Disabled Multicast RS [ 1075.034827][T31259] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9354'. [ 1075.061118][T31260] ip6_tunnel: non-ECT from 2001:0000:0000:0000:0000:0000:0000:0001 with DS=0x7 [ 1075.553340][T31286] netlink: 124 bytes leftover after parsing attributes in process `syz.5.9365'. [ 1075.560225][T31289] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9366'. [ 1075.698886][T31298] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9369'. [ 1075.735621][T31299] netlink: 88 bytes leftover after parsing attributes in process `syz.5.9370'. [ 1076.096353][T31322] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9381'. [ 1076.961134][T22075] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1076.985951][T22075] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1076.987367][T22075] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1076.989562][T22075] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1076.990438][T22075] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1077.555461][T31376] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9403'. [ 1077.804609][T31350] chnl_net:caif_netlink_parms(): no params data found [ 1078.385275][T31350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.387050][T31350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.387261][T31350] bridge_slave_0: entered allmulticast mode [ 1078.390137][T31350] bridge_slave_0: entered promiscuous mode [ 1078.425324][T31350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.425556][T31350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.425739][T31350] bridge_slave_1: entered allmulticast mode [ 1078.428797][T31350] bridge_slave_1: entered promiscuous mode [ 1079.015351][ T5820] Bluetooth: hci4: command tx timeout [ 1079.218987][T31441] fuse: Unknown parameter '00000000000000000000' [ 1079.634681][T31350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1079.641815][T31350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1079.916888][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.173495][T31350] team0: Port device team_slave_0 added [ 1080.389698][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.445944][T31467] fuse: Unknown parameter '00000000000000000000' [ 1080.501419][T31350] team0: Port device team_slave_1 added [ 1080.557910][T31473] fuse: Unknown parameter '0x0000000000000004' [ 1080.636710][T31480] fuse: Bad value for 'fd' [ 1080.648877][T31481] kvm: apic: phys broadcast and lowest prio [ 1080.961704][T31497] fuse: Unknown parameter '00000000000000000000' [ 1081.092705][ T5820] Bluetooth: hci4: command tx timeout [ 1081.566609][T31504] fuse: Unknown parameter '0x0000000000000004' [ 1081.676348][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.755659][T31350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1081.755693][T31350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1081.755716][T31350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1081.794244][T31350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1081.794260][T31350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1081.794285][T31350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1081.861721][T31516] netlink: 124 bytes leftover after parsing attributes in process `syz.4.9459'. [ 1081.987381][T31524] fuse: Unknown parameter 'user00000000000000000000' [ 1082.320542][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.473452][T31546] fuse: Unknown parameter 'user00000000000000000000' [ 1082.560319][T31548] netlink: 148 bytes leftover after parsing attributes in process `syz.5.9473'. [ 1082.586477][T31551] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9474'. [ 1082.674552][T31557] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9477'. [ 1082.720554][T31350] hsr_slave_0: entered promiscuous mode [ 1082.722341][T31350] hsr_slave_1: entered promiscuous mode [ 1082.734828][T31350] debugfs: 'hsr0' already exists in 'hsr' [ 1082.734851][T31350] Cannot create hsr debugfs directory [ 1083.118524][T31573] fuse: Unknown parameter 'user00000000000000000000' [ 1083.173367][ T5820] Bluetooth: hci4: command tx timeout [ 1083.478698][T31583] fuse: Unknown parameter '0x0000000000000004' [ 1083.635604][ T59] gretap0: left allmulticast mode [ 1083.635632][ T59] gretap0: left promiscuous mode [ 1083.635885][ T59] bridge0: port 3(gretap0) entered disabled state [ 1083.709291][ T59] bridge_slave_1: left allmulticast mode [ 1083.709318][ T59] bridge_slave_1: left promiscuous mode [ 1083.709565][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.793986][ T59] bridge_slave_0: left allmulticast mode [ 1083.794007][ T59] bridge_slave_0: left promiscuous mode [ 1083.794154][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.023273][ T59] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1085.223374][ T59] bond2 (unregistering): (slave bridge2): Releasing active interface [ 1085.252714][ T5820] Bluetooth: hci4: command tx timeout [ 1085.353341][ T59] bond4 (unregistering): (slave bridge3): Releasing active interface [ 1085.553376][ T59] bond5 (unregistering): (slave bridge4): Releasing active interface [ 1085.773432][ T59] bond6 (unregistering): (slave bridge6): Releasing active interface [ 1086.523328][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1086.583224][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1086.626805][ T59] bond0 (unregistering): Released all slaves [ 1086.636778][ T59] bond1 (unregistering): Released all slaves [ 1086.646008][ T59] bond2 (unregistering): Released all slaves [ 1087.353206][ T59] bond3 (unregistering): Released all slaves [ 1087.362158][ T59] bond4 (unregistering): Released all slaves [ 1087.371158][ T59] bond5 (unregistering): Released all slaves [ 1087.381899][ T59] bond6 (unregistering): Released all slaves [ 1087.453743][T31597] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.9495'. [ 1087.485863][T31601] IPv6: sit1: Disabled Multicast RS [ 1087.738969][ T59] tipc: Left network mode [ 1087.748656][T31610] fuse: Unknown parameter '0x0000000000000004' [ 1089.655901][ T59] hsr_slave_0: left promiscuous mode [ 1089.695718][ T59] hsr_slave_1: left promiscuous mode [ 1089.696688][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1089.696707][ T59] batadv0: mtu less than device minimum [ 1089.729386][ T59] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1089.749105][ T59] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1089.768581][ T59] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1089.788123][ T59] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1089.809222][ T59] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1089.828900][ T59] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1089.848612][ T59] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1089.868161][ T59] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1089.887558][ T59] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1090.010551][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.058516][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1090.350413][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.384002][ T59] batman_adv: batadv0: Interface deactivated: dummy0 [ 1090.384028][ T59] batman_adv: batadv0: Removing interface: dummy0 [ 1090.502003][ T59] veth1_macvtap: left promiscuous mode [ 1090.502113][ T59] veth0_macvtap: left promiscuous mode [ 1090.502409][ T59] veth1_vlan: left promiscuous mode [ 1090.518959][ T59] veth0_vlan: left promiscuous mode [ 1092.775716][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1093.024179][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1095.203586][T31680] netlink: 128 bytes leftover after parsing attributes in process `syz.5.9531'. [ 1095.203611][T31680] net_ratelimit: 31 callbacks suppressed [ 1095.203620][T31680] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1095.537046][T31747] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.9558'. [ 1095.589122][T31749] netlink: 148 bytes leftover after parsing attributes in process `syz.4.9559'. [ 1095.666183][T31751] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9560'. [ 1096.746574][T31759] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9562'. [ 1096.746599][T31759] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1096.767352][T31350] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1098.002814][T31350] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1098.201737][T31350] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1098.289764][T31350] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1098.291276][T31773] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.9570'. [ 1098.552547][T31785] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9571'. [ 1098.658507][T31787] ip6_tunnel: non-ECT from 