last executing test programs: 25.990112035s ago: executing program 3 (id=1405): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xa}, {}, {0x8, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 23.39749808s ago: executing program 4 (id=1409): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0x3, 0xfff9}, {0x2, 0x3}}}, 0x24}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x48881}, 0x40484d4) 22.701395921s ago: executing program 1 (id=1410): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, 0x0, 0x0, r0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00'}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) 20.875732505s ago: executing program 1 (id=1411): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000300)) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x40000004}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xff, 0x4, 0x69, 0xc9fa, 0x3}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 19.971952s ago: executing program 4 (id=1414): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x3, &(0x7f0000000a00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)}], 0x1}}], 0x1, 0x4000800) 19.057880035s ago: executing program 2 (id=1415): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) 19.045776821s ago: executing program 4 (id=1416): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r6 = io_uring_setup(0x1273, &(0x7f0000000000)={0x0, 0x697f, 0x800, 0x1, 0x10001}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x40, r5, 0x1, 0x0, 0x200004, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) 18.994821742s ago: executing program 1 (id=1417): r0 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, 0x0) prlimit64(0x0, 0x8, 0x0, &(0x7f0000000000)) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x5, 0x4000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001200)=[{0x0}], 0x1}}], 0x2, 0x60, 0x0) ptrace(0x10, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, 0x0, 0x0}, 0x94) syz_open_dev$sndpcmc(0x0, 0x1, 0x0) socket$inet(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x7, &(0x7f0000000180)=""/57) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) 16.972280225s ago: executing program 2 (id=1419): r0 = socket(0xa, 0x802, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000000c0)={0xfffffff8}, 0x4) setsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0) 16.258087544s ago: executing program 1 (id=1420): r0 = socket(0xa, 0x802, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015001100511b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000000c0)={0xfffffff8}, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 14.843088068s ago: executing program 1 (id=1421): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x808}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000300000020"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 14.031494501s ago: executing program 3 (id=1422): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000005e44f954c6b311a854a7ce673b46342911d1f0619eb513229688763fe15f0d4aa096c02e25cced2fcbf03a1058b204cd4e661b715479c92805e4805e1a6a5d8a1eef6226761d487dae961904dfa2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r0, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x307000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$unix(0x1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 13.860955715s ago: executing program 4 (id=1423): openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="12010000bdd7130870270c936a8d0102030109021200019800"/36], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}]}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r4, 0x8}, &(0x7f00000000c0)=0x8) r5 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b40)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x24040084) 13.615059268s ago: executing program 0 (id=1425): r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close(r0) 13.493940033s ago: executing program 0 (id=1426): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x10) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200f9ffffff0006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 13.217025028s ago: executing program 0 (id=1427): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000300)) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x40000004}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xff, 0x4, 0x69, 0xc9fa, 0x3}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 11.321561675s ago: executing program 2 (id=1428): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xfffa, 0x0, @loopback, 0x2}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r1, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 11.114218925s ago: executing program 3 (id=1429): r0 = socket(0xa, 0x802, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 11.073357637s ago: executing program 0 (id=1430): bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) syz_init_net_socket$ax25(0x3, 0x2, 0xc3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e22, 0x3, 'ovf\x00', 0x1, 0x10000b7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x3}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) 9.106198131s ago: executing program 3 (id=1431): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000040)=0x110460, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c58200000080", 0x9) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, 0x0) mmap$xdp(&(0x7f00000a6000/0x4000)=nil, 0x4000, 0x200000d, 0x11, r4, 0x100000000) close(0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) 9.004591147s ago: executing program 4 (id=1432): r0 = socket(0xa, 0x802, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 6.656273437s ago: executing program 1 (id=1433): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r6 = io_uring_setup(0x1273, &(0x7f0000000000)={0x0, 0x697f, 0x800, 0x1, 0x10001}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x40, r5, 0x1, 0x0, 0x200004, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) 5.96795202s ago: executing program 4 (id=1434): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socketpair(0xa, 0x6, 0x4, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x40000004}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xff, 0x4, 0x69, 0xc9fa, 0x3}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.596450695s ago: executing program 2 (id=1435): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 4.334766573s ago: executing program 2 (id=1436): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x20004010) iopl(0x3) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) fsmount(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) munlock(&(0x7f0000543000/0x1000)=nil, 0x1000) 4.236095919s ago: executing program 0 (id=1437): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x10) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200f9ffffff0006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2.08918224s ago: executing program 2 (id=1438): bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) syz_init_net_socket$ax25(0x3, 0x2, 0xc3) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e22, 0x3, 'ovf\x00', 0x1, 0x10000b7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x3}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = socket$inet(0x2, 0x80000, 0x1103) setsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="01000000000046c8db000c0e49a4715a960000fd09000084000000052300008cbbc7e4acf3ba1399471601feb581d6df3975fd6d0756892da258b3721332eb26de5d20b1a1412601a8ef36db2a4c3a591bf3e70856e5787753c669ad654ff417c7933e1670f6a1fe6bdf596cb668f5151d53e34736955ab0e4918bd8ba0130e430b490b2ee7489ed675a9f26a716a68f3154abc34c29ffec75e1bab6dc2fd8233b3b118ba68a7dd39c95459b7e6b33008a8592d81b2485f6ec62941540fce502677f0a83342d7dacd99f48bbb7374348235f67c875364207bb807265d25ebfe77ec0a8e560c77071ca92af3488d7156eaddf885816982b41d34a650e61804343", @ANYRES32, @ANYRES8=r0], 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') 1.845687964s ago: executing program 3 (id=1439): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, 0x0, 0x0, r0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00'}) 1.777481784s ago: executing program 0 (id=1440): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000300)) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x40000004}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xff, 0x4, 0x69, 0xc9fa, 0x3}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 3 (id=1441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x2008c010) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.145' (ED25519) to the list of known hosts. [ 90.413296][ T5785] cgroup: Unknown subsys name 'net' [ 90.654543][ T5785] cgroup: Unknown subsys name 'cpuset' [ 90.749640][ T5785] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.091580][ T43] cfg80211: failed to load regulatory.db [ 92.844345][ T5785] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.228504][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.239421][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.244017][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.246404][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.247482][ T5117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.428612][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.439986][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.446896][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.447348][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.448014][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.460622][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.465765][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.468212][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.480227][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.482602][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.538959][ T5117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.541994][ T5117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.573246][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.576129][ T5799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.583261][ T5799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.605068][ T5816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.607119][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.634854][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.636907][ T5799] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.637964][ T5799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.382279][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 96.512016][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 96.641457][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 96.764851][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 96.841953][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.843078][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.843482][ T5797] bridge_slave_0: entered allmulticast mode [ 96.845440][ T5797] bridge_slave_0: entered promiscuous mode [ 96.898654][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 96.926988][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.927119][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.927325][ T5797] bridge_slave_1: entered allmulticast mode [ 96.936404][ T5797] bridge_slave_1: entered promiscuous mode [ 97.046825][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.046996][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.047121][ T5804] bridge_slave_0: entered allmulticast mode [ 97.050570][ T5804] bridge_slave_0: entered promiscuous mode [ 97.127745][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.127835][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.127974][ T5804] bridge_slave_1: entered allmulticast mode [ 97.135392][ T5804] bridge_slave_1: entered promiscuous mode [ 97.163500][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.230771][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.231052][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.231254][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.231425][ T5802] bridge_slave_0: entered allmulticast mode [ 97.234061][ T5802] bridge_slave_0: entered promiscuous mode [ 97.275378][ T5799] Bluetooth: hci0: command tx timeout [ 97.319368][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.319502][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.319631][ T5802] bridge_slave_1: entered allmulticast mode [ 97.321404][ T5802] bridge_slave_1: entered promiscuous mode [ 97.469744][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.505881][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.506737][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.507082][ T5805] bridge_slave_0: entered allmulticast mode [ 97.519110][ T5799] Bluetooth: hci3: command tx timeout [ 97.535249][ T5805] bridge_slave_0: entered promiscuous mode [ 97.567364][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.578761][ T5797] team0: Port device team_slave_0 added [ 97.589130][ T5799] Bluetooth: hci1: command tx timeout [ 97.607532][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.607666][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.607835][ T5805] bridge_slave_1: entered allmulticast mode [ 97.617579][ T5805] bridge_slave_1: entered promiscuous mode [ 97.672984][ T5797] team0: Port device team_slave_1 added [ 97.676565][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.705152][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.705447][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.705578][ T5803] bridge_slave_0: entered allmulticast mode [ 97.707366][ T5803] bridge_slave_0: entered promiscuous mode [ 97.749193][ T5816] Bluetooth: hci4: command tx timeout [ 97.749502][ T5799] Bluetooth: hci2: command tx timeout [ 97.766177][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.791234][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.791365][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.791544][ T5803] bridge_slave_1: entered allmulticast mode [ 97.793686][ T5803] bridge_slave_1: entered promiscuous mode [ 97.798329][ T5804] team0: Port device team_slave_0 added [ 