last executing test programs: 11m33.654415782s ago: executing program 2 (id=270): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x22, 0x0, &(0x7f00000006c0)="e0274239060000009774992f0800c6bd0d890986fef26b9ad47dd97e232656feb8e4", 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11m33.448057185s ago: executing program 2 (id=272): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='auxv\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) pwritev(r1, &(0x7f00000005c0), 0x0, 0x6638, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000e00)=""/262, 0x106}], 0x1, 0x29, 0x7ffffffe) 11m33.31218895s ago: executing program 2 (id=273): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}, 0x40002002) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 11m33.08342618s ago: executing program 2 (id=275): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x0, 0x36, 0x0, &(0x7f0000000000)="c1188e99001d4d296204c0a586ddebda09f11201f58558c1a5c5391567688a0329f921425892a71e28b312b4829d13c2382d51131a29", 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11m32.899356902s ago: executing program 2 (id=277): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000000c0)) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, 0xfffffffffffffffe) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}}, 0x0) 11m31.780759512s ago: executing program 2 (id=279): socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000c014) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="270302", 0x5e0}], 0x1}, 0x0) 11m16.276405135s ago: executing program 32 (id=279): socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000c014) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="270302", 0x5e0}], 0x1}, 0x0) 3m33.28002914s ago: executing program 0 (id=2735): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_MARK_MASK={0x8}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x88}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048010) 3m32.82513571s ago: executing program 0 (id=2741): syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f03e, 0x3}) 3m32.577422315s ago: executing program 0 (id=2744): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234-12', 0x15, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000100)='\x00', 0x1, 0x1e8133) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 3m31.436538657s ago: executing program 0 (id=2752): syz_emit_ethernet(0x66, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x30, 0x58, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @redirect={0x5, 0x1, 0x0, @multicast1, {0xf, 0x4, 0x0, 0x28, 0x4, 0x0, 0x0, 0x2, 0x89, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp_addr={0x44, 0x14, 0x95, 0x1, 0x7, [{@private=0xa010101, 0x401}, {@local, 0x8}]}, @timestamp_prespec={0x44, 0x14, 0x44, 0x3, 0x5, [{@empty, 0x9}, {@private=0xa010101, 0xfffffffd}]}]}}}}}}}, 0x0) 3m31.191895961s ago: executing program 0 (id=2755): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f4}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x0) 3m30.819090708s ago: executing program 0 (id=2757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) recvmmsg(r2, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000700)=""/247, 0xf7}, {&(0x7f0000000800)=""/216, 0xd8}, {&(0x7f0000000900)=""/66, 0x42}, {&(0x7f0000000980)=""/105, 0x69}, {&(0x7f0000000a00)=""/210, 0xd2}, {&(0x7f0000000b00)=""/4096, 0x1000}], 0x6}, 0x80000001}], 0x2, 0x20, 0x0) 3m15.675258595s ago: executing program 33 (id=2757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) recvmmsg(r2, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000700)=""/247, 0xf7}, {&(0x7f0000000800)=""/216, 0xd8}, {&(0x7f0000000900)=""/66, 0x42}, {&(0x7f0000000980)=""/105, 0x69}, {&(0x7f0000000a00)=""/210, 0xd2}, {&(0x7f0000000b00)=""/4096, 0x1000}], 0x6}, 0x80000001}], 0x2, 0x20, 0x0) 2m40.822173672s ago: executing program 4 (id=2937): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 2m40.3906167s ago: executing program 4 (id=2938): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) 2m39.995029309s ago: executing program 4 (id=2940): sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x2000c000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) epoll_create1(0x0) kexec_load(0x2, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x12000}], 0x0) 2m39.784037884s ago: executing program 4 (id=2943): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 2m37.698754155s ago: executing program 4 (id=2948): ioctl$XFS_IOC_SWAPEXT(0xffffffffffffffff, 0x5433, 0x0) 2m37.521538307s ago: executing program 4 (id=2950): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 2m22.296874083s ago: executing program 34 (id=2950): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 2m6.685266117s ago: executing program 1 (id=3136): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/net/tunl0/threaded\x00', 0x2, 0x0) write(r0, &(0x7f0000000740)="cb", 0x1) 2m6.46688759s ago: executing program 1 (id=3138): r0 = syz_open_dev$usbfs(&(0x7f0000000500), 0xc, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x8, 0x8, 0x0, 0xffff874c, 0x0}) 2m6.296545714s ago: executing program 1 (id=3140): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) listen(r0, 0x3ff) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) 2m6.236638299s ago: executing program 1 (id=3141): sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x2000c000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) epoll_create1(0x0) kexec_load(0x2, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x12000}], 0x0) 2m6.16537169s ago: executing program 1 (id=3142): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r4, &(0x7f0000000380)='100000', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r5, &(0x7f0000000200)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r6, &(0x7f0000000280)='0', 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 2m4.54637068s ago: executing program 6 (id=3146): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 2m4.158004896s ago: executing program 3 (id=3151): sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x2000c000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) epoll_create1(0x0) kexec_load(0x2, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x12000}], 0x0) 2m4.113040386s ago: executing program 1 (id=3152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000940)={'veth1_to_hsr\x00', 0x400}) pwritev(r0, &(0x7f0000001a40)=[{&(0x7f0000000980)="cceea7c2", 0x4}], 0x1, 0x8, 0x7) 2m3.660111597s ago: executing program 3 (id=3153): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) setfsgid(0xee00) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f00000047c0)={0x2020}, 0x2020) 2m2.58231487s ago: executing program 3 (id=3154): socket$nl_crypto(0x10, 0x3, 0x15) r0 = socket$packet(0x11, 0x3, 0x300) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0xe6cecfb4f094927d, {{0x41, 0x3}, 0x4}}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x348, 0x100}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40c1}, 0x8840) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, {0x3bc7, 0x7, 0x80000004}, {0x2, 0x0, 0xffffffff}, 0x70bd2d, 0x800000, 0x2, 0x4, 0x0, 0x4c}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}]}, 0x154}}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, &(0x7f0000000000), 0x4) r7 = accept$unix(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000300)=0x6e) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000400)={r7, 0x1f, 0x0, "b3ae172ac7329d35596cb67ef5f1dc7edcb721b2adaa7350ce5d98a2583efe87220718a297df56621770b83c63f28c3350bddc9c40e9280fdf244aef0bc329e8b1feb9cb2f3218698c4ffa4335a0c277c1f29f96b7e66a156cdd4387c66628d30baa750b596bf72efadef3ebd3bdb885e46414c22f3b6abc7564a4132af7c5fb3a3d716842e4f062e232796f"}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) 2m1.075550847s ago: executing program 5 (id=3162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 2m0.846464332s ago: executing program 5 (id=3163): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) setfsgid(0xee00) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f00000047c0)={0x2020}, 0x2020) 2m0.568428388s ago: executing program 6 (id=3164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a010400000000000000000200000a0900010073797a30000000000900030073797a300000000014000480080001400000000308000240000000004c000000060a010400000000000000000200000a0900010073797a30000000000900020073797a3000000000200004801c0001800a00010071756575650000000c000280060001400000000014000000110001"], 0xd4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r2, &(0x7f0000003440)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000000480)="562185d6215f1831c8c49d949e282c1aa322d4bca02043fecb5b8f866ffb8d8ade1fffa3d9c9a857e09a8b5f4a6b0231f004e95f732625ccdb862f305dea21456a464912928f225fc39b2db3237b0d972f0378337052df4464cfa28a0da8883b1805eb838aff56a5406c8d6e283dea267885125a75c752c9e5da3dc45dedc05914c9dfef268faec245d745f5538bbe74bc337d69cce2e25e2c414375c9bb5a", 0x9f}, {&(0x7f0000000a40)="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", 0x52a}], 0x2, &(0x7f0000000940)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010101}}}], 0x20}}], 0x1, 0x0) 2m0.439151765s ago: executing program 6 (id=3165): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0xffffff07, &(0x7f0000000180)="0400d876d5620064d082778c3938adfc73342d7335a2c8807c6b14fcd634fee8b9af4c33956bdf18f076e3e588829d65ddc4825e1d13e9522736f20832e770322fc9addbb11eea2ae8f216ce86e35590b900bf5a7ecd89cbfeb1f2148b8138c4a79d8f8866d037343ae64f2b4f35455364fda4e89c96a72ecee8a784d6f6f03f1d769342ad53ce8fce4e5402d1745ffa69b1edf60fc36226", &(0x7f0000000380)=""/85, 0x600, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0xf}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f000000e400)={0x2020}, 0x2020) 2m0.244968777s ago: executing program 6 (id=3166): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x5, 0x26, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x2, 0x0, 0x0, "196c3df741c82283"}}, 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/can/rcvlist_sff\x00', 0x0, 0x0) read(r1, &(0x7f0000000400)=""/1, 0x1000) 2m0.105347647s ago: executing program 6 (id=3167): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x68}}, 0x800) sendmsg$NFT_BATCH(r1, 0x0, 0x24040884) 1m59.977479691s ago: executing program 6 (id=3168): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) 1m59.819553196s ago: executing program 5 (id=3169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvfrom(r0, 0x0, 0x0, 0x40002062, 0x0, 0x0) 1m59.703619434s ago: executing program 5 (id=3170): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x58}}, 0x0) 1m59.682085128s ago: executing program 3 (id=3171): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 1m59.665615083s ago: executing program 5 (id=3172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 1m59.519520187s ago: executing program 3 (id=3173): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m59.355716882s ago: executing program 5 (id=3174): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00005f5a000000000c003f8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}}, 0x20}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1m59.119229507s ago: executing program 3 (id=3175): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b00000000000000aa000001", 0x54}], 0x1}, 0x4004810) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001c000107000000000000000007000000", @ANYRES32=r2, @ANYBLOB="80000200080001007f0000010a0002"], 0x38}}, 0x0) 1m48.411829766s ago: executing program 35 (id=3152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000940)={'veth1_to_hsr\x00', 0x400}) pwritev(r0, &(0x7f0000001a40)=[{&(0x7f0000000980)="cceea7c2", 0x4}], 0x1, 0x8, 0x7) 1m44.86908693s ago: executing program 36 (id=3168): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) 1m43.886943587s ago: executing program 37 (id=3174): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00005f5a000000000c003f8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}}, 0x20}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1m43.786950138s ago: executing program 38 (id=3175): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b00000000000000aa000001", 0x54}], 0x1}, 0x4004810) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001c000107000000000000000007000000", @ANYRES32=r2, @ANYBLOB="80000200080001007f0000010a0002"], 0x38}}, 0x0) 10.011989574s ago: executing program 7 (id=3304): mkdir(0x0, 0x1ff) pipe(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 6.832413749s ago: executing program 7 (id=3306): socket$nl_crypto(0x10, 0x3, 0x15) r0 = socket$packet(0x11, 0x3, 0x300) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0xe6cecfb4f094927d, {{0x41, 0x3}, 0x4}}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x348, 0x100}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40c1}, 0x8840) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, {0x3bc7, 0x7, 0x80000004}, {0x2, 0x0, 0xffffffff}, 0x70bd2d, 0x800000, 0x2, 0x4, 0x0, 0x4c}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}]}, 0x154}}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, &(0x7f0000000000), 0x4) r7 = accept$unix(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000300)=0x6e) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000400)={r7, 0x1f, 0x0, "b3ae172ac7329d35596cb67ef5f1dc7edcb721b2adaa7350ce5d98a2583efe87220718a297df56621770b83c63f28c3350bddc9c40e9280fdf244aef0bc329e8b1feb9cb2f3218698c4ffa4335a0c277c1f29f96b7e66a156cdd4387c66628d30baa750b596bf72efadef3ebd3bdb885e46414c22f3b6abc7564a4132af7c5fb3a3d716842e4f062e232796f"}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) 6.021533667s ago: executing program 7 (id=3307): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8947, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0d000000ff0f0000040000000600000001000000", @ANYRES32=r1], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000840), &(0x7f0000000340)=r1}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044830}, 0x4c484) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000c004) r5 = socket$rds(0x15, 0x5, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$rds(r5, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) epoll_pwait(r7, &(0x7f0000001800)=[{}], 0x1, 0xa52, 0x0, 0x0) r8 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r8, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20801) sendmsg$rds(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x1a000}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @local}}, 0xffffff49, 0x1, 0x1, 0x6, 0x0, 0x1, 0x6}, &(0x7f0000000640)=0x9c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000000c0), 0x12) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) 5.699359928s ago: executing program 7 (id=3308): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1a41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xd132}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="9601"], 0x6e8a) 5.042131996s ago: executing program 8 (id=3311): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0xf}, {{0x0, 0x0, 0x0}, 0x1000}], 0x2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.225494193s ago: executing program 8 (id=3312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) 2.151609404s ago: executing program 7 (id=3313): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224000100"], 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 1.77952056s ago: executing program 8 (id=3314): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 1.674852174s ago: executing program 8 (id=3315): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x3, 0xffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001cac0)=""/102400, 0x19000) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) msgget$private(0x0, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) gettid() timer_create(0x3, 0x0, &(0x7f0000000100)) fchmod(0xffffffffffffffff, 0x138) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$packet(0x11, 0x3, 0x300) write$UHID_INPUT(r1, &(0x7f0000002a80)={0x9, {"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", 0x1000}}, 0x1006) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) wait4(r2, 0x0, 0x40000000, 0x0) 725.210462ms ago: executing program 8 (id=3316): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xd0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xbc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @empty}}}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40010}, 0x4000010) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000006c0)="120000001200e7efa000099527aa5e51eef4", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 353.551853ms ago: executing program 8 (id=3317): openat(0xffffffffffffff9c, 0x0, 0x204480, 0x14c) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x11) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) connect$inet(r1, &(0x7f00000000c0), 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0xa, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x8742, 0x3, 0x7, 0x247c2d87, 0xfffffffd}, 0x14) shutdown(r1, 0x2) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r0, 0x0) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000100)=""/174, 0xae}], 0x1) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000040)="7b5515ccc8bca12641e65d58fd1a12f63952868d811b21d40ede8a2683ec657ae641e7d9876a18da8083b3", 0x0, 0x8001, 0x0, 0x0, 0x50}, 0x28) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea4, 0x4, @loopback, 0x6}, 0x1c) 0s ago: executing program 7 (id=3318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x2, 0x8, 0x3, 0x5, 0x1, 0xb, 0x2, 0xb, 0xc, 0xc, 0x1, 0x9, 0x9, 0xc, 0x1, 0x1], 0x1, [0x3, 0x8000, 0x3e63, 0x1, 0x466, 0x5, 0x7ff, 0x0, 0xaf, 0x9, 0x3, 0x9, 0x8e, 0xd4de, 0xb, 0x9], [0x2, 0x7, 0x6, 0x3ff, 0x101, 0x100, 0x5, 0xfffb, 