last executing test programs: 2m51.281610478s ago: executing program 1 (id=3108): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 2m50.420640819s ago: executing program 1 (id=3111): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x2bdc, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfde01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x39e3}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x4}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x240040e5}, 0x24004814) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 2m42.187675064s ago: executing program 1 (id=3136): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0xc080) 2m42.115784225s ago: executing program 1 (id=3138): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000002c0004800500030202000000050003000200000005000300000000000500030002000000050003000200000008000100ffffffff0800020002"], 0x50}}, 0x0) 2m42.102153085s ago: executing program 1 (id=3139): syz_usb_connect$hid(0x3, 0x36, &(0x7f00000014c0)=ANY=[@ANYBLOB="12010000000000406d041fc700000000000109022400010000000009040000010300000009210000080122070009058103"], 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, r1, 0x2, &(0x7f0000000140)={0x2, 0x8, 0x80}) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001040)={0x60, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x854}, 0x844) prlimit64(r1, 0xc, 0x0, &(0x7f0000000f80)) 2m39.04604761s ago: executing program 1 (id=3147): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0x1000, 0x0, 0x7ff}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x28}], 0x1}, 0x4) 2m23.721753218s ago: executing program 32 (id=3147): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0x1000, 0x0, 0x7ff}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x28}], 0x1}, 0x4) 2.986704439s ago: executing program 4 (id=3963): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0xac9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x10000008, 0x11b}) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x9, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x51, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x8, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.92424119s ago: executing program 4 (id=3964): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x3000000}, 0x8) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001680)={0x2, 0x0, [{0xffff1000, 0x65, &(0x7f0000001840)=""/101}, {0x1, 0x2e, &(0x7f00000004c0)=""/46}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) 2.060341641s ago: executing program 3 (id=3975): openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x0, 0x0) 2.049683761s ago: executing program 4 (id=3976): socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x2}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x6}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x8}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @loopback}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.029676692s ago: executing program 4 (id=3977): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) 1.949242223s ago: executing program 3 (id=3979): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xd80}}, 0x2004c880) accept4$tipc(r3, 0x0, 0x0, 0x800) 1.727564706s ago: executing program 5 (id=3982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009b40)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x4, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x8, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x5, 0x2, 0xc, 0x8, 0x9, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x0, 0x8, 0x84}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xffd, 0xcc, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0x9}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x8000, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0xad, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0xffffff81, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0xc3, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0xffffffff}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b5}, {0xa24b, 0x947d, 0x3, 0x4, 0x80000000, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x6}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x0, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x1, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0x7, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0xb8}, {0x3, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x4, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r2, 0x10c}, 0x80, &(0x7f00000000c0)}, 0x4000880) 1.677608397s ago: executing program 0 (id=3983): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001680)) r0 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x0, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x0, r0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8000100}, 0x8}, 0x94) 1.632176327s ago: executing program 2 (id=3984): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f4000020000000000000800000000000000"], 0xfc}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @loopback, 0xa098}, {0xa, 0x4e21, 0x1000, @local, 0x2}, r2, 0x8401}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.631786667s ago: executing program 0 (id=3985): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r0, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x20040) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff7, 0x3}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.610830808s ago: executing program 2 (id=3986): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x3000000}, 0x8) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001680)={0x2, 0x0, [{0xffff1000, 0x65, &(0x7f0000001840)=""/101}, {0x1, 0x2e, &(0x7f00000004c0)=""/46}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) 1.516529249s ago: executing program 0 (id=3987): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) 1.470012349s ago: executing program 5 (id=3988): syz_emit_ethernet(0x46, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @ndisc_ra}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa081, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf775aa1b71", 0xd, 0xfffffffffffffffe) pipe2(&(0x7f0000000040), 0x0) 1.388201031s ago: executing program 0 (id=3989): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x4, 0x1, 0x2, 0x0, 0xffff, 0x7}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) 1.088276865s ago: executing program 4 (id=3990): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0x9) recvfrom$inet(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 953.074287ms ago: executing program 3 (id=3991): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000210001"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 927.176387ms ago: executing program 3 (id=3992): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000200)="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", 0x2000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xc8) dup3(r1, r0, 0x0) 891.611208ms ago: executing program 3 (id=3993): socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r0, 0x6) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) 584.215942ms ago: executing program 2 (id=3994): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x6}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x8}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @loopback}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 553.449872ms ago: executing program 5 (id=3995): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x8, 0x0, &(0x7f0000000080)=0xff3e) 489.578963ms ago: executing program 5 (id=3996): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001680)) r0 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x0, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x0, r0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8000100}, 0x8}, 0x94) 486.684853ms ago: executing program 2 (id=3997): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x24004814) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 399.146555ms ago: executing program 2 (id=3998): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000002b00000000000000000000000000000000000000ffff0000000000000100000000000000070000000000000000000000000000000301000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000a0000011d00000000000000480003"], 0x140}, 0x1, 0x0, 0x0, 0x1}, 0x4004810) 357.826515ms ago: executing program 5 (id=3999): bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r0) 356.998915ms ago: executing program 5 (id=4000): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) 350.773465ms ago: executing program 2 (id=4001): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018160000696c080000000000002020207b1af8ff000000004fa100000000000007010000f8ffffffb702000008000000b70300000000000085000000990000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0xff3, &(0x7f0000002e00)=""/4083}, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 255.607616ms ago: executing program 0 (id=4002): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f400002000000000000080000000000000000010005000000000044000500ac141426"], 0xfc}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @loopback, 0xa098}, {0xa, 0x4e21, 0x1000, @local, 0x2}, r2, 0x8401}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 235.447197ms ago: executing program 0 (id=4003): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56441, 0x70bd23, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0x2, 0xb}, {0xf, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x4, 0x6, 0x7356, 0xffffffff, 0x5}, [@TCA_NETEM_RATE={0x14, 0x6, {0x9, 0x2, 0xb, 0x9}}, @TCA_NETEM_JITTER64={0xc}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 223.033327ms ago: executing program 4 (id=4004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x3000000}, 0x8) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001680)={0x2, 0x0, [{0xffff1000, 0x65, &(0x7f0000001840)=""/101}, {0x1, 0x2e, &(0x7f00000004c0)=""/46}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=4005): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xb) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/vmstat\x00', 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.time\x00', 0x275a, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={0x0}, 0x1, 0x0, 0x0, 0x48004}, 0x24000080) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x58, r6, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4000) syz_usb_connect(0x2, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d2f6010000400009046a00067af4190009050f080000050801060c8b631b7507250102020700090501"], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r7}}, 0x20) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r2, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44) socket$packet(0x11, 0x2, 0x300) kernel console output (not intermixed with test programs): r parsing attributes in process `syz.2.2105'. [ 345.795825][T10618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2118'. [ 345.797960][T10618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2118'. [ 345.939228][T10623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2120'. [ 346.097352][T10627] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2122'. [ 346.099067][T10627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2122'. [ 346.100671][T10627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2122'. [ 346.102347][T10627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2122'. [ 347.479232][T10716] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.480660][T10716] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.501760][T10732] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.888915][T10716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.902358][T10716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.157239][T10716] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.158544][T10716] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.159898][T10716] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.162041][T10716] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.807102][T10791] vim2m vim2m.0: vidioc_s_fmt queue busy [ 349.132987][T10799] device syzkaller0 entered promiscuous mode [ 349.430576][T10815] tipc: Enabled bearer , priority 0 [ 349.434030][T10815] device syzkaller0 entered promiscuous mode [ 349.522639][T10815] tipc: Resetting bearer [ 349.532922][T10813] tipc: Resetting bearer [ 349.591859][T10813] tipc: Disabling bearer [ 349.881504][T10845] device syzkaller0 entered promiscuous mode [ 350.033172][T10853] vim2m vim2m.0: vidioc_s_fmt queue busy [ 350.488932][T10861] device wlan0 left promiscuous mode [ 350.986004][T10889] device syzkaller0 entered promiscuous mode [ 351.562076][T10910] vim2m vim2m.0: vidioc_s_fmt queue busy [ 352.154488][T10929] __nla_validate_parse: 10 callbacks suppressed [ 352.154500][T10929] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2233'. [ 352.562273][T10975] device syzkaller0 entered promiscuous mode [ 352.725069][T10984] vim2m vim2m.0: vidioc_s_fmt queue busy [ 352.999150][T10988] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2251'. [ 353.493284][T11018] device syzkaller0 entered promiscuous mode [ 353.694671][T11024] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2266'. [ 354.266998][T11055] vim2m vim2m.0: vidioc_s_fmt queue busy [ 354.536683][T11062] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2279'. [ 354.562488][T11061] device syzkaller0 entered promiscuous mode [ 354.790918][ T4373] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 354.991965][ T4373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.993841][ T4373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.995511][ T4373] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 354.997064][ T4373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.999351][ T4373] usb 1-1: config 0 descriptor?? [ 355.156417][T11096] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2292'. [ 355.262778][T11098] device syzkaller0 entered promiscuous mode [ 355.425568][T11106] rdma_rxe: already configured on team_slave_0 [ 355.578764][T11115] vim2m vim2m.0: vidioc_s_fmt queue busy [ 355.978471][T11130] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2305'. [ 356.295078][T11146] device syzkaller0 entered promiscuous mode [ 356.719327][T11164] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2318'. [ 357.119729][T11181] vim2m vim2m.0: vidioc_s_fmt queue busy [ 357.337077][T11180] device syzkaller0 entered promiscuous mode [ 357.524264][ T4373] usbhid 1-1:0.0: can't add hid device: -71 [ 357.525515][ T4373] usbhid: probe of 1-1:0.0 failed with error -71 [ 357.534082][ T4373] usb 1-1: USB disconnect, device number 10 [ 357.605049][T11195] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2331'. [ 358.598408][T11224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.600072][T11224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.786909][T11226] rdma_rxe: rxe_register_device failed with error -23 [ 358.788255][T11226] rdma_rxe: failed to add team_slave_0 [ 368.263010][T11222] device team0 entered promiscuous mode [ 368.263895][T11222] device team_slave_0 entered promiscuous mode [ 368.265047][T11222] device team_slave_1 entered promiscuous mode [ 368.266163][T11222] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 368.548009][T11268] vim2m vim2m.0: vidioc_s_fmt queue busy [ 368.837880][T11276] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2355'. [ 368.858708][T11278] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2353'. [ 371.682124][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.666898][T11285] device team0 left promiscuous mode [ 379.667886][T11285] device team_slave_0 left promiscuous mode [ 379.669107][T11285] device team_slave_1 left promiscuous mode [ 380.063341][T11338] device syzkaller1 entered promiscuous mode [ 380.596047][T11359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2373'. [ 380.789067][T11372] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2374'. [ 382.829732][T11321] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 391.614379][T11386] device bridge1 left promiscuous mode [ 391.615377][T11386] device