last executing test programs: 2m6.037733615s ago: executing program 0 (id=4248): socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10160) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200), 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 2m5.406633066s ago: executing program 0 (id=4250): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) 2m4.004577584s ago: executing program 0 (id=4255): io_uring_setup(0x1f1c, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r4 = socket(0x2a, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000000)="f20000000000008508003e6e8f86a32c824a706b81acdfadc6d1", 0x1a, 0x4000053, &(0x7f0000000200)={0x11, 0x8, r6, 0x1, 0x40, 0x6, @broadcast}, 0x14) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) socket$nl_audit(0x10, 0x3, 0x9) 2m2.533226359s ago: executing program 0 (id=4257): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000002200)={0x3, 0x0, [{0x9000, 0x15, &(0x7f0000002100)=""/21}, {0x70000, 0x75, &(0x7f0000002140)=""/117}, {0x26000, 0x0, 0x0}]}) 2m1.783908094s ago: executing program 0 (id=4261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m1.560395192s ago: executing program 0 (id=4266): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) 1m46.365507038s ago: executing program 32 (id=4266): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) 9.921728766s ago: executing program 4 (id=4601): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090925bd7000ffdbdf2518000000080003", @ANYRES32=r3, @ANYBLOB="04003080200030"], 0x40}, 0x1, 0x0, 0x0, 0x2840}, 0x40000) 9.592328217s ago: executing program 4 (id=4604): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mkdir(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x20) 7.261729628s ago: executing program 5 (id=4612): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 7.105453342s ago: executing program 5 (id=4613): semget$private(0x0, 0x2, 0x180) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002940), 0x0, 0x2, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x4) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) socket$rxrpc(0x21, 0x2, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$tipc(0x1e, 0x5, 0x0) 7.0045419s ago: executing program 4 (id=4615): sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x140a, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x8001) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 6.744019852s ago: executing program 3 (id=4616): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}, 0x80000001}], 0x1, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001840)="da", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x2, 0x4040081) 5.854054473s ago: executing program 1 (id=4617): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295eb7", 0x47}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2ab5eea4b2ec5", 0x34}], 0x2, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7844d9e236c35781da53eb30cd67912e5b4138fab89f32de1cd2edde4efa562", 0x30}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x5, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff08"], 0x6f4}}, 0x0) 5.122488501s ago: executing program 1 (id=4619): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0xb, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x10c, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0x2, 0x3}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.940060368s ago: executing program 1 (id=4620): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0xb, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.912482627s ago: executing program 3 (id=4622): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0xb, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf2501000000", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x10c, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0x2, 0x3}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.798713216s ago: executing program 1 (id=4623): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x1d, 0x80802, 0x6) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) creat(&(0x7f0000000c00)='./file0\x00', 0x6) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 4.750505804s ago: executing program 3 (id=4624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40081}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @mcast1, 0x9, 0x4}, 0x80, &(0x7f0000000400)=[{&(0x7f00000009c0)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}, {&(0x7f0000000200)="7ce6", 0x2}], 0x2}, 0x0) 4.501493609s ago: executing program 3 (id=4626): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f0", 0x4f}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295eb7", 0x47}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2ab5eea4b2ec5", 0x34}], 0x2, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7844d9e236c35781da53eb30cd67912e5b4138fab89f32de1cd2edde4", 0x2d}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x5, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.624318773s ago: executing program 3 (id=4627): eventfd(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x80000000000000a, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, &(0x7f0000000140)={'enc=', 'oaep', ' hash=', {'blake2s-160\x00'}}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r3, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f00000014c0)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 3.564466115s ago: executing program 4 (id=4628): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="0100feffffff00000000010000"], 0x3c}}, 0x20000000) 3.562210109s ago: executing program 1 (id=4629): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) move_pages(0x0, 0x16, &(0x7f0000000000)=[&(0x7f0000ff4000/0x1000)=nil], &(0x7f0000000240), 0xffffffffffffffff, 0x2) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000001a700)={0x0, 0x0, &(0x7f0000019640), 0x0, 0x0, 0x0}) bind$inet(0xffffffffffffffff, &(0x7f0000019340)={0x2, 0xffff, @rand_addr=0x64010100}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)=0x4, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000019380)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="8500000005000000070000000000000095000000000000005bee1ea01c7814c00980e99a5df1f0614e1942612258708ff9dfaef11bd5504710e1d85587ee4727c9802ba8f5bd83e27c5585207b4e19cee40a9cab915f98eeb1e5a448c0d934224a13ed92a919f303d06b068331680000000000"], &(0x7f0000019300)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x14, &(0x7f00000000c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x0, 0x5}, 0x10}, 0x94) mount(&(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='ext4\x00', 0x8010, 0x0) 3.349506179s ago: executing program 2 (id=4630): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, 0x0, 0x0) 3.337659989s ago: executing program 5 (id=4631): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0xb, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x10c, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0x2, 0x3}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.553924011s ago: executing program 4 (id=4632): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}, 0x80000001}], 0x1, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001840)="da", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x2, 0x4040081) 2.406617754s ago: executing program 3 (id=4633): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0x13}, 0x40, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x3, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x1, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x7f, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x7df7, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x102, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343d, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 2.256435571s ago: executing program 2 (id=4634): ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x4000040) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknod(&(0x7f0000000140)='./file1/file3\x00', 0x10, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000280)='\xc2\xff\xfc\xebti\xe2\x16F\xb9\xaa\x8f\x1f\xfctR_\xceKY\"\x1aw,9\xb9KwUh@\xb32r\xe6\x8e\xa3\x97U\xcd\x11\xa2\xfe53\xcc,\xd9\xa9\xee\x96\x98\f\x1b\xd5\xd9\xd0Z\xab\xca\xf6\xdbU\x96\x85z\\C9\xf5\x8d\x8c\xec\xaa\x01\xec\x0fV\"a\xd1\xfd\x82TY\xc4\x12\x18\xf6\xb5\xa2\xf2\x1d8\xecgK\xe7\xca7\x99f0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa4, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0x6}, {0xffe0, 0xa}, {0x1, 0x8}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1.388977788s ago: executing program 2 (id=4637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) 1.328283651s ago: executing program 4 (id=4638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000010405000000479d90a6e2840cedac3a00000000000000000000060006400003"], 0x24}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000002c0)=0x2000041) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02", 0x3}], 0x1, 0x0, 0x0) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f00000000c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r7) r8 = socket(0x10, 0x809, 0x8) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a500000000"], &(0x7f0000000300)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r9, 0x104, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x8, 0x0, 0x0}}, 0x10) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000580)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x6, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) 1.226487353s ago: executing program 2 (id=4639): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x3}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 1.022434199s ago: executing program 1 (id=4640): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) syz_open_dev$video4linux(0x0, 0x0, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000300)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440), 0x0, 0x4, 0x9}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000800)={r4, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44094}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000000c0)={0x2, 'nr0\x00', 0x4}, 0x18) r8 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$IMDELTIMER(r8, 0x80044941, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x4, 0x4) splice(r2, 0x0, r1, 0x0, 0xfea8, 0xa) 114.174532ms ago: executing program 5 (id=4641): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x1, 0x0, &(0x7f0000001500)=""/74, 0x0, 0x4}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) r1 = eventfd2(0xec, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ppoll(&(0x7f0000000840)=[{r1, 0x400}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 48.902521ms ago: executing program 2 (id=4642): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="0100feffffff00000000010000"], 0x3c}}, 0x20000000) 0s ago: executing program 2 (id=4643): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) kernel console output (not intermixed with test programs): im netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.434318][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.434359][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.816487][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.816510][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.984801][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.984825][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.991219][T16122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 859.161633][T16132] netlink: 'syz.4.3049': attribute type 1 has an invalid length. [ 859.471032][T16141] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 859.471062][T16141] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 860.037875][T16152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3164'. [ 860.037900][T16152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3164'. [ 860.152181][T13087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 860.178573][T13087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 860.181170][T13087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 860.182895][T13087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 860.183970][T13087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 860.651992][T16170] netlink: 'syz.3.3169': attribute type 1 has an invalid length. [ 860.820012][ T5793] syz_tun (unregistering): left allmulticast mode [ 860.921823][T16166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 860.973080][T16170] 8021q: adding VLAN 0 to HW filter on device bond1 [ 861.306179][T16192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3175'. [ 861.306208][T16192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3175'. [ 861.460079][ T1118] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.784499][ T1118] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.953050][T16204] syzkaller0: entered promiscuous mode [ 861.953091][T16204] syzkaller0: entered allmulticast mode [ 862.277725][T13087] Bluetooth: hci1: command tx timeout [ 862.379358][T16153] chnl_net:caif_netlink_parms(): no params data found [ 862.442500][ T1118] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.537621][T16235] netlink: 'syz.4.3183': attribute type 1 has an invalid length. [ 862.772346][ T1118] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.846209][T16245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3186'. [ 862.846237][T16245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3186'. [ 862.940304][T16153] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.940497][T16153] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.940736][T16153] bridge_slave_0: entered allmulticast mode [ 862.944125][T16153] bridge_slave_0: entered promiscuous mode [ 862.977158][T16153] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.977400][T16153] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.977672][T16153] bridge_slave_1: entered allmulticast mode [ 862.980760][T16153] bridge_slave_1: entered promiscuous mode [ 863.067949][T16153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 863.072929][T16153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.148043][T16153] team0: Port device team_slave_0 added [ 863.153256][T16153] team0: Port device team_slave_1 added [ 864.346661][T13087] Bluetooth: hci1: command tx timeout [ 864.403996][T16153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 864.404016][T16153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.404046][T16153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 864.429482][T16153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 864.429501][T16153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.429527][T16153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 864.614952][T16153] hsr_slave_0: entered promiscuous mode [ 864.636022][T16153] hsr_slave_1: entered promiscuous mode [ 864.671136][T16153] debugfs: 'hsr0' already exists in 'hsr' [ 864.671158][T16153] Cannot create hsr debugfs directory [ 865.009685][T16282] netlink: 'syz.0.3195': attribute type 1 has an invalid length. [ 865.144336][T16287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3197'. [ 865.207157][T16282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 865.376132][T16291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3198'. [ 865.376160][T16291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3198'. [ 865.429946][T16295] netlink: 'syz.0.3200': attribute