2001:0000:0000:0000:0000:0000:0000:0001 with DS=0x7 [ 1098.713606][T31350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1098.753730][T31350] 8021q: adding VLAN 0 to HW filter on device team0 [ 1098.821902][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.822175][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1098.851262][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.851554][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1099.417044][T31350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1099.873718][T31350] veth0_vlan: entered promiscuous mode [ 1099.895237][T31350] veth1_vlan: entered promiscuous mode [ 1100.004676][T31350] veth0_macvtap: entered promiscuous mode [ 1100.020928][T31350] veth1_macvtap: entered promiscuous mode [ 1100.053578][T31350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1100.079935][T31350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1100.099759][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.100143][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.100183][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.100219][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.652872][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.652894][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.755355][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.755375][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.916664][T31856] netlink: 'syz.2.9593': attribute type 6 has an invalid length. [ 1100.916685][T31856] netlink: 112 bytes leftover after parsing attributes in process `syz.2.9593'. [ 1101.940221][T31900] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9609'. [ 1102.532750][T22075] Bluetooth: hci0: command 0x0406 tx timeout [ 1102.563747][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1102.568734][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1102.571153][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1102.572446][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1102.608442][ T5810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1103.325785][T31926] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.9620'. [ 1103.902225][T31906] chnl_net:caif_netlink_parms(): no params data found [ 1103.933180][T31947] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9626'. [ 1104.298573][T31962] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.9633'. [ 1104.557165][T31906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.557386][T31906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.558052][T31906] bridge_slave_0: entered allmulticast mode [ 1104.561092][T31906] bridge_slave_0: entered promiscuous mode [ 1104.591536][T31906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.591753][T31906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.591949][T31906] bridge_slave_1: entered allmulticast mode [ 1104.628006][T31906] bridge_slave_1: entered promiscuous mode [ 1104.700861][ T5820] Bluetooth: hci2: command tx timeout [ 1104.799853][T31976] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9640'. [ 1105.650630][T31906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1105.904970][ T1179] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.120148][T31906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.305851][T32021] netlink: 'syz.1.9659': attribute type 10 has an invalid length. [ 1106.411436][T32027] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9662'. [ 1106.622822][T31851] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1106.675925][ T1179] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.715603][T31906] team0: Port device team_slave_0 added [ 1106.719385][T31906] team0: Port device team_slave_1 added [ 1106.772880][ T5820] Bluetooth: hci2: command tx timeout [ 1106.777740][T31851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.777776][T31851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1106.777825][T31851] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1106.777848][T31851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.805191][T31851] usb 4-1: config 0 descriptor?? [ 1107.140227][ T1179] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.319673][T31906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1107.319689][T31906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1107.319715][T31906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1107.389256][T31851] steelseries 0003:1038:1410.0001: missing HID_OUTPUT_REPORT 0 [ 1108.429414][T31851] usb 4-1: USB disconnect, device number 2 [ 1108.638196][ T1179] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.717982][T31906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1108.717998][T31906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1108.718026][T31906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1108.853080][ T5820] Bluetooth: hci2: command tx timeout [ 1110.128342][T31906] hsr_slave_0: entered promiscuous mode [ 1110.129718][T31906] hsr_slave_1: entered promiscuous mode [ 1110.933082][ T5820] Bluetooth: hci2: command tx timeout [ 1111.089143][ T1179] bridge_slave_1: left allmulticast mode [ 1111.089168][ T1179] bridge_slave_1: left promiscuous mode [ 1111.090402][ T1179] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.376947][T32087] 9pnet_fd: Insufficient options for proto=fd [ 1111.453515][ T1179] bridge_slave_0: left allmulticast mode [ 1111.453544][ T1179] bridge_slave_0: left promiscuous mode [ 1111.453833][ T1179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.803372][ T1179] bond2 (unregistering): (slave bridge1): Releasing active interface [ 1113.963330][ T1179] bond3 (unregistering): (slave bridge2): Releasing active interface [ 1114.113361][ T1179] bond4 (unregistering): (slave bridge3): Releasing active interface [ 1114.263423][ T1179] bond5 (unregistering): (slave bridge4): Releasing active interface [ 1114.433410][ T1179] bond6 (unregistering): (slave bridge5): Releasing active interface [ 1114.623853][ T1179] bond7 (unregistering): (slave bridge6): Releasing active interface [ 1114.814703][ T1179] bond8 (unregistering): (slave bridge7): Releasing active interface [ 1115.593194][ T1179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1115.633881][ T1179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1115.674995][ T1179] bond0 (unregistering): Released all slaves [ 1115.823767][ T1321] lec:lec_start_xmit: lec0:No lecd attached [ 1116.343141][ T1179] bond1 (unregistering): Released all slaves [ 1116.352184][ T1179] bond2 (unregistering): Released all slaves [ 1116.361203][ T1179] bond3 (unregistering): Released all slaves [ 1116.372101][ T1179] bond4 (unregistering): Released all slaves [ 1116.385452][ T1179] bond5 (unregistering): Released all slaves [ 1116.397508][ T1179] bond6 (unregistering): Released all slaves [ 1116.409644][ T1179] bond7 (unregistering): Released all slaves [ 1116.423189][ T1179] bond8 (unregistering): Released all slaves [ 1116.822761][ T1179] tipc: Left network mode [ 1116.999616][T32117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9695'. [ 1117.456698][T32120] IPv6: sit1: Disabled Multicast RS [ 1119.605818][ T1179] hsr_slave_0: left promiscuous mode [ 1119.654479][ T1179] hsr_slave_1: left promiscuous mode [ 1119.655398][ T1179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1119.655420][ T1179] batadv0: mtu less than device minimum [ 1119.667485][ T1179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1119.711549][ T1179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1119.730786][ T1179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1119.772041][ T1179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1119.819612][ T1179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1119.864584][ T1179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1119.895187][ T1179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1119.927894][ T1179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1119.950261][ T1179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1120.093135][T32170] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9707'. [ 1120.226373][ T1179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1120.293738][ T1179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1120.632756][ T1179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1120.675033][ T1179] batman_adv: batadv0: Interface deactivated: dummy0 [ 1120.675059][ T1179] batman_adv: batadv0: Removing interface: dummy0 [ 1120.800522][ T1179] veth1_macvtap: left promiscuous mode [ 1120.800631][ T1179] veth0_macvtap: left promiscuous mode [ 1120.800901][ T1179] veth1_vlan: left promiscuous mode [ 1120.801085][ T1179] veth0_vlan: left promiscuous mode [ 1120.862708][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 1120.862740][ C0] lec:lec_tx_timeout: lec0 [ 1120.985104][T32178] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.9717'. [ 1127.457734][T32207] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.9727'. [ 1127.720854][T32222] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9736'. [ 1129.303667][ T1179] team0 (unregistering): Port device team_slave_1 removed [ 1129.523657][ T1179] team0 (unregistering): Port device team_slave_0 removed [ 1132.675409][T31906] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1132.778710][T31906] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1132.863016][T31906] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1132.920341][T31906] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1133.402459][T32301] wireguard: wg1: Could not create IPv4 socket [ 1134.607943][T32320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9775'. [ 1134.607970][T32320] net_ratelimit: 30 callbacks suppressed [ 1134.607983][T32320] openvswitch: netlink: Key type 29 is not supported [ 1134.768634][T31906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1134.833327][T31906] 8021q: adding VLAN 0 to HW filter on device team0 [ 1134.847311][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.863053][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1134.869311][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.869391][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1135.219450][ T5818] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1135.301893][ T5818] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1135.547248][T31906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1135.764599][T31906] veth0_vlan: entered promiscuous mode [ 1135.781159][T31906] veth1_vlan: entered promiscuous mode [ 1135.856424][T31906] veth0_macvtap: entered promiscuous mode [ 1135.876349][T31906] veth1_macvtap: entered promiscuous mode [ 1135.911786][T31906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1135.931870][T31906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1135.953832][ T8062] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.954077][ T8062] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.954116][ T8062] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.954151][ T8062] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.334685][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.334706][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.410889][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.410908][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.528761][ T37] audit: type=1326 audit(1762697555.677:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32359 comm="syz.5.9789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15366bf6c9 code=0x7ffc0000 [ 1136.528821][ T37] audit: type=1326 audit(1762697555.677:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32359 comm="syz.5.9789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15366bf6c9 code=0x7ffc0000 [ 1136.528868][ T37] audit: type=1326 audit(1762697555.677:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32359 comm="syz.5.9789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f15366bf6c9 code=0x7ffc0000 [ 1136.574359][T15799] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1136.592825][ T37] audit: type=1326 audit(1762697555.737:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32359 comm="syz.5.9789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15366bf6c9 code=0x7ffc0000 [ 1136.592887][ T37] audit: type=1326 audit(1762697555.737:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32359 comm="syz.5.9789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15366bf6c9 code=0x7ffc0000 [ 1136.592938][ T37] audit: type=1326 audit(1762697555.737:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32359 comm="syz.5.9789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f15366bf6c9 code=0x7ffc0000 [ 1136.592980][ T37] audit: type=1326 audit(1762697555.737:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32359 comm="syz.5.9789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15366bf6c9 code=0x7ffc0000 [ 1136.593023][ T37] audit: type=1326 audit(1762697555.737:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32359 comm="syz.5.9789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f15366bf6c9 code=0x7ffc0000 [ 1136.593065][ T37] audit: type=1326 audit(1762697555.737:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32359 comm="syz.5.9789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15366bf6c9 code=0x7ffc0000 [ 1136.593108][ T37] audit: type=1326 audit(1762697555.737:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32359 comm="syz.5.9789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f15366bf6c9 code=0x7ffc0000 [ 1137.378509][T15799] usb 5-1: Using ep0 maxpacket: 16 [ 1137.386053][T15799] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1137.386080][T15799] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.386101][T15799] usb 5-1: config 0 has no interface number 0 [ 1137.395740][T15799] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 1137.395769][T15799] usb 5-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 1137.395791][T15799] usb 5-1: Product: syz [ 1137.395807][T15799] usb 5-1: Manufacturer: syz [ 1137.395823][T15799] usb 5-1: SerialNumber: syz [ 1137.566941][T15799] usb 5-1: config 0 descriptor?? [ 1137.589356][T15799] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 1137.589790][T15799] uvcvideo 5-1:0.105: Entity type for entity Output 1 was not initialized! [ 1137.598341][T15799] uvcvideo 5-1:0.105: Failed to create links for entity 1 [ 1137.598362][T15799] uvcvideo 5-1:0.105: Failed to register entities (-22). [ 1137.811880][T29417] usb 5-1: USB disconnect, device number 2 [ 1138.117621][T32387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9801'. [ 1140.379154][T32403] wireguard: wg1: Could not create IPv4 socket [ 1140.671177][T32411] netlink: 7 bytes leftover after parsing attributes in process `syz.4.9805'. [ 1140.885037][T32418] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9811'. [ 1141.135349][T32429] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9815'. [ 1141.540191][T32446] fuse: Unknown parameter 'fd0x0000000000000003' [ 1141.620457][T32451] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9826'. [ 1142.388407][T32477] fuse: Unknown parameter 'fd0x0000000000000003' [ 1142.573924][T32485] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9840'. [ 1144.790355][T32503] affs: No valid root block on device nullb0 [ 1145.842872][T32536] netlink: 'syz.5.9860': attribute type 1 has an invalid length. [ 1147.138718][T32540] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1147.139818][T32540] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1147.171717][T32536] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9860'. [ 1147.350834][T32536] bond2: (slave bridge3): Enslaving as an active interface with a down link [ 1147.423378][T32547] bond2: (slave bridge4): Enslaving as an active interface with a down link [ 1147.446022][T32551] macvlan2: entered promiscuous mode [ 1147.446047][T32551] macvlan2: entered allmulticast mode [ 1148.431422][ T5820] Bluetooth: hci1: unexpected event for opcode 0x2005 [ 1148.513276][T32578] netlink: 188 bytes leftover after parsing attributes in process `syz.4.9874'. [ 1148.623822][T32584] netlink: 'syz.1.9877': attribute type 1 has an invalid length. [ 1148.734107][T32588] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1148.735257][T32588] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 1148.736355][T32584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9877'. [ 1149.354859][ T5820] Bluetooth: hci3: command 0x0406 tx timeout [ 1150.140474][T32584] bond6: (slave bridge9): Enslaving as an active interface with a down link [ 1150.447192][T32590] bond6: (slave bridge10): Enslaving as an active interface with a down link [ 1150.489291][T32592] macvlan2: entered promiscuous mode [ 1150.489317][T32592] macvlan2: entered allmulticast mode [ 1151.798010][T32623] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9891'. [ 1152.022321][T32627] netlink: 'syz.4.9892': attribute type 1 has an invalid length. [ 1152.101293][T32627] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1152.102525][T32627] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1152.138046][T32633] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9892'. [ 1152.350403][ T5820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1152.373442][ T5820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1152.376792][ T5820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1152.377981][ T5820] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1152.381163][ T5820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1152.446245][T32633] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 1152.478038][T32634] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 1152.512965][T32639] macvlan2: entered promiscuous mode [ 1152.512991][T32639] macvlan2: entered allmulticast mode [ 1152.572756][T16193] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1152.725175][T16193] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.725210][T16193] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1152.725251][T16193] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 1152.725282][T16193] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.775153][T16193] usb 3-1: config 0 descriptor?? [ 1153.008289][T32636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.009949][T32636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.212546][T32637] chnl_net:caif_netlink_parms(): no params data found [ 1153.288159][T16193] usbhid 3-1:0.0: can't add hid device: -71 [ 1153.300426][T16193] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1153.324737][T16193] usb 3-1: USB disconnect, device number 2 [ 1153.361143][T32659] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9901'. [ 1154.372186][T32684] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9911'. [ 1154.462816][ T5810] Bluetooth: hci5: command tx timeout [ 1154.920627][T32637] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.920838][T32637] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.921086][T32637] bridge_slave_0: entered allmulticast mode [ 1154.944302][T32637] bridge_slave_0: entered promiscuous mode [ 1154.951064][T32637] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.951660][T32637] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.951866][T32637] bridge_slave_1: entered allmulticast mode [ 1154.980623][T32637] bridge_slave_1: entered promiscuous mode [ 1154.994535][T31852] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1155.018259][ T5818] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1155.166403][ T5818] usb 4-1: Using ep0 maxpacket: 16 [ 1155.169229][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.169261][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1155.169286][ T5818] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1155.169328][ T5818] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1155.169352][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.186215][T31852] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 1155.214584][T31852] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1155.214614][T31852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.214634][T31852] usb 3-1: Product: syz [ 1155.214649][T31852] usb 3-1: Manufacturer: syz [ 1155.214664][T31852] usb 3-1: SerialNumber: syz [ 1155.294572][ T5818] usb 4-1: config 0 descriptor?? [ 1155.406953][T31852] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1155.674689][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.880542][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1156.161807][T32691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.162214][T32691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1156.184272][ T5818] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0003/input/input8 [ 1156.185636][T32691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.186090][T32691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1156.188153][T32691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.188502][T32691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1156.191126][T16193] usb 3-1: USB disconnect, device number 3 [ 1156.304646][ T5818] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1156.318482][ T5818] usb 4-1: USB disconnect, device number 3 [ 1156.350475][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.433981][T32637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1156.438337][T32637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1156.532685][ T5810] Bluetooth: hci5: command tx timeout [ 1156.728025][ T5810] Bluetooth: to_multiplier 0 < 10 [ 1156.966971][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.012895][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1157.015951][ T9] ath9k_htc: Failed to initialize the device [ 1157.033980][T32637] team0: Port device team_slave_0 added [ 1157.045297][T16193] usb 3-1: ath9k_htc: USB layer deinitialized [ 1157.098051][T32637] team0: Port device team_slave_1 added [ 1157.352763][T16193] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1157.440270][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.502885][T16193] usb 3-1: Using ep0 maxpacket: 32 [ 1157.505547][T16193] usb 3-1: config index 0 descriptor too short (expected 241, got 72) [ 1157.505606][T16193] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1157.505654][T16193] usb 3-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 1157.505678][T16193] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.523389][T16193] usb 3-1: config 0 descriptor?? [ 1157.540815][T16193] mos7840 3-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1157.679374][T32637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1157.679392][T32637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.679419][T32637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1157.682862][T29417] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1157.687780][T32637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1157.687794][T32637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.687819][T32637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1157.796487][T16193] mos7840 3-1:0.0: probe with driver mos7840 failed with error -71 [ 1157.832756][T29417] usb 5-1: Using ep0 maxpacket: 8 [ 1157.835153][T29417] usb 5-1: config 9 has an invalid interface number: 210 but max is 1 [ 1157.835178][T29417] usb 5-1: config 9 has an invalid interface number: 90 but max is 1 [ 1157.835199][T29417] usb 5-1: config 9 has no interface number 0 [ 1157.835216][T29417] usb 5-1: config 9 has no interface number 1 [ 1157.835284][T29417] usb 5-1: config 9 interface 90 altsetting 2 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1157.835314][T29417] usb 5-1: config 9 interface 210 has no altsetting 0 [ 1157.835334][T29417] usb 5-1: config 9 interface 90 has no altsetting 0 [ 1157.850537][T16193] usb 3-1: USB disconnect, device number 4 [ 1157.856109][T29417] usb 5-1: New USB device found, idVendor=0b05, idProduct=1731, bcdDevice=e4.06 [ 1157.856136][T29417] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.856157][T29417] usb 5-1: Product: syz [ 1157.856171][T29417] usb 5-1: Manufacturer: syz [ 1157.856187][T29417] usb 5-1: SerialNumber: syz [ 1158.087076][T32766] IPv6: sit1: Disabled Multicast RS [ 1158.193992][T32637] hsr_slave_0: entered promiscuous mode [ 1158.196490][T32637] hsr_slave_1: entered promiscuous mode [ 1158.198218][T32637] debugfs: 'hsr0' already exists in 'hsr' [ 1158.198242][T32637] Cannot create hsr debugfs directory [ 1158.282878][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1158.432691][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1158.435224][ T9] usb 4-1: config 0 has an invalid interface number: 149 but max is 0 [ 1158.435250][ T9] usb 4-1: config 0 has no interface number 0 [ 1158.440019][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0450, bcdDevice=2b.ee [ 1158.440048][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.440070][ T9] usb 4-1: Product: syz [ 1158.440086][ T9] usb 4-1: Manufacturer: syz [ 1158.440101][ T9] usb 4-1: SerialNumber: syz [ 1158.542829][ T9] usb 4-1: config 0 descriptor?? [ 1158.570497][T29417] usb 5-1: USB disconnect, device number 3 [ 1158.612756][ T5810] Bluetooth: hci5: command tx timeout [ 1158.696812][ T5810] Bluetooth: hci0: unexpected event for opcode 0x0413 [ 1158.864057][ T12] bridge_slave_1: left allmulticast mode [ 1158.864085][ T12] bridge_slave_1: left promiscuous mode [ 1158.864311][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.924771][ T12] bridge_slave_0: left allmulticast mode [ 1158.924798][ T12] bridge_slave_0: left promiscuous mode [ 1158.925058][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.587586][ T326] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9956'. [ 1160.234334][ T12] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1160.397014][ T336] netlink: 'syz.5.9959': attribute type 6 has an invalid length. [ 1160.397030][ T336] netlink: 104 bytes leftover after parsing attributes in process `syz.5.9959'. [ 1160.514255][ T12] bond2 (unregistering): (slave bridge3): Releasing active interface [ 1160.692781][ T5810] Bluetooth: hci5: command tx timeout [ 1160.803559][ T12] bond3 (unregistering): (slave bridge5): Releasing active interface [ 1160.993935][ T12] bond4 (unregistering): (slave bridge6): Releasing active interface [ 1161.054414][T16193] usb 4-1: USB disconnect, device number 4 [ 1161.199027][ T12] bond5 (unregistering): (slave bridge7): Releasing active interface [ 1161.433364][ T12] bond6 (unregistering): (slave bridge9): Releasing active interface [ 1161.663346][ T12] bond6 (unregistering): (slave bridge10): Releasing active interface [ 1162.503323][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1162.564649][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1162.584894][ T12] bond0 (unregistering): Released all slaves [ 1162.595774][ T12] bond1 (unregistering): Released all slaves [ 1162.609020][ T12] bond2 (unregistering): Released all slaves [ 1162.628434][ T12] bond3 (unregistering): Released all slaves [ 1162.644983][ T12] bond4 (unregistering): Released all slaves [ 1162.660596][ T12] bond5 (unregistering): Released all slaves [ 1162.764358][ T12] bond6 (unregistering): Released all slaves [ 1162.776673][ T5810] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1162.777313][ T5810] Bluetooth: hci0: Injecting HCI hardware error event [ 1162.779670][ T5810] Bluetooth: hci0: hardware error 0x00 [ 1162.816675][ T331] IPv6: sit1: Disabled Multicast RS [ 1162.896468][ T333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9958'. [ 1162.896527][ T334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9958'. [ 1162.951031][ T12] tipc: Left network mode [ 1163.223890][T15799] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1163.392743][T15799] usb 4-1: Using ep0 maxpacket: 32 [ 1163.395202][T15799] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1163.395229][T15799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.427818][T15799] usb 4-1: config 0 descriptor?? [ 1163.487487][T15799] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1163.832036][ T389] openvswitch: netlink: Key type 29 is not supported [ 1164.272899][ T12] hsr_slave_0: left promiscuous mode [ 1164.302967][ T12] hsr_slave_1: left promiscuous mode [ 1164.303923][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1164.303942][ T12] batadv0: mtu less than device minimum [ 1164.311644][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1164.341293][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1164.359695][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1164.377537][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1164.395518][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1164.415957][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1164.436268][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1164.458702][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1164.605043][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1164.624509][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1164.757727][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1164.803445][ T12] batman_adv: batadv0: Interface deactivated: dummy0 [ 1164.803472][ T12] batman_adv: batadv0: Removing interface: dummy0 [ 1164.881714][ T12] veth1_macvtap: left promiscuous mode [ 1164.881779][ T12] veth0_macvtap: left promiscuous mode [ 1164.881987][ T12] veth1_vlan: left promiscuous mode [ 1164.882085][ T12] veth0_vlan: left promiscuous mode [ 1164.926125][T15799] usb 4-1: USB disconnect, device number 5 [ 1164.932811][ T5810] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1167.103214][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1167.334036][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1168.318117][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1168.476538][ T9] usb 3-1: config 0 has no interfaces? [ 1168.476577][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1168.476602][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.479450][ T9] usb 3-1: config 0 descriptor?? [ 1169.789176][ T439] net_ratelimit: 32 callbacks suppressed [ 1169.789197][ T439] openvswitch: netlink: Key type 29 is not supported [ 1170.322719][T31852] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1170.477916][T31852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.477958][T31852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1170.477997][T31852] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 1170.478021][T31852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.527705][T31852] usb 4-1: config 0 descriptor?? [ 1170.749049][ T452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.776428][ T452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1175.580480][T31852] usbhid 4-1:0.0: can't add hid device: -32 [ 1175.580606][T31852] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1175.811145][T31852] usb 4-1: USB disconnect, device number 6 [ 1176.222703][T31852] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1176.387730][T31852] usb 4-1: Using ep0 maxpacket: 16 [ 1176.924925][T31852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1176.924960][T31852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1176.924984][T31852] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1176.925028][T31852] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1176.925052][T31852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.001623][T31852] usb 4-1: config 0 descriptor?? [ 1177.264578][T32637] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1177.285832][ T1321] lec:lec_start_xmit: lec0:No lecd attached [ 1177.845783][T31852] usbhid 4-1:0.0: can't add hid device: -71 [ 1177.845908][T31852] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1177.862788][T31852] usb 4-1: USB disconnect, device number 7 [ 1178.576310][T32637] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1180.307380][T32637] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1180.792681][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1181.012698][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1181.019068][ T9] usb 5-1: config 0 interface 0 altsetting 208 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.019100][ T9] usb 5-1: config 0 interface 0 altsetting 208 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1181.019124][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1181.019159][ T9] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1181.019182][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.081583][ T9] usb 5-1: config 0 descriptor?? [ 1181.541659][ T9] holtek 0003:1241:5015.0004: unknown main item tag 0x0 [ 1181.919204][ T9] holtek 0003:1241:5015.0004: hidraw0: USB HID v0.04 Device [HID 1241:5015] on usb-dummy_hcd.4-1/input0 [ 1181.919238][ T9] holtek 0003:1241:5015.0004: no inputs found [ 1182.312765][ T9] usb 5-1: USB disconnect, device number 4 [ 1182.363380][T32637] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1182.852680][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5570 ms [ 1182.852714][ C0] lec:lec_tx_timeout: lec0 [ 1185.277697][ T528] IPv6: sit1: Disabled Multicast RS [ 1186.582694][T31852] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 1186.783107][T31852] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 1186.783135][T31852] usb 4-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 1186.783156][T31852] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1186.783278][T31852] usb 4-1: config 0 has no interface number 0 [ 1186.783327][T31852] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1186.783348][T31852] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1186.783372][T31852] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 30768, setting to 64 [ 1186.783396][T31852] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1186.812763][T31852] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=67.b7 [ 1186.812792][T31852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.812814][T31852] usb 4-1: Product: syz [ 1186.812829][T31852] usb 4-1: Manufacturer: syz [ 1186.812844][T31852] usb 4-1: SerialNumber: syz [ 1186.932465][T31852] usb 4-1: config 0 descriptor?? [ 1187.017887][ T530] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1187.049986][T31852] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1187.297601][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1187.310041][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1187.313010][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1187.314416][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1187.321041][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1187.484700][T31852] usb 4-1: USB disconnect, device number 8 [ 1188.483932][T15799] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1189.022808][T15799] usb 4-1: Using ep0 maxpacket: 32 [ 1189.025134][T15799] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1189.025159][T15799] usb 4-1: config 0 has no interface number 0 [ 