97.862294][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.888097][ T5804] team0: Port device team_slave_1 added [ 97.895073][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.895086][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.895107][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.949405][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.983977][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.983991][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.984011][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.986488][ T5802] team0: Port device team_slave_0 added [ 98.041853][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.083492][ T5802] team0: Port device team_slave_1 added [ 98.105066][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.105858][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.105869][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.105890][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.168264][ T5805] team0: Port device team_slave_0 added [ 98.194595][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.194608][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.194629][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.255295][ T5805] team0: Port device team_slave_1 added [ 98.303896][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.303909][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.303929][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.355736][ T5803] team0: Port device team_slave_0 added [ 98.381812][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.381825][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.381845][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.435025][ T5803] team0: Port device team_slave_1 added [ 98.447215][ T5797] hsr_slave_0: entered promiscuous mode [ 98.448399][ T5797] hsr_slave_1: entered promiscuous mode [ 98.840737][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.840750][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.840771][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.927023][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.927037][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.927058][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.029405][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.029426][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.029455][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.037565][ T5804] hsr_slave_0: entered promiscuous mode [ 99.038583][ T5804] hsr_slave_1: entered promiscuous mode [ 99.048435][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 99.048751][ T5804] Cannot create hsr debugfs directory [ 99.109802][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.109820][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.109850][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.196040][ T5802] hsr_slave_0: entered promiscuous mode [ 99.197008][ T5802] hsr_slave_1: entered promiscuous mode [ 99.197694][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 99.197728][ T5802] Cannot create hsr debugfs directory [ 99.296655][ T5805] hsr_slave_0: entered promiscuous mode [ 99.297638][ T5805] hsr_slave_1: entered promiscuous mode [ 99.303109][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 99.303206][ T5805] Cannot create hsr debugfs directory [ 99.348950][ T5799] Bluetooth: hci0: command tx timeout [ 99.421452][ T5803] hsr_slave_0: entered promiscuous mode [ 99.422519][ T5803] hsr_slave_1: entered promiscuous mode [ 99.423179][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 99.423211][ T5803] Cannot create hsr debugfs directory [ 99.589121][ T5799] Bluetooth: hci3: command tx timeout [ 99.669161][ T5799] Bluetooth: hci1: command tx timeout [ 99.829058][ T5816] Bluetooth: hci4: command tx timeout [ 99.829190][ T5799] Bluetooth: hci2: command tx timeout [ 100.275085][ T5797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.308167][ T5797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.345424][ T5797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.401341][ T5797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.513567][ T5804] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.565276][ T5804] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.604017][ T5804] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.664451][ T5804] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.808187][ T5802] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.842566][ T5802] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.877317][ T5802] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.911892][ T5802] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.074998][ T5805] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.119345][ T5805] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.152934][ T5805] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.206890][ T5805] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.297394][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.345455][ T5803] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.388431][ T5803] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.430527][ T5799] Bluetooth: hci0: command tx timeout [ 101.447098][ T5803] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.473801][ T5803] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.531912][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.578340][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.581131][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.624681][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.625085][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.656984][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.669186][ T5799] Bluetooth: hci3: command tx timeout [ 101.749007][ T5799] Bluetooth: hci1: command tx timeout [ 101.751462][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.774713][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.807952][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.808094][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.874190][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.874340][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.909775][ T5799] Bluetooth: hci2: command tx timeout [ 101.909782][ T5816] Bluetooth: hci4: command tx timeout [ 101.940102][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.005177][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.005270][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.033693][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.062308][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.062523][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.163318][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.187177][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.235761][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.259064][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.300661][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.300905][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.367461][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.427875][ T3469] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.428087][ T3469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.477236][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.494426][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.494607][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.821134][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.883623][ T5797] veth0_vlan: entered promiscuous mode [ 102.944085][ T5797] veth1_vlan: entered promiscuous mode [ 102.990969][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.105880][ T5804] veth0_vlan: entered promiscuous mode [ 103.178391][ T5804] veth1_vlan: entered promiscuous mode [ 103.197822][ T5797] veth0_macvtap: entered promiscuous mode [ 103.225981][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.226967][ T5797] veth1_macvtap: entered promiscuous mode [ 103.312435][ T5802] veth0_vlan: entered promiscuous mode [ 103.316758][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.327329][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.376091][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.405195][ T5802] veth1_vlan: entered promiscuous mode [ 103.407186][ T5804] veth0_macvtap: entered promiscuous mode [ 103.436728][ T1109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.461058][ T1109] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.468633][ T1109] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.491151][ T5804] veth1_macvtap: entered promiscuous mode [ 103.498031][ T1109] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.509134][ T5799] Bluetooth: hci0: command tx timeout [ 103.611491][ T5805] veth0_vlan: entered promiscuous mode [ 103.695676][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.749007][ T5799] Bluetooth: hci3: command tx timeout [ 103.753439][ T5805] veth1_vlan: entered promiscuous mode [ 103.795563][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.829213][ T5802] veth0_macvtap: entered promiscuous mode [ 103.830173][ T5799] Bluetooth: hci1: command tx timeout [ 103.839934][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.877983][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.890122][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.892275][ T5802] veth1_macvtap: entered promiscuous mode [ 103.916524][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.942588][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.942616][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.989915][ T5799] Bluetooth: hci4: command tx timeout [ 103.989929][ T5816] Bluetooth: hci2: command tx timeout [ 104.134109][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.204860][ T3532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.204884][ T3532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.226165][ T5805] veth0_macvtap: entered promiscuous mode [ 104.248940][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.319078][ T5803] veth0_vlan: entered promiscuous mode [ 104.322076][ T5805] veth1_macvtap: entered promiscuous mode [ 104.351662][ T1109] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.367790][ T1109] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.382272][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.382295][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.383333][ T1109] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.387228][ T1109] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.447571][ T5803] veth1_vlan: entered promiscuous mode [ 104.568523][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.600466][ T3532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.600490][ T3532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.683086][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.715391][ T5916] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 104.801934][ T89] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.803042][ T89] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.803091][ T89] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.803130][ T89] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.105568][ T5918] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 105.206335][ T3572] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.243133][ T3572] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.247052][ T3572] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.248410][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.248430][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.290899][ T5803] veth0_macvtap: entered promiscuous mode [ 105.332631][ T5922] netlink: 'syz.0.6': attribute type 4 has an invalid length. [ 105.354820][ T44] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.455404][ T5803] veth1_macvtap: entered promiscuous mode [ 105.549150][ T3532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.549170][ T3532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.964193][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.094551][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.116703][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.116726][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.174849][ T69] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.209238][ T69] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.277664][ T69] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.301042][ T69] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.505018][ T785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.505042][ T785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.114078][ T3114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.114106][ T3114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.307119][ T5951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'. [ 107.365840][ T5951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'. [ 107.465326][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.465349][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.465805][ T3572] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.495718][ T5951] Zero length message leads to an empty skb [ 107.497123][ T3572] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.498120][ T3572] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.498170][ T3572] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.011637][ T5961] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 108.011664][ T5961] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5'. [ 108.260312][ T5959] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.260351][ T5959] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.442994][ T5961] team0: Failed to send options change via netlink (err -105) [ 108.443033][ T5961] team0: Port device geneve0 added [ 108.771521][ T5959] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.771563][ T5959] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.308162][ T5959] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.308204][ T5959] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.011124][ T5959] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.011166][ T5959] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.365875][ T5987] tipc: Started in network mode [ 110.365915][ T5987] tipc: Node identity f6f808cd1e96, cluster identity 4711 [ 110.366906][ T5987] tipc: Enabled bearer , priority 0 [ 110.417118][ T1109] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.417158][ T1109] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.417695][ T5987] syzkaller0: entered promiscuous mode [ 110.417719][ T5987] syzkaller0: entered allmulticast mode [ 110.821856][ T5987] tipc: Resetting bearer [ 110.839625][ T1161] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.839667][ T1161] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.922309][ T3469] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.922355][ T3469] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.083957][ T5986] tipc: Resetting bearer [ 111.119873][ T5993] netlink: 40 bytes leftover after parsing attributes in process `syz.3.29'. [ 111.240168][ T5986] tipc: Disabling bearer [ 111.610455][ T89] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.610484][ T89] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.610620][ T5993] netlink: 40 bytes leftover after parsing attributes in process `syz.3.29'. [ 111.616174][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.678603][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.885001][ T6035] netlink: 'syz.1.43': attribute type 4 has an invalid length. [ 113.940599][ T6036] netlink: 'syz.1.43': attribute type 4 has an invalid length. [ 115.078162][ T6053] netlink: 'syz.0.51': attribute type 10 has an invalid length. [ 115.078186][ T6053] netlink: 40 bytes leftover after parsing attributes in process `syz.0.51'. [ 115.172612][ T6055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.50'. [ 115.367040][ T6053] team0: Port device geneve0 added [ 115.799291][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.898776][ T6073] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.033118][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 116.062486][ T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 116.062518][ T9] usb 1-1: config 0 has no interface number 0 [ 116.062574][ T9] usb 1-1: config 0 interface 184 has no altsetting 0 [ 116.098664][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 116.098696][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.098716][ T9] usb 1-1: Product: syz [ 116.098730][ T9] usb 1-1: Manufacturer: syz [ 116.098744][ T9] usb 1-1: SerialNumber: syz [ 116.175012][ T9] usb 1-1: config 0 descriptor?? [ 116.319749][ T9] smsc75xx v1.0.0 [ 116.814016][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 116.814049][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 117.020119][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 117.020153][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 117.020176][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 117.020761][ T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 118.296765][ T6094] netlink: 40 bytes leftover after parsing attributes in process `syz.3.64'. [ 118.314399][ T6094] netlink: 28 bytes leftover after parsing attributes in process `syz.3.64'. [ 118.547836][ T31] usb 1-1: USB disconnect, device number 2 [ 118.762913][ T5957] Set syz1 is full, maxelem 65536 reached [ 118.832222][ T6101] netlink: 'syz.4.68': attribute type 4 has an invalid length. [ 119.219354][ T6112] netlink: 'syz.3.73': attribute type 39 has an invalid length. [ 119.331995][ T6117] netlink: 40 bytes leftover after parsing attributes in process `syz.4.76'. [ 119.519411][ T6120] netlink: 28 bytes leftover after parsing attributes in process `syz.4.76'. [ 119.678968][ T1232] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 119.829151][ T1232] usb 3-1: Using ep0 maxpacket: 32 [ 119.846623][ T1232] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 119.846655][ T1232] usb 3-1: config 0 has no interface number 0 [ 119.846725][ T1232] usb 3-1: config 0 interface 184 has no altsetting 0 [ 119.877713][ T1232] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 119.877745][ T1232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.877766][ T1232] usb 3-1: Product: syz [ 119.877780][ T1232] usb 3-1: Manufacturer: syz [ 119.877795][ T1232] usb 3-1: SerialNumber: syz [ 119.925301][ T1232] usb 3-1: config 0 descriptor?? [ 119.938749][ T1232] smsc75xx v1.0.0 [ 120.568617][ T1232] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 120.568738][ T1232] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 120.803333][ T1232] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 120.803369][ T1232] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 120.803392][ T1232] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 120.803698][ T1232] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 121.026592][ T6145] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.86'. [ 121.406969][ T6148] team_slave_0: entered promiscuous mode [ 121.407030][ T6148] team_slave_1: entered promiscuous mode [ 121.407077][ T6148] geneve0: entered promiscuous mode [ 121.432224][ T6148] vlan2: entered promiscuous mode [ 121.432250][ T6148] team0: entered promiscuous mode [ 121.554290][ T6151] netlink: 40 bytes leftover after parsing attributes in process `syz.3.88'. [ 121.579692][ T6151] netlink: 28 bytes leftover after parsing attributes in process `syz.3.88'. [ 121.728180][ T6153] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.89'. [ 122.467897][ T5929] usb 3-1: USB disconnect, device number 2 [ 122.881279][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.100'. [ 122.881299][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.100'. [ 124.183216][ T6219] __nla_validate_parse: 2 callbacks suppressed [ 124.183238][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'. [ 124.183258][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'. [ 124.183274][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'. [ 124.230034][ T6219] netlink: 28 bytes leftover after parsing attributes in process `syz.0.115'. [ 124.252507][ T6210] syzkaller0: entered promiscuous mode [ 124.252538][ T6210] syzkaller0: entered allmulticast mode [ 125.743780][ T6265] tipc: Started in network mode [ 125.743804][ T6265] tipc: Node identity 4246, cluster identity 4711 [ 125.743818][ T6265] tipc: Node number set to 16966 [ 125.784458][ T6266] netlink: 'syz.3.131': attribute type 4 has an invalid length. [ 126.136118][ T6274] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 126.526625][ T6274] netlink: 'syz.2.135': attribute type 2 has an invalid length. [ 128.386111][ T6274] !: entered promiscuous mode [ 129.096269][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.148'. [ 129.096296][ T6315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.148'. [ 129.119351][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.148'. [ 129.119375][ T6315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.148'. [ 130.000714][ T6337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.156'. [ 130.651802][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 130.651829][ T6350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.160'. [ 131.009482][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 131.009507][ T6350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.160'. [ 131.179228][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'. [ 132.313693][ T6379] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.173'. [ 132.313910][ T6379] netlink: ct family unspecified [ 132.482011][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.176'. [ 132.857002][ T6391] netlink: 40 bytes leftover after parsing attributes in process `syz.4.178'. [ 133.289095][ T6391] netlink: 40 bytes leftover after parsing attributes in process `syz.4.178'. [ 133.289222][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.343243][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.211572][ T89] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.244714][ T89] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.244773][ T89] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.244814][ T89] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.378422][ T6419] netlink: 'syz.0.188': attribute type 10 has an invalid length. [ 134.567692][ T6421] debugfs: 'netdev:nicvf0' already exists in 'phy3' [ 134.665371][ T6426] tipc: Started in network mode [ 134.665408][ T6426] tipc: Node identity 6e0929f2aeb9, cluster identity 4711 [ 134.665616][ T6426] tipc: Enabled bearer , priority 0 [ 134.666773][ T6426] syzkaller0: entered promiscuous mode [ 134.666798][ T6426] syzkaller0: entered allmulticast mode [ 135.298633][ T6430] tipc: Resetting bearer [ 135.524659][ T6440] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.524691][ T6440] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.619618][ T6425] tipc: Resetting bearer [ 135.763932][ T6425] tipc: Disabling bearer [ 135.891283][ T5810] tipc: Node number set to 3232770546 [ 136.071432][ T6440] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.071464][ T6440] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.201729][ T6448] syzkaller0: entered promiscuous mode [ 136.201756][ T6448] syzkaller0: entered allmulticast mode [ 136.398666][ T6440] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.398697][ T6440] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.792844][ T6440] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.792874][ T6440] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.021680][ T6462] Bluetooth: MGMT ver 1.23 [ 137.299941][ T6467] team_slave_0: entered promiscuous mode [ 137.300002][ T6467] team_slave_1: entered promiscuous mode [ 137.300339][ T6467] vlan2: entered promiscuous mode [ 137.300356][ T6467] team0: entered promiscuous mode [ 137.750502][ T1161] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.750541][ T1161] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.888007][ T3572] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.888045][ T3572] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.013384][ T785] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.013425][ T785] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.108659][ T785] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.108698][ T785] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.166578][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.166649][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.872564][ T6507] __nla_validate_parse: 6 callbacks suppressed [ 138.872586][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.217'. [ 139.118691][ T6502] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.118735][ T6502] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.549665][ T6502] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.549708][ T6502] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.961451][ T6502] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.961493][ T6502] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.430654][ T6502] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.430697][ T6502] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.494557][ T6540] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.233'. [ 140.494696][ T6540] netlink: ct family unspecified [ 140.675177][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.236'. [ 140.971042][ T3572] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.971081][ T3572] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.049982][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.050022][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.145670][ T811] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.145711][ T811] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.204386][ T811] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.204425][ T811] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.344746][ T5816] Bluetooth: hci4: link tx timeout [ 141.345041][ T5816] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.374409][ T5799] Bluetooth: hci4: link tx timeout [ 141.374437][ T5799] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.411883][ T5799] Bluetooth: hci4: link tx timeout [ 141.411904][ T5799] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.412038][ T5799] Bluetooth: hci4: link tx timeout [ 141.412052][ T5799] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.615018][ T6568] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.247'. [ 141.615169][ T6568] netlink: ct family unspecified [ 141.731216][ T6571] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.248'. [ 141.875911][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.249'. [ 142.192204][ T5799] Bluetooth: hci4: link tx timeout [ 142.192226][ T5799] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.192362][ T5799] Bluetooth: hci4: link tx timeout [ 142.192375][ T5799] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.234096][ T5799] Bluetooth: hci4: link tx timeout [ 142.234118][ T5799] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.236353][ T5799] Bluetooth: hci4: link tx timeout [ 142.236372][ T5799] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.407052][ T6592] tipc: Enabled bearer , priority 0 [ 142.411038][ T6592] syzkaller0: entered promiscuous mode [ 142.411108][ T6592] syzkaller0: entered allmulticast mode [ 142.683099][ T6592] tipc: Resetting bearer [ 142.686375][ T6605] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.262'. [ 142.749724][ T6591] tipc: Resetting bearer [ 142.920088][ T6591] tipc: Disabling bearer [ 143.102220][ T6610] team_slave_0: entered promiscuous mode [ 143.102262][ T6610] team_slave_1: entered promiscuous mode [ 143.102411][ T6610] vlan2: entered promiscuous mode [ 143.102422][ T6610] team0: entered promiscuous mode [ 143.102853][ T6610] geneve0: entered promiscuous mode [ 143.136792][ T6621] netlink: 'syz.1.267': attribute type 4 has an invalid length. [ 143.357988][ T5799] Bluetooth: hci4: command 0x0406 tx timeout [ 143.869672][ T6638] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.273'. [ 145.148936][ T6655] lo speed