ipip0 left promiscuous mode [ 395.448199][T11434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 395.760106][T11486] IPVS: sed: FWM 3 0x00000003 - no destination available [ 403.755445][T11489] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2400'. [ 406.889522][T11505] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 406.985204][T11547] xt_CT: You must specify a L4 protocol and not use inversions on it [ 416.665006][T11624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2431'. [ 416.679394][T11624] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2431'. [ 416.839644][T11639] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2437'. [ 416.842366][T11639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2437'. [ 416.854228][T11637] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2432'. [ 417.273979][T11673] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2446'. [ 417.282335][T11673] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2446'. [ 417.717891][T11681] device syzkaller0 entered promiscuous mode [ 419.862431][T11651] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 419.951235][T11705] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2458'. [ 419.969685][T11705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2458'. [ 420.113004][T11711] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2460'. [ 420.502316][T11726] x_tables: ip_tables: time.0 match: invalid size 24 (kernel) != (user) 40 [ 420.575924][T11736] device syzkaller0 entered promiscuous mode [ 423.242315][T11746] IPVS: sed: FWM 3 0x00000003 - no destination available [ 423.502095][T11729] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 423.644655][T11752] device syzkaller0 entered promiscuous mode [ 423.892463][T11770] device syzkaller0 entered promiscuous mode [ 424.986244][T11783] tipc: Started in network mode [ 424.987228][T11783] tipc: Node identity 4201a75e45ba, cluster identity 4711 [ 424.988490][T11783] tipc: Enabled bearer , priority 0 [ 424.998390][T11783] device syzkaller0 entered promiscuous mode [ 425.412748][T11780] tipc: Resetting bearer [ 425.501799][T11780] tipc: Disabling bearer [ 426.016085][T11801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2486'. [ 426.603996][T11812] IPVS: sed: FWM 3 0x00000003 - no destination available [ 427.023410][T11818] tipc: Enabled bearer , priority 0 [ 427.024924][T11818] device syzkaller0 entered promiscuous mode [ 427.056001][T11817] tipc: Resetting bearer [ 427.122038][T11817] tipc: Disabling bearer [ 428.139095][T11858] IPVS: sed: FWM 3 0x00000003 - no destination available [ 428.221023][ T4378] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 428.430323][ T4378] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 428.431979][ T4378] usb 1-1: config 0 has no interface number 0 [ 428.433044][ T4378] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 428.439061][ T4378] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 428.447992][ T4378] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 428.455496][ T4378] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.473968][ T4378] usb 1-1: config 0 descriptor?? [ 428.477422][T11853] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 428.495329][ T4378] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 428.520251][T11868] tipc: Enabled bearer , priority 0 [ 428.531578][T11868] device syzkaller0 entered promiscuous mode [ 428.534457][T11871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.535955][T11871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.545092][T11866] tipc: Resetting bearer [ 428.612025][T11866] tipc: Disabling bearer [ 428.796927][T11878] NILFS (nullb0): couldn't find nilfs on the device [ 428.841488][ T4583] usb 1-1: USB disconnect, device number 11 [ 428.842528][ C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 429.502246][ T4334] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 429.504263][ T4334] Bluetooth: hci0: Injecting HCI hardware error event [ 429.508296][ T4337] Bluetooth: hci0: hardware error 0x00 [ 429.621544][T11912] tipc: Started in network mode [ 429.622504][T11912] tipc: Node identity c678d22b3f9c, cluster identity 4711 [ 429.623966][T11912] tipc: Enabled bearer , priority 0 [ 429.625659][T11912] device syzkaller0 entered promiscuous mode [ 429.628697][T11911] tipc: Resetting bearer [ 429.692461][T11911] tipc: Disabling bearer [ 430.262717][T11938] device syzkaller0 entered promiscuous mode [ 431.114543][T11956] tipc: Started in network mode [ 431.115737][T11956] tipc: Node identity e67a9c6b6fb4, cluster identity 4711 [ 431.124252][T11956] tipc: Enabled bearer , priority 0 [ 431.128759][T11956] device syzkaller0 entered promiscuous mode [ 431.137393][T11955] tipc: Resetting bearer [ 431.202235][T11955] tipc: Disabling bearer [ 431.500937][T11975] device syzkaller0 entered promiscuous mode [ 431.691028][ T4337] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 432.204360][T11997] tipc: Enabled bearer , priority 0 [ 432.206094][T11997] device syzkaller0 entered promiscuous mode [ 432.209953][T11996] tipc: Resetting bearer [ 432.262176][T11996] tipc: Disabling bearer [ 432.443201][T12008] device syzkaller0 entered promiscuous mode [ 432.846294][T12028] tipc: Enabled bearer , priority 0 [ 432.847973][T12028] device syzkaller0 entered promiscuous mode [ 432.888571][T12027] tipc: Resetting bearer [ 433.032886][T12027] tipc: Disabling bearer [ 433.211512][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.363717][T12039] device syzkaller0 entered promiscuous mode [ 433.444409][T12054] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2580'. [ 433.445875][T12054] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 433.617233][T12078] tipc: Started in network mode [ 433.618172][T12078] tipc: Node identity 56c2a9209349, cluster identity 4711 [ 433.619405][T12078] tipc: Enabled bearer , priority 0 [ 433.623055][T12078] device syzkaller0 entered promiscuous mode [ 433.682714][T12077] tipc: Resetting bearer [ 433.792121][T12077] tipc: Disabling bearer [ 433.933971][T12086] device syzkaller0 entered promiscuous mode [ 445.423976][T12132] tipc: Enabling of bearer rejected, failed to enable media [ 446.191824][T12170] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2615'. [ 446.759671][T12184] tipc: Enabled bearer , priority 0 [ 447.252155][T12181] tipc: Disabling bearer [ 447.262422][T12204] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2627'. [ 447.362711][T12215] libceph: resolve '0..' (ret=-3): failed [ 447.373694][T12218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.375398][T12218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.681447][T12234] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2640'. [ 448.297781][T12261] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2653'. [ 448.332774][T12263] device syzkaller0 entered promiscuous mode [ 448.604413][T12292] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2666'. [ 448.795281][T12306] device syzkaller0 entered promiscuous mode [ 448.871769][T12314] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2677'. [ 449.605610][T12347] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2690'. [ 449.740702][T12349] device syzkaller0 entered promiscuous mode [ 450.136143][T12341] syz.3.2687 (12341): drop_caches: 2 [ 450.186051][T12376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.187596][T12376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.189361][T12375] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2703'. [ 450.756635][T12392] device syzkaller0 entered promiscuous mode [ 451.097967][T12407] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2716'. [ 452.000907][ T4337] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 452.002598][ T4337] Bluetooth: hci2: Injecting HCI hardware error event [ 452.004664][ T4337] Bluetooth: hci2: hardware error 0x00 [ 454.250912][ T4337] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 454.481685][ T4337] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 454.483193][ T4337] Bluetooth: hci4: Injecting HCI hardware error event [ 454.485473][ T4337] Bluetooth: hci4: hardware error 0x00 [ 456.640911][ T4337] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 462.149410][T12458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.152006][T12458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.299275][T12481] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2734'. [ 463.334939][T12484] device syzkaller0 entered promiscuous mode [ 464.206881][T12510] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2742'. [ 466.410903][ T4583] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 466.592432][ T4583] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.594104][ T4583] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.595784][ T4583] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 466.597233][ T4583] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.600131][ T4583] usb 1-1: config 0 descriptor?? [ 466.880926][ T4337] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 466.882492][ T4337] Bluetooth: hci1: Injecting HCI hardware error event [ 466.884126][ T4337] Bluetooth: hci1: hardware error 0x00 [ 467.011524][T12521] rdma_rxe: already configured on team_slave_0 [ 469.177352][ T4583] usbhid 1-1:0.0: can't add hid device: -71 [ 469.178405][ T4583] usbhid: probe of 1-1:0.0 failed with error -71 [ 469.182717][ T4583] usb 1-1: USB disconnect, device number 12 [ 469.191847][T12525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2747'. [ 469.280897][ T4337] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 475.031482][T12550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.034351][T12550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.038093][T12552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.039643][T12552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.073784][T12555] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2758'. [ 475.548270][T12565] device syzkaller0 entered promiscuous mode [ 487.650037][T12615] overlayfs: failed to set xattr on upper [ 487.652206][T12615] overlayfs: ...falling back to index=off,metacopy=off. [ 487.708336][T12625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2779'. [ 488.551014][T12643] device syzkaller0 entered promiscuous mode [ 488.693127][T12654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.696552][T12654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.355010][T12674] overlayfs: failed to set xattr on upper [ 489.355958][T12674] overlayfs: ...falling back to index=off,metacopy=off. [ 494.561424][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 499.819359][T12676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2791'. [ 500.829197][T12714] netlink: 'syz.2.2806': attribute type 1 has an invalid length. [ 500.830781][T12714] netlink: 'syz.2.2806': attribute type 4 has an invalid length. [ 500.833699][T12714] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2806'. [ 500.858688][T12716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2807'. [ 500.941376][T12721] device syzkaller0 entered promiscuous mode [ 511.962934][T12751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2821'. [ 512.168624][T12780] MPTCP: kernel_bind error, err=-99 [ 512.465308][T12783] overlayfs: failed to set xattr on upper [ 512.467354][T12783] overlayfs: ...falling back to index=off,metacopy=off. [ 512.482480][T12785] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2833'. [ 512.486568][T12785] device bridge_slave_0 left promiscuous mode [ 512.489035][T12785] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.562211][T12785] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 513.043814][T12794] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2835'. [ 513.052032][T12794] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2835'. [ 513.070656][T12794] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 513.072279][T12794] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 514.355485][T12823] device ip6gre1 entered promiscuous mode [ 514.603461][T12835] MPTCP: kernel_bind error, err=-99 [ 514.898982][T12844] netlink: 'syz.0.2854': attribute type 3 has an invalid length. [ 515.828887][T12859] device syzkaller0 entered promiscuous mode [ 516.124839][T12888] MPTCP: kernel_bind error, err=-99 [ 516.611437][T12924] netlink: 'syz.1.2879': attribute type 1 has an invalid length. [ 516.643941][T12924] 8021q: adding VLAN 0 to HW filter on device bond7 [ 516.650594][T12924] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.652532][T12924] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.653960][T12924] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.655507][T12924] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.658482][T12924] bond7: (slave geneve2): making interface the new active one [ 516.662012][T12924] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 516.663793][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 516.694677][T12927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.697389][T12927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.210537][T12523] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 517.213291][T12523] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 517.215042][T12523] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 517.217197][T12523] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 517.236521][T12523] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 517.238138][T12523] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 517.442725][T12964] 9pnet_virtio: no channels available for device syz [ 517.469451][T12964] overlayfs: failed to set xattr on upper [ 517.470413][T12964] overlayfs: ...falling back to index=off,metacopy=off. [ 518.707789][T12948] chnl_net:caif_netlink_parms(): no params data found [ 518.767828][T12948] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.769546][T12948] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.282008][ T4337] Bluetooth: hci5: command 0x0409 tx timeout [ 519.427528][T12948] device bridge_slave_0 entered promiscuous mode [ 519.429869][T12948] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.431125][T12948] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.432627][T12948] device bridge_slave_1 entered promiscuous mode [ 519.559285][T12948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.580100][T12948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.616147][T12948] team0: Port device team_slave_0 added [ 519.617476][T13012] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2906'. [ 519.627823][T12948] team0: Port device team_slave_1 added [ 519.646143][T12948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.649168][T12948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.666644][T12948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.669240][T12948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.670263][T12948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.700845][T12948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.782564][T12948] device hsr_slave_0 entered promiscuous mode [ 519.801714][T12948] device hsr_slave_1 entered promiscuous mode [ 519.831143][T12948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 519.832409][T12948] Cannot create hsr debugfs directory [ 519.896091][ T4649] tipc: Left network mode [ 519.940441][T13044] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2918'. [ 520.063788][ T4373] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 520.250188][ T4373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.253457][ T4373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.255097][ T4373] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 520.257219][ T4373] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 520.258714][ T4373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.263125][ T4373] usb 1-1: config 0 descriptor?? [ 520.602362][T13094] overlayfs: overlapping lowerdir path [ 520.820610][ T4373] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 520.833889][ T4373] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 