1189.043991][T15799] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1189.044028][T15799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.044049][T15799] usb 4-1: Product: syz [ 1189.044064][T15799] usb 4-1: Manufacturer: syz [ 1189.044079][T15799] usb 4-1: SerialNumber: syz [ 1189.049123][T15799] usb 4-1: config 0 descriptor?? [ 1189.056925][T15799] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1189.439436][ T5810] Bluetooth: hci1: command tx timeout [ 1190.545692][T15799] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1190.559840][T15799] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1190.661741][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1190.747743][ T5818] usb 4-1: USB disconnect, device number 9 [ 1191.367164][ T5818] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1191.394497][T31852] usb 3-1: USB disconnect, device number 5 [ 1191.672817][ T5818] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1191.673601][ T5818] quatech2 4-1:0.51: device disconnected [ 1192.081167][T32637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1192.132673][ T5820] Bluetooth: hci1: command tx timeout [ 1193.757190][T32637] 8021q: adding VLAN 0 to HW filter on device team0 [ 1193.797126][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.802460][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1193.834324][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.834477][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1194.173015][ T531] chnl_net:caif_netlink_parms(): no params data found [ 1194.212670][ T5820] Bluetooth: hci1: command tx timeout [ 1194.662827][ T5772] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1196.956260][ T5820] Bluetooth: hci1: command tx timeout [ 1196.962675][ T5772] usb 4-1: Using ep0 maxpacket: 32 [ 1197.071032][ T5772] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 1197.071059][ T5772] usb 4-1: config 0 has no interface number 0 [ 1197.071113][ T5772] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1197.083950][ T5772] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1197.083978][ T5772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.083999][ T5772] usb 4-1: Product: syz [ 1197.084013][ T5772] usb 4-1: Manufacturer: syz [ 1197.084028][ T5772] usb 4-1: SerialNumber: syz [ 1197.104585][ T5772] usb 4-1: config 0 descriptor?? [ 1197.105767][ T548] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1198.221038][ T5772] asix 4-1:0.188: probe with driver asix failed with error -71 [ 1198.549027][ T5772] usb 4-1: USB disconnect, device number 10 [ 1200.297635][ T5810] Bluetooth: hci4: command 0x0406 tx timeout [ 1204.842107][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1204.865925][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1204.867327][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1204.868592][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1204.869432][ T5810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1207.012785][ T5820] Bluetooth: hci2: command tx timeout [ 1208.442896][ T561] genirq: Flags mismatch irq 32. 00200000 (comedi_parport) vs. 00200000 (virtio1-output.0) [ 1209.092736][ T5820] Bluetooth: hci2: command tx timeout [ 1209.667201][ T531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.667335][ T531] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.667552][ T531] bridge_slave_0: entered allmulticast mode [ 1209.699390][ T531] bridge_slave_0: entered promiscuous mode [ 1209.720812][ T5810] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1209.738359][ T5810] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1209.739775][ T5810] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1209.797249][ T531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.797381][ T531] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.797602][ T531] bridge_slave_1: entered allmulticast mode [ 1209.827709][ T531] bridge_slave_1: entered promiscuous mode [ 1210.215877][ T5810] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1210.216748][ T5810] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1211.202728][ T5810] Bluetooth: hci2: command tx timeout [ 1212.310557][ T5820] Bluetooth: hci6: command tx timeout [ 1212.466588][ T531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1212.519381][ T531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1213.292630][ T5820] Bluetooth: hci2: command tx timeout [ 1214.372745][ T5820] Bluetooth: hci6: command tx timeout [ 1216.452671][ T5820] Bluetooth: hci6: command tx timeout [ 1216.704191][ T531] team0: Port device team_slave_0 added [ 1216.833144][ T531] team0: Port device team_slave_1 added [ 1217.759843][ T5810] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1217.779150][ T5810] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1217.780557][ T5810] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1217.782107][ T5810] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1217.804785][ T5810] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1218.658539][ T5810] Bluetooth: hci6: command tx timeout [ 1219.822725][ T5810] Bluetooth: hci7: command tx timeout [ 1221.892881][ T5810] Bluetooth: hci7: command tx timeout [ 1222.612059][ T531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1222.612076][ T531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1222.612103][ T531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1222.777002][ T531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1222.777020][ T531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1222.777047][ T531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1223.974937][ T5810] Bluetooth: hci7: command tx timeout [ 1226.078790][ T5820] Bluetooth: hci7: command tx timeout [ 1228.265792][ T531] hsr_slave_0: entered promiscuous mode [ 1228.296274][ T531] hsr_slave_1: entered promiscuous mode [ 1228.318681][ T531] debugfs: 'hsr0' already exists in 'hsr' [ 1228.318709][ T531] Cannot create hsr debugfs directory [ 1233.656726][ T5810] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1233.671375][ T5810] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1233.681547][ T5810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1233.690905][ T5810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1233.691740][ T5810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1235.750673][ T5810] Bluetooth: hci3: command tx timeout [ 1237.922721][ T5810] Bluetooth: hci3: command tx timeout [ 1239.958545][ T1321] lec:lec_start_xmit: lec0:No lecd attached [ 1239.975207][ T5810] Bluetooth: hci3: command tx timeout [ 1242.052773][ T5810] Bluetooth: hci3: command tx timeout [ 1244.969265][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1244.969301][ C0] lec:lec_tx_timeout: lec0 [ 1256.216066][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1256.282780][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1256.293546][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1256.295914][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1256.296678][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1258.558111][ T5820] Bluetooth: hci0: command tx timeout [ 1261.247650][ T5820] Bluetooth: hci0: command tx timeout [ 1263.332674][ T5820] Bluetooth: hci0: command tx timeout [ 1265.472630][ T5820] Bluetooth: hci0: command tx timeout [ 1277.713801][ T5810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1277.902871][ T5810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1277.966406][ T5810] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1277.983726][ T5810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1277.988627][ T5810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1282.594648][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1282.608196][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1282.625286][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1282.642807][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1283.079407][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1284.612899][ T5810] Bluetooth: hci1: command tx timeout [ 1285.732831][ T5810] Bluetooth: hci2: command tx timeout [ 1286.693343][ T5810] Bluetooth: hci1: command tx timeout [ 1287.626790][ T5810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1287.682248][ T5810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1287.692394][ T5810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1287.752849][ T5810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1287.781903][ T5810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1287.891775][ T5810] Bluetooth: hci2: command tx timeout [ 1288.773056][ T5820] Bluetooth: hci1: command tx timeout [ 1290.205653][ T5820] Bluetooth: hci2: command tx timeout [ 1290.692783][ T5820] Bluetooth: hci5: command tx timeout [ 1290.852873][ T5820] Bluetooth: hci1: command