is unknown, defaulting to 1000 [ 145.152854][ T6655] lo speed is unknown, defaulting to 1000 [ 145.212270][ T6655] lo speed is unknown, defaulting to 1000 [ 145.325447][ T6655] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 145.608180][ T6655] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 145.696163][ T6655] lo speed is unknown, defaulting to 1000 [ 145.700241][ T6655] lo speed is unknown, defaulting to 1000 [ 145.706370][ T6655] lo speed is unknown, defaulting to 1000 [ 145.709243][ T6655] lo speed is unknown, defaulting to 1000 [ 145.713727][ T6655] lo speed is unknown, defaulting to 1000 [ 145.724556][ T6655] lo speed is unknown, defaulting to 1000 [ 146.009582][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'. [ 146.841125][ T6682] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.290'. [ 146.841281][ T6682] netlink: ct family unspecified [ 147.338100][ T6701] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.298'. [ 147.443899][ T6704] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.443942][ T6704] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.641994][ T6704] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.642037][ T6704] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.909253][ T5810] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 147.969250][ T6704] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.969294][ T6704] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.023791][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.308'. [ 148.023816][ T6724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.308'. [ 148.062193][ T5810] usb 1-1: Using ep0 maxpacket: 8 [ 148.086208][ T6282] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.086260][ T6282] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.086300][ T6282] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.086339][ T6282] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.089012][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.308'. [ 148.089032][ T6724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.308'. [ 148.129275][ T5810] usb 1-1: config 152 has an invalid descriptor of length 0, skipping remainder of the config [ 148.129383][ T5810] usb 1-1: config 152 has 0 interfaces, different from the descriptor's value: 1 [ 148.147472][ T5810] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 148.147569][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.147625][ T5810] usb 1-1: Product: syz [ 148.147666][ T5810] usb 1-1: Manufacturer: syz [ 148.147708][ T5810] usb 1-1: SerialNumber: syz [ 148.363649][ T6704] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.363689][ T6704] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.749208][ T3572] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.749246][ T3572] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.824802][ T6745] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.317'. [ 148.850336][ T3469] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.850375][ T3469] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.883420][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.303'. [ 148.919328][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.303'. [ 149.011840][ T6743] lo speed is unknown, defaulting to 1000 [ 149.050804][ T3114] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.050842][ T3114] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.111203][ T3114] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.111242][ T3114] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.115428][ T6750] tipc: Started in network mode [ 149.115462][ T6750] tipc: Node identity 9672d1fa4b4a, cluster identity 4711 [ 149.115666][ T6750] tipc: Enabled bearer , priority 0 [ 149.117116][ T6750] syzkaller0: entered promiscuous mode [ 149.117140][ T6750] syzkaller0: entered allmulticast mode [ 149.300864][ T6750] tipc: Resetting bearer [ 149.341697][ T6749] tipc: Resetting bearer [ 149.511777][ T6749] tipc: Disabling bearer [ 149.667618][ T6771] netlink: 'syz.2.328': attribute type 4 has an invalid length. [ 150.135213][ T3100] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.136198][ T3100] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.136247][ T3100] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.136296][ T3100] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.649382][ T5808] usb 1-1: USB disconnect, device number 3 [ 150.897726][ T6797] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.897757][ T6797] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.015389][ T6807] tipc: Enabled bearer , priority 0 [ 151.017560][ T6807] syzkaller0: entered promiscuous mode [ 151.017586][ T6807] syzkaller0: entered allmulticast mode [ 151.271911][ T6817] netlink: 'syz.2.346': attribute type 4 has an invalid length. [ 151.340857][ T6797] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.340903][ T6797] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.404807][ T6807] tipc: Resetting bearer [ 151.439350][ T6803] tipc: Resetting bearer [ 151.569921][ T6803] tipc: Disabling bearer [ 151.820789][ T6797] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.820833][ T6797] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.111868][ T6797] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.111910][ T6797] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.351229][ T5810] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 152.352164][ T6832] __nla_validate_parse: 8 callbacks suppressed [ 152.352182][ T6832] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.353'. [ 152.451339][ T3469] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.451379][ T3469] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.452874][ T6834] syzkaller0: entered promiscuous mode [ 152.452892][ T6834] syzkaller0: entered allmulticast mode [ 152.498960][ T5810] usb 3-1: Using ep0 maxpacket: 8 [ 152.502075][ T5810] usb 3-1: config 152 has an invalid descriptor of length 0, skipping remainder of the config [ 152.502106][ T5810] usb 3-1: config 152 has 0 interfaces, different from the descriptor's value: 1 [ 152.559020][ T5810] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 152.559054][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.559086][ T5810] usb 3-1: Product: syz [ 152.559103][ T5810] usb 3-1: Manufacturer: syz [ 152.559118][ T5810] usb 3-1: SerialNumber: syz [ 152.636095][ T6839] netlink: 40 bytes leftover after parsing attributes in process `syz.1.356'. [ 152.660658][ T6282] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.660697][ T6282] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.903937][ T3572] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.903976][ T3572] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.947000][ T6282] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.947039][ T6282] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.140420][ T6852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.351'. [ 153.163399][ T6852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.351'. [ 153.165861][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.351'. [ 153.263833][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'. [ 153.263858][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.351'. [ 153.727399][ T6864] siw: device registration error -23 [ 154.631110][ T6869] netlink: 28 bytes leftover after parsing attributes in process `syz.4.367'. [ 154.865002][ T6874] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 155.163616][ T6003] usb 3-1: USB disconnect, device number 3 [ 155.849391][ T6900] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.380'. [ 156.286857][ T6921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.390'. [ 156.287415][ T6924] netlink: 'syz.2.389': attribute type 12 has an invalid length. [ 156.388728][ T6917] netlink: 'syz.2.389': attribute type 3 has an invalid length. [ 157.407110][ T6924] Set syz1 is full, maxelem 65536 reached [ 157.557047][ T6957] __nla_validate_parse: 1 callbacks suppressed [ 157.557070][ T6957] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.406'. [ 157.557200][ T6957] netlink: ct family unspecified [ 157.643593][ T6962] tipc: Enabled bearer , priority 0 [ 157.644732][ T6962] syzkaller0: entered promiscuous mode [ 157.644758][ T6962] syzkaller0: entered allmulticast mode [ 157.821766][ T6962] tipc: Resetting bearer [ 157.859397][ T6960] tipc: Resetting bearer [ 157.979011][ T1232] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 157.980652][ T6960] tipc: Disabling bearer [ 158.110346][ T6973] syzkaller0: entered promiscuous mode [ 158.110368][ T6973] syzkaller0: entered allmulticast mode [ 158.129198][ T1232] usb 2-1: Using ep0 maxpacket: 32 [ 158.141278][ T1232] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 158.141310][ T1232] usb 2-1: config 0 has no interface number 0 [ 158.141362][ T1232] usb 2-1: config 0 interface 184 has no altsetting 0 [ 158.171525][ T1232] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 158.171559][ T1232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.171581][ T1232] usb 2-1: Product: syz [ 158.171598][ T1232] usb 2-1: Manufacturer: syz [ 158.171613][ T1232] usb 2-1: SerialNumber: syz [ 158.203886][ T1232] usb 2-1: config 0 descriptor?? [ 158.247628][ T1232] smsc75xx v1.0.0 [ 158.581595][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.417'. [ 158.855870][ T1232] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 158.855905][ T1232] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 159.023332][ T6982] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.023375][ T6982] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.467262][ T1232] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 159.467288][ T1232] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 159.467303][ T1232] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 159.467516][ T1232] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 159.680433][ T6003] usb 2-1: USB disconnect, device number 2 [ 159.730589][ T6982] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.730632][ T6982] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.867235][ T7012] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.867265][ T7012] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.221036][ T6982] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.221067][ T6982] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.314940][ T7012] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.314971][ T7012] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.412936][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.428'. [ 160.576716][ T6982] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.576747][ T6982] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.716662][ T7024] tipc: Enabled bearer , priority 0 [ 160.776254][ T7012] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.776285][ T7012] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.831199][ T7022] tipc: Resetting bearer [ 160.951258][ T7012] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.951299][ T7012] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.024652][ T7026] syzkaller0: entered promiscuous mode [ 161.024681][ T7026] syzkaller0: entered allmulticast mode [ 161.207968][ T7020] tipc: Resetting bearer [ 161.289855][ T7020] tipc: Disabling bearer [ 161.420001][ T3572] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.420039][ T3572] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.484504][ T3572] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.484541][ T3572] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.545690][ T1109] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.545727][ T1109] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.634211][ T1109] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.634250][ T1109] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.679770][ T3572] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.683599][ T3572] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.745492][ T3572] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.745538][ T3572] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.856623][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.856660][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.898950][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.898988][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.057258][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.436'. [ 162.057284][ T7050] netlink: 24 bytes leftover after parsing attributes in process `syz.4.436'. [ 162.057548][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.436'. [ 162.057565][ T7050] netlink: 24 bytes leftover after parsing attributes in process `syz.4.436'. [ 162.346400][ T7061] tipc: Enabled bearer , priority 0 [ 162.347104][ T7061] syzkaller0: entered promiscuous mode [ 162.347120][ T7061] syzkaller0: entered allmulticast mode [ 162.373812][ T7061] tipc: Resetting bearer [ 162.443968][ T7059] tipc: Resetting bearer [ 162.478946][ T5810] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 162.520844][ T7059] tipc: Disabling bearer [ 162.638993][ T5810] usb 3-1: Using ep0 maxpacket: 32 [ 162.650884][ T5810] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 162.650962][ T5810] usb 3-1: config 0 has no interface number 0 [ 162.651108][ T5810] usb 3-1: config 0 interface 184 has no altsetting 0 [ 162.710725][ T5810] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 162.710760][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.710782][ T5810] usb 3-1: Product: syz [ 162.710798][ T5810] usb 3-1: Manufacturer: syz [ 162.710814][ T5810] usb 3-1: SerialNumber: syz [ 162.775617][ T5810] usb 3-1: config 0 descriptor?? [ 162.842782][ T5810] smsc75xx v1.0.0 [ 163.461514][ T5810] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 163.463123][ T5810] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 163.501580][ T7073] tipc: Enabled bearer , priority 0 [ 163.530974][ T7073] tipc: Resetting bearer [ 163.661388][ T7072] tipc: Disabling bearer [ 164.070146][ T5810] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 