0xfffb, 0x1000, 0x101, 0x81, 0x7fff, 0x4, 0x0, 0x7]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xb}, {0xfff3}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0xf, 0x5, 0x2, 0x0, 0xfd, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x4, 0x2002, 0x3, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0x40b, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x8001, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x1ff, 0x3fe, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x48800) close(0x3) kernel console output (not intermixed with test programs): > [ 720.053915][T14689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3020'. [ 720.383195][T14697] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3021'. [ 720.745829][T14709] netlink: 'syz.5.3028': attribute type 1 has an invalid length. [ 720.745855][T14709] netlink: 64399 bytes leftover after parsing attributes in process `syz.5.3028'. [ 720.831931][ T8991] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 721.161898][ T8991] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 721.167960][ T8991] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 721.168013][ T8991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.637715][ T8991] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 722.115578][ T8991] wwan wwan0: port wwan0qmi0 attached [ 722.281927][ T8991] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, d6:52:16:5a:61:32 [ 722.308135][ T8991] usb 4-1: USB disconnect, device number 36 [ 722.363712][ T8991] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 722.453876][T14745] qmi_wwan 4-1:1.0: Error submitting int urb - -2 [ 722.582427][T14756] netlink: 64399 bytes leftover after parsing attributes in process `syz.6.3039'. [ 722.893247][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3040'. [ 723.000628][T14762] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3041'. [ 723.114952][ T8991] wwan wwan0: port wwan0qmi0 disconnected [ 724.209441][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 724.296004][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 724.331935][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 724.333108][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 724.335024][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 725.023043][T14809] netlink: 64399 bytes leftover after parsing attributes in process `syz.3.3052'. [ 725.484232][T14819] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3054'. [ 725.504065][T14820] bridge0: port 1(veth0) entered blocking state [ 725.504242][T14820] bridge0: port 1(veth0) entered disabled state [ 725.505059][T14820] veth0: entered allmulticast mode [ 725.539938][T14820] veth0: entered promiscuous mode [ 725.917326][T14832] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3058'. [ 725.917357][T14832] openvswitch: netlink: Flow actions attr not present in new flow. [ 726.591253][ T59] Bluetooth: hci1: command tx timeout [ 726.988013][T14862] netlink: 64399 bytes leftover after parsing attributes in process `syz.6.3065'. [ 727.104536][T14864] binder: BINDER_SET_CONTEXT_MGR already set [ 727.104554][T14864] binder: 14863:14864 ioctl 4018620d 200000000100 returned -16 [ 727.134573][T14864] binder: BINDER_SET_CONTEXT_MGR already set [ 727.134591][T14864] binder: 14863:14864 ioctl 4018620d 200000001000 returned -16 [ 727.700198][T14877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3070'. [ 727.876818][T14881] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3071'. [ 727.876845][T14881] openvswitch: netlink: Flow actions attr not present in new flow. [ 728.503679][T14902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3077'. [ 728.503706][T14902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3077'. [ 728.689480][ T59] Bluetooth: hci1: command tx timeout [ 728.821213][T14901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 729.126514][T14912] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 729.239207][T14923] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 729.334620][T14912] syzkaller0: left promiscuous mode [ 729.334655][T14912] syzkaller0: left allmulticast mode [ 729.662741][T14929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 730.722418][T14783] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.724186][T14783] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.724385][T14783] bridge_slave_0: entered allmulticast mode [ 730.730516][T14783] bridge_slave_0: entered promiscuous mode [ 730.782208][T14783] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.784417][T14783] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.786183][T14783] bridge_slave_1: entered allmulticast mode [ 730.816611][T14783] bridge_slave_1: entered promiscuous mode [ 730.838097][ T59] Bluetooth: hci1: command tx timeout [ 731.003799][T14783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.025564][T14783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.064634][ T59] Bluetooth: hci2: unexpected cc 0x200b length: 2 > 1 [ 731.067464][T14943] FAULT_INJECTION: forcing a failure. [ 731.067464][T14943] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 731.067506][T14943] CPU: 1 UID: 0 PID: 14943 Comm: syz.5.3087 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 731.067540][T14943] Tainted: [L]=SOFTLOCKUP [ 731.067548][T14943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 731.067563][T14943] Call Trace: [ 731.067573][T14943] [ 731.067583][T14943] dump_stack_lvl+0xe8/0x150 [ 731.067623][T14943] should_fail_ex+0x46b/0x600 [ 731.067659][T14943] prepare_alloc_pages+0x223/0x650 [ 731.067701][T14943] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 731.067742][T14943] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 731.067787][T14943] ? __pfx_policy_nodemask+0x10/0x10 [ 731.067816][T14943] ? __pfx_policy_nodemask+0x10/0x10 [ 731.067849][T14943] alloc_pages_mpol+0xd4/0x280 [ 731.067869][T14943] alloc_pages_noprof+0xd2/0x2f0 [ 731.067887][T14943] kimage_alloc_pages+0xbe/0x3c0 [ 731.067914][T14943] kimage_alloc_page+0xa6/0x880 [ 731.067946][T14943] kimage_load_segment+0xbf6/0x1230 [ 731.067979][T14943] do_kexec_load+0x637/0x7c0 [ 731.068008][T14943] ? __pfx_do_kexec_load+0x10/0x10 [ 731.068034][T14943] ? _copy_from_user+0x94/0xb0 [ 731.068066][T14943] __se_sys_kexec_load+0x134/0x160 [ 731.068092][T14943] do_syscall_64+0x166/0x520 [ 731.068116][T14943] ? trace_irq_disable+0x3b/0x140 [ 731.068138][T14943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.068156][T14943] ? clear_bhb_loop+0x70/0xc0 [ 731.068176][T14943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.068198][T14943] RIP: 0033:0x7f231ca9e159 [ 731.068214][T14943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.068229][T14943] RSP: 002b:00007f231acf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 731.068247][T14943] RAX: ffffffffffffffda RBX: 00007f231cd25fa0 RCX: 00007f231ca9e159 [ 731.068260][T14943] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002 [ 731.068271][T14943] RBP: 00007f231cb3503b R08: 0000000000000000 R09: 0000000000000000 [ 731.068282][T14943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 731.068292][T14943] R13: 00007f231cd26038 R14: 00007f231cd25fa0 R15: 00007ffe911c6868 [ 731.068318][T14943] [ 731.471807][ T9026] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 731.651086][ T9026] usb 2-1: Using ep0 maxpacket: 8 [ 731.652981][ T9026] usb 2-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 731.656411][ T9026] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 731.690864][ T9026] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.690894][ T9026] usb 2-1: Product: syz [ 731.690996][ T9026] usb 2-1: Manufacturer: syz [ 731.691014][ T9026] usb 2-1: SerialNumber: syz [ 731.843414][T14783] team0: Port device team_slave_0 added [ 731.844141][T14296] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.914008][T14783] team0: Port device team_slave_1 added [ 731.922086][T14296] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.016205][T14941] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 732.016320][T14941] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 732.016608][T14941] vhci_hcd vhci_hcd.0: Device attached [ 732.149562][T14960] vhci_hcd: connection closed [ 732.154707][ T47] vhci_hcd vhci_hcd.1: stop threads [ 732.154739][ T47] vhci_hcd vhci_hcd.1: release socket [ 732.154781][ T47] vhci_hcd vhci_hcd.1: disconnect device [ 732.272559][T14783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.272579][T14783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.272609][T14783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.275413][T14783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.275430][T14783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.275461][T14783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.304703][ T9026] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 732.391156][ T9026] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 732.401854][ T769] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.403703][ T9026] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 732.431442][ T9026] usb 2-1: USB disconnect, device number 22 [ 732.458166][T14963] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 732.589959][T14783] hsr_slave_0: entered promiscuous mode [ 732.598780][T14783] hsr_slave_1: entered promiscuous mode [ 732.924044][ T59] Bluetooth: hci1: command tx timeout [ 733.439208][T14975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.054818][T14997] device-mapper: table: 248:0: zero-length target [ 734.054841][T14997] device-mapper: ioctl: error adding target to table [ 734.283781][T15013] binder: BINDER_SET_CONTEXT_MGR already set [ 734.283800][T15013] binder: 15011:15013 ioctl 4018620d 200000000100 returned -16 [ 734.290443][T15013] binder: BINDER_SET_CONTEXT_MGR already set [ 734.290460][T15013] binder: 15011:15013 ioctl 4018620d 200000001000 returned -16 [ 734.695628][T14783] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 734.786565][T14783] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 734.788214][T14783] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 734.817530][T14783] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 734.818776][T14783] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 734.926420][T14783] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 734.929582][T14783] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 734.995452][T14783] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 735.337749][T15026] FAULT_INJECTION: forcing a failure. [ 735.337749][T15026] name failslab, interval 1, probability 10, space 0, times 0 [ 735.337793][T15026] CPU: 0 UID: 0 PID: 15026 Comm: syz.6.3115 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 735.337827][T15026] Tainted: [L]=SOFTLOCKUP [ 735.337837][T15026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 735.337853][T15026] Call Trace: [ 735.337862][T15026] [ 735.337873][T15026] dump_stack_lvl+0xe8/0x150 [ 735.337915][T15026] should_fail_ex+0x46b/0x600 [ 735.337953][T15026] should_failslab+0xa8/0x100 [ 735.337993][T15026] __kmalloc_noprof+0xfb/0x790 [ 735.338026][T15026] ? __memcg_list_lru_alloc+0x211/0x830 [ 735.338098][T15026] ? __memcg_list_lru_alloc+0x211/0x830 [ 735.338146][T15026] __memcg_list_lru_alloc+0x211/0x830 [ 735.338193][T15026] ? xa_load+0x60/0x210 [ 735.338304][T15026] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 735.338364][T15026] __memcg_slab_post_alloc_hook+0x3e6/0xfe0 [ 735.338401][T15026] ? __memcg_slab_post_alloc_hook+0x22f/0xfe0 [ 735.338454][T15026] ? __d_alloc+0x37/0x6f0 [ 735.338483][T15026] kmem_cache_alloc_lru_noprof+0x41c/0x680 [ 735.338514][T15026] ? vsnprintf+0xe42/0xef0 [ 735.338537][T15026] ? __d_alloc+0x37/0x6f0 [ 735.338563][T15026] ? __d_alloc+0x37/0x6f0 [ 735.338598][T15026] __d_alloc+0x37/0x6f0 [ 735.338625][T15026] ? sprintf+0xe7/0x140 [ 735.338648][T15026] ? hashlen_string+0x54/0x110 [ 735.338676][T15026] d_alloc_name+0xba/0x270 [ 735.338704][T15026] ? __pfx_sprintf+0x10/0x10 [ 735.338731][T15026] ? __pfx_d_alloc_name+0x10/0x10 [ 735.338772][T15026] devpts_pty_new+0x302/0x610 [ 735.338828][T15026] ? __pfx_devpts_pty_new+0x10/0x10 [ 735.338850][T15026] ? rt_spin_unlock+0x159/0x200 [ 735.338882][T15026] ? rt_spin_unlock+0x165/0x200 [ 735.338912][T15026] ptmx_open+0x1d1/0x2e0 [ 735.338941][T15026] chrdev_open+0x4dc/0x600 [ 735.338978][T15026] ? __pfx_chrdev_open+0x10/0x10 [ 735.339013][T15026] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 735.339056][T15026] ? __pfx_chrdev_open+0x10/0x10 [ 735.339089][T15026] do_dentry_open+0x849/0x1420 [ 735.339140][T15026] vfs_open+0x3b/0x350 [ 735.339171][T15026] ? path_openat+0x142d/0x1d60 [ 735.339205][T15026] path_openat+0x1448/0x1d60 [ 735.339259][T15026] do_file_open+0x23e/0x4a0 [ 735.339309][T15026] ? __pfx_do_file_open+0x10/0x10 [ 735.339374][T15026] ? alloc_fd+0x654/0x6d0 [ 735.339411][T15026] do_sys_openat2+0x115/0x200 [ 735.339449][T15026] ? __se_sys_futex+0x3a8/0x450 [ 735.339473][T15026] ? __pfx_do_sys_openat2+0x10/0x10 [ 735.339517][T15026] ? rcu_is_watching+0x16/0xb0 [ 735.339558][T15026] __x64_sys_openat+0x138/0x170 [ 735.339602][T15026] do_syscall_64+0x166/0x520 [ 735.339634][T15026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.339659][T15026] ? clear_bhb_loop+0x70/0xc0 [ 735.339689][T15026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.339714][T15026] RIP: 0033:0x7fdd882ee159 [ 735.339737][T15026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.339758][T15026] RSP: 002b:00007fdd86546028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 735.339784][T15026] RAX: ffffffffffffffda RBX: 00007fdd88575fa0 RCX: 00007fdd882ee159 [ 735.339802][T15026] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 735.339818][T15026] RBP: 00007fdd8838503b R08: 0000000000000000 R09: 0000000000000000 [ 735.339834][T15026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.339849][T15026] R13: 00007fdd88576038 R14: 00007fdd88575fa0 R15: 00007ffd864cffa8 [ 735.339889][T15026] [ 736.531051][ T47] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 736.783358][T14783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.188319][ T1498] bridge_slave_1: left allmulticast mode [ 737.188359][ T1498] bridge_slave_1: left promiscuous mode [ 737.188720][ T1498] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.306992][ T1498] bridge_slave_0: left allmulticast mode [ 737.307031][ T1498] bridge_slave_0: left promiscuous mode [ 737.307280][ T1498] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.786227][T15092] nvme_rdma: malformed address passed: 1:4420 [ 739.242483][T15110] FAULT_INJECTION: forcing a failure. [ 739.242483][T15110] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 739.242530][T15110] CPU: 0 UID: 0 PID: 15110 Comm: syz.1.3141 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 739.242564][T15110] Tainted: [L]=SOFTLOCKUP [ 739.242573][T15110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 739.242588][T15110] Call Trace: [ 739.242598][T15110] [ 739.242609][T15110] dump_stack_lvl+0xe8/0x150 [ 739.242651][T15110] should_fail_ex+0x46b/0x600 [ 739.242693][T15110] prepare_alloc_pages+0x223/0x650 [ 739.242736][T15110] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 739.242777][T15110] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 739.242826][T15110] ? __pfx_policy_nodemask+0x10/0x10 [ 739.242865][T15110] ? __pfx_policy_nodemask+0x10/0x10 [ 739.242912][T15110] alloc_pages_mpol+0xd4/0x280 [ 739.242941][T15110] alloc_pages_noprof+0xd2/0x2f0 [ 739.242969][T15110] kimage_alloc_pages+0xbe/0x3c0 [ 739.243007][T15110] kimage_alloc_page+0xa6/0x880 [ 739.243053][T15110] kimage_load_segment+0xbf6/0x1230 [ 739.243100][T15110] do_kexec_load+0x637/0x7c0 [ 739.243149][T15110] ? __pfx_do_kexec_load+0x10/0x10 [ 739.243187][T15110] ? _copy_from_user+0x94/0xb0 [ 739.243233][T15110] __se_sys_kexec_load+0x134/0x160 [ 739.243277][T15110] do_syscall_64+0x166/0x520 [ 739.243310][T15110] ? trace_irq_disable+0x3b/0x140 [ 739.243341][T15110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.243366][T15110] ? clear_bhb_loop+0x70/0xc0 [ 739.243396][T15110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.243420][T15110] RIP: 0033:0x7fdac8cde159 [ 739.243443][T15110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.243463][T15110] RSP: 002b:00007fdac6f36028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 739.243489][T15110] RAX: ffffffffffffffda RBX: 00007fdac8f65fa0 RCX: 00007fdac8cde159 [ 739.243507][T15110] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002 [ 739.243523][T15110] RBP: 00007fdac8d7503b R08: 0000000000000000 R09: 0000000000000000 [ 739.243538][T15110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 739.243553][T15110] R13: 00007fdac8f66038 R14: 00007fdac8f65fa0 R15: 00007fff00315308 [ 739.243592][T15110] [ 739.630668][T15113] debugfs: out of free dentries, can not create file 'io_exits' [ 739.711737][ T1498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.794499][ T1498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 739.834466][ T1498] bond0 (unregistering): Released all slaves [ 739.854470][ T1498] bond1 (unregistering): Released all slaves [ 740.205050][ T5245] 8021q: adding VLAN 0 to HW filter on device eth9 [ 740.559301][T15114] debugfs: out of free dentries, can not create file 'estab_plinks' [ 740.790717][T15114] debugfs: out of free dentries, can not create file 'user_power_level' [ 741.374332][T15138] FAULT_INJECTION: forcing a failure. [ 741.374332][T15138] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 741.374379][T15138] CPU: 0 UID: 0 PID: 15138 Comm: syz.3.3151 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 741.374418][T15138] Tainted: [L]=SOFTLOCKUP [ 741.374427][T15138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 