type 1 has an invalid length. [ 865.532071][T16295] 8021q: adding VLAN 0 to HW filter on device bond2 [ 865.533729][ T1118] bridge_slave_1: left allmulticast mode [ 865.533841][ T1118] bridge_slave_1: left promiscuous mode [ 865.534208][ T1118] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.598118][ T1118] bridge_slave_0: left allmulticast mode [ 865.598141][ T1118] bridge_slave_0: left promiscuous mode [ 865.598412][ T1118] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.426686][T13087] Bluetooth: hci1: command tx timeout [ 866.459461][ T1118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 866.517226][ T1118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 866.538405][ T1118] bond0 (unregistering): Released all slaves [ 866.545131][ T1118] bond1 (unregistering): Released all slaves [ 866.564295][ T1118] bond2 (unregistering): Released all slaves [ 866.581280][ T1118] bond3 (unregistering): Released all slaves [ 866.798225][T16294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.850738][T16295] bond2: (slave geneve2): making interface the new active one [ 866.853964][T16295] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 868.109283][ T1118] hsr_slave_0: left promiscuous mode [ 868.110716][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 868.110736][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 868.157611][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 868.157642][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 868.222719][ T1118] veth1_macvtap: left promiscuous mode [ 868.222875][ T1118] veth0_macvtap: left promiscuous mode [ 868.223047][ T1118] veth1_vlan: left promiscuous mode [ 868.223156][ T1118] veth0_vlan: left promiscuous mode [ 868.439911][T16300] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 868.521837][T13087] Bluetooth: hci1: command tx timeout [ 868.870047][T16341] netlink: 'syz.0.3209': attribute type 1 has an invalid length. [ 869.237797][ T1118] team0 (unregistering): Port device team_slave_1 removed [ 869.297599][ T1118] team0 (unregistering): Port device team_slave_0 removed [ 869.716559][T16341] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 869.721155][T16349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3211'. [ 869.721185][T16349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3211'. [ 870.072997][T16354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.659320][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.866820][T16384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 871.429643][T16400] netlink: 'syz.2.3221': attribute type 1 has an invalid length. [ 871.542283][T16400] 8021q: adding VLAN 0 to HW filter on device bond3 [ 871.785744][T16406] bond3: (slave veth5): Enslaving as an active interface with a down link [ 872.057969][ T1118] IPVS: stop unused estimator thread 0... [ 872.081304][T16153] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 872.613027][T16413] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.660351][T16153] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 872.696018][T16424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.742433][T16153] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 873.048941][T16413] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.107566][T16153] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 873.442626][T16413] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.687133][ T5879] IPVS: starting estimator thread 0... [ 873.688724][T16463] netlink: 'syz.4.3234': attribute type 1 has an invalid length. [ 873.776574][T16464] IPVS: using max 7 ests per chain, 16800 per kthread [ 873.819745][T16413] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.952966][T16463] netlink: 'syz.4.3234': attribute type 1 has an invalid length. [ 874.359376][T16153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.464200][ T116] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.520107][ T1336] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.674691][T16153] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.675120][ T116] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.757436][ T1118] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.791442][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.806567][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 874.872234][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.880520][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 874.976161][T16493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 876.895651][T16153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 876.904576][T16523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3247'. [ 877.136483][T16534] bridge1: port 1(bond2) entered blocking state [ 877.136787][T16534] bridge1: port 1(bond2) entered disabled state [ 877.141254][T16534] bond2: entered allmulticast mode [ 877.145744][T16534] bond2: entered promiscuous mode [ 877.363378][T16153] veth0_vlan: entered promiscuous mode [ 877.390715][T16153] veth1_vlan: entered promiscuous mode [ 877.491344][T16547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3252'. [ 877.524366][T16153] veth0_macvtap: entered promiscuous mode [ 877.561565][T16153] veth1_macvtap: entered promiscuous mode [ 877.641597][T16153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 877.668431][T16547] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.670338][T16547] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.739291][T16153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 877.788904][ T1372] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.807614][ T1372] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.808368][ T1372] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.828181][ T1372] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.154552][T16556] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.172810][T16570] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3258'. [ 878.490978][T16556] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.549651][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.549677][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.950987][T16556] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.037246][ T1372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.037272][ T1372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.141418][T16556] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.489738][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.544423][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.544479][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.582570][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.137420][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 880.155982][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 880.164101][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 880.182599][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 880.185016][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 880.540135][T16625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3270'. [ 881.908637][T16658] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 882.472354][T13087] Bluetooth: hci0: command tx timeout [ 882.885032][T16618] chnl_net:caif_netlink_parms(): no params data found [ 883.243419][T16618] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.243659][T16618] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.243885][T16618] bridge_slave_0: entered allmulticast mode [ 883.301571][T16618] bridge_slave_0: entered promiscuous mode [ 883.305656][T16618] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.305896][T16618] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.306134][T16618] bridge_slave_1: entered allmulticast mode [ 883.350351][T16618] bridge_slave_1: entered promiscuous mode [ 883.499158][T16618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.513577][T16618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.515837][T13087] Bluetooth: hci0: command tx timeout [ 884.920913][T16618] team0: Port device team_slave_0 added [ 884.924953][T16618] team0: Port device team_slave_1 added [ 884.989817][T16618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.989837][T16618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.989866][T16618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.994156][T16618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.994175][T16618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.994205][T16618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.181466][T16618] hsr_slave_0: entered promiscuous mode [ 885.183115][T16618] hsr_slave_1: entered promiscuous mode [ 885.184201][T16618] debugfs: 'hsr0' already exists in 'hsr' [ 885.184226][T16618] Cannot create hsr debugfs directory [ 885.924232][T16727] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 886.331593][T16618] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.586423][T13087] Bluetooth: hci0: command tx timeout [ 886.843922][T16618] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.134724][T16618] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.661050][T16767] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 888.410873][T16618] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.666391][T13087] Bluetooth: hci0: command tx timeout [ 888.721464][T16776] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3308'. [ 889.305753][T16618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 889.514354][T16618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 890.080584][T16618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 890.617325][T16618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 890.772711][T16815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3318'. [ 890.922957][T16822] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3319'. [ 891.303159][T16618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 891.387046][T16618] 8021q: adding VLAN 0 to HW filter on device team0 [ 891.411744][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.430311][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 891.455977][ T1372] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.471617][ T1372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 892.336258][T16618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 892.450743][T16618] veth0_vlan: entered promiscuous mode [ 892.479154][T16618] veth1_vlan: entered promiscuous mode [ 892.593419][T16618] veth0_macvtap: entered promiscuous mode [ 892.615248][T16618] veth1_macvtap: entered promiscuous mode [ 893.715107][T16618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 893.849380][T16618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 893.899943][ T1118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.901425][ T1118] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.904036][ T1118] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.941416][ T1118] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.880723][T16865] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 897.074145][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.074169][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.213570][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.213594][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.745667][T16980] syz_tun: entered allmulticast mode [ 898.903537][T16978] dvmrp8: entered allmulticast mode [ 898.968494][T16976] syz_tun: left allmulticast mode [ 901.304225][T17038] zonefs (nullb0) ERROR: Not a zoned block device [ 901.756416][T13087] block nbd4: Receive control failed (result -32) [ 903.739407][T17063] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 904.049421][T17063] zonefs (nullb0) ERROR: Not a zoned block device [ 908.186590][T17085] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 908.274983][T17103] orangefs_mount: mount request failed with -4 [ 910.959130][T17146] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 911.265995][T17154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3409'. [ 912.891208][T17200] zonefs (nullb0) ERROR: Not a zoned block device [ 914.893247][T17211] orangefs_mount: mount request failed with -4 [ 915.959573][T17214] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.235439][T17227] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.573124][T17214] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.658967][T17227] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.879943][T17214] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.971714][T17227] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.672401][T17260] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 918.526910][T17214] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.628994][T17227] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.666393][T13087] Bluetooth: hci5: command 0x0406 tx timeout [ 918.984454][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.076393][T16897] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.213110][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.213888][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.301654][ T68] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.303007][ T68] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.303230][T17285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 919.303462][T17285] batadv_slave_0: entered promiscuous mode [ 919.572712][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.585714][T17287] mkiss: ax0: crc mode is auto. [ 919.648016][T17290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.985306][T17301] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 920.821305][T16897] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.672107][T17346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.587707][T17354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3463'. [ 931.643286][T17359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3463'. [ 931.658696][T17354] syz_tun: entered promiscuous mode [ 931.658990][T17354] macvtap1: entered promiscuous mode [ 931.659126][T17354] macvtap1: entered allmulticast mode [ 931.659135][T17354] syz_tun: entered allmulticast mode [ 931.757953][T17359] syz_tun: left allmulticast mode [ 931.758245][T17359] syz_tun: left promiscuous mode [ 931.964683][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.038783][T17377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3470'. [ 932.141873][T17377] 8021q: adding VLAN 0 to HW filter on device bond3 [ 932.390265][T17393] netlink: 'syz.0.3474': attribute type 6 has an invalid length. [ 936.116387][T17447] zonefs (nullb0) ERROR: Not a zoned block device [ 937.086548][T17449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 941.077885][T17473] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3498'. [ 941.082341][T17473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3498'. [ 942.536855][ T5871] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 942.717362][ T5871] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 942.720971][ T5871] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 942.721005][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 942.721029][ T5871] usb 4-1: Product: syz [ 942.721045][ T5871] usb 4-1: Manufacturer: syz [ 942.721061][ T5871] usb 4-1: SerialNumber: syz [ 943.052231][ T5871] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 943.272588][ C1] usblp0: nonzero write