tx timeout [ 1292.536013][ T5820] Bluetooth: hci2: command tx timeout [ 1292.772982][ T5820] Bluetooth: hci5: command tx timeout [ 1294.852893][ T5820] Bluetooth: hci5: command tx timeout [ 1296.952475][ T5820] Bluetooth: hci5: command tx timeout [ 1300.146422][ T1321] lec:lec_start_xmit: lec0:No lecd attached [ 1303.880224][ T5810] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1303.891190][ T5810] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1303.911325][ T5810] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1303.920007][ T5810] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1303.920805][ T5810] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1305.815130][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms [ 1305.815165][ C0] lec:lec_tx_timeout: lec0 [ 1306.100706][ T5820] Bluetooth: hci6: command tx timeout [ 1308.293181][ T5820] Bluetooth: hci6: command tx timeout [ 1310.378932][ T5820] Bluetooth: hci6: command tx timeout [ 1311.595819][ T5820] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1311.599262][ T5820] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1311.600692][ T5820] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1311.601873][ T5820] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1311.646215][ T5820] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1312.656831][ T5810] Bluetooth: hci6: command tx timeout [ 1313.892770][ T5810] Bluetooth: hci7: command tx timeout [ 1315.972742][ T5810] Bluetooth: hci7: command tx timeout [ 1318.052835][ T5810] Bluetooth: hci7: command tx timeout [ 1320.132671][ T5820] Bluetooth: hci7: command tx timeout [ 1331.266141][ T5810] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1331.269866][ T5810] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1331.271333][ T5810] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1331.297502][ T5810] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1331.314285][ T5810] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1331.968497][ T5820] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1332.178934][ T5820] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1332.194189][ T5820] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1332.233667][ T5820] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1332.234966][ T5820] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1333.422717][ T5810] Bluetooth: hci8: command tx timeout [ 1334.292773][ T5810] Bluetooth: hci9: command tx timeout [ 1335.502677][ T5810] Bluetooth: hci8: command tx timeout [ 1336.372769][ T5810] Bluetooth: hci9: command tx timeout [ 1337.572739][ T5810] Bluetooth: hci8: command tx timeout [ 1338.452996][ T5810] Bluetooth: hci9: command tx timeout [ 1339.652673][ T5810] Bluetooth: hci8: command tx timeout [ 1340.612690][ T5810] Bluetooth: hci9: command tx timeout [ 1342.865394][ T5820] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1342.934694][ T5820] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1343.623712][ T5820] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1344.280157][ T5820] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1344.280980][ T5820] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1346.722723][ T5820] Bluetooth: hci10: command tx timeout [ 1348.905228][ T5820] Bluetooth: hci10: command tx timeout [ 1350.932698][ T5810] Bluetooth: hci10: command tx timeout [ 1353.012812][ T5810] Bluetooth: hci10: command tx timeout [ 1353.253000][ T38] INFO: task syz.3.10048:563 blocked for more than 144 seconds. [ 1353.253040][ T38] Not tainted syzkaller #0 [ 1353.253051][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1353.253061][ T38] task:syz.3.10048 state:D stack:25160 pid:563 tgid:563 ppid:31350 task_flags:0x400040 flags:0x00080003 [ 1353.253132][ T38] Call Trace: [ 1353.253143][ T38] [ 1353.253159][ T38] __schedule+0x16f3/0x4c20 [ 1353.253327][ T38] ? __pfx___schedule+0x10/0x10 [ 1353.253372][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1353.253430][ T38] rt_mutex_schedule+0x77/0xf0 [ 1353.253490][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1353.253513][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1353.253554][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1353.253579][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1353.253601][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1353.253621][ T38] ? __lock_acquire+0xab9/0xd20 [ 1353.253663][ T38] ? rcu_barrier+0x4c/0x570 [ 1353.253706][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1353.253734][ T38] ? rcu_barrier+0x4c/0x570 [ 1353.253752][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1353.253772][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1353.253799][ T38] rcu_barrier+0x4c/0x570 [ 1353.253822][ T38] ? rt_write_unlock+0x191/0x230 [ 1353.253851][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 1353.253899][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 1353.253934][ T38] kvm_put_kvm+0x6ca/0xa80 [ 1353.253978][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 1353.254003][ T38] kvm_vm_release+0x46/0x50 [ 1353.254026][ T38] __fput+0x45b/0xa80 [ 1353.254086][ T38] task_work_run+0x1d4/0x260 [ 1353.254117][ T38] ? __pfx_task_work_run+0x10/0x10 [ 1353.254141][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 1353.254175][ T38] exit_to_user_mode_loop+0xe9/0x130 [ 1353.254201][ T38] do_syscall_64+0x2bd/0xfa0 [ 1353.254279][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1353.254303][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1353.254338][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1353.254361][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1353.254381][ T38] RIP: 0033:0x7f66534cf6c9 [ 1353.254404][ T38] RSP: 002b:00007ffdf04dd7c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1353.254425][ T38] RAX: 0000000000000000 RBX: 00000000001270f6 RCX: 00007f66534cf6c9 [ 1353.254440][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1353.254452][ T38] RBP: 00007f6653727da0 R08: 0000000000000001 R09: 0000000bf04ddabf [ 1353.254467][ T38] R10: 0000001b32120000 R11: 0000000000000246 R12: 00007f6653725fac [ 1353.254487][ T38] R13: 00007f6653725fa0 R14: ffffffffffffffff R15: 00007ffdf04dd8e0 [ 1353.254523][ T38] [ 1353.254548][ T38] [ 1353.254548][ T38] Showing all locks held in the system: [ 1353.254562][ T38] 5 locks held by kworker/u8:0/12: [ 1353.254575][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1353.254627][ T38] #1: ffffc90000117ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1353.254674][ T38] #2: ffffffff8e856420 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 1353.254761][ T38] #3: ffff88803c2ad7b8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x2f0 [ 1353.254877][ T38] #4: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1353.254924][ T38] 4 locks held by rcuc/1/28: [ 1353.254937][ T38] 1 lock held by khungtaskd/38: [ 1353.254948][ T38] #0: ffffffff8d5aa840 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1353.255028][ T38] 2 locks held by getty/5554: [ 1353.255039][ T38] #0: ffff88823bf2c8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1353.255133][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 1353.255220][ T38] 7 locks held by kworker/u8:12/9315: [ 1353.255236][ T38] 5 locks held by kworker/u8:7/25273: [ 1353.255252][ T38] 1 lock held by syz-executor/32637: [ 1353.255264][ T38] #0: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1353.255310][ T38] 1 lock held by syz.2.9999/429: [ 1353.255321][ T38] #0: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1353.255366][ T38] 1 lock held by syz.5.10036/528: [ 1353.255377][ T38] #0: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1353.255422][ T38] 1 lock held by syz-executor/531: [ 1353.255433][ T38] #0: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1353.255484][ T38] 1 lock held by syz.4.10038/534: [ 1353.255496][ T38] #0: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1353.255541][ T38] 1 lock held by syz-executor/558: [ 1353.255552][ T38] #0: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1353.255597][ T38] 1 lock held by syz.3.10048/563: [ 1353.255608][ T38] #0: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1353.255653][ T38] 1 lock held by syz-executor/566: [ 1353.255663][ T38] #0: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1353.255707][ T38] 1 lock held by syz-executor/570: [ 1353.255718][ T38] #0: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1353.255763][ T38] 2 locks held by syz-executor/575: [ 1353.255774][ T38] #0: ffffffff8e856420 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1353.255817][ T38] #1: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1353.255861][ T38] 2 locks held by syz-executor/579: [ 1353.255873][ T38] #0: ffffffff8e856420 