741.374442][T15138] Call Trace: [ 741.374451][T15138] [ 741.374461][T15138] dump_stack_lvl+0xe8/0x150 [ 741.374503][T15138] should_fail_ex+0x46b/0x600 [ 741.374539][T15138] prepare_alloc_pages+0x223/0x650 [ 741.374574][T15138] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 741.374609][T15138] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 741.374645][T15138] ? __pfx_policy_nodemask+0x10/0x10 [ 741.374687][T15138] ? __pfx_policy_nodemask+0x10/0x10 [ 741.374730][T15138] alloc_pages_mpol+0xd4/0x280 [ 741.374754][T15138] alloc_pages_noprof+0xd2/0x2f0 [ 741.374778][T15138] kimage_alloc_pages+0xbe/0x3c0 [ 741.374812][T15138] kimage_alloc_page+0xa6/0x880 [ 741.374866][T15138] kimage_load_segment+0xbf6/0x1230 [ 741.374911][T15138] do_kexec_load+0x637/0x7c0 [ 741.374949][T15138] ? __pfx_do_kexec_load+0x10/0x10 [ 741.374982][T15138] ? _copy_from_user+0x94/0xb0 [ 741.375015][T15138] __se_sys_kexec_load+0x134/0x160 [ 741.375050][T15138] do_syscall_64+0x166/0x520 [ 741.375082][T15138] ? trace_irq_disable+0x3b/0x140 [ 741.375109][T15138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.375135][T15138] ? clear_bhb_loop+0x70/0xc0 [ 741.375162][T15138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.375194][T15138] RIP: 0033:0x7fb3dcdfe159 [ 741.375216][T15138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.375236][T15138] RSP: 002b:00007fb3db056028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 741.375260][T15138] RAX: ffffffffffffffda RBX: 00007fb3dd085fa0 RCX: 00007fb3dcdfe159 [ 741.375278][T15138] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002 [ 741.375293][T15138] RBP: 00007fb3dce9503b R08: 0000000000000000 R09: 0000000000000000 [ 741.375308][T15138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.375323][T15138] R13: 00007fb3dd086038 R14: 00007fb3dd085fa0 R15: 00007ffe7b8508d8 [ 741.375360][T15138] [ 741.501264][ T31] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 741.714598][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 741.718302][ T31] usb 6-1: config index 0 descriptor too short (expected 8251, got 59) [ 741.718334][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 741.718386][ T31] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 741.724714][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 741.724778][ T31] usb 6-1: SerialNumber: syz [ 741.788646][ T31] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 742.253111][T15126] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.253953][T15126] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.583248][T15126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.590170][T15126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.657227][ T9026] usb 6-1: USB disconnect, device number 12 [ 743.218036][T15157] FAULT_INJECTION: forcing a failure. [ 743.218036][T15157] name fail_futex, interval 1, probability 0, space 0, times 0 [ 743.218085][T15157] CPU: 1 UID: 0 PID: 15157 Comm: syz.5.3155 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 743.218109][T15157] Tainted: [L]=SOFTLOCKUP [ 743.218115][T15157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 743.218125][T15157] Call Trace: [ 743.218132][T15157] [ 743.218140][T15157] dump_stack_lvl+0xe8/0x150 [ 743.218171][T15157] should_fail_ex+0x46b/0x600 [ 743.218198][T15157] get_futex_key+0x1b4/0x1580 [ 743.218226][T15157] ? __pfx_futex_wake_mark+0x10/0x10 [ 743.218251][T15157] ? __pfx_get_futex_key+0x10/0x10 [ 743.218285][T15157] futex_wake+0x119/0x600 [ 743.218307][T15157] ? __pfx_futex_wait+0x10/0x10 [ 743.218326][T15157] ? __pfx_futex_wake+0x10/0x10 [ 743.218353][T15157] ? __lock_acquire+0x747/0x2de0 [ 743.218378][T15157] do_futex+0x458/0x4e0 [ 743.218398][T15157] ? __pfx_do_futex+0x10/0x10 [ 743.218413][T15157] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 743.218438][T15157] __se_sys_futex+0x3a8/0x450 [ 743.218459][T15157] ? __pfx___se_sys_futex+0x10/0x10 [ 743.218476][T15157] ? __task_pid_nr_ns+0x28/0x470 [ 743.218498][T15157] ? __x64_sys_futex+0x21/0xf0 [ 743.218515][T15157] do_syscall_64+0x166/0x520 [ 743.218539][T15157] ? trace_irq_disable+0x3b/0x140 [ 743.218563][T15157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.218580][T15157] ? clear_bhb_loop+0x70/0xc0 [ 743.218600][T15157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.218617][T15157] RIP: 0033:0x7f231ca9e159 [ 743.218633][T15157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.218647][T15157] RSP: 002b:00007f231acf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 743.218665][T15157] RAX: ffffffffffffffda RBX: 00007f231cd25fa8 RCX: 00007f231ca9e159 [ 743.218678][T15157] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f231cd25fac [ 743.218689][T15157] RBP: 00007f231cd25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 743.218701][T15157] R10: 000000000000059b R11: 0000000000000246 R12: 0000000000000000 [ 743.218711][T15157] R13: 00007f231cd26038 R14: 00007ffe911c6780 R15: 00007ffe911c6868 [ 743.218737][T15157] [ 743.883385][T15164] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 744.045288][T15128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.046988][T15128] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.069422][T15128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 744.399078][T15128] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.399221][T15128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.427935][T15128] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.428066][T15128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.459355][T15128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 744.478705][T15128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 744.515801][T15128] veth1_vlan: left promiscuous mode [ 744.517211][T15128] veth0_vlan: left promiscuous mode [ 744.557644][T15128] veth0_vlan: entered promiscuous mode [ 744.570778][T15128] veth1_vlan: entered promiscuous mode [ 744.603235][T15128] veth1_macvtap: left promiscuous mode [ 744.608381][T15128] veth0_macvtap: left promiscuous mode [ 744.623246][T15128] veth0_macvtap: entered promiscuous mode [ 744.659927][T15128] veth1_macvtap: entered promiscuous mode [ 744.694633][T15128] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 744.696213][T15128] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 744.697726][T15128] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 744.699227][T15128] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 745.068347][T14783] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.186187][T15142] syzkaller0: entered promiscuous mode [ 745.186221][T15142] syzkaller0: entered allmulticast mode [ 746.236968][T15199] netlink: 'syz.5.3174': attribute type 63 has an invalid length. [ 746.417875][T15202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3175'. [ 747.337822][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.405531][ T5599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 757.447887][ T5599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 757.449294][ T5599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 757.450712][ T5599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 757.474183][ T5599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 759.631262][ T59] Bluetooth: hci0: command tx timeout [ 760.759976][ T5599] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 760.823834][ T5599] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 760.833358][ T5599] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 760.902686][ T5599] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 760.903498][ T5599] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 761.721368][ T59] Bluetooth: hci0: command tx timeout [ 761.837104][ T5599] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 761.911273][ T5599] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 761.917510][ T5599] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 761.988752][T11792] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 761.989531][T11792] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 762.057588][T15222] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 762.090266][T11792] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 762.116623][T11792] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 762.182855][T11792] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 762.186178][ T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 762.991460][ T5599] Bluetooth: hci6: command tx timeout [ 763.166772][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3175'. [ 763.345855][T15200] netlink: 'syz.5.3174': attribute type 63 has an invalid length. [ 763.376232][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.376374][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.562854][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.562999][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.791092][ T5599] Bluetooth: hci0: command tx timeout [ 764.091107][ T1498] hsr_slave_0: left promiscuous mode [ 764.164922][ T1498] hsr_slave_1: left promiscuous mode [ 764.166113][ T1498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 764.514485][ T5599] Bluetooth: hci7: command tx timeout [ 764.637147][ T5599] Bluetooth: hci8: command tx timeout [ 765.071625][ T5599] Bluetooth: hci6: command tx timeout [ 765.090439][ T1498] team0 (unregistering): Port device team_slave_1 removed [ 765.141754][ T1498] team0 (unregistering): Port device team_slave_0 removed [ 765.872212][T11792] Bluetooth: hci0: command tx timeout [ 766.131721][T15200] bond0: (slave syz_tun): Releasing backup interface [ 766.433831][T15203] syz_tun (unregistering): left allmulticast mode [ 766.513515][ T5245] 8021q: adding VLAN 0 to HW filter on device eth10 [ 766.591521][T11792] Bluetooth: hci7: command tx timeout [ 766.673363][T11792] Bluetooth: hci8: command tx timeout [ 767.155111][T11792] Bluetooth: hci6: command tx timeout [ 768.671138][T11792] Bluetooth: hci7: command tx timeout [ 768.761202][T11792] Bluetooth: hci8: command tx timeout [ 769.020082][ T5245] 8021q: adding VLAN 0 to HW filter on device eth11 [ 769.231117][T11792] Bluetooth: hci6: command tx timeout [ 769.680672][T14783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.525340][T15205] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.525475][T15205] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.525698][T15205] bridge_slave_0: entered allmulticast mode [ 770.530107][T15205] bridge_slave_0: entered promiscuous mode [ 770.658296][T15205] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.658716][T15205] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.658905][T15205] bridge_slave_1: entered allmulticast mode [ 770.701772][T15205] bridge_slave_1: entered promiscuous mode [ 770.761438][T11792] Bluetooth: hci7: command tx timeout [ 770.831083][T11792] Bluetooth: hci8: command tx timeout [ 771.041591][T15211] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.041703][T15211] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.041866][T15211] bridge_slave_0: entered allmulticast mode [ 771.043818][T15211] bridge_slave_0: entered promiscuous mode [ 771.087943][T15220] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.088081][T15220] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.088259][T15220] bridge_slave_0: entered allmulticast mode [ 771.090413][T15220] bridge_slave_0: entered promiscuous mode [ 771.149291][ T5245] 8021q: adding VLAN 0 to HW filter on device eth12 [ 771.151331][T15211] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.151436][T15211] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.151593][T15211] bridge_slave_1: entered allmulticast mode [ 771.181637][T15211] bridge_slave_1: entered promiscuous mode [ 771.187616][T15205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.189372][T15220] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.189459][T15220] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.189587][T15220] bridge_slave_1: entered allmulticast mode [ 771.213034][T15220] bridge_slave_1: entered promiscuous mode [ 771.284368][T15205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.322709][T15218] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.322862][T15218] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.323037][T15218] bridge_slave_0: entered allmulticast mode [ 771.326951][T15218] bridge_slave_0: entered promiscuous mode [ 771.415964][T15218] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.416082][T15218] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.416207][T15218] bridge_slave_1: entered allmulticast mode [ 771.418094][T15218] bridge_slave_1: entered promiscuous mode [ 771.579095][T15211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.612415][T15220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.662563][T15211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.666141][T15205] team0: Port device team_slave_0 added [ 771.684399][T15220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.755919][T15205] team0: Port device team_slave_1 added [ 772.079507][T15218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.160804][T15218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.184195][T15211] team0: Port device team_slave_0 added [ 772.247314][T15220] team0: Port device team_slave_0 added [ 772.277722][T15211] team0: Port device team_slave_1 added [ 772.434475][T15205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.434491][T15205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.434512][T15205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.437466][T15220] team0: Port device team_slave_1 added [ 772.524853][T15205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.524868][T15205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.524889][T15205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.584744][T15218] team0: Port device team_slave_0 added [ 772.681383][T15218] team0: Port device team_slave_1 added [ 772.685418][T15211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.685432][T15211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.685452][T15211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.742854][T15220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.742870][T15220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.742891][T15220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.807115][T15211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.807130][T15211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.807151][T15211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.813930][T15220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.813965][T15220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.814050][T15220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.006724][T15218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.006743][T15218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.006770][T15218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.102013][T15218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.102027][T15218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.102049][T15218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.283148][T15205] hsr_slave_0: entered promiscuous mode [ 773.284161][T15205] hsr_slave_1: entered promiscuous mode [ 773.284830][T15205] debugfs: 'hsr0' already exists in 'hsr' [ 773.284854][T15205] Cannot create hsr debugfs directory [ 773.336082][T14783] veth0_vlan: entered promiscuous mode [ 773.449987][T15211] hsr_slave_0: entered promiscuous mode [ 773.453052][T15211] hsr_slave_1: entered promiscuous mode [ 773.455701][T15211] debugfs: 'hsr0' already exists in 'hsr' [ 773.455779][T15211] Cannot create hsr debugfs directory [ 773.515169][T15220] hsr_slave_0: entered promiscuous mode [ 773.516122][T15220] hsr_slave_1: entered promiscuous mode [ 773.516809][T15220] debugfs: 'hsr0' already exists in 'hsr' [ 773.516832][T15220] Cannot create hsr debugfs directory [ 773.626376][T15218] hsr_slave_0: entered promiscuous mode [ 773.627324][T15218] hsr_slave_1: entered promiscuous mode [ 773.628062][T15218] debugfs: 'hsr0' already exists in 'hsr' [ 773.628081][T15218] Cannot create hsr debugfs directory [ 773.742100][T14783] veth1_vlan: entered promiscuous mode [ 775.216444][T14783] veth0_macvtap: entered promiscuous mode [ 775.241909][T14783] veth1_macvtap: entered promiscuous mode [ 775.395879][T15205] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 775.461234][T15205] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 775.465225][T14783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 775.512367][T15205] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 775.559079][T15205] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 776.069613][T15205] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 776.116750][T15205] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 776.202467][ T5245] 8021q: adding VLAN 0 to HW filter on device eth13 [ 776.221823][T14783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 776.224365][T15205] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 776.294394][T15205] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 777.831729][ T769] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.071547][ T1498] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.151680][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.151705][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.577841][ T1498] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.618812][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.618834][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.734156][T15205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.045727][ T1498] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.728558][T15205] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.738196][ T5245] 8021q: adding VLAN 0 to HW filter on device eth14 [ 780.088205][ T1498] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.181424][ T769] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.181662][ T769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.215798][ T769] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.215934][ T769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.837540][T15414] netlink: 'syz.7.3185': attribute type 10 has an invalid length. [ 781.075916][T15414] syz_tun: entered promiscuous mode [ 781.121908][T15414] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 781.124648][ T769] bond0: (slave bond_slave_0): interface is now down [ 781.124678][ T769] bond0: (slave bond_slave_1): interface is now down [ 781.124692][ T769] bond0: (slave syz_tun): interface is now down [ 781.224712][ T1119] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.263695][ T769] bond0: (slave bond_slave_0): interface is now down [ 781.263717][ T769] bond0: (slave bond_slave_1): interface is now down [ 781.263731][ T769] bond0: (slave syz_tun): interface is now down [ 781.291125][ T386] bond0: (slave bond_slave_0): interface is now down [ 781.291144][ T386] bond0: (slave bond_slave_1): interface is now down [ 781.291157][ T386] bond0: (slave syz_tun): interface is now down [ 781.314672][ T47] bond0: (slave bond_slave_0): interface is now down [ 781.314732][ T47] bond0: (slave bond_slave_1): interface is now down [ 781.314772][ T47] bond0: (slave syz_tun): interface is now down [ 781.333567][ T386] bond0: (slave bond_slave_0): interface is now down [ 781.333628][ T386] bond0: (slave bond_slave_1): interface is now down [ 781.333670][ T386] bond0: (slave syz_tun): interface is now down [ 781.355455][T14296] bond0: (slave bond_slave_0): interface is now down [ 781.355532][T14296] bond0: (slave bond_slave_1): interface is now down [ 781.355574][T14296] bond0: (slave syz_tun): interface is now down [ 781.371912][ T769] bond0: (slave bond_slave_0): interface is now down [ 781.371974][ T769] bond0: (slave bond_slave_1): interface is now down [ 781.372035][ T769] bond0: (slave syz_tun): interface is now down [ 781.418968][T14296] bond0: (slave bond_slave_0): interface is now down [ 781.418992][T14296] bond0: (slave bond_slave_1): interface is now down [ 781.419014][T14296] bond0: (slave syz_tun): interface is now down [ 781.442417][T14296] bond0: (slave bond_slave_0): interface is now down [ 781.442441][T14296] bond0: (slave bond_slave_1): interface is now down [ 781.442457][T14296] bond0: (slave syz_tun): interface is now down [ 781.469908][ T769] bond0: (slave bond_slave_0): interface is now down [ 781.469966][ T769] bond0: (slave bond_slave_1): interface is now down [ 781.469999][ T769] bond0: (slave syz_tun): interface is now down [ 781.483845][T14314] bond0: (slave bond_slave_0): interface is now down [ 781.483892][T14314] bond0: (slave bond_slave_1): interface is now down [ 781.483927][T14314] bond0: (slave syz_tun): interface is now down [ 781.513109][ T769] bond0: (slave bond_slave_0): interface is now down [ 781.513131][ T769] bond0: (slave bond_slave_1): interface is now down [ 781.513145][ T769] bond0: (slave syz_tun): interface is now down [ 781.531413][T14314] bond0: (slave bond_slave_0): interface is now down [ 781.531464][T14314] bond0: (slave bond_slave_1): interface is now down [ 781.531508][T14314] bond0: (slave syz_tun): interface is now down [ 781.551718][ T47] bond0: (slave bond_slave_0): interface is now down [ 781.551775][ T47] bond0: (slave bond_slave_1): interface is now down [ 781.551801][ T47] bond0: (slave syz_tun): interface is now down [ 781.583876][ T47] bond0: (slave bond_slave_0): interface is now down [ 781.583896][ T47] bond0: (slave bond_slave_1): interface is now down [ 781.583910][ T47] bond0: (slave syz_tun): interface is now down [ 781.601433][ T1521] bond0: (slave bond_slave_0): interface is now down [ 781.601487][ T1521] bond0: (slave bond_slave_1): interface is now down [ 781.601527][ T1521] bond0: (slave syz_tun): interface is now down [ 781.635677][ T1521] bond0: (slave bond_slave_0): interface is now down [ 781.635698][ T1521] bond0: (slave bond_slave_1): interface is now down [ 781.635711][ T1521] bond0: (slave syz_tun): interface is now down [ 781.651200][T14314] bond0: (slave bond_slave_0): interface is now down [ 781.651252][T14314] bond0: (slave bond_slave_1): interface is now down [ 781.651288][T14314] bond0: (slave syz_tun): interface is now down [ 781.681214][ T1521] bond0: (slave bond_slave_0): interface is now down [ 781.681235][ T1521] bond0: (slave bond_slave_1): interface is now down [ 781.681251][ T1521] bond0: (slave syz_tun): interface is now down [ 781.701215][T14296] bond0: (slave bond_slave_0): interface is now down [ 781.701270][T14296] bond0: (slave bond_slave_1): interface is now down [ 781.701302][T14296] bond0: (slave syz_tun): interface is now down [ 781.721410][T14296] bond0: (slave bond_slave_0): interface is now down [ 781.721465][T14296] bond0: (slave bond_slave_1): interface is now down [ 781.721503][T14296] bond0: (slave syz_tun): interface is now down [ 781.741323][T14296] bond0: (slave bond_slave_0): interface is now down [ 781.741383][T14296] bond0: (slave bond_slave_1): interface is now down [ 781.741411][T14296] bond0: (slave syz_tun): interface is now down [ 781.768281][ T1521] bond0: (slave bond_slave_0): interface is now down [ 781.768338][ T1521] bond0: (slave bond_slave_1): interface is now down [ 781.768378][ T1521] bond0: (slave syz_tun): interface is now down [ 781.795671][ T1521] bond0: (slave bond_slave_0): interface is now down [ 781.795691][ T1521] bond0: (slave bond_slave_1): interface is now down [ 781.795705][ T1521] bond0: (slave syz_tun): interface is now down [ 781.821334][T14314] bond0: (slave bond_slave_0): interface is now down [ 781.821355][T14314] bond0: (slave bond_slave_1): interface is now down [ 781.821368][T14314] bond0: (slave syz_tun): interface is now down [ 781.841467][T14314] bond0: (slave bond_slave_0): interface is now down [ 781.841523][T14314] bond0: (slave bond_slave_1): interface is now down [ 781.841561][T14314] bond0: (slave syz_tun): interface is now down [ 781.861515][ T769] bond0: (slave bond_slave_0): interface is now down [ 781.861565][ T769] bond0: (slave bond_slave_1): interface is now down [ 781.861602][ T769] bond0: (slave syz_tun): interface is now down [ 781.882878][ T1521] bond0: (slave bond_slave_0): interface is now down [ 781.882932][ T1521] bond0: (slave bond_slave_1): interface is now down [ 781.882995][ T1521] bond0: (slave syz_tun): interface is now down [ 781.908821][ T386] bond0: (slave bond_slave_0): interface is now down [ 781.908894][ T386] bond0: (slave bond_slave_1): interface is now down [ 781.908934][ T386] bond0: (slave syz_tun): interface is now down [ 781.927333][ T1521] bond0: (slave bond_slave_0): interface is now down [ 781.927382][ T1521] bond0: (slave bond_slave_1): interface is now down [ 781.927420][ T1521] bond0: (slave syz_tun): interface is now down [ 781.941405][ T47] bond0: (slave bond_slave_0): interface is now down [ 781.941455][ T47] bond0: (slave bond_slave_1): interface is now down [ 781.941497][ T47] bond0: (slave syz_tun): interface is now down [ 781.963269][T14314] bond0: (slave bond_slave_0): interface is now down [ 781.963321][T14314] bond0: (slave bond_slave_1): interface is now down [ 781.963362][T14314] bond0: (slave syz_tun): interface is now down [ 781.992411][ T1521] bond0: (slave bond_slave_0): interface is now down [ 781.992433][ T1521] bond0: (slave bond_slave_1): interface is now down [ 781.993627][ T1521] bond0: (slave syz_tun): interface is now down [ 782.024327][ T47] bond0: (slave bond_slave_0): interface is now down [ 782.024350][ T47] bond0: (slave bond_slave_1): interface is now down [ 782.024366][ T47] bond0: (slave syz_tun): interface is now down [ 782.053827][T14314] bond0: (slave bond_slave_0): interface is now down [ 782.053848][T14314] bond0: (slave bond_slave_1): interface is now down [ 782.053862][T14314] bond0: (slave syz_tun): interface is now down [ 782.081236][T14314] bond0: (slave bond_slave_0): interface is now down [ 782.081255][T14314] bond0: (slave bond_slave_1): interface is now down [ 782.081268][T14314] bond0: (slave syz_tun): interface is now down [ 782.102650][ T386] bond0: (slave bond_slave_0): interface is now down [ 782.102672][ T386] bond0: (slave bond_slave_1): interface is now down [ 782.102688][ T386] bond0: (slave syz_tun): interface is now down [ 782.127322][T14296] bond0: (slave bond_slave_0): interface is now down [ 782.127379][T14296] bond0: (slave bond_slave_1): interface is now down [ 782.127411][T14296] bond0: (slave syz_tun): interface is now down [ 782.149880][T14296] bond0: (slave bond_slave_0): interface is now down [ 782.149937][T14296] bond0: (slave bond_slave_1): interface is now down [ 782.149977][T14296] bond0: (slave syz_tun): interface is now down [ 782.176059][ T47] bond0: (slave bond_slave_0): interface is now down [ 782.176079][ T47] bond0: (slave bond_slave_1): interface is now down [ 782.176093][ T47] bond0: (slave syz_tun): interface is now down [ 782.208737][ T47] bond0: (slave bond_slave_0): interface is now down [ 782.208756][ T47] bond0: (slave bond_slave_1): interface is now down [ 782.208770][ T47] bond0: (slave syz_tun): interface is now down [ 782.229055][T14296] bond0: (slave bond_slave_0): interface is now down [ 782.229120][T14296] bond0: (slave bond_slave_1): interface is now down [ 782.229156][T14296] bond0: (slave syz_tun): interface is now down [ 782.254121][ T386] bond0: (slave bond_slave_0): interface is now down [ 782.254143][ T386] bond0: (slave bond_slave_1): interface is now down [ 782.254158][ T386] bond0: (slave syz_tun): interface is now down [ 782.281764][ T386] bond0: (slave bond_slave_0): interface is now down [ 782.281793][ T386] bond0: (slave bond_slave_1): interface is now down [ 782.281808][ T386] bond0: (slave syz_tun): interface is now down [ 782.312093][ T47] bond0: (slave bond_slave_0): interface is now down [ 782.312110][ T47] bond0: (slave bond_slave_1): interface is now down [ 782.312121][ T47] bond0: (slave syz_tun): interface is now down [ 782.334809][ T769] bond0: (slave bond_slave_0): interface is now down [ 782.334876][ T769] bond0: (slave bond_slave_1): interface is now down [ 782.334924][ T769] bond0: (slave syz_tun): interface is now down [ 782.360689][ T769] bond0: (slave bond_slave_0): interface is now down [ 782.360742][ T769] bond0: (slave bond_slave_1): interface is now down [ 782.360778][ T769] bond0: (slave syz_tun): interface is now down [ 782.373015][ T47] bond0: (slave bond_slave_0): interface is now down [ 782.373034][ T47] bond0: (slave bond_slave_1): interface is now down [ 782.373048][ T47] bond0: (slave syz_tun): interface is now down [ 782.395690][ T47] bond0: (slave bond_slave_0): interface is now down [ 782.395736][ T47] bond0: (slave bond_slave_1): interface is now down [ 782.395771][ T47] bond0: (slave syz_tun): interface is now down [ 782.412068][ T769] bond0: (slave bond_slave_0): interface is now down [ 782.412122][ T769] bond0: (slave bond_slave_1): interface is now down [ 782.412163][ T769] bond0: (slave syz_tun): interface is now down [ 782.434437][ T386] bond0: (slave bond_slave_0): interface is now down [ 782.434495][ T386] bond0: (slave bond_slave_1): interface is now down [ 782.434551][ T386] bond0: (slave syz_tun): interface is now down [ 782.455599][ T47] bond0: (slave bond_slave_0): interface is now down [ 782.455653][ T47] bond0: (slave bond_slave_1): interface is now down [ 782.455693][ T47] bond0: (slave syz_tun): interface is now down [ 782.479725][ T769] bond0: (slave bond_slave_0): interface is now down [ 782.479773][ T769] bond0: (slave bond_slave_1): interface is now down [ 782.479819][ T769] bond0: (slave syz_tun): interface is now down [ 782.494566][ T47] bond0: (slave bond_slave_0): interface is now down [ 782.494613][ T47] bond0: (slave bond_slave_1): interface is now down [ 782.494649][ T47] bond0: (slave syz_tun): interface is now down [ 782.515922][ T769] bond0: (slave bond_slave_0): interface is now down [ 782.515968][ T769] bond0: (slave bond_slave_1): interface is now down [ 782.515997][ T769] bond0: (slave syz_tun): interface is now down [ 782.538110][ T386] bond0: (slave bond_slave_0): interface is now down [ 782.538163][ T386] bond0: (slave bond_slave_1): interface is now down [ 782.538203][ T386] bond0: (slave syz_tun): interface is now down [ 782.553269][ T769] bond0: (slave bond_slave_0): interface is now down [ 782.553325][ T769] bond0: (slave bond_slave_1): interface is now down [ 782.553363][ T769] bond0: (slave syz_tun): interface is now down [ 782.580880][ T386] bond0: (slave bond_slave_0): interface is now down [ 782.581042][ T386] bond0: (slave bond_slave_1): interface is now down [ 782.581095][ T386] bond0: (slave syz_tun): interface is now down [ 782.614681][ T386] bond0: (slave bond_slave_0): interface is now down [ 782.614699][ T386] bond0: (slave bond_slave_1): interface is now down [ 782.614713][ T386] bond0: (slave syz_tun): interface is now down [ 782.633070][ T769] bond0: (slave bond_slave_0): interface is now down [ 782.633130][ T769] bond0: (slave bond_slave_1): interface is now down [ 782.633164][ T769] bond0: (slave syz_tun): interface is now down [ 782.662768][ T47] bond0: (slave bond_slave_0): interface is now down [ 782.662791][ T47] bond0: (slave bond_slave_1): interface is now down [ 782.662807][ T47] bond0: (slave syz_tun): interface is now down [ 782.691109][T14314] bond0: (slave bond_slave_0): interface is now down [ 782.691148][T14314] bond0: (slave bond_slave_1): interface is now down [ 782.691193][T14314] bond0: (slave syz_tun): interface is now down [ 782.712945][ T47] bond0: (slave bond_slave_0): interface is now down [ 782.712967][ T47] bond0: (slave bond_slave_1): interface is now down [ 782.712983][ T47] bond0: (slave syz_tun): interface is now down [ 782.753815][T14314] bond0: (slave bond_slave_0): interface is now down [ 782.753837][T14314] bond0: (slave bond_slave_1): interface is now down [ 782.753852][T14314] bond0: (slave syz_tun): interface is now down [ 782.771770][T14314] bond0: (slave bond_slave_0): interface is now down [ 782.771832][T14314] bond0: (slave bond_slave_1): interface is now down [ 782.771873][T14314] bond0: (slave syz_tun): interface is now down [ 782.791405][ T386] bond0: (slave bond_slave_0): interface is now down [ 782.791467][ T386] bond0: (slave bond_slave_1): interface is now down [ 782.791503][ T386] bond0: (slave syz_tun): interface is now down [ 782.813393][T14296] bond0: (slave bond_slave_0): interface is now down [ 782.813462][T14296] bond0: (slave bond_slave_1): interface is now down [ 782.813498][T14296] bond0: (slave syz_tun): interface is now down [ 782.834341][T14314] bond0: (slave bond_slave_0): interface is now down [ 782.834400][T14314] bond0: (slave bond_slave_1): interface is now down [ 782.834426][T14314] bond0: (slave syz_tun): interface is now down [ 782.851411][ T386] bond0: (slave bond_slave_0): interface is now down [ 782.851446][ T386] bond0: (slave bond_slave_1): interface is now down [ 782.851497][ T386] bond0: (slave syz_tun): interface is now down [ 782.871610][ T386] bond0: (slave bond_slave_0): interface is now down [ 782.871671][ T386] bond0: (slave bond_slave_1): interface is now down [ 782.871710][ T386] bond0: (slave syz_tun): interface is now down [ 782.893898][T14296] bond0: (slave bond_slave_0): interface is now down [ 782.893961][T14296] bond0: (slave bond_slave_1): interface is now down [ 782.894003][T14296] bond0: (slave syz_tun): interface is now down [ 782.915495][ T386] bond0: (slave bond_slave_0): interface is now down [ 782.915553][ T386] bond0: (slave bond_slave_1): interface is now down [ 782.915592][ T386] bond0: (slave syz_tun): interface is now down [ 782.931371][ T386] bond0: (slave bond_slave_0): interface is now down [ 782.931406][ T386] bond0: (slave bond_slave_1): interface is now down [ 782.931441][ T386] bond0: (slave syz_tun): interface is now down [ 782.952391][ T386] bond0: (slave bond_slave_0): interface is now down [ 782.952412][ T386] bond0: (slave bond_slave_1): interface is now down [ 782.952428][ T386] bond0: (slave syz_tun): interface is now down [ 782.975202][T14314] bond0: (slave bond_slave_0): interface is now down [ 782.975255][T14314] bond0: (slave bond_slave_1): interface is now down [ 782.975290][T14314] bond0: (slave syz_tun): interface is now down [ 782.999506][ T1235] bond0: (slave bond_slave_0): interface is now down [ 782.999526][ T1235] bond0: (slave bond_slave_1): interface is now down [ 782.999541][ T1235] bond0: (slave syz_tun): interface is now down [ 783.021353][ T47] bond0: (slave bond_slave_0): interface is now down [ 783.021375][ T47] bond0: (slave bond_slave_1): interface is now down [ 783.021399][ T47] bond0: (slave syz_tun): interface is now down [ 783.053375][ T386] bond0: (slave bond_slave_0): interface is now down [ 783.053398][ T386] bond0: (slave bond_slave_1): interface is now down [ 783.053415][ T386] bond0: (slave syz_tun): interface is now down [ 783.078975][ T386] bond0: (slave bond_slave_0): interface is now down [ 783.079031][ T386] bond0: (slave bond_slave_1): interface is now down [ 783.079062][ T386] bond0: (slave syz_tun): interface is now down [ 783.091062][ T386] bond0: (slave bond_slave_0): interface is now down [ 783.091081][ T386] bond0: (slave bond_slave_1): interface is now down [ 783.091095][ T386] bond0: (slave syz_tun): interface is now down [ 783.152158][T14314] bond0: (slave bond_slave_0): interface is now down [ 783.152177][T14314] bond0: (slave bond_slave_1): interface is now down [ 783.152188][T14314] bond0: (slave syz_tun): interface is now down [ 783.171570][ T1235] bond0: (slave bond_slave_0): interface is now down [ 783.171625][ T1235] bond0: (slave bond_slave_1): interface is now down [ 783.171663][ T1235] bond0: (slave syz_tun): interface is now down [ 783.191780][T14314] bond0: (slave bond_slave_0): interface is now down [ 783.191838][T14314] bond0: (slave bond_slave_1): interface is now down [ 783.191890][T14314] bond0: (slave syz_tun): interface is now down [ 783.211474][ T386] bond0: (slave bond_slave_0): interface is now down [ 783.211529][ T386] bond0: (slave bond_slave_1): interface is now down [ 783.211569][ T386] bond0: (slave syz_tun): interface is now down [ 783.231288][ T386] bond0: (slave bond_slave_0): interface is now down [ 783.231307][ T386] bond0: (slave bond_slave_1): interface is now down [ 783.231320][ T386] bond0: (slave syz_tun): interface is now down [ 783.255019][T14314] bond0: (slave bond_slave_0): interface is now down [ 783.255073][T14314] bond0: (slave bond_slave_1): interface is now down [ 783.255098][T14314] bond0: (slave syz_tun): interface is now down [ 783.272448][ T1235] bond0: (slave bond_slave_0): interface is now down [ 783.272501][ T1235] bond0: (slave bond_slave_1): interface is now down [ 783.272544][ T1235] bond0: (slave syz_tun): interface is now down [ 783.295920][T14314] bond0: (slave bond_slave_0): interface is now down [ 783.296005][T14314] bond0: (slave bond_slave_1): interface is now down [ 783.296041][T14314] bond0: (slave syz_tun): interface is now down [ 783.317725][ T386] bond0: (slave bond_slave_0): interface is now down [ 783.317743][ T386] bond0: (slave bond_slave_1): interface is now down [ 783.317755][ T386] bond0: (slave syz_tun): interface is now down [ 783.332320][T14314] bond0: (slave bond_slave_0): interface is now down [ 783.332381][T14314] bond0: (slave bond_slave_1): interface is now down [ 783.332422][T14314] bond0: (slave syz_tun): interface is now down [ 783.358281][ T386] bond0: (slave bond_slave_0): interface is now down [ 783.358325][ T386] bond0: (slave bond_slave_1): interface is now down [ 783.358360][ T386] bond0: (slave syz_tun): interface is now down [ 783.374790][ T386] bond0: (slave bond_slave_0): interface is now down [ 783.374846][ T386] bond0: (slave bond_slave_1): interface is now down [ 783.374897][ T386] bond0: (slave syz_tun): interface is now down [ 783.399373][ T1235] bond0: (slave bond_slave_0): interface is now down [ 783.399418][ T1235] bond0: (slave bond_slave_1): interface is now down [ 783.399449][ T1235] bond0: (slave syz_tun): interface is now down [ 783.414030][ T1235] bond0: (slave bond_slave_0): interface is now down [ 783.414078][ T1235] bond0: (slave bond_slave_1): interface is now down [ 783.414110][ T1235] bond0: (slave syz_tun): interface is now down [ 783.433331][ T386] bond0: (slave bond_slave_0): interface is now down [ 783.433374][ T386] bond0: (slave bond_slave_1): interface is now down [ 783.433412][ T386] bond0: (slave syz_tun): interface is now down [ 783.451542][ T5796] bond0: (slave bond_slave_0): interface is now down [ 783.451597][ T5796] bond0: (slave bond_slave_1): interface is now down [ 783.451642][ T5796] bond0: (slave syz_tun): interface is now down [ 783.472772][T14314] bond0: (slave bond_slave_0): interface is now down [ 783.472827][T14314] bond0: (slave bond_slave_1): interface is now down [ 783.472881][T14314] bond0: (slave syz_tun): interface is now down [ 783.493374][T14296] bond0: (slave bond_slave_0): interface is now down [ 783.493427][T14296] bond0: (slave bond_slave_1): interface is now down [ 783.493457][T14296] bond0: (slave syz_tun): interface is now down [ 783.511425][ T386] bond0: (slave bond_slave_0): interface is now down [ 783.511471][ T386] bond0: (slave bond_slave_1): interface is now down [ 783.511503][ T386] bond0: (slave syz_tun): interface is now down [ 783.533361][ T386] bond0: (slave bond_slave_0): interface is now down [ 783.533413][ T386] bond0: (slave bond_slave_1): interface is now down [ 783.535162][ T386] bond0: (slave syz_tun): interface is now down [ 783.563428][ T386] bond0: (slave bond_slave_0): interface is now down [ 783.563447][ T386] bond0: (slave bond_slave_1): interface is now down [ 783.563461][ T386] bond0: (slave syz_tun): interface is now down [ 783.591188][T14296] bond0: (slave bond_slave_0): interface is now down [ 783.591210][T14296] bond0: (slave bond_slave_1): interface is now down [ 783.591227][T14296] bond0: (slave syz_tun): interface is now down [ 783.614084][ T386] bond0: (slave bond_slave_0): interface is now down [ 783.614131][ T386] bond0: (slave bond_slave_1): interface is now down [ 783.614167][ T386] bond0: (slave syz_tun): interface is now down [ 783.640241][T14296] bond0: (slave bond_slave_0): interface is now down [ 783.640288][T14296] bond0: (slave bond_slave_1): interface is now down [ 783.640324][T14296] bond0: (slave syz_tun): interface is now down [ 783.651681][T14296] bond0: (slave bond_slave_0): interface is now down [ 783.651725][T14296] bond0: (slave bond_slave_1): interface is now down [ 783.651764][T14296] bond0: (slave syz_tun): interface is now down [ 783.676797][ T386] bond0: (slave bond_slave_0): interface is now down [ 783.676860][ T386] bond0: (slave bond_slave_1): interface is now down [ 783.676896][ T386] bond0: (slave syz_tun): interface is now down [ 783.691340][ T1235] bond0: (slave bond_slave_0): interface is now down [ 783.691359][ T1235] bond0: (slave bond_slave_1): interface is now down [ 783.691401][ T1235] bond0: (slave syz_tun): interface is now down [ 783.695044][ T5245] 8021q: adding VLAN 0 to HW filter on device eth15 [ 783.718668][ T1119] bond0: (slave bond_slave_0): interface is now down [ 783.718715][ T1119] bond0: (slave bond_slave_1): interface is now down [ 783.718752][ T1119] bond0: (slave syz_tun): interface is now down [ 783.738390][ T386] bond0: (slave bond_slave_0): interface is now down [ 783.738437][ T386] bond0: (slave bond_slave_1): interface is now down [ 783.738474][ T386] bond0: (slave syz_tun): interface is now down [ 783.751314][T14296] bond0: (slave bond_slave_0): interface is now down [ 783.751373][T14296] bond0: (slave bond_slave_1): interface is now down [ 783.751411][T14296] bond0: (slave syz_tun): interface is now down [ 783.775475][ T386] bond0: (slave bond_slave_0): interface is now down [ 783.775521][ T386] bond0: (slave bond_slave_1): interface is now down [ 783.775557][ T386] bond0: (slave syz_tun): interface is now down [ 783.797391][T14296] bond0: (slave bond_slave_0): interface is now down [ 783.797443][T14296] bond0: (slave bond_slave_1): interface is now down [ 783.797479][T14296] bond0: (slave syz_tun): interface is now down [ 783.818778][ T1119] bond0: (slave bond_slave_0): interface is now down [ 783.818841][ T1119] bond0: (slave bond_slave_1): interface is now down [ 783.818883][ T1119] bond0: (slave syz_tun): interface is now down [ 783.846296][T14296] bond0: (slave bond_slave_0): interface is now down [ 783.846339][T14296] bond0: (slave bond_slave_1): interface is now down [ 783.846374][T14296] bond0: (slave syz_tun): interface is now down [ 783.861721][ T386] bond0: (slave bond_slave_0): interface is now down [ 783.861773][ T386] bond0: (slave bond_slave_1): interface is now down [ 783.861812][ T386] bond0: (slave syz_tun): interface is now down [ 783.894480][ T386] bond0: (slave bond_slave_0): interface is now down [ 783.894498][ T386] bond0: (slave bond_slave_1): interface is now down [ 783.894512][ T386] bond0: (slave syz_tun): interface is now down [ 783.911279][T14296] bond0: (slave bond_slave_0): interface is now down [ 783.911334][T14296] bond0: (slave bond_slave_1): interface is now down [ 783.911359][T14296] bond0: (slave syz_tun): interface is now down [ 783.931163][T14296] bond0: (slave bond_slave_0): interface is now down [ 783.931216][T14296] bond0: (slave bond_slave_1): interface is now down [ 783.931246][T14296] bond0: (slave syz_tun): interface is now down [ 783.951193][ T1119] bond0: (slave bond_slave_0): interface is now down [ 783.951213][ T1119] bond0: (slave bond_slave_1): interface is now down [ 783.951228][ T1119] bond0: (slave syz_tun): interface is now down [ 783.978196][ T386] bond0: (slave bond_slave_0): interface is now down [ 783.978258][ T386] bond0: (slave bond_slave_1): interface is now down [ 783.978299][ T386] bond0: (slave syz_tun): interface is now down [ 784.007601][ T1119] bond0: (slave bond_slave_0): interface is now down [ 784.007624][ T1119] bond0: (slave bond_slave_1): interface is now down [ 784.007640][ T1119] bond0: (slave syz_tun): interface is now down [ 784.023298][ T386] bond0: (slave bond_slave_0): interface is now down [ 784.023365][ T386] bond0: (slave bond_slave_1): interface is now down [ 784.023407][ T386] bond0: (slave syz_tun): interface is now down [ 784.043867][T14314] bond0: (slave bond_slave_0): interface is now down [ 784.043919][T14314] bond0: (slave bond_slave_1): interface is now down [ 784.043963][T14314] bond0: (slave syz_tun): interface is now down [ 784.064119][ T386] bond0: (slave bond_slave_0): interface is now down [ 784.064139][ T386] bond0: (slave bond_slave_1): interface is now down [ 784.064152][ T386] bond0: (slave syz_tun): interface is now down [ 784.083957][ T1119] bond0: (slave bond_slave_0): interface is now down [ 784.084004][ T1119] bond0: (slave bond_slave_1): interface is now down [ 784.084041][ T1119] bond0: (slave syz_tun): interface is now down [ 784.103014][T14296] bond0: (slave bond_slave_0): interface is now down [ 784.103070][T14296] bond0: (slave bond_slave_1): interface is now down [ 784.103111][T14296] bond0: (slave syz_tun): interface is now down [ 784.136127][ T1119] bond0: (slave bond_slave_0): interface is now down [ 784.136150][ T1119] bond0: (slave bond_slave_1): interface is now down [ 784.136164][ T1119] bond0: (slave syz_tun): interface is now down [ 784.167726][T14296] bond0: (slave bond_slave_0): interface is now down [ 784.167746][T14296] bond0: (slave bond_slave_1): interface is now down [ 784.167760][T14296] bond0: (slave syz_tun): interface is now down [ 784.181603][T14296] bond0: (slave bond_slave_0): interface is now down [ 784.181654][T14296] bond0: (slave bond_slave_1): interface is now down [ 784.181683][T14296] bond0: (slave syz_tun): interface is now down [ 784.208834][ T1119] bond0: (slave bond_slave_0): interface is now down [ 784.208925][ T1119] bond0: (slave bond_slave_1): interface is now down [ 784.208970][ T1119] bond0: (slave syz_tun): interface is now down [ 784.221298][T14296] bond0: (slave bond_slave_0): interface is now down [ 784.221354][T14296] bond0: (slave bond_slave_1): interface is now down [ 784.221392][T14296] bond0: (slave syz_tun): interface is now down [ 784.259720][ T386] bond0: (slave bond_slave_0): interface is now down [ 784.259739][ T386] bond0: (slave bond_slave_1): interface is now down [ 784.259752][ T386] bond0: (slave syz_tun): interface is now down [ 784.272345][ T5796] bond0: (slave bond_slave_0): interface is now down [ 784.272366][ T5796] bond0: (slave bond_slave_1): interface is now down [ 784.272382][ T5796] bond0: (slave syz_tun): interface is now down [ 784.291394][ T5796] bond0: (slave bond_slave_0): interface is now down [ 784.291451][ T5796] bond0: (slave bond_slave_1): interface is now down [ 784.291492][ T5796] bond0: (slave syz_tun): interface is now down [ 784.311553][T14314] bond0: (slave bond_slave_0): interface is now down [ 784.311602][T14314] bond0: (slave bond_slave_1): interface is now down [ 784.311651][T14314] bond0: (slave syz_tun): interface is now down [ 784.331405][T14314] bond0: (slave bond_slave_0): interface is now down [ 784.331460][T14314] bond0: (slave bond_slave_1): interface is now down [ 784.331490][T14314] bond0: (slave syz_tun): interface is now down [ 784.352729][T14314] bond0: (slave bond_slave_0): interface is now down [ 784.352781][T14314] bond0: (slave bond_slave_1): interface is now down [ 784.352830][T14314] bond0: (slave syz_tun): interface is now down [ 784.384710][ T1119] bond0: (slave bond_slave_0): interface is now down [ 784.384734][ T1119] bond0: (slave bond_slave_1): interface is now down [ 784.384749][ T1119] bond0: (slave syz_tun): interface is now down [ 784.402858][ T1119] bond0: (slave bond_slave_0): interface is now down [ 784.402912][ T1119] bond0: (slave bond_slave_1): interface is now down [ 784.402963][ T1119] bond0: (slave syz_tun): interface is now down [ 784.421503][T14296] bond0: (slave bond_slave_0): interface is now down [ 784.421520][T14296] bond0: (slave bond_slave_1): interface is now down [ 784.421532][T14296] bond0: (slave syz_tun): interface is now down [ 784.441321][ T1119] bond0: (slave bond_slave_0): interface is now down [ 784.441376][ T1119] bond0: (slave bond_slave_1): interface is now down [ 784.441415][ T1119] bond0: (slave syz_tun): interface is now down [ 784.481838][T14296] bond0: (slave bond_slave_0): interface is now down [ 784.481857][T14296] bond0: (slave bond_slave_1): interface is now down [ 784.481869][T14296] bond0: (slave syz_tun): interface is now down [ 784.502683][T14296] bond0: (slave bond_slave_0): interface is now down [ 784.502721][T14296] bond0: (slave bond_slave_1): interface is now down [ 784.502738][T14296] bond0: (slave syz_tun): interface is now down [ 784.539128][ T1119] bond0: (slave bond_slave_0): interface is now down [ 784.539149][ T1119] bond0: (slave bond_slave_1): interface is now down [ 784.539162][ T1119] bond0: (slave syz_tun): interface is now down [ 784.553681][T14314] bond0: (slave bond_slave_0): interface is now down [ 784.553728][T14314] bond0: (slave bond_slave_1): interface is now down [ 784.553766][T14314] bond0: (slave syz_tun): interface is now down [ 784.574373][T14314] bond0: (slave bond_slave_0): interface is now down [ 784.574426][T14314] bond0: (slave bond_slave_1): interface is now down [ 784.574464][T14314] bond0: (slave syz_tun): interface is now down [ 784.592529][ T5796] bond0: (slave bond_slave_0): interface is now down [ 784.592579][ T5796] bond0: (slave bond_slave_1): interface is now down [ 784.592617][ T5796] bond0: (slave syz_tun): interface is now down [ 784.612164][ T1119] bond0: (slave bond_slave_0): interface is now down [ 784.612224][ T1119] bond0: (slave bond_slave_1): interface is now down [ 784.612257][ T1119] bond0: (slave syz_tun): interface is now down [ 784.641852][T14314] bond0: (slave bond_slave_0): interface is now down [ 784.641905][T14314] bond0: (slave bond_slave_1): interface is now down [ 784.641946][T14314] bond0: (slave syz_tun): interface is now down [ 784.661269][ T1521] bond0: (slave bond_slave_0): interface is now down [ 784.661313][ T1521] bond0: (slave bond_slave_1): interface is now down [ 784.661352][ T1521] bond0: (slave syz_tun): interface is now down [ 784.685151][ T1119] bond0: (slave bond_slave_0): interface is now down [ 784.685207][ T1119] bond0: (slave bond_slave_1): interface is now down [ 784.685226][ T1119] bond0: (slave syz_tun): interface is now down [ 784.705760][T14314] bond0: (slave bond_slave_0): interface is now down [ 784.705820][T14314] bond0: (slave bond_slave_1): interface is now down [ 784.705855][T14314] bond0: (slave syz_tun): interface is now down [ 784.732891][ T1235] bond0: (slave bond_slave_0): interface is now down [ 784.732912][ T1235] bond0: (slave bond_slave_1): interface is now down [ 784.732926][ T1235] bond0: (slave syz_tun): interface is now down [ 784.766984][T14296] bond0: (slave bond_slave_0): interface is now down [ 784.767005][T14296] bond0: (slave bond_slave_1): interface is now down [ 784.767016][T14296] bond0: (slave syz_tun): interface is now down [ 784.781430][T14296] bond0: (slave bond_slave_0): interface is now down [ 784.781483][T14296] bond0: (slave bond_slave_1): interface is now down [ 784.781514][T14296] bond0: (slave syz_tun): interface is now down [ 784.802206][ T5796] bond0: (slave bond_slave_0): interface is now down [ 784.802255][ T5796] bond0: (slave bond_slave_1): interface is now down [ 784.802298][ T5796] bond0: (slave syz_tun): interface is now down [ 784.834985][ T47] bond0: (slave bond_slave_0): interface is now down [ 784.835032][ T47] bond0: (slave bond_slave_1): interface is now down [ 784.835063][ T47] bond0: (slave syz_tun): interface is now down [ 784.853273][ T1119] bond0: (slave bond_slave_0): interface is now down [ 784.853335][ T1119] bond0: (slave bond_slave_1): interface is now down [ 784.853379][ T1119] bond0: (slave syz_tun): interface is now down [ 784.876418][ T1235] bond0: (slave bond_slave_0): interface is now down [ 784.876489][ T1235] bond0: (slave bond_slave_1): interface is now down [ 784.876533][ T1235] bond0: (slave syz_tun): interface is now down [ 784.891946][ T1119] bond0: (slave bond_slave_0): interface is now down [ 784.892001][ T1119] bond0: (slave bond_slave_1): interface is now down [ 784.892031][ T1119] bond0: (slave syz_tun): interface is now down [ 784.915703][ T1235] bond0: (slave bond_slave_0): interface is now down [ 784.915772][ T1235] bond0: (slave bond_slave_1): interface is now down [ 784.915811][ T1235] bond0: (slave syz_tun): interface is now down [ 784.948619][T14314] bond0: (slave bond_slave_0): interface is now down [ 784.948643][T14314] bond0: (slave bond_slave_1): interface is now down [ 784.948660][T14314] bond0: (slave syz_tun): interface is now down [ 784.965747][T14314] bond0: (slave bond_slave_0): interface is now down [ 784.965803][T14314] bond0: (slave bond_slave_1): interface is now down [ 784.965839][T14314] bond0: (slave syz_tun): interface is now down [ 784.984631][T14296] bond0: (slave bond_slave_0): interface is now down [ 784.984700][T14296] bond0: (slave bond_slave_1): interface is now down [ 784.984745][T14296] bond0: (slave syz_tun): interface is now down [ 785.025245][T14296] bond0: (slave bond_slave_0): interface is now down [ 785.025276][T14296] bond0: (slave bond_slave_1): interface is now down [ 785.025300][T14296] bond0: (slave syz_tun): interface is now down [ 785.052438][ T1119] bond0: (slave bond_slave_0): interface is now down [ 785.052499][ T1119] bond0: (slave bond_slave_1): interface is now down [ 785.052559][ T1119] bond0: (slave syz_tun): interface is now down [ 785.078328][ T1119] bond0: (slave bond_slave_0): interface is now down [ 785.078350][ T1119] bond0: (slave bond_slave_1): interface is now down [ 785.078366][ T1119] bond0: (slave syz_tun): interface is now down [ 785.099402][T14314] bond0: (slave bond_slave_0): interface is now down [ 785.099447][T14314] bond0: (slave bond_slave_1): interface is now down [ 785.099486][T14314] bond0: (slave syz_tun): interface is now down [ 785.113893][ T5796] bond0: (slave bond_slave_0): interface is now down [ 785.113948][ T5796] bond0: (slave bond_slave_1): interface is now down [ 785.113985][ T5796] bond0: (slave syz_tun): interface is now down [ 785.143750][ T1119] bond0: (slave bond_slave_0): interface is now down [ 785.143771][ T1119] bond0: (slave bond_slave_1): interface is now down [ 785.143786][ T1119] bond0: (slave syz_tun): interface is now down [ 785.161517][T14296] bond0: (slave bond_slave_0): interface is now down [ 785.161557][T14296] bond0: (slave bond_slave_1): interface is now down [ 785.161592][T14296] bond0: (slave syz_tun): interface is now down [ 785.194513][ T1119] bond0: (slave bond_slave_0): interface is now down [ 785.194533][ T1119] bond0: (slave bond_slave_1): interface is now down [ 785.194547][ T1119] bond0: (slave syz_tun): interface is now down [ 785.214137][T14314] bond0: (slave bond_slave_0): interface is now down [ 785.214172][T14314] bond0: (slave bond_slave_1): interface is now down [ 785.214208][T14314] bond0: (slave syz_tun): interface is now down [ 785.243203][ T1119] bond0: (slave bond_slave_0): interface is now down [ 785.243234][ T1119] bond0: (slave bond_slave_1): interface is now down [ 785.243248][ T1119] bond0: (slave syz_tun): interface is now down [ 785.263441][T14314] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.264363][T14314] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.265568][ T5796] bond0: (slave bond_slave_0): interface is now down [ 785.265615][ T5796] bond0: (slave bond_slave_1): interface is now down [ 785.265654][ T5796] bond0: (slave syz_tun): interface is now down [ 785.286038][ T47] bond0: (slave bond_slave_0): interface is now down [ 785.286094][ T47] bond0: (slave bond_slave_1): interface is now down [ 785.286144][ T47] bond0: (slave syz_tun): interface is now down [ 785.301574][ T386] bond0: (slave bond_slave_0): interface is now down [ 785.301625][ T386] bond0: (slave bond_slave_1): interface is now down [ 785.301665][ T386] bond0: (slave syz_tun): interface is now down [ 785.322833][ T1235] bond0: (slave bond_slave_0): interface is now down [ 785.322893][ T1235] bond0: (slave bond_slave_1): interface is now down [ 785.322937][ T1235] bond0: (slave syz_tun): interface is now down [ 785.394488][ T1235] bond0: (slave bond_slave_0): interface is now down [ 785.394514][ T1235] bond0: (slave bond_slave_1): interface is now down [ 785.394531][ T1235] bond0: (slave syz_tun): interface is now down [ 785.430723][ T5796] bond0: (slave bond_slave_0): interface is now down [ 785.430744][ T5796] bond0: (slave bond_slave_1): interface is now down [ 785.430757][ T5796] bond0: (slave syz_tun): interface is now down [ 785.454844][ T5796] bond0: (slave bond_slave_0): interface is now down [ 785.454864][ T5796] bond0: (slave bond_slave_1): interface is now down [ 785.454878][ T5796] bond0: (slave syz_tun): interface is now down [ 785.475816][ T5796] bond0: (slave bond_slave_0): interface is now down [ 785.475836][ T5796] bond0: (slave bond_slave_1): interface is now down [ 785.475851][ T5796] bond0: (slave syz_tun): interface is now down [ 785.501165][ T1119] bond0: (slave bond_slave_0): interface is now down [ 785.501184][ T1119] bond0: (slave bond_slave_1): interface is now down [ 785.501198][ T1119] bond0: (slave syz_tun): interface is now down [ 785.521348][ T5796] bond0: (slave bond_slave_0): interface is now down [ 785.521400][ T5796] bond0: (slave bond_slave_1): interface is now down [ 785.521435][ T5796] bond0: (slave syz_tun): interface is now down [ 785.546666][ T47] bond0: (slave bond_slave_0): interface is now down [ 785.546713][ T47] bond0: (slave bond_slave_1): interface is now down [ 785.546744][ T47] bond0: (slave syz_tun): interface is now down [ 785.563091][ T5796] bond0: (slave bond_slave_0): interface is now down [ 785.563147][ T5796] bond0: (slave bond_slave_1): interface is now down [ 785.563185][ T5796] bond0: (slave syz_tun): interface is now down [ 785.581317][ T66] bond0: (slave bond_slave_0): interface is now down [ 785.581370][ T66] bond0: (slave bond_slave_1): interface is now down [ 785.581388][ T66] bond0: (slave syz_tun): interface is now down [ 785.601521][T14314] bond0: (slave bond_slave_0): interface is now down [ 785.601580][T14314] bond0: (slave bond_slave_1): interface is now down [ 785.601614][T14314] bond0: (slave syz_tun): interface is now down [ 785.622984][ T1235] bond0: (slave bond_slave_0): interface is now down [ 785.623022][ T1235] bond0: (slave bond_slave_1): interface is now down [ 785.623067][ T1235] bond0: (slave syz_tun): interface is now down [ 785.641081][T14296] bond0: (slave bond_slave_0): interface is now down [ 785.641116][T14296] bond0: (slave bond_slave_1): interface is now down [ 785.641155][T14296] bond0: (slave syz_tun): interface is now down [ 785.662642][T14314] bond0: (slave bond_slave_0): interface is now down [ 785.662661][T14314] bond0: (slave bond_slave_1): interface is now down [ 785.662675][T14314] bond0: (slave syz_tun): interface is now down [ 785.681815][T14296] bond0: (slave bond_slave_0): interface is now down [ 785.681859][T14296] bond0: (slave bond_slave_1): interface is now down [ 785.681898][T14296] bond0: (slave syz_tun): interface is now down [ 785.735472][ T386] bond0: (slave bond_slave_0): interface is now down [ 785.735498][ T386] bond0: (slave bond_slave_1): interface is now down [ 785.735515][ T386] bond0: (slave syz_tun): interface is now down [ 785.774354][ T386] bond0: (slave bond_slave_0): interface is now down [ 785.774380][ T386] bond0: (slave bond_slave_1): interface is now down [ 785.774397][ T386] bond0: (slave syz_tun): interface is now down [ 785.792182][T14314] bond0: (slave bond_slave_0): interface is now down [ 785.792254][T14314] bond0: (slave bond_slave_1): interface is now down [ 785.792297][T14314] bond0: (slave syz_tun): interface is now down [ 785.880155][T14314] bond0: now running without any active interface! [ 785.903223][T15451] netlink: 64915 bytes leftover after parsing attributes in process `syz.7.3189'. [ 787.056843][ T1498] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.138492][ T5245] 8021q: adding VLAN 0 to HW filter on device eth16 [ 787.224584][T15205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 787.539040][ T1498] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.808741][T15211] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 787.824338][T15484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 787.907438][T15211] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 787.930107][T15211] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 788.052503][T15211] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 788.308177][ T1498] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.352210][T15211] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 788.395131][T15211] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 788.397472][T15211] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 788.454537][T15211] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 788.545103][T15506] netlink: 64915 bytes leftover after parsing attributes in process `syz.7.3196'. [ 789.073835][ T1498] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.754239][T15220] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 789.805280][T15220] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 789.823273][T15220] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 789.907323][T15220] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 789.942042][T15220] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 790.046696][T15220] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 790.065807][T15220] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 790.123228][T15220] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 790.125704][T15205] veth0_vlan: entered promiscuous mode [ 790.819839][T15205] veth1_vlan: entered promiscuous mode [ 791.575375][ T1498] veth0: left allmulticast mode [ 791.575411][ T1498] veth0: left promiscuous mode [ 791.576698][ T1498] bridge0: port 3(veth0) entered disabled state [ 791.748610][ T1498] bridge_slave_1: left allmulticast mode [ 791.748645][ T1498] bridge_slave_1: left promiscuous mode [ 791.748958][ T1498] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.912456][ T1498] bridge_slave_0: left allmulticast mode [ 791.912490][ T1498] bridge_slave_0: left promiscuous mode [ 791.919110][ T1498] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.202199][ T1498] veth0: left allmulticast mode [ 792.202224][ T1498] veth0: left promiscuous mode [ 792.202382][ T1498] bridge0: port 1(veth0) entered disabled state [ 795.754269][ T1498] bridge_slave_1: left allmulticast mode [ 795.754296][ T1498] bridge_slave_1: left promiscuous mode [ 795.754454][ T1498] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.882268][ T1498] bridge_slave_0: left allmulticast mode [ 795.882294][ T1498] bridge_slave_0: left promiscuous mode [ 795.884899][ T1498] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.101494][ T1498] bridge_slave_1: left allmulticast mode [ 796.101522][ T1498] bridge_slave_1: left promiscuous mode [ 796.101696][ T1498] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.212128][ T1498] bridge_slave_0: left allmulticast mode [ 796.212152][ T1498] bridge_slave_0: left promiscuous mode [ 796.212308][ T1498] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.046831][ T1498] batman_adv: batadv0: Removing interface: syzkaller0 [ 797.944107][ T1498] bond2 (unregistering): (slave bond0): Releasing active interface [ 798.021599][ T1498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.082246][ T1498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.101922][ T1498] bond0 (unregistering): Released all slaves [ 798.142268][ T1498] bond1 (unregistering): (slave veth7): Releasing backup interface [ 798.163731][ T1498] bond1 (unregistering): Released all slaves [ 798.183872][ T1498] bond2 (unregistering): Released all slaves [ 798.711654][ T1498] bond3 (unregistering): (slave bond0): Releasing active interface [ 798.753859][ T1498] bond0 (unregistering): Released all slaves [ 798.760530][ T1498] bond1 (unregistering): Released all slaves [ 798.811687][ T1498] bond2 (unregistering): (slave veth9): Releasing backup interface [ 798.831977][ T1498] bond2 (unregistering): Released all slaves [ 798.851927][ T1498] bond3 (unregistering): Released all slaves [ 799.291469][ T1498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.371517][ T1498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.393382][ T1498] bond0 (unregistering): Released all slaves [ 799.853796][ T1498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.931589][ T1498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.954385][ T1498] bond0 (unregistering): Released all slaves [ 799.960832][ T1498] bond1 (unregistering): Released all slaves [ 800.331445][T15205] veth0_macvtap: entered promiscuous mode [ 800.348777][T15218] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 800.475876][T15218] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 800.486107][T15218] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 800.565193][T15218] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 800.568689][T15211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.662329][T15218] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 800.736145][T15218] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 800.737008][T15205] veth1_macvtap: entered promiscuous mode [ 800.816419][T15218] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 800.910799][T15218] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 801.046955][T15211] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.116166][T15205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 801.150586][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.150665][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.170832][T15205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 801.248498][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.248578][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.342011][T15220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.919968][T15220] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.256485][T15597] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.258278][T15597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.426455][ T5797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.426477][ T5797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.518920][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.519048][ T5797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.918124][ T1521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.918149][ T1521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.363025][T15218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.635879][T15218] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.667950][T15689] UDC core: g1: couldn't find an available UDC or it's busy [ 808.277687][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.277834][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.333730][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.333875][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 811.136117][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.681057][ T9009] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 811.831325][ T9009] usb 9-1: Using ep0 maxpacket: 16 [ 811.832229][ T9009] usb 9-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 811.834129][ T9009] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.834163][ T9009] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 811.834190][ T9009] usb 9-1: config 0 interface 0 has no altsetting 0 [ 811.834223][ T9009] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.905854][ T9009] usb 9-1: config 0 descriptor?? [ 812.162390][T15211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 812.544830][ T9009] asus 0003:0B05:18C6.0008: unknown main item tag 0x0 [ 812.544866][ T9009] asus 0003:0B05:18C6.0008: unknown main item tag 0x0 [ 812.544894][ T9009] asus 0003:0B05:18C6.0008: unknown main item tag 0x0 [ 812.544923][ T9009] asus 0003:0B05:18C6.0008: unknown main item tag 0x0 [ 812.544949][ T9009] asus 0003:0B05:18C6.0008: unknown main item tag 0x0 [ 812.643318][T15597] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.682018][T15597] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.683855][T15597] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.686928][T15597] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.798909][ T9009] asus 0003:0B05:18C6.