bulk status received: -71 [ 943.304726][T15553] usb 4-1: USB disconnect, device number 3 [ 943.341963][T15553] usblp0: removed [ 943.965021][T17495] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.022468][T17491] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3501'. [ 944.637835][T17502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 944.712088][T17495] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.922225][T17495] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.080685][T17495] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.258823][T17529] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3510'. [ 945.259467][T17529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3510'. [ 945.392164][ T1118] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.412049][ T1118] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.434199][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.477951][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.825673][T17544] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3515'. [ 946.366154][T17555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.577593][T17571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3521'. [ 946.797966][T17577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3524'. [ 948.467079][T17599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.945048][T17609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3534'. [ 950.013824][ T5801] Bluetooth: hci4: command 0x0406 tx timeout [ 950.278979][T17619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3537'. [ 950.279017][T17619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3537'. [ 950.684658][T17633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 950.937062][T17618] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3536'. [ 958.408839][T17653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3547'. [ 961.552180][T17672] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3551'. [ 961.552217][T17672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3551'. [ 961.808531][T17688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3558'. [ 961.887231][T17695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 961.888202][T17695] batadv_slave_0: entered promiscuous mode [ 962.857058][T17691] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 962.976543][T13087] Bluetooth: hci3: command 0x0406 tx timeout [ 964.344350][ T5858] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 964.678943][ T5858] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 964.682120][ T5858] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 964.682151][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 964.682173][ T5858] usb 1-1: Product: syz [ 964.682188][ T5858] usb 1-1: Manufacturer: syz [ 964.682212][ T5858] usb 1-1: SerialNumber: syz [ 964.967020][ T5858] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 965.250039][ C1] usblp0: nonzero write bulk status received: -71 [ 965.252320][T15553] usb 1-1: USB disconnect, device number 10 [ 965.287632][T15553] usblp0: removed [ 965.305941][T17733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3570'. [ 965.362492][T17738] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3573'. [ 966.969208][T17738] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.241615][T17773] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3578'. [ 967.554268][T17738] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.597012][T17781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 967.693978][T17785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3584'. [ 967.864325][T17738] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.353611][T17787] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.319162][T17738] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.852367][T17811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3591'. [ 970.852397][T17811] netlink: 'syz.3.3591': attribute type 2 has an invalid length. [ 971.285850][T17787] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.023720][T17832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3596'. [ 972.075303][T17833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3596'. [ 972.293377][T17787] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.481422][T17837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 973.481652][T17837] batadv_slave_0: entered promiscuous mode [ 973.632326][T17846] binder: 17845:17846 ioctl 4018620d 0 returned -22 [ 973.660562][ T2993] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.173999][T17861] binder: 17845:17861 ioctl b704 0 returned -22 [ 974.339665][T17787] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.359143][T17859] genirq: Flags mismatch irq 4. 00202000 (pcmmio) vs. 00202080 (ttyS0) [ 974.613850][T17854] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.629203][T17854] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.065830][T17854] bridge_slave_0: left allmulticast mode [ 975.065852][T17854] bridge_slave_0: left promiscuous mode [ 975.066000][T17854] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.164258][T17854] bridge_slave_1: left allmulticast mode [ 975.164281][T17854] bridge_slave_1: left promiscuous mode [ 975.164425][T17854] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.257340][T17854] bond0: (slave bond_slave_0): Releasing backup interface [ 975.337922][T17854] bond0: (slave bond_slave_1): Releasing backup interface [ 975.397701][T17854] team0: Port device team_slave_0 removed [ 975.437473][T17854] team0: Port device team_slave_1 removed [ 975.441160][T17854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 975.510587][T17854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 975.576808][T17854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 975.579502][T17854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 975.634492][T17854] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 975.704822][ T116] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.741186][T16897] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.788727][T17868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3604'. [ 975.788752][T17868] netlink: 'syz.0.3604': attribute type 2 has an invalid length. [ 975.788767][T17868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3604'. [ 975.788975][ T116] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.911081][T17871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3605'. [ 975.915059][T17871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3605'. [ 976.015319][T17878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 976.049666][T17877] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3608'. [ 976.053133][T17877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3608'. [ 976.323013][ T6446] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.337320][ T6446] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.444797][T17882] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3609'. [ 976.444852][T17882] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 977.072711][ T6446] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.127000][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.284533][T17887] binder: 17885:17887 ioctl 4018620d 0 returned -22 [ 977.351066][T17894] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 977.671279][T17897] binder: 17885:17897 ioctl b704 0 returned -22 [ 978.374013][T17911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3618'. [ 978.374039][T17911] netlink: 'syz.1.3618': attribute type 2 has an invalid length. [ 978.374054][T17911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3618'. [ 978.494146][T17920] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3621'. [ 978.494811][T17920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3621'. [ 979.182817][T17931] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3624'. [ 979.414296][T17935] syz_tun: entered promiscuous mode [ 979.414519][T17935] macvtap1: entered promiscuous mode [ 979.414767][T17935] macvtap1: entered allmulticast mode [ 979.414782][T17935] syz_tun: entered allmulticast mode [ 979.478750][T17940] Bluetooth: MGMT ver 1.23 [ 979.997211][T17939] syz_tun: left allmulticast mode [ 979.999233][T17939] syz_tun: left promiscuous mode [ 980.206794][T17948] netlink: 'syz.0.3630': attribute type 1 has an invalid length. [ 980.291582][T17948] 8021q: adding VLAN 0 to HW filter on device bond4 [ 984.982717][T17995] binder: 17984:17995 ioctl 4018620d 0 returned -22 [ 985.006535][T17990] __nla_validate_parse: 4 callbacks suppressed [ 985.006552][T17990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3641'. [ 985.016882][T17996] netlink: 'syz.4.3643': attribute type 1 has an invalid length. [ 985.051374][T17990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3641'. [ 985.085478][T18003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3643'. [ 985.117962][T17996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 985.119371][T18004] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 986.369900][T18008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3646'. [ 986.531976][T18008] hsr_slave_1 (unregistering): left promiscuous mode [ 986.831639][T18034] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3651'. [ 986.906651][T13087] Bluetooth: hci1: command 0x0406 tx timeout [ 986.913218][T18028] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.142073][T18028] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.353354][T18028] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.545869][T18028] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.099770][T18067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3662'. [ 988.274114][ T68] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.317960][ T68] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.341798][ T1372] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.425357][ T68] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.589278][T18084] misc userio: The device must be registered before sending interrupts [ 988.614458][T18086] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3666'. [ 989.508153][T18095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3669'. [ 989.510147][T18095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3669'. [ 991.366508][T18103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3673'. [ 993.299759][T18134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3681'. [ 993.391088][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.735832][T18138] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3682'. [ 993.789578][T18140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3682'. [ 994.322946][T18158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3686'. [ 995.590699][T18178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3694'. [ 995.652549][T18179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3694'. [ 995.801546][T18184] binder: 18183:18184 ioctl 4018620d 0 returned -22 [ 997.939587][T18201] netlink: 'syz.2.3699': attribute type 21 has an invalid length. [ 997.939615][T18201] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3699'. [ 997.991673][T18204] netlink: 'syz.2.3699': attribute type 1 has an invalid length. [ 997.991697][T18204] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3699'. [ 998.846190][T18213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3702'. [ 1000.049496][T18192] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.050557][T18192] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.246417][T18225] misc userio: The device must be registered before sending interrupts [ 1002.293168][T18192] bridge_slave_0: left allmulticast mode [ 1002.293191][T18192] bridge_slave_0: left promiscuous mode [ 1002.293360][T18192] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.342329][T18192] bridge_slave_1: left allmulticast mode [ 1002.342351][T18192] bridge_slave_1: left promiscuous mode [ 1002.342499][T18192] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.559793][T18192] bond0: (slave bond_slave_0): Releasing backup interface [ 1002.653843][T18192] bond0: (slave bond_slave_1): Releasing backup interface [ 1002.742133][T18192] team0: Port device team_slave_0 removed [ 1002.898383][T18192] team0: Port device team_slave_1 removed [ 1002.929337][T18192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.951106][T18192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1002.953375][T18192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.983569][T18192] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1003.136408][T18201] netlink: 'syz.2.3699': attribute type 4 has an invalid length. [ 1003.136436][T18201] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3699'. [ 1003.148312][T18208] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1003.308054][T18245] binder: 18244:18245 ioctl 4018620d 0 returned -22 [ 1003.365385][T18250] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1003.427282][T18252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3714'. [ 1003.578668][T18255] binder: 18244:18255 ioctl b704 0 returned -22 [ 1008.975435][T18289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3725'. [ 1009.738184][T18289] bridge1: port 1(bond5) entered blocking state [ 1009.739563][T18289] bridge1: port 1(bond5) entered disabled state [ 1009.741819][T18289] bond5: entered allmulticast mode [ 1009.777154][T18289] bond5: entered promiscuous mode [ 1011.319227][T18321] binder: 18316:18321 ioctl 4018620d 0 returned -22 [ 1011.974952][T18328] binder: 18316:18328 ioctl b704 0 returned -22 [ 1012.486191][T18331] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3738'. [ 1012.686737][T18323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.691301][T18323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.123338][T18323] bridge_slave_0: left allmulticast mode [ 1014.123359][T18323] bridge_slave_0: left promiscuous mode [ 1014.123497][T18323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.182476][T18323] bridge_slave_1: left allmulticast mode [ 1014.182497][T18323] bridge_slave_1: left promiscuous mode [ 1014.182631][T18323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.307634][T18323] bond0: (slave bond_slave_0): Releasing backup interface [ 1014.367714][T18323] bond0: (slave bond_slave_1): Releasing backup interface [ 1014.447816][T18323] team0: Port device team_slave_0 removed [ 1014.487807][T18323] team0: Port device team_slave_1 removed [ 1014.491001][T18323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1014.496049][T18323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1014.540137][T18323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1014.542622][T18323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1014.569974][T18323] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1014.606696][T18343] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1014.865157][T18350] netlink: 'syz.4.3744': attribute type 1 has an invalid length. [ 1014.949394][T18350] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1015.577347][T18356] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1015.686375][T16896] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1015.715172][T18350] netlink: 'syz.4.3744': attribute type 1 has an invalid length. [ 1016.233924][T18350] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1016.234133][T18350] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1016.258147][ T1372] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1016.280822][T16896] usb 1-1: Using ep0 maxpacket: 16 [ 1016.283323][T16896] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.283360][T16896] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.283402][T16896] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1016.283427][T16896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.955027][T16896] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1018.018427][T18388] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3755'. [ 1019.228972][T18401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1019.231550][T18401] 8021q: adding VLAN 0 to HW filter on device team0 [ 1019.324984][T18401] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1019.507977][T16896] usb 1-1: USB disconnect, device number 11 [ 1019.740458][T18411] binder: 18405:18411 ioctl 4018620d 0 returned -22 [ 1021.225732][T18421] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3758'. [ 1021.282693][T18424] netlink: 'syz.4.3764': attribute type 1 has an invalid length. [ 1021.336056][T18426] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3764'. [ 1021.649101][T18420] binder: 18405:18420 ioctl b704 0 returned -22 [ 1021.924218][T18428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3765'. [ 1021.989349][T18418] syz.0.3758 (18418) used greatest stack depth: 16824 bytes left [ 1022.458848][T18417] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1022.500613][T18424] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1022.558656][T18428] macvtap1: entered promiscuous mode [ 1022.558680][T18428] erspan0: entered promiscuous mode [ 1022.558820][T18428] macvtap1: entered allmulticast mode [ 1022.558830][T18428] erspan0: entered allmulticast mode [ 1022.779578][T18441] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3769'. [ 1022.862653][T18446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3768'. [ 1023.820001][T18441] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.092234][T18442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.381584][T18480] netlink: 'syz.3.3777': attribute type 1 has an invalid length. [ 1025.433700][T18482] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3777'. [ 1025.873850][T18480] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1025.938316][T18441] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.113015][T18441] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.292923][ T5115] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1026.292954][ T5115] CPU: 1 UID: 0 PID: 5115 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1026.292981][ T5115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1026.293004][ T5115] Workqueue: hci3 hci_rx_work [ 1026.293035][ T5115] Call Trace: [ 1026.293044][ T5115] [ 1026.293055][ T5115] dump_stack_lvl+0xe8/0x150 [ 1026.293095][ T5115] sysfs_create_dir_ns+0x271/0x2a0 [ 1026.293124][ T5115] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1026.293161][ T5115] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1026.293194][ T5115] ? rt_spin_unlock+0x160/0x200 [ 1026.293230][ T5115] kobject_add_internal+0x631/0xd10 [ 1026.293272][ T5115] kobject_add+0x163/0x240 [ 1026.293307][ T5115] ? __pfx_kobject_add+0x10/0x10 [ 1026.293344][ T5115] ? get_device_parent+0x370/0x3a0 [ 1026.293379][ T5115] device_add+0x408/0xb80 [ 1026.293412][ T5115] hci_conn_add_sysfs+0xd5/0x210 [ 1026.293452][ T5115] le_conn_complete_evt+0x10e6/0x16b0 [ 1026.293490][ T5115] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1026.293517][ T5115] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1026.293540][ T5115] ? lockdep_hardirqs_on+0x7a/0x110 [ 1026.293565][ T5115] ? skb_pull_data+0xfb/0x200 [ 1026.293600][ T5115] hci_le_conn_complete_evt+0x187/0x470 [ 1026.293637][ T5115] hci_event_packet+0x659/0xef0 [ 1026.293668][ T5115] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1026.293699][ T5115] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1026.293725][ T5115] ? __pfx_hci_event_packet+0x10/0x10 [ 1026.293746][ T5115] ? rt_spin_unlock+0x14f/0x200 [ 1026.293790][ T5115] ? hci_send_to_monitor+0xe2/0x590 [ 1026.293825][ T5115] hci_rx_work+0x3ee/0x1030 [ 1026.293855][ T5115] ? process_scheduled_works+0xa8d/0x18c0 [ 1026.293975][ T5115] process_scheduled_works+0xb6e/0x18c0 [ 1026.294049][ T5115] ? __pfx_process_scheduled_works+0x10/0x10 [ 1026.294090][ T5115] ? assign_work+0x3d5/0x5e0 [ 1026.294127][ T5115] worker_thread+0xa53/0xfc0 [ 1026.294198][ T5115] kthread+0x388/0x470 [ 1026.294224][ T5115] ? __pfx_worker_thread+0x10/0x10 [ 1026.294255][ T5115] ? __pfx_kthread+0x10/0x10 [ 1026.294282][ T5115] ret_from_fork+0x51e/0xb90 [ 1026.294317][ T5115] ? __pfx_ret_from_fork+0x10/0x10 [ 1026.294346][ T5115] ? __switch_to+0xc7d/0x1450 [ 1026.294379][ T5115] ? __pfx_kthread+0x10/0x10 [ 1026.294406][ T5115] ret_from_fork_asm+0x1a/0x30 [ 1026.294451][ T5115] [ 1026.294495][ T5115] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1026.294542][ T5115] Bluetooth: hci3: failed to register connection device [ 1026.303953][T18441] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.944964][T18516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3788'. [ 1028.028947][T18516] bridge1: port 1(bond4) entered blocking state [ 1028.029202][T18516] bridge1: port 1(bond4) entered disabled state [ 1028.029577][T18516] bond4: entered allmulticast mode [ 1028.035187][T18516] bond4: entered promiscuous mode [ 1028.137776][ T45] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.193645][ T45] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.197756][T18520] netlink: 'syz.4.3790': attribute type 1 has an invalid length. [ 1028.248838][T18525] misc userio: Invalid payload size [ 1028.252510][T18525] misc userio: The device must be registered before sending interrupts [ 1028.313981][T18526] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3790'. [ 1028.426558][T18520] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1028.800422][ T1118] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.855068][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.096952][T18537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3796'. [ 1029.096995][T18537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3796'. [ 1030.164448][T18550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3800'. [ 1030.238406][T18550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3800'. [ 1030.577954][T18560] misc userio: Invalid payload size [ 1030.578246][T18560] misc userio: Invalid payload size [ 1030.861321][T18562] netlink: 'syz.2.3805': attribute type 1 has an invalid length. [ 1031.158642][T18565] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3805'. [ 1031.827646][T18562] bond1 (unregistering): Released all slaves [ 1033.432853][T18597] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3811'. [ 1034.870898][T18602] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1035.677524][T18611] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3818'. [ 1035.767052][T18614] misc userio: Invalid payload size [ 1035.767357][T18614] misc userio: Invalid payload size [ 1035.823907][T18617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3822'. [ 1035.882526][T18617] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3822'. [ 1036.014401][T18617] bridge2: port 1(bond6) entered blocking state [ 1036.026453][T18617] bridge2: port 1(bond6) entered disabled state [ 1036.030164][T18617] bond6: entered allmulticast mode [ 1036.430744][T18617] bond6: entered promiscuous mode [ 1037.058923][T18644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.059894][T18644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1037.065028][T18644] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.066080][T18644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1037.626967][T18644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1037.631565][T18649] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3828'. [ 1039.245942][T18667] misc userio: Invalid payload size [ 1039.246322][T18667] misc userio: Invalid payload size [ 1040.889962][T18680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3840'. [ 1041.022389][T18680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3840'. [ 1041.045882][T16897] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1041.059862][T16897] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1041.059929][T16897] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1041.059968][T16897] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1042.018441][T18686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1042.047938][T18686] 8021q: adding VLAN 0 to HW filter on device team0 [ 1042.300910][T18686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1042.556619][T18697] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3843'. [ 1042.813756][T18709] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3846'. [ 1043.367793][ T37] audit: type=1326 audit(1775206485.100:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18708 comm="syz.0.3847" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0885b5c819 code=0x0 [ 1043.889086][T18721] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.593103][T18721] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.815972][T18721] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.015385][T18721] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.604435][T18739] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1045.943653][ T1372] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.016647][T16897] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.085302][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.154067][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.302828][T18749] binder: 18748:18749 ioctl 4018620d 0 returned -22 [ 1046.360454][T18750] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1046.412806][T18750] binder: 18748:18750 ioctl b704 0 returned -22 [ 1046.661617][T18756] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3859'. [ 1046.973010][T18754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1046.976048][T18754] 8021q: adding VLAN 0 to HW filter on device team0 [ 1047.037298][T18754] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1048.989585][T18777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3868'. [ 1049.092305][T18779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3867'. [ 1049.092324][T18779] nbd: must specify a size in bytes for the device [ 1049.125554][T18777] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.749191][T18777] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.880666][T18777] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.065430][T18790] binder: 18789:18790 ioctl 4018620d 0 returned -22 [ 1050.117846][T18777] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.264049][T18793] binder: 18789:18793 ioctl b704 0 returned -22 [ 1050.574471][T18792] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.594244][T18792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.847901][T18792] bridge_slave_0: left allmulticast mode [ 1052.847931][T18792] bridge_slave_0: left promiscuous mode [ 1052.848082][T18792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.972476][T18792] bridge_slave_1: left allmulticast mode [ 1052.972499][T18792] bridge_slave_1: left promiscuous mode [ 1052.972675][T18792] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.111626][T18792] bond0: (slave bond_slave_0): Releasing backup interface [ 1053.247884][T18792] bond0: (slave bond_slave_1): Releasing backup interface [ 1053.344439][T18792] team0: Port device team_slave_0 removed [ 1053.407161][T18792] team0: Port device team_slave_1 removed [ 1053.432880][T18792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1053.465247][T18792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1053.487716][T18792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.524000][T18792] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1053.777103][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.813854][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.971800][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.996477][ T68] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.044585][ T68] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.130289][T18856] veth0: entered promiscuous mode [ 1056.131670][T18856] bond0: entered promiscuous mode [ 1056.131693][T18856] bond_slave_0: entered promiscuous mode [ 1056.131928][T18856] bond_slave_1: entered promiscuous mode [ 1056.806808][T18865] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3892'. [ 1056.807117][T18865] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3892'. [ 1058.116106][T18852] bond0: left promiscuous mode [ 1058.116134][T18852] bond_slave_0: left promiscuous mode [ 1058.124422][T18852] bond_slave_1: left promiscuous mode [ 1058.125026][T18852] veth0: left promiscuous mode [ 1059.582596][T18894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3900'. [ 1059.739600][T18892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1059.811975][T18904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3904'. [ 1059.967107][T18907] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3902'. [ 1060.140427][T18912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3905'. [ 1060.140618][T18912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3905'. [ 1063.676608][T18946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3915'. [ 1063.791972][T18955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3919'. [ 1063.792160][T18955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3919'. [ 1064.594788][T18969] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3922'. [ 1065.897123][ T37] audit: type=1326 audit(1775206507.660:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18990 comm="syz.2.3928" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2aede5c819 code=0x0 [ 1066.007761][T19000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3931'. [ 1067.743369][T18972] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1068.070768][T19021] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3938'. [ 1068.094402][T19020] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.3937'. [ 1069.621031][ T5871] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1070.158491][ T5871] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1070.190135][ T5871] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1070.190171][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1070.190192][ T5871] usb 1-1: Product: syz [ 1070.190208][ T5871] usb 1-1: Manufacturer: syz [ 1070.190220][ T5871] usb 1-1: SerialNumber: syz [ 1070.309119][T19047] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3948'. [ 1070.492779][ T5871] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1070.550393][ T5871] usb 1-1: USB disconnect, device number 12 [ 1070.618998][ T5871] usblp0: removed [ 1070.623873][T19059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3951'. [ 1070.674710][T19059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3951'. [ 1070.850168][T19065] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3950'. [ 1071.129693][T19069] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1071.701126][T19078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3956'. [ 