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1353.255915][ T38] #1: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1353.255960][ T38] 2 locks held by syz-executor/585: [ 1353.255972][ T38] #0: ffffffff8e856420 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1353.256014][ T38] #1: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1353.256058][ T38] 2 locks held by syz-executor/587: [ 1353.256070][ T38] #0: ffffffff8e856420 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1353.256112][ T38] #1: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1353.256156][ T38] 2 locks held by syz-executor/591: [ 1353.256168][ T38] #0: ffffffff8e856420 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1353.256209][ T38] #1: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1353.256253][ T38] 1 lock held by syz-executor/593: [ 1353.256265][ T38] 2 locks held by syz-executor/596: [ 1353.256277][ T38] #0: ffffffff8e856420 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1353.256319][ T38] #1: ffffffff8e863338 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 1353.256403][ T38] 2 locks held by syz-executor/600: [ 1353.256415][ T38] #0: ffffffff8e856420 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1353.256457][ T38] #1: ffffffff8e863338 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 1353.256580][ T38] 2 locks held by syz-executor/602: [ 1353.256592][ T38] #0: ffffffff8e856420 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1353.256634][ T38] #1: ffffffff8e863338 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 1353.256684][ T38] 2 locks held by syz-executor/606: [ 1353.256695][ T38] 2 locks held by syz-executor/608: [ 1353.256707][ T38] [ 1353.256713][ T38] ============================================= [ 1353.256713][ T38] [ 1353.256724][ T38] NMI backtrace for cpu 0 [ 1353.256749][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1353.256771][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1353.256782][ T38] Call Trace: [ 1353.256790][ T38] [ 1353.256799][ T38] dump_stack_lvl+0x189/0x250 [ 1353.256830][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1353.256857][ T38] ? __pfx__printk+0x10/0x10 [ 1353.256893][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 1353.256944][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1353.256968][ T38] ? __pfx__printk+0x10/0x10 [ 1353.256995][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1353.257030][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1353.257054][ T38] watchdog+0xf60/0xfa0 [ 1353.257091][ T38] ? watchdog+0x1e2/0xfa0 [ 1353.257122][ T38] kthread+0x711/0x8a0 [ 1353.257152][ T38] ? __pfx_watchdog+0x10/0x10 [ 1353.257175][ T38] ? __pfx_kthread+0x10/0x10 [ 1353.257196][ T38] ? rt_spin_unlock+0x150/0x200 [ 1353.257220][ T38] ? rt_spin_unlock+0x161/0x200 [ 1353.257239][ T38] ? __pfx_kthread+0x10/0x10 [ 1353.257265][ T38] ret_from_fork+0x4bc/0x870 [ 1353.257301][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1353.257331][ T38] ? __switch_to_asm+0x39/0x70 [ 1353.257350][ T38] ? __switch_to_asm+0x33/0x70 [ 1353.257367][ T38] ? __pfx_kthread+0x10/0x10 [ 1353.257393][ T38] ret_from_fork_asm+0x1a/0x30 [ 1353.257430][ T38] [ 1353.257438][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1353.257468][ C1] NMI backtrace for cpu 1 [ 1353.257483][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1353.257502][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1353.257512][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x29/0x80 [ 1353.257536][ C1] Code: 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 90 a2 91 65 8b 35 b8 d2 e3 0f 81 e6 00 00 ff 00 ba 00 01 00 00 23 91 4c 0b 00 00 <89> d7 09 f7 74 11 85 f6 75 39 85 d2 74 35 83 b9 14 16 00 00 00 74 [ 1353.257552][ C1] RSP: 0018:ffffc90000a2eb10 EFLAGS: 00000206 [ 1353.257567][ C1] RAX: ffffffff889d919b RBX: 0000000000000140 RCX: ffff88801ba90000 [ 1353.257579][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000154 [ 1353.257591][ C1] RBP: 0000000000000154 R08: 0000000000000000 R09: 0000000000000100 [ 1353.257601][ C1] R10: dffffc0000000000 R11: ffffed100de7ed7d R12: 0000000000000180 [ 1353.257614][ C1] R13: 0000000000000014 R14: ffff888075971140 R15: ffff88806f3f6a40 [ 1353.257626][ C1] FS: 0000000000000000(0000) GS:ffff888126ef7000(0000) knlGS:0000000000000000 [ 1353.257641][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1353.257653][ C1] CR2: 00007f3d3b86745a CR3: 00000000342a6000 CR4: 00000000003526f0 [ 1353.257669][ C1] Call Trace: [ 1353.257675][ C1] [ 1353.257682][ C1] skb_put+0x11b/0x210 [ 1353.257764][ C1] synproxy_send_client_synack+0x2b0/0xe20 [ 1353.257829][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1353.257847][ C1] ? nft_fib_netdev_eval+0x60/0x250 [ 1353.257896][ C1] ? synproxy_pernet+0x45/0x270 [ 1353.257920][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 1353.257945][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1353.257967][ C1] ? nf_ip_checksum+0x13c/0x510 [ 1353.258014][ C1] nft_synproxy_do_eval+0x345/0x570 [ 1353.258037][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1353.258067][ C1] nft_do_chain+0x40c/0x1920 [ 1353.258109][ C1] ? rcu_is_watching+0x15/0xb0 [ 1353.258126][ C1] ? __schedule+0x1709/0x4c20 [ 1353.258151][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1353.258174][ C1] ? finish_task_switch+0x266/0x950 [ 1353.258196][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1353.258227][ C1] ? __schedule+0x1709/0x4c20 [ 1353.258253][ C1] nft_do_chain_inet+0x25d/0x340 [ 1353.258317][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1353.258337][ C1] ? __lock_acquire+0xab9/0xd20 [ 1353.258362][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1353.258378][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1353.258399][ C1] nf_hook_slow+0xc5/0x220 [ 1353.258419][ C1] NF_HOOK+0x206/0x3a0 [ 1353.258435][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1353.258451][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1353.258465][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1353.258479][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1353.258497][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1353.258514][ C1] ? skb_dst+0x4f/0xd0 [ 1353.258529][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 1353.258547][ C1] NF_HOOK+0x30c/0x3a0 [ 1353.258563][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1353.258578][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1353.258592][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1353.258608][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1353.258630][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1353.258644][ C1] __netif_receive_skb+0x143/0x380 [ 1353.258669][ C1] ? process_backlog+0x27b/0x900 [ 1353.258707][ C1] process_backlog+0x31e/0x900 [ 1353.258729][ C1] __napi_poll+0xb6/0x540 [ 1353.258752][ C1] net_rx_action+0x5f7/0xda0 [ 1353.258776][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1353.258794][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1353.258818][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1353.258833][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1353.258859][ C1] handle_softirqs+0x22f/0x710 [ 1353.258888][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1353.258912][ C1] __local_bh_enable_ip+0x1a0/0x2e0 [ 1353.258932][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1353.258956][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 1353.258978][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 1353.258998][ C1] rcu_cpu_kthread+0xc3d/0x1b50 [ 1353.259023][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 1353.259051][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 1353.259074][ C1] ? __lock_acquire+0xab9/0xd20 [ 1353.259094][ C1] ? __pfx___schedule+0x10/0x10 [ 1353.259121][ C1] ? schedule+0x91/0x360 [ 1353.259144][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1353.259163][ C1] smpboot_thread_fn+0x542/0xa60 [ 1353.259183][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1353.259207][ C1] kthread+0x711/0x8a0 [ 1353.259234][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1353.259253][ C1] ? __pfx_kthread+0x10/0x10 [ 1353.259273][ C1] ? rt_spin_unlock+0x150/0x200 [ 1353.259293][ C1] ? rt_spin_unlock+0x161/0x200 [ 1353.259309][ C1] ? __pfx_kthread+0x10/0x10 [ 1353.259330][ C1] ret_from_fork+0x4bc/0x870 [ 1353.259350][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1353.259372][ C1] ? __switch_to_asm+0x39/0x70 [ 1353.259388][ C1] ? __switch_to_asm+0x33/0x70 [ 1353.259403][ C1] ? __pfx_kthread+0x10/0x10 [ 1353.259425][ C1] ret_from_fork_asm+0x1a/0x30 [ 1353.259450][ C1] [ 1358.702948][ T5820] Bluetooth: hci3: command 0x0406 tx timeout [ 1361.970522][ T1321] lec:lec_start_xmit: lec0:No lecd attached