last executing test programs: 8m30.801457318s ago: executing program 0 (id=1327): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003, {0x0, 0xf0}}, 0x18) sendmmsg$nfc_llcp(r0, 0x0, 0x0, 0x4000010) 8m30.682436796s ago: executing program 0 (id=1330): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000c80)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)='.', 0x1, 0x8012, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 8m30.585686265s ago: executing program 0 (id=1334): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000003900)={&(0x7f0000002380)={0xa, 0x4e23, 0x5, @empty, 0xb}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x1d}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x40}, 0x840) 8m30.440941254s ago: executing program 0 (id=1339): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100), 0x10000, 0x0) 8m30.22793718s ago: executing program 0 (id=1344): socket$kcm(0x29, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 8m28.737953479s ago: executing program 0 (id=1363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 8m28.405380992s ago: executing program 32 (id=1363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 8m11.091216238s ago: executing program 4 (id=1501): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x894) 8m10.97149126s ago: executing program 4 (id=1503): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 8m10.828529805s ago: executing program 4 (id=1506): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r0, &(0x7f0000000000), 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) 8m9.728976973s ago: executing program 4 (id=1509): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100), 0x10000, 0x0) 8m9.620213291s ago: executing program 4 (id=1511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, 0x0, 0x4) 7m58.344460955s ago: executing program 4 (id=1522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000001400000018000180140002006e657464657673696d3000000000040008000d000800000005000b000900000008000a"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 7m57.788615729s ago: executing program 33 (id=1522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000001400000018000180140002006e657464657673696d3000000000040008000d000800000005000b000900000008000a"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 7m38.660401475s ago: executing program 5 (id=1772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x0, 0x1, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x634]}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x5b5ace103c07041}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) 7m38.496734998s ago: executing program 5 (id=1776): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400", 0xd, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r1}, 0x14) 7m38.392219569s ago: executing program 5 (id=1779): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="1400000016000b63d25a80648c2594f922240685", 0x14}], 0x1}, 0x0) 7m38.096717521s ago: executing program 5 (id=1786): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000600)='./file0/../file0\x00', 0x0, 0x837808, 0x0) 7m37.979467413s ago: executing program 5 (id=1788): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a0380180000800c00018006000100000000000800034000000002"], 0x1a50}, 0x1, 0x0, 0x0, 0x805}, 0x0) 7m37.188481359s ago: executing program 5 (id=1797): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 7m36.560504434s ago: executing program 34 (id=1797): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 30.770184294s ago: executing program 6 (id=4210): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000040c0)=@deltaction={0x218, 0x31, 0x4, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x4c, 0x1, [{0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x4f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x8c, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x2015, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf7ad}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe4}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 29.485706823s ago: executing program 6 (id=4215): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x60000600) socket$inet_tcp(0x2, 0x1, 0x0) 24.773237013s ago: executing program 6 (id=4220): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r1, 0x25, 0x0, @val=@tracing}, 0x40) syz_emit_ethernet(0xd39, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x200800, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000022c0)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x69015a58, 0xdcd, 0xff, 0x8, 0x3, 0x0, 0x0, 0x40, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 24.474551125s ago: executing program 6 (id=4224): socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e23, 0x3, 'rr\x00', 0x1, 0x80005, 0x70}, 0x2c) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 24.412286442s ago: executing program 7 (id=4226): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80086f53, &(0x7f0000000100)={0x24, 0x0}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r1, 0x0, 0x0) openat$vhost_vsock(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) 22.94929956s ago: executing program 6 (id=4228): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 20.346497863s ago: executing program 6 (id=4230): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x60000600) socket$inet_tcp(0x2, 0x1, 0x0) 20.335125773s ago: executing program 7 (id=4231): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000200)={0xfb6, 0x640, 0x3c0, 0x384, 0x0, 0x6, 0xf, 0x1, {0x5, 0x8001}, {0x0, 0x7}, {0xb, 0x2000}, {0x29, 0x10001}, 0x1, 0x80, 0x7e, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x8, 0xd, 0x7fff, 0x0, 0x0, 0x3, 0x5}) r3 = inotify_init1(0x800) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x2, 0x40000, 0x0, r4, 0x3}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x17, 0x0, 0x0) inotify_rm_watch(r3, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0xc1485544, &(0x7f0000000140)=0x5) lseek(r6, 0x8, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r8, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x3) write$uinput_user_dev(r8, 0x0, 0x0) ioctl$UI_DEV_CREATE(r8, 0x5501) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 17.941127097s ago: executing program 2 (id=4239): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$netlink(0x10, 0x3, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0xf}, @fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r5}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 17.820513635s ago: executing program 3 (id=4240): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 13.862600299s ago: executing program 2 (id=4242): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x100400c1, &(0x7f0000000140)={0x11, 0x8100, r2, 0x1, 0x87, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) read(r0, &(0x7f0000000000)=""/149, 0xaa) 13.648879392s ago: executing program 3 (id=4244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x240000c4) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0x1, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) 13.463926802s ago: executing program 2 (id=4246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x800) 13.340465465s ago: executing program 2 (id=4247): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x4ec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x4007, @fd_index=0x5, 0xd8f2, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 13.339836641s ago: executing program 3 (id=4248): socket$kcm(0x29, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 13.050262506s ago: executing program 3 (id=4250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffefff) 10.400500251s ago: executing program 3 (id=4254): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 6.491065526s ago: executing program 1 (id=4255): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f0000000000)={&(0x7f00000000c0), 0x0, 0x28, 0x3, 0x10000}) ioctl$FS_IOC_GETVERSION(r0, 0x40045b0a, &(0x7f0000000040)) 6.352430335s ago: executing program 3 (id=4256): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) close(0x3) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r2, 0xc04c5609, 0x0) r3 = signalfd(r0, &(0x7f00000002c0)={[0x8]}, 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x100079af, 0x0, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2}) r8 = openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x80200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r8, 0x404c534a, &(0x7f0000000200)={0x7, 0x800, 0x5}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x30) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000dc0)={0xfffffffc, 0x10001, 0x1, 0x800, 0x15, "66e2c3908200"}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x18, 0x901, 0x70bd2c, 0x25dfdbff, {0x2, 0x18, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r10, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$USBDEVFS_CONNECTINFO(r10, 0x40085511, &(0x7f0000000280)) 6.301231445s ago: executing program 1 (id=4257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fchdir(0xffffffffffffffff) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) getdents64(r2, &(0x7f0000000200)=""/50, 0x32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2a, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1"], 0xfdef) 6.300405365s ago: executing program 2 (id=4258): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x2021}, [@IFLA_LINK={0x8}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_BROADCAST={0xa, 0x2, @local}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c00"], 0x78}}, 0x0) 5.942522492s ago: executing program 2 (id=4259): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x4, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0xaa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3fc, 0x7, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x7], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x2, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x10000, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff65, 0x0, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0xa22], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) 5.835525316s ago: executing program 7 (id=4260): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x100400c1, &(0x7f0000000140)={0x11, 0x8100, r2, 0x1, 0x87, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) read(r0, &(0x7f0000000000)=""/149, 0xaa) 5.134217227s ago: executing program 1 (id=4261): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7db", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="aad93710ad054ad72d3b4cc52693598c572ec19549f0b7985a404fcb76cbdc790dc5996a793d49c570637705c3a84896f199dd65eaa28136838fc28307ef460ab8ae05198e4a1b4bc33c85dfb8cf3ae92c58a8c687753c01f9da2ebabd", 0x5d}, {&(0x7f0000000940)="3e590f8573137f31d74e474181b96b5e2d37e2ebc67f09855aef4dfe56bfcbe92e7cffbadc3349b8dab77ed13cdd49fa396efbb0613011c4d1b5e452445e5f5fcb0cebbaead91d742cab55bb974ab98f0f0d8df116581ea003bc40a20b4bebdc51940e3cdc14e54c181a6ddeaec371d7747ba80505b9bf510db24b9d4d", 0x7d}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000002c0)="95fb30", 0x3, 0x0, 0x0, 0x0) 5.038134661s ago: executing program 35 (id=4230): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x60000600) socket$inet_tcp(0x2, 0x1, 0x0) 4.822660682s ago: executing program 1 (id=4263): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, &(0x7f0000000100)=""/134, 0x86) getdents64(r2, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x10, 0x0, 0x4000000000200}, 0x0, 0x0, 0x0, 0x0}) 4.568650479s ago: executing program 7 (id=4264): r0 = socket$inet6(0xa, 0x3, 0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, 0x0, 0xa, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) write$binfmt_script(r0, &(0x7f00000000c0), 0x28) 4.330059373s ago: executing program 7 (id=4265): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80086f53, &(0x7f0000000100)={0x24, 0x0}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) 301.78714ms ago: executing program 7 (id=4266): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 165.01029ms ago: executing program 1 (id=4267): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x4e23, 0x2, @empty, 0x3}, @ib={0x1b, 0xfffe, 0x8000000, {"7d900600080000000900"}, 0x0, 0x0, 0x6}}}, 0x118) 0s ago: executing program 1 (id=4268): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x3, r2, 0xc}, 0x10) kernel console output (not intermixed with test programs): _stack_lvl+0xe8/0x150 [ 359.078821][ T8655] should_fail_ex+0x46b/0x600 [ 359.078845][ T8655] _copy_from_user+0x2d/0xb0 [ 359.078868][ T8655] __sys_connect+0x156/0x450 [ 359.078900][ T8655] ? __pfx___sys_connect+0x10/0x10 [ 359.078933][ T8655] ? __pfx_ksys_write+0x10/0x10 [ 359.078964][ T8655] __x64_sys_connect+0x7a/0x90 [ 359.078986][ T8655] do_syscall_64+0x14d/0xf80 [ 359.079007][ T8655] ? trace_irq_disable+0x3b/0x150 [ 359.079027][ T8655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.079044][ T8655] ? clear_bhb_loop+0x40/0x90 [ 359.079065][ T8655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.079081][ T8655] RIP: 0033:0x7f038564c799 [ 359.079097][ T8655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.079113][ T8655] RSP: 002b:00007f038389e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 359.079132][ T8655] RAX: ffffffffffffffda RBX: 00007f03858c5fa0 RCX: 00007f038564c799 [ 359.079145][ T8655] RDX: 000000000000001c RSI: 00002000000000c0 RDI: 0000000000000003 [ 359.079157][ T8655] RBP: 00007f038389e090 R08: 0000000000000000 R09: 0000000000000000 [ 359.079167][ T8655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.079177][ T8655] R13: 00007f03858c6038 R14: 00007f03858c5fa0 R15: 00007ffc33393ff8 [ 359.079203][ T8655] [ 359.086227][ T5879] usb 5-1: USB disconnect, device number 30 [ 359.189770][ T8659] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 360.786030][ T8678] sg_write: data in/out 418780/98 bytes for SCSI command 0x0-- guessing data in; [ 360.786030][ T8678] program syz.1.757 not setting count and/or reply_len properly [ 361.534660][ T5193] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 361.675125][ T8692] sg_write: data in/out 418780/98 bytes for SCSI command 0x0-- guessing data in; [ 361.675125][ T8692] program syz.3.763 not setting count and/or reply_len properly [ 361.870416][ T5193] usb 1-1: Using ep0 maxpacket: 32 [ 362.239839][ T5193] usb 1-1: unable to get BOS descriptor or descriptor too short [ 362.251540][ T5193] usb 1-1: config 164 has an invalid interface number: 28 but max is 0 [ 362.251566][ T5193] usb 1-1: config 164 has no interface number 0 [ 362.251597][ T5193] usb 1-1: config 164 interface 28 has no altsetting 0 [ 362.258505][ T5193] usb 1-1: New USB device found, idVendor=a772, idProduct=72b8, bcdDevice=30.cc [ 362.259514][ T5193] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.259535][ T5193] usb 1-1: Product: syz [ 362.259548][ T5193] usb 1-1: Manufacturer: syz [ 362.259561][ T5193] usb 1-1: SerialNumber: syz [ 363.112480][ T5193] usb 1-1: USB disconnect, device number 25 [ 364.245126][ T8713] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 365.073323][ T31] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 365.124646][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 365.400150][ T31] usb 2-1: device descriptor read/64, error -32 [ 365.580146][ T5193] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 365.640199][ T31] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 365.669328][ T8733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.800416][ T31] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 365.800445][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.800464][ T31] usb 2-1: Product: syz [ 365.800498][ T31] usb 2-1: Manufacturer: syz [ 365.800511][ T31] usb 2-1: SerialNumber: syz [ 365.922188][ T5193] usb 1-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 365.922241][ T5193] usb 1-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 365.925140][ T5193] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 365.925165][ T5193] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 365.925184][ T5193] usb 1-1: Manufacturer: syz [ 365.925197][ T5193] usb 1-1: SerialNumber: syz [ 366.098186][ T8737] hub 9-0:1.0: USB hub found [ 366.106163][ T8737] hub 9-0:1.0: 1 port detected [ 366.782322][ T8720] netlink: 'syz.0.774': attribute type 25 has an invalid length. [ 366.799499][ T5193] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 366.809267][ T5193] usb 1-1: USB disconnect, device number 26 [ 366.942261][ T8739] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 366.942340][ T8739] overlayfs: missing 'lowerdir' [ 367.106744][ T8749] nfs: Unknown parameter 'p˜÷/«d>¸úÀ|' [ 368.520380][ T31] (unnamed net_device) (uninitialized): Assigned a random MAC address: ce:b4:62:b7:b0:aa [ 368.574904][ T31] rtl8150 2-1:1.0: eth1: rtl8150 is detected [ 368.658341][ T10] usb 2-1: USB disconnect, device number 35 [ 370.456415][ T8776] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 372.144188][ T8795] sg_write: data in/out 418780/98 bytes for SCSI command 0x0-- guessing data in; [ 372.144188][ T8795] program syz.4.789 not setting count