520.968332][T12948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 521.043406][ T7441] usb 1-1: USB disconnect, device number 13 [ 521.119959][T12948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 521.400934][T12523] Bluetooth: hci5: command 0x041b tx timeout [ 521.434098][T12948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 521.445437][T13109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.447080][T13109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.502142][ T4649] device gretap0 left promiscuous mode [ 521.564813][T12948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 521.675357][T12948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.679912][T13000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 521.683078][T13000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 521.776098][T12948] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.778921][T13000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 521.780647][T13000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 521.782573][T13000] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.784870][T13000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.794096][T13000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 521.799066][T13000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 521.800809][T13000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 521.819050][T13000] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.820301][T13000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.850111][T13000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 521.854002][T13000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 521.859294][T13000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 521.869095][T13000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 521.878867][T13000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 521.884561][T13000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 521.886579][T13000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 521.892633][T13000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 521.894359][T13000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 521.906832][T13000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 521.909096][T12948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 522.383198][T13000] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 522.545269][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 522.546825][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 522.550277][T12948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.640972][T12523] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 522.642726][T12523] Bluetooth: hci3: Injecting HCI hardware error event [ 522.645427][T12523] Bluetooth: hci3: hardware error 0x00 [ 523.138591][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 523.140445][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 523.157484][ T5846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 523.159316][ T5846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 523.212444][ T5846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 523.216163][ T5846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 523.220076][T12948] device veth0_vlan entered promiscuous mode [ 523.225946][T12948] device veth1_vlan entered promiscuous mode [ 523.244953][ T5846] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 523.246766][ T5846] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 523.250583][ T5846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 523.259398][ T5846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 523.270310][T12948] device veth0_macvtap entered promiscuous mode [ 523.274311][T12948] device veth1_macvtap entered promiscuous mode [ 523.293282][T12948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.297578][ T4649] device batadv0 left promiscuous mode [ 523.441037][ T4337] Bluetooth: hci5: command 0x040f tx timeout [ 523.449666][ T4649] device hsr_slave_0 left promiscuous mode [ 523.491854][ T4649] device hsr_slave_1 left promiscuous mode [ 523.570984][ T4649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.573250][ T4649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.574912][ T4649] device bridge_slave_1 left promiscuous mode [ 523.577398][ T4649] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.611594][ T4649] device bridge_slave_0 left promiscuous mode [ 523.612770][ T4649] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.337964][T13225] binder: 13224:13225 unknown command 1074553619 [ 524.339224][T13225] binder: 13224:13225 ioctl c0306201 20000540 returned -22 [ 524.340612][T13225] binder: 13224:13225 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 524.356213][T13225] binder: 13225 RLIMIT_NICE not set [ 524.443320][ T4649] bond7 (unregistering): Released all slaves [ 525.186940][ T4649] bond6 (unregistering): Released all slaves [ 525.194084][ T4649] bond5 (unregistering): Released all slaves [ 525.198212][ T4649] bond4 (unregistering): Released all slaves [ 525.202386][ T4649] bond3 (unregistering): Released all slaves [ 525.207347][ T4649] bond2 (unregistering): Released all slaves [ 525.214324][ T4649] bond1 (unregistering): Released all slaves [ 525.221216][T12523] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 525.521014][T12523] Bluetooth: hci5: command 0x0419 tx timeout [ 527.833957][ T4649] team0 (unregistering): Port device team_slave_1 removed [ 528.002781][ T4649] team0 (unregistering): Port device team_slave_0 removed [ 528.171450][ T4649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.361324][ T4649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.861888][ T4649] bond0 (unregistering): Released all slaves [ 530.193811][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 530.195456][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 530.196966][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 530.198514][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 530.202878][T12948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.205179][T12948] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.206566][T12948] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.207871][T12948] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.209323][T12948] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.267409][T13000] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 530.269587][T13000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 530.368809][ T5185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.370376][ T5185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.378978][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 530.415557][T13000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.416829][T13000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.418218][T13000] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 530.967897][T12523] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 530.975946][T12523] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 530.977986][T12523] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 530.980164][T12523] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 530.981753][T12523] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 530.983144][T12523] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 531.548508][T13309] chnl_net:caif_netlink_parms(): no params data found [ 531.567213][T13315] device syzkaller0 entered promiscuous mode [ 531.650405][T13037] kernel write not supported for file [eventfd] (pid: 13037 comm: kworker/1:1) [ 532.033610][T13309] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.034977][T13309] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.036650][T13309] device bridge_slave_0 entered promiscuous mode [ 532.039059][T13309] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.040383][T13309] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.042237][T13309] device bridge_slave_1 entered promiscuous mode [ 532.048953][T13309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.392327][T13309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.399301][T13309] team0: Port device team_slave_0 added [ 532.417766][T13309] team0: Port device team_slave_1 added [ 532.433756][T13309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.435338][T13309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.439663][T13309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.448917][T13309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.450098][T13309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.455438][T13309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.512213][T13309] device hsr_slave_0 entered promiscuous mode [ 532.535081][T13309] device hsr_slave_1 entered promiscuous mode [ 532.632021][T13309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 532.633296][T13309] Cannot create hsr debugfs directory [ 532.972787][ T4649] tipc: Left network mode [ 533.051081][T12523] Bluetooth: hci1: command 0x0409 tx timeout [ 533.855465][T13395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.857036][T13395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.026924][T13401] hub 8-0:1.0: USB hub found [ 534.028795][T13401] hub 8-0:1.0: 8 ports detected [ 534.376370][T13309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 534.412287][T13309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 534.453143][T13309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 534.492244][T13309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 534.597196][T13309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.604301][T13309] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.611871][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 534.613628][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 534.615206][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 534.619257][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 534.626217][ T4520] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.627506][ T4520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.629724][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 534.632558][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 534.634041][ T4520] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.635268][ T4520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.636892][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 534.639828][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 534.642296][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 534.731761][T13309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 534.733631][T13309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 534.736720][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 534.738939][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 534.741073][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 534.743139][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 534.745073][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 534.749720][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 535.092518][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 535.111118][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 535.112874][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 535.114356][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 535.124789][ T4337] Bluetooth: hci1: command 0x041b tx timeout [ 535.304563][T13435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.307344][T13435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.435031][T13309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.437041][T13439] rdma_rxe: rxe_register_device failed with error -23 [ 535.438373][T13439] rdma_rxe: failed to add team_slave_0 [ 535.438671][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 535.443726][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 535.759184][T13340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 535.761429][T13340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 535.769273][T13340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 535.774519][T13340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 535.776577][T13340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 535.778158][T13340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 535.780681][T13309] device veth0_vlan entered promiscuous mode [ 535.784854][T13309] device veth1_vlan entered promiscuous mode [ 535.852361][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 535.861483][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 535.863242][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 535.864887][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 535.870565][T13309] device veth0_macvtap entered promiscuous mode [ 535.873407][T13309] device veth1_macvtap entered promiscuous mode [ 535.878169][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.879836][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.882035][T13309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.883417][T13340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 535.885177][T13340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 535.886911][T13340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 535.888707][T13340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 535.894487][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.896446][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.898588][T13309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.899928][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 535.902113][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 536.147340][T13309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.149034][T13309] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.150515][T13309] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.152499][T13309] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.310724][T13402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.312368][T13402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.326925][T13340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 536.333764][ T4520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.335320][ T4520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.336858][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 536.369569][T13472] netlink: 'syz.1.3042': attribute type 10 has an invalid length. [ 536.372643][T13472] device macvlan0 entered promiscuous mode [ 536.376422][T13472] team0: Port device macvlan0 added [ 536.395562][ T4649] device hsr_slave_0 left promiscuous mode [ 536.421089][ T4649] device hsr_slave_1 left promiscuous mode [ 536.502805][ T4649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.506018][ T4649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.509866][ T4649] device bridge_slave_1 left promiscuous mode [ 536.512018][ T4649] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.029928][ T4649] device bridge_slave_0 left promiscuous mode [ 537.034934][ T4649] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.073440][ T4649] bond5 (unregistering): Released all slaves [ 537.079495][ T4649] bond4 (unregistering): Released all slaves [ 537.083386][ T4649] bond3 (unregistering): Released all slaves [ 537.086946][ T4649] bond2 (unregistering): Released all slaves [ 537.212561][ T4337] Bluetooth: hci1: command 0x040f tx timeout [ 537.417333][T12523] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 537.427086][T12523] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 537.436830][T12523] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 537.438698][T12523] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 537.440204][T12523] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 537.441823][T12523] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 537.781928][ T4649] bond1 (unregistering): Released all slaves [ 539.280931][ T4337] Bluetooth: hci1: command 0x0419 tx timeout [ 539.531809][T12523] Bluetooth: hci2: command 0x0409 tx timeout [ 540.215848][ T4649] team0 (unregistering): Port device team_slave_1 removed [ 540.413524][ T4649] team0 (unregistering): Port device team_slave_0 