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 0b05:18c6] on usb-dummy_hcd.8-1/input0 [ 813.980288][T15220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 814.440748][T15370] usb 9-1: USB disconnect, device number 2 [ 814.850020][T15211] veth0_vlan: entered promiscuous mode [ 814.925580][T15218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 814.944732][T15220] veth0_vlan: entered promiscuous mode [ 814.980597][T15211] veth1_vlan: entered promiscuous mode [ 816.321780][T15220] veth1_vlan: entered promiscuous mode [ 818.124448][T15807] FAULT_INJECTION: forcing a failure. [ 818.124448][T15807] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 818.127160][T15807] CPU: 0 UID: 0 PID: 15807 Comm: syz.8.3230 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 818.127195][T15807] Tainted: [L]=SOFTLOCKUP [ 818.127204][T15807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 818.127218][T15807] Call Trace: [ 818.127228][T15807] [ 818.127239][T15807] dump_stack_lvl+0xe8/0x150 [ 818.127282][T15807] should_fail_ex+0x46b/0x600 [ 818.127318][T15807] prepare_alloc_pages+0x223/0x650 [ 818.127359][T15807] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 818.127396][T15807] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 818.127433][T15807] ? __pfx_policy_nodemask+0x10/0x10 [ 818.127469][T15807] ? __pfx_policy_nodemask+0x10/0x10 [ 818.127512][T15807] alloc_pages_mpol+0xd4/0x280 [ 818.127538][T15807] alloc_pages_noprof+0xd2/0x2f0 [ 818.127563][T15807] kimage_alloc_pages+0xbe/0x3c0 [ 818.127597][T15807] kimage_alloc_page+0xa6/0x880 [ 818.127640][T15807] kimage_load_segment+0xbf6/0x1230 [ 818.127683][T15807] do_kexec_load+0x637/0x7c0 [ 818.127721][T15807] ? __pfx_do_kexec_load+0x10/0x10 [ 818.127766][T15807] ? _copy_from_user+0x94/0xb0 [ 818.127802][T15807] __se_sys_kexec_load+0x134/0x160 [ 818.127838][T15807] do_syscall_64+0x166/0x520 [ 818.127870][T15807] ? trace_irq_disable+0x3b/0x140 [ 818.127899][T15807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.127940][T15807] ? clear_bhb_loop+0x70/0xc0 [ 818.127970][T15807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.127994][T15807] RIP: 0033:0x7f1e742be159 [ 818.128017][T15807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.128039][T15807] RSP: 002b:00007f1e72516028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 818.128066][T15807] RAX: ffffffffffffffda RBX: 00007f1e74545fa0 RCX: 00007f1e742be159 [ 818.128085][T15807] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002 [ 818.128100][T15807] RBP: 00007f1e7435503b R08: 0000000000000000 R09: 0000000000000000 [ 818.128116][T15807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.128131][T15807] R13: 00007f1e74546038 R14: 00007f1e74545fa0 R15: 00007ffc7181b8c8 [ 818.128169][T15807] [ 818.941229][T15820] netlink: 'syz.8.3231': attribute type 1 has an invalid length. [ 818.941255][T15820] netlink: 64399 bytes leftover after parsing attributes in process `syz.8.3231'. [ 819.552693][T15211] veth0_macvtap: entered promiscuous mode [ 819.618992][T15838] FAULT_INJECTION: forcing a failure. [ 819.618992][T15838] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 819.619020][T15838] CPU: 1 UID: 0 PID: 15838 Comm: syz.7.3238 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 819.619041][T15838] Tainted: [L]=SOFTLOCKUP [ 819.619047][T15838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 819.619057][T15838] Call Trace: [ 819.619063][T15838] [ 819.619069][T15838] dump_stack_lvl+0xe8/0x150 [ 819.619097][T15838] should_fail_ex+0x46b/0x600 [ 819.619120][T15838] prepare_alloc_pages+0x223/0x650 [ 819.619145][T15838] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 819.619171][T15838] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 819.619196][T15838] ? __pfx_policy_nodemask+0x10/0x10 [ 819.619221][T15838] ? __pfx_policy_nodemask+0x10/0x10 [ 819.619249][T15838] alloc_pages_mpol+0xd4/0x280 [ 819.619266][T15838] alloc_pages_noprof+0xd2/0x2f0 [ 819.619281][T15838] kimage_alloc_pages+0xbe/0x3c0 [ 819.619309][T15838] kimage_alloc_page+0xa6/0x880 [ 819.619337][T15838] kimage_load_segment+0xbf6/0x1230 [ 819.619365][T15838] do_kexec_load+0x637/0x7c0 [ 819.619390][T15838] ? __pfx_do_kexec_load+0x10/0x10 [ 819.619414][T15838] ? _copy_from_user+0x94/0xb0 [ 819.619437][T15838] __se_sys_kexec_load+0x134/0x160 [ 819.619463][T15838] do_syscall_64+0x166/0x520 [ 819.619484][T15838] ? trace_irq_disable+0x3b/0x140 [ 819.619503][T15838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.619518][T15838] ? clear_bhb_loop+0x70/0xc0 [ 819.619536][T15838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.619550][T15838] RIP: 0033:0x7fcd570de159 [ 819.619565][T15838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.619578][T15838] RSP: 002b:00007fcd55336028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 819.619594][T15838] RAX: ffffffffffffffda RBX: 00007fcd57365fa0 RCX: 00007fcd570de159 [ 819.619605][T15838] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002 [ 819.619614][T15838] RBP: 00007fcd5717503b R08: 0000000000000000 R09: 0000000000000000 [ 819.619624][T15838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.619633][T15838] R13: 00007fcd57366038 R14: 00007fcd57365fa0 R15: 00007fff863240b8 [ 819.619655][T15838] [ 820.370995][ T5602] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 820.551120][ T5602] usb 8-1: Using ep0 maxpacket: 8 [ 820.551983][ T5602] usb 8-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 820.553456][ T5602] usb 8-1: config 0 has an invalid interface number: 52 but max is 0 [ 820.553482][ T5602] usb 8-1: config 0 has an invalid descriptor of length 72, skipping remainder of the config [ 820.553503][ T5602] usb 8-1: config 0 has no interface number 0 [ 820.553555][ T5602] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 231, changing to 11 [ 820.553584][ T5602] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 25303, setting to 1024 [ 820.553613][ T5602] usb 8-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 820.553641][ T5602] usb 8-1: config 0 interface 52 has no altsetting 0 [ 820.555129][ T5602] usb 8-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 820.555155][ T5602] usb 8-1: Manufacturer: syz [ 820.696749][ T5602] usb 8-1: config 0 descriptor?? [ 820.720404][ T5602] hub 8-1:0.52: bad descriptor, ignoring hub [ 820.720443][ T5602] hub 8-1:0.52: probe with driver hub failed with error -5 [ 821.204734][ T5602] input: syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.52/input/input10 [ 821.567839][ T5599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 821.610427][ T5599] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 821.612163][ T5599] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 821.614351][ T5599] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 821.649989][ T5599] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 822.205005][T15211] veth1_macvtap: entered promiscuous mode [ 822.218943][ T5602] usb 8-1: Failed to suspend device, error -71 [ 822.228272][T15218] veth0_vlan: entered promiscuous mode [ 822.236322][ T5602] usb 8-1: USB disconnect, device number 2 [ 822.678769][T11792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 822.719782][T11792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 822.762146][T11792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 822.797650][T11792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 822.802967][T11792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 823.487730][T11792] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 823.508454][T11792] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 823.510814][T11792] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 823.575031][T11792] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 823.578482][T11792] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 824.031254][ T5599] Bluetooth: hci2: command tx timeout [ 824.038108][ T1498] hsr_slave_0: left promiscuous mode [ 824.085096][ T1498] hsr_slave_1: left promiscuous mode [ 824.090189][ T1498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 824.132866][ T1498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 824.337713][ T1498] hsr_slave_0: left promiscuous mode [ 824.372548][ T1498] hsr_slave_1: left promiscuous mode [ 824.374589][ T1498] batman_adv: batadv0: Removing interface: syzkaller0 [ 824.672820][ T1498] hsr_slave_0: left promiscuous mode [ 824.711164][ T1498] hsr_slave_1: left promiscuous mode [ 824.712750][ T1498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 824.712769][ T1498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 824.773320][ T1498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 824.773347][ T1498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 824.941104][ T1498] hsr_slave_0: left promiscuous mode [ 824.961074][ T1498] hsr_slave_1: left promiscuous mode [ 824.961924][ T1498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 824.961942][ T1498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 825.023012][ T1498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 825.023033][ T1498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 825.082538][ T5599] Bluetooth: hci3: command tx timeout [ 825.166908][ T1498] veth1_macvtap: left promiscuous mode [ 825.166981][ T1498] veth0_macvtap: left promiscuous mode [ 825.167361][ T1498] veth1_vlan: left promiscuous mode [ 825.167438][ T1498] veth0_vlan: left promiscuous mode [ 825.301150][ T1498] veth1_macvtap: left promiscuous mode [ 825.301220][ T1498] veth0_macvtap: left promiscuous mode [ 825.301352][ T1498] veth1_vlan: left promiscuous mode [ 825.301431][ T1498] veth0_vlan: left promiscuous mode [ 825.811313][ T5599] Bluetooth: hci4: command tx timeout [ 826.124129][ T5599] Bluetooth: hci2: command tx timeout [ 826.373218][ T1498] team0 (unregistering): Port device team_slave_1 removed [ 826.411528][ T1498] team0 (unregistering): Port device team_slave_0 removed [ 827.151860][ T5599] Bluetooth: hci3: command tx timeout [ 827.871075][ T5599] Bluetooth: hci4: command tx timeout [ 827.961609][ T1498] team0 (unregistering): Port device team_slave_1 removed [ 828.021827][ T1498] team0 (unregistering): Port device team_slave_0 removed [ 828.191183][ T5599] Bluetooth: hci2: command tx timeout [ 828.733004][ T1498] team0 (unregistering): Port device team_slave_1 removed [ 828.771596][ T1498] team0 (unregistering): Port device team_slave_0 removed [ 829.231037][ T5599] Bluetooth: hci3: command tx timeout [ 829.792585][ T5245] 8021q: adding VLAN 0 to HW filter on device eth7 [ 829.951042][ T5599] Bluetooth: hci4: command tx timeout [ 830.284610][ T5599] Bluetooth: hci2: command tx timeout [ 830.685144][T15913] FAULT_INJECTION: forcing a failure. [ 830.685144][T15913] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 830.685187][T15913] CPU: 0 UID: 0 PID: 15913 Comm: syz.7.3246 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 830.685218][T15913] Tainted: [L]=SOFTLOCKUP [ 830.685226][T15913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 830.685238][T15913] Call Trace: [ 830.685245][T15913] [ 830.685254][T15913] dump_stack_lvl+0xe8/0x150 [ 830.685289][T15913] should_fail_ex+0x46b/0x600 [ 830.685320][T15913] prepare_alloc_pages+0x223/0x650 [ 830.685357][T15913] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 830.685392][T15913] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 830.685428][T15913] ? __pfx_policy_nodemask+0x10/0x10 [ 830.685461][T15913] ? __pfx_policy_nodemask+0x10/0x10 [ 830.685500][T15913] alloc_pages_mpol+0xd4/0x280 [ 830.685522][T15913] alloc_pages_noprof+0xd2/0x2f0 [ 830.685545][T15913] kimage_alloc_pages+0xbe/0x3c0 [ 830.685577][T15913] kimage_alloc_page+0xa6/0x880 [ 830.685615][T15913] kimage_load_segment+0xbf6/0x1230 [ 830.685655][T15913] do_kexec_load+0x637/0x7c0 [ 830.685690][T15913] ? __pfx_do_kexec_load+0x10/0x10 [ 830.685720][T15913] ? _copy_from_user+0x94/0xb0 [ 830.685752][T15913] __se_sys_kexec_load+0x134/0x160 [ 830.685784][T15913] do_syscall_64+0x166/0x520 [ 830.685812][T15913] ? trace_irq_disable+0x3b/0x140 [ 830.685839][T15913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.685861][T15913] ? clear_bhb_loop+0x70/0xc0 [ 830.685886][T15913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.685907][T15913] RIP: 0033:0x7fcd570de159 [ 830.685927][T15913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.685945][T15913] RSP: 002b:00007fcd55336028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 830.685968][T15913] RAX: ffffffffffffffda RBX: 00007fcd57365fa0 RCX: 00007fcd570de159 [ 830.685984][T15913] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002 [ 830.685998][T15913] RBP: 00007fcd5717503b R08: 0000000000000000 R09: 0000000000000000 [ 830.686012][T15913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 830.686024][T15913] R13: 00007fcd57366038 R14: 00007fcd57365fa0 R15: 00007fff863240b8 [ 830.686057][T15913] [ 831.311352][ T5599] Bluetooth: hci3: command tx timeout [ 831.481193][T15602] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 831.651250][T15602] usb 8-1: Using ep0 maxpacket: 16 [ 831.657629][T15602] usb 8-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 831.659607][T15602] usb 8-1: config 0 has an invalid interface number: 214 but max is 0 [ 831.659631][T15602] usb 8-1: config 0 has no interface number 0 [ 831.659676][T15602] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 831.659708][T15602] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 831.712807][T15602] usb 8-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 831.712834][T15602] usb 8-1: Manufacturer: syz [ 831.712851][T15602] usb 8-1: SerialNumber: syz [ 831.749414][T15602] usb 8-1: config 0 descriptor?? [ 831.953016][ T386] wlan1: Trigger new scan to find an IBSS to join [ 831.974796][T15602] usbtouchscreen 8-1:0.214: Failed to read FW rev: -71 [ 831.975058][T15602] usbtouchscreen 8-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 832.010006][T15602] usb 8-1: USB disconnect, device number 3 [ 832.031101][ T5599] Bluetooth: hci4: command tx timeout [ 832.090712][ T5245] 8021q: adding VLAN 0 to HW filter on device eth8 [ 833.258033][T15843] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.258222][T15843] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.258386][T15843] bridge_slave_0: entered allmulticast mode [ 833.288872][T15843] bridge_slave_0: entered promiscuous mode [ 833.358409][T15843] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.358485][T15843] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.358595][T15843] bridge_slave_1: entered allmulticast mode [ 833.376669][T15843] bridge_slave_1: entered promiscuous mode [ 833.939592][T15843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.145335][T15843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.405538][T15987] FAULT_INJECTION: forcing a failure. [ 835.405538][T15987] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 835.405578][T15987] CPU: 0 UID: 0 PID: 15987 Comm: syz.8.3255 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 835.405609][T15987] Tainted: [L]=SOFTLOCKUP [ 835.405617][T15987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 835.405631][T15987] Call Trace: [ 835.405641][T15987] [ 835.405651][T15987] dump_stack_lvl+0xe8/0x150 [ 835.405690][T15987] should_fail_ex+0x46b/0x600 [ 835.405725][T15987] prepare_alloc_pages+0x223/0x650 [ 835.405763][T15987] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 835.405800][T15987] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 835.405837][T15987] ? __pfx_policy_nodemask+0x10/0x10 [ 835.405872][T15987] ? __pfx_policy_nodemask+0x10/0x10 [ 835.405914][T15987] alloc_pages_mpol+0xd4/0x280 [ 835.405940][T15987] alloc_pages_noprof+0xd2/0x2f0 [ 835.405964][T15987] kimage_alloc_pages+0xbe/0x3c0 [ 835.405998][T15987] kimage_alloc_page+0xa6/0x880 [ 835.406038][T15987] kimage_load_segment+0xbf6/0x1230 [ 835.406086][T15987] do_kexec_load+0x637/0x7c0 [ 835.406142][T15987] ? __pfx_do_kexec_load+0x10/0x10 [ 835.406187][T15987] ? _copy_from_user+0x94/0xb0 [ 835.406225][T15987] __se_sys_kexec_load+0x134/0x160 [ 835.406264][T15987] do_syscall_64+0x166/0x520 [ 835.406296][T15987] ? trace_irq_disable+0x3b/0x140 [ 835.406327][T15987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.406353][T15987] ? clear_bhb_loop+0x70/0xc0 [ 835.406381][T15987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.406405][T15987] RIP: 0033:0x7f1e742be159 [ 835.406424][T15987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.406441][T15987] RSP: 002b:00007f1e72516028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 835.406463][T15987] RAX: ffffffffffffffda RBX: 00007f1e74545fa0 RCX: 00007f1e742be159 [ 835.406477][T15987] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002 [ 835.406490][T15987] RBP: 00007f1e7435503b R08: 0000000000000000 R09: 0000000000000000 [ 835.406502][T15987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.406513][T15987] R13: 00007f1e74546038 R14: 00007f1e74545fa0 R15: 00007ffc7181b8c8 [ 835.406543][T15987] [ 835.808527][ T5245] 8021q: adding VLAN 0 to HW filter on device eth17 [ 835.866091][T15856] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.866298][T15856] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.866420][T15856] bridge_slave_0: entered allmulticast mode [ 835.870284][T15856] bridge_slave_0: entered promiscuous mode [ 836.000601][T15843] team0: Port device team_slave_0 added [ 836.006978][T15856] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.007101][T15856] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.007259][T15856] bridge_slave_1: entered allmulticast mode [ 836.009539][T15856] bridge_slave_1: entered promiscuous mode [ 836.054803][T15843] team0: Port device team_slave_1 added [ 836.190700][T15856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.206667][T15843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.206681][T15843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.206702][T15843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.207350][T15849] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.207564][T15849] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.207759][T15849] bridge_slave_0: entered allmulticast mode [ 836.210650][T15849] bridge_slave_0: entered promiscuous mode [ 836.313477][T15856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.320544][T15843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.320562][T15843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.320593][T15843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.366889][T15849] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.367655][T15849] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.368244][T15849] bridge_slave_1: entered allmulticast mode [ 836.399309][T15849] bridge_slave_1: entered promiscuous mode [ 836.657922][T15856] team0: Port device team_slave_0 added [ 836.661527][T15849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.701616][T15856] team0: Port device team_slave_1 added [ 836.704711][T15849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.831891][T15843] hsr_slave_0: entered promiscuous mode [ 836.833198][T15843] hsr_slave_1: entered promiscuous mode [ 836.834069][T15843] debugfs: 'hsr0' already exists in 'hsr' [ 836.834093][T15843] Cannot create hsr debugfs directory [ 836.915986][ T769] wlan1: Trigger new scan to find an IBSS to join [ 836.983439][T15856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.983459][T15856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.983490][T15856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.084128][T15849] team0: Port device team_slave_0 added [ 837.086833][T15856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 837.086849][T15856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.086878][T15856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 837.150840][T15849] team0: Port device team_slave_1 added [ 837.288748][T15849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.288784][T15849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.288813][T15849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.439972][T15849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 