1071.701144][T19078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3956'. [ 1071.701921][T19078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3956'. [ 1071.701933][T19078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3956'. [ 1072.063474][T19089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3961'. [ 1072.098954][T19090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3962'. [ 1072.119911][T19090] syz_tun: entered promiscuous mode [ 1072.120131][T19090] macvtap2: entered promiscuous mode [ 1072.120365][T19090] macvtap2: entered allmulticast mode [ 1072.120380][T19090] syz_tun: entered allmulticast mode [ 1072.161711][T19089] bridge3: port 1(bond7) entered blocking state [ 1072.161906][T19089] bridge3: port 1(bond7) entered disabled state [ 1072.162141][T19089] bond7: entered allmulticast mode [ 1072.166177][T19089] bond7: entered promiscuous mode [ 1072.249220][T19090] syz_tun: left allmulticast mode [ 1072.249607][T19090] syz_tun: left promiscuous mode [ 1072.256361][ T5871] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1072.686400][ T5871] usb 2-1: Using ep0 maxpacket: 16 [ 1072.689712][ T5871] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.689750][ T5871] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.689793][ T5871] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1072.689817][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.949455][T19084] usb usb1: usbfs: process 19084 (syz.1.3959) did not claim interface 0 before use [ 1074.961994][ T5871] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1075.242352][T19084] i2c i2c-1: unsupported multi-msg i2c transaction [ 1075.846171][ T5871] usb 2-1: USB disconnect, device number 13 [ 1075.969333][T19131] __nla_validate_parse: 5 callbacks suppressed [ 1075.969359][T19131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3974'. [ 1076.015317][T19131] macvtap2: entered promiscuous mode [ 1076.015342][T19131] syz_tun: entered promiscuous mode [ 1076.015549][T19131] macvtap2: entered allmulticast mode [ 1076.015562][T19131] syz_tun: entered allmulticast mode [ 1076.032322][T19134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3974'. [ 1076.197365][T19134] syz_tun: left allmulticast mode [ 1076.197398][T19134] syz_tun: left promiscuous mode [ 1076.236669][T19138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3975'. [ 1076.236699][T19138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3975'. [ 1080.786560][T18797] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1080.976305][T18797] usb 5-1: Using ep0 maxpacket: 16 [ 1080.978346][T18797] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.978370][T18797] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1080.978408][T18797] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1080.978432][T18797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.720976][T19169] usb usb1: usbfs: process 19169 (syz.4.3984) did not claim interface 0 before use [ 1081.733102][T18797] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1083.173028][T19189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1083.175382][T19189] 8021q: adding VLAN 0 to HW filter on device team0 [ 1083.433685][T18797] usb 5-1: USB disconnect, device number 8 [ 1083.488994][T19189] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1084.109264][T19198] zonefs (nullb0) ERROR: Not a zoned block device [ 1087.369078][T19235] netlink: 'syz.0.4002': attribute type 1 has an invalid length. [ 1087.960942][T19235] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1088.627167][T19240] bond6: (slave veth3): Enslaving as an active interface with a down link [ 1088.824672][T19235] netlink: 'syz.0.4002': attribute type 1 has an invalid length. [ 1088.926661][T19235] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1088.927019][T19235] bond6: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1088.938778][T19258] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4007'. [ 1089.133533][T19258] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.660571][T19258] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.835700][T19258] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.000227][T19258] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.264929][T19304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4021'. [ 1091.337100][T19306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4021'. [ 1091.440832][T19301] syzkaller0: entered promiscuous mode [ 1091.440864][T19301] syzkaller0: entered allmulticast mode [ 1091.623431][T19310] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1092.236943][ T116] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.256353][ T5871] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1092.318595][T19321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1092.324580][T19321] 8021q: adding VLAN 0 to HW filter on device team0 [ 1092.366553][T19321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1092.416820][ T68] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.424961][ T5871] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1092.453139][ T5871] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1092.453168][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1092.453180][ T5871] usb 5-1: Product: syz [ 1092.453189][ T5871] usb 5-1: Manufacturer: syz [ 1092.453197][ T5871] usb 5-1: SerialNumber: syz [ 1092.541684][ T1118] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.601140][ T116] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.759453][ T5871] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1094.403115][ T5871] usb 5-1: USB disconnect, device number 9 [ 1094.550142][ T5871] usblp0: removed [ 1095.054174][T19345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4033'. [ 1095.105141][T19345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4033'. [ 1095.242654][T19350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4035'. [ 1095.326485][T19356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4036'. [ 1096.422205][T19371] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1096.640078][T19388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4047'. [ 1096.675092][T19388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4047'. [ 1096.848693][T19398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4050'. [ 1097.036394][ T5871] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1098.049632][ T5871] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1098.188793][ T5871] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1098.188828][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1098.188850][ T5871] usb 1-1: Product: syz [ 1098.188866][ T5871] usb 1-1: Manufacturer: syz [ 1098.188881][ T5871] usb 1-1: SerialNumber: syz [ 1099.017584][ T5871] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1099.214856][ T5871] usb 1-1: USB disconnect, device number 13 [ 1099.240848][ T5871] usblp0: removed [ 1099.773551][T19436] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1099.852577][T19438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4061'. [ 1099.885037][T19439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4061'. [ 1099.973748][T19445] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4062'. [ 1100.057575][T19445] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.163862][T19447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4063'. [ 1100.165391][T19442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1100.333242][T19445] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.536603][ T1890] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1101.181612][ T1890] usb 3-1: Using ep0 maxpacket: 16 [ 1101.724680][ T1890] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.724720][ T1890] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1101.724763][ T1890] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1101.724787][ T1890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.965762][T19445] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.702719][T19481] ======================================================= [ 1102.702719][T19481] WARNING: The mand mount option has been deprecated and [ 1102.702719][T19481] and is ignored by this kernel. Remove the mand [ 1102.702719][T19481] option from the mount to silence this warning. [ 1102.702719][T19481] ======================================================= [ 1102.795515][T19481] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1103.895401][T19482] usb usb1: usbfs: process 19482 (syz.2.4066) did not claim interface 0 before use [ 1105.396704][T19478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1105.507298][ T1890] usbhid 3-1:128.0: can't add hid device: -71 [ 1105.507437][ T1890] usbhid 3-1:128.0: probe with driver usbhid failed with error -71 [ 1105.513665][ T1890] usb 3-1: USB disconnect, device number 16 [ 1105.598221][T19445] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.686606][T19488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4075'. [ 1105.725221][T19488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4075'. [ 1105.793416][T19492] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1105.793455][T19492] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.877346][T19501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4079'. [ 1105.966662][T19492] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1105.966710][T19492] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.021708][ T45] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.052261][ T1336] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.104234][T19492] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1106.104272][T19492] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.142060][ T45] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.358779][ T1336] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.492486][T19492] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1106.492549][T19492] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.369728][ T1118] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1108.369768][ T1118] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.369814][ T1118] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1108.369840][ T1118] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.450198][ T1372] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1108.450247][ T1372] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.527155][ T1372] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1108.527195][ T1372] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.417286][T19495] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1110.549230][T19527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4085'. [ 1111.404913][T19537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1111.517997][T19539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4089'. [ 1111.566715][T19540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4089'. [ 1112.451865][T19556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4095'. [ 1112.678808][T19564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4090'. [ 1112.871447][T19575] netlink: 1760 bytes leftover after parsing attributes in process `syz.0.4098'. [ 1113.295252][T19581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4103'. [ 1113.328028][T19581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4103'. [ 1113.485884][T19588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4107'. [ 1113.485933][T19588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4107'. [ 1113.527851][ T1372] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1113.528000][T19588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4107'. [ 1113.528140][ T1372] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1113.534174][ T1372] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1113.534229][ T1372] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1113.642359][T19590] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 1115.195102][T19603] netlink: 'syz.1.4113': attribute type 1 has an invalid length. [ 1115.204823][T18797] IPVS: starting estimator thread 0... [ 1115.256860][T19586] hsr_slave_1 (unregistering): left promiscuous mode [ 1115.322240][T19605] IPVS: using max 7 ests per chain, 16800 per kthread [ 1116.119596][T19603] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1116.271663][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.299378][T19603] netlink: 'syz.1.4113': attribute type 1 has an invalid length. [ 1116.343664][T19610] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1116.396635][T19613] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1116.469580][T19603] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1116.469913][T19603] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1116.792088][T19631] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 1118.764754][ T808] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1118.996956][ T808] usb 4-1: device descriptor read/64, error -71 [ 1119.131007][T19655] __nla_validate_parse: 4 callbacks suppressed [ 1119.131032][T19655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4127'. [ 1119.236393][ T808] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1119.344517][T19656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4127'. [ 1119.383644][ T808] usb 4-1: device descriptor read/64, error -71 [ 1119.407444][T19655] ip6gretap0: entered promiscuous mode [ 1119.407828][T19655] macvtap3: entered promiscuous mode [ 1119.408025][T19655] macvtap3: entered allmulticast mode [ 1119.408041][T19655] ip6gretap0: entered allmulticast mode [ 1119.557920][T19660] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1120.613300][ T808] usb usb4-port1: attempt power cycle [ 1121.090659][T19664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4129'. [ 1121.145547][T19665] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4129'. [ 1121.895949][T19656] ip6gretap0: left allmulticast mode [ 1121.897671][T19656] ip6gretap0: left promiscuous mode [ 1122.003466][T19666] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1123.287120][T19678] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.4130'. [ 1124.727165][ T808] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1124.856563][ T808] usb 3-1: device descriptor read/64, error -71 [ 1125.117810][ T808] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1125.282939][ T808] usb 3-1: device descriptor read/64, error -71 [ 1125.409083][ T808] usb usb3-port1: attempt power cycle [ 1125.956954][ T808] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1125.977308][ T808] usb 3-1: device descriptor read/8, error -71 [ 1126.034233][T19711] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1126.266948][ T808] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1126.298158][ T808] usb 3-1: device descriptor read/8, error -71 [ 1126.407060][ T808] usb usb3-port1: unable to enumerate USB device [ 1127.893271][T19732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4145'. [ 1128.066686][T19737] blktrace: Concurrent blktraces are not allowed on sg0 [ 1129.019263][T19739] netlink: 'syz.2.4147': attribute type 72 has an invalid length. [ 1129.426501][T19746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4149'. [ 1129.927499][T19749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4149'. [ 1129.927538][T19749] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4149'. [ 