removed [ 540.421911][ T5185] smc: removing ib device syz1 [ 540.612392][ T4649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.823704][ T4649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.610916][ T4337] Bluetooth: hci2: command 0x041b tx timeout [ 542.322031][ T4649] bond0 (unregistering): Released all slaves [ 542.639655][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3047'. [ 542.813262][T13539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.814928][T13539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.895261][T13504] chnl_net:caif_netlink_parms(): no params data found [ 542.956228][T13504] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.957597][T13504] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.959244][T13504] device bridge_slave_0 entered promiscuous mode [ 542.961833][T13504] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.963163][T13504] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.964741][T13504] device bridge_slave_1 entered promiscuous mode [ 542.968138][T13543] infiniband syz1: set active [ 542.968952][T13543] infiniband syz1: added team_slave_0 [ 542.971914][T13504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.980091][T13504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.983971][T13543] RDS/IB: syz1: added [ 542.984762][T13543] smc: adding ib device syz1 with port count 1 [ 542.985835][T13543] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 542.990879][T13504] team0: Port device team_slave_0 added [ 543.041960][T13504] team0: Port device team_slave_1 added [ 543.056313][T13504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.058784][T13504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.068828][T13504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.102127][T13504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.104580][T13504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.109207][T13504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.178493][T13504] device hsr_slave_0 entered promiscuous mode [ 543.221188][T13504] device hsr_slave_1 entered promiscuous mode [ 543.349600][T13504] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.406140][T13504] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.448688][T13504] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.505718][T13504] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.716948][T13504] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 543.724845][ T4337] Bluetooth: hci2: command 0x040f tx timeout [ 543.752156][T13504] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 544.114114][T13504] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 544.162491][T13504] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 544.217383][T13504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.227774][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 544.229414][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 544.306189][T13504] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.310308][T13402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 544.312865][T13402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 544.314540][T13402] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.315764][T13402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.317498][T13402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 544.383518][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 544.385307][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 544.387234][ T4520] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.388398][ T4520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.403370][T13402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 544.405409][T13402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 544.407247][T13402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 544.409540][T13402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 544.411813][T13402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 544.413715][T13402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 544.415419][T13402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 544.416902][T13402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 544.418506][T13402] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 544.454884][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 544.456636][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 544.540677][T13504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 544.674465][T13591] vim2m vim2m.0: vidioc_s_fmt queue busy [ 544.996297][T13504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.998362][T13592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 544.999743][T13592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 545.024887][T13340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 545.026812][T13340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 545.035354][T13592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 545.037032][T13592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 545.038990][T13592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 545.040574][T13592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 545.048609][T13504] device veth0_vlan entered promiscuous mode [ 545.053622][T13504] device veth1_vlan entered promiscuous mode [ 545.066559][T13592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 545.068211][T13592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 545.069780][T13592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 545.072384][T13592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 545.075542][T13504] device veth0_macvtap entered promiscuous mode [ 545.078175][T13504] device veth1_macvtap entered promiscuous mode [ 545.089405][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.091383][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.093288][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.095048][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.097514][T13504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.099030][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 545.101844][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 545.103558][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 545.105976][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 545.108903][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.110716][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.113479][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.115242][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.117389][T13504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.119009][T13340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 545.120751][T13340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 545.124811][T13504] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.126443][T13504] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.127923][T13504] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.129458][T13504] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.205038][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.206482][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.208136][T13402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 545.224447][T13402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.226251][T13402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.227695][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 545.352011][T13607] overlayfs: overlapping lowerdir path [ 545.393805][ T4337] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 545.397049][ T4337] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 545.404646][ T4337] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 545.407653][ T4337] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 545.409479][ T4337] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 545.411501][ T4334] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 545.420065][ T4649] tipc: Left network mode [ 545.429815][T13610] device ip6gre1 entered promiscuous mode [ 545.562399][T13620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.564256][T13620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.772433][T12523] Bluetooth: hci2: command 0x0419 tx timeout [ 546.360500][T13606] chnl_net:caif_netlink_parms(): no params data found [ 546.446585][T13606] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.447816][T13606] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.451167][T13606] device bridge_slave_0 entered promiscuous mode [ 546.456961][T13606] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.458229][T13606] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.460188][T13606] device bridge_slave_1 entered promiscuous mode [ 546.683564][T13606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.869926][T13653] overlayfs: overlapping lowerdir path [ 546.915557][T13606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.008131][T13606] team0: Port device team_slave_0 added [ 547.049339][T13606] team0: Port device team_slave_1 added [ 547.412638][T13606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.413931][T13606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.420195][T13606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.424202][T13606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.425466][T13606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.429763][T13606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.441032][ T4334] Bluetooth: hci0: command 0x0409 tx timeout [ 547.522667][T13606] device hsr_slave_0 entered promiscuous mode [ 547.551448][T13606] device hsr_slave_1 entered promiscuous mode [ 547.602301][T13606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 547.606786][T13606] Cannot create hsr debugfs directory [ 547.668003][T13678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.669734][T13678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.803289][T13470] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 548.002035][T13470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.003802][T13470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.005327][T13470] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 548.006966][T13470] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.010554][T13470] usb 1-1: config 0 descriptor?? [ 548.498809][T13699] rdma_rxe: rxe_register_device failed with error -23 [ 548.500424][T13699] rdma_rxe: failed to add team_slave_0 [ 548.942166][T13711] overlayfs: overlapping lowerdir path [ 549.521231][T12523] Bluetooth: hci0: command 0x041b tx timeout [ 549.616382][T13606] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 549.718242][T13606] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 549.851726][ T4649] device hsr_slave_0 left promiscuous mode [ 550.141418][ T4649] device hsr_slave_1 left promiscuous mode [ 550.211043][ T4649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.213517][ T4649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.215116][ T4649] device bridge_slave_1 left promiscuous mode [ 550.216322][ T4649] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.256152][ T4649] device bridge_slave_0 left promiscuous mode [ 550.257501][ T4649] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.381502][ T4649] bond7 (unregistering): (slave geneve2): Releasing active interface [ 550.561893][T13470] usbhid 1-1:0.0: can't add hid device: -71 [ 550.563093][T13470] usbhid: probe of 1-1:0.0 failed with error -71 [ 550.569209][T13470] usb 1-1: USB disconnect, device number 14 [ 550.589892][T13731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.593960][T13731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.601159][T12523] Bluetooth: hci0: command 0x040f tx timeout [ 551.651958][ T4649] bond7 (unregistering): Released all slaves [ 551.657978][ T4649] bond6 (unregistering): Released all slaves [ 551.661587][ T4649] bond5 (unregistering): Released all slaves [ 551.665054][ T4649] bond4 (unregistering): Released all slaves [ 551.668472][ T4649] bond3 (unregistering): Released all slaves [ 551.672085][ T4649] bond2 (unregistering): Released all slaves [ 552.157622][T13764] overlayfs: failed to resolve './file1/file0': -2 [ 552.342404][ T4649] bond1 (unregistering): Released all slaves [ 552.545987][ T4649] team0 (unregistering): Port device bridge1 removed [ 552.964561][T13772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.966657][T13772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.171864][T13774] rdma_rxe: already configured on team_slave_0 [ 553.680895][T12523] Bluetooth: hci0: command 0x0419 tx timeout [ 553.882028][ T4649] team0 (unregistering): Port device macvlan0 removed [ 553.900928][T13038] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 554.081513][T13038] usb 1-1: Using ep0 maxpacket: 8 [ 554.083965][T13038] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.085527][T13038] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 554.088457][T13038] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 554.089988][T13038] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.091545][T13038] usb 1-1: Product: syz [ 554.092223][T13038] usb 1-1: Manufacturer: syz [ 554.092948][T13038] usb 1-1: SerialNumber: syz [ 554.101094][T13038] usb 1-1: config 0 descriptor?? [ 554.306662][T13470] usb 1-1: USB disconnect, device number 15 [ 555.232529][ T4649] team0 (unregistering): Port device team_slave_1 removed [ 555.393546][ T4649] team0 (unregistering): Port device team_slave_0 removed [ 555.571477][ T4649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.761277][ T4649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.002942][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 556.975581][T13799] overlayfs: failed to resolve './file1/file0': -2 [ 557.562051][ T4649] bond0 (unregistering): Released all slaves [ 557.824299][T13606] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 557.868167][T13606] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 558.070324][T13815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.074401][T13815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.302227][T13824] rdma_rxe: rxe_register_device failed with error -23 [ 558.303775][T13824] rdma_rxe: failed to add team_slave_0 [ 559.144595][T13831] overlayfs: failed to resolve './file1/file0': -2 [ 569.768801][T13606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.793391][T13606] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.802240][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 569.803801][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 569.805164][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 569.806609][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 569.808056][ T4520] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.809168][ T4520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.811370][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 569.813036][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 569.814580][ T4520] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.815717][ T4520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.817100][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 569.818804][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 569.820355][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 569.832632][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 569.841332][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 569.842979][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 569.845843][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 569.847279][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 569.854660][T13854] device syzkaller0 entered promiscuous mode [ 571.860072][T13884] IPVS: sed: FWM 3 0x00000003 - no destination available [ 572.840869][ T7441] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 573.030876][ T7441] usb 1-1: Using ep0 maxpacket: 16 [ 573.033002][ T7441] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.034654][ T7441] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 573.036393][ T7441] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 