164.070170][ T5810] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 164.070185][ T5810] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 164.070389][ T5810] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 164.197510][ T7086] netlink: 'syz.0.446': attribute type 3 has an invalid length. [ 164.197535][ T7086] netlink: 3 bytes leftover after parsing attributes in process `syz.0.446'. [ 164.285587][ T6002] usb 3-1: USB disconnect, device number 4 [ 164.705863][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.449'. [ 164.705888][ T7091] netlink: 24 bytes leftover after parsing attributes in process `syz.1.449'. [ 164.706151][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.449'. [ 164.706168][ T7091] netlink: 24 bytes leftover after parsing attributes in process `syz.1.449'. [ 165.037419][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.452'. [ 166.458863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.458940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.459031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.459123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.459225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.459303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.908393][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'. [ 166.908412][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.463'. [ 167.154536][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'. [ 167.154564][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.463'. [ 167.350372][ T7130] tipc: Enabled bearer , priority 0 [ 167.367984][ T7130] syzkaller0: entered promiscuous mode [ 167.368020][ T7130] syzkaller0: entered allmulticast mode [ 167.406598][ T7130] tipc: Resetting bearer [ 167.715415][ T7129] tipc: Resetting bearer [ 167.960541][ T7129] tipc: Disabling bearer [ 169.664148][ T7174] tipc: Enabled bearer , priority 0 [ 169.665200][ T7174] syzkaller0: entered promiscuous mode [ 169.665224][ T7174] syzkaller0: entered allmulticast mode [ 169.747497][ T7174] tipc: Resetting bearer [ 169.831880][ T7173] tipc: Resetting bearer [ 169.971015][ T7173] tipc: Disabling bearer [ 170.509014][ T7188] __nla_validate_parse: 2 callbacks suppressed [ 170.509036][ T7188] netlink: 61963 bytes leftover after parsing attributes in process `syz.4.484'. [ 170.519260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 171.461966][ T7199] netlink: 28 bytes leftover after parsing attributes in process `syz.2.489'. [ 171.495445][ T7197] bond_slave_0: entered promiscuous mode [ 171.495503][ T7197] bond_slave_1: entered promiscuous mode [ 171.497857][ T7197] vlan2: entered promiscuous mode [ 171.497879][ T7197] bond0: entered promiscuous mode [ 171.847248][ T7083] Set syz1 is full, maxelem 65536 reached [ 172.091130][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.494'. [ 172.282107][ T7217] netlink: 61963 bytes leftover after parsing attributes in process `syz.3.496'. [ 172.818835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 172.819893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 172.819947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 172.826227][ T7230] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 172.826574][ T7230] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 172.834695][ T7230] vhci_hcd vhci_hcd.0: Device attached [ 173.107434][ T7231] vhci_hcd: connection closed [ 173.132441][ T785] vhci_hcd vhci_hcd.1: stop threads [ 173.133091][ T785] vhci_hcd vhci_hcd.1: release socket [ 173.160494][ T785] vhci_hcd vhci_hcd.1: disconnect device [ 173.418337][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'. [ 175.012916][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 175.276315][ T7284] tipc: Enabled bearer , priority 0 [ 175.286167][ T7278] syzkaller0: entered promiscuous mode [ 175.286196][ T7278] syzkaller0: entered allmulticast mode [ 175.317695][ T7278] tipc: Resetting bearer [ 175.356064][ T7277] tipc: Resetting bearer [ 175.729889][ T7277] tipc: Disabling bearer [ 175.833814][ T7291] siw: device registration error -23 [ 176.906812][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.527'. [ 177.379441][ T7316] syzkaller0: entered promiscuous mode [ 177.379473][ T7316] syzkaller0: entered allmulticast mode [ 177.430154][ T7319] bond_slave_0: entered promiscuous mode [ 177.430213][ T7319] bond_slave_1: entered promiscuous mode [ 177.430398][ T7319] vlan2: entered promiscuous mode [ 177.430414][ T7319] bond0: entered promiscuous mode [ 177.536796][ T7331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.537'. [ 177.925908][ T7335] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.539'. [ 178.528915][ T809] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 178.587100][ T7357] lo speed is unknown, defaulting to 1000 [ 178.679123][ T809] usb 5-1: Using ep0 maxpacket: 32 [ 178.683221][ T809] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 178.683250][ T809] usb 5-1: config 0 has no interface number 0 [ 178.683300][ T809] usb 5-1: config 0 interface 184 has no altsetting 0 [ 178.717568][ T809] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 178.717600][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.717622][ T809] usb 5-1: Product: syz [ 178.717638][ T809] usb 5-1: Manufacturer: syz [ 178.717654][ T809] usb 5-1: SerialNumber: syz [ 178.783936][ T809] usb 5-1: config 0 descriptor?? [ 178.810984][ T809] smsc75xx v1.0.0 [ 178.919025][ T6003] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 179.088900][ T6003] usb 3-1: Using ep0 maxpacket: 32 [ 179.094248][ T6003] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 179.094279][ T6003] usb 3-1: config 0 has no interface number 0 [ 179.095588][ T6003] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 179.106754][ T6003] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 179.106842][ T6003] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.106865][ T6003] usb 3-1: Product: syz [ 179.106883][ T6003] usb 3-1: Manufacturer: syz [ 179.106899][ T6003] usb 3-1: SerialNumber: syz [ 179.246686][ T6003] usb 3-1: config 0 descriptor?? [ 179.256089][ T7366] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 179.407482][ T809] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 179.407570][ T809] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 179.462936][ T7366] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 179.677763][ T6003] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 179.678332][ T6003] asix 3-1:0.188: probe with driver asix failed with error -32 [ 179.711021][ T7384] tipc: Enabled bearer , priority 0 [ 179.718416][ T7386] syzkaller0: entered promiscuous mode [ 179.718444][ T7386] syzkaller0: entered allmulticast mode [ 179.773848][ T7388] tipc: Started in network mode [ 179.773940][ T7388] tipc: Node identity 0e9f32a0ed41, cluster identity 4711 [ 179.777040][ T7388] tipc: Enabled bearer , priority 0 [ 179.967832][ T7392] syzkaller0: entered promiscuous mode [ 179.967854][ T7392] syzkaller0: entered allmulticast mode [ 180.014328][ T809] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 180.014353][ T809] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 180.014368][ T809] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 180.016253][ T809] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 180.101648][ T7397] tipc: Resetting bearer [ 180.113564][ T7393] tipc: Resetting bearer [ 180.159456][ T7387] tipc: Resetting bearer [ 180.216988][ T5889] usb 5-1: USB disconnect, device number 2 [ 180.289890][ T7387] tipc: Disabling bearer [ 180.469397][ T7382] tipc: Resetting bearer [ 180.590227][ T7414] netlink: 'syz.1.569': attribute type 39 has an invalid length. [ 180.608180][ T7382] tipc: Disabling bearer [ 180.753460][ T7405] tipc: Enabled bearer , priority 0 [ 180.962425][ T7415] tipc: Resetting bearer [ 181.061252][ T7403] tipc: Disabling bearer [ 181.179688][ T7419] syzkaller0: entered promiscuous mode [ 181.179718][ T7419] syzkaller0: entered allmulticast mode [ 181.338153][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.579'. [ 181.338185][ T7439] netlink: 20 bytes leftover after parsing attributes in process `syz.0.579'. [ 181.431874][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.579'. [ 181.431901][ T7439] netlink: 20 bytes leftover after parsing attributes in process `syz.0.579'. [ 181.545200][ T7444] netlink: 48 bytes leftover after parsing attributes in process `syz.0.581'. [ 181.698271][ T6003] usb 3-1: USB disconnect, device number 5 [ 182.026740][ T7464] tipc: Enabled bearer , priority 0 [ 182.054914][ T7462] tipc: Resetting bearer [ 182.165343][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.591'. [ 182.207337][ T7460] tipc: Disabling bearer [ 182.386008][ T7470] syzkaller0: entered promiscuous mode [ 182.386035][ T7470] syzkaller0: entered allmulticast mode [ 182.841661][ T6003] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 182.939337][ T7492] tipc: Enabled bearer , priority 0 [ 182.976209][ T7488] tipc: Resetting bearer [ 182.998986][ T6003] usb 2-1: Using ep0 maxpacket: 32 [ 183.001246][ T6003] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 183.001276][ T6003] usb 2-1: config 0 has no interface number 0 [ 183.001331][ T6003] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 183.005814][ T6003] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 183.005846][ T6003] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.005869][ T6003] usb 2-1: Product: syz [ 183.005886][ T6003] usb 2-1: Manufacturer: syz [ 183.005903][ T6003] usb 2-1: SerialNumber: syz [ 183.089512][ T6003] usb 2-1: config 0 descriptor?? [ 183.090708][ T7486] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 183.153066][ T7495] syzkaller0: entered promiscuous mode [ 183.153097][ T7495] syzkaller0: entered allmulticast mode [ 183.189402][ T7487] tipc: Resetting bearer [ 183.315106][ T7486] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 183.351174][ T7487] tipc: Disabling bearer [ 183.516419][ T6003] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 183.516716][ T6003] asix 2-1:0.188: probe with driver asix failed with error -32 [ 185.398893][ T809] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 185.568965][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 185.572230][ T809] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 185.572260][ T809] usb 1-1: config 0 has no interface number 0 [ 185.572312][ T809] usb 1-1: config 0 interface 184 has no altsetting 0 [ 185.586543][ T809] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 185.586638][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.586697][ T809] usb 1-1: Product: syz [ 185.586740][ T809] usb 1-1: Manufacturer: syz [ 185.586785][ T809] usb 1-1: SerialNumber: syz [ 185.646221][ T809] usb 1-1: config 0 descriptor?? [ 185.658968][ T809] smsc75xx v1.0.0 [ 185.705125][ T5889] usb 2-1: USB disconnect, device number 3 [ 186.390250][ T809] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 186.390283][ T809] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 186.520998][ T7576] siw: device registration error -23 [ 187.430048][ T809] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 187.430086][ T809] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 187.430117][ T809] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 187.430489][ T809] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 187.638701][ T1232] usb 1-1: USB disconnect, device number 4 [ 187.869316][ T809] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 187.895569][ T7594] netlink: 36 bytes leftover after parsing attributes in process `syz.4.639'. [ 188.039279][ T809] usb 2-1: Using ep0 maxpacket: 32 [ 188.045272][ T809] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 188.045303][ T809] usb 2-1: config 0 has no interface number 0 [ 188.045361][ T809] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 188.109488][ T809] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 188.109524][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.109545][ T809] usb 2-1: Product: syz [ 188.109561][ T809] usb 2-1: Manufacturer: syz [ 188.109577][ T809] usb 2-1: SerialNumber: syz [ 188.168932][ T809] usb 2-1: config 0 descriptor?? [ 188.173580][ T7587] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 188.403222][ T7587] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 188.520444][ T7601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.642'. [ 188.604452][ T809] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 188.604743][ T809] asix 2-1:0.188: probe with driver asix failed with error -61 [ 188.934966][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.647'. [ 189.069421][ T7621] netlink: 28 bytes leftover after parsing attributes in process `syz.4.649'. [ 189.432971][ T7627] netlink: 36 bytes leftover after parsing attributes in process `syz.0.651'. [ 189.818909][ T809] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 189.859895][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.657'. [ 189.979543][ T809] usb 3-1: Using ep0 maxpacket: 32 [ 190.010773][ T809] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 190.010807][ T809] usb 3-1: config 0 has no interface number 0 [ 190.010861][ T809] usb 3-1: config 0 interface 184 has no altsetting 0 [ 190.040566][ T809] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 190.040599][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.040620][ T809] usb 3-1: Product: syz [ 190.040635][ T809] usb 3-1: Manufacturer: syz [ 190.040651][ T809] usb 3-1: SerialNumber: syz [ 190.046355][ T809] usb 3-1: config 0 descriptor?? [ 190.105836][ T809] smsc75xx v1.0.0 [ 190.761970][ T809] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 190.762006][ T809] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 190.964465][ T7645] siw: device registration error -23 [ 191.009810][ T1232] usb 2-1: USB disconnect, device number 4 [ 191.161071][ T7652] tipc: Enabled bearer , priority 0 [ 191.168358][ T7652] syzkaller0: entered promiscuous mode [ 191.168386][ T7652] syzkaller0: entered allmulticast mode [ 191.217402][ T7451] Set syz1 is full, maxelem 65536 reached [ 191.303292][ T7653] tipc: Resetting bearer [ 