and/or reply_len properly [ 373.720314][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 373.970173][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 374.655355][ T10] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.655387][ T10] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.655416][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 374.655449][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 374.655470][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.210747][ T10] usb 2-1: config 0 descriptor?? [ 375.680569][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 375.680707][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 375.716604][ T10] usb 2-1: USB disconnect, device number 36 [ 375.790287][ T5803] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 375.929953][ T8852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.940404][ T5803] usb 1-1: Using ep0 maxpacket: 8 [ 375.944810][ T5803] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.944838][ T5803] usb 1-1: config 0 interface 0 has no altsetting 0 [ 375.944869][ T5803] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 375.944889][ T5803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.949600][ T5803] usb 1-1: config 0 descriptor?? [ 376.116278][ T8844] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 376.246868][ T5803] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 376.379211][ T8857] hub 9-0:1.0: USB hub found [ 376.379524][ T8857] hub 9-0:1.0: 1 port detected [ 378.504747][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.504839][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.758723][ T5879] usb 1-1: USB disconnect, device number 27 [ 380.575876][ T8897] sg_write: data in/out 418780/98 bytes for SCSI command 0x0-- guessing data in; [ 380.575876][ T8897] program syz.2.815 not setting count and/or reply_len properly [ 380.846520][ T5879] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 381.246374][ T8898] Dead loop on virtual device ip6_vti0, fix it urgently! [ 381.247421][ T8898] Dead loop on virtual device ip6_vti0, fix it urgently! [ 381.247822][ T8898] Dead loop on virtual device ip6_vti0, fix it urgently! [ 381.248201][ T8898] Dead loop on virtual device ip6_vti0, fix it urgently! [ 381.280887][ T8898] Dead loop on virtual device ip6_vti0, fix it urgently! [ 381.281296][ T8898] Dead loop on virtual device ip6_vti0, fix it urgently! [ 381.340911][ T8898] Dead loop on virtual device ip6_vti0, fix it urgently! [ 381.363784][ T8902] syz_tun: entered allmulticast mode [ 381.390947][ T5879] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 381.390976][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.390993][ T5879] usb 4-1: Product: syz [ 381.391007][ T5879] usb 4-1: Manufacturer: syz [ 381.391019][ T5879] usb 4-1: SerialNumber: syz [ 381.447076][ T8902] bridge_slave_0: left allmulticast mode [ 381.447104][ T8902] bridge_slave_0: left promiscuous mode [ 381.458659][ T8898] Dead loop on virtual device ip6_vti0, fix it urgently! [ 381.490773][ T8902] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.542097][ T8898] Dead loop on virtual device ip6_vti0, fix it urgently! [ 381.608611][ T8902] bridge_slave_1: left allmulticast mode [ 381.608637][ T8902] bridge_slave_1: left promiscuous mode [ 381.608835][ T8902] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.647028][ T8898] Dead loop on virtual device ip6_vti0, fix it urgently! [ 381.753549][ T8902] bond0: (slave bond_slave_0): Releasing backup interface [ 381.830910][ T8902] bond0: (slave bond_slave_1): Releasing backup interface [ 381.925683][ T8902] team0: Port device team_slave_0 removed [ 381.970814][ T8902] team0: Port device team_slave_1 removed [ 381.975060][ T8902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.975135][ T8902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.066467][ T8902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.066486][ T8902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.121687][ T8913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.821'. [ 382.121714][ T8913] bridge: RTM_NEWNEIGH with invalid ether address [ 382.121893][ T8915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.821'. [ 382.121908][ T8915] bridge: RTM_NEWNEIGH with invalid ether address [ 382.166783][ T5879] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 382.246288][ T8899] syz_tun: left allmulticast mode [ 382.313145][ T5193] usb 4-1: USB disconnect, device number 25 [ 382.890422][ T8955] warning: `syz.1.835' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 384.285528][ T9023] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 386.637021][ T9099] bridge_slave_0: left allmulticast mode [ 386.637049][ T9099] bridge_slave_0: left promiscuous mode [ 386.637279][ T9099] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.789468][ T9099] bridge_slave_1: left allmulticast mode [ 386.789495][ T9099] bridge_slave_1: left promiscuous mode [ 386.789683][ T9099] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.952860][ T9099] bond0: (slave bond_slave_0): Releasing backup interface [ 387.063152][ T9099] bond0: (slave bond_slave_1): Releasing backup interface [ 387.181118][ T9099] team0: Port device team_slave_0 removed [ 387.224210][ T9099] team0: Port device team_slave_1 removed [ 387.226521][ T9099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.226546][ T9099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.892829][ T9099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.892867][ T9099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.936216][ T9099] net_ratelimit: 1 callbacks suppressed [ 387.936233][ T9099] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 388.270769][ T9140] netlink: 52 bytes leftover after parsing attributes in process `syz.3.899'. [ 388.270795][ T9140] netlink: 52 bytes leftover after parsing attributes in process `syz.3.899'. [ 388.270809][ T9140] netlink: 52 bytes leftover after parsing attributes in process `syz.3.899'. [ 388.361475][ T9144] netlink: 'syz.4.903': attribute type 2 has an invalid length. [ 388.361495][ T9144] tipc: Started in network mode [ 388.361514][ T9144] tipc: Node identity 7000f, cluster identity 4711 [ 388.361524][ T9144] tipc: Node number set to 458767 [ 389.132916][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e7edc00: rx timeout, send abort [ 389.353698][ T9179] Dead loop on virtual device ip6_vti0, fix it urgently! [ 389.354137][ T9179] Dead loop on virtual device ip6_vti0, fix it urgently! [ 389.356666][ T9179] Dead loop on virtual device ip6_vti0, fix it urgently! [ 389.357281][ T9179] Dead loop on virtual device ip6_vti0, fix it urgently! [ 389.357693][ T9179] Dead loop on virtual device ip6_vti0, fix it urgently! [ 389.358092][ T9179] Dead loop on virtual device ip6_vti0, fix it urgently! [ 389.455463][ T9179] Dead loop on virtual device ip6_vti0, fix it urgently! [ 389.529432][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.921'. [ 389.550285][ T9179] Dead loop on virtual device ip6_vti0, fix it urgently! [ 389.633703][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ea57c00: rx timeout, send abort [ 389.634027][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e7edc00: abort rx timeout. Force session deactivation [ 390.133777][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ea57c00: abort rx timeout. Force session deactivation [ 390.643098][ T9229] syzkaller0: entered promiscuous mode [ 390.643125][ T9229] syzkaller0: entered allmulticast mode [ 391.681419][ T9245] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 391.681443][ T9245] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 391.688529][ T9245] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 391.688550][ T9245] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 391.689597][ T9245] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 391.689615][ T9245] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 391.691020][ T9245] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 391.691039][ T9245] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 391.691964][ T9245] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 391.691980][ T9245] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 391.909254][ T9281] syzkaller0: entered promiscuous mode [ 391.909277][ T9281] syzkaller0: entered allmulticast mode [ 399.900243][ T9327] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 399.921888][ T9327] syzkaller0: entered promiscuous mode [ 399.921907][ T9327] syzkaller0: entered allmulticast mode [ 400.251527][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.980'. [ 400.269500][ T9370] netlink: 'syz.4.971': attribute type 19 has an invalid length. [ 400.269519][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.971'. [ 403.880316][ T9407] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 403.900599][ T9407] syzkaller0: entered promiscuous mode [ 403.900617][ T9407] syzkaller0: entered allmulticast mode [ 404.060456][ T9370] netlink: 'syz.4.971': attribute type 19 has an invalid length. [ 404.060470][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.971'. [ 404.423744][ T5951] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.443491][ T5951] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.653661][ T5951] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.653936][ T5951] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.631226][ T9495] Dead loop on virtual device ip6_vti0, fix it urgently! [ 405.631685][ T9495] Dead loop on virtual device ip6_vti0, fix it urgently! [ 405.632099][ T9495] Dead loop on virtual device ip6_vti0, fix it urgently! [ 405.632485][ T9495] Dead loop on virtual device ip6_vti0, fix it urgently! [ 405.632914][ T9495] Dead loop on virtual device ip6_vti0, fix it urgently! [ 405.633308][ T9495] Dead loop on virtual device ip6_vti0, fix it urgently! [ 405.730468][ T9495] Dead loop on virtual device ip6_vti0, fix it urgently! [ 405.840526][ T9495] Dead loop on virtual device ip6_vti0, fix it urgently! [ 405.961752][ T9495] Dead loop on virtual device ip6_vti0, fix it urgently! [ 406.032461][ T9495] Dead loop on virtual device ip6_vti0, fix it urgently! [ 408.031717][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1053'. [ 408.091554][ T9628] netlink: 'syz.1.1056': attribute type 12 has an invalid length. [ 408.091575][ T9628] netlink: 'syz.1.1056': attribute type 29 has an invalid length. [ 408.091588][ T9628] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1056'. [ 408.091618][ T9628] netlink: 'syz.1.1056': attribute type 2 has an invalid length. [ 408.091630][ T9628] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1056'. [ 408.729113][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1069'. [ 409.353657][ T9690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1084'. [ 409.927159][ T9714] syzkaller0: entered promiscuous mode [ 409.927182][ T9714] syzkaller0: entered allmulticast mode [ 410.048501][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1100'. [ 410.786630][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1114'. [ 411.030174][ T5193] IPVS: starting estimator thread 0... [ 411.120372][ T9771] IPVS: using max 9 ests per chain, 21600 per kthread [ 411.262436][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1126'. [ 412.890768][ T9875] Driver unsupported XDP return value 0 on prog (id 85) dev N/A, expect packet loss! [ 413.787432][ T9926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1193'. [ 414.235798][ T9955] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1206'. [ 414.391201][ T9958] netlink: 2292 bytes leftover after parsing attributes in process `syz.3.1210'. [ 414.391660][ T9958] netlink: 2292 bytes leftover after parsing attributes in process `syz.3.1210'. [ 414.411041][ T9961] nbd: must specify at least one socket [ 414.830552][ T9987] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1221'. [ 415.822721][T10038] delete_channel: no stack [ 416.463707][T10066] pimreg1: tun_chr_ioctl cmd 2147767507 [ 416.619254][T10079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1263'. [ 417.074476][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1271'. [ 417.214761][T10106] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1277'. [ 417.499722][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1285'. [ 417.802225][T10137] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1291'. [ 419.311405][T10234] ======================================================= [ 419.311405][T10234] WARNING: The mand mount option has been deprecated and [ 419.311405][T10234] and is ignored by this kernel. Remove the mand [ 419.311405][T10234] option from the mount to silence this warning. [ 419.311405][T10234] ======================================================= [ 419.797610][T10254] __nla_validate_parse: 2 callbacks suppressed [ 419.797629][T10254] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1349'. [ 421.655225][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 421.668045][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 421.669272][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 421.670746][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 421.673191][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 421.706791][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 421.710363][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 421.710733][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 421.714249][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 421.715900][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 421.966447][ T5951] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.574514][ T5951] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.606422][T10338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1386'. [ 422.656897][T10298] chnl_net:caif_netlink_parms(): no params data found [ 422.889088][T10351] nbd: must specify at least one socket [ 422.966696][ T5951] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.379331][ T5951] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.449501][T10298] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.449691][T10298] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.449865][T10298] bridge_slave_0: entered allmulticast mode [ 423.455394][T10298] bridge_slave_0: entered promiscuous mode [ 423.458334][T10298] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.458509][T10298] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.458680][T10298] bridge_slave_1: entered allmulticast mode [ 423.461571][T10298] bridge_slave_1: entered promiscuous mode [ 423.504396][T10298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.509013][T10298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.595476][T10298] team0: Port device team_slave_0 added [ 423.599051][T10298] team0: Port device team_slave_1 added [ 423.657701][T10298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.657714][T10298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.657728][T10298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.659049][T10298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.659058][T10298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.659078][T10298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.768222][T10298] hsr_slave_0: entered promiscuous mode [ 423.769050][T10298] hsr_slave_1: entered promiscuous mode [ 423.769775][T10298] debugfs: 'hsr0' already exists in 'hsr' [ 423.769791][T10298] Cannot create hsr debugfs directory [ 423.770454][ T5801] Bluetooth: hci3: command tx timeout [ 425.851284][ T5801] Bluetooth: hci3: command tx timeout [ 425.855413][ T5951] bond0 (unregistering): Released all slaves [ 426.995981][T10488] syzkaller0: entered promiscuous mode [ 426.996008][T10488] syzkaller0: entered allmulticast mode [ 427.202078][T10298] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 427.933794][ T5801] Bluetooth: hci3: command tx timeout [ 428.492072][T10564] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1481'. [ 430.014359][ T5801] Bluetooth: hci3: command tx timeout [ 438.314557][T10298] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 438.452823][T10298] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 438.637341][T10597] net_ratelimit: 1 callbacks suppressed [ 438.637361][T10597] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 438.638060][T10298] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 438.949096][ T5951] hsr_slave_0: left promiscuous mode [ 438.995138][ T5951] hsr_slave_1: left promiscuous mode [ 439.058263][ T5951] veth1_macvtap: left promiscuous mode [ 439.062116][ T5951] veth0_macvtap: left promiscuous mode [ 439.062468][ T5951] veth1_vlan: left promiscuous mode [ 439.063037][ T5951] veth0_vlan: left promiscuous mode [ 439.934332][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.934400][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.572726][T10298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.613095][T10298] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.634101][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.634226][ T5949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.678664][ T1480] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.678816][ T1480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.229280][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 452.252563][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 452.254038][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 452.258763][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 452.262116][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 454.126990][ T5951] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.127011][ T5951] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.330183][ T5801] Bluetooth: hci2: command tx timeout [ 454.468517][T10757] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1553'. [ 454.468543][T10757] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1553'. [ 454.468557][T10757] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1553'. [ 454.544304][ T5951] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.544336][ T5951] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.587341][T10757] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1553'. [ 454.587366][T10757] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1553'. [ 454.587381][T10757] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1553'. [ 454.774101][T10757] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1553'. [ 454.774118][T10757] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1553'. [ 454.774126][T10757] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1553'. [ 454.887169][ T5951] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.887201][ T5951] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.014677][T10298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.071008][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1557'. [ 455.288709][ T5951] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.288740][ T5951] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.010350][T10688] chnl_net:caif_netlink_parms(): no params data found [ 456.410158][ T5801] Bluetooth: hci2: command tx timeout [ 457.265860][ T5951] bond0 (unregistering): Released all slaves [ 457.275725][ T5951] bond1 (unregistering): Released all slaves [ 457.289018][ T5951] bond2 (unregistering): Released all slaves [ 457.528737][ T5951] tipc: Left network mode [ 457.537087][T10688] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.537207][T10688] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.537411][T10688] bridge_slave_0: entered allmulticast mode [ 457.547624][T10688] bridge_slave_0: entered promiscuous mode [ 457.557149][T10688] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.557328][T10688] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.557491][T10688] bridge_slave_1: entered allmulticast mode [ 457.572090][T10688] bridge_slave_1: entered promiscuous mode [ 457.684433][T10688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.713313][T10688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.714936][ T5951] IPVS: stopping backup sync thread 6281 ... [ 457.809450][T10688] team0: Port device team_slave_0 added [ 457.824349][T10688] team0: Port device team_slave_1 added [ 458.298128][T10688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.298144][T10688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.298163][T10688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.491363][ T5801] Bluetooth: hci2: command tx timeout [ 458.525472][T10688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.525488][T10688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.525512][T10688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.659809][T10298] veth0_vlan: entered promiscuous mode [ 458.840174][ T5951] hsr_slave_0: left promiscuous mode [ 458.880293][ T5951] hsr_slave_1: left promiscuous mode [ 458.922516][ T5951] veth1_macvtap: left promiscuous mode [ 458.922632][ T5951] veth0_macvtap: left promiscuous mode [ 458.922871][ T5951] veth1_vlan: left promiscuous mode [ 458.923063][ T5951] veth0_vlan: left promiscuous mode [ 460.295060][T10688] hsr_slave_0: entered promiscuous mode [ 460.295825][T10688] hsr_slave_1: entered promiscuous mode [ 460.331474][T10298] veth1_vlan: entered promiscuous mode [ 460.580212][ T5801] Bluetooth: hci2: command tx timeout [ 461.036841][ T5951] IPVS: stop unused estimator thread 0... [ 461.236494][T10298] veth0_macvtap: entered promiscuous mode [ 461.343313][T10298] veth1_macvtap: entered promiscuous mode [ 461.584953][T10298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.786409][T10298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.808092][T10688] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 461.931120][ T1499] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.940480][T10688] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 461.991857][ T1499] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.994323][ T1499] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.997473][ T1499] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.997549][T10688] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 462.073467][T10975] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1627'. [ 462.073606][T10975] netlink: 'syz.2.1627': attribute type 1 has an invalid length. [ 462.112066][T10688] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 462.419763][T10998] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1632'. [ 462.613844][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.613863][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.882183][ T787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.882203][ T787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.024765][T11017] syzkaller0: entered promiscuous mode [ 463.024790][T11017] syzkaller0: entered allmulticast mode [ 463.079956][T11025] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1642'. [ 463.576114][T10688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.696350][T10688] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.774260][ T627] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.774438][ T627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.776671][ T627] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.776789][ T627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.919320][T10688] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 463.919345][T10688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 464.008285][T11059] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1651'. [ 464.665208][T10688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.687404][T10688] veth0_vlan: entered promiscuous mode [ 465.728939][T11139] netlink: 'syz.1.1673': attribute type 29 has an invalid length. [ 465.738597][T10688] veth1_vlan: entered promiscuous mode [ 465.740020][T11139] netlink: 'syz.1.1673': attribute type 29 has an invalid length. [ 465.741520][T11139] netlink: 'syz.1.1673': attribute type 29 has an invalid length. [ 465.742514][T11139] netlink: 'syz.1.1673': attribute type 29 has an invalid length. [ 465.888468][T10688] veth0_macvtap: entered promiscuous mode [ 465.921805][T10688] veth1_macvtap: entered promiscuous mode [ 465.993327][T10688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.046085][T10688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.101557][ T1499] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.108615][ T627] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.123352][ T627] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.129790][ T627] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.146764][T11152] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1680'. [ 466.680635][ T787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.680653][ T787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.805556][ T627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.805576][ T627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.136793][T11193] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1693'. [ 468.036820][T11232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1706'. [ 468.515542][T11250] netlink: 2292 bytes leftover after parsing attributes in process `syz.3.1714'. [ 468.768504][T11269] netlink: 'syz.3.1721': attribute type 2 has an invalid length. [ 468.768525][T11269] netlink: 'syz.3.1721': attribute type 1 has an invalid length. [ 468.768623][T11269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.162790][T11387] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1772'. [ 473.557097][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 473.560907][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 473.574952][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 473.576788][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 473.577736][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 473.607233][T11473] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.125978][T11473] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.508544][T11473] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.180485][T11473] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.690200][ T5801] Bluetooth: hci3: command tx timeout [ 476.075918][T11503] chnl_net:caif_netlink_parms(): no params data found [ 476.657216][T11473] bridge_slave_1: left allmulticast mode [ 476.657241][T11473] bridge_slave_1: left promiscuous mode [ 476.714305][T11473] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.838774][T11473] bridge_slave_0: left allmulticast mode [ 476.838801][T11473] bridge_slave_0: left promiscuous mode [ 476.839019][T11473] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.210798][T11665] netlink: 2292 bytes leftover after parsing attributes in process `syz.2.1843'. [ 477.770157][ T5801] Bluetooth: hci3: command tx timeout [ 478.061043][T11473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.151101][T11473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.195044][T11473] bond0 (unregistering): Released all slaves [ 478.508919][T11503] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.509026][T11503] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.509221][T11503] bridge_slave_0: entered allmulticast mode [ 478.542271][T11503] bridge_slave_0: entered promiscuous mode [ 478.584583][T11503] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.605236][T11503] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.605463][T11503] bridge_slave_1: entered allmulticast mode [ 478.608463][T11503] bridge_slave_1: entered promiscuous mode [ 479.303749][T11503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.345355][T11503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.850150][ T5801] Bluetooth: hci3: command tx timeout [ 479.874087][T11765] batman_adv: batadv0: Adding interface: dummy0 [ 479.874104][T11765] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.874132][T11765] batman_adv: batadv0: Interface activated: dummy0 [ 479.904288][T11770] batadv0: mtu less than device minimum [ 479.941171][T11770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 479.959561][T11770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 479.983122][T11770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 480.011958][T11770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 480.015905][T11770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 480.019832][T11770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 480.059338][T11770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 480.079893][T11770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 480.095285][T11770] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 480.352523][T11503] team0: Port device team_slave_0 added [ 480.403065][T11503] team0: Port device team_slave_1 added [ 480.633366][T11473] hsr_slave_0: left promiscuous mode [ 480.670130][T11473] hsr_slave_1: left promiscuous mode [ 480.671002][T11473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.671210][T11473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.749097][T11473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.749125][T11473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.874437][T11473] veth1_macvtap: left promiscuous mode [ 480.874537][T11473] veth0_macvtap: left promiscuous mode [ 480.874801][T11473] veth1_vlan: left promiscuous mode [ 480.874980][T11473] veth0_vlan: left promiscuous mode [ 481.920799][T11473] team0 (unregistering): Port device team_slave_1 removed [ 481.930128][ T5801] Bluetooth: hci3: command tx timeout [ 481.960621][T11473] team0 (unregistering): Port device team_slave_0 removed [ 482.430689][T11503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.430705][T11503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.430736][T11503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.500959][T11503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.500975][T11503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.501000][T11503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.808419][T11503] hsr_slave_0: entered promiscuous mode [ 482.809804][T11503] hsr_slave_1: entered promiscuous mode [ 482.812070][T11503] debugfs: 'hsr0' already exists in 'hsr' [ 482.812094][T11503] Cannot create hsr debugfs directory [ 484.316946][T11503] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 484.404265][T11503] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 484.504092][T11503] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 484.575095][T11503] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 484.998867][T11503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.054319][T11503] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.062009][T11479] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.070917][T11479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.102144][T11473] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.102216][T11473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.825890][T11503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.708392][T11503] veth0_vlan: entered promiscuous mode [ 486.780565][T11503] veth1_vlan: entered promiscuous mode [ 486.865850][T11503] veth0_macvtap: entered promiscuous mode [ 486.900518][T11503] veth1_macvtap: entered promiscuous mode [ 486.928839][T11503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.952081][T11503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.958608][ T5953] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.958811][ T5953] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.958993][ T5953] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.992177][T11473] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.214519][T12082] netlink: 2292 bytes leftover after parsing attributes in process `syz.1.1964'. [ 488.041758][T12113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1976'. [ 488.161077][T12113] netlink: 2292 bytes leftover after parsing attributes in process `syz.3.1976'. [ 488.620510][T12125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1982'. [ 498.620132][ T1411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.620150][ T1411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.805421][ T1411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.805440][ T1411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.524678][T12218] netlink: 'syz.6.2014': attribute type 29 has an invalid length. [ 500.444383][T12267] net_ratelimit: 10 callbacks suppressed [ 500.444402][T12267] openvswitch: netlink: IP tunnel dst address not specified [ 501.376493][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.376561][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.538103][T12311] openvswitch: netlink: IP tunnel dst address not specified [ 503.123043][T12346] openvswitch: netlink: IP tunnel dst address not specified [ 503.753137][T12376] syzkaller0: entered promiscuous mode [ 503.753170][T12376] syzkaller0: entered allmulticast mode [ 503.859042][T12385] openvswitch: netlink: IP tunnel dst address not specified [ 504.559816][T12419] netlink: 'syz.3.2091': attribute type 1 has an invalid length. [ 504.559919][T12419] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.633997][T12421] openvswitch: netlink: IP tunnel dst address not specified [ 505.258676][T12453] openvswitch: netlink: IP tunnel dst address not specified [ 505.379339][T12460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2107'. [ 505.885962][T12486] openvswitch: netlink: IP tunnel dst address not specified [ 506.027729][T12492] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.048220][T12492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.175154][T12650] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 509.176025][T12650] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 509.710320][T12672] batman_adv: batadv0: Adding interface: dummy0 [ 509.710337][T12672] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.717314][T12672] batman_adv: batadv0: Interface activated: dummy0 [ 509.766190][T12674] batadv0: mtu less than device minimum [ 509.788027][T12674] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.813510][T12674] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.840712][T12674] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.864726][T12674] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.882644][T12674] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 