573.037844][ T7441] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 573.039514][ T7441] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 573.045293][ T7441] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 573.046737][ T7441] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 573.048060][ T7441] usb 1-1: Manufacturer: syz [ 573.050222][ T7441] usb 1-1: config 0 descriptor?? [ 573.257419][ T7441] Registered IR keymap rc-hauppauge [ 573.310916][ T7441] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 573.313402][ T7441] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 573.340876][ T7441] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 573.381696][ T7441] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 573.384244][ T7441] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input2 [ 573.388351][ T7441] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 573.420931][ T7441] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 573.460913][ T7441] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 573.490922][ T7441] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 573.531241][ T7441] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 573.570923][ T7441] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 573.616079][ T7441] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 573.651461][ T7441] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 573.691259][ T7441] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 573.730903][ T7441] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 573.767458][ T7441] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 573.768941][ T7441] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 573.781601][ T7441] usb 1-1: USB disconnect, device number 16 [ 576.471930][T12523] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 576.474312][T12523] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 576.475991][T12523] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 576.477414][T12523] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 576.478746][T12523] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 576.480496][T12523] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 578.560896][ T4334] Bluetooth: hci4: command 0x0409 tx timeout [ 580.640849][ T4334] Bluetooth: hci4: command 0x041b tx timeout [ 581.547138][T13868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3151'. [ 581.548863][T13402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 581.550492][T13402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 581.552493][T13402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 581.554083][T13402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 581.568361][T13606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 581.766445][T13928] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3167'. [ 581.942175][T13934] IPVS: sed: FWM 3 0x00000003 - no destination available [ 582.180438][T13606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.224383][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 582.226167][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 582.277493][T13903] chnl_net:caif_netlink_parms(): no params data found [ 582.294832][T13903] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.296017][T13903] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.297535][T13903] device bridge_slave_0 entered promiscuous mode [ 582.299789][T13903] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.302038][T13903] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.303605][T13903] device bridge_slave_1 entered promiscuous mode [ 582.310392][T13903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.313382][T13903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.322524][T13903] team0: Port device team_slave_0 added [ 582.324633][T13903] team0: Port device team_slave_1 added [ 582.331215][T13903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.335310][T13903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.339546][T13903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.342336][T13903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.343556][T13903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.347692][T13903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.412504][T13903] device hsr_slave_0 entered promiscuous mode [ 582.460433][T13938] random: crng reseeded on system resumption [ 582.461233][T13903] device hsr_slave_1 entered promiscuous mode [ 582.503102][T13903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 582.504617][T13903] Cannot create hsr debugfs directory [ 582.536408][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 582.538231][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 582.730979][ T4334] Bluetooth: hci4: command 0x040f tx timeout [ 582.803330][ T4649] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.812659][T13968] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3177'. [ 582.864142][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 582.866003][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 582.869392][T13606] device veth0_vlan entered promiscuous mode [ 582.919559][ T4649] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.925496][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 582.927084][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 582.933823][T13606] device veth1_vlan entered promiscuous mode [ 583.007454][ T4649] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.026654][T13340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 583.028281][T13340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 583.029814][T13340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 583.033144][T13340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 583.039404][T13903] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 583.148399][ T4649] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.154942][T13606] device veth0_macvtap entered promiscuous mode [ 583.158055][T13606] device veth1_macvtap entered promiscuous mode [ 583.164196][T13903] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 583.193283][T13903] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 583.255311][T14004] IPVS: sed: FWM 3 0x00000003 - no destination available [ 583.543057][T13903] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 583.597123][T13606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.598914][T13606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.600463][T13606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.603322][T13606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.604867][T13606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.606623][T13606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.608918][T13606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.612735][T14001] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3188'. [ 583.617747][ T6611] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 583.619502][ T6611] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 583.621195][ T6611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 583.622788][ T6611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 583.634901][T13606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.636727][T13606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.638346][T13606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.640058][T13606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.650562][T13606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.656266][T13606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.661478][T13606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.663871][T13606] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.665391][T13606] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.666888][T13606] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.668296][T13606] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.801057][T12523] Bluetooth: hci4: command 0x0419 tx timeout [ 594.476271][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 594.479303][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 594.562050][T13592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.563398][T13592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.565160][T13592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 594.600777][T13592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.602226][T13592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.620098][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 594.696366][ T4649] tipc: Left network mode [ 594.703154][T13903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.716393][T13592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 594.718021][T13592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 594.723016][T13903] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.726679][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 594.728271][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 594.729694][ T5185] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.730907][ T5185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.742605][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 594.746213][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 594.747852][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 594.749395][ T5685] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.750683][ T5685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.769768][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 594.778098][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 594.792418][ T6611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 594.794481][ T6611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 594.796176][ T6611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 594.798239][ T6611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 594.817266][T13903] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 594.824637][T13903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 594.832178][ T6611] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 594.833904][ T6611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 594.835429][ T6611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 594.837039][ T6611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 594.838501][ T6611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 595.114778][T14075] IPVS: sed: FWM 3 0x00000003 - no destination available [ 595.705965][T14076] ceph: No mds server is up or the cluster is laggy [ 595.708628][ T4373] libceph: connect (1)[c::]:6789 error -101 [ 595.710449][ T4373] libceph: mon0 (1)[c::]:6789 connect error [ 596.010980][ T4508] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 596.180201][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 596.196337][T14094] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3206'. [ 596.212506][ T4508] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.214501][ T4508] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.216166][ T4508] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 596.218017][ T4508] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.223581][ T4508] usb 1-1: config 0 descriptor?? [ 596.649013][T14128] rdma_rxe: rxe_register_device failed with error -23 [ 596.650320][T14128] rdma_rxe: failed to add team_slave_0 [ 598.065599][T14147] IPVS: sed: FWM 3 0x00000003 - no destination available [ 598.770415][ T4508] usbhid 1-1:0.0: can't add hid device: -71 [ 598.771814][ T4508] usbhid: probe of 1-1:0.0 failed with error -71 [ 598.774022][ T4508] usb 1-1: USB disconnect, device number 17 [ 601.747761][T14179] IPVS: sed: FWM 3 0x00000003 - no destination available [ 602.721236][T14043] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 602.902001][T14043] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.903714][T14043] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.905278][T14043] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 602.906704][T14043] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.911628][T14043] usb 1-1: config 0 descriptor?? [ 605.475243][T14043] usbhid 1-1:0.0: can't add hid device: -71 [ 605.477521][T14043] usbhid: probe of 1-1:0.0 failed with error -71 [ 605.482379][T14043] usb 1-1: USB disconnect, device number 18 [ 608.960600][T14212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.962753][T14212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.807808][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 609.815974][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 609.938217][T14230] overlayfs: failed to resolve './file1': -2 [ 610.041946][T13903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.048009][T14242] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3246'. [ 610.418958][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 610.420712][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 610.491879][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 610.493767][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 610.495599][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 610.497036][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 610.500608][T13903] device veth0_vlan entered promiscuous mode [ 610.606759][T14284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3254'. [ 610.693721][T14284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.938533][T13903] device veth1_vlan entered promiscuous mode [ 610.955990][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 610.957846][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 610.962880][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 610.977658][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 610.983473][T13903] device veth0_macvtap entered promiscuous mode [ 610.986527][T13903] device veth1_macvtap entered promiscuous mode [ 610.996046][T14296] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3259'. [ 610.999512][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.002704][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.004473][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.006584][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.008365][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.010241][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.012786][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.014726][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.017474][T13903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.304715][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 611.306559][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 611.311664][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 611.313236][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 611.318457][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.320425][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.328637][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.333712][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.338232][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.339267][T14318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.342543][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.344300][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.345931][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.346307][T14318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.350408][T13903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.413470][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 611.415322][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 611.473153][T13903] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.474680][T13903] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.476090][T13903] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.477586][T13903] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.805220][T13340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.821250][T13340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.852508][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 