1130.013632][T19746] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1130.058963][T19749] vxlan0: entered promiscuous mode [ 1130.447864][T19755] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1131.068888][T19755] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1131.073458][T19755] overlayfs: failed to look up (tracing) for ino (-66) [ 1132.167861][T19760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4152'. [ 1132.510204][T19760] ip6gretap0: entered promiscuous mode [ 1132.510498][T19760] macvtap3: entered promiscuous mode [ 1132.510702][T19760] macvtap3: entered allmulticast mode [ 1132.510718][T19760] ip6gretap0: entered allmulticast mode [ 1132.909001][T19759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4152'. [ 1134.459107][T19759] ip6gretap0: left allmulticast mode [ 1134.459367][T19759] ip6gretap0: left promiscuous mode [ 1134.686412][T18801] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1134.817214][T18801] usb 4-1: device descriptor read/64, error -71 [ 1135.181696][T18801] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1135.431086][T19792] binder: 19789:19792 ioctl 4018620d 0 returned -22 [ 1135.446471][T18801] usb 4-1: device descriptor read/64, error -71 [ 1136.002250][T18801] usb usb4-port1: attempt power cycle [ 1136.659878][T19797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4165'. [ 1136.666508][T18801] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1136.691478][T18801] usb 4-1: device descriptor read/8, error -71 [ 1136.813304][T19799] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4165'. [ 1137.051205][T19798] binder: 19789:19798 ioctl b704 0 returned -22 [ 1137.086639][T18801] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1137.308671][T18801] usb 4-1: device not accepting address 10, error -71 [ 1137.367680][T18801] usb usb4-port1: unable to enumerate USB device [ 1138.076471][T19814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4169'. [ 1138.348941][T19795] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1138.370478][T19802] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1139.297450][T19838] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4176'. [ 1140.134448][T19846] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4179'. [ 1140.929742][T19851] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4181'. [ 1141.723017][T19869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4186'. [ 1141.723036][T19869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4186'. [ 1141.726636][T19869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4186'. [ 1141.726661][T19869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4186'. [ 1142.290192][T19876] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1142.672422][T19889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4192'. [ 1142.761535][T19889] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4192'. [ 1142.911885][T19889] bridge2: port 1(bond7) entered blocking state [ 1142.912997][T19889] bridge2: port 1(bond7) entered disabled state [ 1142.913311][T19889] bond7: entered allmulticast mode [ 1142.928484][T19889] bond7: entered promiscuous mode [ 1143.455221][T19902] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4195'. [ 1143.459660][T19902] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4195'. [ 1143.692606][T19910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4197'. [ 1143.692635][T19910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4197'. [ 1143.747749][ T3717] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1143.747914][T19910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4197'. [ 1143.747936][T19910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4197'. [ 1143.748263][ T3717] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1143.752043][ T3717] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1143.752110][ T3717] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1144.833608][T19935] blktrace: Concurrent blktraces are not allowed on sg0 [ 1147.080161][T19941] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1147.271219][T19951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4211'. [ 1147.271236][T19951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4211'. [ 1147.913173][T19941] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 1147.916050][T19951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4211'. [ 1147.916075][T19951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4211'. [ 1148.739657][T19969] __nla_validate_parse: 1 callbacks suppressed [ 1148.739673][T19969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4217'. [ 1149.108947][T19974] netlink: 'syz.0.4218': attribute type 6 has an invalid length. [ 1149.366918][T19969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4217'. [ 1150.692043][T19989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1150.925632][T19994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4223'. [ 1150.925660][T19994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4223'. [ 1150.968246][T19994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4223'. [ 1150.968377][T19994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4223'. [ 1151.324683][T19997] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1151.565297][T20004] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1152.698897][T20014] orangefs_mount: mount request failed with -4 [ 1154.071771][T20037] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1154.133079][T20030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1154.135422][T20030] 8021q: adding VLAN 0 to HW filter on device team0 [ 1154.166655][T20030] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1154.298182][T20043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4236'. [ 1154.298210][T20043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4236'. [ 1154.299454][T20043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4236'. [ 1154.299474][T20043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4236'. [ 1155.568337][T20052] netlink: 'syz.1.4237': attribute type 21 has an invalid length. [ 1155.568366][T20052] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4237'. [ 1155.568459][T20052] netlink: 'syz.1.4237': attribute type 4 has an invalid length. [ 1155.568474][T20052] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4237'. [ 1155.572317][T20052] netlink: 'syz.1.4237': attribute type 1 has an invalid length. [ 1155.572338][T20052] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4237'. [ 1155.696693][T20052] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1156.902629][T20052] bond3 (unregistering): Released all slaves [ 1159.268529][T20091] binder: 20090:20091 ioctl 4018620d 0 returned -22 [ 1159.544342][T20094] binder: 20090:20094 ioctl b704 0 returned -22 [ 1160.300016][T20072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1161.836114][T20092] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1162.000626][T20096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1166.548812][T20138] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1172.180841][T20243] batadv_slave_0: entered promiscuous mode [ 1177.711722][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.866808][T16659] IPVS: starting estimator thread 0... [ 1177.870340][T20267] netlink: 'syz.2.4303': attribute type 1 has an invalid length. [ 1177.976413][T20271] IPVS: using max 7 ests per chain, 16800 per kthread [ 1178.008779][T20268] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4304'. [ 1178.074545][T20267] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1178.316957][T20280] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4308'. [ 1178.345446][T20275] netlink: 'syz.2.4303': attribute type 1 has an invalid length. [ 1178.376381][T20273] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1178.480820][T20275] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1178.481152][T20275] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1178.712243][T20280] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1178.712284][T20280] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.149236][T13087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1179.173173][T13087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1179.176140][T13087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1179.300841][T20297] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1180.221501][T13087] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1180.249450][T13087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1181.659978][T20280] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1181.660017][T20280] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.361172][T13087] Bluetooth: hci2: command tx timeout [ 1182.710051][T20280] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1182.710080][T20280] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.030629][T20321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4317'. [ 1184.268336][ T1890] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1184.421931][ T1890] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1184.426300][T13087] Bluetooth: hci2: command tx timeout [ 1184.449674][ T1890] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1184.449697][ T1890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1184.449709][ T1890] usb 3-1: Product: syz [ 1184.449718][ T1890] usb 3-1: Manufacturer: syz [ 1184.449727][ T1890] usb 3-1: SerialNumber: syz [ 1184.545927][T20326] netlink: 'syz.1.4319': attribute type 5 has an invalid length. [ 1184.663480][T20280] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1184.663523][T20280] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.711250][ T1890] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1184.736451][T20291] chnl_net:caif_netlink_parms(): no params data found [ 1184.871640][T20334] binder: 20333:20334 ioctl 4018620d 0 returned -22 [ 1184.982523][T18797] usb 3-1: USB disconnect, device number 21 [ 1184.992952][T18797] usblp0: removed [ 1185.015113][ T3717] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1185.015153][ T3717] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.193129][T20341] binder: 20333:20341 ioctl b704 0 returned -22 [ 1185.690120][T20332] syzkaller0: entered promiscuous mode [ 1185.690142][T20332] syzkaller0: entered allmulticast mode [ 1186.517458][T13087] Bluetooth: hci2: command tx timeout [ 1186.630498][ T3717] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1186.630537][ T3717] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.714558][T20355] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 1186.885144][ T2993] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1186.885176][ T2993] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.955593][T20363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4330'. [ 1186.978549][ T3717] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1186.978587][ T3717] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.027101][T20361] netlink: 'syz.3.4329': attribute type 2 has an invalid length. [ 1187.095985][T20291] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.104159][T20291] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.104487][T20291] bridge_slave_0: entered allmulticast mode [ 1187.138394][T20291] bridge_slave_0: entered promiscuous mode [ 1187.146789][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1187.146822][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.169902][T20291] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.170118][T20291] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.170408][T20291] bridge_slave_1: entered allmulticast mode [ 1187.173358][T20291] bridge_slave_1: entered promiscuous mode [ 1187.350797][ T3717] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1187.350838][ T3717] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.510730][ T45] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1187.510754][ T45] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.516511][ T1890] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1187.668773][ T1890] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1187.674208][ T1890] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1187.674243][ T1890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1187.674265][ T1890] usb 4-1: Product: syz [ 1187.674280][ T1890] usb 4-1: Manufacturer: syz [ 1187.674295][ T1890] usb 4-1: SerialNumber: syz [ 1187.750824][T20381] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 1187.847854][T20291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1187.847910][ T1336] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1187.847930][ T1336] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.985273][T20291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1188.007883][ T1890] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1188.237344][T16659] usb 4-1: USB disconnect, device number 11 [ 1188.275987][T16659] usblp0: removed [ 1188.774953][T13087] Bluetooth: hci2: command tx timeout [ 1188.814646][T20291] team0: Port device team_slave_0 added [ 1189.785284][T20291] team0: Port device team_slave_1 added [ 1191.418995][T20291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1191.419014][T20291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1191.419042][T20291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1191.421672][T20291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1191.421690][T20291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1191.421719][T20291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1193.117059][ T3717] bond5: left allmulticast mode [ 1193.117089][ T3717] bond5: left promiscuous mode [ 1193.117281][ T3717] bridge1: port 1(bond5) entered disabled state [ 1193.191999][ T3717] bond7: left allmulticast mode [ 1193.192024][ T3717] bond7: left promiscuous mode [ 1193.192246][ T3717] bridge2: port 1(bond7) entered disabled state [ 1193.360863][T20417] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 1194.698307][T20426] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4350'. [ 1194.854555][T20428] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1197.049234][ T5980] IPVS: starting estimator thread 0... [ 1197.100970][T20432] netlink: 'syz.3.4352': attribute type 1 has an invalid length. [ 1197.138891][T20431] IPVS: using max 13 ests per chain, 31200 per kthread [ 1197.817333][ T3717] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1198.118522][ T3717] bond0 (unregistering): Released all slaves [ 1198.130123][ T3717] bond1 (unregistering): Released all slaves [ 1198.148778][ T3717] bond2 (unregistering): Released all slaves [ 1198.164999][ T3717] bond3 (unregistering): Released all slaves [ 1198.190030][ T3717] bond4 (unregistering): Released all slaves [ 1198.213122][ T3717] bond5 (unregistering): Released all slaves [ 1198.258502][ T3717] bond6 (unregistering): (slave veth3): Releasing active interface [ 1198.317954][ T3717] bond6 (unregistering): Released all slaves [ 1198.334825][ T3717] bond7 (unregistering): Released all slaves [ 1198.443091][T20432] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1198.444192][T20436] netlink: 'syz.3.4352': attribute type 1 has an invalid length. [ 1199.226973][T20446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4355'. [ 1199.402827][T20291] hsr_slave_0: entered promiscuous mode [ 1199.404728][T20291] hsr_slave_1: entered promiscuous mode [ 1199.405990][T20291] debugfs: 'hsr0' already exists in 'hsr' [ 1199.406017][T20291] Cannot create hsr debugfs directory [ 1199.422649][T20448] binder: 20447:20448 ioctl 4018620d 0 returned -22 [ 1199.792532][T20455] binder: 20447:20455 ioctl b704 0 returned -22 [ 1200.220507][T20457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4358'. [ 1200.530673][T20465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4361'. [ 1200.614797][T20457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4358'. [ 1200.940795][T13087] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1200.940824][T13087] CPU: 1 UID: 0 PID: 13087 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1200.940850][T13087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1200.940865][T13087] Workqueue: hci3 hci_rx_work [ 1200.940894][T13087] Call Trace: [ 1200.940903][T13087] [ 1200.940912][T13087] dump_stack_lvl+0xe8/0x150 [ 1200.940951][T13087] sysfs_create_dir_ns+0x271/0x2a0 [ 1200.940982][T13087] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1200.941028][T13087] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1200.941062][T13087] ? rt_spin_unlock+0x160/0x200 [ 1200.941096][T13087] kobject_add_internal+0x631/0xd10 [ 1200.941135][T13087] kobject_add+0x163/0x240 [ 1200.941166][T13087] ? __pfx_kobject_add+0x10/0x10 [ 1200.941199][T13087] ? get_device_parent+0x370/0x3a0 [ 1200.941234][T13087] device_add+0x408/0xb80 [ 1200.941267][T13087] hci_conn_add_sysfs+0xd5/0x210 [ 1200.941307][T13087] le_conn_complete_evt+0x10e6/0x16b0 [ 1200.941350][T13087] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1200.941380][T13087] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1200.941406][T13087] ? lockdep_hardirqs_on+0x7a/0x110 [ 1200.941435][T13087] ? skb_pull_data+0xfb/0x200 [ 1200.941469][T13087] hci_le_conn_complete_evt+0x187/0x470 [ 1200.941505][T13087] hci_event_packet+0x659/0xef0 [ 1200.941535][T13087] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1200.941564][T13087] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1200.941589][T13087] ? __pfx_hci_event_packet+0x10/0x10 [ 1200.941611][T13087] ? rt_spin_unlock+0x14f/0x200 [ 1200.941655][T13087] ? hci_send_to_monitor+0xe2/0x590 [ 1200.941691][T13087] hci_rx_work+0x3ee/0x1030 [ 1200.941723][T13087] ? process_scheduled_works+0xa8d/0x18c0 [ 1200.941760][T13087] process_scheduled_works+0xb6e/0x18c0 [ 1200.941943][T13087] ? __pfx_process_scheduled_works+0x10/0x10 [ 1200.941983][T13087] ? assign_work+0x3d5/0x5e0 [ 1200.942046][T13087] worker_thread+0xa53/0xfc0 [ 1200.942107][T13087] kthread+0x388/0x470 [ 1200.942135][T13087] ? __pfx_worker_thread+0x10/0x10 [ 1200.942167][T13087] ? __pfx_kthread+0x10/0x10 [ 1200.942195][T13087] ret_from_fork+0x51e/0xb90 [ 1200.942234][T13087] ? __pfx_ret_from_fork+0x10/0x10 [ 1200.942267][T13087] ? __switch_to+0xc7d/0x1450 [ 1200.942302][T13087] ? __pfx_kthread+0x10/0x10 [ 1200.942329][T13087] ret_from_fork_asm+0x1a/0x30 [ 1200.942374][T13087] [ 1200.942428][T13087] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1200.942475][T13087] Bluetooth: hci3: failed to register connection device [ 1201.286773][ T3717] hsr_slave_0: left promiscuous mode [ 1202.078699][ T3717] veth1_macvtap: left promiscuous mode [ 1202.085909][ T3717] veth0_macvtap: left promiscuous mode [ 1202.986356][T13087] Bluetooth: hci3: command 0x0406 tx timeout [ 1205.844608][T13087] Bluetooth: hci3: command 0x0406 tx timeout [ 1206.125663][T20497] binder: 20496:20497 ioctl 4018620d 0 returned -22 [ 1206.735432][T20503] binder: 20496:20503 ioctl b704 0 returned -22 [ 1207.613320][T20522] netlink: 'syz.3.4375': attribute type 21 has an invalid length. [ 1207.613347][T20522] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4375'. [ 1207.642685][T20523] netlink: 'syz.1.4374': attribute type 1 has an invalid length. [ 1207.678051][T20522] netlink: 'syz.3.4375': attribute type 4 has an invalid length. [ 1207.678070][T20522] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4375'. [ 1207.678407][T20526] netlink: 'syz.3.4375': attribute type 1 has an invalid length. [ 1207.678418][T20526] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4375'. [ 1207.779084][T20523] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1207.990517][T20529] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1208.042333][T20526] bond6: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1208.071469][T20526] bond6 (unregistering): Released all slaves [ 1208.197380][T20523] netlink: 'syz.1.4374': attribute type 1 has an invalid length. [ 1208.305455][T20523] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1208.305625][T20523] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1208.525785][ T3717] IPVS: stop unused estimator thread 0... [ 1208.558371][T20291] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1208.642478][T20291] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1208.746055][T20291] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1208.825584][T20291] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1210.088033][T20554] binder: 20553:20554 ioctl 4018620d 0 returned -22 [ 1210.320929][T20571] binder: 20553:20571 ioctl b704 0 returned -22 [ 1211.674637][T20291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1211.740768][T20291] 8021q: adding VLAN 0 to HW filter on device team0 [ 1211.798462][T16897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.798547][T16897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1212.087299][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.087385][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1212.228739][T20580] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1214.568749][T20599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4387'. [ 1214.656399][T16659] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1214.809584][T16659] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1214.814778][T16659] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1214.814811][T16659] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1214.814834][T16659] usb 4-1: Product: syz [ 1214.814849][T16659] usb 4-1: Manufacturer: syz [ 1214.814864][T16659] usb 4-1: SerialNumber: syz [ 1215.832014][T20291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1216.077797][T16659] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1216.375858][ T1890] usb 4-1: USB disconnect, device number 12 [ 1216.398234][ T1890] usblp0: removed [ 1216.774718][T20291] veth0_vlan: entered promiscuous mode [ 1216.811279][T20291] veth1_vlan: entered promiscuous mode [ 1216.888007][T20291] veth0_macvtap: entered promiscuous mode [ 1216.894826][T20291] veth1_macvtap: entered promiscuous mode [ 1216.974536][T20291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1216.993483][T20644] binder: 20643:20644 ioctl 4018620d 0 returned -22 [ 1217.023372][T20291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1217.035143][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.040284][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.040328][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.040362][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.058546][T20645] binder: 20643:20645 ioctl b704 0 returned -22 [ 1217.517438][T20598] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1217.864033][ T5084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1217.864057][ T5084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.942898][T20654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4400'. [ 1218.247215][T16897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.247239][T16897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.707692][T20672] erofs (device nullb0): cannot find valid erofs superblock [ 1220.916362][T20701] binder: 20699:20701 ioctl 4018620d 0 returned -22 [ 1221.031295][T20703] binder: 20699:20703 ioctl b704 0 returned -22 [ 1221.588284][T20706] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4411'. [ 1224.076380][T20740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4419'. [ 1228.516345][ T1890] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1228.670431][ T1890] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1228.674600][ T1890] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1228.674633][ T1890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1228.674654][ T1890] usb 2-1: Product: syz [ 1228.674666][ T1890] usb 2-1: Manufacturer: syz [ 1228.674680][ T1890] usb 2-1: SerialNumber: syz [ 1228.973679][ T1890] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1229.298756][ T1890] usb 2-1: USB disconnect, device number 14 [ 1229.489422][ T1890] usblp0: removed [ 1230.535958][T20875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4447'. [ 1230.627747][T20878] bridge2: port 1(erspan0) entered blocking state [ 1230.629883][T20878] bridge2: port 1(erspan0) entered disabled state [ 1230.630051][T20878] erspan0: entered allmulticast mode [ 1230.651547][T20878] erspan0: entered promiscuous mode [ 1230.668315][T20878] bridge2: port 1(erspan0) entered blocking state [ 1230.668884][T20878] bridge2: port 1(erspan0) entered forwarding state [ 1232.638586][T20900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4454'. [ 1232.898376][T20909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4458'. [ 1232.898403][T20909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4458'. [ 1232.899607][T20909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4458'. [ 1232.899628][T20909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4458'. [ 1238.154113][T20963] binder: 20958:20963 ioctl 4018620d 0 returned -22 [ 1238.377463][T20965] binder: 20958:20965 ioctl b704 0 returned -22 [ 1239.663956][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.516326][T16659] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1240.708842][T16659] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1240.708874][T16659] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1240.708904][T16659] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1240.793778][T16659] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1240.793801][T16659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1240.793813][T16659] usb 2-1: Product: syz [ 1240.793821][T16659] usb 2-1: Manufacturer: syz [ 1240.793829][T16659] usb 2-1: SerialNumber: syz [ 1241.097688][T16659] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1241.130685][T16659] usb 2-1: USB disconnect, device number 15 [ 1241.141717][T16659] usblp0: removed [ 1242.528589][T21053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4498'. [ 1242.739452][T21062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4500'. [ 1242.878121][T21062] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1242.878161][T21062] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.083342][T21062] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1243.083385][T21062] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.393150][T21062] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1243.393177][T21062] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.576355][T15553] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1243.599100][T21083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4505'. [ 1243.641712][T21062] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1243.641756][T21062] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.759607][T15553] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1243.759640][T15553] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1243.759666][T15553] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1243.765312][T15553] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1243.765345][T15553] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1243.765367][T15553] usb 6-1: Product: syz [ 1243.765382][T15553] usb 6-1: Manufacturer: syz [ 1243.765398][T15553] usb 6-1: SerialNumber: syz [ 1244.139942][T15553] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1244.142173][ T3717] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1244.142208][ T3717] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.180184][T15553] usb 6-1: USB disconnect, device number 2 [ 1244.210662][ T3717] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1244.210701][ T3717] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.212369][T15553] usblp0: removed [ 1244.297763][T20714] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1244.297801][T20714] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.381423][ T1118] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1244.381462][ T1118] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.693651][T21124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4517'. [ 1247.260185][T21134] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1248.176664][ T808] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1248.215186][ T12] nci: nci_rsp_packet: unknown rsp opcode 0x7 [ 1248.330499][ T808] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1248.330533][ T808] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1248.330558][ T808] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1248.334293][ T808] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1248.334326][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1248.334347][ T808] usb 3-1: Product: syz [ 1248.334362][ T808] usb 3-1: Manufacturer: syz [ 1248.334377][ T808] usb 3-1: SerialNumber: syz [ 1248.336367][T18797] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1248.720187][T21169] EXT4-fs (nbd5): unable to read superblock [ 1248.906496][T18797] usb 2-1: Using ep0 maxpacket: 16 [ 1249.052515][T18797] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.052548][T18797] usb 2-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 1249.052655][T18797] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1249.052681][T18797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.133312][ T808] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1249.177782][ T808] usb 3-1: USB disconnect, device number 22 [ 1249.193825][ T808] usblp0: removed [ 1249.482783][T21177] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4529'. [ 1251.733351][T21150] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1251.946458][T15553] usb 2-1: USB disconnect, device number 16 [ 1252.557997][T21204] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1252.767826][T21222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4540'. [ 1253.056335][ T808] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1253.650468][ T808] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1253.650499][ T808] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1253.650521][ T808] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1253.653922][ T808] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1253.653956][ T808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1253.653977][ T808] usb 6-1: Product: syz [ 1253.653991][ T808] usb 6-1: Manufacturer: syz [ 1253.654005][ T808] usb 6-1: SerialNumber: syz [ 1254.014784][ T808] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1254.071349][ T808] usb 6-1: USB disconnect, device number 3 [ 1254.074302][ T808] usblp0: removed [ 1256.857566][ T1118] nci: nci_rsp_packet: unknown rsp opcode 0x7 [ 1256.941424][T21260] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1256.962189][T21266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4553'. [ 