837.439991][T15849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.440017][T15849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 837.631746][T16014] netlink: 'syz.8.3263': attribute type 11 has an invalid length. [ 837.799385][T16022] FAULT_INJECTION: forcing a failure. [ 837.799385][T16022] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 837.799424][T16022] CPU: 0 UID: 0 PID: 16022 Comm: syz.7.3264 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 837.799453][T16022] Tainted: [L]=SOFTLOCKUP [ 837.799462][T16022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 837.799475][T16022] Call Trace: [ 837.799484][T16022] [ 837.799493][T16022] dump_stack_lvl+0xe8/0x150 [ 837.799530][T16022] should_fail_ex+0x46b/0x600 [ 837.799562][T16022] prepare_alloc_pages+0x223/0x650 [ 837.799597][T16022] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 837.799632][T16022] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 837.799667][T16022] ? __pfx_policy_nodemask+0x10/0x10 [ 837.799698][T16022] ? __pfx_policy_nodemask+0x10/0x10 [ 837.799737][T16022] alloc_pages_mpol+0xd4/0x280 [ 837.799760][T16022] alloc_pages_noprof+0xd2/0x2f0 [ 837.799783][T16022] kimage_alloc_pages+0xbe/0x3c0 [ 837.799814][T16022] kimage_alloc_page+0xa6/0x880 [ 837.799852][T16022] kimage_load_segment+0xbf6/0x1230 [ 837.799891][T16022] do_kexec_load+0x637/0x7c0 [ 837.799925][T16022] ? __pfx_do_kexec_load+0x10/0x10 [ 837.799957][T16022] ? _copy_from_user+0x94/0xb0 [ 837.799997][T16022] __se_sys_kexec_load+0x134/0x160 [ 837.800031][T16022] do_syscall_64+0x166/0x520 [ 837.800060][T16022] ? trace_irq_disable+0x3b/0x140 [ 837.800087][T16022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.800108][T16022] ? clear_bhb_loop+0x70/0xc0 [ 837.800133][T16022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.800154][T16022] RIP: 0033:0x7fcd570de159 [ 837.800173][T16022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.800191][T16022] RSP: 002b:00007fcd55336028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 837.800213][T16022] RAX: ffffffffffffffda RBX: 00007fcd57365fa0 RCX: 00007fcd570de159 [ 837.800229][T16022] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002 [ 837.800242][T16022] RBP: 00007fcd5717503b R08: 0000000000000000 R09: 0000000000000000 [ 837.800256][T16022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.800269][T16022] R13: 00007fcd57366038 R14: 00007fcd57365fa0 R15: 00007fff863240b8 [ 837.800300][T16022] [ 838.054514][T15856] hsr_slave_0: entered promiscuous mode [ 838.056682][T15856] hsr_slave_1: entered promiscuous mode [ 838.058911][T15856] debugfs: 'hsr0' already exists in 'hsr' [ 838.058950][T15856] Cannot create hsr debugfs directory [ 838.100612][T15728] wlan1: Creating new IBSS network, BSSID 0a:1c:d3:a5:ee:cc [ 838.213028][ T1498] IPVS: stop unused estimator thread 0... [ 838.214272][ T1498] IPVS: stop unused estimator thread 0... [ 838.477289][T16029] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3266'. [ 838.669201][ T5245] 8021q: adding VLAN 0 to HW filter on device eth18 [ 839.752814][T15849] hsr_slave_0: entered promiscuous mode [ 839.754655][T15849] hsr_slave_1: entered promiscuous mode [ 839.755525][T15849] debugfs: 'hsr0' already exists in 'hsr' [ 839.755550][T15849] Cannot create hsr debugfs directory [ 839.993013][T16055] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3274'. [ 840.303858][ T8993] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 840.471001][ T8993] usb 9-1: Using ep0 maxpacket: 16 [ 840.502657][ T8993] usb 9-1: unable to get BOS descriptor or descriptor too short [ 840.502711][ T8993] usb 9-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 840.529877][ T8993] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.529909][ T8993] usb 9-1: Product: syz [ 840.529936][ T8993] usb 9-1: Manufacturer: syz [ 840.529952][ T8993] usb 9-1: SerialNumber: syz [ 840.568905][T16046] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 840.961368][ T8993] usb 9-1: USB disconnect, device number 3 [ 841.167867][T16076] udevd[16076]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 842.683723][ T5599] Bluetooth: hci4: command 0x0401 tx timeout [ 845.476789][T16113] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3281'. [ 846.671113][T11792] Bluetooth: hci1: command 0x0406 tx timeout syzkaller syzkaller login: [ 853.931074][ T9027] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 854.197979][ T9027] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 854.672291][ T1498] bridge_slave_1: left allmulticast mode [ 854.672327][ T1498] bridge_slave_1: left promiscuous mode [ 854.672580][ T1498] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.885178][ T1498] bridge_slave_0: left allmulticast mode [ 854.885214][ T1498] bridge_slave_0: left promiscuous mode [ 854.885433][ T1498] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.222594][ T1498] bridge_slave_1: left allmulticast mode [ 855.222630][ T1498] bridge_slave_1: left promiscuous mode [ 855.222884][ T1498] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.408475][ T1498] bridge_slave_0: left allmulticast mode [ 855.408509][ T1498] bridge_slave_0: left promiscuous mode [ 855.408756][ T1498] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.456022][T16316] netlink: 'syz.7.3304': attribute type 11 has an invalid length. [ 855.651478][ T1498] bridge_slave_1: left allmulticast mode [ 855.651516][ T1498] bridge_slave_1: left promiscuous mode [ 855.651766][ T1498] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.762043][ T1498] bridge_slave_0: left allmulticast mode [ 855.762070][ T1498] bridge_slave_0: left promiscuous mode [ 855.762215][ T1498] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.721596][ T1498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 856.784994][ T1498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 856.804611][ T1498] bond0 (unregistering): Released all slaves [ 857.281806][ T1498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 857.362544][ T1498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.383385][ T1498] bond0 (unregistering): Released all slaves [ 857.931791][ T1498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 858.011818][ T1498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 858.040498][ T1498] bond0 (unregistering): Released all slaves [ 858.642828][T15602] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 858.794859][T15602] usb 9-1: unable to get BOS descriptor or descriptor too short [ 858.795931][T15602] usb 9-1: not running at top speed; connect to a high speed hub [ 858.795985][T15602] usb 9-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice= 0.40 [ 858.798278][T15602] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 858.798302][T15602] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 858.798360][T15602] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 858.855904][T15602] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.855932][T15602] usb 9-1: Product: syz [ 858.855951][T15602] usb 9-1: Manufacturer: syz [ 858.855968][T15602] usb 9-1: SerialNumber: syz [ 858.946452][T16321] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 859.178062][T15602] usb 9-1: 1:1 : no or invalid class specific endpoint descriptor [ 859.178168][T15602] usb 9-1: 1:1 : sample bitwidth 190 in over sample bytes 1 [ 859.178197][T15602] usb 9-1: 1:1 : unsupported format bits 0x200006 [ 859.178274][T15602] usb 9-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 859.231494][T15602] usb 9-1: unit 2 not found! [ 859.231559][T15602] usb 9-1: unit 0 not found! [ 859.447850][T15602] usb 9-1: USB disconnect, device number 4 [ 859.568754][T16333] netlink: 'syz.7.3307': attribute type 1 has an invalid length. [ 859.568778][T16333] netlink: 756 bytes leftover after parsing attributes in process `syz.7.3307'. [ 859.795478][ T1498] hsr_slave_0: left promiscuous mode [ 859.839631][ T1498] hsr_slave_1: left promiscuous mode [ 859.840675][ T1498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 859.860532][ T1498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 859.952885][T15928] udevd[15928]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 860.112502][ T1498] hsr_slave_0: left promiscuous mode [ 860.131342][ T1498] hsr_slave_1: left promiscuous mode [ 860.132651][ T1498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.181787][ T1498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.403576][ T1498] hsr_slave_0: left promiscuous mode [ 860.424212][ T1498] hsr_slave_1: left promiscuous mode [ 860.425390][ T1498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.471859][ T1498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.670764][ T1498] veth0_vlan: left promiscuous mode [ 860.711346][ T1498] veth1_vlan: left promiscuous mode [ 860.711509][ T1498] veth0_vlan: left promiscuous mode [ 860.762850][ T1498] veth1_macvtap: left promiscuous mode [ 860.769999][ T1498] veth0_macvtap: left promiscuous mode [ 860.770174][ T1498] veth1_vlan: left promiscuous mode [ 860.770301][ T1498] veth0_vlan: left promiscuous mode [ 861.714388][ T1498] team0 (unregistering): Port device team_slave_1 removed [ 861.761629][ T1498] team0 (unregistering): Port device team_slave_0 removed [ 862.246189][ T1498] team0 (unregistering): Port device team_slave_1 removed [ 862.291698][ T1498] team0 (unregistering): Port device team_slave_0 removed [ 862.923312][ T1498] team0 (unregistering): Port device team_slave_1 removed [ 862.971776][ T1498] team0 (unregistering): Port device team_slave_0 removed [ 863.604140][ T5707] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 863.824528][ T5707] usb 8-1: Using ep0 maxpacket: 32 [ 863.828046][ T5707] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 863.877205][ T5707] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 863.877279][ T5707] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 863.877440][ T5707] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.458234][ T5707] usb 8-1: config 0 descriptor?? [ 864.795224][T15602] usb 8-1: USB disconnect, device number 4 [ 865.080546][ T5245] 8021q: adding VLAN 0 to HW filter on device eth2 [ 865.251673][T15843] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 865.327611][T15843] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 865.350428][T15843] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 865.479008][T15843] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 865.542190][T15843] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 865.584496][T15843] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 865.585117][T16413] BUG: unable to handle page fault for address: fffffffffffffa90 [ 865.599902][T16413] #PF: supervisor read access in kernel mode [ 865.605899][T16413] #PF: error_code(0x0000) - not-present page [ 865.611922][T16413] PGD dfb3067 P4D dfb3067 PUD dfb5067 PMD 0 [ 865.617953][T16413] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 865.623455][T16413] CPU: 0 UID: 0 PID: 16413 Comm: syz.7.3318 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 865.634944][T16413] Tainted: [L]=SOFTLOCKUP [ 865.639291][T16413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 865.649369][T16413] RIP: 0010:strlen+0x39/0x70 [ 865.654092][T16413] Code: ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 <42> 80 7c 3f 01 00 75 de eb 19 89 d9 80 e1 07 38 c1 7c e6 49 89 fc [ 865.673730][T16413] RSP: 0018:ffffc90004f36db8 EFLAGS: 00010282 [ 865.679833][T16413] RAX: 0000000000000000 RBX: fffffffffffffa91 RCX: 0000000000080000 [ 865.687837][T16413] RDX: ffffc900076f1000 RSI: 000000000000029f RDI: fffffffffffffa90 [ 865.695842][T16413] RBP: ffffc90004f36ee8 R08: 0000000000000000 R09: 0000000000000000 [ 865.703842][T16413] R10: dffffc0000000000 R11: fffffbfff1f63f50 R12: ffff88813fe69700 [ 865.711845][T16413] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 865.719853][T16413] FS: 00007fcd553366c0(0000) GS:ffff888125bce000(0000) knlGS:0000000000000000 [ 865.728820][T16413] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 865.735421][T16413] CR2: fffffffffffffa90 CR3: 0000000039df8000 CR4: 00000000003526f0 [ 865.743420][T16413] Call Trace: [ 865.746739][T16413] [ 865.749706][T16413] trace_event_raw_event_drv_net_setup_tc+0x111/0x560 [ 865.756633][T16413] ? __pfx_trace_event_raw_event_drv_net_setup_tc+0x10/0x10 [ 865.763958][T16413] ieee80211_netdev_setup_tc+0x326/0x360 [ 865.769745][T16413] tcf_block_offload_cmd+0x235/0x3b0 [ 865.775133][T16413] ? __pfx_tcf_block_offload_cmd+0x10/0x10 [ 865.780972][T16413] ? rwbase_write_lock+0x550/0x720 [ 865.786172][T16413] tcf_block_get_ext+0x1068/0x1820 [ 865.791371][T16413] tcf_block_get+0x67/0xa0 [ 865.795809][T16413] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 865.802079][T16413] htb_init+0x1f7/0xdc0 [ 865.806335][T16413] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 865.811830][T16413] ? qdisc_alloc+0x6df/0x9e0 [ 865.816454][T16413] ? qdisc_create+0x12c/0xf00 [ 865.821197][T16413] ? tc_modify_qdisc+0x17af/0x2390 [ 865.826353][T16413] ? rtnetlink_rcv_msg+0x7b9/0xc00 [ 865.831596][T16413] ? __pfx_htb_init+0x10/0x10 [ 865.836300][T16413] ? sock_sendmsg_nosec+0x13a/0x180 [ 865.841534][T16413] ? ____sys_sendmsg+0x565/0x870 [ 865.846507][T16413] ? ___sys_sendmsg+0x2a5/0x360 [ 865.851383][T16413] ? __x64_sys_sendmsg+0x1b7/0x290 [ 865.856516][T16413] ? do_syscall_64+0x166/0x520 [ 865.861314][T16413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.867398][T16413] ? is_dynamic_key+0xd4/0x1c0 [ 865.872200][T16413] ? __pfx_htb_init+0x10/0x10 [ 865.876936][T16413] qdisc_create+0x7b5/0xf00 [ 865.881479][T16413] ? lockdep_rtnl_is_held+0x26/0x40 [ 865.886719][T16413] tc_modify_qdisc+0x17af/0x2390 [ 865.891692][T16413] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 865.897009][T16413] ? rtnetlink_rcv_msg+0x767/0xc00 [ 865.902142][T16413] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 865.907446][T16413] rtnetlink_rcv_msg+0x7b9/0xc00 [ 865.912437][T16413] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 865.917624][T16413] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 865.923155][T16413] ? ref_tracker_free+0x668/0x820 [ 865.928227][T16413] ? __pfx_ref_tracker_free+0x10/0x10 [ 865.933618][T16413] ? __asan_memcpy+0x40/0x70 [ 865.938228][T16413] ? __skb_clone+0x5c/0x6c0 [ 865.942758][T16413] netlink_rcv_skb+0x226/0x4a0 [ 865.947555][T16413] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 865.953043][T16413] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 865.958357][T16413] ? netlink_deliver_tap+0x2e/0x1b0 [ 865.963575][T16413] ? netlink_deliver_tap+0x2e/0x1b0 [ 865.968799][T16413] netlink_unicast+0x7f5/0x990 [ 865.973599][T16413] netlink_sendmsg+0x813/0xb40 [ 865.978396][T16413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 865.983712][T16413] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 865.990153][T16413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 865.995453][T16413] sock_sendmsg_nosec+0x13a/0x180 [ 866.000502][T16413] ____sys_sendmsg+0x565/0x870 [ 866.005283][T16413] ? __pfx_____sys_sendmsg+0x10/0x10 [ 866.010585][T16413] ? import_iovec+0x73/0xa0 [ 866.015103][T16413] ___sys_sendmsg+0x2a5/0x360 [ 866.019788][T16413] ? __lock_acquire+0x747/0x2de0 [ 866.024734][T16413] ? __pfx____sys_sendmsg+0x10/0x10 [ 866.029943][T16413] ? futex_wake+0x51e/0x600 [ 866.034472][T16413] ? __fget_files+0x2a/0x420 [ 866.039084][T16413] ? __fget_files+0x3a8/0x420 [ 866.043771][T16413] __x64_sys_sendmsg+0x1b7/0x290 [ 866.048720][T16413] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 866.054203][T16413] do_syscall_64+0x166/0x520 [ 866.058821][T16413] ? trace_irq_disable+0x3b/0x140 [ 866.063865][T16413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.069961][T16413] ? clear_bhb_loop+0x70/0xc0 [ 866.074660][T16413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.080583][T16413] RIP: 0033:0x7fcd570de159 [ 866.085013][T16413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.104636][T16413] RSP: 002b:00007fcd55336028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 866.113071][T16413] RAX: ffffffffffffffda RBX: 00007fcd57365fa0 RCX: 00007fcd570de159 [ 866.121062][T16413] RDX: 0000000020040084 RSI: 00002000000012c0 RDI: 0000000000000005 [ 866.129052][T16413] RBP: 00007fcd5717503b R08: 0000000000000000 R09: 0000000000000000 [ 866.137044][T16413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 866.145057][T16413] R13: 00007fcd57366038 R14: 00007fcd57365fa0 R15: 00007fff863240b8 [ 866.153075][T16413] [ 866.156117][T16413] Modules linked in: [ 866.160023][T16413] CR2: fffffffffffffa90 [ 866.164197][T16413] ---[ end trace 0000000000000000 ]--- [ 866.169670][T16413] RIP: 0010:strlen+0x39/0x70 [ 866.169703][T16413] Code: ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 <42> 80 7c 3f 01 00 75 de eb 19 89 d9 80 e1 07 38 c1 7c e6 49 89 fc [ 866.169720][T16413] RSP: 0018:ffffc90004f36db8 EFLAGS: 00010282 [ 866.169737][T16413] RAX: 0000000000000000 RBX: fffffffffffffa91 RCX: 0000000000080000 [ 866.169750][T16413] RDX: ffffc900076f1000 RSI: 000000000000029f RDI: fffffffffffffa90 [ 866.169764][T16413] RBP: ffffc90004f36ee8 R08: 0000000000000000 R09: 0000000000000000 [ 866.169776][T16413] R10: dffffc0000000000 R11: fffffbfff1f63f50 R12: ffff88813fe69700 [ 866.169791][T16413] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 866.169805][T16413] FS: 00007fcd553366c0(0000) GS:ffff888125bce000(0000) knlGS:0000000000000000 [ 866.169822][T16413] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 866.169835][T16413] CR2: fffffffffffffa90 CR3: 0000000039df8000 CR4: 00000000003526f0 [ 866.169916][T16413] Kernel panic - not syncing: Fatal exception [ 866.270203][T16413] Kernel Offset: disabled [ 866.274545][T16413] Rebooting in 86400 seconds..