611.874938][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.876370][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.877756][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 612.394247][T14393] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3282'. [ 612.753286][T14407] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3287'. [ 612.796676][T14408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.798256][T14408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.320108][T12523] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 613.341131][T12523] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 613.343698][T12523] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 613.345845][T12523] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 613.347203][T12523] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 613.348459][T12523] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 613.358124][ T4649] device hsr_slave_0 left promiscuous mode [ 613.391055][ T4649] device hsr_slave_1 left promiscuous mode [ 613.400717][T14430] overlayfs: failed to set xattr on upper [ 613.424474][T14430] overlayfs: ...falling back to index=off,metacopy=off. [ 613.427978][T14430] overlayfs: failed to resolve './file0': -2 [ 613.481192][ T4649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.482588][ T4649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.485101][ T4649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.486236][ T4649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.487752][ T4649] device bridge_slave_1 left promiscuous mode [ 613.489106][ T4649] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.564984][ T4649] device bridge_slave_0 left promiscuous mode [ 613.566326][ T4649] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.633897][ T4649] device hsr_slave_0 left promiscuous mode [ 613.671003][ T4649] device hsr_slave_1 left promiscuous mode [ 613.730947][ T4649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.732675][ T4649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.734223][ T4649] device bridge_slave_1 left promiscuous mode [ 613.735417][ T4649] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.851465][ T4649] device veth1_macvtap left promiscuous mode [ 613.852713][ T4649] device veth0_macvtap left promiscuous mode [ 613.853761][ T4649] device veth1_vlan left promiscuous mode [ 613.855002][ T4649] device veth0_vlan left promiscuous mode [ 614.530747][T14462] overlayfs: failed to set xattr on upper [ 614.535235][T14462] overlayfs: ...falling back to index=off,metacopy=off. [ 614.536490][T14462] overlayfs: failed to resolve './file0': -2 [ 614.618965][T14465] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3310'. [ 615.370944][ T4334] Bluetooth: hci2: command 0x0409 tx timeout [ 615.954219][ T4649] team0 (unregistering): Port device team_slave_1 removed [ 616.121829][ T4649] team0 (unregistering): Port device team_slave_0 removed [ 616.311835][ T4649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.511336][ T4649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.440959][ T4334] Bluetooth: hci2: command 0x041b tx timeout [ 617.441619][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 617.982004][ T4649] bond0 (unregistering): Released all slaves [ 618.902348][ T4649] bond6 (unregistering): Released all slaves [ 619.520997][T12523] Bluetooth: hci2: command 0x040f tx timeout [ 619.551912][ T4649] bond5 (unregistering): Released all slaves [ 620.232616][ T4649] bond4 (unregistering): Released all slaves [ 620.236540][ T4649] bond3 (unregistering): Released all slaves [ 620.240041][ T4649] bond2 (unregistering): Released all slaves [ 620.913525][ T4649] bond1 (unregistering): Released all slaves [ 621.601978][T12523] Bluetooth: hci2: command 0x0419 tx timeout [ 623.216121][ T4649] team0 (unregistering): Port device team_slave_1 removed [ 623.415207][ T4649] team0 (unregistering): Port device team_slave_0 removed [ 623.611349][ T4649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.849172][ T4649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 625.342759][ T4649] bond0 (unregistering): Released all slaves [ 625.681894][T14445] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3303'. [ 625.684085][T14465] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3310'. [ 625.862603][T14425] chnl_net:caif_netlink_parms(): no params data found [ 625.864133][T14506] overlayfs: failed to set xattr on upper [ 625.865093][T14506] overlayfs: ...falling back to index=off,metacopy=off. [ 625.893020][T14508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.895779][T14508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.966365][T14425] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.967717][T14425] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.969252][T14425] device bridge_slave_0 entered promiscuous mode [ 625.972041][T14425] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.973205][T14425] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.974745][T14425] device bridge_slave_1 entered promiscuous mode [ 625.981214][T14425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.984308][T14425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.762955][T14425] team0: Port device team_slave_0 added [ 626.766903][T14425] team0: Port device team_slave_1 added [ 626.866160][T14425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.871785][T14425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.965687][T14425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.978393][T14425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.984133][T14425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.003842][T14425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.425775][T14425] device hsr_slave_0 entered promiscuous mode [ 627.462109][T14425] device hsr_slave_1 entered promiscuous mode [ 627.555816][T14530] syz.0.3325 (14530): drop_caches: 2 [ 630.827759][T14610] syz.3.3341 (14610): drop_caches: 2 [ 631.010880][ T6664] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 631.776542][ T6664] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 631.778121][ T6664] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.779468][ T6664] usb 1-1: Product: syz [ 631.780191][ T6664] usb 1-1: Manufacturer: syz [ 631.781559][ T6664] usb 1-1: SerialNumber: syz [ 631.787461][ T6664] usb 1-1: config 0 descriptor?? [ 631.789780][ T6664] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 634.535631][ T6664] gspca_stk1135: reg_w 0x350 err -71 [ 634.537698][ T6664] gspca_stk1135: serial bus timeout: status=0x00 [ 634.538651][ T6664] gspca_stk1135: Sensor write failed [ 634.539640][ T6664] gspca_stk1135: serial bus timeout: status=0x00 [ 634.540600][ T6664] gspca_stk1135: Sensor write failed [ 634.541625][ T6664] gspca_stk1135: serial bus timeout: status=0x00 [ 634.542778][ T6664] gspca_stk1135: Sensor read failed [ 634.543599][ T6664] gspca_stk1135: serial bus timeout: status=0x00 [ 634.544773][ T6664] gspca_stk1135: Sensor read failed [ 634.545619][ T6664] gspca_stk1135: Detected sensor type unknown (0x0) [ 634.546764][ T6664] gspca_stk1135: serial bus timeout: status=0x00 [ 634.547879][ T6664] gspca_stk1135: Sensor read failed [ 634.548799][ T6664] gspca_stk1135: serial bus timeout: status=0x00 [ 634.549904][ T6664] gspca_stk1135: Sensor read failed [ 634.550758][ T6664] gspca_stk1135: serial bus timeout: status=0x00 [ 634.551855][ T6664] gspca_stk1135: Sensor write failed [ 634.552688][ T6664] gspca_stk1135: serial bus timeout: status=0x00 [ 634.553696][ T6664] gspca_stk1135: Sensor write failed [ 634.554608][ T6664] stk1135: probe of 1-1:0.0 failed with error -71 [ 634.563673][ T6664] usb 1-1: USB disconnect, device number 19 [ 634.690440][T14654] overlayfs: failed to set xattr on upper [ 634.697238][T14654] overlayfs: ...falling back to index=off,metacopy=off. [ 634.698603][T14654] overlayfs: failed to resolve './file0': -2 [ 635.256943][T14661] 9pnet_virtio: no channels available for device syz [ 635.286540][T14661] overlayfs: failed to set xattr on upper [ 635.287465][T14661] overlayfs: ...falling back to index=off,metacopy=off. [ 640.000878][T12523] Bluetooth: hci5: command 0x0406 tx timeout [ 640.410892][T14670] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3357'. [ 643.050069][T14425] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 643.093029][T14425] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 643.132687][T14425] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 643.173160][T14425] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 643.247138][T14735] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 643.362230][T14735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 643.363630][T14735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 643.375862][ T4649] tipc: Left network mode [ 643.422884][T14738] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3371'. [ 643.483803][T14425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.949162][T14425] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.950485][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 643.954899][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 645.890932][T14781] xt_hashlimit: size too large, truncated to 1048576 [ 655.237308][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 655.239149][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 655.243012][ T4434] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.244260][ T4434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.245812][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 655.309341][T14806] IPVS: sed: FWM 3 0x00000003 - no destination available [ 655.360902][T12523] Bluetooth: hci1: command 0x0406 tx timeout [ 655.500796][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 655.531420][ T4434] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.532752][ T4434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.544854][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 655.557189][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 655.569536][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 655.597864][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 655.608551][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 655.615528][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 655.619622][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 655.626449][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 655.639948][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 655.930198][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 655.998397][T14425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 655.999947][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 656.001459][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 656.235794][T14843] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 656.249779][ T6611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 656.251439][ T6611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 656.255142][T14425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.264723][T14835] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3392'. [ 656.317285][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 656.319159][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 656.329269][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 656.333238][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 656.335032][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 656.336568][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 656.339779][T14425] device veth0_vlan entered promiscuous mode [ 656.445712][T14425] device veth1_vlan entered promiscuous mode [ 656.506432][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 656.507998][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 656.509455][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 656.513606][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 656.524882][T14425] device veth0_macvtap entered promiscuous mode [ 656.527026][T14852] device syzkaller0 entered promiscuous mode [ 656.533571][T14425] device veth1_macvtap entered promiscuous mode [ 656.639946][T14867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.644634][T14867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.655177][T14425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.657153][T14425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.658875][T14425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.660632][T14425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.664417][T14425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.666239][T14425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.668007][T14425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.669738][T14425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.672673][T14425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.675632][T14852] tipc: Started in network mode [ 656.676587][T14852] tipc: Node identity 1a37f8a2f621, cluster identity 4711 [ 656.678022][T14852] tipc: Enabled bearer , priority 0 [ 656.679245][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 656.682721][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 656.685699][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 656.687898][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 656.689990][T14425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.694150][T14425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.699027][T14425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.700764][T14425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.705865][T14425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.707642][T14425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.709248][T14425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.711591][T14425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.720274][T14425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.722484][T14851] tipc: Resetting bearer [ 656.844571][T14851] tipc: Disabling bearer [ 656.943762][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 656.945603][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 656.949356][T14425] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.951341][T14425] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.952993][T14425] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.954434][T14425] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.010104][ T6611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.013206][ T6611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.027806][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 657.539861][ T4434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.541624][ T4434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.551770][ T6611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 657.575855][T14893] device syzkaller0 entered promiscuous mode [ 657.665488][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3413'. [ 657.741480][T13281] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 657.924101][T13281] usb 1-1: Using ep0 maxpacket: 32 [ 657.969604][T13281] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 657.970991][T13281] usb 1-1: config 0 has no interface number 0 [ 657.971934][T13281] usb 1-1: config 0 interface 12 has no altsetting 0 [ 657.975913][T13281] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 657.977402][T13281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.990938][T13281] usb 1-1: Product: syz [ 657.991698][T13281] usb 1-1: Manufacturer: syz [ 657.992569][T13281] usb 1-1: SerialNumber: syz [ 657.997957][T13281] usb 1-1: config 0 descriptor?? [ 658.232271][T14923] process 'syz.2.3420' launched './file1' with NULL argv: empty string added [ 659.052961][T13281] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 659.054405][T13281] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 659.055697][T13281] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 659.057015][T13281] f81534: probe of 1-1:0.12 failed with error -71 [ 659.065808][T13281] usb 1-1: USB disconnect, device number 20 [ 659.119011][ T27] audit: type=1326 