509.900956][T12674] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 511.858373][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2226'. [ 512.697094][T12825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2240'. [ 512.881200][T12830] syz.1.2246 (12830) used greatest stack depth: 17432 bytes left [ 513.592480][T12869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2259'. [ 513.840694][T12869] gretap0: entered promiscuous mode [ 514.419276][T12894] netlink: 'syz.1.2272': attribute type 2 has an invalid length. [ 514.419295][T12894] netlink: 'syz.1.2272': attribute type 1 has an invalid length. [ 514.446152][T12894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.020597][T13033] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2336'. [ 517.492325][T13037] net_ratelimit: 13 callbacks suppressed [ 517.492343][T13037] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 517.566075][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2341'. [ 517.674568][T13060] openvswitch: netlink: IP tunnel dst address not specified [ 517.849099][T13069] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2349'. [ 518.249520][T13091] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 518.500924][T13083] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 518.708165][T13107] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2365'. [ 519.233599][T13135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2379'. [ 519.309261][T13135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2379'. [ 519.512747][T13135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2379'. [ 520.207704][T13182] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2398'. [ 520.391717][T13182] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2398'. [ 520.773494][T13182] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2398'. [ 521.302731][T13226] syz_tun: entered allmulticast mode [ 521.371744][T13226] bridge_slave_0: left allmulticast mode [ 521.371771][T13226] bridge_slave_0: left promiscuous mode [ 521.372003][T13226] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.472475][T13226] bridge_slave_1: left allmulticast mode [ 521.472507][T13226] bridge_slave_1: left promiscuous mode [ 521.472732][T13226] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.614766][T13226] bond0: (slave bond_slave_0): Releasing backup interface [ 521.883016][T13226] bond0: (slave bond_slave_1): Releasing backup interface [ 521.974469][T13226] team0: Port device team_slave_0 removed [ 522.062109][T13226] team0: Port device team_slave_1 removed [ 522.063061][T13226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.063084][T13226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.130873][T13226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.130899][T13226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.163407][T13226] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 522.253210][T13224] syz_tun: left allmulticast mode [ 522.753071][T13291] __nla_validate_parse: 4 callbacks suppressed [ 522.753088][T13291] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2441'. [ 522.976923][T13297] syz_tun: entered allmulticast mode [ 523.021142][T13297] bridge_slave_0: left allmulticast mode [ 523.021169][T13297] bridge_slave_0: left promiscuous mode [ 523.021527][T13297] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.103944][T13297] bridge_slave_1: left allmulticast mode [ 523.103962][T13297] bridge_slave_1: left promiscuous mode [ 523.104104][T13297] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.232163][T13297] bond0: (slave bond_slave_0): Releasing backup interface [ 523.322809][T13297] bond0: (slave bond_slave_1): Releasing backup interface [ 523.418278][T13297] team0: Port device team_slave_0 removed [ 523.481002][T13297] team0: Port device team_slave_1 removed [ 523.483167][T13297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.483199][T13297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.544910][T13297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.559853][T13297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.583915][T13297] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 523.632851][T13296] syz_tun: left allmulticast mode [ 523.688129][T13321] syzkaller0: entered promiscuous mode [ 523.688147][T13321] syzkaller0: entered allmulticast mode [ 523.800979][T13330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2456'. [ 526.576219][T13398] netlink: 'syz.1.2477': attribute type 3 has an invalid length. [ 526.576242][T13398] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2477'. [ 526.576251][T13398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2477'. [ 535.805785][T13371] syz_tun: entered allmulticast mode [ 535.859725][T13379] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 535.890153][T13410] netlink: 'syz.1.2483': attribute type 13 has an invalid length. [ 535.890174][T13410] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.2483'. [ 535.890383][T13368] syz_tun: left allmulticast mode [ 536.737425][T13447] syzkaller0: entered promiscuous mode [ 536.737448][T13447] syzkaller0: entered allmulticast mode [ 536.770722][T13454] netlink: 'syz.6.2497': attribute type 6 has an invalid length. [ 536.770742][T13454] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2497'. [ 538.932306][T13513] netlink: 'syz.6.2522': attribute type 10 has an invalid length. [ 538.984540][T13519] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2522'. [ 539.043648][T13513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.064882][T13513] team0: Port device bond0 added [ 539.530764][T13543] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2532'. [ 539.530788][T13543] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2532'. [ 539.620455][T13547] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 539.633163][T13543] netlink: 2292 bytes leftover after parsing attributes in process `syz.7.2532'. [ 540.741641][T13605] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2554'. [ 541.069593][T13621] openvswitch: netlink: IP tunnel dst address not specified [ 541.584458][T13642] binder: 13639:13642 ioctl c0306201 200000000680 returned -14 [ 541.608869][T13645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2568'. [ 542.393560][T13670] tipc: Enabling of bearer rejected, failed to enable media [ 544.282495][T13776] netlink: 'syz.7.2628': attribute type 3 has an invalid length. [ 544.335829][T13778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2629'. [ 545.047994][T13811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2644'. [ 545.637625][T13846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2660'. [ 547.321839][T13888] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2678'. [ 547.939737][T13922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2694'. [ 548.607442][T13958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2711'. [ 549.263627][T13989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2723'. [ 550.260101][ T5809] Bluetooth: hci5: command 0x1003 tx timeout [ 550.260320][ T5801] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 560.292276][T13998] netlink: 'syz.2.2729': attribute type 10 has an invalid length. [ 560.292298][T13998] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2729'. [ 560.330977][T14006] macvlan1: entered allmulticast mode [ 560.347696][T14009] veth1_vlan: entered allmulticast mode [ 560.347749][T14009] macvlan1: entered promiscuous mode [ 561.061619][T14050] hub 9-0:1.0: USB hub found [ 561.061978][T14050] hub 9-0:1.0: 1 port detected [ 561.197986][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2753'. [ 563.235419][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.235487][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.801385][T14102] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2775'. [ 564.300825][T14132] tipc: Started in network mode [ 564.300854][T14132] tipc: Node identity ac14140f, cluster identity 4711 [ 564.309397][T14132] tipc: New replicast peer: 255.255.255.255 [ 564.357794][T14132] tipc: Enabled bearer , priority 10 [ 564.439852][T14136] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2789'. [ 565.313515][ T10] tipc: Node number set to 2886997007 [ 565.441476][T14164] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2804'. [ 565.551370][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 565.569772][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 565.581610][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 565.596559][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 565.609787][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 565.829674][T14181] misc userio: The device must be registered before sending interrupts [ 566.205909][T14198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2818'. [ 566.963825][T14228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2832'. [ 567.384136][ T1411] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.690137][ T5809] Bluetooth: hci5: command tx timeout [ 567.837939][ T1411] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.109033][T14169] chnl_net:caif_netlink_parms(): no params data found [ 568.333936][T14274] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2847'. [ 568.333958][T14274] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2847'. [ 568.838567][T14290] netlink: 'syz.3.2853': attribute type 1 has an invalid length. [ 569.770143][ T5809] Bluetooth: hci5: command tx timeout [ 570.930964][ T1411] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.950550][T14299] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2859'. [ 571.328171][ T1411] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.433837][T14169] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.434026][T14169] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.434244][T14169] bridge_slave_0: entered allmulticast mode [ 571.436863][T14169] bridge_slave_0: entered promiscuous mode [ 571.470865][T14169] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.470971][T14169] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.471170][T14169] bridge_slave_1: entered allmulticast mode [ 571.473222][T14169] bridge_slave_1: entered promiscuous mode [ 571.574658][T14169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.578364][T14169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.648990][T14169] team0: Port device team_slave_0 added [ 571.662358][T14169] team0: Port device team_slave_1 added [ 571.728474][T14324] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2869'. [ 571.808659][T14326] misc userio: No port type given on /dev/userio [ 571.830399][T14326] misc userio: The device must be registered before sending interrupts [ 571.850060][ T5809] Bluetooth: hci5: command tx timeout [ 571.856777][T14169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.856791][T14169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.856813][T14169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.871110][T14169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.871125][T14169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.871148][T14169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.479624][T14169] hsr_slave_0: entered promiscuous mode [ 572.481752][T14169] hsr_slave_1: entered promiscuous mode [ 572.482601][T14169] debugfs: 'hsr0' already exists in 'hsr' [ 572.482624][T14169] Cannot create hsr debugfs directory [ 572.502892][ T1411] bridge_slave_1: left allmulticast mode [ 572.502916][ T1411] bridge_slave_1: left promiscuous mode [ 572.507325][ T1411] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.612963][ T1411] bridge_slave_0: left allmulticast mode [ 572.612991][ T1411] bridge_slave_0: left promiscuous mode [ 572.614438][ T1411] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.945954][ T5809] Bluetooth: hci5: command tx timeout [ 574.460858][ T1411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.542056][ T1411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.593388][ T1411] bond0 (unregistering): Released all slaves [ 574.613083][ T1411] bond1 (unregistering): Released all slaves [ 574.681395][T14405] syz_tun: entered allmulticast mode [ 574.702302][T14414] bridge_slave_0: left allmulticast mode [ 574.702326][T14414] bridge_slave_0: left promiscuous mode [ 574.702527][T14414] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.801667][T14414] bridge_slave_1: left allmulticast mode [ 574.801696][T14414] bridge_slave_1: left promiscuous mode [ 574.801866][T14414] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.959344][T14414] bond0: (slave bond_slave_0): Releasing backup interface [ 575.215557][ T5809] Bluetooth: hci2: command 0x0406 tx timeout [ 575.500495][T14414] bond0: (slave bond_slave_1): Releasing backup interface [ 576.267646][T14414] team0: Port device team_slave_0 removed [ 576.325837][T14414] team0: Port device team_slave_1 removed [ 576.326728][T14414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.326752][T14414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.371798][T14414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.371825][T14414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.424806][T14414] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 576.758190][T14457] netlink: 'syz.2.2915': attribute type 29 has an invalid length. [ 576.832361][T14468] bridge1: entered promiscuous mode [ 576.832386][T14468] bridge1: entered allmulticast mode [ 576.832656][T14401] syz_tun: left allmulticast mode [ 578.244563][T14495] netlink: 'syz.2.2932': attribute type 29 has an invalid length. [ 578.500152][ T1411] hsr_slave_0: left promiscuous mode [ 578.540655][ T1411] hsr_slave_1: left promiscuous mode [ 578.541316][ T1411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.541336][ T1411] batadv0: mtu less than device minimum [ 578.545677][ T1411] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 578.566822][ T1411] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 578.589664][ T1411] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 578.611426][ T1411] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 578.623313][ T1411] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 578.630957][ T1411] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 578.640131][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 578.642065][ T1411] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 578.649454][ T1411] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 578.727877][ T1411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.744398][ T1411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.801370][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 578.863496][T14500] loop2: detected capacity change from 0 to 7 [ 578.886626][ T1411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.917200][ T1411] batman_adv: batadv0: Interface deactivated: dummy0 [ 578.917226][ T1411] batman_adv: batadv0: Removing interface: dummy0 [ 578.921211][T14029] Dev loop2: unable to read RDB block 7 [ 578.921343][T14029] loop2: AHDI p1 p2 p3 [ 578.921377][T14029] loop2: partition table partially beyond EOD, truncated [ 578.948524][T14029] loop2: p1 start 1818582900 is beyond EOD, truncated [ 578.948548][T14029] loop2: p3 start 335544320 is beyond EOD, truncated [ 578.982685][T14500] Dev loop2: unable to read RDB block 7 [ 578.982715][T14500] loop2: AHDI p1 p2 p3 [ 578.982831][T14500] loop2: partition table partially beyond EOD, truncated [ 578.986402][T14500] loop2: p1 start 1818582900 is beyond EOD, truncated [ 578.986417][T14500] loop2: p3 start 335544320 is beyond EOD, truncated [ 579.010271][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 579.011824][ T10] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 579.011857][ T10] usb 8-1: can't read configurations, error -71 [ 579.028422][ T1411] veth1_macvtap: left promiscuous mode [ 579.028518][ T1411] veth0_macvtap: left promiscuous mode [ 579.028739][ T1411] veth1_vlan: left promiscuous mode [ 579.028903][ T1411] veth0_vlan: left promiscuous mode [ 580.700768][ T1411] team0 (unregistering): Port device team_slave_1 removed [ 580.744643][ T1411] team0 (unregistering): Port device team_slave_0 removed [ 580.986821][T14508] syz_tun: entered allmulticast mode [ 581.002084][T14511] batman_adv: batadv0: Interface deactivated: dummy0 [ 581.002112][T14511] batman_adv: batadv0: Removing interface: dummy0 [ 581.049096][T14511] bridge_slave_0: left allmulticast mode [ 581.049123][T14511] bridge_slave_0: left promiscuous mode [ 581.049371][T14511] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.103529][T14528] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2942'. [ 581.133372][T14511] bridge_slave_1: left allmulticast mode [ 581.133399][T14511] bridge_slave_1: left promiscuous mode [ 581.133635][T14511] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.260863][T14511] bond0: (slave bond_slave_0): Releasing backup interface [ 581.340991][T14511] bond0: (slave bond_slave_1): Releasing backup interface [ 581.426587][T14511] team0: Port device team_slave_0 removed [ 