191.307841][ T7655] netlink: 36 bytes leftover after parsing attributes in process `syz.0.663'. [ 191.365876][ T809] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 191.365910][ T809] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 191.365933][ T809] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 191.366234][ T809] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 191.414070][ T7651] tipc: Resetting bearer [ 191.559933][ T7651] tipc: Disabling bearer [ 191.579376][ T809] usb 3-1: USB disconnect, device number 6 [ 191.907611][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.670'. [ 192.316349][ T7692] netlink: 40 bytes leftover after parsing attributes in process `syz.3.676'. [ 192.371912][ T5816] Bluetooth: hci4: link tx timeout [ 192.371935][ T5816] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 192.469667][ T5799] Bluetooth: hci4: link tx timeout [ 192.469698][ T5799] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 192.665163][ T7700] siw: device registration error -23 [ 193.583385][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.683'. [ 193.651953][ T5799] Bluetooth: hci4: link tx timeout [ 193.651975][ T5799] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 193.652132][ T5799] Bluetooth: hci4: link tx timeout [ 193.652145][ T5799] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 193.652219][ T5799] Bluetooth: hci4: link tx timeout [ 193.652232][ T5799] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 193.657484][ T7710] tipc: Enabled bearer , priority 0 [ 193.658681][ T7710] syzkaller0: entered promiscuous mode [ 193.658706][ T7710] syzkaller0: entered allmulticast mode [ 193.754436][ T7710] tipc: Resetting bearer [ 193.797108][ T7708] tipc: Resetting bearer [ 193.902692][ T7708] tipc: Disabling bearer [ 194.023222][ T5799] Bluetooth: hci4: link tx timeout [ 194.023244][ T5799] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 194.023989][ T5799] Bluetooth: hci4: link tx timeout [ 194.024005][ T5799] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 194.484192][ T7747] netlink: 40 bytes leftover after parsing attributes in process `syz.4.696'. [ 194.549614][ T5799] Bluetooth: hci4: command 0x0406 tx timeout [ 194.727300][ T7751] siw: device registration error -23 [ 196.029047][ T7771] netlink: 40 bytes leftover after parsing attributes in process `syz.1.707'. [ 197.707807][ T7815] netlink: 'syz.3.720': attribute type 4 has an invalid length. [ 197.749697][ T7810] netlink: 20 bytes leftover after parsing attributes in process `syz.2.718'. [ 197.770323][ T7816] netlink: 'syz.3.720': attribute type 4 has an invalid length. [ 199.595117][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.595190][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.595668][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.733'. [ 199.839191][ T7855] netlink: 20 bytes leftover after parsing attributes in process `syz.3.732'. [ 208.841428][ T7911] netlink: 61963 bytes leftover after parsing attributes in process `syz.1.748'. [ 209.199155][ T7924] netlink: 20 bytes leftover after parsing attributes in process `syz.0.752'. [ 209.348918][ T7930] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.755'. [ 209.436559][ T7936] netlink: 40 bytes leftover after parsing attributes in process `syz.3.756'. [ 209.547217][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.759'. [ 210.751650][ T7958] netlink: 20 bytes leftover after parsing attributes in process `syz.3.763'. [ 213.718145][ T8025] netlink: 'syz.1.787': attribute type 12 has an invalid length. [ 213.828900][ T8030] netlink: 'syz.1.787': attribute type 3 has an invalid length. [ 213.828926][ T8030] netlink: 3 bytes leftover after parsing attributes in process `syz.1.787'. [ 214.165319][ T8044] netlink: 176 bytes leftover after parsing attributes in process `syz.4.792'. [ 215.568889][ T6004] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 215.718908][ T6004] usb 1-1: Using ep0 maxpacket: 32 [ 215.724110][ T6004] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 215.724141][ T6004] usb 1-1: config 0 has no interface number 0 [ 215.724195][ T6004] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 215.727155][ T6004] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 215.727184][ T6004] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.727206][ T6004] usb 1-1: Product: syz [ 215.727222][ T6004] usb 1-1: Manufacturer: syz [ 215.727238][ T6004] usb 1-1: SerialNumber: syz [ 215.804711][ T6004] usb 1-1: config 0 descriptor?? [ 215.805628][ T8052] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 216.016415][ T8052] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 216.218243][ T6004] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 216.218529][ T6004] asix 1-1:0.188: probe with driver asix failed with error -61 [ 217.537946][ T8089] netlink: 40 bytes leftover after parsing attributes in process `syz.3.806'. [ 217.765617][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.808'. [ 218.924232][ T5810] usb 1-1: USB disconnect, device number 5 [ 219.932785][ T8122] netlink: 40 bytes leftover after parsing attributes in process `syz.2.817'. [ 220.500802][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.822'. [ 222.156147][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 222.156175][ T8125] Bluetooth: hci0: command 0x0406 tx timeout [ 222.159015][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 222.159069][ T8125] Bluetooth: hci1: command 0x0406 tx timeout [ 223.252125][ T8178] netlink: 164 bytes leftover after parsing attributes in process `syz.3.834'. [ 223.944813][ T8193] debugfs: 'netdev:nicvf0' already exists in 'phy3' [ 224.687028][ T8206] netlink: 164 bytes leftover after parsing attributes in process `syz.2.845'. [ 224.856887][ T8211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.846'. [ 225.523436][ T8222] syzkaller0: entered promiscuous mode [ 225.523465][ T8222] syzkaller0: entered allmulticast mode [ 225.745622][ T8025] Set syz1 is full, maxelem 65536 reached [ 225.900142][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.852'. [ 225.900170][ T8238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.852'. [ 225.901317][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.852'. [ 225.901338][ T8238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.852'. [ 226.091250][ T8242] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.857'. [ 227.399569][ T8278] netlink: 164 bytes leftover after parsing attributes in process `syz.3.870'. [ 228.465087][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.878'. [ 228.465959][ T8304] team_slave_0: entered promiscuous mode [ 228.466011][ T8304] team_slave_1: entered promiscuous mode [ 228.466179][ T8304] vlan2: entered promiscuous mode [ 228.466194][ T8304] team0: entered promiscuous mode [ 228.681103][ T8313] netlink: 164 bytes leftover after parsing attributes in process `syz.0.881'. [ 228.850637][ T8054] Set syz1 is full, maxelem 65536 reached [ 229.468039][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.891'. [ 229.571948][ T8348] netlink: 164 bytes leftover after parsing attributes in process `syz.2.893'. [ 229.755895][ T8352] lo speed is unknown, defaulting to 1000 [ 231.429020][ T8385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.905'. [ 231.979853][ T8399] netlink: 20 bytes leftover after parsing attributes in process `syz.4.912'. [ 232.048922][ T5810] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 232.198931][ T5810] usb 1-1: Using ep0 maxpacket: 32 [ 232.205218][ T5810] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 232.205249][ T5810] usb 1-1: config 0 has no interface number 0 [ 232.205302][ T5810] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 232.209528][ T5810] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 232.209591][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.209614][ T5810] usb 1-1: Product: syz [ 232.209631][ T5810] usb 1-1: Manufacturer: syz [ 232.209647][ T5810] usb 1-1: SerialNumber: syz [ 232.300872][ T8415] lo speed is unknown, defaulting to 1000 [ 232.381549][ T5810] usb 1-1: config 0 descriptor?? [ 232.383431][ T8401] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 232.386400][ T8420] netlink: 'syz.4.918': attribute type 39 has an invalid length. [ 232.592271][ T8401] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 233.528086][ T5810] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 233.528379][ T5810] asix 1-1:0.188: probe with driver asix failed with error -61 [ 234.154374][ T8442] netlink: 20 bytes leftover after parsing attributes in process `syz.4.926'. [ 234.245942][ T8444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.927'. [ 234.307016][ T8444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.372010][ T8446] bond1: entered allmulticast mode [ 234.665365][ T8451] siw: device registration error -23 [ 235.393109][ T9] usb 1-1: USB disconnect, device number 6 [ 235.686351][ T8462] netlink: 'syz.2.931': attribute type 39 has an invalid length. [ 236.348931][ T5810] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 236.498936][ T5810] usb 4-1: Using ep0 maxpacket: 32 [ 236.555983][ T5810] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 236.556015][ T5810] usb 4-1: config 0 has no interface number 0 [ 236.556073][ T5810] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 236.609364][ T5810] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 236.609399][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.609421][ T5810] usb 4-1: Product: syz [ 236.609438][ T5810] usb 4-1: Manufacturer: syz [ 236.609454][ T5810] usb 4-1: SerialNumber: syz [ 236.643407][ T5810] usb 4-1: config 0 descriptor?? [ 236.656054][ T8485] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 236.862154][ T8485] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 237.117263][ T8506] netlink: 'syz.0.946': attribute type 39 has an invalid length. [ 237.264539][ T5810] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 237.269443][ T5810] asix 4-1:0.188: probe with driver asix failed with error -32 [ 237.480195][ T8511] netlink: 212332 bytes leftover after parsing attributes in process `syz.4.948'. [ 237.779940][ T8520] lo speed is unknown, defaulting to 1000 [ 238.332075][ T8537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.955'. [ 238.344844][ T8537] Bluetooth: MGMT ver 1.23 [ 239.153661][ T8558] netlink: 212332 bytes leftover after parsing attributes in process `syz.1.961'. [ 239.182962][ T5889] usb 4-1: USB disconnect, device number 2 [ 239.325711][ T8562] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.963'. [ 240.379748][ T8598] netlink: 181284 bytes leftover after parsing attributes in process `syz.1.975'. [ 240.588952][ T5867] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 240.749260][ T5867] usb 5-1: Using ep0 maxpacket: 32 [ 240.752202][ T5867] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 240.752233][ T5867] usb 5-1: config 0 has no interface number 0 [ 240.752285][ T5867] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 240.755343][ T5867] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 240.755375][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.755398][ T5867] usb 5-1: Product: syz [ 240.755414][ T5867] usb 5-1: Manufacturer: syz [ 240.755430][ T5867] usb 5-1: SerialNumber: syz [ 240.837949][ T5867] usb 5-1: config 0 descriptor?? [ 240.845211][ T8597] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 240.949627][ T8612] siw: device registration error -23 [ 241.717918][ T8597] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 241.872990][ T8615] netlink: 'syz.0.981': attribute type 4 has an invalid length. [ 241.874033][ T8615] netlink: 'syz.0.981': attribute type 4 has an invalid length. [ 242.152412][ T5867] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 242.152712][ T5867] asix 5-1:0.188: probe with driver asix failed with error -32 [ 242.210633][ T8631] netlink: 181284 bytes leftover after parsing attributes in process `syz.3.987'. [ 242.424922][ T8634] netlink: 48 bytes leftover after parsing attributes in process `syz.2.988'. [ 242.650883][ T8647] syzkaller0: entered promiscuous mode [ 242.650911][ T8647] syzkaller0: entered allmulticast mode [ 243.861999][ T5810] usb 5-1: USB disconnect, device number 3 [ 244.340165][ T8670] netlink: 181284 bytes leftover after parsing attributes in process `syz.1.1001'. [ 244.542889][ T8679] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1005'. [ 244.753244][ T8688] netlink: 61963 bytes leftover after parsing attributes in process `syz.2.1009'. [ 245.291498][ T8700] syzkaller0: entered promiscuous mode [ 245.291528][ T8700] syzkaller0: entered allmulticast mode [ 245.407957][ T8704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1015'. [ 245.438679][ T8704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1015'. [ 245.532984][ T8707] netlink: 181284 bytes leftover after parsing attributes in process `syz.3.1016'. [ 245.655544][ T8713] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1018'. [ 245.873950][ T8722] netlink: 61963 bytes leftover after parsing attributes in process `syz.0.1021'. [ 246.142214][ T8731] lo speed is unknown, defaulting to 1000 [ 246.147406][ T8735] netlink: 181284 bytes leftover after parsing attributes in process `syz.4.1029'. [ 246.271913][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 246.418604][ T8738] syzkaller0: entered promiscuous mode [ 246.418625][ T8738] syzkaller0: entered allmulticast mode [ 246.434843][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 246.436887][ T9] usb 2-1: config 152 has an invalid descriptor of length 0, skipping remainder of the config [ 246.436914][ T9] usb 2-1: config 152 has 0 interfaces, different from the descriptor's value: 1 [ 246.468335][ T9] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 246.468368][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.468391][ T9] usb 2-1: Product: syz [ 246.468407][ T9] usb 2-1: Manufacturer: syz [ 246.468424][ T9] usb 2-1: SerialNumber: syz [ 246.882317][ T8747] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1033'. [ 246.979884][ T9] IPVS: starting estimator thread 0... [ 247.079411][ T8752] IPVS: using max 7 ests per chain, 16800 per kthread [ 248.136331][ T3469] IPVS: stop unused estimator thread 0... [ 248.150638][ T8782] Driver unsupported XDP return value 0 on prog (id 77) dev N/A, expect packet loss! [ 248.444475][ T8794] netlink: 'syz.2.1050': attribute type 39 has an invalid length. [ 249.040380][ T8817] vlan2: entered promiscuous mode [ 249.062746][ T9] usb 2-1: USB disconnect, device number 5 [ 249.353182][ T8828] __nla_validate_parse: 6 callbacks suppressed [ 249.353207][ T8828] netlink: 181284 bytes leftover after parsing attributes in process `syz.4.1064'. [ 249.419326][ T8825] tipc: Enabled bearer , priority 0 [ 249.420307][ T8825] syzkaller0: entered promiscuous mode [ 249.420331][ T8825] syzkaller0: entered allmulticast mode [ 249.467799][ T8825] tipc: Resetting bearer [ 249.499686][ T8824] tipc: Resetting bearer [ 249.632736][ T8824] tipc: Disabling bearer [ 249.637654][ T8836] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1068'. [ 249.803436][ T8837] tipc: Enabled bearer , priority 0 [ 249.841851][ T8832] tipc: Resetting bearer [ 249.869230][ T8840] syzkaller0: entered promiscuous mode [ 249.869251][ T8840] syzkaller0: entered allmulticast mode [ 250.159404][ T8830] tipc: Resetting bearer [ 250.280109][ T8830] tipc: Disabling bearer [ 250.313373][ T8864] netlink: 181284 bytes leftover after parsing attributes in process `syz.0.1076'. [ 250.685610][ T8877] netlink: 61963 bytes leftover after parsing attributes in process `syz.0.1082'. [ 250.961713][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1087'. [ 250.961739][ T8888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1087'. [ 250.967933][ T8890] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1088'. [ 251.006740][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1087'. [ 251.006765][ T8888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1087'. [ 251.007061][ T8890] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1088'. [ 251.408013][ T8896] lo speed is unknown, defaulting to 1000 [ 252.216741][ T809] IPVS: starting estimator thread 0... [ 252.305411][ T8934] IPVS: using max 8 ests per chain, 19200 per kthread [ 253.220069][ T8968] netlink: 'syz.1.1114': attribute type 39 has an invalid length. [ 253.691189][ T8984] team_slave_0: entered promiscuous mode [ 253.691231][ T8984] team_slave_1: entered promiscuous mode [ 253.691428][ T8984] vlan2: entered promiscuous mode [ 253.691446][ T8984] team0: entered promiscuous mode [ 254.359471][ T9005] __nla_validate_parse: 3 callbacks suppressed [ 254.359492][ T9005] netlink: 61963 bytes leftover after parsing attributes in process `syz.1.1130'. [ 254.411740][ T9014] lo speed is unknown, defaulting to 1000 [ 255.179238][ T1232] IPVS: starting estimator thread 0... [ 255.269036][ T9042] IPVS: using max 9 ests per chain, 21600 per kthread [ 255.437059][ T9052] netlink: 61963 bytes leftover after parsing attributes in process `syz.4.1147'. [ 255.927427][ T9073] netlink: 'syz.0.1150': attribute type 2 has an invalid length. [ 256.823554][ T9073] !: entered promiscuous mode [ 257.251933][ T9103] netlink: 'syz.4.1153': attribute type 39 has an invalid length. [ 257.414190][ T9110] netlink: 61963 bytes leftover after parsing attributes in process `syz.0.1159'. [ 257.430256][ T12] IPVS: stop unused estimator thread 0... [ 257.702565][ T9115] lo speed is unknown, defaulting to 1000 [ 257.835994][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1164'. [ 257.966255][ T9128] 8021q: adding VLAN 0 to HW filter on device bond1 [ 258.048437][ T9135] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 258.436748][ T9141] netlink: 'syz.4.1165': attribute type 2 has an invalid length. [ 260.071573][ T9141] !: entered promiscuous mode [ 260.139842][ T9163] netlink: 61687 bytes leftover after parsing attributes in process `syz.0.1172'. [ 260.275794][ T9172] lo speed is unknown, defaulting to 1000 [ 260.588691][ T9176] syzkaller0: entered promiscuous mode [ 260.588712][ T9176] syzkaller0: entered allmulticast mode [ 261.052420][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.052502][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.199567][ T9196] siw: device registration error -23 [ 262.099888][ T9205] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.1184'. [ 262.834115][ T9216] netlink: 'syz.1.1187': attribute type 2 has an invalid length. [ 265.519362][ T9215] netlink: 61687 bytes leftover after parsing attributes in process `syz.4.1186'. [ 265.541255][ T9216] !: entered promiscuous mode [ 265.947243][ T9239] netlink: 'syz.0.1192': attribute type 4 has an invalid length. [ 266.143754][ T9241] netlink: 'syz.0.1192': attribute type 4 has an invalid length. [ 266.272591][ T9242] siw: device registration error -23 [ 267.280676][ T9249] syzkaller0: entered promiscuous mode [ 267.280705][ T9249] syzkaller0: entered allmulticast mode [ 267.680899][ T9262] netlink: 61687 bytes leftover after parsing attributes in process `syz.1.1199'. [ 267.853350][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1200'. [ 267.880297][ T9267] tipc: Enabled bearer , priority 0 [ 267.881403][ T9267] syzkaller0: entered promiscuous mode [ 267.881421][ T9267] syzkaller0: entered allmulticast mode [ 267.921283][ T9267] tipc: Resetting bearer [ 267.949129][ T9265] tipc: Resetting bearer [ 268.071300][ T9265] tipc: Disabling bearer [ 268.523052][ T9288] siw: device registration error -23 [ 269.357144][ T9295] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1208'. [ 269.397657][ T9295] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1208'. [ 269.519414][ T9299] netlink: 61963 bytes leftover after parsing attributes in process `syz.1.1211'. [ 269.827676][ T9316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1218'. [ 269.886790][ T9316] 8021q: adding VLAN 0 to HW filter on device bond2 [ 270.307758][ T9328] siw: device registration error -23 [ 271.087903][ T9332] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1222'. [ 271.088336][ T9332] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1222'. [ 271.305327][ T9337] netlink: 61963 bytes leftover after parsing attributes in process `syz.4.1224'. [ 271.345603][ T9333] lo speed is unknown, defaulting to 1000 [ 273.928630][ T9354] netlink: 'syz.4.1228': attribute type 39 has an invalid length. [ 274.641665][ T9380] siw: device registration error -23 [ 275.527391][ T9382] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1236'. [ 275.527667][ T9382] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1236'. [ 275.700811][ T9390] netlink: 'syz.1.1239': attribute type 12 has an invalid length. [ 276.029120][ T9401] netlink: 'syz.1.1239': attribute type 3 has an invalid length. [ 276.029148][ T9401] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1239'. [ 276.071834][ T9396] lo speed is unknown, defaulting to 1000 [ 276.181564][ T9391] lo speed is unknown, defaulting to 1000 [ 276.360097][ T9404] tipc: Enabled bearer , priority 0 [ 276.408372][ T9404] syzkaller0: entered promiscuous mode [ 276.408401][ T9404] syzkaller0: entered allmulticast mode [ 276.491061][ T9398] nr0: entered promiscuous mode [ 276.491091][ T9398] nr0: entered allmulticast mode [ 276.671216][ T9404] tipc: Resetting bearer [ 276.729155][ T9403] tipc: Resetting bearer [ 276.860022][ T9403] tipc: Disabling bearer [ 277.135605][ T9390] Set syz1 is full, maxelem 65536 reached [ 277.232008][ T1232] IPVS: starting estimator thread 0... [ 277.339041][ T9413] IPVS: using max 8 ests per chain, 19200 per kthread [ 277.434558][ T9415] tipc: Enabled bearer , priority 0 [ 277.436847][ T9408] lo speed is unknown, defaulting to 1000 [ 277.560980][ T9414] tipc: Disabling bearer [ 279.706255][ T5809] Bluetooth: hci4: command 0x0406 tx timeout [ 280.519801][ T9436] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1251'. [ 280.751188][ T9436] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1251'. [ 281.036589][ T9452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1257'. [ 281.277875][ T9458] netlink: 61963 bytes leftover after parsing attributes in process `syz.1.1259'. [ 281.300744][ T9461] tipc: Enabled bearer , priority 0 [ 281.404432][ T9468] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 281.404447][ T9468] IPv6: NLM_F_CREATE should be set when creating new route [ 281.424451][ T9470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1263'. [ 281.608563][ T9470] 8021q: adding VLAN 0 to HW filter on device bond2 [ 281.698712][ T9476] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1265'. [ 281.823732][ T9468] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.339711][ T9468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.358895][ T9468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.191702][ T9476] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1265'. [ 283.243964][ T785] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.244004][ T785] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.363030][ T9455] tipc: Disabling bearer [ 283.469276][ T785] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.469320][ T785] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.536377][ T785] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.537832][ T785] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.537889][ T785] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.537919][ T785] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.129799][ T9504] netlink: 'syz.1.1273': attribute type 2 has an invalid length. [ 284.218957][ T9501] netlink: 61963 bytes leftover after parsing attributes in process `syz.2.1274'. [ 284.661582][ T9513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1277'. [ 284.817811][ T9513] 8021q: adding VLAN 0 to HW filter on device bond3 [ 284.872682][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1278'. [ 285.682588][ T9535] __nla_validate_parse: 2 callbacks suppressed [ 285.682612][ T9535] netlink: 61963 bytes leftover after parsing attributes in process `syz.3.1285'. [ 285.782377][ T9544] tipc: Enabled bearer , priority 0 [ 285.783608][ T9544] syzkaller0: entered promiscuous mode [ 285.783626][ T9544] syzkaller0: entered allmulticast mode [ 285.813520][ T9544] tipc: Resetting bearer [ 285.849198][ T9543] tipc: Resetting bearer [ 285.906548][ T809] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 285.919769][ T9543] tipc: Disabling bearer [ 286.070443][ T809] usb 2-1: Using ep0 maxpacket: 32 [ 286.076970][ T809] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 286.077001][ T809] usb 2-1: config 0 has no interface number 0 [ 286.077057][ T809] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 286.113830][ T809] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 286.113867][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.113889][ T809] usb 2-1: Product: syz [ 286.113905][ T809] usb 2-1: Manufacturer: syz [ 286.113921][ T809] usb 2-1: SerialNumber: syz [ 286.156263][ T809] usb 2-1: config 0 descriptor?? [ 286.164720][ T9534] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 286.423910][ T9534] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 286.711670][ T9550] netlink: 'syz.3.1291': attribute type 2 has an invalid length. [ 286.947429][ T9550] !: entered promiscuous mode [ 287.037125][ T809] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 287.057231][ T809] asix 2-1:0.188: probe with driver asix failed with error -61 [ 290.118180][ T809] usb 2-1: USB disconnect, device number 6 [ 290.203442][ T9566] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1295'. [ 290.203706][ T9566] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1295'. [ 291.391041][ T9591] netlink: 'syz.0.1303': attribute type 4 has an invalid length. [ 291.418595][ T9591] netlink: 'syz.0.1303': attribute type 4 has an invalid length. [ 291.998990][ T809] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 292.082628][ T9605] lo speed is unknown, defaulting to 1000 [ 292.149360][ T809] usb 5-1: Using ep0 maxpacket: 32 [ 292.151809][ T809] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 292.151840][ T809] usb 5-1: config 0 has no interface number 0 [ 292.151890][ T809] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 292.157874][ T809] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 292.157907][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.157930][ T809] usb 5-1: Product: syz [ 292.157946][ T809] usb 5-1: Manufacturer: syz [ 292.157962][ T809] usb 5-1: SerialNumber: syz [ 292.211561][ T809] usb 5-1: config 0 descriptor?? [ 292.218165][ T9597] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 292.435298][ T9597] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 294.084306][ T809] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 294.084590][ T809] asix 5-1:0.188: probe with driver asix failed with error -61 [ 294.393200][ T9623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1314'. [ 295.572826][ T31] usb 5-1: USB disconnect, device number 4 [ 295.709792][ T9636] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1316'. [ 296.295235][ T9644] netlink: 'syz.3.1319': attribute type 4 has an invalid length. [ 296.554022][ T9639] lo speed is unknown, defaulting to 1000 [ 296.662990][ T9652] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1323'. [ 296.859579][ T9658] netlink: 'syz.2.1312': attribute type 10 has an invalid length. [ 296.859605][ T9658] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1312'. [ 297.067128][ T9658] geneve0: entered promiscuous mode [ 297.069515][ T9658] team0: Failed to send options change via netlink (err -105) [ 297.069541][ T9658] team0: Port device geneve0 added [ 297.157235][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1325'. [ 297.211045][ T9666] netlink: 'syz.4.1326': attribute type 4 has an invalid length. [ 297.211738][ T9666] netlink: 'syz.4.1326': attribute type 4 has an invalid length. [ 297.291309][ T9671] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1327'. [ 297.341717][ T9659] lo speed is unknown, defaulting to 1000 [ 297.695095][ T9681] netlink: 'syz.4.1330': attribute type 4 has an invalid length. [ 298.082217][ T9683] tipc: Enabled bearer , priority 0 [ 298.264571][ T9689] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1334'. [ 298.401564][ T9682] tipc: Disabling bearer [ 298.805722][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1338'. [ 299.016525][ T9706] lo speed is unknown, defaulting to 1000 [ 299.052971][ T9714] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1339'. [ 299.700067][ T9726] tipc: Enabled bearer , priority 0 [ 299.770836][ T9727] syzkaller0: entered promiscuous mode [ 299.770858][ T9727] syzkaller0: entered allmulticast mode [ 299.838377][ T9731] netlink: 'syz.2.1344': attribute type 4 has an invalid length. [ 300.197193][ T9732] netlink: 'syz.3.1343': attribute type 2 has an invalid length. [ 301.206864][ T9723] tipc: Resetting bearer [ 301.865076][ T9722] tipc: Resetting bearer [ 302.151602][ T9745] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1347'. [ 302.861344][ T9722] tipc: Disabling bearer [ 302.919907][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1350'. [ 302.993914][ T9758] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1351'. [ 303.045301][ T9750] tipc: Enabled bearer , priority 0 [ 303.262481][ T9747] tipc: Disabling bearer [ 303.694768][ T9781] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1356'. [ 303.745027][ T9783] netlink: 'syz.0.1357': attribute type 4 has an invalid length. [ 303.940797][ T9789] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 303.940816][ T9789] IPv6: NLM_F_CREATE should be set when creating new route [ 304.222033][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1361'. [ 306.101332][ T9806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 306.101352][ T9806] IPv6: NLM_F_CREATE should be set when creating new route [ 306.336908][ T9789] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.359336][ T9789] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.755056][ T9828] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1368'. [ 306.863301][ T9830] netlink: 'syz.3.1369': attribute type 4 has an invalid length. [ 307.117896][ T9789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.137850][ T9789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.881039][ T9804] tipc: Enabled bearer , priority 0 [ 308.061793][ T9806] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.594310][ T9806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.610906][ T9806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.491800][ T45] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.491841][ T45] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.536461][ T9803] tipc: Disabling bearer [ 309.609283][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1373'. [ 309.819449][ T45] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.819488][ T45] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.968430][ T37] audit: type=1326 audit(1769279610.734:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9846 comm="syz.4.1375" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe592aacb9 code=0x0 [ 312.589780][ T45] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.589820][ T45] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.656726][ T9853] tipc: Enabled bearer , priority 0 [ 312.780471][ T45] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.780510][ T45] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.787322][ T9875] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1379'. [ 312.885852][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1380'. [ 312.919245][ T9848] tipc: Disabling bearer [ 315.545546][ T9894] netlink: 'syz.4.1382': attribute type 4 has an invalid length. [ 315.789348][ T45] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.789386][ T45] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.969140][ T45] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.969180][ T45] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.007216][ T45] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.007257][ T45] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.007304][ T45] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.007333][ T45] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.047099][ T9904] tipc: Enabled bearer , priority 0 [ 316.052208][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1384'. [ 316.697978][ T9902] tipc: Disabling bearer [ 317.115685][ T9920] lo speed is unknown, defaulting to 1000 [ 317.345391][ T9938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1394'. [ 317.484013][ T9930] lo speed is unknown, defaulting to 1000 [ 317.993723][ T9948] tipc: Enabling of bearer rejected, failed to enable media [ 320.461927][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1400'. [ 320.848419][ T9973] tipc: Enabled bearer , priority 0 [ 322.598950][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.599023][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.063508][ T9972] tipc: Disabling bearer [ 325.859998][T10006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1409'. [ 328.578972][T10017] tipc: Enabling of bearer rejected, failed to enable media [ 331.703459][ T37] audit: type=1326 audit(1769279632.454:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10039 comm="syz.1.1417" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f404640acb9 code=0x0 [ 331.705756][T10049] tipc: Enabled bearer , priority 0 [ 334.661569][T10041] tipc: Disabling bearer [ 334.779470][ T809] tipc: Node number set to 3899525325 [ 335.050427][ T809] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 335.181763][T10071] netlink: 'syz.0.1426': attribute type 4 has an invalid length. [ 335.188685][T10071] netlink: 'syz.0.1426': attribute type 4 has an invalid length. [ 335.208852][ T809] usb 5-1: Using ep0 maxpacket: 8 [ 335.211284][ T809] usb 5-1: config 152 has an invalid descriptor of length 0, skipping remainder of the config [ 335.211312][ T809] usb 5-1: config 152 has 0 interfaces, different from the descriptor's value: 1 [ 335.216204][ T809] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 335.216234][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.216255][ T809] usb 5-1: Product: syz [ 335.216270][ T809] usb 5-1: Manufacturer: syz [ 335.216286][ T809] usb 5-1: SerialNumber: syz [ 335.425195][T10074] tipc: Enabling of bearer rejected, failed to enable media [ 339.534820][ T10] usb 5-1: USB disconnect, device number 5 [ 339.978674][T10093] lo speed is unknown, defaulting to 1000 [ 343.769292][T10112] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 343.769324][T10112] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 343.809031][T10112] vhci_hcd vhci_hcd.0: Device attached [ 344.025564][T10112] smc: net device wlan1 applied user defined pnetid SYZ1 [ 344.091583][ T10] usb 36-1: SetAddress Request (3) to port 0 [ 344.091656][ T10] usb 36-1: new SuperSpeed USB device number 3 using vhci_hcd [ 344.321419][T10113] vhci_hcd: connection reset by peer [ 344.337102][ T785] vhci_hcd vhci_hcd.1: stop threads [ 344.337178][ T785] vhci_hcd vhci_hcd.1: release socket [ 344.337356][ T785] vhci_hcd vhci_hcd.1: disconnect device [ 346.662784][T10129] netlink: 'syz.0.1437': attribute type 4 has an invalid length. [ 346.699057][T10129] netlink: 'syz.0.1437': attribute type 4 has an invalid length. [ 346.960349][T10131] lo speed is unknown, defaulting to 1000 [ 348.733099][ C0] ------------[ cut here ]------------ [ 348.733114][ C0] ODEBUG: free active (active state 0) object: ffff888036e47cd0 object type: timer_list hint: rose_t0timer_expiry+0x0/0x360 [ 348.733194][ C0] WARNING: lib/debugobjects.c:615 at debug_check_no_obj_freed+0x405/0x550, CPU#0: ktimers/0/16 [ 348.733234][ C0] Modules linked in: [ 348.733271][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 348.733302][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 348.733321][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 348.733350][ C0] Code: 89 44 24 20 e8 f7 4e 92 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 ed 65 8b 48 c7 c2 c0 f2 65 8b 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 348.733370][ C0] RSP: 0018:ffffc90000157890 EFLAGS: 00010246 [ 348.733391][ C0] RAX: ffffffff89dd4300 RBX: ffffffff993b8ec8 RCX: 0000000000000000 [ 348.733409][ C0] RDX: ffffffff8b65f2c0 RSI: ffffffff8b65ed40 RDI: ffffffff8f3179c0 [ 348.733427][ C0] RBP: ffffffff8b0f58c0 R08: ffff888036e47cd0 R09: ffffffff8b0f6c00 [ 348.733445][ C0] R10: dffffc0000000000 R11: ffffffff81ae3310 R12: ffff888036e47e00 [ 348.733463][ C0] R13: ffffffff8f3179c0 R14: ffff888036e47000 R15: ffff888036e47cd0 [ 348.733482][ C0] FS: 0000000000000000(0000) GS:ffff8881267fc000(0000) knlGS:0000000000000000 [ 348.733502][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 348.733519][ C0] CR2: 00007fbe5a05da08 CR3: 000000000d7b4000 CR4: 00000000003526f0 [ 348.733540][ C0] Call Trace: [ 348.733549][ C0] [ 348.733564][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 348.733598][ C0] ? rt_spin_lock+0x20e/0x400 [ 348.733631][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 348.733666][ C0] kfree+0x134/0x8f0 [ 348.733704][ C0] rose_timer_expiry+0x4cb/0x600 [ 348.733737][ C0] ? call_timer_fn+0x178/0x5a0 [ 348.733777][ C0] call_timer_fn+0x192/0x5a0 [ 348.733813][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 348.733844][ C0] ? call_timer_fn+0xd4/0x5a0 [ 348.733877][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 348.733925][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 348.733956][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 348.733992][ C0] __run_timer_base+0x6a3/0x9f0 [ 348.734042][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 348.734085][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 348.734122][ C0] run_timer_softirq+0xb7/0x170 [ 348.734156][ C0] handle_softirqs+0x1de/0x640 [ 348.734201][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 348.734230][ C0] run_ktimerd+0x69/0x100 [ 348.734262][ C0] smpboot_thread_fn+0x541/0xa50 [ 348.734294][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 348.734333][ C0] kthread+0x726/0x8b0 [ 348.734369][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 348.734398][ C0] ? __pfx_kthread+0x10/0x10 [ 348.734428][ C0] ? rt_spin_unlock+0x14f/0x200 [ 348.734459][ C0] ? rt_spin_unlock+0x160/0x200 [ 348.734482][ C0] ? __pfx_kthread+0x10/0x10 [ 348.734516][ C0] ret_from_fork+0x51b/0xa40 [ 348.734547][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 348.734572][ C0] ? __switch_to+0xc82/0x1410 [ 348.734600][ C0] ? __pfx_kthread+0x10/0x10 [ 348.734634][ C0] ret_from_fork_asm+0x1a/0x30 [ 348.734689][ C0] [ 348.734708][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 348.734726][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 348.734752][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 348.734764][ C0] Call Trace: [ 348.734773][ C0] [ 348.734783][ C0] vpanic+0x1e0/0x670 [ 348.734820][ C0] panic+0xc5/0xd0 [ 348.734851][ C0] ? __pfx_panic+0x10/0x10 [ 348.734892][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 348.734933][ C0] __warn+0x315/0x4a0 [ 348.734963][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 348.734993][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 348.735021][ C0] __report_bug+0x29a/0x540 [ 348.735059][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 348.735086][ C0] ? __pfx___report_bug+0x10/0x10 [ 348.735138][ C0] report_bug_entry+0x19a/0x290 [ 348.735177][ C0] ? debug_check_no_obj_freed+0x44a/0x550 [ 348.735202][ C0] ? debug_check_no_obj_freed+0x44f/0x550 [ 348.735226][ C0] handle_bug+0xca/0x200 [ 348.735248][ C0] exc_invalid_op+0x1a/0x50 [ 348.735270][ C0] asm_exc_invalid_op+0x1a/0x20 [ 348.735293][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 348.735321][ C0] Code: 89 44 24 20 e8 f7 4e 92 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 ed 65 8b 48 c7 c2 c0 f2 65 8b 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 348.735340][ C0] RSP: 0018:ffffc90000157890 EFLAGS: 00010246 [ 348.735361][ C0] RAX: ffffffff89dd4300 RBX: ffffffff993b8ec8 RCX: 0000000000000000 [ 348.735379][ C0] RDX: ffffffff8b65f2c0 RSI: ffffffff8b65ed40 RDI: ffffffff8f3179c0 [ 348.735397][ C0] RBP: ffffffff8b0f58c0 R08: ffff888036e47cd0 R09: ffffffff8b0f6c00 [ 348.735416][ C0] R10: dffffc0000000000 R11: ffffffff81ae3310 R12: ffff888036e47e00 [ 348.735434][ C0] R13: ffffffff8f3179c0 R14: ffff888036e47000 R15: ffff888036e47cd0 [ 348.735459][ C0] ? __pfx_timer_debug_hint+0x10/0x10 [ 348.735496][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 348.735534][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 348.735565][ C0] ? rt_spin_lock+0x20e/0x400 [ 348.735596][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 348.735631][ C0] kfree+0x134/0x8f0 [ 348.735669][ C0] rose_timer_expiry+0x4cb/0x600 [ 348.735703][ C0] ? call_timer_fn+0x178/0x5a0 [ 348.735742][ C0] call_timer_fn+0x192/0x5a0 [ 348.735778][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 348.735811][ C0] ? call_timer_fn+0xd4/0x5a0 [ 348.735846][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 348.735894][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 348.735942][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 348.735980][ C0] __run_timer_base+0x6a3/0x9f0 [ 348.736031][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 348.736074][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 348.736111][ C0] run_timer_softirq+0xb7/0x170 [ 348.736145][ C0] handle_softirqs+0x1de/0x640 [ 348.736192][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 348.736222][ C0] run_ktimerd+0x69/0x100 [ 348.736253][ C0] smpboot_thread_fn+0x541/0xa50 [ 348.736286][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 348.736327][ C0] kthread+0x726/0x8b0 [ 348.736364][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 348.736394][ C0] ? __pfx_kthread+0x10/0x10 [ 348.736425][ C0] ? rt_spin_unlock+0x14f/0x200 [ 348.736456][ C0] ? rt_spin_unlock+0x160/0x200 [ 348.736480][ C0] ? __pfx_kthread+0x10/0x10 [ 348.736516][ C0] ret_from_fork+0x51b/0xa40 [ 348.736546][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 348.736572][ C0] ? __switch_to+0xc82/0x1410 [ 348.736601][ C0] ? __pfx_kthread+0x10/0x10 [ 348.736637][ C0] ret_from_fork_asm+0x1a/0x30 [ 348.736693][ C0] [ 348.737293][ C0] Kernel Offset: disabled