audit(659.090:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14937 comm="syz.2.3425" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a9789e8 code=0x7ffc0000 [ 659.124878][ T27] audit: type=1326 audit(659.110:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14937 comm="syz.2.3425" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffff9a9789e8 code=0x7ffc0000 [ 659.130991][ T27] audit: type=1326 audit(659.110:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14937 comm="syz.2.3425" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a9789e8 code=0x7ffc0000 [ 659.139814][ T27] audit: type=1326 audit(659.110:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14937 comm="syz.2.3425" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffff9a9789e8 code=0x7ffc0000 [ 659.152335][ T27] audit: type=1326 audit(659.110:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14937 comm="syz.2.3425" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a9789e8 code=0x7ffc0000 [ 659.334769][T14948] netlink: 'syz.3.3427': attribute type 11 has an invalid length. [ 660.780918][T13281] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 660.961112][T13281] usb 1-1: Using ep0 maxpacket: 16 [ 660.964533][T13281] usb 1-1: unable to get BOS descriptor or descriptor too short [ 660.966403][T13281] usb 1-1: config 5 has an invalid interface number: 110 but max is 0 [ 660.967687][T13281] usb 1-1: config 5 has no interface number 0 [ 660.968669][T13281] usb 1-1: config 5 interface 110 altsetting 4 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 660.970534][T13281] usb 1-1: config 5 interface 110 altsetting 4 endpoint 0xC has an invalid bInterval 128, changing to 11 [ 660.973930][T13281] usb 1-1: config 5 interface 110 has no altsetting 0 [ 660.976279][T13281] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=b0.b7 [ 660.977704][T13281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.978872][T13281] usb 1-1: Product: syz [ 660.979652][T13281] usb 1-1: Manufacturer: syz [ 660.980375][T13281] usb 1-1: SerialNumber: syz [ 661.197805][T13281] adutux 1-1:5.110: interrupt endpoints not found [ 661.200737][T13281] usb 1-1: USB disconnect, device number 21 [ 669.334873][T14944] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3426'. [ 669.344890][T14949] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 669.571167][T14949] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 669.761824][T14953] device wlan0 entered promiscuous mode [ 669.882140][T14976] device syzkaller0 entered promiscuous mode [ 670.364894][ T4649] device hsr_slave_0 left promiscuous mode [ 670.401472][ T4649] device hsr_slave_1 left promiscuous mode [ 670.464583][T15008] IPVS: sed: FWM 3 0x00000003 - no destination available [ 670.720980][T12523] Bluetooth: hci0: command 0x0406 tx timeout [ 670.771311][ T4649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.773129][ T4649] device bridge_slave_1 left promiscuous mode [ 670.774359][ T4649] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.789348][T15013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.791375][T15013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.812012][ T4649] device bridge_slave_0 left promiscuous mode [ 670.813429][ T4649] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.368244][T15020] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 671.532981][ T4649] bond2 (unregistering): Released all slaves [ 671.539688][ T4649] bond1 (unregistering): Released all slaves [ 673.663814][ T4649] team0 (unregistering): Port device team_slave_1 removed [ 673.851595][ T4649] team0 (unregistering): Port device team_slave_0 removed [ 674.015024][ T4649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.221933][ T4649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.622292][ T4649] bond0 (unregistering): Released all slaves [ 675.904443][T14994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3437'. [ 675.908565][T15005] netlink: 'syz.0.3441': attribute type 1 has an invalid length. [ 675.954985][T15032] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3448'. [ 675.979380][T15047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3450'. [ 676.063650][T15060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.065258][T15060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.089618][T15047] syz.2.3450 (15047): drop_caches: 2 [ 676.523859][T15075] overlayfs: missing 'lowerdir' [ 676.676408][T15092] netlink: 'syz.4.3464': attribute type 1 has an invalid length. [ 676.696914][T15092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 676.777551][T15092] bond1: (slave geneve2): making interface the new active one [ 676.780997][T15092] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 676.785971][ T1614] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 676.807661][T15102] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3466'. [ 676.921738][T15108] device syzkaller0 left promiscuous mode [ 677.000228][T15120] overlayfs: missing 'lowerdir' [ 677.835221][T15164] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3481'. [ 677.946913][T15166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.949266][T15166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.062943][T15172] overlayfs: missing 'workdir' [ 678.688136][T15192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3493'. [ 678.714085][T15194] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3494'. [ 678.815499][T15201] overlayfs: missing 'workdir' [ 678.882085][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 678.998286][T15214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3503'. [ 679.000334][T15214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3503'. [ 679.233590][T15226] overlayfs: missing 'workdir' [ 680.412027][T15262] overlayfs: failed to set xattr on upper [ 680.412998][T15262] overlayfs: ...falling back to index=off,metacopy=off. [ 681.829318][T15303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.832338][T15303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.371611][T15376] netlink: 'syz.3.3553': attribute type 1 has an invalid length. [ 683.380236][T15376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 683.395572][T15376] bond1: (slave geneve2): making interface the new active one [ 683.397958][T15376] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 683.399764][ T5846] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 684.372161][T15442] netlink: 'syz.5.3566': attribute type 1 has an invalid length. [ 684.381149][T15442] 8021q: adding VLAN 0 to HW filter on device bond1 [ 684.388419][T15442] bond1: (slave geneve2): making interface the new active one [ 684.391864][T15442] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 684.393496][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 684.918044][T15491] netlink: 'syz.3.3579': attribute type 1 has an invalid length. [ 684.925759][T15491] 8021q: adding VLAN 0 to HW filter on device bond2 [ 685.059821][T15502] IPVS: sed: FWM 3 0x00000003 - no destination available [ 685.682784][T12523] Bluetooth: hci2: command 0x0405 tx timeout [ 686.037711][T15529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.044351][T15529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.115981][T15535] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3591'. [ 687.493671][T15584] device syzkaller0 entered promiscuous mode [ 687.945727][T14040] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 688.367299][T14040] usb 1-1: unable to get BOS descriptor or descriptor too short [ 688.370033][T14040] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 688.373223][T14040] usb 1-1: can't read configurations, error -71 [ 688.424800][T15626] device syzkaller0 entered promiscuous mode [ 688.822798][T15644] netlink: 'syz.4.3636': attribute type 1 has an invalid length. [ 688.829856][T15644] 8021q: adding VLAN 0 to HW filter on device bond2 [ 689.166256][T15651] device syzkaller0 entered promiscuous mode [ 690.145673][T15683] netlink: 'syz.0.3649': attribute type 1 has an invalid length. [ 690.156262][T15683] 8021q: adding VLAN 0 to HW filter on device bond1 [ 690.175437][T15683] bond1: (slave geneve2): making interface the new active one [ 690.177856][T15683] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 690.179379][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 690.379716][T15698] device syzkaller0 entered promiscuous mode [ 690.919726][T15718] netlink: 'syz.4.3664': attribute type 1 has an invalid length. [ 690.929070][T15718] 8021q: adding VLAN 0 to HW filter on device bond3 [ 690.954534][T15721] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3667'. [ 691.491399][T15740] device syzkaller0 entered promiscuous mode [ 691.573593][T15758] netlink: 'syz.0.3679': attribute type 29 has an invalid length. [ 691.575108][T15758] netlink: 'syz.0.3679': attribute type 29 has an invalid length. [ 691.900889][T13038] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 692.065121][T15778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.066665][T15778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.081042][T13038] usb 1-1: Using ep0 maxpacket: 8 [ 692.083981][T15780] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3688'. [ 692.086949][T13038] usb 1-1: unable to get BOS descriptor or descriptor too short [ 692.089002][T13038] usb 1-1: config 4 interface 0 has no altsetting 0 [ 692.093000][T13038] usb 1-1: string descriptor 0 read error: -22 [ 692.094145][T13038] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 692.095724][T13038] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 692.106380][T13038] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 692.123572][T13038] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 692.125719][T13038] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 692.130201][T13038] usb 1-1: media controller created [ 692.135786][T13038] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 692.139835][T15782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3690'. [ 692.385930][T15788] tipc: Started in network mode [ 692.387010][T15788] tipc: Node identity 7e31741338c5, cluster identity 4711 [ 692.388313][T15788] tipc: Enabled bearer , priority 0 [ 692.390049][T15788] device syzkaller0 entered promiscuous mode [ 692.536232][T15791] tipc: Resetting bearer [ 692.540504][T15787] tipc: Resetting bearer [ 692.577514][T15794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.579970][T15794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.601974][T15787] tipc: Disabling bearer [ 692.627768][T15796] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3694'. [ 692.759759][T15792] netlink: 'syz.0.3679': attribute type 29 has an invalid length. [ 692.817869][T15806] overlayfs: failed to set xattr on upper [ 692.819048][T15806] overlayfs: ...falling back to index=off,metacopy=off. [ 694.596583][T13038] usb 1-1: USB disconnect, device number 24 [ 694.639064][T15833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3705'. [ 694.851719][T15843] overlayfs: failed to set xattr on upper [ 694.852772][T15843] overlayfs: ...falling back to index=off,metacopy=off. [ 701.451028][T12523] Bluetooth: hci4: command 0x0406 tx timeout [ 703.388320][T15824] tipc: Enabling of bearer rejected, failed to enable media [ 703.502398][T15874] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3718'. [ 703.535700][T15879] overlayfs: failed to set xattr on upper [ 703.536760][T15879] overlayfs: ...falling back to index=off,metacopy=off. [ 703.604722][T15883] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3722'. [ 703.833288][T15902] device syzkaller0 entered promiscuous mode [ 703.852567][T15904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3731'. [ 703.885016][T15902] tipc: Enabled bearer , priority 0 [ 703.887025][T15901] tipc: Resetting bearer [ 703.936025][T15901] tipc: Disabling bearer [ 704.037176][T15911] overlayfs: failed to set xattr on upper [ 704.038334][T15911] overlayfs: ...falling back to index=off,metacopy=off. [ 704.434774][T15929] tipc: Enabled bearer , priority 0 [ 704.436752][T15929] device syzkaller0 entered promiscuous mode [ 704.444891][T15929] tipc: Resetting bearer [ 704.446288][T15931] netlink: 'syz.0.3741': attribute type 1 has an invalid length. [ 704.469536][T15931] 8021q: adding VLAN 0 to HW filter on device bond2 [ 704.496670][T15928] tipc: Resetting bearer [ 704.591561][T15928] tipc: Disabling bearer [ 704.601190][T15936] netlink: 'syz.2.3743': attribute type 1 has an invalid length. [ 704.648989][T15936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 704.777948][T15951] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3750'. [ 705.082295][T15968] device syzkaller0 entered promiscuous mode [ 705.105835][T15970] netlink: 'syz.3.3759': attribute type 1 has an invalid length. [ 705.128782][T15970] 8021q: adding VLAN 0 to HW filter on device bond3 [ 705.297125][T15979] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3763'. [ 705.297797][T15978] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3762'. [ 705.888373][T15990] device syzkaller0 entered promiscuous mode [ 705.951234][T15995] tipc: Started in network mode [ 705.952285][T15995] tipc: Node identity b211ca9f4409, cluster identity 4711 [ 705.954173][T15995] tipc: Enabled bearer , priority 0 [ 705.958143][T15989] tipc: Resetting bearer [ 706.002567][T15989] tipc: Disabling bearer [ 706.005005][T15999] netlink: 'syz.0.3771': attribute type 1 has an invalid length. [ 706.027424][T15999] 8021q: adding VLAN 0 to HW filter on device bond3 [ 706.135768][T16010] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3775'. [ 706.217921][T16012] netlink: 'syz.2.3777': attribute type 1 has an invalid length. [ 706.229309][T16012] 8021q: adding VLAN 0 to HW filter on device bond2 [ 706.246437][T16012] bond2: (slave geneve2): making interface the new active one [ 706.249265][T16012] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 706.252464][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 706.714143][T16030] netlink: 'syz.2.3783': attribute type 1 has an invalid length. [ 706.723266][T16030] 8021q: adding VLAN 0 to HW filter on device bond3 [ 706.766200][T16033] device syzkaller0 entered promiscuous mode [ 706.809774][T16033] tipc: Enabled bearer , priority 0 [ 706.812148][T16032] tipc: Resetting bearer [ 706.886066][T16032] tipc: Disabling bearer [ 707.725151][T16061] qrtr: Invalid version 0 [ 707.787156][T16069] device syzkaller0 entered promiscuous mode [ 707.843316][T16069] tipc: Enabled bearer , priority 0 [ 707.845382][T16068] tipc: Resetting bearer [ 707.927630][T16068] tipc: Disabling bearer [ 708.157113][T16083] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3803'. [ 708.244381][T16087] netlink: 'syz.2.3805': attribute type 1 has an invalid length. [ 708.252893][T16087] 8021q: adding VLAN 0 to HW filter on device bond4 [ 708.373030][T16092] qrtr: Invalid version 0 [ 708.714610][T16106] netlink: 'syz.5.3813': attribute type 1 has an invalid length. [ 708.724747][T16106] 8021q: adding VLAN 0 to HW filter on device bond2 [ 708.854237][T16111] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3815'. [ 708.935466][T16119] qrtr: Invalid version 0 [ 709.037199][T16126] device syzkaller0 entered promiscuous mode [ 709.376953][T16134] device syzkaller0 entered promiscuous mode [ 709.574431][T16140] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3827'. [ 710.509128][T16175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.511512][T16175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.515414][T16175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.517045][T16175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.775724][T16186] device syzkaller0 entered promiscuous mode [ 711.317465][T16198] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3851'. [ 711.606482][T16214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3858'. [ 711.809930][T16222] device syzkaller0 entered promiscuous mode [ 712.053797][T16228] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3865'. [ 712.365422][T16257] device syzkaller0 entered promiscuous mode [ 712.389504][T16259] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3878'. [ 