581.465403][T14511] team0: Port device team_slave_1 removed [ 581.465988][T14511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.466005][T14511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.526567][T14511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.526587][T14511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.555091][T14511] net_ratelimit: 32 callbacks suppressed [ 581.555105][T14511] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 581.566352][T14514] vxcan1 speed is unknown, defaulting to 1000 [ 581.603085][T14508] syz_tun: left allmulticast mode [ 581.715306][T14514] vxcan1 speed is unknown, defaulting to 1000 [ 581.715342][T14535] netlink: 'syz.2.2945': attribute type 29 has an invalid length. [ 581.750484][T14535] netlink: 'syz.2.2945': attribute type 29 has an invalid length. [ 581.777770][T14514] vxcan1 speed is unknown, defaulting to 1000 [ 582.863964][T14514] infiniband syz2: set active [ 582.866265][T14514] infiniband syz2: added vxcan1 [ 583.103123][ T5865] vxcan1 speed is unknown, defaulting to 1000 [ 583.123547][T14570] netlink: 'syz.2.2955': attribute type 29 has an invalid length. [ 583.124226][T14570] netlink: 'syz.2.2955': attribute type 29 has an invalid length. [ 583.217151][T14514] RDS/IB: syz2: added [ 583.218070][T14514] smc: adding ib device syz2 with port count 1 [ 583.218360][T14514] smc: ib device syz2 port 1 has no pnetid [ 583.221885][ T5865] vxcan1 speed is unknown, defaulting to 1000 [ 583.249022][T14514] vxcan1 speed is unknown, defaulting to 1000 [ 583.392096][T14578] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2959'. [ 583.392118][T14578] openvswitch: netlink: Flow key attr not present in new flow. [ 583.764600][T14590] netlink: 2292 bytes leftover after parsing attributes in process `syz.3.2963'. [ 584.641679][T14514] vxcan1 speed is unknown, defaulting to 1000 [ 586.213468][T14623] loop2: detected capacity change from 0 to 7 [ 586.241546][ T5793] Dev loop2: unable to read RDB block 7 [ 586.241588][ T5793] loop2: unable to read partition table [ 586.243034][ T5793] loop2: partition table beyond EOD, truncated [ 586.244191][T14623] Dev loop2: unable to read RDB block 7 [ 586.244230][T14623] loop2: unable to read partition table [ 586.244433][T14623] loop2: partition table beyond EOD, truncated [ 586.244465][T14623] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 586.625495][T14169] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 586.690717][T14169] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 586.821713][T14169] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 586.917073][T14169] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 587.004485][T14514] vxcan1 speed is unknown, defaulting to 1000 [ 587.682971][T14169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.717718][T14169] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.736077][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.737937][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.793320][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.793634][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.232340][T14514] vxcan1 speed is unknown, defaulting to 1000 [ 588.508680][T14169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.523761][T14169] veth0_vlan: entered promiscuous mode [ 589.598768][T14169] veth1_vlan: entered promiscuous mode [ 590.044445][T14514] vxcan1 speed is unknown, defaulting to 1000 [ 590.906753][T14169] veth0_macvtap: entered promiscuous mode [ 590.942983][T14169] veth1_macvtap: entered promiscuous mode [ 591.067662][T14169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.087619][T14169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.109315][ T1411] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.109575][ T1411] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.109786][ T1411] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.109820][ T1411] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.586398][T14747] max out of range [ 591.704031][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.704051][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.818440][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.818463][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.041954][T14756] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3015'. [ 592.691889][T14768] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 592.783352][T14768] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 592.784861][T14768] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 592.786788][T14768] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 592.787542][T14768] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 592.948604][T14765] vxcan1 speed is unknown, defaulting to 1000 [ 594.600342][T14792] vcan0: entered allmulticast mode [ 594.688931][T14798] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3029'. [ 595.072418][ T5801] Bluetooth: hci0: command tx timeout [ 597.547445][ T5801] Bluetooth: hci0: command tx timeout [ 597.653243][ T627] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.676788][T14838] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3041'. [ 597.693438][T14832] vcan0: entered allmulticast mode [ 598.441290][ T627] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.709159][ T5801] Bluetooth: hci0: command tx timeout [ 599.923737][ T627] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.432870][ T627] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.736812][ T5801] Bluetooth: hci3: command 0x0406 tx timeout [ 601.271407][T14765] chnl_net:caif_netlink_parms(): no params data found [ 601.640513][T14948] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 601.772710][T14768] Bluetooth: hci0: command tx timeout [ 605.250779][ T627] bond0 (unregistering): Released all slaves [ 605.260834][ T627] bond1 (unregistering): Released all slaves [ 605.555456][T15028] syz.6.3115 (15028): /proc/15027/oom_adj is deprecated, please use /proc/15027/oom_score_adj instead. [ 606.143217][ T627] tipc: Disabling bearer [ 606.148126][ T627] tipc: Left network mode [ 606.247567][ T627] IPVS: stopping backup sync thread 6295 ... [ 606.513642][T15037] syz_tun: entered allmulticast mode [ 606.558158][T15050] bridge_slave_0: left allmulticast mode [ 606.558188][T15050] bridge_slave_0: left promiscuous mode [ 606.558414][T15050] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.649349][T15055] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 606.712574][T15050] bridge_slave_1: left allmulticast mode [ 606.712602][T15050] bridge_slave_1: left promiscuous mode [ 606.712985][T15050] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.891583][T15050] bond0: (slave bond_slave_0): Releasing backup interface [ 607.373159][T15050] bond0: (slave bond_slave_1): Releasing backup interface [ 607.465718][T15050] team0: Port device team_slave_0 removed [ 607.504938][T15050] team0: Port device team_slave_1 removed [ 607.505824][T15050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.505846][T15050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.574845][T15050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.574872][T15050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.631797][T15050] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 607.903044][T15034] syz_tun: left allmulticast mode [ 608.097598][T15097] netlink: 2292 bytes leftover after parsing attributes in process `syz.1.3140'. [ 608.377556][T15104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3143'. [ 608.480271][T14765] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.480386][T14765] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.480612][T14765] bridge_slave_0: entered allmulticast mode [ 608.513675][T14765] bridge_slave_0: entered promiscuous mode [ 608.585770][T14765] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.585889][T14765] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.586100][T14765] bridge_slave_1: entered allmulticast mode [ 608.602878][T14765] bridge_slave_1: entered promiscuous mode [ 608.795980][T15113] veth1_vlan: left allmulticast mode [ 609.037366][T15113] macvlan1: left promiscuous mode [ 609.153528][T14765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.158250][T15118] syz_tun: entered allmulticast mode [ 609.763353][T15135] netlink: 2292 bytes leftover after parsing attributes in process `syz.7.3151'. [ 609.906913][T14765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.020083][T15126] Bluetooth: hci3: command 0x0406 tx timeout [ 610.041926][T15118] team0: Port device bond0 removed [ 610.054145][T15118] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 610.092080][T15116] syz_tun: left allmulticast mode [ 610.261966][T14746] vxcan1 speed is unknown, defaulting to 1000 [ 610.402364][T14765] team0: Port device team_slave_0 added [ 610.471748][T14765] team0: Port device team_slave_1 added [ 611.709805][T15126] Bluetooth: hci5: command 0x2016 tx timeout [ 611.720326][T15164] netlink: 2292 bytes leftover after parsing attributes in process `syz.7.3161'. [ 611.807538][T15158] vxcan1 speed is unknown, defaulting to 1000 [ 612.102671][T14768] Bluetooth: hci3: command 0x0406 tx timeout [ 612.922107][T14765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.922122][T14765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.922142][T14765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.928263][T14765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.928277][T14765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.928297][T14765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.130818][ T627] hsr_slave_0: left promiscuous mode [ 613.170086][ T627] hsr_slave_1: left promiscuous mode [ 613.211183][ T627] veth1_macvtap: left promiscuous mode [ 613.211346][ T627] veth1_vlan: left promiscuous mode [ 613.211494][ T627] veth0_vlan: left promiscuous mode [ 613.770176][ T5801] Bluetooth: hci5: command 0x2016 tx timeout [ 615.782778][T14765] hsr_slave_0: entered promiscuous mode [ 615.784097][T14765] hsr_slave_1: entered promiscuous mode [ 615.784954][T14765] debugfs: 'hsr0' already exists in 'hsr' [ 615.784975][T14765] Cannot create hsr debugfs directory [ 617.610410][ T5801] Bluetooth: hci5: command 0x2016 tx timeout [ 618.017915][T15265] vxcan1 speed is unknown, defaulting to 1000 [ 619.690757][ T5801] Bluetooth: hci5: command 0x2016 tx timeout [ 621.189478][T14765] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 622.291920][T14765] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 622.630984][T14765] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 622.710667][T14765] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 623.115496][T14765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.188353][T14765] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.203503][ T1411] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.208691][ T1411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.233369][ T627] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.238375][ T627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.511057][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.511124][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.096661][T15409] vxcan1 speed is unknown, defaulting to 1000 [ 625.298126][T14765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.463465][T14765] veth0_vlan: entered promiscuous mode [ 625.495166][T14765] veth1_vlan: entered promiscuous mode [ 626.600641][T14765] veth0_macvtap: entered promiscuous mode [ 626.700572][T14765] veth1_macvtap: entered promiscuous mode [ 626.795294][T14765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.827384][T14765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.868992][ T787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.869243][ T787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.869279][ T787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.869312][ T787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.030800][T15437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3233'. [ 628.558653][ T5948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.558674][ T5948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.156702][T11480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.156723][T11480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.374871][T15473] syz.1.3246 (15473): drop_caches: 0 [ 630.380895][ T809] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 630.859487][ T809] usb 7-1: Using ep0 maxpacket: 16 [ 630.878818][ T809] usb 7-1: unable to get BOS descriptor or descriptor too short [ 630.888256][ T809] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 630.888278][ T809] usb 7-1: can't read configurations, error -71 [ 632.716265][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 632.726621][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 632.774807][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 632.874484][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 633.025315][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 635.293383][ T5801] Bluetooth: hci1: command tx timeout [ 637.448390][ T5801] Bluetooth: hci1: command tx timeout [ 637.617852][T15491] vxcan1 speed is unknown, defaulting to 1000 [ 638.810167][ T31] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 639.170212][ T31] usb 8-1: Using ep0 maxpacket: 16 [ 639.802800][ T5801] Bluetooth: hci1: command tx timeout [ 639.830745][T15529] loop2: detected capacity change from 0 to 7 [ 639.858268][T15529] Dev loop2: unable to read RDB block 7 [ 639.858313][T15529] loop2: unable to read partition table [ 639.858521][T15529] loop2: partition table beyond EOD, truncated [ 639.858539][T15529] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 639.989266][ T31] usb 8-1: unable to get BOS descriptor or descriptor too short [ 639.990463][ T31] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 639.990497][ T31] usb 8-1: can't read configurations, error -71 [ 641.401545][ T1411] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.443330][T15563] vcan0: entered allmulticast mode [ 641.850044][ T5801] Bluetooth: hci1: command tx timeout [ 644.013257][ T1411] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.821539][ T1411] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.248223][ T1411] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.600618][T15668] netlink: 'syz.6.3316': attribute type 29 has an invalid length. [ 655.428802][T15491] chnl_net:caif_netlink_parms(): no params data found [ 655.453321][T15669] netlink: 'syz.6.3316': attribute type 29 has an invalid length. [ 660.801308][T15704] netlink: 'syz.1.3327': attribute type 29 has an invalid length. [ 660.805062][T15704] netlink: 'syz.1.3327': attribute type 29 has an invalid length. [ 660.878654][T15491] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.878773][T15491] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.878966][T15491] bridge_slave_0: entered allmulticast mode [ 660.914521][T15491] bridge_slave_0: entered promiscuous mode [ 660.929409][T15491] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.940131][T15491] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.940356][T15491] bridge_slave_1: entered allmulticast mode [ 661.185221][T15491] bridge_slave_1: entered promiscuous mode [ 661.864704][ T5801] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 661.864739][ T5801] CPU: 1 UID: 0 PID: 5801 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 661.864761][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 661.864773][ T5801] Workqueue: hci2 hci_rx_work [ 661.864806][ T5801] Call Trace: [ 661.864817][ T5801] [ 661.864825][ T5801] dump_stack_lvl+0xe8/0x150 [ 661.864854][ T5801] sysfs_create_dir_ns+0x271/0x2a0 [ 661.864876][ T5801] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 661.864899][ T5801] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 661.864924][ T5801] ? rt_spin_unlock+0x160/0x200 [ 661.864946][ T5801] kobject_add_internal+0x631/0xd10 [ 661.864978][ T5801] kobject_add+0x163/0x240 [ 661.865008][ T5801] ? __pfx_kobject_add+0x10/0x10 [ 661.865049][ T5801] ? get_device_parent+0x370/0x3a0 [ 661.865079][ T5801] device_add+0x408/0xb80 [ 661.865104][ T5801] hci_conn_add_sysfs+0xd5/0x210 [ 661.865125][ T5801] le_conn_complete_evt+0xf1d/0x1430 [ 661.865157][ T5801] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 661.865180][ T5801] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 661.865203][ T5801] ? lockdep_hardirqs_on+0x7a/0x110 [ 661.865227][ T5801] ? skb_pull_data+0xfb/0x200 [ 661.865249][ T5801] hci_le_conn_complete_evt+0x187/0x470 [ 661.865281][ T5801] hci_event_packet+0x7af/0x12c0 [ 661.865309][ T5801] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 661.865334][ T5801] ? __pfx_hci_event_packet+0x10/0x10 [ 661.865355][ T5801] ? rt_spin_unlock+0x14f/0x200 [ 661.865383][ T5801] ? hci_send_to_monitor+0xe2/0x590 [ 661.865405][ T5801] hci_rx_work+0x3ee/0x1030 [ 661.865435][ T5801] ? process_scheduled_works+0xa25/0x1830 [ 661.865462][ T5801] process_scheduled_works+0xb02/0x1830 [ 661.865504][ T5801] ? __pfx_process_scheduled_works+0x10/0x10 [ 661.865529][ T5801] ? assign_work+0x3d5/0x5e0 [ 661.865554][ T5801] worker_thread+0xa50/0xfc0 [ 661.865598][ T5801] kthread+0x388/0x470 [ 661.865618][ T5801] ? __pfx_worker_thread+0x10/0x10 [ 661.865637][ T5801] ? __pfx_kthread+0x10/0x10 [ 661.865656][ T5801] ret_from_fork+0x51e/0xb90 [ 661.865683][ T5801] ? __pfx_ret_from_fork+0x10/0x10 [ 661.865703][ T5801] ? __switch_to+0xc7d/0x1450 [ 661.865729][ T5801] ? __pfx_kthread+0x10/0x10 [ 661.865766][ T5801] ret_from_fork_asm+0x1a/0x30 [ 661.865799][ T5801] [ 661.865832][ T5801] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 661.865866][ T5801] Bluetooth: hci2: failed to register connection device [ 663.367924][T15733] netlink: 'syz.1.3338': attribute type 29 has an invalid length. [ 663.386347][T15491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.386575][T15735] netlink: 'syz.1.3338': attribute type 29 has an invalid length. [ 663.511901][T15491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.460632][ T1411] bond0 (unregistering): Released all slaves [ 669.465884][ T1411] bond1 (unregistering): Released all slaves [ 669.567344][T15491] team0: Port device team_slave_0 added [ 669.588203][T15491] team0: Port device team_slave_1 added [ 669.640872][T15491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.640888][T15491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.640912][T15491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.643126][T15491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.643139][T15491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.643163][T15491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.925702][T15491] hsr_slave_0: entered promiscuous mode [ 670.926918][T15491] hsr_slave_1: entered promiscuous mode [ 670.927785][T15491] debugfs: 'hsr0' already exists in 'hsr' [ 670.927807][T15491] Cannot create hsr debugfs directory [ 675.200723][T15833] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 675.915125][T15835] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3364'. [ 677.456611][ T1411] hsr_slave_0: left promiscuous mode [ 677.631929][ T1411] hsr_slave_1: left promiscuous mode [ 677.696723][ T1411] veth1_macvtap: left promiscuous mode [ 677.696898][ T1411] veth1_vlan: left promiscuous mode [ 677.697064][ T1411] veth0_vlan: left promiscuous mode [ 681.740850][T15883] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3378'. [ 682.681634][T15902] netlink: 'syz.2.3382': attribute type 10 has an invalid length. [ 683.833149][T15902] team0: Device vxcan1 is of different type [ 684.214687][T15929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3389'. [ 684.284975][T15926] vxcan1 speed is unknown, defaulting to 1000 [ 685.703190][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.703273][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.829982][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 686.020000][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 686.033287][T15947] loop2: detected capacity change from 0 to 7 [ 686.069255][T15947] Dev loop2: unable to read RDB block 7 [ 686.069342][T15947] loop2: AHDI p1 p2 p3 [ 686.069368][T15947] loop2: partition table partially beyond EOD, truncated [ 686.076307][T15947] loop2: p1 start 1818582900 is beyond EOD, truncated [ 686.076331][T15947] loop2: p3 start 335544320 is beyond EOD, truncated [ 686.098890][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 686.100330][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 686.100364][ T10] usb 2-1: can't read configurations, error -71 [ 687.506056][T15491] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 687.703101][T15989] vxcan1 speed is unknown, defaulting to 1000 [ 687.760075][T15491] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 687.783595][T14768] Bluetooth: hci5: command 0x2016 tx timeout [ 688.370213][T15491] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 688.457648][T15491] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 688.793285][ T5801] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 688.793310][ T5801] CPU: 1 UID: 0 PID: 5801 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 688.793332][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 688.793343][ T5801] Workqueue: hci5 hci_rx_work [ 688.793371][ T5801] Call Trace: [ 688.793377][ T5801] [ 688.793386][ T5801] dump_stack_lvl+0xe8/0x150 [ 688.793415][ T5801] sysfs_create_dir_ns+0x271/0x2a0 [ 688.793435][ T5801] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 688.793457][ T5801] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 688.793481][ T5801] ? rt_spin_unlock+0x160/0x200 [ 688.793504][ T5801] kobject_add_internal+0x631/0xd10 [ 688.793535][ T5801] kobject_add+0x163/0x240 [ 688.793564][ T5801] ? __pfx_kobject_add+0x10/0x10 [ 688.793595][ T5801] ? get_device_parent+0x370/0x3a0 [ 688.793625][ T5801] device_add+0x408/0xb80 [ 688.793655][ T5801] hci_conn_add_sysfs+0xd5/0x210 [ 688.793678][ T5801] le_conn_complete_evt+0xf1d/0x1430 [ 688.793712][ T5801] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 688.793734][ T5801] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 688.793753][ T5801] ? lockdep_hardirqs_on+0x7a/0x110 [ 688.793777][ T5801] ? skb_pull_data+0xfb/0x200 [ 688.793798][ T5801] hci_le_conn_complete_evt+0x187/0x470 [ 688.793829][ T5801] hci_event_packet+0x7af/0x12c0 [ 688.793855][ T5801] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 688.793879][ T5801] ? __pfx_hci_event_packet+0x10/0x10 [ 688.793898][ T5801] ? rt_spin_unlock+0x14f/0x200 [ 688.793925][ T5801] ? hci_send_to_monitor+0xe2/0x590 [ 688.793947][ T5801] hci_rx_work+0x3ee/0x1030 [ 688.793977][ T5801] ? process_scheduled_works+0xa25/0x1830 [ 688.794004][ T5801] process_scheduled_works+0xb02/0x1830 [ 688.794056][ T5801] ? __pfx_process_scheduled_works+0x10/0x10 [ 688.794087][ T5801] ? assign_work+0x3d5/0x5e0 [ 688.794117][ T5801] worker_thread+0xa50/0xfc0 [ 688.794171][ T5801] kthread+0x388/0x470 [ 688.794200][ T5801] ? __pfx_worker_thread+0x10/0x10 [ 688.794223][ T5801] ? __pfx_kthread+0x10/0x10 [ 688.794243][ T5801] ret_from_fork+0x51e/0xb90 [ 688.794272][ T5801] ? __pfx_ret_from_fork+0x10/0x10 [ 688.794293][ T5801] ? __switch_to+0xc7d/0x1450 [ 688.794320][ T5801] ? __pfx_kthread+0x10/0x10 [ 688.794340][ T5801] ret_from_fork_asm+0x1a/0x30 [ 688.794373][ T5801] [ 688.794403][ T5801] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 688.794443][ T5801] Bluetooth: hci5: failed to register connection device [ 689.108024][T16034] netlink: 2292 bytes leftover after parsing attributes in process `syz.7.3420'. [ 689.644482][T15491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.688600][T15491] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.704010][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.752984][ T5952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.806473][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.806555][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.413055][T16070] vxcan1 speed is unknown, defaulting to 1000 [ 691.081459][ T5801] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 691.410022][T15491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.281346][ T5801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 692.304521][ T5801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 692.311071][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 692.323332][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 692.325938][ T5801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 692.883959][T16123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3448'. [ 693.612237][T16109] vxcan1 speed is unknown, defaulting to 1000 [ 694.244916][T16151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3461'. [ 694.652835][T14768] Bluetooth: hci4: command tx timeout [ 695.892442][T16109] chnl_net:caif_netlink_parms(): no params data found [ 696.820058][T14768] Bluetooth: hci4: command tx timeout [ 696.847439][T16109] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.847638][T16109] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.847849][T16109] bridge_slave_0: entered allmulticast mode [ 696.851694][T16109] bridge_slave_0: entered promiscuous mode [ 696.923775][T16109] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.923973][T16109] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.924194][T16109] bridge_slave_1: entered allmulticast mode [ 696.926772][T16109] bridge_slave_1: entered promiscuous mode [ 697.056061][ T787] bridge_slave_1: left allmulticast mode [ 697.056088][ T787] bridge_slave_1: left promiscuous mode [ 697.056313][ T787] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.132353][ T787] bridge_slave_0: left allmulticast mode [ 697.132383][ T787] bridge_slave_0: left promiscuous mode [ 697.132613][ T787] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.431756][T16239] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3492'. [ 699.337605][T14768] Bluetooth: hci4: command tx timeout [ 699.560557][ T787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.621605][ T787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.645417][ T787] bond0 (unregistering): Released all slaves [ 699.864954][T16109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.928898][T16109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.358941][T16109] team0: Port device team_slave_0 added [ 700.384825][T16109] team0: Port device team_slave_1 added [ 700.767939][T16109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.767956][T16109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.767980][T16109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.433833][T14768] Bluetooth: hci4: command tx timeout [ 701.890701][ T787] hsr_slave_0: left promiscuous mode [ 702.325366][ T787] hsr_slave_1: left promiscuous mode [ 702.326383][ T787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 703.287010][ T787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.951947][ T787] team0 (unregistering): Port device team_slave_1 removed [ 707.040617][ T787] team0 (unregistering): Port device team_slave_0 removed [ 707.468052][T16109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.468069][T16109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.468087][T16109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.839771][T16109] hsr_slave_0: entered promiscuous mode [ 708.945048][T16109] hsr_slave_1: entered promiscuous mode [ 708.998318][T16109] debugfs: 'hsr0' already exists in 'hsr' [ 708.998343][T16109] Cannot create hsr debugfs directory [ 711.469444][T16334] vxcan1 speed is unknown, defaulting to 1000 [ 714.183048][T16377] binder: 16376:16377 ioctl 4018620d 0 returned -22 [ 717.823575][T16387] hub 8-0:1.0: USB hub found [ 719.541114][T16387] hub 8-0:1.0: 1 port detected [ 721.190510][T16413] binder: 16411:16413 ioctl 4018620d 0 returned -22 [ 722.194142][ T5865] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 722.214062][T16109] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 722.255519][T14768] Bluetooth: hci0: command 0x0406 tx timeout [ 722.335086][T16448] binder: BINDER_SET_CONTEXT_MGR already set [ 722.335100][T16448] binder: 16446:16448 ioctl 4018620d 200000004a80 returned -16 [ 722.361005][ T5865] usb 2-1: Using ep0 maxpacket: 16 [ 722.383477][T16430] loop2: detected capacity change from 0 to 7 [ 722.387008][T16430] Dev loop2: unable to read RDB block 7 [ 722.387037][T16430] loop2: AHDI p1 p2 p3 [ 722.387062][T16430] loop2: partition table partially beyond EOD, truncated [ 722.387274][T16430] loop2: p1 start 1818582900 is beyond EOD, truncated [ 722.387293][T16430] loop2: p3 start 335544320 is beyond EOD, truncated [ 722.392884][ T5865] usb 2-1: unable to get BOS descriptor or descriptor too short [ 722.393863][ T5865] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 722.393892][ T5865] usb 2-1: can't read configurations, error -71 [ 722.400901][T16109] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 722.513717][T16109] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 722.544362][T16109] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 722.816515][T16109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.838114][T16109] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.868843][T11479] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.869038][T11479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.886556][T11479] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.890065][T11479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.924813][T16470] binder: 16468:16470 ioctl 4018620d 0 returned -22 [ 724.720930][T16109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.007570][T16109] veth0_vlan: entered promiscuous mode [ 725.026778][T16109] veth1_vlan: entered promiscuous mode [ 725.107758][T16109] veth0_macvtap: entered promiscuous mode [ 725.137514][T16109] veth1_macvtap: entered promiscuous mode [ 725.800986][T16109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 725.805688][T16109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.006831][ T1178] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.010804][ T1178] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.029795][ T1178] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.030321][ T5803] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 726.044342][ T1178] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.105316][T16518] binder: 16517:16518 ioctl c0306201 0 returned -14 [ 726.280003][ T5803] usb 2-1: Using ep0 maxpacket: 16 [ 727.058889][T16509] loop2: detected capacity change from 0 to 7 [ 727.084555][T16509] Dev loop2: unable to read RDB block 7 [ 727.084587][T16509] loop2: AHDI p1 p2 p3 [ 727.084614][T16509] loop2: partition table partially beyond EOD, truncated [ 727.084924][T16509] loop2: p1 start 1818582900 is beyond EOD, truncated [ 727.084943][T16509] loop2: p3 start 335544320 is beyond EOD, truncated [ 727.090704][ T5803] usb 2-1: unable to get BOS descriptor or descriptor too short [ 727.091679][ T5803] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 727.091709][ T5803] usb 2-1: can't read configurations, error -71 [ 727.413233][T11479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.413253][T11479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.609973][ T1411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.609994][ T1411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.692788][T16528] vxcan1 speed is unknown, defaulting to 1000 [ 728.991039][T16558] binder: 16557:16558 ioctl c0306201 0 returned -14 [ 730.092691][T16590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 730.289946][T16584] vxcan1 speed is unknown, defaulting to 1000 [ 730.339159][ T5801] Bluetooth: hci4: command 0x2016 tx timeout [ 732.448441][T14768] Bluetooth: hci4: command 0x2016 tx timeout [ 732.500250][T16621] binder: 16620:16621 ioctl c0306201 0 returned -14 [ 733.361900][T16617] vxcan1 speed is unknown, defaulting to 1000 [ 734.616514][T16646] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3611'. [ 735.634192][T16662] binder: BINDER_SET_CONTEXT_MGR already set [ 735.634207][T16662] binder: 16656:16662 ioctl 4018620d 200000001000 returned -16 [ 736.978777][T16688] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3624'. [ 738.893881][T16698] vxcan1 speed is unknown, defaulting to 1000 [ 742.122669][T16728] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 742.122700][T16728] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 742.123509][T16728] vhci_hcd vhci_hcd.0: Device attached [ 742.156130][T16729] vhci_hcd: connection closed [ 742.213188][ T5948] vhci_hcd vhci_hcd.7: stop threads [ 742.214157][ T5948] vhci_hcd vhci_hcd.7: release socket [ 742.214339][ T5948] vhci_hcd vhci_hcd.7: disconnect device [ 747.140099][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.140167][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.305135][T16810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3670'. [ 752.377096][T16858] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3684'. [ 752.737702][T16863] binder: BINDER_SET_CONTEXT_MGR already set [ 752.737717][T16863] binder: 16862:16863 ioctl 4018620d 200000000040 returned -16 [ 752.739295][T16863] binder: 16862:16863 ioctl c0306201 200000001440 returned -11 [ 757.061023][T16912] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3702'. [ 758.659605][ C1] vcan0: j1939_tp_rxtimer: 0xffff888039e04400: rx timeout, send abort [ 759.389561][ C1] vcan0: j1939_tp_rxtimer: 0xffff888039e04400: abort rx timeout. Force session deactivation [ 759.389685][ C1] vcan0: j1939_tp_rxtimer: 0xffff888039e06800: rx timeout, send abort [ 760.037076][ C1] vcan0: j1939_tp_rxtimer: 0xffff888039e06800: abort rx timeout. Force session deactivation [ 761.842518][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e8d8c00: rx timeout, send abort [ 762.342613][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e8d8c00: abort rx timeout. Force session deactivation [ 762.342762][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e8d8400: rx timeout, send abort [ 762.842818][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e8d8400: abort rx timeout. Force session deactivation [ 766.778728][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bca5800: rx timeout, send abort [ 