1257.195608][T21268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4554'. [ 1257.249391][T21275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4554'. [ 1257.284961][T21268] ip6gretap0: entered promiscuous mode [ 1257.285190][T21268] macvtap1: entered promiscuous mode [ 1257.285411][T21268] macvtap1: entered allmulticast mode [ 1257.285426][T21268] ip6gretap0: entered allmulticast mode [ 1258.552079][T21275] ip6gretap0: left allmulticast mode [ 1258.552327][T21275] ip6gretap0: left promiscuous mode [ 1259.638107][T21250] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1259.865351][T21293] binder: 21292:21293 ioctl 4018620d 0 returned -22 [ 1260.026382][T15553] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1260.079578][T21294] binder: 21292:21294 ioctl b704 0 returned -22 [ 1260.256261][T15553] usb 4-1: Using ep0 maxpacket: 16 [ 1260.258737][T15553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1260.262431][T15553] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1260.262462][T15553] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.262484][T15553] usb 4-1: Product: syz [ 1260.262499][T15553] usb 4-1: Manufacturer: syz [ 1260.262514][T15553] usb 4-1: SerialNumber: syz [ 1260.531055][T21302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4564'. [ 1260.642942][T21303] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1260.646345][T21303] overlayfs: overlapping lowerdir path [ 1261.525160][T15553] usb 4-1: config 0 descriptor?? [ 1261.619553][T15553] hub 4-1:0.0: bad descriptor, ignoring hub [ 1261.619605][T15553] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1262.538077][T15553] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 1262.834826][ T1890] usb 4-1: USB disconnect, device number 13 [ 1263.270513][T21315] batadv_slave_0: entered promiscuous mode [ 1264.312086][T21321] binder: 21320:21321 ioctl 4018620d 0 returned -22 [ 1264.971974][T21327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4571'. [ 1265.028182][T21328] binder: 21320:21328 ioctl b704 0 returned -22 [ 1265.093162][T21333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4571'. [ 1266.548029][T21335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4573'. [ 1266.548052][T21335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4573'. [ 1266.877334][T21345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4576'. [ 1266.970471][T21322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.994705][T21322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.587939][T21322] bridge_slave_0: left allmulticast mode [ 1267.587962][T21322] bridge_slave_0: left promiscuous mode [ 1267.588136][T21322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.696920][T21322] bridge_slave_1: left allmulticast mode [ 1267.696943][T21322] bridge_slave_1: left promiscuous mode [ 1267.697250][T21322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.797415][T21322] bond0: (slave bond_slave_0): Releasing backup interface [ 1267.877349][T21322] bond0: (slave bond_slave_1): Releasing backup interface [ 1267.960491][T21322] team0: Port device team_slave_0 removed [ 1267.997731][T21322] team0: Port device team_slave_1 removed [ 1268.005950][T21322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1268.023228][T21322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1268.051300][T21322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1268.054621][T21322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1268.105814][T21322] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1268.131352][T21330] bridge3: port 1(erspan0) entered blocking state [ 1268.131433][T21330] bridge3: port 1(erspan0) entered disabled state [ 1268.269175][T21352] binder: 21350:21352 ioctl 4018620d 0 returned -22 [ 1269.421660][T21362] binder: 21350:21362 ioctl b704 0 returned -22 [ 1270.096802][T21371] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4582'. [ 1270.434135][T21375] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1270.434630][T21375] overlayfs: overlapping lowerdir path [ 1272.481249][T21377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4585'. [ 1272.540503][T21377] bridge5: port 1(erspan0) entered blocking state [ 1272.540774][T21377] bridge5: port 1(erspan0) entered disabled state [ 1272.541006][T21377] erspan0: entered allmulticast mode [ 1272.544110][T21377] erspan0: entered promiscuous mode [ 1272.546062][T21377] bridge5: port 1(erspan0) entered blocking state [ 1272.589604][T21377] bridge5: port 1(erspan0) entered forwarding state [ 1272.615237][T21380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4585'. [ 1272.615253][T21380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4585'. [ 1272.867612][T21384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4586'. [ 1272.867644][T21384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4586'. [ 1273.702190][T21391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4589'. [ 1274.566610][T21416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4599'. [ 1274.672430][T21422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4599'. [ 1274.672457][T21422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4599'. [ 1274.840017][T21420] bridge4: port 1(erspan0) entered blocking state [ 1274.840160][T21420] bridge4: port 1(erspan0) entered disabled state [ 1275.203074][T21431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4602'. [ 1277.040652][T21443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4610'. [ 1277.069454][ T1118] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1277.069633][T21443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4610'. [ 1277.070495][ T1118] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1277.070540][ T1118] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1277.070577][ T1118] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1277.106515][T21441] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 1279.263513][T21474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4618'. [ 1279.462503][T21476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4619'. [ 1279.462522][T21476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4619'. [ 1279.463542][T21476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4619'. [ 1279.463556][T21476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4619'. [ 1279.631144][T21480] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4620'. [ 1279.631321][T21480] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4620'. [ 1279.849234][T21488] netlink: 'syz.2.4625': attribute type 1 has an invalid length. [ 1280.046394][T21488] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1280.319969][T21490] bond4: (slave veth5): Enslaving as an active interface with a down link [ 1280.509280][T21488] netlink: 'syz.2.4625': attribute type 1 has an invalid length. [ 1280.573483][T21488] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1280.573661][T21488] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1282.088271][T21517] __nla_validate_parse: 2 callbacks suppressed [ 1282.088293][T21517] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4631'. [ 1282.088311][T21517] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4631'. [ 1282.115130][T21517] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4631'. [ 1282.115154][T21517] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4631'. [ 1282.146364][ T3717] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1282.153962][ T3717] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1282.154013][ T3717] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1282.154068][ T3717] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1282.864626][T21528] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4635'. [ 1282.865165][T21528] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4635'. [ 1282.956464][ T5871] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1283.128844][ T5871] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1283.131444][ T5871] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1283.131469][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1283.131482][ T5871] usb 4-1: Product: syz [ 1283.131490][ T5871] usb 4-1: Manufacturer: syz [ 1283.131499][ T5871] usb 4-1: SerialNumber: syz [ 1283.225269][T21536] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4638'. [ 1283.345199][T21536] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1283.345271][T21536] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.429805][ T5871] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1284.230801][T21536] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1284.230907][T21536] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.301411][ T5871] usb 4-1: USB disconnect, device number 14 [ 1284.314415][ T5871] usblp0: removed [ 1284.491967][T21536] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1284.492385][T21536] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.013277][ T5871] ------------[ cut here ]------------ [ 1286.013295][ T5871] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1286.013312][ T5871] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#1: kworker/1:4/5871 [ 1286.013360][ T5871] Modules linked in: [ 1286.013381][ T5871] CPU: 1 UID: 0 PID: 5871 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1286.013403][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1286.013417][ T5871] Workqueue: events drm_fb_helper_damage_work [ 1286.013448][ T5871] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1286.013479][ T5871] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 2a cf d3 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1286.013498][ T5871] RSP: 0018:ffffc90004e9f8c0 EFLAGS: 00010246 [ 1286.013517][ T5871] RAX: 1ffff11004aaee00 RBX: ffffffff8f7555b0 RCX: 0000000000000000 [ 1286.013543][ T5871] RDX: ffffffff8bbf5f40 RSI: ffffffff8bc11de0 RDI: ffffffff8f7555b0 [ 1286.013560][ T5871] RBP: ffffc90004e9f9a8 R08: 0000000000000000 R09: 0000000000000000 [ 1286.013575][ T5871] R10: dffffc0000000000 R11: fffffbfff1ed4dd7 R12: ffffffff8bc11de0 [ 1286.013591][ T5871] R13: ffff888025577000 R14: 0000000000000000 R15: ffffffff8bbf5f40 [ 1286.013606][ T5871] FS: 0000000000000000(0000) GS:ffff888126435000(0000) knlGS:0000000000000000 [ 1286.013624][ T5871] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1286.013650][ T5871] CR2: 0000001b33619ff8 CR3: 00000000283d4000 CR4: 00000000003526f0 [ 1286.013671][ T5871] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1286.013685][ T5871] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1286.013701][ T5871] Call Trace: [ 1286.013711][ T5871] [ 1286.013726][ T5871] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1286.013757][ T5871] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1286.013793][ T5871] ? rt_spin_unlock+0x160/0x200 [ 1286.013831][ T5871] ? drm_vblank_get+0x147/0x260 [ 1286.013862][ T5871] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1286.013889][ T5871] drm_fb_helper_damage_work+0x131/0x6f0 [ 1286.013930][ T5871] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1286.013961][ T5871] ? preempt_schedule_thunk+0x16/0x30 [ 1286.013991][ T5871] ? process_scheduled_works+0xa8d/0x18c0 [ 1286.014042][ T5871] ? process_scheduled_works+0xa8d/0x18c0 [ 1286.014076][ T5871] process_scheduled_works+0xb6e/0x18c0 [ 1286.014146][ T5871] ? __pfx_process_scheduled_works+0x10/0x10 [ 1286.014193][ T5871] ? assign_work+0x3d5/0x5e0 [ 1286.014230][ T5871] worker_thread+0xa53/0xfc0 [ 1286.014296][ T5871] kthread+0x388/0x470 [ 1286.014321][ T5871] ? __pfx_worker_thread+0x10/0x10 [ 1286.014351][ T5871] ? __pfx_kthread+0x10/0x10 [ 1286.014377][ T5871] ret_from_fork+0x51e/0xb90 [ 1286.014411][ T5871] ? __pfx_ret_from_fork+0x10/0x10 [ 1286.014441][ T5871] ? __switch_to+0xc7d/0x1450 [ 1286.014474][ T5871] ? __pfx_kthread+0x10/0x10 [ 1286.014500][ T5871] ret_from_fork_asm+0x1a/0x30 [ 1286.014542][ T5871] [ 1286.014554][ T5871] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1286.014568][ T5871] CPU: 1 UID: 0 PID: 5871 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1286.014591][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1286.014603][ T5871] Workqueue: events drm_fb_helper_damage_work [ 1286.014632][ T5871] Call Trace: [ 1286.014639][ T5871] [ 1286.014646][ T5871] vpanic+0x56c/0xa60 [ 1286.014680][ T5871] ? __pfx__printk+0x10/0x10 [ 1286.014703][ T5871] ? __pfx_vpanic+0x10/0x10 [ 1286.014732][ T5871] ? is_bpf_text_address+0x292/0x2b0 [ 1286.014764][ T5871] ? is_bpf_text_address+0x26/0x2b0 [ 1286.014813][ T5871] panic+0xc5/0xd0 [ 1286.014844][ T5871] ? __pfx_panic+0x10/0x10 [ 1286.014885][ T5871] ? ret_from_fork_asm+0x1a/0x30 [ 1286.014912][ T5871] __warn+0x315/0x4f0 [ 1286.014942][ T5871] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1286.014972][ T5871] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1286.015002][ T5871] __report_bug+0x29a/0x540 [ 1286.015034][ T5871] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1286.015063][ T5871] ? __pfx___report_bug+0x10/0x10 [ 1286.015112][ T5871] report_bug_entry+0x19a/0x290 [ 1286.015136][ T5871] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1286.015168][ T5871] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 1286.015194][ T5871] handle_bug+0xce/0x200 [ 1286.015223][ T5871] exc_invalid_op+0x1a/0x50 [ 1286.015330][ T5871] asm_exc_invalid_op+0x1a/0x20 [ 1286.015357][ T5871] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1286.015387][ T5871] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 2a cf d3 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1286.015405][ T5871] RSP: 0018:ffffc90004e9f8c0 EFLAGS: 00010246 [ 1286.015425][ T5871] RAX: 1ffff11004aaee00 RBX: ffffffff8f7555b0 RCX: 0000000000000000 [ 1286.015442][ T5871] RDX: ffffffff8bbf5f40 RSI: ffffffff8bc11de0 RDI: ffffffff8f7555b0 [ 1286.015458][ T5871] RBP: ffffc90004e9f9a8 R08: 0000000000000000 R09: 0000000000000000 [ 1286.015471][ T5871] R10: dffffc0000000000 R11: fffffbfff1ed4dd7 R12: ffffffff8bc11de0 [ 1286.015487][ T5871] R13: ffff888025577000 R14: 0000000000000000 R15: ffffffff8bbf5f40 [ 1286.015527][ T5871] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1286.015557][ T5871] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1286.015590][ T5871] ? rt_spin_unlock+0x160/0x200 [ 1286.015624][ T5871] ? drm_vblank_get+0x147/0x260 [ 1286.015652][ T5871] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1286.015680][ T5871] drm_fb_helper_damage_work+0x131/0x6f0 [ 1286.015723][ T5871] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1286.015752][ T5871] ? preempt_schedule_thunk+0x16/0x30 [ 1286.015783][ T5871] ? process_scheduled_works+0xa8d/0x18c0 [ 1286.015812][ T5871] ? process_scheduled_works+0xa8d/0x18c0 [ 1286.015844][ T5871] process_scheduled_works+0xb6e/0x18c0 [ 1286.015910][ T5871] ? __pfx_process_scheduled_works+0x10/0x10 [ 1286.015946][ T5871] ? assign_work+0x3d5/0x5e0 [ 1286.015982][ T5871] worker_thread+0xa53/0xfc0 [ 1286.016043][ T5871] kthread+0x388/0x470 [ 1286.016068][ T5871] ? __pfx_worker_thread+0x10/0x10 [ 1286.016103][ T5871] ? __pfx_kthread+0x10/0x10 [ 1286.016125][ T5871] ret_from_fork+0x51e/0xb90 [ 1286.016159][ T5871] ? __pfx_ret_from_fork+0x10/0x10 [ 1286.016186][ T5871] ? __switch_to+0xc7d/0x1450 [ 1286.016216][ T5871] ? __pfx_kthread+0x10/0x10 [ 1286.016241][ T5871] ret_from_fork_asm+0x1a/0x30 [ 1286.016295][ T5871] [ 1286.016459][ T5871] Kernel Offset: disabled