712.705908][T16275] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3886'. [ 712.815139][T16284] MPTCP: addr_signal error, add_addr=2, echo=1 [ 712.815478][ C1] MPTCP: addr_signal error, add_addr=2, echo=1 [ 712.924355][T16290] netlink: 'syz.5.3892': attribute type 1 has an invalid length. [ 712.934362][T16290] 8021q: adding VLAN 0 to HW filter on device bond3 [ 712.966438][T16293] device syzkaller0 entered promiscuous mode [ 713.433858][T16320] netlink: 'syz.3.3905': attribute type 1 has an invalid length. [ 713.446411][T16320] 8021q: adding VLAN 0 to HW filter on device bond4 [ 713.710275][T16330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3908'. [ 713.713602][T16330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3908'. [ 714.334136][T16361] netlink: 'syz.3.3919': attribute type 1 has an invalid length. [ 714.345673][T16361] 8021q: adding VLAN 0 to HW filter on device bond5 [ 714.419757][T16368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.422023][T16366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.422714][T16368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.427773][T16366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.461240][T16385] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3929'. [ 715.475652][T16387] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3930'. [ 715.681012][T16402] netlink: 'syz.4.3937': attribute type 1 has an invalid length. [ 715.689917][T16402] 8021q: adding VLAN 0 to HW filter on device bond4 [ 715.784785][T16414] device syzkaller0 entered promiscuous mode [ 715.788718][T16414] tipc: Started in network mode [ 715.789578][T16414] tipc: Node identity 3eda4627f3df, cluster identity 4711 [ 715.811286][T16414] tipc: Enabled bearer , priority 0 [ 715.841470][T16409] tipc: Resetting bearer [ 715.855655][T16418] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3943'. [ 715.914073][T16409] tipc: Disabling bearer [ 716.378248][T16434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3949'. [ 717.046665][T16450] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3954'. [ 717.063567][T16448] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3955'. [ 717.122889][T16461] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3960'. [ 717.147708][T16463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3961'. [ 717.531687][T16480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.533200][T16480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.602362][T16484] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3970'. [ 717.941283][T16489] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3972'. [ 718.163721][T16502] tipc: Enabled bearer , priority 0 [ 718.311899][T16501] tipc: Disabling bearer [ 718.411880][T16509] qrtr: Invalid version 87 [ 719.247845][T16540] qrtr: Invalid version 87 [ 719.929816][T16567] tipc: Started in network mode [ 719.930739][T16567] tipc: Node identity 080211000001, cluster identity 4711 [ 720.171439][T16574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.177340][T16574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.071576][T16600] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 736.092632][T16605] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 736.097114][T16605] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 736.099524][T16605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 736.101769][T16605] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 736.104180][T16605] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 736.106391][T16605] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 736.108089][T16605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 736.109879][T16605] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 736.111991][T16605] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 736.113345][T16605] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 736.114835][T16605] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 736.117343][T16605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 736.118736][T16605] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 736.120035][T16605] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 736.122092][T16605] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 736.123687][T16605] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 736.124912][T16605] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 736.126203][T16605] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 736.127514][T16605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 736.156103][T16606] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 736.157451][T16606] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 736.173554][T16606] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 736.174884][T16606] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 736.946884][T16600] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 736.949481][T16600] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 736.951750][T16600] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 736.953245][T16600] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 736.955279][T16600] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 736.956604][T16600] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 738.160909][T16600] Bluetooth: hci3: command 0x0409 tx timeout [ 738.162532][T16600] Bluetooth: hci7: command 0x0409 tx timeout [ 738.241072][T16606] Bluetooth: hci8: command 0x0409 tx timeout [ 738.242540][T16606] Bluetooth: hci6: command 0x0409 tx timeout [ 738.960904][T16600] Bluetooth: hci9: command 0x0409 tx timeout [ 740.120812][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 23s! [syz.0.4003:16567] [ 740.122208][ C0] Modules linked in: [ 740.122845][ C0] irq event stamp: 1056815 [ 740.123520][ C0] hardirqs last enabled at (1056814): [] timekeeping_get_ns+0x124/0x3b4 [ 740.125077][ C0] hardirqs last disabled at (1056815): [] el1_interrupt+0x24/0x54 [ 740.126547][ C0] softirqs last enabled at (600): [] handle_softirqs+0xaec/0xc60 [ 740.128076][ C0] softirqs last disabled at (620): [] local_bh_disable+0x10/0x34 [ 740.129626][ C0] CPU: 0 PID: 16567 Comm: syz.0.4003 Not tainted syzkaller #0 [ 740.130924][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 740.132529][ C0] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 740.133908][ C0] pc : cake_heapify+0xb8/0x530 [ 740.134734][ C0] lr : cake_heapify+0x5c/0x530 [ 740.135521][ C0] sp : ffff800021856410 [ 740.136204][ C0] x29: ffff800021856420 x28: 0000000000000000 x27: 000000ac51fd7e38 [ 740.137506][ C0] x26: 0000000000000000 x25: ffff0000f18a82d0 x24: ffff0000f18ac2d8 [ 740.138753][ C0] x23: dfff800000000000 x22: ffff0000ec900000 x21: ffff0000f18a8ce4 [ 740.140075][ C0] x20: ffff0000f18a82d0 x19: 0000000000000506 x18: ffff800011b9bf60 [ 740.141431][ C0] x17: ffff80001835b000 x16: ffff8000082d92bc x15: ffff800017e3c000 [ 740.142733][ C0] x14: 0000000000000001 x13: 1ffff00002a44071 x12: 0000000000ff0100 [ 740.144059][ C0] x11: ff00800010066b14 x10: 00000000000098d0 x9 : ffff0000f18a82d8 [ 740.145363][ C0] x8 : 0000000000000506 x7 : ffff8000083c1bd4 x6 : 0000000000000000 [ 740.146753][ C0] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 740.148124][ C0] x2 : 0000000000000002 x1 : 0000000000000506 x0 : 0000000000002000 [ 740.149420][ C0] Call trace: [ 740.150003][ C0] cake_heapify+0xb8/0x530 [ 740.150811][ C0] cake_enqueue+0x3464/0x680c [ 740.151585][ C0] netem_dequeue+0xa78/0x1080 [ 740.152304][ C0] __qdisc_run+0x1cc/0x133c [ 740.153018][ C0] __dev_queue_xmit+0xc40/0x3118 [ 740.153829][ C0] tipc_l2_send_msg+0x29c/0x35c [ 740.154598][ C0] tipc_bearer_xmit_skb+0x240/0x380 [ 740.155381][ C0] __tipc_nl_bearer_enable+0xe14/0x114c [ 740.156301][ C0] tipc_nl_compat_doit+0x33c/0x554 [ 740.157111][ C0] tipc_nl_compat_recv+0x67c/0x984 [ 740.157952][ C0] genl_family_rcv_msg_doit+0x204/0x308 [ 740.158846][ C0] genl_rcv_msg+0x44c/0x640 [ 740.159680][ C0] netlink_rcv_skb+0x218/0x3e8 [ 740.160490][ C0] genl_rcv+0x38/0x50 [ 740.161170][ C0] netlink_unicast+0x60c/0x814 [ 740.161974][ C0] netlink_sendmsg+0x6f4/0x9c0 [ 740.162824][ C0] ____sys_sendmsg+0x5c8/0x938 [ 740.163610][ C0] __sys_sendmsg+0x288/0x374 [ 740.164428][ C0] __arm64_sys_sendmsg+0x80/0x94 [ 740.165250][ C0] invoke_syscall+0x98/0x2b4 [ 740.166001][ C0] el0_svc_common+0x138/0x258 [ 740.166800][ C0] do_el0_svc+0x58/0x130 [ 740.167541][ C0] el0_svc+0x58/0x128 [ 740.168217][ C0] el0t_64_sync_handler+0x84/0xf0 [ 740.169119][ C0] el0t_64_sync+0x18c/0x190 [ 740.169903][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 740.171012][ C0] CPU: 0 PID: 16567 Comm: syz.0.4003 Tainted: G L syzkaller #0 [ 740.172534][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 740.174206][ C0] Call trace: [ 740.174717][ C0] dump_backtrace+0x1c0/0x1ec [ 740.175489][ C0] show_stack+0x2c/0x3c [ 740.176222][ C0] __dump_stack+0x30/0x40 [ 740.176932][ C0] dump_stack_lvl+0xf4/0x15c [ 740.177676][ C0] dump_stack+0x1c/0x5c [ 740.178351][ C0] panic+0x2f8/0x7ac [ 740.178963][ C0] softlockup_fn+0x0/0x120 [ 740.179658][ C0] __hrtimer_run_queues+0x408/0xc3c [ 740.180446][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 740.181253][ C0] arch_timer_handler_virt+0x74/0x88 [ 740.182187][ C0] handle_percpu_devid_irq+0x174/0x34c [ 740.183181][ C0] generic_handle_domain_irq+0xe0/0x140 [ 740.184116][ C0] gic_handle_irq+0x70/0x1d4 [ 740.184958][ C0] call_on_irq_stack+0x30/0x48 [ 740.185778][ C0] do_interrupt_handler+0xd4/0x138 [ 740.186638][ C0] el1_interrupt+0x34/0x54 [ 740.187459][ C0] el1h_64_irq_handler+0x18/0x24 [ 740.188324][ C0] el1h_64_irq+0x64/0x68 [ 740.189085][ C0] cake_heapify+0xb8/0x530 [ 740.189838][ C0] cake_enqueue+0x3464/0x680c [ 740.190606][ C0] netem_dequeue+0xa78/0x1080 [ 740.191464][ C0] __qdisc_run+0x1cc/0x133c [ 740.192246][ C0] __dev_queue_xmit+0xc40/0x3118 [ 740.193078][ C0] tipc_l2_send_msg+0x29c/0x35c [ 740.193847][ C0] tipc_bearer_xmit_skb+0x240/0x380 [ 740.194756][ C0] __tipc_nl_bearer_enable+0xe14/0x114c [ 740.195721][ C0] tipc_nl_compat_doit+0x33c/0x554 [ 740.196569][ C0] tipc_nl_compat_recv+0x67c/0x984 [ 740.197395][ C0] genl_family_rcv_msg_doit+0x204/0x308 [ 740.198256][ C0] genl_rcv_msg+0x44c/0x640 [ 740.198936][ C0] netlink_rcv_skb+0x218/0x3e8 [ 740.199673][ C0] genl_rcv+0x38/0x50 [ 740.200251][ C0] netlink_unicast+0x60c/0x814 [ 740.200935][ C0] netlink_sendmsg+0x6f4/0x9c0 [ 740.201688][ C0] ____sys_sendmsg+0x5c8/0x938 [ 740.202486][ C0] __sys_sendmsg+0x288/0x374 [ 740.203249][ C0] __arm64_sys_sendmsg+0x80/0x94 [ 740.204082][ C0] invoke_syscall+0x98/0x2b4 [ 740.204838][ C0] el0_svc_common+0x138/0x258 [ 740.205622][ C0] do_el0_svc+0x58/0x130 [ 740.206371][ C0] el0_svc+0x58/0x128 [ 740.207010][ C0] el0t_64_sync_handler+0x84/0xf0 [ 740.207810][ C0] el0t_64_sync+0x18c/0x190 [ 740.208567][ C0] SMP: stopping secondary CPUs [ 740.209355][ C0] Kernel Offset: disabled [ 740.210042][ C0] CPU features: 0x080000,000f0097,a65bfea7 [ 740.210944][ C0] Memory Limit: none [ 740.222787][ C0] [ 740.223157][ C0] ================================ [ 740.223982][ C0] WARNING: inconsistent lock state [ 740.224791][ C0] syzkaller #0 Tainted: G L [ 740.225761][ C0] -------------------------------- [ 740.226592][ C0] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 740.227750][ C0] syz.0.4003/16567 [HC1[1]:SC0[2]:HE0:SE0] takes: [ 740.228864][ C0] ffff8000152612f8 (efi_rt_lock){?...}-{2:2}, at: virt_efi_set_variable_nonblocking+0x74/0x16c [ 740.230565][ C0] {HARDIRQ-ON-W} state was registered at: [ 740.231428][ C0] lock_acquire+0x20c/0x63c [ 740.232141][ C0] _raw_spin_lock+0x54/0x6c [ 740.232840][ C0] efi_call_rts+0x3c8/0x9d8 [ 740.233634][ C0] process_one_work+0x7f8/0x13a4 [ 740.234453][ C0] worker_thread+0x8c4/0xfec [ 740.235272][ C0] kthread+0x250/0x2d8 [ 740.235970][ C0] ret_from_fork+0x10/0x20 [ 740.236756][ C0] irq event stamp: 1056815 [ 740.237532][ C0] hardirqs last enabled at (1056814): [] timekeeping_get_ns+0x124/0x3b4 [ 740.239262][ C0] hardirqs last disabled at (1056815): [] el1_interrupt+0x24/0x54 [ 740.240803][ C0] softirqs last enabled at (600): [] handle_softirqs+0xaec/0xc60 [ 740.242389][ C0] softirqs last disabled at (620): [] local_bh_disable+0x10/0x34 [ 740.244050][ C0] [ 740.244050][ C0] other info that might help us debug this: [ 740.245393][ C0] Possible unsafe locking scenario: [ 740.245393][ C0] [ 740.246536][ C0] CPU0 [ 740.247059][ C0] ---- [ 740.247631][ C0] lock(efi_rt_lock); [ 740.248328][ C0] [ 740.248888][ C0] lock(efi_rt_lock); [ 740.249559][ C0] [ 740.249559][ C0] *** DEADLOCK *** [ 740.249559][ C0] [ 740.250898][ C0] 8 locks held by syz.0.4003/16567: [ 740.251753][ C0] #0: ffff8000178ecc50 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 740.253103][ C0] #1: ffff8000178eca68 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0xec/0x640 [ 740.254569][ C0] #2: ffff800017890988 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 740.256023][ C0] #3: ffff8000153f72c0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 740.257584][ C0] #4: ffff8000153f7320 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 740.259277][ C0] #5: ffff0000d4752108 (&sch->root_lock_key#1393){+...}-{2:2}, at: __dev_queue_xmit+0x9a4/0x3118 [ 740.261107][ C0] #6: ffff8000153f72c0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 740.262674][ C0] #7: ffff8000172c8648 (&psinfo->buf_lock){....}-{2:2}, at: pstore_dump+0x180/0x820 [ 740.264318][ C0] [ 740.264318][ C0] stack backtrace: [ 740.265261][ C0] CPU: 0 PID: 16567 Comm: syz.0.4003 Tainted: G L syzkaller #0 [ 740.266811][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 740.268390][ C0] Call trace: [ 740.268905][ C0] dump_backtrace+0x1c0/0x1ec [ 740.269700][ C0] show_stack+0x2c/0x3c [ 740.270326][ C0] __dump_stack+0x30/0x40 [ 740.271072][ C0] dump_stack_lvl+0xf4/0x15c [ 740.271809][ C0] dump_stack+0x1c/0x5c [ 740.272542][ C0] print_usage_bug+0x4c0/0x6d8 [ 740.273334][ C0] mark_lock_irq+0x850/0xab0 [ 740.274181][ C0] mark_lock+0x224/0x320 [ 740.274895][ C0] __lock_acquire+0xa4c/0x6800 [ 740.275691][ C0] lock_acquire+0x20c/0x63c [ 740.276469][ C0] _raw_spin_lock+0x54/0x6c [ 740.277247][ C0] virt_efi_set_variable_nonblocking+0x74/0x16c [ 740.278327][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 740.279278][ C0] efi_pstore_write+0x298/0x39c [ 740.280065][ C0] pstore_dump+0x5b0/0x820 [ 740.280731][ C0] kmsg_dump+0x170/0x260 [ 740.281455][ C0] panic+0x384/0x7ac [ 740.282126][ C0] softlockup_fn+0x0/0x120 [ 740.282823][ C0] __hrtimer_run_queues+0x408/0xc3c [ 740.283687][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 740.284488][ C0] arch_timer_handler_virt+0x74/0x88 [ 740.285396][ C0] handle_percpu_devid_irq+0x174/0x34c [ 740.286335][ C0] generic_handle_domain_irq+0xe0/0x140 [ 740.287358][ C0] gic_handle_irq+0x70/0x1d4 [ 740.288146][ C0] call_on_irq_stack+0x30/0x48 [ 740.288911][ C0] do_interrupt_handler+0xd4/0x138 [ 740.289791][ C0] el1_interrupt+0x34/0x54 [ 740.290512][ C0] el1h_64_irq_handler+0x18/0x24 [ 740.291374][ C0] el1h_64_irq+0x64/0x68 [ 740.292025][ C0] cake_heapify+0xb8/0x530 [ 740.292777][ C0] cake_enqueue+0x3464/0x680c [ 740.293564][ C0] netem_dequeue+0xa78/0x1080 [ 740.294302][ C0] __qdisc_run+0x1cc/0x133c [ 740.295145][ C0] __dev_queue_xmit+0xc40/0x3118 [ 740.296004][ C0] tipc_l2_send_msg+0x29c/0x35c [ 740.296846][ C0] tipc_bearer_xmit_skb+0x240/0x380 [ 740.297712][ C0] __tipc_nl_bearer_enable+0xe14/0x114c [ 740.298634][ C0] tipc_nl_compat_doit+0x33c/0x554 [ 740.299561][ C0] tipc_nl_compat_recv+0x67c/0x984 [ 740.300437][ C0] genl_family_rcv_msg_doit+0x204/0x308 [ 740.301325][ C0] genl_rcv_msg+0x44c/0x640 [ 740.302033][ C0] netlink_rcv_skb+0x218/0x3e8 [ 740.302831][ C0] genl_rcv+0x38/0x50 [ 740.303475][ C0] netlink_unicast+0x60c/0x814 [ 740.304262][ C0] netlink_sendmsg+0x6f4/0x9c0 [ 740.305021][ C0] ____sys_sendmsg+0x5c8/0x938 [ 740.305811][ C0] __sys_sendmsg+0x288/0x374 [ 740.306547][ C0] __arm64_sys_sendmsg+0x80/0x94 [ 740.307342][ C0] invoke_syscall+0x98/0x2b4 [ 740.308139][ C0] el0_svc_common+0x138/0x258 [ 740.309003][ C0] do_el0_svc+0x58/0x130 [ 740.309709][ C0] el0_svc+0x58/0x128 [ 740.310459][ C0] el0t_64_sync_handler+0x84/0xf0 [ 740.311311][ C0] el0t_64_sync+0x18c/0x190 [ 740.546838][ C0] Rebooting in 86400 seconds..