769.846201][T17030] input: syz0 as /devices/virtual/input/input6 [ 770.308529][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bca5c00: rx timeout, send abort [ 771.082723][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bca5c00: abort rx timeout. Force session deactivation [ 774.657551][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d0c6c00: rx timeout, send abort [ 775.157614][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d0c6c00: abort rx timeout. Force session deactivation [ 775.157763][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880602e4c00: rx timeout, send abort [ 775.753866][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880602e4c00: abort rx timeout. Force session deactivation [ 779.732621][T17137] siw: device registration error -23 [ 782.200585][T17162] syz_tun: entered allmulticast mode [ 782.260788][T17161] syz_tun: left allmulticast mode [ 782.954690][T17170] siw: device registration error -23 [ 783.931935][T17184] netlink: 'syz.6.3803': attribute type 1 has an invalid length. [ 784.090827][T17187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3804'. [ 784.447899][T17192] syz_tun: entered allmulticast mode [ 784.733405][T17196] input: syz0 as /devices/virtual/input/input7 [ 785.348625][T17188] syz_tun: left allmulticast mode [ 786.042328][T17203] siw: device registration error -23 [ 787.872721][T17228] syz_tun: entered allmulticast mode [ 787.931691][T17227] syz_tun: left allmulticast mode [ 788.610381][T17245] input: syz0 as /devices/virtual/input/input8 [ 792.757421][T17260] vxcan1 speed is unknown, defaulting to 1000 [ 793.192512][T17265] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3826'. [ 793.794361][T17271] binder: 17270:17271 ioctl c0306201 2000000003c0 returned -14 [ 793.861694][T17275] syz_tun: entered allmulticast mode [ 794.602793][T17273] syz_tun: left allmulticast mode [ 795.823030][T17309] binder: 17305:17309 ioctl c0306201 2000000003c0 returned -14 [ 797.220610][T17318] syz_tun: entered allmulticast mode [ 798.305349][T17316] syz_tun: left allmulticast mode [ 799.426874][T17351] syz_tun: entered allmulticast mode [ 799.471433][T17350] syz_tun: left allmulticast mode [ 804.620265][T17383] syz_tun: entered allmulticast mode [ 804.651619][T17381] syz_tun: left allmulticast mode [ 806.875416][T17408] syz_tun: entered allmulticast mode [ 807.953454][T17407] syz_tun: left allmulticast mode [ 808.576761][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.576831][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.813006][T17458] syz_tun: entered allmulticast mode [ 809.846802][T17457] syz_tun: left allmulticast mode [ 812.311123][T17487] syz_tun: entered allmulticast mode [ 812.581379][T17486] syz_tun: left allmulticast mode [ 814.756044][T17524] input: syz0 as /devices/virtual/input/input9 [ 814.859599][T17525] Device name cannot be null; rc = [-22] [ 816.295866][ T5801] Bluetooth: hci4: command 0x2016 tx timeout [ 819.288330][T17566] syz_tun: entered allmulticast mode [ 819.361515][T17565] syz_tun: left allmulticast mode [ 822.830485][T17607] syz_tun: entered allmulticast mode [ 823.532432][T17604] syz_tun: left allmulticast mode [ 824.564009][T17630] siw: device registration error -23 [ 825.335558][T17646] binder: 17644:17646 ioctl c0306201 2000000003c0 returned -14 [ 826.301996][ T10] IPVS: starting estimator thread 0... [ 826.390741][T17655] IPVS: using max 8 ests per chain, 19200 per kthread [ 826.722461][T17663] siw: device registration error -23 [ 829.739684][T17695] binder: 17694:17695 ioctl 4018620d 0 returned -22 [ 834.190125][T17741] binder: 17740:17741 ioctl 4018620d 0 returned -22 [ 838.332934][T17806] input: syz0 as /devices/virtual/input/input13 [ 838.335388][T17807] Device name cannot be null; rc = [-22] [ 844.926920][T17853] Device name cannot be null; rc = [-22] [ 846.405744][ T809] IPVS: starting estimator thread 0... [ 846.719984][T17859] IPVS: using max 7 ests per chain, 16800 per kthread [ 849.586156][T17877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4040'. [ 852.124607][T17893] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4049'. [ 853.861229][T17912] binder: 17911:17912 ioctl c0306201 0 returned -14 [ 854.551309][ T5806] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 854.732698][ T5806] usb 3-1: Using ep0 maxpacket: 16 [ 854.806422][T17921] loop2: detected capacity change from 0 to 7 [ 854.828070][T17921] Dev loop2: unable to read RDB block 7 [ 854.828101][T17921] loop2: AHDI p1 p2 p3 [ 854.828127][T17921] loop2: partition table partially beyond EOD, truncated [ 854.849727][T17921] loop2: p1 start 1818582900 is beyond EOD, truncated [ 854.849752][T17921] loop2: p3 start 335544320 is beyond EOD, truncated [ 854.916981][ T5806] usb 3-1: unable to get BOS descriptor or descriptor too short [ 854.917956][ T5806] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 854.917989][ T5806] usb 3-1: can't read configurations, error -71 [ 857.297523][T17937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4062'. [ 861.826284][T17975] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4077'. [ 862.401725][T17983] binder: 17982:17983 ioctl c0306201 0 returned -14 [ 864.174890][T18002] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 864.174918][T18002] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 864.175002][T18002] vhci_hcd vhci_hcd.0: Device attached [ 865.359143][T18002] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 865.359170][T18002] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 865.369851][T18002] vhci_hcd vhci_hcd.0: Device attached [ 866.118043][T18007] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(17) [ 866.118868][T18007] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 866.434071][T18006] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 866.435481][T18006] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 866.436958][T18015] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(20) [ 866.437008][T18015] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 866.532464][T18015] vhci_hcd vhci_hcd.0: Device attached [ 866.532652][T18006] vhci_hcd vhci_hcd.0: Device attached [ 866.532789][T18007] vhci_hcd vhci_hcd.0: Device attached [ 866.543164][T18022] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 866.734212][T18002] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 866.734239][T18002] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 866.734325][T18002] vhci_hcd vhci_hcd.0: Device attached [ 866.811015][T18006] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(26) [ 866.811041][T18006] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 866.851299][T18006] vhci_hcd vhci_hcd.0: Device attached [ 866.859919][ T5803] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 866.898305][T18002] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(24) [ 866.898331][T18002] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 866.898437][T18002] vhci_hcd vhci_hcd.0: Device attached [ 866.901413][T18017] vhci_hcd: connection closed [ 866.907064][T18032] vhci_hcd: connection closed [ 866.907204][T18005] vhci_hcd: connection closed [ 866.910237][T18003] vhci_hcd: connection reset by peer [ 866.912779][ T5953] vhci_hcd vhci_hcd.3: stop threads [ 866.912801][ T5953] vhci_hcd vhci_hcd.3: release socket [ 866.913339][ T5953] vhci_hcd vhci_hcd.3: disconnect device [ 866.915320][T18014] vhci_hcd: connection closed [ 866.915943][T18021] vhci_hcd: connection closed [ 866.916347][T18013] vhci_hcd: connection closed [ 866.916697][ T5953] vhci_hcd vhci_hcd.3: stop threads [ 866.916711][ T5953] vhci_hcd vhci_hcd.3: release socket [ 866.994335][T18028] vhci_hcd: connection closed [ 866.994604][ T5953] vhci_hcd vhci_hcd.3: disconnect device [ 866.994877][ T5953] vhci_hcd vhci_hcd.3: stop threads [ 866.994896][ T5953] vhci_hcd vhci_hcd.3: release socket [ 866.995105][ T5953] vhci_hcd vhci_hcd.3: disconnect device [ 867.000870][ T5953] vhci_hcd vhci_hcd.3: stop threads [ 867.000886][ T5953] vhci_hcd vhci_hcd.3: release socket [ 867.000956][ T5953] vhci_hcd vhci_hcd.3: disconnect device [ 867.014135][ T5953] vhci_hcd vhci_hcd.3: stop threads [ 867.014159][ T5953] vhci_hcd vhci_hcd.3: release socket [ 867.014231][ T5953] vhci_hcd vhci_hcd.3: disconnect device [ 867.015207][ T5953] vhci_hcd vhci_hcd.3: stop threads [ 867.015223][ T5953] vhci_hcd vhci_hcd.3: release socket [ 867.015281][ T5953] vhci_hcd vhci_hcd.3: disconnect device [ 867.015543][ T5953] vhci_hcd vhci_hcd.3: stop threads [ 867.015556][ T5953] vhci_hcd vhci_hcd.3: release socket [ 867.015585][ T5953] vhci_hcd vhci_hcd.3: disconnect device [ 867.015965][ T5953] vhci_hcd vhci_hcd.3: stop threads [ 867.015977][ T5953] vhci_hcd vhci_hcd.3: release socket [ 867.016036][ T5953] vhci_hcd vhci_hcd.3: disconnect device [ 867.110251][T18041] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4093'. [ 869.410809][ T5865] IPVS: starting estimator thread 0... [ 870.133013][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.133098][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.209534][T18066] IPVS: using max 9 ests per chain, 21600 per kthread [ 871.493879][T18081] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4105'. [ 872.014707][ T5803] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 872.838723][T18093] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 872.838750][T18093] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 872.936967][T18098] binder: BINDER_SET_CONTEXT_MGR already set [ 872.936982][T18098] binder: 18095:18098 ioctl 4018620d 200000004a80 returned -16 [ 872.960172][T18093] vhci_hcd vhci_hcd.0: Device attached [ 872.961203][T18101] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 872.961218][T18101] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 872.961267][T18101] vhci_hcd vhci_hcd.0: Device attached [ 872.961471][T18102] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(15) [ 872.961490][T18102] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 872.963876][T18102] vhci_hcd vhci_hcd.0: Device attached [ 873.020728][T18093] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(11) [ 873.020753][T18093] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 873.020801][T18093] vhci_hcd vhci_hcd.0: Device attached [ 873.026710][T18101] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(18) [ 873.026732][T18101] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 873.026775][T18101] vhci_hcd vhci_hcd.0: Device attached [ 873.029344][T18093] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(17) [ 873.029365][T18093] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 873.029453][T18093] vhci_hcd vhci_hcd.0: Device attached [ 873.032438][T18093] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 873.240923][T18093] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(25) [ 873.240951][T18093] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 873.241032][T18093] vhci_hcd vhci_hcd.0: Device attached [ 873.246496][T18101] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(28) [ 873.246521][T18101] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 873.246605][T18101] vhci_hcd vhci_hcd.0: Device attached [ 873.247946][T18093] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 873.360105][T16390] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 873.360511][T18118] vhci_hcd: connection closed [ 873.360796][T18116] vhci_hcd: connection closed [ 873.373079][T18107] vhci_hcd: connection closed [ 873.387179][T18099] vhci_hcd: connection reset by peer [ 873.387590][T18103] vhci_hcd: connection closed [ 873.401771][ T627] vhci_hcd vhci_hcd.2: stop threads [ 873.401795][ T627] vhci_hcd vhci_hcd.2: release socket [ 873.402072][ T627] vhci_hcd vhci_hcd.2: disconnect device [ 873.402512][ T627] vhci_hcd vhci_hcd.2: stop threads [ 873.402525][ T627] vhci_hcd vhci_hcd.2: release socket [ 873.402896][ T627] vhci_hcd vhci_hcd.2: disconnect device [ 873.403945][ T627] vhci_hcd vhci_hcd.2: stop threads [ 873.403958][ T627] vhci_hcd vhci_hcd.2: release socket [ 873.404278][ T627] vhci_hcd vhci_hcd.2: disconnect device [ 873.404552][ T627] vhci_hcd vhci_hcd.2: stop threads [ 873.404565][ T627] vhci_hcd vhci_hcd.2: release socket [ 873.404746][ T627] vhci_hcd vhci_hcd.2: disconnect device [ 873.405054][ T627] vhci_hcd vhci_hcd.2: stop threads [ 873.405115][ T627] vhci_hcd vhci_hcd.2: release socket [ 873.405302][ T627] vhci_hcd vhci_hcd.2: disconnect device [ 873.419898][T18104] vhci_hcd: connection closed [ 873.420280][T18110] vhci_hcd: connection closed [ 873.420513][T18112] vhci_hcd: connection closed [ 873.505932][ T627] vhci_hcd vhci_hcd.2: stop threads [ 873.505956][ T627] vhci_hcd vhci_hcd.2: release socket [ 873.506026][ T627] vhci_hcd vhci_hcd.2: disconnect device [ 873.541331][ T627] vhci_hcd vhci_hcd.2: stop threads [ 873.541349][ T627] vhci_hcd vhci_hcd.2: release socket [ 873.541414][ T627] vhci_hcd vhci_hcd.2: disconnect device [ 873.570174][ T627] vhci_hcd vhci_hcd.2: stop threads [ 873.570192][ T627] vhci_hcd vhci_hcd.2: release socket [ 873.570317][ T627] vhci_hcd vhci_hcd.2: disconnect device [ 875.430192][T18131] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4117'. [ 875.792417][T14746] usb usb40-port1: attempt power cycle [ 876.994821][T14746] usb usb40-port1: unable to enumerate USB device [ 877.969119][T18170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4130'. [ 878.490130][T16390] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 879.775044][ T10] usb usb38-port1: attempt power cycle [ 880.027323][T18196] netlink: 304 bytes leftover after parsing attributes in process `syz.6.4139'. [ 880.592236][T18204] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4142'. [ 880.921240][ T10] usb usb38-port1: unable to enumerate USB device [ 881.223607][T18214] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4145'. [ 881.361534][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4132'. [ 881.376490][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4132'. [ 881.376812][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4132'. [ 881.382014][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4132'. [ 881.695883][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803029cc00: rx timeout, send abort [ 882.197219][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803029cc00: abort rx timeout. Force session deactivation [ 882.197342][ C1] vcan0: j1939_tp_rxtimer: 0xffff888038ac0c00: rx timeout, send abort [ 882.697423][ C1] vcan0: j1939_tp_rxtimer: 0xffff888038ac0c00: abort rx timeout. Force session deactivation [ 883.138464][T18248] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4153'. [ 885.004994][T18260] binder: 18259:18260 ioctl c0306201 0 returned -14 [ 886.151505][T18265] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4158'. [ 887.847680][T18300] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4164'. [ 888.896934][T18308] binder: 18307:18308 ioctl c0306201 0 returned -14 [ 891.001472][T18335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4176'. [ 891.542689][T18339] binder: 18338:18339 ioctl c0306201 0 returned -14 [ 894.247001][T18368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4187'. [ 896.200011][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 896.468272][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 896.468307][ T10] usb 8-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 896.468319][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.528164][ T10] usb 8-1: config 0 descriptor?? [ 896.554146][ T10] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 897.015312][T18414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4201'. [ 898.425950][T18402] syz.1.4196 (18402): drop_caches: 2 [ 898.688334][ T809] usb 8-1: USB disconnect, device number 6 [ 898.716430][T18426] siw: device registration error -23 [ 900.430423][ T5806] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 901.582212][ T5806] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 901.582266][ T5806] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 901.582516][ T5806] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 901.582583][ T5806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.263052][ T5806] usb 4-1: usb_control_msg returned -71 [ 904.263102][ T5806] usbtmc 4-1:16.0: can't read capabilities [ 904.330260][ T5806] usb 4-1: USB disconnect, device number 26 [ 904.799431][T18464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4217'. [ 905.618630][T16390] IPVS: starting estimator thread 0... [ 905.843713][T18483] IPVS: using max 1 ests per chain, 2400 per kthread [ 909.211340][ T10] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 909.923921][T18502] vxcan1 speed is unknown, defaulting to 1000 [ 909.989936][ T5865] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 910.179942][ T5865] usb 4-1: Using ep0 maxpacket: 32 [ 910.183946][ T5865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 910.183969][ T5865] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 910.183997][ T5865] usb 4-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 910.184009][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.194871][ T5865] usb 4-1: config 0 descriptor?? [ 910.482588][ T5865] usb 4-1: USB disconnect, device number 27 [ 911.855404][T18523] binder_alloc: 18522: binder_alloc_buf, no vma [ 916.077433][T18533] team0: Port device bridge0 added [ 916.106425][T18494] vxcan1 speed is unknown, defaulting to 1000 [ 916.819890][T18554] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 916.819915][T18554] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 916.820056][T18554] vhci_hcd vhci_hcd.0: Device attached [ 916.827078][T18554] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 916.827103][T18554] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 916.827202][T18554] vhci_hcd vhci_hcd.0: Device attached [ 916.844691][T18554] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(13) [ 916.844716][T18554] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 916.844760][T18554] vhci_hcd vhci_hcd.0: Device attached [ 916.849185][T18554] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(15) [ 916.849208][T18554] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 916.849259][T18554] vhci_hcd vhci_hcd.0: Device attached [ 916.863932][T18554] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(17) [ 916.863954][T18554] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 916.863996][T18554] vhci_hcd vhci_hcd.0: Device attached [ 916.876934][T18554] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(19) [ 916.876956][T18554] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 916.877253][T18554] vhci_hcd vhci_hcd.0: Device attached [ 916.880658][T18554] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 916.899054][T18554] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(25) [ 916.899078][T18554] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 916.899125][T18554] vhci_hcd vhci_hcd.0: Device attached [ 916.910143][T18554] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(27) [ 916.910166][T18554] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 916.910208][T18554] vhci_hcd vhci_hcd.0: Device attached [ 916.922361][T18554] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 917.028235][T18571] vhci_hcd: connection closed [ 917.029118][T18569] vhci_hcd: connection closed [ 917.032452][ T1411] vhci_hcd vhci_hcd.1: stop threads [ 917.032475][ T1411] vhci_hcd vhci_hcd.1: release socket [ 917.032680][ T1411] vhci_hcd vhci_hcd.1: disconnect device [ 917.032940][ T1411] vhci_hcd vhci_hcd.1: stop threads [ 917.032952][ T1411] vhci_hcd vhci_hcd.1: release socket [ 917.033124][ T1411] vhci_hcd vhci_hcd.1: disconnect device [ 917.034908][T18567] vhci_hcd: connection closed [ 917.035508][ T1411] vhci_hcd vhci_hcd.1: stop threads [ 917.035525][ T1411] vhci_hcd vhci_hcd.1: release socket [ 917.035592][ T1411] vhci_hcd vhci_hcd.1: disconnect device [ 917.037894][T18565] vhci_hcd: connection closed [ 917.041689][ T1411] vhci_hcd vhci_hcd.1: stop threads [ 917.041706][ T1411] vhci_hcd vhci_hcd.1: release socket [ 917.041772][ T1411] vhci_hcd vhci_hcd.1: disconnect device [ 917.042288][T18563] vhci_hcd: connection closed [ 917.042663][ T1411] vhci_hcd vhci_hcd.1: stop threads [ 917.042678][ T1411] vhci_hcd vhci_hcd.1: release socket [ 917.042740][ T1411] vhci_hcd vhci_hcd.1: disconnect device [ 917.043940][T18561] vhci_hcd: connection closed [ 917.044485][ T1411] vhci_hcd vhci_hcd.1: stop threads [ 917.044500][ T1411] vhci_hcd vhci_hcd.1: release socket [ 917.044683][ T1411] vhci_hcd vhci_hcd.1: disconnect device [ 917.044765][T18559] vhci_hcd: connection closed [ 917.045066][ T1411] vhci_hcd vhci_hcd.1: stop threads [ 917.045079][ T1411] vhci_hcd vhci_hcd.1: release socket [ 917.045261][ T1411] vhci_hcd vhci_hcd.1: disconnect device [ 917.048970][T18557] vhci_hcd: connection closed [ 917.074137][ T9] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 917.084655][ T1411] vhci_hcd vhci_hcd.1: stop threads [ 917.084681][ T1411] vhci_hcd vhci_hcd.1: release socket [ 917.084757][ T1411] vhci_hcd vhci_hcd.1: disconnect device [ 923.080019][ T9] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 923.663181][T18602] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4258'. [ 924.393727][ T5865] usb usb36-port1: attempt power cycle [ 925.067157][ T5865] usb usb36-port1: unable to enumerate USB device [ 925.159593][T15126] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 925.178510][T15126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 925.180031][T15126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 925.184850][T15126] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 925.192141][T15126] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 925.389723][T18616] vxcan1 speed is unknown, defaulting to 1000 [ 929.279884][T14768] Bluetooth: hci1: command tx timeout [ 929.705676][T17456] ================================================================== [ 929.705691][T17456] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x92/0x190 [ 929.705719][T17456] Read of size 8 at addr ffff88803c91a780 by task syz.6.3898/17456 [ 929.705734][T17456] [ 929.705746][T17456] CPU: 1 UID: 0 PID: 17456 Comm: syz.6.3898 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 929.705765][T17456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 929.705776][T17456] Call Trace: [ 929.705784][T17456] [ 929.705792][T17456] dump_stack_lvl+0xe8/0x150 [ 929.705824][T17456] print_report+0xba/0x230 [ 929.705846][T17456] ? __list_del_entry_valid_or_report+0x92/0x190 [ 929.705862][T17456] kasan_report+0x117/0x150 [ 929.705887][T17456] ? __list_del_entry_valid_or_report+0x92/0x190 [ 929.705908][T17456] __list_del_entry_valid_or_report+0x92/0x190 [ 929.705926][T17456] bt_accept_unlink+0x39/0x260 [ 929.705950][T17456] l2cap_sock_teardown_cb+0x17e/0x490 [ 929.705972][T17456] l2cap_chan_del+0xb5/0x610 [ 929.705990][T17456] ? l2cap_conn_del+0x327/0x5c0 [ 929.706008][T17456] l2cap_conn_del+0x333/0x5c0 [ 929.706026][T17456] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 929.706044][T17456] hci_conn_hash_flush+0x10d/0x260 [ 929.706064][T17456] hci_dev_close_sync+0x821/0x10e0 [ 929.706090][T17456] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 929.706113][T17456] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 929.706136][T17456] ? hci_unregister_dev+0x212/0x5a0 [ 929.706158][T17456] hci_unregister_dev+0x21a/0x5a0 [ 929.706180][T17456] vhci_release+0x155/0x1b0 [ 929.706201][T17456] ? __pfx_vhci_release+0x10/0x10 [ 929.706220][T17456] __fput+0x461/0xa90 [ 929.706243][T17456] task_work_run+0x1d9/0x270 [ 929.706262][T17456] ? __pfx_task_work_run+0x10/0x10 [ 929.706279][T17456] ? kmem_cache_free+0x185/0x6b0 [ 929.706302][T17456] ? put_net+0x191/0x260 [ 929.706323][T17456] do_exit+0x70f/0x23c0 [ 929.706342][T17456] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 929.706364][T17456] ? __pfx_do_exit+0x10/0x10 [ 929.706379][T17456] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 929.706397][T17456] ? reacquire_held_locks+0x104/0x190 [ 929.706415][T17456] ? rt_spin_lock+0x1e0/0x400 [ 929.706437][T17456] do_group_exit+0x21b/0x2d0 [ 929.706455][T17456] ? rt_spin_unlock+0x160/0x200 [ 929.706473][T17456] get_signal+0x125c/0x1310 [ 929.706501][T17456] arch_do_signal_or_restart+0xbc/0x830 [ 929.706521][T17456] ? __pfx_get_timespec64+0x10/0x10 [ 929.706537][T17456] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 929.706559][T17456] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 929.706583][T17456] exit_to_user_mode_loop+0x86/0x480 [ 929.706606][T17456] ? rcu_is_watching+0x15/0xb0 [ 929.706625][T17456] do_syscall_64+0x32d/0xf80 [ 929.706646][T17456] ? trace_irq_disable+0x3b/0x150 [ 929.706665][T17456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.706682][T17456] ? clear_bhb_loop+0x40/0x90 [ 929.706701][T17456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.706718][T17456] RIP: 0033:0x7fb65613cfce [ 929.706733][T17456] Code: Unable to access opcode bytes at 0x7fb65613cfa4. [ 929.706743][T17456] RSP: 002b:00007fb6543d5f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 929.706763][T17456] RAX: fffffffffffffdfc RBX: 00007fb6543d66c0 RCX: 00007fb65613cfce [ 929.706776][T17456] RDX: 00007fb6543d5fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 929.706788][T17456] RBP: 00007fb656212c99 R08: 0000000000000000 R09: 0000000000000000 [ 929.706799][T17456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 929.706819][T17456] R13: 00007fb6563f6038 R14: 00007fb6563f5fa0 R15: 0000000000000000 [ 929.706841][T17456] [ 929.706847][T17456] [ 929.706851][T17456] Allocated by task 627: [ 929.706859][T17456] kasan_save_track+0x3e/0x80 [ 929.706880][T17456] __kasan_kmalloc+0x93/0xb0 [ 929.706899][T17456] __kmalloc_node_track_caller_noprof+0x372/0x7e0 [ 929.706922][T17456] __alloc_skb+0x2c1/0x7d0 [ 929.706939][T17456] nsim_dev_trap_report_work+0x29f/0xbc0 [ 929.706958][T17456] process_scheduled_works+0xb02/0x1830 [ 929.706977][T17456] worker_thread+0xa50/0xfc0 [ 929.706996][T17456] kthread+0x388/0x470 [ 929.707010][T17456] ret_from_fork+0x51e/0xb90 [ 929.707030][T17456] ret_from_fork_asm+0x1a/0x30 [ 929.707044][T17456] [ 929.707048][T17456] Freed by task 627: [ 929.707056][T17456] kasan_save_track+0x3e/0x80 [ 929.707075][T17456] kasan_save_free_info+0x46/0x50 [ 929.707091][T17456] __kasan_slab_free+0x5c/0x80 [ 929.707111][T17456] kfree+0x1c1/0x6c0 [ 929.707128][T17456] skb_release_data+0x6f0/0x940 [ 929.707148][T17456] __kfree_skb+0x5d/0x210 [ 929.707165][T17456] nsim_dev_trap_report_work+0x7fa/0xbc0 [ 929.707182][T17456] process_scheduled_works+0xb02/0x1830 [ 929.707200][T17456] worker_thread+0xa50/0xfc0 [ 929.707219][T17456] kthread+0x388/0x470 [ 929.707232][T17456] ret_from_fork+0x51e/0xb90 [ 929.707251][T17456] ret_from_fork_asm+0x1a/0x30 [ 929.707264][T17456] [ 929.707268][T17456] The buggy address belongs to the object at ffff88803c91a000 [ 929.707268][T17456] which belongs to the cache kmalloc-4k of size 4096 [ 929.707283][T17456] The buggy address is located 1920 bytes inside of [ 929.707283][T17456] freed 4096-byte region [ffff88803c91a000, ffff88803c91b000) [ 929.707301][T17456] [ 929.707305][T17456] The buggy address belongs to the physical page: [ 929.707320][T17456] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3c918 [ 929.707336][T17456] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 929.707351][T17456] flags: 0x80000000000040(head|node=0|zone=1) [ 929.707369][T17456] page_type: f5(slab) [ 929.707384][T17456] raw: 0080000000000040 ffff88813fe1d140 dead000000000100 dead000000000122 [ 929.707398][T17456] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 929.707413][T17456] head: 0080000000000040 ffff88813fe1d140 dead000000000100 dead000000000122 [ 929.707426][T17456] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 929.707440][T17456] head: 0080000000000003 ffffea0000f24601 00000000ffffffff 00000000ffffffff [ 929.707452][T17456] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 929.707461][T17456] page dumped because: kasan: bad access detected [ 929.707468][T17456] page_owner tracks the page as allocated [ 929.707480][T17456] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 627, tgid 627 (kworker/u8:6), ts 915911598140, free_ts 911041581634 [ 929.707511][T17456] post_alloc_hook+0x231/0x280 [ 929.707533][T17456] get_page_from_freelist+0x28bb/0x2950 [ 929.707550][T17456] __alloc_frozen_pages_noprof+0x18d/0x380 [ 929.707566][T17456] allocate_slab+0x77/0x660 [ 929.707583][T17456] refill_objects+0x334/0x3c0 [ 929.707599][T17456] __pcs_replace_empty_main+0x371/0x5c0 [ 929.707617][T17456] __kmalloc_node_track_caller_noprof+0x60b/0x7e0 [ 929.707639][T17456] __alloc_skb+0x2c1/0x7d0 [ 929.707656][T17456] nsim_dev_trap_report_work+0x29f/0xbc0 [ 929.707673][T17456] process_scheduled_works+0xb02/0x1830 [ 929.707692][T17456] worker_thread+0xa50/0xfc0 [ 929.707711][T17456] kthread+0x388/0x470 [ 929.707725][T17456] ret_from_fork+0x51e/0xb90 [ 929.707744][T17456] ret_from_fork_asm+0x1a/0x30 [ 929.707757][T17456] page last free pid 5162 tgid 5162 stack trace: [ 929.707767][T17456] __free_frozen_pages+0xfe3/0x1170 [ 929.707789][T17456] __slab_free+0x24f/0x2a0 [ 929.707817][T17456] qlist_free_all+0x97/0x100 [ 929.707836][T17456] kasan_quarantine_reduce+0x148/0x160 [ 929.707856][T17456] __kasan_slab_alloc+0x22/0x80 [ 929.707875][T17456] kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 929.707897][T17456] __alloc_skb+0x1d0/0x7d0 [ 929.707914][T17456] netlink_sendmsg+0x5d4/0xb40 [ 929.707931][T17456] ____sys_sendmsg+0x94c/0x9c0 [ 929.707951][T17456] ___sys_sendmsg+0x2a5/0x360 [ 929.707971][T17456] __x64_sys_sendmsg+0x1c3/0x2a0 [ 929.707991][T17456] do_syscall_64+0x14d/0xf80 [ 929.708009][T17456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.708026][T17456] [ 929.708030][T17456] Memory state around the buggy address: [ 929.708039][T17456] ffff88803c91a680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 929.708051][T17456] ffff88803c91a700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 929.708062][T17456] >ffff88803c91a780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 929.708071][T17456] ^ [ 929.708080][T17456] ffff88803c91a800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 929.708091][T17456] ffff88803c91a880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 929.708100][T17456] ================================================================== [ 929.708117][T17456] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 929.708131][T17456] CPU: 1 UID: 0 PID: 17456 Comm: syz.6.3898 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 929.708151][T17456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 929.708162][T17456] Call Trace: [ 929.708168][T17456] [ 929.708176][T17456] vpanic+0x56c/0xa60 [ 929.708201][T17456] ? __pfx_vpanic+0x10/0x10 [ 929.708229][T17456] panic+0xc5/0xd0 [ 929.708250][T17456] ? __pfx_panic+0x10/0x10 [ 929.708274][T17456] ? __list_del_entry_valid_or_report+0x92/0x190 [ 929.708296][T17456] ? __list_del_entry_valid_or_report+0x92/0x190 [ 929.708312][T17456] check_panic_on_warn+0x89/0xb0 [ 929.708332][T17456] ? __list_del_entry_valid_or_report+0x92/0x190 [ 929.708349][T17456] end_report+0x73/0x180 [ 929.708372][T17456] ? __list_del_entry_valid_or_report+0x92/0x190 [ 929.708389][T17456] kasan_report+0x128/0x150 [ 929.708413][T17456] ? __list_del_entry_valid_or_report+0x92/0x190 [ 929.708435][T17456] __list_del_entry_valid_or_report+0x92/0x190 [ 929.708453][T17456] bt_accept_unlink+0x39/0x260 [ 929.708477][T17456] l2cap_sock_teardown_cb+0x17e/0x490 [ 929.708499][T17456] l2cap_chan_del+0xb5/0x610 [ 929.708522][T17456] ? l2cap_conn_del+0x327/0x5c0 [ 929.708540][T17456] l2cap_conn_del+0x333/0x5c0 [ 929.708557][T17456] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 929.708574][T17456] hci_conn_hash_flush+0x10d/0x260 [ 929.708594][T17456] hci_dev_close_sync+0x821/0x10e0 [ 929.708620][T17456] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 929.708643][T17456] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 929.708665][T17456] ? hci_unregister_dev+0x212/0x5a0 [ 929.708686][T17456] hci_unregister_dev+0x21a/0x5a0 [ 929.708707][T17456] vhci_release+0x155/0x1b0 [ 929.708726][T17456] ? __pfx_vhci_release+0x10/0x10 [ 929.708746][T17456] __fput+0x461/0xa90 [ 929.708769][T17456] task_work_run+0x1d9/0x270 [ 929.708789][T17456] ? __pfx_task_work_run+0x10/0x10 [ 929.708814][T17456] ? kmem_cache_free+0x185/0x6b0 [ 929.708837][T17456] ? put_net+0x191/0x260 [ 929.708860][T17456] do_exit+0x70f/0x23c0 [ 929.708879][T17456] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 929.708903][T17456] ? __pfx_do_exit+0x10/0x10 [ 929.708918][T17456] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 929.708936][T17456] ? reacquire_held_locks+0x104/0x190 [ 929.708954][T17456] ? rt_spin_lock+0x1e0/0x400 [ 929.708977][T17456] do_group_exit+0x21b/0x2d0 [ 929.708995][T17456] ? rt_spin_unlock+0x160/0x200 [ 929.709014][T17456] get_signal+0x125c/0x1310 [ 929.709044][T17456] arch_do_signal_or_restart+0xbc/0x830 [ 929.709065][T17456] ? __pfx_get_timespec64+0x10/0x10 [ 929.709082][T17456] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 929.709105][T17456] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 929.709129][T17456] exit_to_user_mode_loop+0x86/0x480 [ 929.709151][T17456] ? rcu_is_watching+0x15/0xb0 [ 929.709170][T17456] do_syscall_64+0x32d/0xf80 [ 929.709190][T17456] ? trace_irq_disable+0x3b/0x150 [ 929.709209][T17456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.709226][T17456] ? clear_bhb_loop+0x40/0x90 [ 929.709245][T17456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.709262][T17456] RIP: 0033:0x7fb65613cfce [ 929.709276][T17456] Code: Unable to access opcode bytes at 0x7fb65613cfa4. [ 929.709286][T17456] RSP: 002b:00007fb6543d5f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 929.709304][T17456] RAX: fffffffffffffdfc RBX: 00007fb6543d66c0 RCX: 00007fb65613cfce [ 929.709317][T17456] RDX: 00007fb6543d5fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 929.709329][T17456] RBP: 00007fb656212c99 R08: 0000000000000000 R09: 0000000000000000 [ 929.709341][T17456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 929.709352][T17456] R13: 00007fb6563f6038 R14: 00007fb6563f5fa0 R15: 0000000000000000 [ 929.709372][T17456] [ 929.709627][T17456] Kernel Offset: disabled